[ARCHIVE] Authorising redirect on error for an inactive software product

Archived 2022.11.20. Content moved to error scenarios and responses.

Question

When the client browser interacts with the authorise endpoint, which error responses apply when an  invalid software product is being used?

Answer

The most appropriate response is to redirect back to the Software Product, that is to say the Accredited Data Recipient (ADR) application, providing error information.

Data Holders (DHs) may choose NOT to treat this scenario as an invalid client id, however. 

In that case, the appropriate response may be to redirect back to a DH error page.

For this scenario, the DH treats an inactive or removed software product in the same way as an invalid client_id. This may not be appropriate in all cases.