TOOLS_AUTH_CONFIG_INVALID

Issue

The tool's authentication settings are incomplete or wrong, so Glean can't get a credential for it. You can see this error while a tool runs, while someone connects it, or while an admin sets up a connector. For example:

• The OAuth client secret is missing, or has expired in the app. Microsoft Entra ID client secrets expire on a set date.
• The client ID doesn't match the app, or the app was deleted or disabled.
• The app doesn't allow one of the requested scopes or resources (invalid_scope or invalid_target).
• The redirect URL that Glean uses isn't registered with the app.
• The tool has no authorization URL or client ID.

Resolution

Only an admin can fix this error. If you're an end user, send your admin the error code and the request ID from the error message.

If you're an admin:

1. Go to Admin console → Platform → Tools and open the tool.
2. Compare the authentication settings with the app's setup guide: client ID, client secret, authorization URL, token URL, and scopes.
3. In the app's OAuth client settings, check that the client secret hasn't expired and that Glean's redirect URL is registered. The tool's setup guide lists the redirect URL to register.
4. If Glean asks for the client secret, enter it again and save. Glean doesn't display a saved secret, so re-enter it even when the field looks complete.
5. Ask a user to connect or run the tool again.

If you see this while setting up a connector in Admin console → Platform → Connectors, check the OAuth client details on the connector's setup page instead, such as Client ID, Client secret, and Scopes. Then click Connect again. If the setup page doesn't ask for OAuth client details, Glean manages the connector's OAuth client. Contact Glean Support.

For additional assistance, contact Glean Support.