Answer
Double-check that the IAM Client ID entered in Report Designer's connection settings is the exact expected client ID for this tool (a specific fixed value dedicated to Report Designer connections, not a custom or guessed client ID) — using the wrong client ID, even one that looks plausible, is a distinct failure mode from a redirect-URI misconfiguration and won't produce an obviously client-ID-related error message.