I am not able to get access token using grant type password here is my request format. ---------------------------------------------------------------------------------------------- curl --location --request POST '<https://host-name>/oxauth/restv1/token' \ --header 'Content-Type: application/x-www-form-urlencoded' \ --header 'Authorization: Basic <base64 encoded [client-id:Client Secret]>' \ --data-urlencode 'username=some-username' \ --data-urlencode 'password=some-password' \ --data-urlencode 'grant_type=password' \ --data-urlencode 'scope=openid' I am expecting the following response. ------------------------------------------------------- { "access_token":"26d55e4b-6c61-40ea-9763-3282f5db0f0e", "token_type":"bearer", "expires_in":3599, "refresh_token":"aba91bd9-aa10-4fca-952b-50a9a9afac28", "scope":"openid", "id_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwczpcL1wvc2VlZC5nbHV1Lm9yZyIsInVzZXJfaWQiOiJtaWtlIiwiYXVkIjoiQCExMTExITAwMDghRkY4MSEyRDM5IiwiZXhwIjoxMzM5MTk2ODgxMzAzLCJveEludW0iOiJAITExMTEhMDAwMCFENEU3Iiwib3hWYWxpZGF0aW9uVVJJIjoiaHR0cHM6XC9cL3NlZWQuZ2x1dS5vcmdcL294YXV0aFwvc2VhbVwvcmVzb3VyY2VcL3Jlc3R2MVwvb3hhdXRoXC9jaGVja19zZXNzaW9uIiwib3hPcGVuSURDb25uZWN0VmVyc2lvbiI6Im9wZW5pZGNvbm5lY3QtMS4wIn0.SzWfJsmlz62qTRw1lEJZ8PygY9eRupgmsbXLCQwPVDQ" } But It is throwing the following error. ------------------------------------------------------------------------------- { "reason": "Invalid user.", "error_description": "Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client.", "error": "invalid_client" } Here my client credentials and user credentials are valid. --------