Skip to main content

I received an error (PX-Exxxx) while testing Singpass/Myinfo.

Kelsey Koh
Updated

Important Note: Not a Singpass partner? Please contact the help desk of the service provider you are trying to access for updates.  

 

If you receive the following error code while testing, you may try the following basic troubleshooting steps. 

Basic OIDC Related

Error Code Message Suggested Next Actions
invalid_request Unregistered redirect URL Ensure that you registered the redirect URL in SDP. (Refer to this guide for steps to edit your app)  
invalid_client RP failed client assertion authentication
You may use tools like https://www.jwt.io/ to further troubleshoot your client assertion
invalid_request Request parameters invalid

Common error: 

  1. Incorrect client_id used: Ensure that you are using the app_id for the client_id
  2. Incorrect/missing parameters: Ensure all required parameters are included. Consult our documentation for FAPI 2.0 flows and non-FAPI flows to verify your request structure.
invalid_client This app has been deactivated or deleted

Ensure that your app is activated. (You can refer to this guide for steps to activate your app) 

If you are not able to activate your app, please write in to us.
invalid_scope Scope(s) provided may be unregistered Ensure that you selected the scope in SDP. (Refer to this guide for steps to edit your app) 

 

DPoP Related

Error Code Message Suggested Next Actions
invalid_dpop_proof Failed to verify the DPoP proof JWT
Refer to the guide here to learn more about DPoP implementation and ensure you comply with the specs.
invalid_dpop_proof Incoming DPOP Proof JWT does not match the initial dpop_jkt sent at PAR endpoint
Refer to the guide here to learn more about DPoP implementation and ensure you comply with the specs.

 

PKCE Related

Error Code Message Suggested Next Actions
invalid_request PKCE validation failed
You may use tools like https://developer.pingidentity.com/en/tools/pkce-code-generator.html to verify your code verifier and code challenge

 

Singpass-Specific Parameter Related 

Error Code Message Suggested Next Actions
invalid_request Requested authentication context type is not registered
Ensure that you have selected the relevant authentication scenario (Refer to this guide for steps to edit your app)

 

Others

Error Code Message Suggested Next Actions
invalid_client Unable to reach client JWKS URL

Ensure that: 

  1. Your JWKS endpoint is publicly accessible (You can refer to this guide on how to test your JWKS endpoint)
  2. Your WAF (Web Application Firewall) is not blocking Singpass from retrieving the keys
  3. You are complying to the requirements of JWK (You can refer here for more information).
invalid_request Myinfo profile has yet to be provisioned for the user
Please ensure you are using the specific Myinfo test persona here

 

If you can't find the error code from the above list or need more help, please write in to us via this form and provide the relevant error messages/request ID. 

 

 

 

Related to

Related articles

Comments

0 comments

Please sign in to leave a comment.