Troubleshooting Authentication for External Applications - Troubleshooting Authentication for External Applications - Content Innovation Cloud - Content Innovation Cloud Administration Portal - Current/Content-Innovation-Cloud-Administration-Portal/ool1685553055623 - Current - Current

Content Innovation Cloud Administration Portal
Platform
Content Innovation Cloud
Product
Content Innovation Cloud Administration Portal
Release
Current
License
ft:lastPublication
2026-10-12T22:05:18.726342
ft:locale
en-US

When a registered external application attempts to authenticate with the Content Innovation Cloud, authentication fails with a 400 response.

Incorrect Client ID

If the response contains the error invalid_client, the external application may be sending the wrong value for the client ID.

  1. Open the Administration Portal.
  2. Select the External Systems tab under the banner.
    The External Applications page is displayed.
  3. Select the external application.
  4. Find the ID in the Application ID field.
  5. Click Copy to copy the ID.
  6. Update the client ID in the configuration for the integrating service or application.

Incorrect Client Secret

If the response contains the error invalid_client, the external application may be sending the wrong value for the client secret.

Use the Administration Portal to reset the client secret for the external application as described under Resetting the Secret for an External Application. Then, copy the new client secret value to the configuration for the integrating service or application.

Unsupported Grant Type

If the response contains the error unsupported_grant_type, the external application may be sending the wrong value in the grant_type field of the token request.

Make sure the application is using the correct grant type as described in the following table:

Application Type Expected Grant Types
Service Application

In most cases, service applications should request access tokens using a grant_type value of client_credentials.

Service applications must use the custom API Credentials grant type when requesting tokens using an OpenID Connect scope. In this case, the token request should have a grant_type value of urn:hyland:params:oauth:grant-type:api-credentials.
Web Server Application

Web Server applications should request access tokens using a grant_type value of authorization_code.