# Token Missing in the HTTP Request

**URL:** <https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043>\
**Category:** SHF Discussion and Questions\
**Tags:** workflows, sailpoint-identity-security\
**Created:** [March 27, 2024, 4:46pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043 "2024-03-27T16:46:04Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yoginder00](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/yoginder00/32/2509_2.png) [@Yoginder00](https://developer.sailpoint.com/discuss/u/Yoginder00)\
**Post date:** [March 27, 2024, 4:46pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/1 "2024-03-27T16:46:04Z")

</div>

I am facing an issue with the HTTP Request action in the workflow, The OAuth Client credentials flow is not able to generate the token and is failing to pass in the request.

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/1/174a9f85f65b13d11179058ce27e5364de37a668.png)

When I check it on the webhook the token is missing

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/a/aa5d7b523d8c680330f64db010f110f4fdea2e27.png)

I wanted to avoid using custom auth as we must make multiple calls in the flow. I have verified the client in the Postman also the same client is being used in the Source in my Pingone Connector.

Any help would be appreciated.

---

<div class="post-metadata">

**Author:** ![ipobeidi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ipobeidi/32/16000_2.png) [@ipobeidi](https://developer.sailpoint.com/discuss/u/ipobeidi)\
**Post date:** [March 27, 2024, 8:13pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/2 "2024-03-27T20:13:23Z")

</div>

How is the token returned through postman?  
What type of authentication you’re using?

---

<div class="post-metadata">

**Author:** ![Yoginder00](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/yoginder00/32/2509_2.png) [@Yoginder00](https://developer.sailpoint.com/discuss/u/Yoginder00)\
**Post date:** [March 29, 2024, 8:59am UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/3 "2024-03-29T08:59:28Z")

</div>

I am using client credentials flows,The token endpoint returns a bearer token that is then passed to the request URL.

---

<div class="post-metadata">

**Author:** ![Yoginder00](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/yoginder00/32/2509_2.png) [@Yoginder00](https://developer.sailpoint.com/discuss/u/Yoginder00)\
**Post date:** [March 29, 2024, 9:03am UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/4 "2024-03-29T09:03:04Z")

</div>

In the IDN workflow, we are using the HTTP Request action, and the API request is missing the token. Seems like the HTTP request action is not able to generate the token even though we are passing the right credentials.

This how requests look like in Postman

API Request

`REDACTED`

Token Request

`REDACTED`

---

<div class="post-metadata">

**Author:** ![ipobeidi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ipobeidi/32/16000_2.png) [@ipobeidi](https://developer.sailpoint.com/discuss/u/ipobeidi)\
**Post date:** [March 29, 2024, 1:54pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/5 "2024-03-29T13:54:43Z")

</div>

thx for sharing that. If I understood correctly you need to use a basic authentication to retrieve the token right?

Have you tried using the basic auth?

---

<div class="post-metadata">

**Author:** ![Yoginder00](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/yoginder00/32/2509_2.png) [@Yoginder00](https://developer.sailpoint.com/discuss/u/Yoginder00)\
**Post date:** [March 29, 2024, 4:48pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/6 "2024-03-29T16:48:25Z")

</div>

it’s not basic auth, we are passing the client credentials in the headers to get the token. and then that token is being used to access the API. This is a complete client credential flow.

---

<div class="post-metadata">

**Author:** ![ipobeidi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ipobeidi/32/16000_2.png) [@ipobeidi](https://developer.sailpoint.com/discuss/u/ipobeidi)\
**Post date:** [March 29, 2024, 4:54pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/7 "2024-03-29T16:54:34Z")

</div>

Asked because of this  
 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/6/6219591a8957d317971366fc529f86f426dfa10e.png)

So instead of selecting the Oauth one selec basic and see if it works.  
🙂

---

<div class="post-metadata">

**Author:** ![Yoginder00](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/yoginder00/32/2509_2.png) [@Yoginder00](https://developer.sailpoint.com/discuss/u/Yoginder00)\
**Post date:** [March 29, 2024, 5:12pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/8 "2024-03-29T17:12:30Z")

</div>

The basic auth works to get the token then I need to add additional HTTP action to make the request call. Which is what I am trying to avoid.

