You are here:
Authentication Errors and Warnings - RaaS for Workday
Check out error and warning messages, reasons, and solutions for Restore as a Service (RaaS) authentication issues.
Error Message: 404: Invalid Token URL Error - We were unable to validate and add the service. Please enter the appropriate Token URL and try again.
Reason: If the entered Token URL is incorrect, tenant authentication fails and the service is not added.
Solution: Search for “View API Clients” report in global search and check for the field “Token Endpoint”. Ensure there are no typos in the URL when creating the service.
The Token Endpoint URL uses the following format: hostUrl/ccx/oauth2/<<tenant>>/token
Error Message 503: Service Unavailable Invalid Tenant Name - We were unable to validate and add the service. Please check the appropriate Tenant Name and try again.
Reason: If the entered tenant is incorrect, tenant authentication fails and the service is not added.
Solution: Search for the “Tenant Setup” report in global search and check for the “Tenant Name” on the results page. Ensure there are no typos for the “Tenant Name” in the “Token Endpoint” URL when creating the service.
The Token Endpoint URL uses the following format:hostUrl/ccx/oauth2/<<tenant>>/token
Error Message 401: Invalid Credentials - We were unable to validate and add the service. It could be due to an invalid Client, Client Secret or Refresh Token provided. Please enter the appropriate Client ID, Client Secret or Refresh token and try again.
Reason: If the entered Client ID, Client Secret, or Refresh Token is incorrect, authentication to the tenant will fail.
- Search for “View API Clients Report” in the global search. Check for the “Client ID” shown under the “API Clients for Integrations” tab for the API Client. Copy and paste the Client ID into the “Add Service” screen when creating the service.
- Search for “View API Clients Report” in the global search. A new Client Secret can be generated by clicking on the API Client related actions [API Client & Generate New Client Secret] under the “API Clients for Integrations” tab. Copy and paste the Client Secret into the “Add Service” screen when creating the service.
- Search for “View API Clients Report” in the global search. The Refresh Token for an existing API Client can be found by clicking the Refresh Tokens columns value. For the ISU User, the “Refresh Token” appears in a separate modal. Copy and paste the Refresh Token into the “Add Service” screen when creating the service.

