# OIDC token request results in failure multiple\_client\_credentials

**URL:** <https://devforum.okta.com/t/oidc-token-request-results-in-failure-multiple-client-credentials/207>\
**Category:** OAuth/OIDC\
**Created:** [July 5, 2017, 8:39pm UTC](https://devforum.okta.com/t/oidc-token-request-results-in-failure-multiple-client-credentials/207 "2017-07-05T20:39:38Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![eatclub](https://avatars.discourse-cdn.com/v4/letter/e/2acd7d/32.png) [@eatclub](https://devforum.okta.com/u/eatclub)\
**Post date:** [July 5, 2017, 8:39pm UTC](https://devforum.okta.com/t/oidc-token-request-results-in-failure-multiple-client-credentials/207/1 "2017-07-05T20:39:38Z")

</div>

When trying to complete an OIDC authentication the app.oauth2.token.grant event shows up in the logs as “failure multiple\_client\_credentials” and a 401 is returned.

I can’t find any documentation on what this means and am using a client library to generate requests which are working with other OIDC providers.

Thanks

---

<div class="post-metadata">

**Author:** ![john.gronberg](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/john.gronberg/32/2_2.png) [@john.gronberg](https://devforum.okta.com/u/john.gronberg)\
**Post date:** [July 5, 2017, 9:22pm UTC](https://devforum.okta.com/t/oidc-token-request-results-in-failure-multiple-client-credentials/207/2 "2017-07-05T21:22:34Z")

</div>

It is likely that the client library is passing client credentials in both the headers and post body of the API call. Okta does not allow this, while some other providers may be more lax in this requirement. You can pass the credentials in one of these but not both.

---

<div class="post-metadata">

**Author:** ![eatclub](https://avatars.discourse-cdn.com/v4/letter/e/2acd7d/32.png) [@eatclub](https://devforum.okta.com/u/eatclub)\
**Post date:** [July 5, 2017, 9:43pm UTC](https://devforum.okta.com/t/oidc-token-request-results-in-failure-multiple-client-credentials/207/3 "2017-07-05T21:43:44Z")

</div>

Perfect, working now. Thanks for such a prompt response!

---

<div class="post-metadata">

**Author:** ![shawn.recinto](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/shawn.recinto/32/38_2.png) [@shawn.recinto](https://devforum.okta.com/u/shawn.recinto)\
**Post date:** [July 18, 2017, 8:41pm UTC](https://devforum.okta.com/t/oidc-token-request-results-in-failure-multiple-client-credentials/207/4 "2017-07-18T20:41:29Z")

</div>

Hey guys,  
I want to add that I ran into this for OIDC with the Amazon Echo (Alexa) the solution for this error is to select “Credentials in request body” for the “Client Authentication Scheme”

---

<div class="post-metadata">

**Author:** ![mraible](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/mraible/32/37_2.png) [@mraible](https://devforum.okta.com/u/mraible)\
**Post date:** [July 19, 2017, 3:01pm UTC](https://devforum.okta.com/t/oidc-token-request-results-in-failure-multiple-client-credentials/207/5 "2017-07-19T15:01:32Z")

</div>

Thanks for the tip Shawn!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [January 12, 2024, 7:08pm UTC](https://devforum.okta.com/t/oidc-token-request-results-in-failure-multiple-client-credentials/207/6 "2024-01-12T19:08:34Z")

</div>

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.