Clicking on the Salesforce AFX Connector 'Get OAuth 2.0 Access Token' button results in a redirect_uri_mismatch error in RSA Identity Governance & Lifecycle
2 years ago
Originally Published: 2016-10-11
Article Number
000044815
Applies To
RSA Product Set: Identity Governance & Lifecycle 
RSA Versions: All
Issue
After configuring a Salesforce AFX Connector in RSA Identity Governance & Lifecycle, clicking on the Get OAuth 2.0 Access Token button results in the error below in the user interface (AFX > Connectors > {connector-name} > Settings tab > Go OAuth 2.0 Access Token.)
 
error=redirect_uri_mismatch&error_description=redirect_uri%20must%20match%20configuration

 
User-added image
Cause
This error occurs if the RSA Identity Governance & Lifecycle server is not listed under the Callback URL for the Salesforce instance.
Resolution
Starting in RSA Identity Governance & Lifecycle 7.0.2 P03 and 7.1.0, the steps to resolve this error may be found in the Salesforce Application wizard.
  1. In the RSA Identity Governance & Lifecycle user interface, go to Resources > Applications > Create Application.
  2. Check the checkbox next to the Salesforce option and click on Next.
  3. Scroll down to the section entitled Enable OAuth Settings - Register your App.
  4. Follow the steps in that section and add the aveksa server URL in the Callback URL box.
User-added image
  1. Click Next if you are creating a Salesforce application, or click Cancel if you do not need to create another application.

NOTE: If you already have a Salesforce application resource in RSA Identity Governance & Lifecycle, then access the Salesforce application wizard as noted above in order to get the instructions for adding the callback URL. There is no need to create another application.