Question
Tata Consultancy Services
IN
Last activity: 2 Oct 2025 22:38 EDT
The query string "redirect_uri" is missing or invalid when connecting to Sharepoint
Hi All,
We are trying to connect with Sharepoint using the Pega Sharepoint online Component.
On clicking of connect from the Connected Apps section we see "The query string "redirect_uri" is missing or invalid."
Sharepoint team when they try to add the redirect url it only accepts "https" connections where as we have "http" setup for the web.
Is there any solution for this issue?
Pegasystems Inc.
GB
⚠ This is a GenAI-powered tool. All generated answers require validation against the provided references.
To resolve the issue with the "redirect_uri" being missing or invalid when connecting to Sharepoint, ensure that the redirect URL is correctly configured and uses "https" instead of "http". Sharepoint requires the redirect URL to be secure (using "https"). Update your web setup to use "https" for the redirect URL to be accepted by Sharepoint.
Root Cause Analysis
The root cause of the issue is that Sharepoint only accepts "https" connections for the redirect URL, while your current setup uses "http". This mismatch causes the "redirect_uri" to be considered invalid or missing.
Reference Summary
The most applicable references for this solution are Invalid "redirect_uri" error when setting target folder and Authentication Type OpenID Connect is Not working as expected. These references highlight the importance of correctly configuring the redirect URL and ensuring it matches the expected format, including the use of "https" for secure connections.
⚠ This is a GenAI-powered tool. All generated answers require validation against the provided references.
To resolve the issue with the "redirect_uri" being missing or invalid when connecting to Sharepoint, ensure that the redirect URL is correctly configured and uses "https" instead of "http". Sharepoint requires the redirect URL to be secure (using "https"). Update your web setup to use "https" for the redirect URL to be accepted by Sharepoint.
Root Cause Analysis
The root cause of the issue is that Sharepoint only accepts "https" connections for the redirect URL, while your current setup uses "http". This mismatch causes the "redirect_uri" to be considered invalid or missing.
Reference Summary
The most applicable references for this solution are Invalid "redirect_uri" error when setting target folder and Authentication Type OpenID Connect is Not working as expected. These references highlight the importance of correctly configuring the redirect URL and ensuring it matches the expected format, including the use of "https" for secure connections.
Immediate Action Items: 1. Enable HTTPS on your Pega environment - this is the most important step 2. Update your SharePoint app registration with the correct HTTPS redirect URI 3. If HTTPS isn't immediately possible, try the DSS configuration changes above 4. Test the connection after each change The HTTPS requirement is non-negotiable for modern SharePoint Online integrations due to Microsoft's security policies. This is your most likely path to resolution.
HCA Healthcare
US
Short answer: you must switch the Pega “public” URL to HTTPS. Azure AD (used by SharePoint Online) rejects http redirect_uris for web apps; only https (and localhost for dev) is allowed. Enable TLS on your Pega front door (web server/load balancer/Ingress) or terminate TLS at a proxy and forward to Pega over http, then set Pega’s public/base URL (DSS PublicLinkURL or pega.public.url) to the external https URL. In Azure App Registration, add the exact Pega callback shown by the SharePoint connector (path and case-sensitive), e.g. https://your.domain/prweb/PRAuth?pyActivity=OAuth2Callback. Make sure the app type is “Web” and the reply URL matches 1:1 (no trailing slash or port mismatches). In Pega, ensure the OAuth2 auth profile and service package are enabled and “Requires authentication” is set where needed. Save, clear caches, and try Connect again—the “redirect_uri missing or invalid” error will go away once the https redirect exactly matches.