invalid_client - public sandbox

[Ryan Vandenberg]

Cerner Team:

We have secured a System Account including an account ID and client ID.
We have created an account in the Code Console and entered our provisioned ID.

We are sending a POST with base64 encoded information to this URL:
https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/protocols/oauth2/profiles/smart-v1/token
Payload: 'grant_type=client_credentials&scope=system%2FAppointment.read%20system%2FPatient.read%20system%2FLocation.read%20system%2FPractitioner.read'

We are observing: "error": "invalid_client".
Per this forum's instructions, we are reporting: `Correlation ID: a943d10c-6359-4f8a-8280-8c3446de9da0`

We have reviewed other posts to this forum and observed others having the same problem. It seems it is most frequently resolved offline from the forum.

We submitted this ticket earlier this month but it appears to have been deleted. We would very much appreciate help moving this along. We are creating this app on behalf of current Cerner customers.

Respectfully,
Ryan V.

ryan+...@aspirevc.com
MedStatix, Inc

[Aaron McGinn (Cerner)]

Apologies for the missing conversation -- we are looking into what happened.

I see this error in the logs:

TokenRequestException: The provided authorization header credentials were invalid

Are you providing the Authorization header as described in our documentation [1] using the account/secret from CernerCentral [2]?

[1] https://fhir.cerner.com/authorization/#requesting-authorization-on-behalf-of-a-system

[2] https://cernercentral.com/system-accounts/

-Aaron (Cerner)

[Ryan Vandenberg]

Thanks, Aaron - I can confirm we are providing the Authorization header as described in your documentation. We also tried to created a new secret and wait the recommended 15-20 minutes.

When we use the account ID rather than the client ID, we receive the message:  "The application is no longer registered"

Correlation ID: 5a9ce7ec-40e9-47be-93b5-4a47c3a205aa

Can you provide any insight?

Thank you for your assistance.

Ryan V.

MedStatix, Inc

[Aaron McGinn (Cerner)]

Did you use your system account ID as the UUID when you created the app in the console? The system account ID and the Client ID should be synonymous.

-Aaron (Cerner)

[Ryan Vandenberg]

We appreciate your assistance, Aaron. 

That's correct; we used the Account ID provided in the email with subject line "System Account Issued" to register the application.
In our "My Accounts" section of CernerCentral the same UUID appears underneath column heading "Account ID".

Ryan V.

MedStatix, Inc

[Ryan Vandenberg]

We have created a new application and are now able to move forward. Thank you for your responses. 

You can consider this ticket closed.