# Invalid redirect using company login

**URL:** <https://devforum.zoom.us/t/invalid-redirect-using-company-login/5965>\
**Category:** API and Webhooks\
**Created:** [September 19, 2019, 8:26pm UTC](https://devforum.zoom.us/t/invalid-redirect-using-company-login/5965 "2019-09-19T20:26:48Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![steven.wadsworth](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/steven.wadsworth/32/1876_2.png) [@steven.wadsworth](https://devforum.zoom.us/u/steven.wadsworth)\
**Post date:** [September 19, 2019, 8:26pm UTC](https://devforum.zoom.us/t/invalid-redirect-using-company-login/5965/1 "2019-09-19T20:26:49Z")

</div>

**Description/Error**  
I am trying to use my company’s API Key and Secret using the OAuth tutorial and I’m getting an “Invalid redirect error”

**Which Endpoint/s?**  
Not sure.

**How To Reproduce (If applicable)**  
Steps to reproduce the behavior:

1. I followed this tutorial – [https://marketplace.zoom.us/docs/guides/authorization/oauth/quickstart](https://marketplace.zoom.us/docs/guides/authorization/oauth/quickstart)
2. When I edited the config.js file, I wasn’t sure what to put for the “redirectURL” parameter
3. I ran the “node.js index.js” command
4. I connected to [http://localhost:3000](http://localhost:3000)
5. I get prompted for my username and password, but I the selected “Sign in with SSO” instead (see screenshot).
6. I enter my company domain and click Continue
7. I sign in with my SSO username and password and I get the “Invalid redirect: websiteurl (4700)” error

**Screenshots (If applicable)**

 ![screenshot1](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/c/c53a308e6551fd31c8927c8487baed7e6bf8be2a.png)

**Additional context**  
Add any other context about the problem here.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [September 19, 2019, 10:43pm UTC](https://devforum.zoom.us/t/invalid-redirect-using-company-login/5965/2 "2019-09-19T22:43:45Z")

</div>

Hey @steven.wadsworth, thanks for posting and using Zoom!

The Redirect URL is the url to take the user after they authorize your app. In most cases you will take your user to a /authorize path and [grab the `code` in the query params and use that to request an `access_token`.](https://marketplace.zoom.us/docs/guides/authorization/oauth/oauth-with-zoom#request-access-token)

 ![49%20PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/f/f3f89b621b428ae67add657f3654eaa39a25bced.png)

Also see this thread for using a localhost redirect url:

> [@Zoom Application Wrong redirect](https://devforum.zoom.us/t/zoom-application-wrong-redirect/4402/5):
>
> Hey @subhan, This issue only happens with localhost urls. To solve this you could use [https://ngrok.com/](https://ngrok.com/) to turn your localhost server into a free server with a url, and replace the localhost redirect url with the ngrok url. Instead of [http://localhost:8080/api/v1/zoom/complete-oauth](http://localhost:8080/api/v1/zoom/complete-oauth) it would be [https://d4c4477b.ngrok.io/api/v1/zoom/complete-oauth](https://d4c4477b.ngrok.io/api/v1/zoom/complete-oauth) This way you can still develop and test locally and have your redirect url work! Let me know if this helps!

Thanks,  
Tommy

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![steven.wadsworth](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/steven.wadsworth/32/1876_2.png) [@steven.wadsworth](https://devforum.zoom.us/u/steven.wadsworth)\
**Post date:** [September 23, 2019, 5:35pm UTC](https://devforum.zoom.us/t/invalid-redirect-using-company-login/5965/3 "2019-09-23T17:35:57Z")

</div>

OK, great. My company gave me the API Key and Secret, but I’m trying to test that in Postman and not by creating an app in the Marketplace. Creating the app in the Marketplace pre-populates the API Key and Secret, but it seems I need their API Key and Secret to be able to access the API. We do not have JWT and I’ve been trying it with OAuth.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [September 23, 2019, 7:32pm UTC](https://devforum.zoom.us/t/invalid-redirect-using-company-login/5965/4 "2019-09-23T19:32:47Z")

</div>

Hey @steven.wadsworth,

> [@steven.wadsworth](#):
>
> I’m trying to test that in Postman and not by creating an app in the Marketplace.

What do you mean by this? In order to call the Zoom API’s you have to create an [App here](https://marketplace.zoom.us/), so you can get API credentials.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![steven.wadsworth](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/steven.wadsworth/32/1876_2.png) [@steven.wadsworth](https://devforum.zoom.us/u/steven.wadsworth)\
**Post date:** [September 23, 2019, 8:13pm UTC](https://devforum.zoom.us/t/invalid-redirect-using-company-login/5965/5 "2019-09-23T20:13:06Z")

</div>

Yes, and I’ve tried that. And I get this error . . . “An account admin is required to install this type of app. Please contact your account admin or IT administrator to install this app.” For both the Account-level and User-managed apps.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [September 23, 2019, 8:55pm UTC](https://devforum.zoom.us/t/invalid-redirect-using-company-login/5965/6 "2019-09-23T20:55:12Z")

</div>

Thanks @steven.wadsworth, I am guessing you don’t have the development permissions.

Can you have your Zoom Account Admin give you a role ([https://zoom.us/role](https://zoom.us/role)) with the the Developer, Marketplace, and Integrations permissions?

 ![05%20PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/b/b4b744516b31eb93ddd4320434cb7380d5ed7638.png)

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 6:42pm UTC](https://devforum.zoom.us/t/invalid-redirect-using-company-login/5965/7 "2020-08-21T18:42:52Z")

</div>

Closed on August 21, 2020, 6:42pm UTC


