Retool Application API Integration "Error authenticating: Forbidden. Errors reported by remote server: Invalid JSON: Unexpected character"
Dec 29, 2025
Okta Classic Engine
Okta Identity Engine
Okta Integration Network
Overview
Retool Application API integration flow fails with the following error visible in the Okta dashboard:
Please review the form to correct the following error(s):
Error authenticating: Forbidden. Errors reported by remote server: Invalid JSON: Unexpected character ('<' (code 60)): expected a valid value (JSON String, Number, Array, Object or token 'null', 'true' or 'false') at [Source: (String)"<!doctype html><meta charset="utf-8"><meta name=viewport content="width=device-width, initial-scale=1"><title>403</title>403 Forbidden"; line: 1, column: 2]
Applies To
- Retool
- Provisioning
- Error
Cause
This error is generated by Retool. The Retool API token used for creating the API connection does not have the correct permissions on the Retool side.
Solution
- Refer to the Retool Configuration Guide to generate a token with the correct permissions in Retool. API tokens with the SCIM API scope are available for generation in the organization's API settings section.
- Go to Retool Settings > API and click Create new to generate an access token.
- Enter a name and description, then select the required scopes.
- Ensure the token is copied and saved now, as it will not be accessible again after this initial display.
- Go to Okta Admin Console and navigate to Applications > Applications > Retool > Provisioning > Integration > click the Edit button.
- Enter the Retool SCIM API access token.
- Click Test API Credentials, verify if the connection was successful, and click Save.
Related References
