Redirect_uri issue when authenticating user with live account.

Hello,
i am working with a MVC application which is using OAuthWebSecurity to authenticate the user through live account, i am able to get access code and see the login page, but while getting access token i get the exception "The provided value for the 'redirect_uri'
is not valid. The value must exactly match the redirect URI used to obtain the authorization code", i have checked couple of times the redirect_uri, it is same at the time of login request and at the time of getting access token, i dont get this exception
for the first login, i get after the first login, following is the code where i get the exception.
   Exception asyncEx = null;
            LiveLoginResult liveAuthResult = null;
            LiveAuthClient client = new LiveAuthClient(ClientId, ClientSecret, "");
           //below i'm retrieving the url i have passed at request login. 
            string redirectUrl = (string)context.Items["DefaultRedirectUrl"];
           //i get the exception from out param asyncEx
            liveAuthResult = AsyncToSyncUtility.RunSync(() =>
                return client.ExchangeAuthCodeAsync(context);
            }, out asyncEx);
i don't know whether the problem is with the code or from live provider, can any one help me to resolve this redirect_uri issue..?

Are you using the LiveSDK?  You may want to see if the access token request is formed correctly using the following format.
POST https://login.live.com/oauth20_token.srf
Content-type: application/x-www-form-urlencoded
client_id=CLIENT_ID&redirect_uri=REDIRECT_URI&client_secret=CLIENT_SECRET&code=AUTHORIZATION_CODE&grant_type=authorization_code
It's difficult to tell how your code is actually building the request to send to the OAuth server.

Similar Messages

  • When i login with microsoft account cannot access with administrative share c$

    i have a problem when i login to windows with microsoft account cannot access any network computer with administrative sharing c$,d$ with windows 8.1 
    but when i login with local account can access
    and some people tell  me create key in regedit t fix it 
    after enter user name and password show this error 
    and i apply your instruction  and not fix until now
    note:
     my Machine windows 8.1 if another machine in network windows 7 can access a hidden share if machine in network windows 8.1 show this message in image 2 
    but if i login with local user can i access all machine hidden share network windows 7 and 8.1

    yes this computer i want to access  name poland2-work and have two users 
    first :administrator
    second : poland 2

  • Hello,when i login with the account of my wife it does not unable her music files.could you help me please?

    I have an imac osx 10.9.5 and 3,4GHz intel core i7
    When i login with the account of my wife in itunes, it does not show me the music files from her library,but only the music files from mine.
    What do i have to do?

    i mean log into iTunes Store,but i have solve this issue by myself.
    Thank you for your support.

  • Rd web showing all remoteapps when logging in with an account of a trusted domain

    we have a dmz with a separate domain. there is a one way trust to our local domain
    In the dmz domain there is a rdweb and rd gateway. When logging in with an account from the dmz domain in the rdweb it's all fine but when logging in with an account from the trusted domain all remoteapp's are shown
    all servers are 2012r2

    Hi sir,
    Please make sure your account has already added into your Pay-As-You-Go subscription as co-administrator role . If the account was not in your subscription please add it and try to login on from your VS again.
    If you always occurred this issue, you can try to download the publish file and import it into you VS, please follow this steps:
    http://azure.microsoft.com/en-us/documentation/articles/mobile-services-windows-how-to-import-publishsettings/
    Regards,
    Will 
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Need MBAM 2.5 Helpdesk and selfservice sites to open for authenticated users with no password prompt

    I Need MBAM 2.5 Helpdesk and self service sites to open for authenticated users with no password prompt. I just cant seem to get this to work. The account used in the application pool has its SPN registered and delegation set. I can use that account to login
    to the sites but am prompted for a password. That said anyone I add into the helpdesk users group cannot negotiate the sites. Only the account I have set in the application pool can. I want domain authenticated users that have been added to the MBAM Help Desk
    Users group to negotiate the site with NO password challenge at all.
    tconners

    This generally means that your SPN is not set up correctly.  Let's say the web server you installed the SSP on is lance.contoso.com and your app pool creds are corp\lance.  You should set an SPN similar to setspn -s http/lance.contoso.com
    corp\lance.  In your browser, you should now be able to access the SSP without prompts.  However, if you still get prompted, generally that means that your local intranet zone in IE does not have an entry for *.contoso.com.  Since you are entering
    an FQDN in your browser, IE interprets the "." to mean "on the internet" which breaks Kerberos authentication.  By adding *.contoso.com to your local intranet zone, you are telling it that lance.contoso.com is on the intranet, so use
    Kerberos.
    I can confirm, that I have exact configuration and I always get the password promt for the very first time. We have 2 server (1xIIS and 1xSQL) infrastructure in production with SPN set like it should and I get the password prompt.

