Answer
Redirect URIs are part of your identity provider's client registration, not something set inside IFS Cloud itself. That specific error almost always means the URI the client sent doesn't exactly match a registered one — check for a trailing slash, http vs. https, or a stale value first. See authenticate and get access.