|
| 1 | +--- |
| 2 | +page_id: 46149cb3-fa96-46a2-bd94-0ba4aacae527 |
| 3 | +title: Common error codes |
| 4 | +sidebar: |
| 5 | + order: 5 |
| 6 | +relatedArticles: |
| 7 | + - 9b9ce8a8-dffb-47e5-82a9-e612b1947963 |
| 8 | +--- |
| 9 | + |
| 10 | +Depending on the complexity of your authentication setup, you or your users may occasionally encounter errors. |
| 11 | + |
| 12 | +Here are some common error codes and troubleshooting steps. |
| 13 | + |
| 14 | +## Error code 578 |
| 15 | + |
| 16 | +Description |
| 17 | +- Error coming back to Kinde while validating SAML response |
| 18 | + |
| 19 | +Troubleshooting |
| 20 | +- Check that the Assertion Consumer Service (ACS) URL is correct on the identity provider |
| 21 | + |
| 22 | +## Error code 780 |
| 23 | + |
| 24 | +Description |
| 25 | +- The OAuth 2.0 response failed |
| 26 | +- The token is valid, but the redirect is null |
| 27 | + |
| 28 | +## Error code 928 |
| 29 | + |
| 30 | +Description |
| 31 | +- Error getting or reading the connected app configuration |
| 32 | + |
| 33 | +## Error code 1004 |
| 34 | + |
| 35 | +Description |
| 36 | +- Error getting custom SAML config while initializing SAML redirect |
| 37 | + |
| 38 | +## Error code 1656 |
| 39 | + |
| 40 | +Description |
| 41 | +- Error with authorization response |
| 42 | +- The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed |
| 43 | + |
| 44 | +Troubleshooting |
| 45 | +- Missing nonce on implicit flow |
| 46 | +- Redirect URI might not be with an https |
| 47 | +- Only a localhost suffix can be used with http |
| 48 | +- Error with workflow |
| 49 | + |
| 50 | +## Error code 1829 |
| 51 | + |
| 52 | +Description |
| 53 | +- Error exchanging token on connected app callback |
| 54 | + |
| 55 | +Troubleshooting |
| 56 | +- Check the redirect URLs for a mismatch |
| 57 | +- Check the client credentials |
| 58 | + |
| 59 | +## Error code 1959 |
| 60 | + |
| 61 | +Description |
| 62 | +- Error decoding SAML response |
| 63 | +- Response contains invalid characters for Base64 response |
| 64 | + |
| 65 | +## Error code 3005 |
| 66 | + |
| 67 | +Description |
| 68 | +- Cannot handle SAML callback |
| 69 | +- The userProfile contains invalid values |
| 70 | + |
| 71 | +## Error code 3420 |
| 72 | + |
| 73 | +Description |
| 74 | +- OAuth 2.0 response failed because token is invalid and redirect ID is null |
| 75 | + |
| 76 | +## Error code 4179 |
| 77 | + |
| 78 | +Description |
| 79 | +- Handle Social OAuth 2.0 callback - error exchanging token |
| 80 | +- Expired secrets for social provider |
| 81 | + |
| 82 | +Troubleshooting |
| 83 | +- Check the secret being used with your social provider and ensure that it hasn't expired |
| 84 | + |
| 85 | +## Error code 4617 |
| 86 | + |
| 87 | +Description |
| 88 | +- Error reading config on OAuth 2.0 callback |
| 89 | + |
| 90 | +Troubleshooting |
| 91 | +- Check that the client credentials in both Kinde and IDP are correct |
| 92 | +- Check that the redirect and callback URLs in both Kinde and IDP are correct |
| 93 | + |
| 94 | +## Error code 5716 |
| 95 | + |
| 96 | +Description |
| 97 | +- OAuth 2.0 response failed due to an invalid token |
| 98 | +- Redirection was successful |
| 99 | + |
| 100 | +## Error code 6722 |
| 101 | + |
| 102 | +Description |
| 103 | +- Error configuring SAML provider |
| 104 | + |
| 105 | +Troubleshooting |
| 106 | +- Check that the settings in the Kinde enterprise connection are correct |
| 107 | +- Check enterprise connection metadata URL, entity ID, certificate |
| 108 | + |
| 109 | +## Error code 7558 |
| 110 | + |
| 111 | +Description |
| 112 | +- SAML callback tokenInfo returned invalid data |
| 113 | + |
| 114 | +## Error code 8030 |
| 115 | + |
| 116 | +Description |
| 117 | +- Error configuring SAML provider on redirect |
| 118 | + |
| 119 | +Troubleshooting |
| 120 | +- Check the enterprise connection metadata URL |
| 121 | +- Check that the IDP has the correct ACS URL |
| 122 | + |
| 123 | +## Error code 8809 |
| 124 | + |
| 125 | +Description: |
| 126 | +- Received browser trust token is different from the one stored in the login session |
| 127 | + |
| 128 | +Troubleshooting |
| 129 | +- Start the auth flow again from the sign in or log in button |
| 130 | +- The user is trying to start a session in a new tab, browser, or device when there's already a partially completed session in progress |
| 131 | +- The user may have bookmarked the auth page when it's partially completed, instead of bookmarking the initial sign in or log in page |
| 132 | + |
| 133 | +## Error code 9055 |
| 134 | + |
| 135 | +Description |
| 136 | +- Error getting custom SAML provider configuration |
| 137 | +- RelayState is invalid or doesn't exist |
| 138 | + |
| 139 | +Troubleshooting |
| 140 | +- Check the SAML callback URL |
| 141 | +- Check the entity ID |
| 142 | +- Check that the SAML IDP is returning a valid RelayState |
| 143 | + |
| 144 | +## Error code 9364 |
| 145 | + |
| 146 | +Description |
| 147 | +- Error getting authentication request while initializing SAML redirect |
| 148 | + |
| 149 | +Troubleshooting |
| 150 | +- Check the enterprise connection private key, certificate, and signature method |
| 151 | + |
| 152 | +## Error code 9697 |
| 153 | + |
| 154 | +Description |
| 155 | +- Disposable email detected while authenticating a user on sign up in a workflow |
| 156 | + |
| 157 | +## Error code 9881 |
| 158 | + |
| 159 | +Description |
| 160 | +- Error storing tokens with connected app |
| 161 | + |
| 162 | +Troubleshooting |
| 163 | +- Check the refresh token is valid |
0 commit comments