Troubleshooting

invalid_client: the application is not authenticated

The secret is wrong or expired, the client_id is unknown, or the authentication method is not the expected one (secret in the Authorization header or in the form body).

invalid_client: the application is not authenticatedinvalid_client

Cause probable. The secret is wrong or expired, the client_id is unknown, or the authentication method is not the expected one (secret in the Authorization header or in the form body).

What to do? Check the client_id and generate a new secret if needed. Use the authentication method registered at the provider: client_secret_basic or client_secret_post.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

All SAML and OpenID Connect errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.

Open my spaceDecode a SAML response