  • Issue when creating a new email account on Adobe BC

    Hi,
    I got a big issue when I tried to create a new email account for my site, which is a very email account to me, and I had been using that email address for over 10 years.
    Here is the issue, When I created this email account, Adobe BC keep telling me that account has been created (please see the screen shots below), but I did not see this email account on the BC's backend email account list at all. I tried to create that email for over dozen times, it just won't work!
    Please anyone who can help me on this, or anyone from Adobe BC tech support team, please contact with me. Becasue I having hard time finding your tech support telephone numeber.
    Thank You.

    Hello designonly.
    You are saying that you have been using that email address for over 10 years. So you are trying to make an address which already somewhere exists?
    That brings me to another thing - is the DNS setup made well? In order to make email address work, you should edit the A-Name & NS. Sometime even more settings (depend on domain registrar).
    designonly, is this your first email setup?

  • Can't Login to SharePoint as an invited External User / Can't Remove All Traces of External User with Microsoft Account

    Hi TechNet,
    I have an MS SharePoint Online (SharePoint Plan 2) team site, quite simple, one document library etc.
    I have successfully added all users (E3) within the organisation to groups, and permissioned correctly.
    I have added myself (separate organisation, also Office 365 E3) as an External User, and have access to the website without any problems by authenticating with my Organization account e-mail address.
    I have a single user (separate organisation, also Office 365 E3), who's setup is identical to mine (Also Office 365 E3).
    However, when this user is added as an External User, they are unable to login, and get "Sign In is not complete":
    That didn't work
    We're sorry, but [email protected] can't be found in the CLIENT1.sharepoint.com directory. Please try again later, while we try to automatically fix this for you. 
    Correlation ID: dc1f7f9c-092b-20b8-7b35-89348ba22f71
    Date and Time: 3/20/2014 7:06:55 AM
    URL: https://CLIENT1.sharepoint.com/
    User: [email protected]
    Issue Type: Partner User Invalid.    
    I then remove the user using the Site Collection, and using the PRofile Manager, and using Remove-SPOUser, and using Remove-SPOExternalUser. Which is great, he's gone. However when I go to add him back to a group, as soon as I type his e-mail address, it
    'Resolves' into his full name! If I have completely(?) removed him form the site, how is he being resolved? And therefore me trying to remove him to re-add him to try and solve the user/directory/auth issue is not working.
    Furthermore, upon clicking on said client's username inside SharePoint (after I've 'added him back' of course), his ID, in format: i:0#.f|membership|live.com#[email protected] has an entirely different e-mail address, his Microsoft Account! 
    I'm assuming he must have been already signed into his Microsoft Account when he clicked on the External User e-mail invite? If so, I clearly do not want this, how can I remove lal traces of his Microsoft Account, given that I have gone to the lengths as
    detailed above?
    I have already completed these steps: http://community.office365.com/en-us/forums/148/p/228263/709905.aspx
    Some possible further reading regarding Microsoft ID's and Organization ID's:
    http://sergeluca.wordpress.com/2013/09/23/sharepoint-online-and-external-users-this-invitation-has-already-been-accepted-with-another-account-bug-or-feature/
    Please let me know if you need any more information regarding this issue, and thanks in advance to anyone who can shed some light on this situation for me and anyone whom encounters it in the future.
    Regards,
    Evanly.

    Hi Scott,
    Thank you so much for taking the time to read and respond to my issue.
    Certainly, it makes sense that regardless of where the invitation it sent, the user would authenticate with their Microsoft ID.
    In my case, I want the user to authenticate using their Microsoft Organisation ID, that they use for their seperate Office 365 account.
    This is the way I was able to log in, and worked great. With my client, they are unable to access Sharepoint because once they sign in with their Microsoft Organisation / Office 365 ID, they are told they are not in the directory, because their Microsoft
    ID is in the directory and it doesn't match up.
    I am simultaneously trying to 1) Remove all traces of this users Microsoft ID, which so far using the above steps, has been unsuccessful; and 2) Invite the user using his Microsoft Organisation ID, and have him authenticate with that (which is proved to
    work, as my account uses this).
    Looking forward to any more suggestions. Thanks in advance!

