Troubleshooting

Amazon Cognito: redirect_mismatch

The request's return address is not exactly one of the user pool app client's Allowed callback URLs. Cognito requires https, except for localhost.

Amazon Cognito: redirect_mismatchCognito

Cause probable. The request's return address is not exactly one of the user pool app client's “Allowed callback URLs”. Cognito requires https, except for localhost.

What to do? In the user pool, open App integration, then the app client, then the hosted sign-in page, and add the exact address under Allowed callback URLs.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

Google: “Error 400: redirect_uri_mismatch”
Okta: the user is not assigned to the application (access_denied)

All SAML and OpenID Connect errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.

Open my space Decode a SAML response