Cerner Sandbox Environment - invalid_client

[Alex Krasov]

Hello,

I have an issue with authorization 

App ID - cf4fc828-5365-47d8-ba2d-a775bbbb0213

Client ID - 5a5943cd-da37-4c3c-9ab0-0fc05388af5d

First of all, I send request to get code:
https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/protocols/oauth2/profiles/smart-v1/personas/patient/authorize?response_type=code&client_id=5a5943cd-da37-4c3c-9ab0-0fc05388af5d&state=a4c16a46-2c46-482c-8d66-4cc4a2990bda&scope=patient/AllergyIntolerance.read patient/Appointment.read patient/Condition.read patient/Device.read patient/DiagnosticReport.read patient/Encounter.read patient/Immunization.read patient/MedicationOrder.read patient/MedicationStatement.read patient/Observation.read patient/Patient.read patient/Procedure.read offline_access&redirect_uri=https://app-stage.medikarma.com/login&aud=https://fhir-myrecord.cerner.com/dstu2/ec2458f2-1e24-41c8-b71b-0e701af7583d

as response receive code and state. 

But on next step, when I send request to get access token with Authorization Basic header to:

https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/protocols/oauth2/profiles/smart-v1/token?grant_type=authorization_code&code=cc1fefeb-f8d1-4083-8ea9-5d7c20f5b6f5&redirect_uri=https://app-stage.medikarma.com/login

I get the error:

{

"error": "invalid_client",

"error_uri": "https://authorization.cerner.com/errors/urn%3Acerner%3Aerror%3Aauthorization-server%3Aoauth2%3Atoken%3Ainvalid-client-credentials/instances/4405946e-f0d3-45f6-bac4-dcf06c093461?client=unknown&tenant=ec2458f2-1e24-41c8-b71b-0e701af7583d"

}

Correlation ID: 4405946e-f0d3-45f6-bac4-dcf06c093461

What is wrong? Could you assist?

Thank you

[Fenil Desani (Cerner)]

Hello,

Since yours is a confidential App, you need to make sure you are passing in correct client credentials in the Authorization Basic header.

Briefly looking at your configuration, seems like you are using a clientID purposed for client's non-prod environments, and hence would not work with our public Sandbox.

You need to use the App with clientID: e058*** and its associated client secret.
Or create a new System App in CernerCentral, register the confidential Patient App using that new system Account, and then use this new App to connect with out public Sandbox.

Thanks,

Fenil