Skip to main content
Solved

/$metadata returns 403 with PAT (Bearer token)

  • July 10, 2026
  • 2 replies
  • 46 views

Hi everyone,

When I try to fetch the application structure using the PAT via Bearer authentication, I get a 403 error GET /indicium/iam/appl/ii/$metadata

However, the exact same call works perfectly fine when I switch to Basic Authentication (username/password of the service account).

Furthermore, I have no issues at all when fetching actual data from tables (like /employee) using the PAT. It seems to fail on the /$metadata endpoint.

The service account has Available for Webservices enabled and full Fetch rights in IAM.

Does anyone know why the PAT is being rejected specifically on the metadata endpoint while working fine everywhere else?

Best answer by Sjoerd Tiemens

Hey Kenneth,

This indeed looks like something that should work. Could you create a ticket for this in TCP?

2 replies

Forum|alt.badge.img

Hey Kenneth,

This indeed looks like something that should work. Could you create a ticket for this in TCP?


Nick Janssen
Moderator
Forum|alt.badge.img+5
  • Moderator
  • August 4, 2026

Hi Kenneth,

I see a ticket was raised for this issue and a change has been made.
The problem will be resolved in Indicium version 2026.2.13.0, which is expected to be released on 2026-08-31.

I marked ​@Sjoerd Tiemens ‘s answer as best answer so we can close this topic.

Best regards,
Nick Janssen