Invalid Client Error Occurs with an OIDC Enterprise Connection
Sep 25, 2025
Overview
This article addresses an error that occurs during login when using an OIDC Enterprise connection where PingFederate is the Identity Provider (IdP). The following error message is displayed:
invalid_client (Invalid client or client credentials.)
Applies To
- OIDC Enterprise Connections
- PingFederate IdP
Cause
This error is sent by PingFederate because the client secret sent during the token exchange is incorrect.
Solution
Follow these steps to resolve the issue:
-
Verify that the correct client secret from PingFederate is entered in the OIDC connection settings.
-
If the existing secret does not work, regenerate the client secret in PingFederate.
-
Update the OIDC connection with the newly generated secret.
