MFA login error after updating HomeAssistant to 2026.3.2

[pejotigrek]

Describe the bug
after updating HomeAssistant to 2026.3.2, I saw that integration started to flood log file with errors. I've got two accounts connected, one with MFA, one without. only the MFA is affected. I tried to reconfigure it but got an error while entering MFA codes.

To Reproduce
Steps to reproduce the behavior when adding configuration [logs below, in additional content]:

1. Go to 'Configuration', 'Devices & Services'
2. Click on '+ Add' to add 'Garmin Connect'
3. Enter login + password of account with two-factor-authentication
4. Wait for MFA code, enter when asked for
5. See error

Steps to reproduce the behavior with existing configuration [another logs below, in additional content]

1. Go to 'Configuration', 'Devices & Services'
2. Click on 'Garmin Connect' integration
3. See errors on entity with MFA

Expected behavior
MFA secured account working as usual - with no problems.

Screenshots
Error while reconfiguring/adding account with MFA:

Error with existing entity:

Desktop (please complete the following information):

• OS: Windows 11
• Browser Chrome
• Version 146.0.7680.80 (Official) (64-bit)

Smartphone (please complete the following information):

• Device: Google Pixel 8 Pro
• OS: Android 16 (CP1A.260305.018)
• Browser Chrome / HA Companion APP
• Version Chrome 146.0.7680.119 / HA Companion APP 2026.3.2-full (20802)

Additional context
Log errors shown while adding account with MFA:

2026-03-17 10:09:05.870 ERROR (MainThread) [aiohttp.server] Error handling request from 172.30.33.3
Traceback (most recent call last):
  File "/usr/local/lib/python3.14/site-packages/aiohttp/web_protocol.py", line 510, in _handle_request
    resp = await request_handler(request)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.14/site-packages/aiohttp/web_app.py", line 569, in _handle
    return await handler(request)
           ^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.14/site-packages/aiohttp/web_middlewares.py", line 117, in impl
    return await handler(request)
           ^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/components/http/security_filter.py", line 92, in security_filter_middleware
    return await handler(request)
           ^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/components/http/forwarded.py", line 214, in forwarded_middleware
    return await handler(request)
           ^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/components/http/request_context.py", line 26, in request_context_middleware
    return await handler(request)
           ^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/components/http/ban.py", line 86, in ban_middleware
    return await handler(request)
           ^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/components/http/auth.py", line 242, in auth_middleware
    return await handler(request)
           ^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/components/http/headers.py", line 41, in headers_middleware
    response = await handler(request)
               ^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/helpers/http.py", line 73, in handle
    result = await handler(request, **request.match_info)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/components/http/decorators.py", line 83, in with_admin
    return await func(self, request, *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/components/config/config_entries.py", line 234, in post
    return await super().post(request, flow_id)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/components/http/data_validator.py", line 74, in wrapper
    return await method(view, request, data, *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/helpers/data_entry_flow.py", line 121, in post
    result = await self._flow_mgr.async_configure(flow_id, data)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/data_entry_flow.py", line 336, in async_configure
    result = await self._async_configure(flow_id, user_input)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/config_entries.py", line 1536, in _async_configure
    return await super()._async_configure(flow_id, user_input)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/src/homeassistant/homeassistant/data_entry_flow.py", line 383, in _async_configure
    result = await self._async_handle_step(
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
        flow, cur_step["step_id"], user_input
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    )
    ^
  File "/usr/src/homeassistant/homeassistant/data_entry_flow.py", line 483, in _async_handle_step
    result: _FlowResultT = await getattr(flow, method)(user_input)
                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/config/custom_components/garmin_connect/config_flow.py", line 177, in async_step_mfa
    return await self._async_garmin_connect_mfa_login()
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/config/custom_components/garmin_connect/config_flow.py", line 109, in _async_garmin_connect_mfa_login
    await self.hass.async_add_executor_job(self._api.resume_login, self._login_result2, self._mfa_code)
  File "/usr/local/lib/python3.14/concurrent/futures/thread.py", line 86, in run
    result = ctx.run(self.task)
  File "/usr/local/lib/python3.14/concurrent/futures/thread.py", line 73, in run
    return fn(*args, **kwargs)
  File "/usr/local/lib/python3.14/site-packages/garminconnect/__init__.py", line 588, in resume_login
    result1, result2 = self.garth.resume_login(client_state, mfa_code)
                       ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.14/site-packages/garth/http.py", line 209, in resume_login
    self.oauth1_token, self.oauth2_token = sso.resume_login(
                                           ~~~~~~~~~~~~~~~~^
        *args, **kwargs
        ^^^^^^^^^^^^^^^
    )
    ^
  File "/usr/local/lib/python3.14/site-packages/garth/sso.py", line 247, in resume_login
    return _complete_login(client)
  File "/usr/local/lib/python3.14/site-packages/garth/sso.py", line 267, in _complete_login
    oauth1 = get_oauth1_token(ticket, client)
  File "/usr/local/lib/python3.14/site-packages/garth/sso.py", line 158, in get_oauth1_token
    resp.raise_for_status()
    ~~~~~~~~~~~~~~~~~~~~~^^
  File "/usr/local/lib/python3.14/site-packages/requests/models.py", line 1026, in raise_for_status
    raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 401 Client Error: Unauthorized for url: https://connectapi.garmin.com/oauth-service/oauth/preauthorized?ticket=ST-0633056-ID1fl5AnLGQP5sSCbWOd-cas&login-url=https://sso.garmin.com/sso/embed&accepts-mfa-tokens=true

