AppSwitcher and SSO Troubleshooting

App Switcher menu does not display

PS GUID is not configured in the AppSwitcher SSO Settings.

Update the PS GUID.

App Switcher menu does not display

District in PS GUID does not have two or more products enabled for App Switcher

Define at least two or more products for AppSwitcher for the district.

HTTP 400 bad request

The authentication was successful but the identity provider declined to issue the token due to a bad request.

This is usually caused by a configuration error:

1. Check the Client ID and Client Secret for extra spaces.

2. Check the Tenant Profile ID and the supported token authentication methods.

Single Sign-On is not configured for this district. Please contact your System Administrator.

1. The PS GUID provided in the external URL is not correct.

2. The IDP URL is not provided as a query parameter.

3. The IDP URL configured in PowerSchool ERP Configuration is not correct

1. Verify PS GUID is configured in AppSwitcher SSO Settings.

2. Provide IDP URL in PowerSchool ERP URL.

You do not have access to PowerSchool ERP. Please contact your district administrator. (Forbidden)

The SSO authentication was successful, but a valid mapping was not found.

Map the Global User ID with an PowerSchool ERP account using the bulk mapping or Employee Information page.

Error 401: Invalid Client

Client ID configured in PowerSchool ERP is not correct.

Verify and update the Client ID configured in AppSwitcher SSO Settings.

Blank Screen

Client Secret is not correct.

Verify and update the Client Secret configured in AppSwitcher SSO Settings.

ERR_TOO_MANY_REDIRECTS

Wrong Claim.

Verify and update the Client Identifier configured in AppSwitcher SSO Settings.

HTTP ERROR 401

Wrong IDP Provider URL.

Verify and update the IDP URL configured in AppSwitcher SSO Settings.

Error 400: redirect_uri_mismatch

Wrong Redirect URL.

Verify and update the Redirect URL configured in AppSwitcher SSO Settings.

Error 400: invalid_scope

Available Scopes are not correct.

Verify and update available the Identity Provider Scopes configured in AppSwitcher SSO Settings.

Blank Screen

Client Secret is not correct.

Verify and update the Client Secret configured in AppSwitcher SSO Settings.

ERR_TOO_MANY_REDIRECTS

Wrong Claim.

Verify and update the Client Identifier configured in AppSwitcher SSO Settings.

Sorry, but we're having trouble signing you in.

1. Client ID configured in PowerSchool ERP is not correct.

2. Wrong Redirect URL.

3. Available scopes are not correct.

1. Verify and update the Client ID configured in AppSwitcher SSO Settings.

2. Verify and update the Redirect URL configured in AppSwitcher SSO Settings.

3. Verify and update the Identity Provider Scopes configured in AppSwitcher SSO Settings.

HTTP ERROR 401

Wrong IDP Provider URL.

Verify and update the IDP URL configured in AppSwitcher SSO Settings.

HTTP Status 500 – Internal Server Error

1. Client ID configured in PowerSchool ERP is not correct.

2. Wrong Redirecct URL.

3. Available Scopes are not correct.

1. Verify and update the Client ID configured in AppSwitcher SSO Settings.

2. Verify and update the Redirect URL configured in AppSwitcher SSO Settings.

3. Verify and update the Identity Provider Scopes configured in AppSwitcher SSO Settings.

Blank Screen

Client Secret is not correct.

Verify and update the Client Secret configured in AppSwitcher SSO Settings.

ERR_TOO_MANY_REDIRECTS

Wrong Claim.

Verify and update the Client Identifier configured in AppSwitcher SSO Settings.

HTTP ERROR 401

Wrong IDP Provider URL.

Verify and update the IDP URL configured in AppSwitcher SSO Settings.