Forum Discussion

akshat's avatar
akshat
New Contributor II
8 months ago

Unable to call API in on premise environment in version 8.1

https://server/OneStreamApi/api/Authentication/LogonAndReturnCookie?api-version=5.2.0&appName=D&AzureTenantID=X&clientID=X&clientSecret=X
application/json 116
candidate(s) found for the request path '/api/Authentication/LogonAndReturnCookie'
Endpoint 'OneStreamWebApi.V520.Controllers.AuthenticationController.LogonAndReturnCookie with route pattern 'api/Authentication/LogonAndReturnCookie' is valid for the request path '/api/Authentication/LogonAndReturnCookie'
Request matched endpoint 'OneStreamWebApi.V520.Controllers.AuthenticationController.LogonAndReturnCookie (OneStreamWebApi)'
TokenExchange was not authenticated. Failure message: Unable to authenticate against internal users. Error: Unable to log on user. Azure did not provide a valid user name claim. (Claims presen

Application Properties
  • Krishna's avatar
    Krishna
    Valued Contributor
    8 months ago

    akshat  - I would recommend creating a support ticket with OS. To make sure the API request & header information are correct.  Are you using Postman to test the API call?

  • JackLacava's avatar
    JackLacava
    Honored Contributor
    8 months ago

    I believe, as it says, that it won't authenticate against internal users. You have to specify an external user.

    From the doc: "Web API must be installed on a web server and configured for external authentication providers supporting OAuth2.0/OpenID Connect authorization protocol. Identity providers currently supported are Azure AD (Microsoft Entra ID), Okta, and PingFederate. "