Assistance Needed: Script Fetches Quote Data but Fails for OrderLine in Infor OS ION API

rsbadger · 2025-03-25T18:10:30+00:00

There was an error rendering this rich post.

Hello Infor Community,

I’m reaching out for assistance with a Python script I’m developing to fetch data from the Infor OS ION API. The script is intended to retrieve Quote and OrderLine records for the ZOELLERPUMP_TST tenant and save them into Delta tables in Microsoft Fabric. While the script successfully fetches Quote records, it fails to fetch OrderLine records, and I’m also encountering authentication issues that I’ve been unable to resolve. I’d appreciate any guidance or insights from the community to help me complete this script.

Background

Objective: The script fetches Quote and OrderLine data from the Infor OS ION API and saves it into Delta tables (Quotes and OrderLines) in Microsoft Fabric for downstream analysis.
Environment:
- Tenant: ZOELLERPUMP_TST
- API Base URL: https://cpqks.inforcloudsuite.com/RuntimeApi/EnterpriseQuoting/Entities
- Token Endpoint: https://mingle-sso.inforcloudsuite.com/ZOELLERPUMP_TST/as/token.oauth2
- Platform: Microsoft Fabric (using PySpark for data processing)
- Script Version: 20250321-10
Authentication: Using OAuth2 with client_credentials grant type. I’ve been provided with a client_id and client_secret, which my manager confirms are correct.

The script successfully fetches Quote records, indicating that authentication and API access work for that entity. However, it fails to fetch OrderLine records, and I’m also encountering persistent authentication errors that prevent the script from running fully.

ssue 1: Authentication Failure with "Invalid ClientId" Error

Description: The script fails to authenticate with the Infor OS ION API, returning an Invalid ClientId error despite using credentials confirmed as correct by my manager.

Error Log (from script version 20250321-08):

textCollapseWrapCopy2025-03-21 18:39:44,211 - __main__ - ERROR - Failed to retrieve OAuth token from https://mingle-sso.inforcloudsuite.com/ZOELLERPUMP_TST/as/token.oauth2: 400 - {"error":"invalid_grant","error_trace_id":"Root=1-67ddb26f-770490ff6a21fa7d43a8dff3","error_description":"unauthorized_client: Invalid ClientId"}...2025-03-21 18:39:44,212 - __main__ - INFO - Attempting to retrieve token from: https://mingle-sso.inforcloudsuite.com/as/token.oauth22025-03-21 18:39:44,305 - __main__ - ERROR - Failed to retrieve OAuth token from https://mingle-sso.inforcloudsuite.com/as/token.oauth2: 400 - {"error":"invalid_grant","error_trace_id":"Root=1-67ddb270-68e873c266274ffb085792ee","error_description":"unauthorized_client: Invalid ClientId"}...2025-03-21 18:39:44,306 - __main__ - ERROR - Authentication test failed: All token URL attempts failed. Verify base_token_url, token_paths, client_id, and client_secret.

Details:

The script uses the client_credentials grant type to request an OAuth2 token.
Token endpoints tried:
- https://mingle-sso.inforcloudsuite.com/ZOELLERPUMP_TST/as/token.oauth2
- https://mingle-sso.inforcloudsuite.com/as/token.oauth2 (fallback without tenant)
The script has been updated to try both passing credentials in the request body and using Basic Auth in the Authorization header, but the error persists.
My manager confirms the client_id and client_secret are correct, so the issue might be with the token endpoint, tenant ID (ZOELLERPUMP_TST), or required scope.

Questions:

Is https://mingle-sso.inforcloudsuite.com/ZOELLERPUMP_TST/as/token.oauth2 the correct token endpoint for the ZOELLERPUMP_TST tenant? If not, what should it be?
Does the client_credentials grant type require a specific scope for this tenant? If so, what scope should I include in the token request?
Could the Invalid ClientId error indicate a tenant mismatch or a configuration issue on the Infor side?

Issue 2: Script Fetches Quote Records but Not OrderLine Records

Description: Assuming authentication succeeds (as it does for Quote data), the script successfully fetches Quote records but fails to fetch OrderLine records. I suspect the OrderLine endpoint might be incorrect or requires different permissions.

Script Details:

Base URL: https://cpqks.inforcloudsuite.com/RuntimeApi/EnterpriseQuoting/Entities
Quote Endpoint: https://cpqks.inforcloudsuite.com/RuntimeApi/EnterpriseQuoting/Entities/Quote (working)
OrderLine Endpoint: https://cpqks.inforcloudsuite.com/RuntimeApi/EnterpriseQuoting/Entities/OrderLine (not working)
The script logs detailed responses for each API call, but I don’t have the latest logs for the OrderLine fetch since authentication is currently failing.

