Troubleshooting

invalid_scope: the requested scope is rejected

A requested scope does not exist or is not allowed for this application. Without the openid scope, no ID token is issued.

invalid_scope: the requested scope is rejectedscope

Cause probable. A requested scope does not exist or is not allowed for this application. Without the openid scope, no ID token is issued.

What to do? Request only the scopes declared for the application, separated by spaces, and do not forget openid for a sign-in.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

All SAML and OpenID Connect errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.