If you use Google to login onto our iOS app, you might encounter the following login error: "400: admin_policy_enforced".
This error is one of the common authentication issues users might face when using Single Sign-On (SSO) across platforms.
If you notice this error message, don't worry.
It's not a glitch but you'll need some safety settings updated on your Google company's account.
These restrictions are often related to policies set by your organization's Google Workspace administrator to enforce security and compliance.
Indeed, depending on your core settings, you might need to authorize the Spendesk app before you can have access to your account on iOS.
You may need to ensure that Spendesk is explicitly approved as a trusted app under your organization’s security settings.
Steps to Resolve the "400: admin_policy_enforced" Error
Contact Your Google Administrator: Reach out to the Google super-administrator managing your organization's Workspace account.
Access the Google Account Authorizations:
Log in to the Google Workspace Admin Console.
Navigate to the OAuth permissions settings page.
Add Spendesk as a Trusted iOS Application:
Click on the
+button and select "iOS" under Application Type.Search for "Spendesk."
Save the application, ensuring the identifier is listed as
com.spendesk.spendesk.
Try again to log in.
If the login process still fails, double-check whether your Google administrator has implemented all the steps accurately.
If you still have login issues, contact us.
For additional guidelines on authentication errors, check your organization's IT security policy or contact Spendesk support.