# Invalid client\_id for SSO

**URL:** <https://devforum.zoom.us/t/invalid-client-id-for-sso/62186>\
**Category:** API and Webhooks\
**Created:** [January 4, 2022, 5:24pm UTC](https://devforum.zoom.us/t/invalid-client-id-for-sso/62186 "2022-01-04T17:24:26Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![oliver](https://avatars.discourse-cdn.com/v4/letter/o/85f322/32.png) [@oliver](https://devforum.zoom.us/u/oliver)\
**Post date:** [January 4, 2022, 5:24pm UTC](https://devforum.zoom.us/t/invalid-client-id-for-sso/62186/1 "2022-01-04T17:24:26Z")

</div>

## Using this template helps us debug your issues more effectively 🙂

**Description**  
We have a Zoom app with ID [REDACTED] and when our users try and login with SSO, they see a message saying “Invalid client ID”. However, users with an email/password are able to login normally. Are there different criteria or different endpoints for SSO users?

**Error**  
4702: Invalid client ID

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
OAuth

**Which Endpoint/s?**  
Any

**How To Reproduce (If applicable)**  
Steps to reproduce the behaviour:

1. Attempt to authenticate with OAuth as an SSO user

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [January 5, 2022, 5:30pm UTC](https://devforum.zoom.us/t/invalid-client-id-for-sso/62186/2 "2022-01-05T17:30:11Z")

</div>

Hi @oliver ,

Do all users have the app installed on their accounts? Was this something that recently started occurring?

Gianni

---

<div class="post-metadata">

**Author:** ![oliver](https://avatars.discourse-cdn.com/v4/letter/o/85f322/32.png) [@oliver](https://devforum.zoom.us/u/oliver)\
**Post date:** [January 6, 2022, 9:23am UTC](https://devforum.zoom.us/t/invalid-client-id-for-sso/62186/3 "2022-01-06T09:23:43Z")

</div>

Hi @gianni.zoom. I believe this is the first time an external company has tried to use our app with SSO.

The normal process is that they start the OAuth session and login with an email and password to Zoom, then tap the Install/Authorise button to add our app (CatchApp Bookings) to their account, and this all works fine.

---

<div class="post-metadata">

**Author:** ![oliver](https://avatars.discourse-cdn.com/v4/letter/o/85f322/32.png) [@oliver](https://devforum.zoom.us/u/oliver)\
**Post date:** [January 11, 2022, 5:27pm UTC](https://devforum.zoom.us/t/invalid-client-id-for-sso/62186/4 "2022-01-11T17:27:39Z")

</div>

@gianni.zoom We still haven’t been able to progress with this. Is there any way to test our app with the SSO process without having a corporate Zoom account ourselves?

The current process is:

1. Call [https://zoom.us/oauth/authorize](https://zoom.us/oauth/authorize) with our client\_id, redirect\_url, response\_type=code and some state
2. After authentication, we would then normally store the access token, refresh token, etc.

However, with SSO, our users can’t get past step 1. When they visit that link, they are redirected to [https://zoom.us/oauth/signin](https://zoom.us/oauth/signin) and see the following error:

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/c/8/c89d28acfac52f8ae2ded0baf8264ac290cce96d.png)

---

<div class="post-metadata">

**Author:** ![oliver](https://avatars.discourse-cdn.com/v4/letter/o/85f322/32.png) [@oliver](https://devforum.zoom.us/u/oliver)\
**Post date:** [January 13, 2022, 6:56pm UTC](https://devforum.zoom.us/t/invalid-client-id-for-sso/62186/5 "2022-01-13T18:56:18Z")

</div>

Is PKCE required for SSO? [https://marketplace.zoom.us/docs/guides/auth/oauth](https://marketplace.zoom.us/docs/guides/auth/oauth) It says “optional”, but just wondering if this is why it’s not working.

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [January 13, 2022, 8:48pm UTC](https://devforum.zoom.us/t/invalid-client-id-for-sso/62186/6 "2022-01-13T20:48:26Z")

</div>

Thank you for your patience! I missed your response a few days ago.

@oliver so to clarify, SSO users are able to successfully install the app, but receive “invalid client id”?

Or rather is it that when SSO users try to install the app, they receive the invalid client id status message?

They should be able to install the app as SSO users:

> [@Installing marketplace app on shared SSO Zoom account](https://devforum.zoom.us/t/installing-marketplace-app-on-shared-sso-zoom-account/40446/2):
>
> Hey @comptonmc , It is possible for an SSO login user to install a Marketplace App. Just provide them with the install URL, and if they are not already signed in, have them sign in via SSO. slight_smile Let me know if that helps! Thanks, Tommy

Either way this seems like a bug and can you please send the full error, the URL, userIds for a few customers experiencing this, and production clientId to [developersupport@zoom.us](mailto:developersupport@zoom.us) please?

We’ll take a further look at what is happening!

---

<div class="post-metadata">

**Author:** ![oliver](https://avatars.discourse-cdn.com/v4/letter/o/85f322/32.png) [@oliver](https://devforum.zoom.us/u/oliver)\
**Post date:** [January 14, 2022, 2:10pm UTC](https://devforum.zoom.us/t/invalid-client-id-for-sso/62186/7 "2022-01-14T14:10:41Z")

</div>

Hi. Thanks for the response. No, this user doesn’t seem to be able to install the app. When we redirect them to the install URL, they see the error message in the screenshot in the post above (“Invalid client\_id…”).

I’ll also send the details over to that email, thanks.

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [January 24, 2022, 10:53pm UTC](https://devforum.zoom.us/t/invalid-client-id-for-sso/62186/8 "2022-01-24T22:53:15Z")

</div>

Thanks for submitting a ticket @oliver! We’ll follow up with you there.

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [January 24, 2022, 10:53pm UTC](https://devforum.zoom.us/t/invalid-client-id-for-sso/62186/9 "2022-01-24T22:53:18Z")

</div>

Closed on January 24, 2022, 10:53pm UTC