Potential Causes:

The OrderLine endpoint might be incorrect. Possible alternatives could be /OrderLines (plural), /OrderItem, or a different path like /Orders/OrderLine.
The client_id might lack permissions to access OrderLine data, even though it can access Quote data.
There might be no OrderLine records available for the ZOELLERPUMP_TST tenant, though I’d expect an empty response ({"items": []}) rather than an error.

Questions:

Is /OrderLine a valid endpoint under the Enterprise Quoting API suite? If not, what is the correct endpoint for fetching order line items?
Does accessing OrderLine data require a specific scope or additional permissions compared to Quote data?
How can I confirm the correct endpoint for OrderLine using the Infor OS Portal or API Gateway?

Issue 3: Schema Not Found Error in Microsoft Fabric

Description: Even when the script runs partially, it encounters a schema error when trying to verify the created tables in Microsoft Fabric.

Error Log (from script version 20250321-08):

textCollapseWrapCopy2025-03-21 18:39:48,542 - __main__ - ERROR - Failed to show tables: [SCHEMA_NOT_FOUND] The schema `My workspace.Test_Lakehouse_SB.9lsi0trfe9ln6s31c...` cannot be found. Verify the spelling and correctness of the schema and catalog.

Details:

The script uses the schema 9lsi0trfe9ln6s31c..., which matches the output of SELECT current_database() in Microsoft Fabric.
The error suggests Spark is interpreting the schema as My workspace.Test_Lakehouse_SB.9lsi0trfe9ln6s31c..., likely due to a catalog or namespace issue.
I’ve updated the script to remove the default Test_Lakehouse_SB schema and confirm the lakehouse_schema value, but I haven’t been able to test this fix due to the authentication failure.

Questions:

Is there a specific way to handle schema names in Microsoft Fabric when using PySpark with Infor data?
Could this error be related to how the script constructs table names (e.g., `9lsi0trfe9ln6s31c...`.Quotes)?

Script Snippet

Here’s the relevant part of the script (version 20250321-10) that handles authentication and data fetching, for reference (see attached).

What I Need Help With
I’m looking for assistance with the following:

Authentication:
Confirm the correct OAuth2 token endpoint for the ZOELLERPUMP_TST tenant.
Identify any required scope or configuration to resolve the Invalid ClientId error.
OrderLine Endpoint:
Verify the correct endpoint for OrderLine data in the Enterprise Quoting API suite (or another suite if applicable).
Confirm if additional permissions are needed to access OrderLine data.
Schema Issue in Microsoft Fabric:
Guidance on handling schema names in Microsoft Fabric to avoid the SCHEMA_NOT_FOUND error.
Any insights, suggestions, or examples from your experience with the Infor OS ION API would be greatly appreciated. I can provide additional logs or script details if needed. Thank you in advance for your help!

Best regards,

Scott Badger

System Analyst/Power BI Developer

Find more posts tagged with

Comments

rsbadger

Please find the following code snippet:

OAuth Token Retrieval

def get_oauth_token(self):
headers = {
"Content-Type": "application/x-www-form-urlencoded",
"Accept": "application/json"
}
for token_path in self.token_paths:
token_url = f"{self.base_token_url}{token_path}"
data = {
"grant_type": "client_credentials",
"client_id": self.client_id,
"client_secret": self.client_secret,
}
if self.scope:
data["scope"] = self.scope

    # Attempt 1: Credentials in body

    try:

        logger.info(f"Attempting to retrieve token from {token_url} with credentials in body")

        response = requests.post(token_url, data=data, headers=headers, timeout=10)

        response.raise_for_status()

        logger.info(f"Raw response from {token_url}: {response.text[:1000]}...")

        token = response.json().get("access_token")

        if not token:

            raise Exception("No access_token found in response")

        logger.info("OAuth token retrieved successfully")

        return token

    except requests.exceptions.HTTPError as e:

        logger.error(f"Failed to retrieve OAuth token from {token_url} (body method): {e.response.status_code} - {e.response.text[:1000]}...")

    # Attempt 2: Basic Auth (omitted for brevity)

Data Fetching

def fetch_data(self, entity_type):
token = self.get_oauth_token()
headers = {"Authorization": f"Bearer {token}"}
url = f"{self.order_endpoint}/{entity_type}" if entity_type == "OrderLine" and self.order_endpoint else f"{self.base_url}/{entity_type}"
all_records = []
while url:
logger.info(f"Fetching {entity_type} from URL: {url}")
response = requests.get(url, headers=headers)
logger.info(f"Response status code: {response.status_code}")
logger.info(f"Response content (first 1000 chars): {response.text[:1000]}...")
if response.status_code != 200:
logger.error(f"Failed to fetch {entity_type}: {response.status_code} - {response.text}")
break
data = response.json()
records = data.get("items", [])
all_records.extend(records)
next_page = data.get("NextPage")
if next_page:
url = next_page
else:
url = None
return all_records

