What they mean

401 normally means the provider did not accept the credential. 403 normally means the credential is recognised but lacks permission, or the provider blocks that authentication method.

Fix it

  1. Confirm the service URL and username.
  2. Create a fresh API token.
  3. Grant only the required read permissions.
  4. Test the token directly in the provider when possible.
  5. Save it again in HomeStart.