---

<div class="post-metadata">

**Author:** ![ipobeidi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ipobeidi/32/16000_2.png) [@ipobeidi](https://developer.sailpoint.com/discuss/u/ipobeidi)\
**Post date:** [March 29, 2024, 5:34pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/9 "2024-03-29T17:34:51Z")

</div>

Yeah , i see what you mean.  
But from a workflow perspective there’s no way at the moment for basic to have booth in the same step. I think this is a good thing to post in the ideas.

I think the order would be token request and endpoint

---

<div class="post-metadata">

**Author:** ![Yoginder00](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/yoginder00/32/2509_2.png) [@Yoginder00](https://developer.sailpoint.com/discuss/u/Yoginder00)\
**Post date:** [March 29, 2024, 5:58pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/10 "2024-03-29T17:58:55Z")

</div>

It works for the sailpoint API, Sailpoint API also passes the client credentials as basic auth headers. I have a different workflow in which I am using API calls to IdentityNow it works.

---

<div class="post-metadata">

**Author:** ![ipobeidi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ipobeidi/32/16000_2.png) [@ipobeidi](https://developer.sailpoint.com/discuss/u/ipobeidi)\
**Post date:** [March 29, 2024, 6:53pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/11 "2024-03-29T18:53:34Z")

</div>

You trying to do everything in the same request right? get the token and then post for the endpoint in a workflow correct?

---

<div class="post-metadata">

**Author:** ![Yoginder00](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/yoginder00/32/2509_2.png) [@Yoginder00](https://developer.sailpoint.com/discuss/u/Yoginder00)\
**Post date:** [March 30, 2024, 6:49am UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/12 "2024-03-30T06:49:39Z")

</div>

Yes, the HTTP Connector is designed to do that.

---

<div class="post-metadata">

**Author:** ![baoussounda](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/baoussounda/32/13095_2.png) [@baoussounda](https://developer.sailpoint.com/discuss/u/baoussounda)\
**Post date:** [March 30, 2024, 7:34am UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/13 "2024-03-30T07:34:16Z")

</div>

Hi @Yoginder00,

Could you confirm which type of credentials you used in your “HTTP Request” action?

Was it a Personal Access Token (PAT) or did you utilize OAuth Client credentials from [OAuth Clients | SailPoint Developer Community](https://developer.sailpoint.com/docs/api/v3/o-auth-clients) ?

I believe it’s PAT. Could you try using OAuth Client credentials instead by replacing your PAT credential ?

I’ve encountered a similar error with the HTTP request recently when I migrated my workflow to a different environment.

---

<div class="post-metadata">

**Author:** ![Yoginder00](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/yoginder00/32/2509_2.png) [@Yoginder00](https://developer.sailpoint.com/discuss/u/Yoginder00)\
**Post date:** [March 30, 2024, 7:12pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/14 "2024-03-30T19:12:18Z")

</div>

The Client\_credentials I am using for sailpoint are working as expected. The issue I am facing is with the Pingone Client Credentials flow. The token is not getting passed to http request.

---

<div class="post-metadata">

**Author:** ![Yoginder00](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/yoginder00/32/2509_2.png) [@Yoginder00](https://developer.sailpoint.com/discuss/u/Yoginder00)\
**Post date:** [March 30, 2024, 7:17pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/15 "2024-03-30T19:17:36Z")

</div>

The other issue is if I use custom auth, In which I am using 2 HTTP request one to generate the token and other to pass on the token. If I try to update the bearer request in the Request Header value using {{hTTPRequest1.body.access\_token}} its stuck on loading and new gets saved.

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/7/70926667831f189c9d3bc347433b14260e221eca.png)

---

<div class="post-metadata">

**Author:** ![ipobeidi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ipobeidi/32/16000_2.png) [@ipobeidi](https://developer.sailpoint.com/discuss/u/ipobeidi)\
**Post date:** [March 30, 2024, 7:55pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/16 "2024-03-30T19:55:01Z")

</div>

Use define Variable to grab the token and then use it on the request.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [May 29, 2024, 7:55pm UTC](https://developer.sailpoint.com/discuss/t/token-missing-in-the-http-request/38043/17 "2024-05-29T19:55:39Z")

</div>

Closed on May 29, 2024, 7:55pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