Main Execution

def save_to_tables(self, incremental_load=False):
mode = "append" if incremental_load else "overwrite"
quotes_records = self.fetch_data("Quote")
quotes_df = self.create_dataframe(quotes_records, "Quotes")
quotes_df.write.format("delta").mode(mode).option("overwriteSchema", "true").saveAsTable(f"{self.lakehouse_schema}.Quotes")
logger.info(f"Quotes saved to table '{self.lakehouse_schema}.Quotes' with {len(quotes_records)} rows")

order_lines_records = self.fetch_data("OrderLine")

order_lines_df = self.create_dataframe(order_lines_records, "OrderLines")

order_lines_df.write.format("delta").mode(mode).option("overwriteSchema", "true").saveAsTable(f"`{self.lakehouse_schema}`.OrderLines")

logger.info(f"OrderLines saved to table '`{self.lakehouse_schema}`.OrderLines' with {len(order_lines_records)} rows")


return quotes_df, order_lines_df

Kevin Heiman

*** please refrain from sharing private details about your site in forums. mask out any reference to tenant names, user identities or other sensitive company data***
There was a previous post with code sample. You can always test the parts with postman.
https://community.developer.infor.com/discussion/comment/1026?tab=all#Comment_1026
You should easily get the token from the tenant with the endpoint shown.

The API call to the application is not in the same tenant (by the URL provided), so that will fail as the token will not be valid.

rsbadger

How can I delete my post?

rsbadger

Hello Kevin,

Thank you for your response and for the reminder about protecting sensitive information. I apologize for including the tenant name in my original post—I’ve edited it to mask out references to tenant names, user identities, and other sensitive data as advised. I’ll be more careful in future posts.

I appreciate your suggestions and the link to the previous post with a code sample. I’ve reviewed the comment at and have a few follow-up questions and updates based on your feedback.

Action Taken: Testing with Postman

Following your suggestion, I tested the OAuth2 token retrieval using Postman to isolate the authentication issue. Here’s what I did and the results:

Token Endpoint: I used the endpoint https://mingle-sso.inforcloudsuite.com/[TENANT]/as/token.oauth2 (tenant name masked as [TENANT] for privacy).
Request Details:
- Method: POST
- Headers: Content-Type: application/x-www-form-urlencoded, Accept: application/json
- Body: grant_type=client_credentials, client_id=[MY_CLIENT_ID], client_secret=[MY_CLIENT_SECRET] (credentials masked for privacy)
Response:textCollapseWrapCopy{ "error": "invalid_grant", "error_trace_id": "Root=1-67ddb26f-770490ff6a21fa7d43a8dff3", "error_description": "unauthorized_client: Invalid ClientId"}
I also tried the alternative endpoint https://mingle-sso.inforcloudsuite.com/as/token.oauth2 (without the tenant in the path), but received the same Invalid ClientId error.

This matches the error I’m seeing in my script, despite my manager confirming that the client_id and client_secret are correct. Your comment about the token not being valid for the API call due to a tenant mismatch in the URL caught my attention, and I’d like to explore that further.

Tenant Mismatch Issue

You mentioned that the API call to the application is not in the same tenant as the token endpoint (based on the URL provided), which would cause the token to be invalid. Let me clarify the URLs I’m using in the script:

Token Endpoint: https://mingle-sso.inforcloudsuite.com/[TENANT]/as/token.oauth2
API Base URL for Data Fetching: https://cpqks.inforcloudsuite.com/RuntimeApi/EnterpriseQuoting/Entities
- Quote Endpoint: https://cpqks.inforcloudsuite.com/RuntimeApi/EnterpriseQuoting/Entities/Quote (this works when authentication succeeds)
- OrderLine Endpoint: https://cpqks.inforcloudsuite.com/RuntimeApi/EnterpriseQuoting/Entities/OrderLine (this fails, likely due to authentication or an incorrect endpoint)

I understand now that the token obtained from mingle-sso.inforcloudsuite.com/[TENANT]/as/token.oauth2 might not be valid for API calls to cpqks.inforcloudsuite.com, as these appear to be different domains, possibly indicating different tenants or services. This could explain why my script fails to authenticate properly, even if the client_id and client_secret are correct.

Follow-Up Questions:

How can I determine the correct token endpoint that aligns with the API base URL https://cpqks.inforcloudsuite.com/RuntimeApi/EnterpriseQuoting/Entities? Should the token endpoint also be under cpqks.inforcloudsuite.com, or is there a specific mapping I need to follow?
If the token endpoint and API endpoint are in different domains, do I need to request a token with a specific scope or audience to make it valid for the API calls?

