Authorize into developer Sandbox using JWT

Question

I am attempting to authorize a developer Sandbox using JWT in an attempt to implement a CI process. I found this related question on the subject:

Can I connect to a sandbox using JWT Flow and Prod connect app?

I have attempted to follow the advice given there. I am able to use JWT in my production org without any issues. The sandbox I am attempting to auth into was created off of production, so the connected app that I use in production is also in the Sandbox, but with a different client secret. However when I try to authorize into the sandbox:

sfdx force:auth:jwt:grant --clientid <clientId-from-sandbox> 
--jwtkeyfile <path-to-server.key> 
--username <sytem-admin> --instanceurl <instance-url-for-sandbox>

I get the following error:

ERROR:  This org appears to have a problem with its OAuth configuration. 
Reason: invalid_grant - audience is invalid 

Anyone have any idea what I'm doing wrong here?

Answer 1

I was having similar issue. I made below changes and was able to Authorize.

1. Set environment variable SFDX_AUDIENCE_URL export SFDX_AUDIENCE_URL=https://test.salesforce.com

2. Change Client key - When connected app is copied from Production it will have new client key in production. So open connected app via setup -> App -> connected APP and copy client key

3. Update value of key "sfdcLoginUrl" to https://test.salesforce.com in file sfdx-project.json. This file is present in sfdx directory. I used bash to update file.

echo '{"packageDirectories": [ { "path": "force-app", "default": true }],"namespace": "","sfdcLoginUrl": "https://test.salesforce.com","sourceApiVersion": "45.0" }' > sfdx-project.json

After making these changes it works!