Invalid redirect 4,700 on 3rd party app

We are working with a third party vendor (SumTotal) to use their Zoom application. We set up a staging environment application some months ago, and it is working fine.

We are now setting up the production application. As much as possible, we mirrored the settings for the staging application (but with production URL). But since the staging application is Legacy and the production application is using the new app settings, some of the settings cannot be matched (and SumTotal doesn’t know what to do with them).

This application is for internal use only - it is not for publishing on the Zoom Marketplace. Accordingly, we have the production application set to “Development.” (The staging app, which is working fine, was set with “Intend to publish” set to “No.” That does not seem to be an option with the new app creation interface.)

The URL given to us by SumTotal is saved in both the OAuth Redirect URL and the OAuth Allow Lists fields. It is saved both under “Development” and “Production.” The settings for both “Use Strict Mode for Redirect URLs” and “Subdomain Check” are both disabled, even though “Subdomain check” is enabled and working on the staging environment.

When attempting to Add the app, we always get the error message “Invalid redirect: [url] (4,700)”. This includes when I use the “Add for Others” button directly from the app management page.