  • Server 10.8 Network Account Users with iCloud Accounts

    Hello,
    I have a server running OS 10.8.2 and a few client Macs all running 10.8.2
    Two people in the office login to network accounts stored on the server. When these users enter their personal iCloud credentials to use the various services (Contacts, Calendar, Mail, etc.) they run into issues...
    Each time the Contacts app is launched it reloads all information from iCloud – this takes a few minutes; launching the Mail app is extremely slow as well – it does not recognize the iCloud contacts and will not save custom signatures when entered into the Mail preferences; the Calendar app acts sporadically as well based on the fact that the Contacts are sporadic – birthdays are duplicated and the notification center notifies the user of the same birthday over and over again.
    I'm not sure what's going on... Is the use of iCloud supported by network hosted home folders??
    I'm appreciative of all your help!
    Thanks so much,
    Max

    An update: I deleted the users via the Server app, then deleted the corresponding home directoires via the Finder on the server.
    I then recreated the users in the Server app and all seems to work fine. Also, on another note I realized that when a network user logs into a computer for the first time, Spotlight indexes the entire computer. We have a couple Mac Pros in here with over 8 TB of data and this indexing slows things down for the network user.
    One issue remains and it may be a bug: the Mail app will not save signatures and rules that network users create. Once the user logs out those settings are lost. This is a bummer...
    Anyone else experiencing this? Anyone know a fix?
    Thanks,
    Max

  • Can you have two different users with itune accounts on the same computer?

    Can you have two different users with separate itune accounts on the same Ipad?

    Yes, create another user profile on the computer and each user can log into their own profile that way.

  • DSM Terminator issue -  when exiting, user sees "about blank" screen

    This issue is being experienced by two of our Portal users. When the user exits the portal, they get an "about blank" internet explorer page that is minimized in the Windows taskbar. When viewing the "about blank" page properties, there is no information about the page. It allows you to maximize it into a blank white screen or close it out.  Also, before this page is loaded, when exiting the Portal a quick screen flashes before the Portal screen closes. The screen basically says
    ****Closing sessions... Transmission protocol, DSM Terminator v.6.060 (sync)  (long portal address)   Request PREPARED for sending via client  (Finished 1 request(s) distributed***** 
    Both users experience this issue everytime they exit their Portals. We have tried numerous troubleshooting measures to fix the problem and we've isolated it to their specific computers, not their usernames.  We have had this before and reformatting does fix the issue, but we want to know how to avoid reformatting and just fix the one issue.  We've scanning the computer for spyware/viruses, checked their startup configuration, cleaned temp/temp internet/cookies, tried different user names.  Thanks for your help on this!

    First off the DSM terminator window is completely normal.  This is client side javascript that closes the connection to R3.  This can be run server side if you need it to but doesn't work if the connection is done over SSL. 
    As far as the popup window, I would try and restore the defaul IE settings.

  • Issue when Run Report with  Hier selection   in the Portal

    Hi  Portal  BI Experts,
    we are finding a strange issue  when Running the Report.
    the following  Variables are in the  Report  Selection screen :
    Company code [optiona]
    Prod.Variance Type [ mandatory]
    Hierarchy Node Variable [optional]
    TheQuery  which I am Running  thro Bex Analyzer  with  the Hier  selection as below , is working  fine. But
    When I  run   thro portal with Hier selection value   with    00/50/G310/702258(0CUST_SALES
    It automatically  display as +00/50/G310/702258(0CUST_SALES    with + symbol. and  thro the error:
    Input "\+00/50/G310/702258(0CUST_SALES);\+00/51/G410/703096(0CUST_SALES)" for Ship-To Party (Sales has invalid format
    If I remove the plus symbol  report runnig fine.
    Your  immediate help highly appreciated.
    Thanks
    Hema
    Edited by: hemav on Mar 21, 2011 2:29 PM