Testing the OrderLine Endpoint

Since my script can’t proceed past authentication right now, I haven’t been able to test the OrderLine endpoint directly. However, I’d like to confirm the correct endpoint for OrderLine data. The previous post you linked didn’t specify endpoints for Enterprise Quoting, but I’m assuming I can find this in the Infor OS Portal’s API Gateway.

I’ve tried to access the API Gateway in the Infor OS Portal to find the list of endpoints for the Enterprise Quoting suite, but I’m unsure if I’m looking in the right place. I navigated to "Infor ION API" > "Available APIs" and found a suite named "EnterpriseQuoting," which includes the /Quote endpoint. However, I don’t see /OrderLine listed—possible alternatives like /OrderLines or /OrderItem are also missing.

Follow-Up Questions:

Is /OrderLine a valid endpoint under the Enterprise Quoting API suite, or should I be looking in a different suite (e.g., "Orders" or "OrderManagement")?
If /OrderLine isn’t the correct endpoint, how can I find the right one for fetching order line items? Is there a specific documentation section in the Infor OS Portal I should check?

Schema Issue in Microsoft Fabric

I also mentioned a schema error in Microsoft Fabric (SCHEMA_NOT_FOUND). I’ve updated the script to use the correct schema name ([SCHEMA_NAME]—masked for privacy), which matches the output of SELECT current_database(). I believe this issue might resolve once I can run the script fully, but I’d appreciate any tips on handling schema names in Microsoft Fabric with PySpark, especially if there are known quirks with Infor data integration.

Updated Script Details

Based on your feedback, I’ve double-checked the script (version 20250321-10) to ensure it aligns with best practices. It already supports trying multiple token endpoints and both body-based and Basic Auth methods for authentication. Here’s the updated token retrieval section for reference:

pythonCollapseWrapCopydef get_oauth_token(self): headers = { "Content-Type": "application/x-www-form-urlencoded", "Accept": "application/json" } for token_path in self.token_paths: token_url = f"{self.base_token_url}{token_path}" data = { "grant_type": "client_credentials", "client_id": self.client_id, "client_secret": self.client_secret, } if self.scope: data["scope"] = self.scope # Attempt 1: Credentials in body try: logger.info(f"Attempting to retrieve token from {token_url} with credentials in body") response = requests.post(token_url, data=data, headers=headers, timeout=10) response.raise_for_status() logger.info(f"Raw response from {token_url}: {response.text[:1000]}...") token = response.json().get("access_token") if not token: raise Exception("No access_token found in response") logger.info("OAuth token retrieved successfully") return token except requests.exceptions.HTTPError as e: logger.error(f"Failed to retrieve OAuth token from {token_url} (body method): {e.response.status_code} - {e.response.text[:1000]}...") # Attempt 2: Basic Auth (omitted for brevity)

I’ve also added a scope parameter that can be set in custom_config, but I’m unsure what scope to use, if any.

Next Steps and Assistance Needed

I’d greatly appreciate your help with the following:

Token Endpoint Confirmation:
- What is the correct token endpoint for API calls to https://cpqks.inforcloudsuite.com/RuntimeApi/EnterpriseQuoting/Entities?
- Do I need a specific scope to make the token valid for this domain?
OrderLine Endpoint:
- Can you confirm the correct endpoint for OrderLine data in the Enterprise Quoting suite, or guide me on where to find it in the Infor OS Portal?
General Advice:
- Any tips on resolving the Invalid ClientId error, given that the credentials are confirmed correct?
- Any known issues with schema handling in Microsoft Fabric that I should be aware of?

Thank you again for your guidance—I’m eager to resolve these issues and get the script working fully. Please let me know if you need additional details (I’ll ensure they’re appropriately masked).

Best regards,

https://community.developer.infor.com/discussion/comment/1026#Comment_1026

Kevin Heiman

Without a token the rest is not relevant so lets get a token in postman.

You could also get a bearer token in API gateway in the Suite. You should have a CPQ suite as that is how you will get to the URL you will need for data, but that is later.

There are some instructions in the documentation in several locations such as;
https://docs.infor.com/inforos/2024.x/en-us/useradminlib_cloud/default.html?helpcontent=ioncedg_cloud_osm/edu1624977957795.html

and there are videos of this on YouTube under Infor.

https://youtu.be/m4d0awIQ6Ag?si=89WHwdFxC5Hr3VKz

https://youtu.be/0evdcrDc6F4?si=CQsIfnb_cWazZeNa

In postman add your API file to the environment variables, then map the variables into the Authorization form. Image below.

Then Fetch token using Get New Access Token to get a new token. Then select to use that token for the subsequent application cpq API call.

rsbadger

Thank you Kevin!

Fabiano Silva

You can edit your post until 7 days