<!--
{
  "documentType" : "article",
  "framework" : "DeviceManagement",
  "identifier" : "/documentation/DeviceManagement/interpreting-automated-device-enrollment-error-codes",
  "metadataVersion" : "0.1.0",
  "role" : "article",
  "title" : "Interpreting Automated Device Enrollment error codes"
}
-->

# Interpreting Automated Device Enrollment error codes

Interpret the error codes you might encounter or that can happen during authentication.

## Discussion

Authentication errors are either a `400`, `401`, or `403` error code.

An `HTTP 400 Bad Request` error indicates one of the following:

- Unsupported OAuth parameters
- Unsupported signature method
- Missing required authorization parameter
- Duplicated OAuth protocol parameter

An `HTTP 401 Unauthorized` error indicates one of the following:

- Invalid consumer key
- Invalid or expired token
- Invalid signature
- Invalid or already-used anti-replay value

An `HTTP 403 Forbidden` error indicates one of the following:

- Your device management service, or your customer’s key-token doesn’t have access to perform the specific request. In this case, the request body contains `ACCESS_DENIED`.
- The organization hasn’t accepted the latest terms and conditions of the program. In this case, the request body contains `T_C_NOT_SIGNED`.

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)