OneLogin - OneLogin API returns 401 Unauthorized errors (4384015)

OneLogin API requests return a 401 Unauthorized response. The response does not include detailed validation guidance.

This may occur when an API client attempts to perform user-management actions, such as updating or creating a user.

A 401 Unauthorized response can occur when the API request is not authorized to complete the requested action. Common causes include:

• The request does not include a valid access token.
• The access token is expired, malformed, revoked, or otherwise invalid.
• The API credentials used by the integration do not have the required permission for the requested action.
• For user-management actions, the API credentials may be missing the Manage users permission.

1. Verify that the integration is generating and sending a valid access token with the API request.
2. Confirm that the access token has not expired or been revoked.
3. Review the API credentials used by the integration in the OneLogin admin portal.
4. Confirm that the API credentials have the permissions required for the API endpoint being called.
5. If the request is updating user details or passwords, confirm that the API credentials include the Manage users permission.
6. Generate new API credentials or a new access token if the current credentials or token are invalid.
7. Retry the API request after confirming the token and permissions are correct.