OAuth 3LO "failed to retrieve client" for non-contributors despite Sharing mode enabled

I have a private OAuth 2.0 (3LO) app registered in developer.atlassian.com. It’s a Flask web app that authenticates users against a Jira Cloud instance using the standard authorization code flow.

The problem:
Users who are not the app creator get a “failed to retrieve client” error on Atlassian’s authorization page. The app creator can authorize fine.

What I’ve done:

  • Enabled Sharing under Distribution (toggled on, hours ago)

  • Added a Privacy Policy URL

  • Verified the callback URL in Authorization → Configure is correct

  • Confirmed the client_id in the app matches what’s in the authorization URL

My authorization URL structure:

https://auth.atlassian.com/authorize?audience=api.atlassian.com&client_id=<id>&scope=read:jira-work+write:jira-work+offline_access&redirect_uri=<callback>&state=<state>&response_type=code&prompt=consent

Questions:

  1. Does enabling the Sharing toggle require any additional step to take effect, or is it immediate?

  2. Is there a known propagation delay after switching from Development to Sharing?

  3. Is there any reason “failed to retrieve client” would persist after Sharing is enabled?

@BasdeVos did you able to solve this i am facing same issue