SAML SSO breaks OAuth client credentials flow

NICE CXone API & Integrations
1

Getting 401 Unauthorized when swapping to client credentials after enabling SAML SSO. The docs say SAML shouldn’t touch programmatic access, but the token endpoint is rejecting my request.

  • Genesys Cloud Org: US-East
  • Auth Method: Client Credentials (grant_type=client_credentials)
  • SAML: Enabled for all users

Here’s the failing curl. The client_id and secret are correct for the API-only app.

curl -X POST https://api.mypurecloud.com/oauth/token \
 -H "Content-Type: application/x-www-form-urlencoded" \
 -d "grant_type=client_credentials&client_id=xyz&client_secret=abc"

Response is just "error":"invalid_grant".