Client encountering errors when authenticating some users with the Payments API

Dylan Hochreiter

Hi there,

A client of ours, Dickinson College, is running into issues with some users when authorizing with the Payments API in our application.

We popup a window for them to sign into Blackbaud, and the admin user enters their login email. Normally, the user would be redirected to the Dickinson login tab where they can enter the rest of their login information. For the users with the issue, the admin enters the email and then instead of allowing them to enter the rest of their login information they see an error.

The error that shows is “You don't have access to any Sky API enabled Blackbaud products. Please contact your organizations admistrator”.

What's also interesting, is when it gets to the error screen, the username in the top right does not match that of the admins account.

If anyone has any ideas about what might be causing this issue to occur that would be very appreciated.

Thanks,

Dylan Hochreiter

Michael Tims

Hi @Dylan Hochreiter,

In our logs for the authorization consent form, I can see 4 users from Dickinson College that have attempted to login on the form in the past few weeks, but they do not have access to the environment that your app is connected to. That's most likely the problem here. Those users should be able to reach out to their environment's administrator to be added as a user.

Hope that helps! Please let me know if you need any other assistance troubleshooting.

Thanks!

Dylan Hochreiter

The help is much appreciated Michael.

I will pass this information on to the client and I will let you know if I require any further help troubleshooting the issue.

Thanks!

Dylan Hochreiter

Hi Michael,

I have a follow up question based on feedback from the client. They are trying to authorize different users in our application with one Blackbaud ID that has access to the Payments API.

The admin is authorizing for the students under that one account so they can trigger payments through our application. As I said previously, we popup a window to the Blackbaud sign in form so the user can authenticate. The admin had said that they initially see the login form, but then when they type in their email they are redirected and see that error in the popup. On the page with the error, they see a different user's name than the admin's name in the top right.

I think what is happening is the student user is logged in with their Blackbaud ID already, so when the admin enters the email it redirects them to the other page instead of the authorize form because an account is already logged in that does not have access to the Dickinson College environment.

It seems like the client is saying they shouldn't have other Blackbaud IDs that are requesting access. Based on your response, it seems like the students do have their own Blackbaud IDs, but they do not have access to the Dickinson College environment.

Can you please confirm that there are 4 different users that have tried to authorize against that environment?

Thanks,

Dylan

Michael Tims

Hey @Dylan Hochreiter, yes I actually see 5 users in the past 30 days, 2 users in the past 7 days, Dickinson College email address users (with a Blackbaud ID) that have unsuccessfully tried to load the authorization consent form for your application. There are successful attempts from a few other users as well (not just one account).

From the behavior you describe, I think you are correct that there is already a user logged in with Blackbaud ID in the browser session at the time the authorization attempt takes place.

Dylan Hochreiter

Hi Michael,

I appreciate the response. I have forwarded this information on to the client.

Thanks,

Dylan