Log errors with existing MFA secured account - flooding logfile while trying to automatically (re)login:

2026-03-17 09:51:48.415 ERROR (SyncWorker_2) [garminconnect] Login failed: 403 Client Error: Forbidden for url: https://connectapi.garmin.com/oauth-service/oauth/exchange/user/2.0 (status=403)
Traceback (most recent call last):
  File "/usr/local/lib/python3.14/site-packages/garminconnect/__init__.py", line 506, in login
    if not getattr(self.garth, "profile", None):
           ~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.14/site-packages/garth/http.py", line 143, in profile
    return self.user_profile
           ^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.14/site-packages/garth/http.py", line 133, in user_profile
    self._user_profile = self.connectapi(
                         ~~~~~~~~~~~~~~~^
        "/userprofile-service/socialProfile"
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    )
    ^
  File "/usr/local/lib/python3.14/site-packages/garth/http.py", line 227, in connectapi
    resp = self.request(method, "connectapi", path, api=True, **kwargs)
  File "/usr/local/lib/python3.14/site-packages/garth/http.py", line 172, in request
    self.refresh_oauth2()
    ~~~~~~~~~~~~~~~~~~~^^
  File "/usr/local/lib/python3.14/site-packages/garth/http.py", line 220, in refresh_oauth2
    self.oauth2_token = sso.exchange(self.oauth1_token, self)
                        ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.14/site-packages/garth/sso.py", line 183, in exchange
    resp.raise_for_status()
    ~~~~~~~~~~~~~~~~~~~~~^^
  File "/usr/local/lib/python3.14/site-packages/requests/models.py", line 1026, in raise_for_status
    raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 403 Client Error: Forbidden for url: https://connectapi.garmin.com/oauth-service/oauth/exchange/user/2.0
2026-03-17 09:51:48.420 ERROR (MainThread) [custom_components.garmin_connect] Connection error occurred during Garmin Connect login request: Login failed: 403 Client Error: Forbidden for url: https://connectapi.garmin.com/oauth-service/oauth/exchange/user/2.0

[LsVzqz]

Strangely enough, I did not upgrade to 2026.3.2, but I started to get some connection errors (401) to the garmin site.. I'm on 2026.3.1. I documented the issue here:

#419

[rzitter]

After upgrade i got an 403 instead of 401:

Failed setup, will retry: Login failed: 403 Client Error: Forbidden for url: https://connectapi.garmin.com/oauth-service/oauth/exchange/user/2.0

But i see the same error in the OP

[LsVzqz]

After upgrade i got an 403 instead of 401:

Failed setup, will retry: Login failed: 403 Client Error: Forbidden for url: https://connectapi.garmin.com/oauth-service/oauth/exchange/user/2.0

But i see the same error in the OP

Interesting.. I did not upgrade to 2026.3.2 (although I saw that upgrade available), but some of my garmin automations, using the garmin integration, started failing. Perhaps something changed on the garmin side, outside of the upgrade that broke the integration. I suppose we would need a non-upgraded HA instance to see if they get 403s or 401s.

[rzitter]

After upgrade i got an 403 instead of 401:
Failed setup, will retry: Login failed: 403 Client Error: Forbidden for url: https://connectapi.garmin.com/oauth-service/oauth/exchange/user/2.0
But i see the same error in the OP

Interesting.. I did not upgrade to 2026.3.2 (although I saw that upgrade available), but some of my garmin automations, using the garmin integration, started failing. Perhaps something changed on the garmin side, outside of the upgrade that broke the integration. I suppose we would need a non-upgraded HA instance to see if they get 403s or 401s.

