Hello @DanielleN22,   Issues at this step in the flow are commonly due to either the authorization code having expired (it is valid for 60 seconds) or issues with the Authorization header.   To set up your Authorization header, you'll need both your app's client_id (which is your API key) and your client_secret. You would put these values in the following format: "client_id:client_secret", then convert that string to Base 64 encoding. The result is used in the Authorization header. An example would look like: Authorization: Basic MjdlOPBkNjktUmQ4MY00MGUwLWVmZmYtODRjZjM2   If you're still experiencing issues after checking those two items, you can send us your code for review via email, at webservices@constantcontact.com.   Regards, ... View more