Error 400: redirect_uri_mismatch into GAM installation process

[ICadmin]

Today I installed Gam 6.25 and in the step for "Select the authorized scopes..." I type "c" (continue), then appear the link https://gam-shortn.appspot.com/xxxxxx and open the browser. At this point in the browser appear un error:

AUTHORIZATION ERROR

Error 400: redirect_uri_mismatch

...

and the process is blocked, because in the administration console the prompt "Enter verification code or browser URL:" is waiting the code that don't appear in the browser!!!

I tryed many times restart from begin, but the result is the same.

How can I resolve?

Tx for gentle reply

[Jay Lee]

This sounds like you chose the wrong option for your client. You should have chosen desktop app, not web application. Delete oauth2service.json and client_secrets.json and run gam create project again.

Jay

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/8398a340-ff29-483e-a68b-76b16eb3d7fan%40googlegroups.com.

[ICadmin]

Tx for the fast reply! I tryed to follow your solution and in effect I select a wrong type of application. Then I deleted oauth2service.json and client_secrets.json and run gam create project again and I select correctly "Desktop application" and the process is go at next step: Appear the login for authorization with a long list of service and after I clicked "Approve" then appear:

Authorization error 

Error 400: invalid_request 
Account restricted

and the process stop!

How can resolve?

Tx in advance

[Jay Lee]

Make sure this setting is enabled for your gam user:

https://support.google.com/a/answer/7646040

Jay

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/77ec17fb-3f37-46ff-9cf9-65c9116abc71n%40googlegroups.com.

[ICadmin]

Tx for reply.

I controlled the list of services (follow the link) enabled for administrator account declared in the procedure for complete GAM configuration and I enabled GROUPS, but happen the same situation and the same error! WHat are the services that I have to eneable for fix my issue? TX

[ICadmin]

... excuse me, but in this step of GAM configuration is all ok? Have I to do some changes?

[ICadmin]

Tx for all your contributions, but I resolved searching and reading all old post in this group for reply at old help requests for similar issue.

First of all, there is a command in GAM for testing enabled/dasbled API scope per user:  gam user <email> check serviceaccount

Instead, for resolve issue above,  the fix was to enable "Access to additional services without individual control" under Additional Google services for the OU that the GAM project is run from.

Now it's all OK!!!

[Niclas Hansson]

I had the exact same problem on one of our domains. Checked the "Access to additional services without individual control" setting and it was enabled. The solution for me was to disable the setting and then enable it again.

[Kim Nilsson]

Yeah, sadly, Google still has many unknown services which require that setting to be enabled.

It's also a domain wide setting, so it can't be enabled only for admins, or staff in an education domain.