OAuth 2.0 Troubleshooting
Common issues and solutions for OAuth 2.0 / OpenID Connect (OIDC) authentication during Nodinite v7 installation and operation. In OAuth2 mode, the installer CLI checks the identity provider values from the Portal Step 2: Auth before it changes anything, and reports problems as numbered pre-flight errors, such as Error 10.3 for client credentials and Error 10.4 for token claims. Problems after installation usually show up at sign-in or as 401 responses.
Find the Right Page
Validation Failures"] Code -->|"10.4: token claims"| Claims["fa:fa-file-lines Entra ID Token
Claims Validation"] Access -->|"Signed in, but access denied"| Model["fa:fa-key Claims, Policies, and Roles"] Access -->|"Web API or Log API returns 401"| Callers["fa:fa-plug Web API and Log API
client troubleshooting"] style Failures fill:#2678BD style Claims fill:#2678BD style Model fill:#3F827B style Callers fill:#3F827B
Blue nodes are the installation troubleshooting pages in this folder: Troubleshooting OAuth 2.0 Validation Failures and Entra ID Token Claims Validation. Teal nodes lead to the runtime pages: What is a Claim? with Policies, Call the Web API with OAuth 2.0 Client Credentials, and Protect the Log API with OAuth 2.0 and Entra ID.
Installation Validation Failures
If the CLI pre-flight check reports Error [10.3] or [10.4], start with Troubleshooting OAuth 2.0 Validation Failures. It covers:
- Error [10.3] – OAuth2 client credentials validation failed
- Error [10.4] – Token claims validation failed for InstallationClient
- Root cause analysis, quick-fix checklists, common mistakes, and debugging tips
Issues by Category
Authentication and Token Issues
- Troubleshooting OAuth 2.0 Validation Failures – installation pre-flight validation failures
- Entra ID Token Claims Validation – detailed walkthrough of the Error [10.4] root causes
Configuration Issues
- OpenID Field Mapping Quick Reference – which Entra ID value goes into which Portal field
- Install Nodinite v7 – OpenID Connect – what each field does
Access After Installation
- What is a Claim? – the token claim must match a Nodinite Claim exactly
- What is a Policy? – how Claims grant Roles
Recommended Reading Path
- First time with OAuth? Start with Register Nodinite Applications in Azure AD to understand the app registration architecture.
- Installation fails with Error [10.3] or [10.4]? Go to Troubleshooting OAuth 2.0 Validation Failures.
- Token claims still missing? See Entra ID Token Claims Validation for detailed diagnosis.
Next Steps
- Troubleshooting OAuth 2.0 Validation Failures
- Entra ID Token Claims Validation
- Register Nodinite Applications in Azure AD (Entra ID)