Web Services Only User Can Make Soap Calls but Rest Calls Fail with 401 Authorization Required

(Doc ID 2354976.1)

Last updated on MARCH 12, 2018

Applies to:

Oracle BigMachines CPQ Cloud Service - Version 2016 R2 and later
Information in this document applies to any platform.


When submitting a SOAP call to a CPQ Cloud site as a Web Services Only User, the call returns successfully. Submitting a REST call to the site with the same credentials returns a "401 Authorization Required" error. Checking the bm.log after the failed REST call will show the following error message:

[ERROR] com.bm.xchange.rest.filters.request.RestAuthenticationFilter.filter(RestAuthenticationFilter.java:75) - Rest authentication failed
Please reset your password. Your password has expired.

If the user is changed to a normal user and attempts to login directly to the site, they will see that their password is expired. But if SOAP calls work for a Web Services Only User, REST calls are also expected to work.


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms