With another oauth method, we had to specify the id_path so the reply could be read correctly (see Oauth2 authentication logs no extern_uid ). Not sure what happens here. But for tracking: the login info is logged into the application.log file, so that might help finding related log messages.