# Custom Authentication - Message: 403 : Forbidden, HTTP Error Code: 403 **URL:** \ **Category:** IIQ Discussion and Questions\ **Tags:** webservice-connector, identityiq\ **Created:** [August 1, 2024, 10:28am UTC](https://developer.sailpoint.com/discuss/t/custom-authentication-message-403-forbidden-http-error-code-403/75091 "2024-08-01T10:28:41Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![mirnalini\_chandiran](https://avatars.discourse-cdn.com/v4/letter/m/90ced4/32.png) [@mirnalini\_chandiran](https://developer.sailpoint.com/discuss/u/mirnalini_chandiran)\ **Post date:** [August 1, 2024, 10:28am UTC](https://developer.sailpoint.com/discuss/t/custom-authentication-message-403-forbidden-http-error-code-403/75091/1 "2024-08-01T10:28:41Z")
## Which IIQ version are you inquiring about? 8.2p4 ## Share all details about your problem, including any error messages you may have received. We have configured Custom Authentication for a WebService Application. Aggregation and Provisioning operations worked initially. But after 2 days we see that the below error is encountered: > _Exception occurred while performing ‘Create’ operation on identity ‘testuser1’: Url: [appname.com](https://test-api.appname.com/v1/users), Message: 403 : Forbidden, HTTP Error Code: 403_ This error was occurring intermittently but from today this is error is existing and we are not able to perform any Aggregation or Provisioning operations. Thanks Mirnalini ---
**Author:** ![dylanfoggan](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/dylanfoggan/32/13658_2.png) [@dylanfoggan](https://developer.sailpoint.com/discuss/u/dylanfoggan)\ **Post date:** [August 1, 2024, 10:49am UTC](https://developer.sailpoint.com/discuss/t/custom-authentication-message-403-forbidden-http-error-code-403/75091/2 "2024-08-01T10:49:24Z")
Hi @mirnalini_chandiran , If the authentication was previously working as you mentioned. Could you perhaps please try and execute the request through Postman and share the response provided? Thanks, ---
**Author:** ![mirnalini\_chandiran](https://avatars.discourse-cdn.com/v4/letter/m/90ced4/32.png) [@mirnalini\_chandiran](https://developer.sailpoint.com/discuss/u/mirnalini_chandiran)\ **Post date:** [August 1, 2024, 10:54am UTC](https://developer.sailpoint.com/discuss/t/custom-authentication-message-403-forbidden-http-error-code-403/75091/3 "2024-08-01T10:54:25Z")
Hi Dylan, Yes, from Postman it is working. Getting 200 OK response Thanks Mirnalini C ---
**Author:** ![enistriminsait](https://avatars.discourse-cdn.com/v4/letter/e/58f4c7/32.png) [@enistriminsait](https://developer.sailpoint.com/discuss/u/enistriminsait)\ **Post date:** [August 1, 2024, 10:55am UTC](https://developer.sailpoint.com/discuss/t/custom-authentication-message-403-forbidden-http-error-code-403/75091/4 "2024-08-01T10:55:54Z")
Hi @mirnalini_chandiran, do you use tokens for authentication ? ---
**Author:** ![mirnalini\_chandiran](https://avatars.discourse-cdn.com/v4/letter/m/90ced4/32.png) [@mirnalini\_chandiran](https://developer.sailpoint.com/discuss/u/mirnalini_chandiran)\ **Post date:** [August 1, 2024, 11:07am UTC](https://developer.sailpoint.com/discuss/t/custom-authentication-message-403-forbidden-http-error-code-403/75091/5 "2024-08-01T11:07:18Z")
Yes, we have configured Custom Authentication operation in which token is generated in the response attribute mapping and that token is used in all the Operations in the header Key: Authorization Value: Bearer $application.at$ “at” is the access\_token ---
**Author:** ![enistriminsait](https://avatars.discourse-cdn.com/v4/letter/e/58f4c7/32.png) [@enistriminsait](https://developer.sailpoint.com/discuss/u/enistriminsait)\ **Post date:** [August 1, 2024, 11:16am UTC](https://developer.sailpoint.com/discuss/t/custom-authentication-message-403-forbidden-http-error-code-403/75091/6 "2024-08-01T11:16:56Z")
ok, I did something similar but I do the call for token in beforeOperation rule of aggregation. In this rule, I write the token in the header of the requestEndPoint and return it. Are you doing the same? Later, use the same rule for printing the headers and the body for be sure all its correct. Also, you can active the webservice connector logs for keeping more informations. This error occurs if you dont have permission(credential/token) or for some restriction, geographic for example. One more control could be check the communication from SP and webservice, maybe someone has implemented some network rule after 2 days ---
**Author:** ![Arun-Kumar](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/arun-kumar/32/15128_2.png) [@Arun-Kumar](https://developer.sailpoint.com/discuss/u/Arun-Kumar)\ **Post date:** [August 1, 2024, 11:21am UTC](https://developer.sailpoint.com/discuss/t/custom-authentication-message-403-forbidden-http-error-code-403/75091/7 "2024-08-01T11:21:52Z")
Something is blocking this request. 1. Did you try the curl from server and get any response? 2. Could you please share the response body of this request? ---
**Author:** ![dylanfoggan](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/dylanfoggan/32/13658_2.png) [@dylanfoggan](https://developer.sailpoint.com/discuss/u/dylanfoggan)\ **Post date:** [August 1, 2024, 11:41am UTC](https://developer.sailpoint.com/discuss/t/custom-authentication-message-403-forbidden-http-error-code-403/75091/8 "2024-08-01T11:41:37Z")
As mentioned above the error is related to insufficient permissions to retrieve a response from the server. Another thing I would recommend you check if any **cookies** are required to be sent in the request. There are some specific cookies the WebService connector doesn’t set on the application XML in session which could perhaps be restricting you. Thanks, ---
**Author:** ![bhanuprakashkuruva](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/bhanuprakashkuruva/32/22154_2.png) [@bhanuprakashkuruva](https://developer.sailpoint.com/discuss/u/bhanuprakashkuruva)\ **Post date:** [September 5, 2024, 5:24pm UTC](https://developer.sailpoint.com/discuss/t/custom-authentication-message-403-forbidden-http-error-code-403/75091/9 "2024-09-05T17:24:32Z")
Hi @mirnalini_chandiran The 403 Forbidden error is an HTTP status code that indicates a client doesn’t have permission to access a web page or serve. So, check with the webservice team that whatever the credentials you are using have the right permission or not and correct or not. And also, you confirmed that it is also not working. So, you have to check with them and get the correct credentials. ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [November 4, 2024, 5:24pm UTC](https://developer.sailpoint.com/discuss/t/custom-authentication-message-403-forbidden-http-error-code-403/75091/10 "2024-11-04T17:24:33Z")
Closed on November 4, 2024, 5:24pm UTC This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.