Understand & fix error codes
If you’re signed in to your Google Account but still can’t use Sign in with Google or grant a third party some access to your Google Account data, you might get an error code and message.
Some issues that cause an error message may be outside of Google’s control. For example, the app or service you want to use could be set up in an unsafe way that Google doesn’t allow.
Error codes help you understand why you can’t sign in or grant access to your data. You can resolve the problem or contact the developer directly for a solution.
Learn how to fix account-related issues with third-party connections.
400 access_ not _configuredIf you get a "400 access_not_configured" error, it means the app or service has not been properly configured by a Workspace for Education Administrator.
What can you do about this error?
If this is an app or service you expect to be able to use, contact the Workspace administrator to configure access for the app.
If you get a "400 admin_policy_enforced" error, it means the administrator of your account doesn’t allow you to use Sign in with Google. Also, you can’t share some of your organization-specific data with the app or service.
This can happen when you use an account from work or another organization. Sometimes only specific apps or services are blocked.
What can you do about this error?
If you believe you should have access to the app or service, reach out to your organization’s Google Workspace administrator.
If you get a "400 invalid_request" or "Access blocked" error, it means the app or service sent an invalid request. The app or service uses an authorization method that Google doesn’t allow.
Google has safe ways for you to sign in and share your Google Account data with third-party apps and services. To help protect your account, Google blocks apps and services that could put your account at risk.
Tip: Learn how Sign in with Google shares your data safely.
What can you do about this error?
Only the third-party developer can fix this issue. To report the error, contact the developer directly.
If you get a "400 invalid_scope" error, it means the app or service asks for a permission that we don’t recognize or they aren’t allowed to ask for.
What can you do about this error?
Only the third-party developer can fix this issue on the app or service. To report the error, contact the developer directly.
If you get a "400 invalid_user" error, it means your account is inactive.
What can you do about this error?
Use another valid and active Google Account.
If you get a "400 origin_mismatch" or "400 redirect_uri_mismatch" error, it may mean either:
- The app or service’s developer hasn’t set up their app correctly.
- The app or service has tried to access your data in a way that doesn’t follow our policies.
To protect your account, before third parties can use Sign in with Google, we require them to register their app or service with us. They must also follow our security standards and policies. If an app or service doesn’t follow these policies, we won’t let it use Sign in with Google until the app developer fixes the problem.
What can you do about this error?
Only the third-party developer can fix this issue. To report the error, contact the developer directly.
If you get a "400 policy_enforced" error, your Google Account may be part of the Advanced Protection Program. To help protect your account, this security feature doesn’t let most third-party apps or services access your Google Account data.
What can you do about this error?
To fix this error, you must opt out of the Advanced Protection Program. This means you’ll lose the program’s security benefits.
If you get an error that starts with "401," that usually means the developer didn’t properly register their app or service with Google.
To protect your account, before a third-party developer can use Sign in with Google or request access to some of your data, Google asks them to register their apps and services. We don’t share your info with the developer until they register with us.
Some of the error messages you might get include:
- 401 invalid_client: Either the app or service doesn't match the info on its registration or the developers haven’t given Google all the required info.
- 401 deleted_client: The app or service isn’t registered with Google anymore.
- 401 disabled_client: The app or service is blocked.
What can you do about this error?
Only the third-party developer can fix this issue. To report the error, contact the developer directly.
If you get a "403 access_denied" error, it means you’re not authorized to use Sign in with Google or to share some account data with the app or service. Some reasons for this include:
- The app or service is in test mode and the developer hasn’t added you as a test user.
- The type of Google Account you’re signed in to doesn’t let you use Sign in with Google or share some of your account data.
- For example, a child’s account can’t use Sign in with Google without a parent or guardian’s permission.
- Your organization administrator might also disallow you to use Sign in with Google or share some account data with certain apps or services.
What can you do about this error?
- Use a different type of account to sign in to the app or service.
- If you believe your account should have access, contact the developer directly.
If you get a "403 disallowed_useragent" error, the app or service uses embedded WebViews. To display web content in an app or service, some developers use WebViews. Embedded WebViews puts your security at risk because they could let third parties access and change communications between you and Google.
To keep your account secure, Google no longer allows embedded WebViews as of September 30, 2021.
What can you do about this error?
- Only the third-party developer can fix this issue on the app or service. To report the error, contact the developer directly.
- If the app or service has a website, you can try to sign in from your browser.
If you get a "403 invalid_account" error, it may mean your Google Account is disabled.
What can you do about this error?
Check if your Google Account has been disabled.
- If you find out your account is disabled, learn how to restore your account.
If you get a "403 org_internal" error, it means that only members of a specific company or organization can use the app or service. For example, an organization might only allow email addresses that end in @example.com to access the app or service.
What can you do about this error?
If you’re a member of the organization, switch to your member account.
If you get a "403 rate_limit_exceeded" error, it means the app or service has reached its sign-in rate limit for now. Google limits how quickly an app or service can get new users.
What can you do about this error?
You can try to sign in again later, or ask the developer to increase this app's sign-in rate limit.
If you get a "403 restricted_client" error, it means the third-party app or service isn’t set up correctly. To help protect your account, Google asks third-party developers to follow certain security requirements.
What can you do about this error?
Only the third-party developer can fix this issue. To report the error, contact the developer directly.
An error occurred while we were processing this request.
What can you do about this error?
Try again later.
Fix other problems on a third-party app or service
Sometimes you can sign in to a third-party app or service with Google but you still can’t use the app or service. Google doesn’t fulfill the services offered by the third party, so most of the reasons this happens are outside Google’s control. We only help the app or service identify who you are.
Some examples of problems with an app or service might include:
- You bought a movie on a third-party app or service but can’t watch it.
- You can’t buy something on a third-party app or service.
- You shared your Google Calendar data with a calendar app but your events aren’t showing on the app.
- You shared a Google photo with a photo edit app but the photo isn’t loading.
If you have problems like these, contact the developer directly.
Contact a third-party app developer
To find contact info for a third-party developer:
- Go to the app or service.
- To share some of your Google data, click Sign in with Google or the call to action button.
- To get the Sign in with Google screen, you might need to sign out of the app or service.
- To get the developer’s email, at the top of the next screen, select the app or service name.
- In some cases, the developer's email may not be available.