Bad Request Error - 400 after MFA

  • Published on Nov 24, 2025
  • 1 minute(s) read
  • AA
 Prev Next

Summary

Users intermittently encounter the error “400 Bad Request” when attempting to log in to Workspot VDI via Workspot Client. This occurs after successfully signing in with company credentials and approving the OneLogin MFA push notification.

Issue Description

Affected users report the following symptoms:

  • Login fails on both Workspot Client and the web browser.

  • OneLogin MFA push notification is received and approved.

  • After approval, a “400 Bad Request” error is displayed.

  • In some cases, the same user may log in successfully using a mobile device.

A screenshot of a computer AI-generated content may be incorrect.

Root Cause

The issue occurs because the OneLogin token expires before Workspot receives it for validation.

As an example, the token was configured with a 30-second lifetime, which is insufficient when Users take longer to approve MFA or there are network delays. This results in a “400 Bad Request” or “Invalid Grant” error.

Resolution Steps

To resolve the issue:

  • The OneLogin Identity Administrator must increase the token lifetime.

  • Recommended setting: 120–180 seconds (2–3 minutes).

  • No changes are needed on the Workspot or end-user side.

  • After updating, users should be able to log in successfully.

Applies To

  • Workspot VDI users

  • OneLogin SAML / OIDC authentication

  • MFA-enabled login environments

If the issue persists after increasing the token lifetime:

  • Ask the user to reproduce the login attempt.

  • Collect the Workspot client log or HAR file for the Web Client during the login process.

  • Share the HAR file with the Workspot Support Team for deeper investigation.

Steps to Download HAR File (Google Chrome)

  • Open Chrome and go to the login page.

  • Press F12 to open Developer Tools (or right-click → Inspect).

  • Click the Network tab.

  • Ensure the Preserve log is checked.

  • Reproduce the login attempt (enter credentials, approve MFA).

  • After the error appears, click on Export HAR.

  • Save the file and share it with Workspot Support.
    Please note: Steps may vary slightly depending on the browser.