Troubleshooting

Keycloak: Invalid parameter: redirect_uri

The requested return address matches none of the Keycloak client's Valid redirect URIs. The wildcard is only accepted at the end of the address.

Keycloak: “Invalid parameter: redirect_uri”Keycloak

Cause probable. The requested return address matches none of the Keycloak client's “Valid redirect URIs”. The wildcard is only accepted at the end of the address.

What to do? In Clients, open the client, then Valid redirect URIs, and add the exact address (or a prefix ending in /*). Also check Web origins for a browser.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

Keycloak: “Invalid client credentials” or “Client not found”
AD FS: MSIS7042, the same session made too many sign-in requests

All SAML and OpenID Connect errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.

Open my space Decode a SAML response