This message was deleted.

The REST API has a path prefix of

/api/v1

to work. So

curl <https://our-api-host/api/v1> -u secret:

If you just hit the API host directly, it requires you to go through the normal SSO auth flow before using

Got it, that was the issue. Thank you :)