OAuth Signin page returning spurious errors for users with 2FA enabled

API and Webhooks
1

Description
When redirecting to https://zoom.us/oauth/signin from our app in order to sign in, a user that has 2FA enabled on their account receives an error: “Wrong user name or password. Try signing in again.”. If they instead go to https://zoom.us/signin, the username + password work correctly and they are then prompted for the 2FA code.

Error
“Wrong user name or password. Try signing in again.”

Which App Type (OAuth / Chatbot / JWT / Webhook)?
OAuth

Which Endpoint/s?
https://zoom.us/oauth/signin

How To Reproduce (If applicable)

  1. Setup 2FA on your user
  2. Open an incognito window and attempt to start the Zoom oauth flow through an app
  3. On https://zoom.us/oauth/signin, input the correct username and password
  4. See the spurious error.

Additional context
We started seeing this after enforcing 2FA on all of our test accounts.

2

Bump in case this got lost under the deluge.

3

bump, we’re still running in to this daily with our users.

4

Hey @ryan, don’t know how we missed this post for this amount of time - so sorry. I’m investigating, we seem to have other developers reporting this as well.

5

ZOOM-158091 for tracking

1 Like
6

Hey @ryan ,

Please see the work around here:

Thanks,
Tommy