Others

Fix SharePoint Workflow REST API JSON Token Issuer Error

Aamir Naveed Akram Oct 9, 2026 868 views

Question details

The user is attempting to create a subsite using a workflow App Step and a REST API call, but receives an unauthorized error indicating a JSON token issuer and NameId mismatch.

Fix SharePoint Workflow REST API JSON Token Issuer Error

Product: SharePoint Server Subscription Edition
Device & OS: not provided
Scenario: Executing a SharePoint workflow using an App Step to trigger a REST API call for subsite creation.
Observed behavior: The workflow fails to create the subsite, returning an unauthorized error with a JSON token issuer and NameId mismatch recorded in the ULS log.

Before you start

Ensure you have farm administrator access to your SharePoint environment and can access the Unified Logging Service (ULS) logs to accurately diagnose the token mismatch error.

Solution 1Recommended

Gather Configuration Details and Escalate to Microsoft Q&A

Because this involves complex SharePoint Server identity configurations, you must gather farm details and consult SharePoint development specialists on Microsoft Q&A.

Troubleshooting identity token and REST API authentication mismatches in SharePoint Server Subscription Edition requires in-depth analysis of your specific server farm and workflow setup.

The standard Microsoft Community has limited resources for this level of REST API and Server troubleshooting, so escalating the issue with full documentation is required.

Extract the Exact ULS Log Error

Open your SharePoint Server ULS logs and copy the complete error trace that specifically mentions the JSON token issuer and NameId mismatch.

Document Farm and Certificate Configurations

Gather the current farm build number, trusted identity token issuer configuration, and relevant certificate details used by your App Step.

Detail the Workflow Setup

Document the exact REST API endpoint you are calling, the JSON payload, and how the App Step permissions are configured in SharePoint Designer or your workflow platform.

Post on Microsoft Q&A

Navigate to the Microsoft Q&A platform and post a new thread using the 'SharePoint development' and 'SharePoint Server' tags, pasting all the gathered diagnostic information.

Gather Configuration Details and Escalate to Microsoft Q&A

Use Appropriate Tags: Using the correct tags (SharePoint development and SharePoint Server) on Microsoft Q&A ensures your ticket is routed to the specialized engineers who handle advanced token issuer authentication issues.

Free Microsoft Office alternative

Looking for a Reliable Office Alternative? Try WPS Office

While resolving advanced SharePoint Server workflow and REST API authentication issues, you might need a lightweight, hassle-free office suite for your daily documentation, workflow mapping, and project planning. WPS Office is a highly compatible and completely free alternative to Microsoft Office.

1. Visit the WPS Office Website: Go to the official WPS website to download the latest version for your operating system.
2. Install the Software: Run the lightweight installer and follow the on-screen prompts to complete the setup.
3. Draft Your Documentation: Open WPS Office and create highly compatible Word, Excel, or PowerPoint documents to document your workflow processes seamlessly.

Fully compatible with Microsoft Word, Excel, and PowerPoint formatsEasily draft workflow documentation and REST API payloads in an intuitive interfaceLightweight architecture ensures fast launch times and smooth performance on any deviceFree to download and use with built-in PDF editing tools for comprehensive document management

microsoft office alternative - wps office

Frequently Asked Questions

What causes a JSON token issuer mismatch in SharePoint REST API?

This mismatch typically occurs when the authentication token provided by the trusted identity token issuer does not align with the expected claims or NameId format configured in SharePoint Server, leading to a 401 Unauthorized error.

Can I use an App Step to create a subsite in SharePoint workflows?

Yes, App Steps can perform actions requiring elevated permissions, such as creating subsites, provided the workflow app has been granted Full Control permissions at the target site collection level.

Where can I find the ULS logs to troubleshoot SharePoint Server errors?

Unified Logging Service (ULS) logs are usually located in the SharePoint Hive folder on your server, typically under 'C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\16\LOGS'. You can use the ULS Viewer tool to filter and read these logs.

Office Quick Solutions