OAuth2 token endpoint returning 401 during concurrent load test

  • JMeter 5.6.2
  • Genesys Cloud Asia/Pacific Southeast
  • BYOC Edge 24.2
  • Custom Python script for token generation
  • 200 concurrent threads
{"error": "invalid_grant", "error_description": "The provided authorization grant is invalid, expired, or revoked"}

Running a load test to validate API throughput for our softphone login flow. The script generates OAuth2 tokens using the client credentials grant. At low concurrency (50 users), tokens are issued successfully. When scaling to 200 concurrent requests, the token endpoint starts returning 401 Invalid Grant errors. The client ID and secret are hardcoded and verified correct. The error happens even though the requests are sent within the same second.

Is there a rate limit on the token endpoint that blocks concurrent requests from the same client ID? The documentation mentions rate limits for WEM and Predictive Routing, but not for authentication. The test runs from Singapore. We need to understand if this is a security block or a capacity issue. The goal is to simulate realistic login bursts during shift changes. Any config changes needed on the BYOC Edge to handle this? The JMeter script uses HTTP Request Defaults for the token endpoint. No retries are implemented yet.