Troubleshooting

redirect_uri_mismatch: the return address is rejected

The return address sent is not strictly identical to one of those registered for the application: trailing slash, http or https, port, capitals, or an extra parameter.

redirect_uri_mismatch: the return address is rejectedredirect_uri

Cause probable. The return address sent is not strictly identical to one of those registered for the application: trailing slash, http or https, port, capitals, or an extra parameter.

What to do? Compare, character by character, the address sent by the application with the one registered at the provider. Both must be identical, with no wildcard.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

invalid_client: the application is not authenticated
invalid_scope: the requested scope is rejected

All SAML and OpenID Connect errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.

Open my space Decode a SAML response