Error and validation messages
The Hub's messages, what they mean and how to fix them.
The Hub's error and validation messages, grouped by where you meet them, with what each one means and how to fix it. Messages from the form itself appear in lower case above the Save button. Messages from the server start with a status code, for example "400 - " or "403 - ".
Note
The Integration Hub is in English only, so its labels are quoted in English in the Danish articles too.
Access
| Message | Meaning and fix |
|---|---|
| "403 - Only a workspace administrator can change connections. Ask an administrator of this workspace." | Only a Workspace Administrator (the portal's Tenant Admin) can add, change, run, pause, test or delete. App admin roles in Helpdesk, HCM or Flexshop do not count. Ask a Tenant Admin, or see What members see in the Hub. |
| "Only a workspace administrator can view or change the vendor connection." | The same rule for the Webmercs connection, which members cannot even see. |
| "This vendor connection no longer exists. It may have been deleted." | Someone deleted it while you had it open. Go back to the Connections list. |
| "This integration is run by Juvaro for user provisioning and is managed in the workspace's single sign-on settings, so it cannot be …" | You tried to run, pause, open, inspect, give a webhook to or delete a platform row. These are managed in the Workspace portal. See Single sign-on and directory sync cards. |
A role change takes up to 5 minutes to reach the Hub. If you were just made Tenant Admin, wait and reload.
Shared mailbox form
| Message | Meaning and fix |
|---|---|
| "give the connection a name" | Fill in Name. |
| "fill in the Entra tenant id and client id" | Microsoft 365: both IDs from the app registration are needed. |
| "enter the shared mailbox address" | Microsoft 365: fill in Shared mailbox address. |
| "paste the client secret" | Microsoft 365: a new connection needs Client secret. |
| "enter the mailbox to impersonate (subject)" | Google Workspace: fill in the mailbox the service account acts as. |
| "paste or upload the service-account key" | Google Workspace: a new connection needs the JSON key. |
| "fill in the IMAP and SMTP host" | IMAP / SMTP: both servers are needed; IMAP receives, SMTP sends replies. |
| "the IMAP and SMTP ports must be between 1 and 65535" | Use the ports your provider gives, usually 993 and 587. |
| "enter the username" | IMAP / SMTP: fill in Username. |
| "enter the from address" | IMAP / SMTP: fill in From address. |
| "paste the password" | IMAP / SMTP: a new connection needs Password. |
| "the lookback window must be between 15 and 43200 minutes" | Change Lookback window (minutes), or leave it blank for 1440. |
| "name is required (1-200 chars)" | The name is empty or longer than 200 characters. |
| "Entra tenant id must be a GUID" / "client id must be a GUID" | Copy the IDs exactly from the app registration's overview in Entra. They look like 8-4-4-4-12 hexadecimal groups. |
| "the shared mailbox must be a plain email address, e.g. support@example.com" | Remove any display name or angle brackets. |
| "the lookback window (n min) is shorter than the gap between runs (g min) - mail arriving in between would never be fetched" | Make the lookback window at least as long as the time between checks, or check more often. See How often a mailbox is checked. |
| "Enter the password again: the IMAP or SMTP server, port or TLS setting changed, and a saved password is only ever sent to the server it was entered for." | You changed a server setting. Type the password again so it can go to the new server. |
Webmercs vendor connection
| Message | Meaning and fix |
|---|---|
| "enter the shop's API address, starting with https://" | The address must start with https://, for example https://shop.vendor.example/api/business/v1. |
| "enter the API username" / "enter the API password" | Both are needed, the password only for a new connection or a changed address. |
| "enter the order user: your Webmercs administrator's login email" | Order user is required. |
| "enter the order user as an email address, e.g. admin@vendor.example" | The order user must be an email address. |
| "This workspace already has an enabled vendor connection. Disable or delete it first: Flexshop sends orders to exactly one vendor connection." | Only one vendor connection can be enabled. Switch the other one off first. |
| "Someone else changed this vendor connection while you were saving. Reload it and try again." | Two people edited at once. Reload and make your change again. |
| "Enter the API password again: the shop now has a different address, and a saved password is only ever sent to the address it was entered for." | You changed Shop API address. Type the password again. |
| "Not saved: an enabled connection must pass the connection test first. The test answered: …" | You saved with Enabled on and the test failed. Fix what the answer says, or save with Enabled off. |
| "Too many connection tests from this workspace in the last minute. Wait a minute and try again." | At most 10 tests per minute per workspace. |
| "That catalogue campaign is not one of this Webmercs account's active campaigns. Load the list again and pick one." | The campaign has ended or was removed. Click Load campaigns again. |
| "The test could not be run because Juvaro's integration service did not answer. Try again in a minute." | A temporary problem on Juvaro's side. Try again shortly. |
The address must also not contain a username or password, a query string (?) or a fragment (#). A passing test says "Connected to the Webmercs business API." See Connecting your vendor's Webmercs shop.
Intune, Jamf Pro and REST editor
| Message | Meaning and fix |
|---|---|
| "choose an asset model for the AMS · Asset target" | REST into AMS: pick Asset model. |
| "fill in the Entra tenant id, client id, and client secret" | Intune: all three are needed. |
| "pick at least one asset model (computers or mobile devices)" | Intune or Jamf Pro: set Computer fallback model, Mobile fallback model or both. |
| "enter the Jamf instance URL (https://…)" | Jamf Pro: fill in Instance URL. |
| "fill in the client id and client secret" | Jamf Pro: both are needed. |
| "sample is not valid JSON" | The pasted sample must be a JSON object or array. |
| "could not fetch the sample" / "timed out waiting for the sample" | The URL did not answer in time. Check the URL and the auth secret, or paste a sample instead. |
| "could not scan device models" | The device system did not answer. Check the source credentials and try again. |
Schedules, runs and limits
| Message | Meaning and fix |
|---|---|
| "Scheduled syncs run at most every 15 minutes. Use Run now for on-demand." | Pick a slower schedule. For a mailbox the message says "every minute". |
| "cron expression is empty" | Type a cron, or pick a frequency. |
| "no future occurrences" | The cron never fires again. Check it. |
| "Monthly credit allowance exhausted - resumes next month or raise the allowance" | Run now refused (code 429) because the 10,000 credits are used. See Usage and credits. |
| "Over your monthly credit allowance - scheduled runs are paused and Run-now is blocked until next month." | The banner on the Usage page for the same situation. |
| "definition limit reached" | The workspace has 50 connections. Delete one you no longer use. |
| "Auto-paused after n consecutive failed runs - last error: …" | The Hub paused the connection. Fix the error, then Resume. See A connection's page: figures, Pause and Resume. |
| "This connection's stored settings cannot be read, so nothing was deleted. An operator must repair the stored connection before it can be deleted." | Nothing was deleted. Contact Juvaro support. |
Alerts and credentials
| Message | Meaning and fix |
|---|---|
| "Could not save the alert rules (status): reason" | The reason names the problem, for example a number outside its range or a duplicate rule. See Alert rules and Needs attention. |
| "channel must be 'in_app' for now; email arrives with the platform notification service" | Alerts can only be shown in the app. Email alerts are not available yet. |
| "Could not save the expiry (status): reason" | The expiry date was refused. Read the reason and try again. See Credentials: expiry dates and rotation. |