CHW-1108 SSONonceInvalid

SSO nonce validation failed; restart the sign-in flow

Default message: SSO nonce validation failed; restart the sign-in flow
HTTP status: 400 (client)

Problem. The id_token nonce did not match the value stored at /sso/init. Cause. Replay / token-substitution attempt, or a significantly stale callback. Fix. Restart the sign-in flow. HTTP 400.