• The error can be fixed in one of two ways: (RECOMMENDED) Instead of using HS256 for the application signature algorithm, switch to RS256. To receive an access token in the response, change the default value of your responseType parameter to the token id token.

Why does my SASSA report failure?

• When an applicant is given the status “Identity Verification Failed,” Sassa has determined that the applicant’s information does not match that of the Department of Home Affairs. When evaluating applications, the agency processes applicants’ information through a number of different databases.

You might see the message “Invalid Token” if you have applied for the SASSA SRD R350 grant or are currently receiving one.

The SASSA Invalid Token indicates that the computer-generated code or snippet that was issued for a specific request or operation was not used promptly, had expired, or was being used by another account holder or for a different purpose.

For instance, when a user requests to modify or update the details of his or her bank account, SASSA will send the user a special link that is only for that user’s account and must be accessed within 30 minutes by the same user.

The link will expire and become invalid, making it no longer valid, if for some reason the user does not use it within the allotted time.

Additionally, since that link is only associated with the applicant who requested it, it cannot be used to update the account of another applicant.