Troubleshooting
Find the failing boundary quickly
The console separates account, grant, session, relay, connector, and target state so an outage does not look like an authorization error.
Connector offline
Inspect Docker logs, outbound DNS/TLS access, saved credential volume, and whether the connector identity was revoked.
Service unreachable
Confirm the hostname resolves inside the connector container, the port is correct, loopback policy is explicit, and the health path returns a 2xx or 3xx response.
Access denied
Check invited email, grant state, session expiry, allowed method, service status, and recent audit reason codes.