Fix Make Facebook publish blocked by error 368

Make's Facebook Pages module fails with 368 OAuthException. The block is Facebook-side; this post shows the clearing order.

A blue social post stops at an orange barrier beside a permission key and inspection lens, above the exact title and AutomateLab.tech.
Clear the Facebook identity block first, then re-authorize the Make connection.

TL;DR: Make's Facebook module fails with 368 because Facebook temporarily blocked the posting identity; clear the block in Facebook's support flow, re-authorize the connection, then retry.

The scenario is fine, the mapping is fine, and the error still lands on every run: (368, OAuthException): Confirm your identity before you can publish as this Page. Teams usually rebuild the Make scenario first. That never helps, because the block sits on the Facebook identity doing the posting, not on the module. The failure is filed in the Automation Error Index with other provider-side blocks that masquerade as scenario bugs.

Why does error 368 block Facebook Page publishing from Make?

Code 368 is Meta's temporary block for policy violations on the Graph API. Meta's error-handling reference lists 368 as "temporarily blocked for policies violations" with the instruction to wait and retry the operation. When the Make Facebook Pages > Create a Post module surfaces it, Facebook refused the publish call before anything in the scenario could matter. The module is the messenger.

The Make community thread (17 posts) pins the confusing part: the reporter completed identity verification in Facebook settings and found no instructions in the Facebook app, yet the error persisted. A sibling thread from 2022 reports the identical string, which proves the failure mode recurs across Make versions and is not a regression in any single release. The clearing path runs through Facebook's account-support and business-integrity flows rather than the Make module, and the same "scenario looks fine" trap shows up in other Make faults such as the scenario that will not trigger.

Conceptual two-actor sequence: Make sends a Page publish request to Facebook. Facebook temporarily blocks the posting identity, refuses publishing and returns 368 OAuthException. Make surfaces the provider error; rebuilding scenario mappings cannot clear the identity block. No duration is implied.
Facebook refuses the publish request at the posting identity; Make carries error 368 back to the scenario.

How to clear the 368 block and publish again?

Work Facebook-side first, Make-side second. Rebuilding mappings before the block clears only burns runs.

  1. Confirm which identity Facebook sees. Open the failing module and note whether it posts as the Page itself or as a user on the Page, plus which Page role that user holds. A second Page that posts fine through the same scenario points at the blocked identity, not the connection. Write down the Page name, the posting identity, and the exact error subcode before touching anything.
  2. Re-authorize the Make connection. In Make, open the Facebook connection used by the scenario, re-authorize it, and confirm the Page and its publishing permission are still granted on the Facebook side of the OAuth screen. Do not clone the scenario; the same connection object carries the token the module uses, and a stale grant re-triggers the block message even after Facebook clears it.
  3. Wait out the temporary window, then retry once. Because 368 is explicitly temporary, pause the scenario rather than hammering retries - repeated blocked publishes in a tight loop read as abuse. Wait, run a single manual test publish, and check the module output before re-enabling the schedule. If the test succeeds, resume; if it returns 368 again, return to step 2 instead of widening the fix to unrelated modules. Make's own Retry error handler covers how to space retries once the block clears.

Run Facebook's identity-confirmation flow to completion. In Facebook, open Account Support or Business Integrity (the names shift by region; both live off the account-quality surface, not the general settings page where verification alone already failed for the reporter). Complete every pending confirmation step there, including any Page-level publishing authorization, until the surface shows no outstanding checks. General settings verification is not the same flow, which is why it had no effect.

Checklist before leaving Facebook:
- No pending identity confirmations in Account Support
- No Page publishing restrictions in Business Integrity
- Posting identity still holds a Page role that can publish
Page recovery states: blocked by 368; Facebook checks cleared in Account Support and Business Integrity with a publishing Page role; existing Make connection re-authorized with Page publishing permissions; wait, then one manual test. Repeated attempts stay paused. Resume only when the post ID matches the actual Page post and expected identity. No fixed wait or automatic approval is promised.
Clear Facebook checks, re-authorize the existing connection, then wait and test once. Resume only after verifying the Page post and identity.
Manual-test decision tree: if a post ID returns, match the actual Page post and expected Page identity before resuming the schedule; 2 consecutive clean scheduled runs close the incident. If the result is still 368, keep retries paused, revisit Facebook support and re-authorization, and wait longer. A different token or permission error needs its matching diagnosis, including re-authorization or restoring missing scopes.
Resume only after the returned post ID matches the expected Page post and identity; continued 368 stays paused.

How to verify the block is gone?

Publish one manual test post through the same module and confirm a post id returns instead of the 368 payload. Then check the Page itself shows the post with the expected identity (Page name, not a personal profile). Re-enable the schedule only after that single clean run; two consecutive clean scheduled runs close the incident. If the module instead returns a permission error naming a missing scope, the OAuth grant lost a permission during re-authorization - repeat step 3 and tick every Page permission the module requests.

How to recover when the duplicate still appears?

Three leftovers cover most repeat reports. A different Page posts fine but this one does not: the block is Page-scoped, so run step 2 signed in as an admin of the failing Page rather than a different asset. The error cleared then returned: something in the posting pattern re-tripped the policy filter (identical text posted to several Pages in minutes is the classic trigger); stagger posts and vary first comments. The module now fails with a token error instead of 368: the connection grant expired during the wait, so re-authorize again - this is a new fault, and the Make timeout fix shows the same "second error is a different error" shape.

FAQ

Is error 368 a Make bug?

No. The string, subcode, and remedy all come from Facebook's Graph API; Make surfaces what the API returns. A sibling thread from 2022 with the same string across older Make versions confirms it is provider-side and recurring.

Why did identity verification in Facebook settings not clear it?

Settings verification and the publishing-block review are different flows. The reporter completed the former with no effect because the block clears through Account Support or Business Integrity, where Page publishing authorization actually lives.

How long should I wait before retrying?

Meta documents 368 as temporary without a fixed window. Pause the scenario, complete the support flow, then send one manual test. If it still returns 368, wait longer rather than looping retries, since rapid blocked publishes look like abuse.

Should I rebuild the Make scenario or clone the module?

No. Cloning preserves the blocked identity and the stale grant, so the error follows. Re-authorize the existing connection after Facebook clears the block and test the existing module first.

What if a second Facebook Page publishes fine through the same scenario?

That isolates the block to the first Page's identity or roles. Run the support flow as an admin of the failing Page and confirm its publishing authorization specifically; the working Page proves the scenario and connection shape are sound.