# Getting Invalid access token

**URL:** <https://devforum.zoom.us/t/getting-invalid-access-token/1743>\
**Category:** API and Webhooks\
**Created:** [September 24, 2018, 8:16pm UTC](https://devforum.zoom.us/t/getting-invalid-access-token/1743 "2018-09-24T20:16:37Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aswin\_R](https://avatars.discourse-cdn.com/v4/letter/a/c4cdca/32.png) [@Aswin\_R](https://devforum.zoom.us/u/Aswin_R)\
**Post date:** [September 24, 2018, 8:16pm UTC](https://devforum.zoom.us/t/getting-invalid-access-token/1743/1 "2018-09-24T20:16:37Z")

</div>

Hello,&nbsp; I am trying to use the API using OAuth2.&nbsp; I am able to get an access token via postman but when I make a simple request to fetch users via&nbsp;[https://api.zoom.us/v2/users](https://api.zoom.us/v2/users) I keep getting&nbsp;

{  
“code”: 124,  
“message”: “Invalid access token.”  
}

I am using grant type client\_credentials and using my id and secret.&nbsp;

I have granted all the scopes possible in my marketplace app settings.

Please can you assist?&nbsp; Thank you

&nbsp;

---

<div class="post-metadata">

**Author:** ![michael\_p.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_p.zoom/32/18105_2.png) [@michael\_p.zoom](https://devforum.zoom.us/u/michael_p.zoom)\
**Post date:** [September 24, 2018, 8:51pm UTC](https://devforum.zoom.us/t/getting-invalid-access-token/1743/2 "2018-09-24T20:51:00Z")

</div>

Hi Awein,

You can no longer call our most APIs using Client Credentials. The only one you can call is the sendmessage API. To make the v2/users call you will need to use JWT or User Authentication -&nbsp;[https://devdocs.zoom.us/docs/authorization/oauth-with-zoom/authentication-example.&nbsp;](https://devdocs.zoom.us/docs/authorization/oauth-with-zoom/authentication-example.%C2%A0)

Thanks

---

<div class="post-metadata">

**Author:** ![Aswin\_R](https://avatars.discourse-cdn.com/v4/letter/a/c4cdca/32.png) [@Aswin\_R](https://devforum.zoom.us/u/Aswin_R)\
**Post date:** [September 24, 2018, 9:01pm UTC](https://devforum.zoom.us/t/getting-invalid-access-token/1743/3 "2018-09-24T21:01:07Z")

</div>

Thanks Nigel for responding.&nbsp; I am using SailPoint to manage zoom users.&nbsp; There is not going to be any user interaction.&nbsp; In the document you referred to, the first step is to get the “code” and your API will route the user to redirect\_url.&nbsp; However because&nbsp;of lack of user interaction our SailPoint system does not know how to handle the redirect.

There is however another method in SailPoint called API Token grant type that I want to try.&nbsp; Can you please point me to some docs that shows me sample code to use Zoom’s API id/secret and make API calls?&nbsp;&nbsp;

---

<div class="post-metadata">

**Author:** ![michael\_p.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_p.zoom/32/18105_2.png) [@michael\_p.zoom](https://devforum.zoom.us/u/michael_p.zoom)\
**Post date:** [September 24, 2018, 9:10pm UTC](https://devforum.zoom.us/t/getting-invalid-access-token/1743/4 "2018-09-24T21:10:20Z")

</div>

Hi Awsin,&nbsp;

Here are the docs to use Zoom APIs for JWT with sample code -&nbsp;[https://devdocs.zoom.us/docs/jwt](https://devdocs.zoom.us/docs/jwt). You can get your API Key/Secret from here -&nbsp;[https://developer.zoom.us/me/#.&nbsp;](https://developer.zoom.us/me/#.%C2%A0)

Thanks

---

<div class="post-metadata">

**Author:** ![Aswin\_R](https://avatars.discourse-cdn.com/v4/letter/a/c4cdca/32.png) [@Aswin\_R](https://devforum.zoom.us/u/Aswin_R)\
**Post date:** [September 24, 2018, 9:11pm UTC](https://devforum.zoom.us/t/getting-invalid-access-token/1743/5 "2018-09-24T21:11:28Z")

</div>

I meant an example on how to use the following API creds.

 ![](https://support.zoom.us/hc/user_images/XHVZpsRKzAW1YP4COjLpvg.png)

---

<div class="post-metadata">

**Author:** ![Aswin\_R](https://avatars.discourse-cdn.com/v4/letter/a/c4cdca/32.png) [@Aswin\_R](https://devforum.zoom.us/u/Aswin_R)\
**Post date:** [September 24, 2018, 9:12pm UTC](https://devforum.zoom.us/t/getting-invalid-access-token/1743/6 "2018-09-24T21:12:22Z")

</div>

Thanks Nigel.&nbsp; We can unfortunately&nbsp; not use JWT since SailPoint requires that I encrypt the JWT however Zoom does not support JWE.

&nbsp;
