An interactive app receives redirect URI mismatch errors during sign-in. What should be corrected?

1. Give the app Global Administrator to bypass URI checks
2. Align the application's actual callback URI with the supported registered redirect URI configuration
3. Disable TLS certificate validation in every client
4. Increase the access token's display font