invalid_request when Attempting SSO into Veza

Overview

When attempting to set SSO in Veza you get the following error:

invalid_request "the client with id: "<<value>>" (cookie-prod) was not found

Applies To

• SSO
• Administration

Cause

This error can be seen when the Single Sign On URL is misconfigured in your Identity Provider.

Resolution

1. Download and inspect the contents of your metadata XML that is provided in Veza under Administration -> Sign-In Settings -> "download your SP Metadata".
2. Open the XML file and locate the line that starts with AssertionConsumerService 
3. The URL to use in your IDP settings is contained within the location which should look something like the following:
   https://<<tenant_name>>.cookiecloud.ai/login/callback?connection=saml-<<tenant_name>>-cookie-connection