OAUTH 2.0 authentication issue with ION API

Dear members,

This morning i've registered a NON-INFOR application in ION API's environment as a back-end service.

i've retrieved the client_id and client_secret values from the file downloaded on the ION API's back-end, but i'm encountering some issues in getting the authorization code from the AS server. i'm trying to get the authorization code by using the following URL

https://[AS_url]/InforIntSTS/connect/authorize?client_id=[client_id_value]&response_type=code

the response of the AS server is always the same:

Any suggestions about this issue ?

Thanks in advance

Find more posts tagged with

ION API Gateway

Accepted answers

All comments

unknown

hi,

could you explain the use case scenario?

regards

Sarada

unknown

Greetings,
first of all, i wish to thank you for your quick reply to my previous post. The scenario is the following:
I need to use some ION APIs from a “third party software”. In order to better understand how to implement the authentication flow in mine application, I tried to replicate the process explained in the user guide with SmartBear SOAPUI by executing the following steps:

1) I’ve registered the application in the ION API back-end obtaining:
a. ID client
b. Client secret
2) I’ve disabled the “release refresh token” option and I’ve set the OAUTH 2.0 token time limit to 2 hours;
3) I downloaded the file containing the JSON with all the information needed to authenticate the client (ci string, cs string, pu string …) ;
4) I’ve configured SOAPUI client to connect to AS server in order to obtain the authorization code

a. I’ve set the URL to : https://[AS_SERVER_PATH]/InforIntSTS/connect/authorize
b. I’ve passed to WS, by using GET method, the following parameters:
i. client_id;
ii. response_type;
iii. client_secret;
iv. scope.
5) I’ve tried also other parameters and configurations but the result never change. The AS server return a non-specific error and I cannot obtain the authorization code.
Any suggestions ?

Thank you in advance

unknown

saml?

unknown

In order to use the SOAP UI for testing...you need to register it as web application. If its primarily for verification of APIs...then see the configurations in the attached picture.

Later, you use one of the APIs which you would like to verify. There is no API to first give the token. we have the ION API SDK, which gives you apis that will send requests and get the tokens. So in the real application (java, .net, iOS, Android etc) you use the SDK. For testing purposes, you would just configure like above. Then select the registered API in IONAPI to verify and chose oAuth 2.0 as the authentication mechanism.

unknown

Hi Sarada and Randy,

I am a coworker of user 1240076. First of all i would like to thank you for the tips that you gave to us.

I've resolved the issue this morning managing to successfully authenticate SOAPUI with the ION API's "AS" server, obtaining a valid access_token.

Thank you for the help

Filippo

Copyright © 2025 Infor. All rights reserved.