Yes, that could be possible indeed. So far as i know there is no public release notes available about the Garmin API.

[cyberjunky]

All, some accounts have this problem, others don't, with and without MFA, seems an issue at Garmin's side, although their status page is all green, maybe account type/region/migration...

[jirinn]

I'm having the same issue the integration stopped working. Getting Login failed: 403 Client Error: Forbidden for url: https://connectapi.garmin.com/oauth-service/oauth/exchange/user/2.0

[fwmone]

Mine (w/o MFA, German account) stopped working about 12h ago, also release 2026.3.2 und 403 error. Garmin Connect (web / app / device sync) itself is working fine for me.

[cyberjunky]

Garmin changed something, for some accounts, which is currently being investigated cyberjunky/python-garminconnect#332

[alexanderznamensky]

Garmin changed something, for some accounts, which is currently being investigated cyberjunky/python-garminconnect#332

Hi! Thx for your work!
In my case - integration stop working few day ago also.

Login failed: 401 Client Error: Unauthorized for url: https://connectapi.garmin.com/oauth-service/oauth/preauthorized?ticket=ST-*****-cas&login-url=https://sso.garmin.com/sso/embed&accepts-mfa-tokens=true (status=401)
Traceback (most recent call last):
File "/usr/local/lib/python3.14/site-packages/garminconnect/init.py", line 491, in login
token1, token2 = self.garth.login(
~~~~~~~~~~~~~~~~^
self.username,
^^^^^^^^^^^^^^
self.password,
^^^^^^^^^^^^^^
return_on_mfa=self.return_on_mfa,
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
)
^
File "/usr/local/lib/python3.14/site-packages/garth/http.py", line 203, in login
self.oauth1_token, self.oauth2_token = sso.login(
~~~~~~~~~^
*args, **kwargs, client=self
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
)
^
File "/usr/local/lib/python3.14/site-packages/garth/sso.py", line 142, in login
return _complete_login(client)
File "/usr/local/lib/python3.14/site-packages/garth/sso.py", line 267, in _complete_login
oauth1 = get_oauth1_token(ticket, client)
File "/usr/local/lib/python3.14/site-packages/garth/sso.py", line 158, in get_oauth1_token
resp.raise_for_status()
~~~~~~~~~~~~~~~~~~~~~^^
File "/usr/local/lib/python3.14/site-packages/requests/models.py", line 1026, in raise_for_status
raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 401 Client Error: Unauthorized for url: https://connectapi.garmin.com/oauth-service/oauth/preauthorized?ticket=ST-*******-cas&login-url=https://sso.garmin.com/sso/embed&accepts-mfa-tokens=true

Another few accouts are working.
I can privide credentials, if you need for testing.

[gitviola]

Depending on your use-case, you might be able to switch over to this integration that I built to overcome the auth issue: https://github.com/gitviola/hass-intervals-icu

Intervals.icu has an official Garmin API integration, so Garmin automatically pushes data there. The neat thing is that intervals.icu has a great API to fetch some of this data https://intervals.icu/api/v1/athlete/0/wellness/2026-03-25.

For my use case that's enough. I used the Garmin integration for an eInk display to show some of my biomarkers:

[pejotigrek]

@gitviola interesting workaround, I used intervals.icu for some time, but in the end I didn't wanted another service "to maintain" and remember that my logins are somewhere there.

unfortunately this won't fix my case, as I use the integration also to push my data to garmin [weight, fat level and other stuff calculated from my bathroom scale] :(

[pejotigrek]

just as a follow-up: my second connected account [wife's garmin] just stopped working. this account is without MFA, and is "younger" as was created some time after my main one.

so it looks like garmin's changes indeed spread through all accounts in some time.

[cyberjunky]

Thanks for reporting this. This error is caused by a breaking change in HA 2026.4 combined with the old integration architecture that relied on garth/python-garminconnect. The integration has been completely rewritten (v3.0.0) using the new ha-garmin library which is fully HA Core compliant and fixes this.

Please test the 3.0.0-beta-01 release — install it manually or via HACS pre-release and let us know if this resolves the issue. Note: re-authentication will be required after upgrading.

[alexanderznamensky]

Hi!
I can confirm - it is working!
Thanks a lot for your work!
I'll test in details, so far - looks everything is OK.