**Redirects** — titled **Redirections** on the page — sets where the hosted identity flows send people: _"Configure success and error redirection URLs for your application."_

The rail has three tabs: **General**, **Auth Redirect**, and **Compliance**.

## General

_"The public address used across your hosted identity flows."_

One field, **Website URI**: _"The URL of your application's website. Used across your hosted identity flows."_ It is fixed to `https://` and saved with **"Save website URI"**.

This is the address the hosted pages treat as your app's home — the link behind your logo, and the fallback destination when a flow completes without a more specific target.

## Auth Redirect

The callback URLs for the OAuth and OIDC flows:

| Setting | Purpose |
|---------|---------|
| **Redirect URI** | Where the authorization server returns after a successful sign-in, with the code or tokens. |
| **Post sign-out URI** | Where users land after signing out. |
| **Error URI** | Where users land when a flow fails. |

Redirect URIs are validated against your [verified domains](/docs/console/tenants) — an unverified host is rejected, which is what stops an attacker from redirecting an authorization code to their own server.

> **Warning**
>
> Redirect URIs are matched exactly, including the scheme, port, and trailing
> path. `https://app.example.com/callback` does not match
> `https://app.example.com/callback/`. A mismatch surfaces as a
> `redirect_uri_mismatch` error at the start of the flow, before the user sees a
> sign-in form.

## Compliance

Legal and consent destinations shown on the hosted pages — your terms of service and privacy policy URLs, and any consent copy the flow needs to display.

## Scope

Like the rest of the environment configuration, redirects are set per environment. A `dev` environment typically points at `http://localhost:3000`, while `prod` points at your live host, and the same code works in both because the SDK reads the environment's configuration rather than hardcoding a URL.

## Related

| Read | To learn how to |
|------|-----------------|
| [Domains](/docs/console/domains) | Serve identity flows from your own hostname |
| [Tenants](/docs/console/tenants) | Verify the domains that redirect URIs are checked against |
| [Authentication](/docs/console/authentication) | Register OpenID clients and their grants |
| [Branding](/docs/console/branding) | Style the pages users are redirected through |
| [Deployments](/docs/deployments) | Configure per-environment URLs across stages |