OAuth connection to Xero fails with SC424 / AuthenticationUnsuccessful before reaching Xero's login page

:bullseye: What is your goal?

Connect a Xero account to a Make scenario so it can post invoices and payments (Create an Invoice / Update a Payment modules) from our internal ops platform into Xero.

:thinking: What is the problem & what have you tried?

Creating a new Xero connection fails immediately on Make’s own oauth relay (us2.make.com/oauth/auth/…) — Xero’s own login page never loads, no login prompt is shown at all. I’ve reproduced this 3 times ruling out session/browser/account causes: same result under two different Make user accounts, and in two different browsers (Edge and Firefox) with no shared cookies. Our two existing Microsoft/Teams OAuth connections in this same team work normally, so OAuth itself functions in this team — the fault seems specific to establishing a new Xero connection. Team ID 2374806, scenario “SWI OPS - Xero Sync” (ID 6100866).

:clipboard: Error messages or input/output bundles

{“message”:“The request failed due to failure of a previous request.”,“code”:“SC424”,“suberrors”:[{“message”:“{"Type":null,"Title":"Unauthorized","Status":401,"Detail":"AuthenticationUnsuccessful"…}”}]}

:camera_with_flash: Screenshots (scenario flow, module settings, errors)

Screenshot 2026-08-31 160414.png

Hey there,

I think the redirect URI is actually this one:

https://www.integromat.com/oauth/cb/xero

If you are creating the connection through Make’s built-in Xero app (the us2.make.com/oauth/auth relay), you never paste the integromat redirect URI yourself — Make owns that OAuth client. SC424 with AuthenticationUnsuccessful before Xero’s login page loads usually means Xero rejected Make’s authorize request on the relay, not a callback you can fix in your own Xero app settings.

Microsoft/Teams working in the same team fits that: team OAuth is fine, this is specific to the Xero client Make is using on us2.

Are you on Make’s native Xero connection, or a custom Xero OAuth app where you control the redirect URI?