Touch Apps (like Scan iT / Account Manager) Azure AD authentication fails with an 'IDP_protocol_flaw' error immediately after correctly configuring the Azure AD App Registration and redirect URIs — is this a sign the configuration itself is wrong?

All FAQ questions / Security and access

Answer

Not necessarily — a correctly configured App Registration and redirect URIs can still fail with this error for up to roughly an hour immediately after being saved, due to Azure AD's own backend replication/propagation delay before the new registration is fully synced and recognized. If the configuration looks correct on review, waiting up to an hour before assuming something is actually misconfigured can save time spent re-troubleshooting a setup that was already right.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions