Troubleshooting OAuth Issues
Complete guide to diagnosing and fixing OAuth connection problems across all advertising platforms. Learn how to resolve Access Denied, Invalid Redirect URI, expired tokens, missing permissions, and other common OAuth errors.
Understanding OAuth Connections
OAuth is the secure authorization protocol that lets Zaplane access your advertising accounts without ever seeing your passwords. When OAuth works, it's seamless. When it doesn't, the error messages can be cryptic. This guide helps you diagnose and fix any OAuth connection issue quickly.
How OAuth Works (The Basics)
You Click Connect
Zaplane redirects you to the platform's site
You Authorize
Platform shows what Zaplane wants to access
Token Generated
Platform creates secure access token
Zaplane Connected
Token allows API access until it expires
Common OAuth Error Messages
Here are the most common OAuth errors and what they mean:
"Access Denied" / "Authorization Denied"
You clicked "Cancel" or "Don't Allow" during authorization, or the platform rejected the connection.
Common Causes:
- Clicked "Cancel" button instead of "Allow"
- Unchecked required permissions during authorization
- Account has restrictions or is disabled
- Business Manager admin hasn't granted you access
"Invalid Redirect URI"
The platform doesn't recognize where it's supposed to send you after authorization.
Common Causes:
- Browser extension (ad blocker) interfering with redirect
- Outdated browser cache causing stale redirect URL
- Platform's OAuth app configuration issue (rare, but contact support)
- Using www vs non-www URL inconsistently
"Token Expired" / "Session Expired"
Your authorization token has expired and needs to be renewed.
Why This Happens:
- Most platforms expire tokens after 60-90 days for security
- You changed your password on the platform
- You revoked Zaplane's access in platform settings
- Platform experienced a security incident and invalidated tokens
"Insufficient Permissions"
Your account lacks the required access level to authorize Zaplane.
Common Scenarios:
- Google Ads: You have "Read-only" or "Email-only" access (need Standard/Admin)
- Meta: You have "Analyst" access to ad account (need Advertiser/Admin)
- LinkedIn/TikTok: Account Manager role but not Account Admin
- Amazon: Viewer access only (need Campaign Manager or Account Admin)
"Connection Timeout" / "Request Timed Out"
The OAuth process took too long and the connection was terminated.
Usual Culprits:
- Slow internet connection during authorization
- Platform's OAuth server experiencing high load
- You left the authorization page open too long (>5 minutes)
- Firewall or corporate network blocking the connection
Platform-Specific OAuth Issues
Google Ads Issues
Issue: "This app hasn't been verified by Google"
Google shows a warning screen about unverified apps. This is normal and safe to proceed.
Solution:
- Click "Advanced" link at the bottom of the warning
- Click "Go to Zaplane (unsafe)" - this is safe, Google just requires manual review for business apps
- Complete the normal authorization process
Issue: "You don't have access to any Google Ads accounts"
The Google account you logged in with doesn't have any Google Ads accounts associated.
Solutions:
- Verify you logged into correct Google account (check email in top-right corner)
- If you have multiple Google accounts, log out completely and try again with correct one
- Check that you have at least Standard or Admin access in Google Ads
- If using Manager (MCC) account, ensure child accounts are linked properly
Issue: Can see account but marked as "Read-only"
You have viewing access but cannot make changes. Zaplane needs Standard or Admin access.
How to Fix:
- Contact your Google Ads administrator
- Request they upgrade your access to Standard or Admin
- In Google Ads: Tools → Access and Security → find your email → change level
- Wait 5 minutes for changes to propagate
- Reconnect in Zaplane
Meta (Facebook/Instagram) Issues
Issue: "No ad accounts found"
Most common cause: Your ad accounts aren't in Business Manager.
Solution:
- Personal Facebook ad accounts cannot connect - only Business Manager accounts work
- Go to business.facebook.com and verify your ad accounts are listed there
- If not, you need to migrate them: Settings → Ad Accounts → Add → Migrate
- If you don't have Business Manager, create one first (takes 1-2 business days to verify)
Issue: "You don't have permission to access this ad account"
You have Analyst-level access. Zaplane needs Advertiser or Admin access.
How to Fix:
- Go to Business Settings in Business Manager
- Click "Ad Accounts" in left menu
- Find your ad account and click it
- Click "Add People" and find yourself in the list
- Change role from "Analyst" to "Advertiser" or "Admin"
- If you don't see this option, ask your Business Manager admin to do it
- Wait 5 minutes, then reconnect in Zaplane
Issue: "Please complete security check" or 2FA prompt
Facebook requires two-factor authentication for Business Manager access.
Solution:
- Complete the 2FA prompt (text message or authenticator app code)
- If you don't have 2FA set up: Settings → Security → Two-Factor Authentication
- After enabling 2FA, wait 15 minutes before attempting OAuth again
- Some Business Managers require admin approval for new app authorizations
Amazon Ads Issues
Issue: "Account not eligible for API access"
Amazon restricts API access to accounts that meet certain criteria.
