Skip to main content

When calling the /restapi/oauth/token endpoint I can successfully retrieve a token when I use the Admin account related to the client specified on the developer portal.

Our requirement is that individual users are able to retrieve their own OAuth token using their credentials (Username, Password & Extension) whilst still using the Client Id/Secret to make RingOut calls.

Unfortunately whenever I attempt to get a token using an account other than the Admin it receive an error code OAU-140 (Invalid resource owner credentials) despite being able to login to the RingCentral phone app with the same credentials.

Am I missing something with how the system operates? It is my understanding that this should be possible and that I can use the extension to make RingOut calls after authorizing using the individuals credentials; should this be allowed? Is this not how the system is intended to be used? If it is intended to be used this way then how can I get around this problem?

Thanks,

Snakeboard

This is weird and must be a mistake somewhere because any user under the same account should be able to login with its own credentials.

Are you working on the sandbox environment or the production? Make sure that other users are under the same the account with the admin one.

Did you try to login with the main company number and the extension number with the password of that extension?

Did you also try to login with the extension's phone number w/o the extension number and the password of that extension?

If you have tried all the above and it still does not work, let me know your account main company number and the app name (or the client Id) so I can have a look at it.


Reply