# Response session state does not have corresponding state or nonce parameters or redirect URL

**URL:** <https://discuss.elastic.co/t/response-session-state-does-not-have-corresponding-state-or-nonce-parameters-or-redirect-url/209484>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [November 26, 2019, 11:04am UTC](https://discuss.elastic.co/t/response-session-state-does-not-have-corresponding-state-or-nonce-parameters-or-redirect-url/209484 "2019-11-26T11:04:07Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![soumendra](https://avatars.discourse-cdn.com/v4/letter/s/b2d939/32.png) [@soumendra](https://discuss.elastic.co/u/soumendra)\
**Post date:** [November 26, 2019, 11:04am UTC](https://discuss.elastic.co/t/response-session-state-does-not-have-corresponding-state-or-nonce-parameters-or-redirect-url/209484/1 "2019-11-26T11:04:07Z")

</div>

ES & KB: 7.3.2  
While signing into Kibana with `oidc` realm, I got the following error out of the blue.

`{"statusCode":401,"error":"Unauthorized","message":"Response session state does not have corresponding state or nonce parameters or redirect URL."}`

Usually, It keeps on appearing and automatically gets out in a couple of hours, sometimes in a day. Why is this happening?

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [November 26, 2019, 11:19am UTC](https://discuss.elastic.co/t/response-session-state-does-not-have-corresponding-state-or-nonce-parameters-or-redirect-url/209484/2 "2019-11-26T11:19:26Z")

</div>

This means that either:

- Your Kibana session cookie expired while you were trying to authenticate with OpenID Connect to you OP. I.e. you clicked on Kibana and was redirected to you OP but then stayed there for many hours before actually logging in and getting redirected back to Kibana. ( \<- not sure if this is even possible )

- You used a URL with an OpenID Connect authentication response from your OP, that you copied from another browser or from a previous attempt. As such Kibana is lacking the necessary information to proceed with the authentication and fails the request.

I would expect that this happened only once ? If you do get this often, please open a support ticket with your support engineer so that we can actually look at the logs from Kibana and Elasticsearch and see if there is an issue somewhere.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 24, 2019, 11:19am UTC](https://discuss.elastic.co/t/response-session-state-does-not-have-corresponding-state-or-nonce-parameters-or-redirect-url/209484/3 "2019-12-24T11:19:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.