AWS Cognito

If you're setting up Single Sign-On (SSO) with AWS Cognito, you might come across some error codes. We've compiled a list of these error codes and their corresponding solutions to help you troubleshoot any issues that may come up during the process. So, refer to this table to fix any problems you may face while setting up SSO with AWS Cognito.

Error Description
invalid_request To fix this issue, please configure the correct Authorization endpoint in the plugin. You can confirm the correct format of the endpoint from here.
invalid_scope Please make sure if you have entered correct Scopes in the plugin. You verify steps from this setup guide.
redirect_mismatch To fix this issue, please configure the correct Redirect url in the Cognito Developer application from the plugin . You can refer to the steps in the setup guide here.
invalid_client To fix this issue, please configure the correct Client Secret in the plugin. You can refer to this steps to configure correct Client Secret from the setup guide.
Invalid response recieved To fix this issue, please configure the correct Token and User info endpoint in the plugin. You can confirm the correct format of the endpoint from here.
unauthorized_client To fix this issue, please check that the Authorization Code grant type is configured in the Cognito Developer application. You can configure the correct grant type with the help of steps in this setup guide.

Frequently Asked Questions

Error Description
I want to disable the signup now option on the cognito page at the time of SSO? Please follow these steps to disable the signup now option on the cognito page at the time of SSO.
Getting Error: an authentication flow is not enabled while configuring Cognito as an OAuth provider This error has probably occurred because you might not have enabled the following checkboxes while configuring the App client in Cognito User Pool. To resolve it please follow these steps.
Facing invalid_grant issue while logging in via AWS Cognito You may encounter this issue if you do not select the “Generate a Client secret” radio button while creating the application in your AWS Pool. Please follow these steps to fix this issue.