Requirements:
- Account must have spent at least $1,000 in last 30 days
- Account must be in good standing (no payment issues)
- Must be using Amazon Advertising (not just Seller Central)
- If requirements met but still blocked, contact Amazon Ads support to enable API access
Issue: OAuth redirects to Amazon.com instead of advertising console
You're being sent to regular Amazon shopping site instead of Amazon Advertising.
Solution:
- Clear your browser cookies for amazon.com domains
- Log out of any Amazon shopping accounts
- Go directly to advertising.amazon.com first
- Log in with your advertising credentials
- Then attempt Zaplane connection again
LinkedIn Ads Issues
Issue: "Insufficient privileges"
LinkedIn Campaign Manager has strict role requirements for API access.
Solution:
- Go to Campaign Manager → Account Assets → Account Users
- Verify you have "Account Manager" or "Campaign Manager" role
- "Viewer" or "Creative Manager" roles cannot authorize OAuth
- Request account admin to upgrade your role
- Changes take effect immediately, no wait time
TikTok Ads Issues
Issue: "Region not supported"
TikTok's API availability varies by region and account type.
Check:
- Verify your TikTok Ads account region (US, EU, APAC have different rules)
- Some regions require Business Center setup before API access
- If blocked, contact TikTok support to enable API for your account
General Troubleshooting Steps
Try these steps for any OAuth issue before diving into platform-specific solutions:
Clear Browser Cache & Cookies
Stale cookies are the #1 cause of OAuth issues. Clear them for the specific platform domain.
How to clear:
- Chrome/Edge: Settings → Privacy → Clear browsing data → Cookies and cached images
- Firefox: Settings → Privacy → Clear Data → Cookies and Cache
- Safari: Preferences → Privacy → Manage Website Data → Remove
- Make sure to check "All time" not just "Last hour"
Disable Browser Extensions
Ad blockers, privacy extensions, and VPNs frequently interfere with OAuth redirects.
Extensions that cause problems:
- uBlock Origin, AdBlock Plus (block tracking pixels used in OAuth)
- Privacy Badger, Ghostery (block third-party cookies)
- VPN extensions (may route through unsupported regions)
- Try OAuth in Incognito/Private mode where extensions are disabled
Try a Different Browser
If one browser isn't working, try another. Chrome and Firefox have best OAuth compatibility.
Browser recommendations:
- Best: Chrome, Firefox (most compatible)
- Good: Edge, Brave, Safari
- Issues: Older versions of any browser, Opera (sometimes blocked)
Check Platform Status
Sometimes the platform itself is having issues, not Zaplane.
Status pages:
- Google Ads: status.ads.google.com
- Meta: status.fb.com
- LinkedIn: status.linkedin.com
- TikTok: Check TikTok For Business help center
- If platform status is "degraded," wait 30 minutes and retry
Verify Account Status
Disabled, suspended, or payment-failed accounts cannot complete OAuth.
Check:
- Log into the platform directly and verify account is active
- Check for any outstanding payment issues or billing holds
- Ensure account isn't under review or restricted
- Verify you haven't hit any spending limits or caps
Handling Expired Tokens
OAuth tokens don't last forever. Here's what to expect and how to handle expiration:
Google Ads
60 days
Auto-renewal available
Meta
60 days
Manual renewal required
Others
90 days
Varies by platform
Zaplane Sends Expiration Warnings
You'll receive email notifications 7 days before token expiration. Click the link in the email or go to Platform Connections in Zaplane and click "Reconnect". The process takes just one click since you're already authorized.
What Happens When Token Expires:
- Zaplane can no longer pull fresh data from the platform
- Automated optimizations stop executing
- Dashboard shows stale data with "Connection Lost" badge
- Your campaigns on the platform continue running normally
- Historical data in Zaplane remains accessible
When to Contact Support
Most OAuth issues can be solved with the steps above. Contact Zaplane support if:
🚨 Contact Support Immediately:
- •You've tried all troubleshooting steps and still can't connect
- •Error message mentions "Zaplane" or "invalid client"
- •Connection worked before but suddenly stopped with no changes on your end
- •You get repeated "Invalid Redirect URI" errors after clearing cache
ℹ️ Try Platform Support First:
- •Permission/access level issues (platform admin needs to grant access)
- •Account suspended, disabled, or under review
- •Business Manager verification pending (Meta)
- •API access not enabled for your account (Amazon, TikTok)
What to Include When Contacting Support:
- Platform you're trying to connect (Google Ads, Meta, etc.)
- Exact error message (screenshot helps)
- Steps you've already tried from this guide
- Browser and version you're using
- Whether this is a new connection or reconnection
- Your Zaplane account email
Quick Reference Guide
First-Time Connection Issues?
- Clear browser cache & cookies
- Disable ad blockers/VPN
- Verify account access level
- Try incognito mode
- Try different browser
Token Expired?
- Go to Platform Connections in Zaplane
- Click "Reconnect" on expired platform
- Complete one-click reauthorization
- Data syncs automatically
Was this article helpful?
Related Articles
Still need help?
Our support team is here to assist you