I'm building a mobile app to authenticate to OCS. Using OIDC Authentication, my app is expecting a Redirect URL of “host.exp.exponent”... but OCS won’t let me whitelist this Redirect URL, it tells me: “URL is invalid”.

The issue is that OCS appears to artificially restrict redirect URLs to only http schemed ones.

However, native app redirects are free form and not necessarily schemed. Lifting that restriction should solve the issue.