Authentication fails

First determine which boundary rejected the request: Nexo management access, client-to-Nexo authentication, or MongoDB authentication.

Check

1. Capture the sanitized error and failing boundary.
2. Confirm username, authentication database, and mechanism match the working direct connection.
3. Check that the secret reference exists and the runtime can read it.
4. Confirm credentials were rotated consistently.
5. Verify the database identity has the required privileges.
6. Check whether certificate identity or hostname validation is involved.

Never paste passwords, tokens, private keys, or complete credential-bearing connection strings into logs or support requests.