    Hi Jaya,
    This is the Error message  I am facing when I Execute ithe query  report n the Web[Portal]
    Input "\+00/50/G310/702258(0CUST_SALES);\+00/51/G410/703096(0CUST_SALES)" for Ship-To Party (Sales has invalid format
    ie. In the variable screen the selected hier value  automaticvally display with plus symbol
    Actual   Hier  value :   00/50/G310/702258(0CUST_SALES)
    Once close the Hier  selection list window , the Hier value  turned to  +00/50/G310/702258(0CUST_SALES)
    If I give ok with this Plus symbol  it throwing the above error.  By  removing the Plus symbol manually  it is working fine.
    I unable locate the  settings.
    that too when I run the same report  in Bex Analyzer  woking fine , no issues in the Hier  value.
    Thanks ,
    Hema

  • 3 users with 3 accounts on 1 MacBook--

    Hi,
    We're a family of 3 users with our own Apple accounts. We all use one MacBook Pro. Can we share videos & music that one of us might have purchased from the iTunes store so that we don't have to use one anothers's accounts?
    Thanks!

    iTunes: How to share music between different accounts on a single computer

  • RWCLIENT issue when passing parameters with spaces

    AS 10.2.0.2 on Sun Solaris 10. We have reports that are scheduled and sum of the parameters have spaces in the value. For example parm1=I am with spaces. We would then generate a command line that shows the parameter like rwclient.sh server=rep_serv report=report1 parm1=I am with spaces. This errors with numerous messages. I tried surrounding the value in single quotes like this rwclient.sh server=rep_serv report=report1 parm1='I am with spaces'. When running the quoted command the report server shows the parameter as parm1='I' am with spaces. We have the parameter page of the report as the first page which allows us to see what was actually used as parameters. Of course the data in the database has no value that matches with the single quotes so no data. I need to be able to pass a value with spaces and it actually show as a parameter with spaces. We do not have this issue when we can run with forms built-ins as you actually build a parameter list to pass. Thanks in advance.
    Edited by: gdaustin1 on Jan 26, 2012 8:03 AM

    It's a bit of both I guess. On a command line a space is used to separate switches and variables. Like this demo.bat:
    @echo off
    echo %1Results in:
    C:\Temp>demo.bat Hello World
    Hello
    C:\Temp>demo.bat "Hello World"
    "Hello World"If you want to remove the double quotes, you have to change your source code to:
    @echo off
    echo %~1Now you get:
    C:\Temp>demo.bat "Hello World"
    Hello World

  • How can I create a portal server authentication user with a batch

    hi,
    I am trying to import users into the portal server emulating the create user procedure as plumtree. What I cannot understand at the moment is which classes are involved in the sequence of creating a user.
    the problem starts from the fact that I have used a synch WS and it works but, being the table a dummy one and the users to be authenticated by the portal server, I couldn't use that synch as a definitive.
    I tryed using plumtree.server.CIPTUser class with no success. could not understand how to actually create the user after setting the parameters to the object.
    Is there any documentation explaining how to create the portal server emulation of create user. this could be usefull for all those cases when there is no central repository of user and passwords.
    thanks
    Mario

    This should get you started.
    IPTUser=IPTSession.GetUsers.Create(iAdminFolderID)
    IPTServerContext=IPTUser.GetInterFaces("IPTServerContext")
    IPTServercontext.Store
    This is a high level implementation. It should get you very close.
    thanks,
    Craig

  • WebAuth issue, de-authenticating users randomly!

    Hello,
    I just received word of a major issue that only a few of the clientele have been reporting.
    Basically what is happening is that a user will be browsing/chatting on the internet under one of our webauth SSIDs when suddenly out of nowhere they will be unable to browse anymore and have to reauthenticate by closing down all internet browser windows and reopening the browser. Originally I had thought this was just an idle timeout issue, it was never mentioned that the users were active when it happened until now.
    Can anyone help me with this? I'm really perplexed as to why this is happening. Anyone have pointers on what I can look for (ie, AP placement issues perhaps?) that can help troubleshoot the problem?
    I am running dual 4404's currently, the idle timeout is set to 60 minutes on each. The version on both machines is 3.2.116.21.
    Thanks much for any input on this.

         you should try connecting to the guest WLAN, and once you are connected open a broswer and go to http://74.125.19.104  if this works, then you need to check that UDP 53 , DNS queries, are allowed from the guest vlan

Maybe you are looking for