Error when add the Authorized redirect URI for Google SSO configuration

I get the following errors:

Invalid Redirect: must end with a public top-level domain (such as .com or .org).
Invalid Redirect: must use a domain that is a valid top private domain .

When i tried to set redirect URI in Google:
https://rpaorchestrator:1443/identity_/google-signin

what could be wrong?

  • Missing Top-Level Domain: The error message states that the redirect URI must end with a public top-level domain such as .com or .org. The URI you provided, https://rpaorchestrator:1443/identity_/google-signin, lacks a valid top-level domain. A correct example would be: https://rpaorchestrator:1443/identity_/google-signin.com or https://rpaorchestrator:1443/identity_/google-signin.org.

  • Invalid Private Domain: If the domain “rpaorchestrator” is intended to be a private domain (e.g., a local network), it won’t be accepted as a valid redirect URI. Google requires a public domain (e.g., a domain that is accessible over the internet) for security reasons. You need to use a public domain that you own or control for the redirect URI.

Hi @Jose_Manuel_Alvarez_Suare

The errors you are getting are because the redirect URI you are trying to use does not meet the requirements for a valid redirect URI. The redirect URI must:

  • End with a public top-level domain, such as .com or .org.
  • Use a domain that is a valid top private domain, such as .edu or .gov.
  • Not contain the port number.

The redirect URI you are trying to use, https://rpaorchestrator:1443/identity_/google-signin 1, does not meet these requirements. The port number is not allowed, and the domain rpaorchestrator is not a valid top-level domain.

Hope it helps!!

Hi @Jose_Manuel_Alvarez_Suare

The likely reasons for these errors are:

  1. Lack of Top-Level Domain: The Redirect URI you provided, https://rpaorchestrator:1443/identity_/google-signin, lacks a top-level domain like .com or .org. A top-level domain is a crucial part of a valid URL, and it typically comes after the last dot in the address (e.g., https://example.com).

  2. Invalid Domain Name: The domain name in the Redirect URI might be incorrect or not meeting the requirements of a valid top-level private domain. For example, using local domain names like .local or .lan may not be allowed as Redirect URIs.

To fix these errors, you should use a valid domain with a top-level domain such as .com, .org, .net, etc. Ensure that the domain you use is accessible publicly and is correctly configured in your system. If this is a local testing environment, you might need to set up a valid local domain name or use a tool like ngrok to create a temporary public domain for testing purposes.

A valid Redirect URI could look like:

https://example.com/google-signin

Make sure to replace example.com with your actual domain name.

Hope it helps!!

I have this on a server:

What should be the URL that I should set as Redirect URI?

Try giving the entire url of this site