Service token auth returning forbidden

[seminal]

What is the name of the domain?

n/a

What is the issue you’re encountering

I have a service token, but the policy is not letting me through, when I curl it comes back with 403 forbidden

What are the steps to reproduce the issue?

curl -L -H “CF-Access-Client-Id: .access” -H “CF-Access-Client-Secret: ” -H ‘Cache-Control: no-cache’

[seminal]

My policy is set up like so:

But CURL is still returning forbidden.

[seminal]

And my access like so:

[seminal]

curl command: curl -L [urlredacted] -H “CF-Access-Client-Id: [ID].access” -H “CF-Access-Client-Secret: [secret]” -H ‘Cache-Control: no-cache’