Arcoro connects to HCSS using a Client ID and a Client Secret that are entered on the HCSS connector. Before Arcoro can write any employee records to HCSS, it exchanges those two values for an access token at the start of the sync. If that token request fails for any reason, Arcoro cannot prove its identity to HCSS, so it cannot continue.
The same underlying check also runs when someone clicks "Test Connection" on the connector setup screen, outside of any sync. Both surfaces report a failure with almost identical wording.
Error Messages
| Message text | Direction | Occurs When | Outcome | Fix |
|---|---|---|---|---|
| HCSS Provider failed to authenticate. Please verify the connector properties and run the Sync again. If the problem persists, contact Arcoro support. | Writing to HCSS | During sync setup, before any employee record is written, the token request to HCSS fails for any reason and is caught by a catch-all handler. | Sync stopped. The whole sync run terminates; no employee records are written for this run. | Confirm the Client ID and Client Secret on the HCSS connector match the credentials issued by HCSS, then run the sync again. |
| HCSS Provider failed to authenticate. Please verify the connector properties and run the test again. If the problem persists, contact Arcoro support. | Writing to HCSS | When a user clicks "Test Connection" on the HCSS connector setup screen, and the same token request fails. | Not applicable. This is the result shown on the connector setup screen. It is not written to the sync log and does not stop any sync. | Confirm the Client ID and Client Secret on the HCSS connector match the credentials issued by HCSS, then click "Test Connection" again. |
Confirming the Error
- Did the error occur during the Test Connection button on the connector setup screen, or as a failure after running a sync? The wording tells you which:
- "Run the Sync again" means it came from an actual sync run
- "Run the test again" means it came from Test Connection and never touched a sync.
- If it came from Test Connection, there is nothing to look up in the sync log. The message shown on screen is the full result. Skip to the next section.
- If it came from a sync run, open the Sync History and find the sync execution for the HCSS connector.
- Open the step for the HCSS entity, Employees.
- Check the Failures column for that entity, not the Errors column. This message is logged at failure severity, so a non-zero Failures count is the expected signal.
- Open the failure detail and match on the fixed part of the sentence: "HCSS Provider failed to authenticate."
- Confirm the Added, Updated, and Unchanged counts for that entity are all zero for this run. Authentication happens before any employee record is processed, so no records should have synced.
Resolving the Error
Both messages come from the same underlying token request to HCSS. The code catches every kind of failure from that request the same way, whether it is a bad credential, a bad endpoint, or a network problem in between. The message alone cannot tell you which of those it was, so start with the connector properties before assuming anything else.
- Open the HCSS connector configuration in Arcoro and locate the Client ID and Client Secret fields.
- Confirm both values exactly match the credentials HCSS issued for this connection. Watch for leading or trailing spaces and swapped values between the two fields.
- If you are unsure of the current values, have them obtain a fresh Client ID and Client Secret from HCSS and re-enter both on the connector.
- Save the connector configuration.
Message Appeared After Sync Run
- Run the sync again for this connector.
- Confirm the fix worked in one of two ways: no failure appears for this run, or the entity now shows Added or Updated counts instead of zero.
Message Appeared on Test Connection
- Click Test Connection again on the connector setup screen.
- Confirm the fix worked if Test Connection reports success instead of the failure message.
When to Escalate
If any of the following occur, you may need to reach out to Arcoro support for additional assistance.
- If the Client ID and Client Secret are confirmed correct, freshly re-entered, and the failure still occurs, escalate.
- Because the underlying check catches every kind of failure the same way, a correct-looking credential pair does not rule out a network or endpoint problem on the HCSS side.
- If you cannot obtain new HCSS credentials yourself, escalate so we can help coordinate with HCSS.