ION API giving "Access token validation failure."

Hi,

I am connecting ION API to RESTAPI servers, using bearer token. A swagger file with required details is created and accepts Authorization, Content and Body as parameters.

The setup using swagger file works fine in 'postman' and 'http://editor.swagger.io/', but it do not work in ION API 'Try it out' feature.

Does ION API require a different setup/approach compared to postman? Given below the error from ION API,

401

Undocumented

Error: Unauthorized

Response body

Download

{
"error": {
"code": "InvalidAuthenticationToken",
"message": "Access token validation failure.",
"innerError": {
"request-id": "94b4acc6-8f9f-4bfe-8a6f-429c2541da99",
"date": "2019-01-11T10:26:16"
    }
  }
}

Find more posts tagged with

ION Mapper & Scripting

Accepted answers

All comments

Legacy Contributor

The "try it out" feature internally (always?) uses a bearer token. Where as from Postman, you have the choice of deciding the authentication protocol.

What is the target end point we are talking about here? Is it an Infor suite or third party? and what is the security situation of your target end point? Are there any policies? or dependencies carried forward from the client request that is needed for the target end point authentication?

Legacy Contributor

Endpoint is Microsoft Azure AD, to create users. Am using oAuth2 security.

Token endpoint: login.microsoftonline.com/.../token

Target endpoint: graph.microsoft.com/.../users

Legacy Contributor

It seems to be a user specific OAuth2 grant - perhaps authorization code grant? (or in other words, what type of OAuth 2 grant works from postman? )

The bearer grant which is generated in "Try it out" is also using OAuth 2. But the token generated is tied with the current user logged into the IONAPI admin console. So either, the logged in user into Ming.le doesn't have the access to call the Azure API or the target is using another type of OAuth2 grant. In any case, the "Try it Out" page doesn't offer a place holder to specify authentication credentials (unless they are header parameters in the target I guess in which case its more like an input data parameter). And it seems the bearer token is not accepted by Azure.

Legacy Contributor

I am using grant_type- Client_crendentials and passing a valid client_id & client_secret.

What are the options available to make it work from ION API, without provisioning Current user to AzureAD?

Copyright © 2025 Infor. All rights reserved.