RAMAKRISHNA NALLA
Hi,
Thank you for your response earlier. It was very helpful.
I can now see my ACO in the list and have successfully generated the client credentials. However, I'm unable to obtain an access token. I'm consistently receiving a 403 Forbidden error.
I used the following token endpoint:
https://api.bcda.cms.gov/auth/token
I also used the generated Client ID and Client Secret to request the access token.
To verify my implementation, I tested the same process against the Sandbox environment, where I was able to obtain an access token without any issues.
Could you please let me know what might be causing this issue in the production environment?
Thank you in advance for your assistance.
Best regards,
Ramakrishna
Beneficiary Claims Data API (BCDA) Community
Hi Ramakrishna,
Sorry for the trouble requesting a token from the production API.
The 403 responses you've received are consistent with making API requests from an IP address that is not on the allow list. Please confirm that your API client's IP address has been added to the allow list for your organization in ACO-MS.
Additionally, some common API clients, like the Postman Web Client, will send requests from their own web server by default. If you are using the Postman Web Client, please check that any proxy settings for your API client are set to use one of your organization's allowed IP addresses. Alternatively, try making a request from the Postman Desktop Client or another API client. The Postman Desktop Client allows you to view the network information from the request in the console. Postman has some documentation on how to do this here.
Please let us know if you continue to have this issue after confirming you have taken the steps above.
Thanks,
The BCDA Team