403 Client Error when attempting to join organisation

When setting up SSO for your Goodnotes Teams & Admin Console experience, you may encounter a 403 client error when trying to access your Goodnotes organisation. This error typically occurs when you're trying to access the Goodnotes or the Admin Console by clicking the application icon directly in your IdP's dashboard, which is not supported.

Instead of clicking the app icon in your IdP (Identity Provider) panel, you can either head to:

1. (If relevant user role) Navigate directly to: https://org-admin.goodnotes.com

   1. Use the SSO login option on sign-in

2. Or you can also join via the Goodnotes app by:

   1. Opening the email invitation

   2. Or simply signing in via SSO

If the direct SSO login still doesn't work, check that your application configuration in your Identity Provider matches the requirements.

For context, this is a known limitation - accessing the Admin Console through the IdP application icon is not supported. Always use the direct browser link, email invitation, or the Goodnotes app to join the application.

Note: 

1. Not all user roles can login to the Admin Console directly through the browser. If you encounter access restrictions when trying to use the browser method, use the Goodnotes app as an alternative access point.
2. If you see a prompt to create a new organization instead of joining an existing one during SSO setup, please check check this page relating to changing your sign-in method from OIDC to SAML SSO