This is normally caused by wrong authentication of the server side login API call. All server side calls require authentication using API admin “login_name” and “login_password”. If you mistakenly attempt to authenticate the call using constituent "username" and "password" you will end up with a successful call but the response will have empty JSESSIONID, token and nonce values.

For more information about server side calls, visit our API configuration documentation.