I have a web app that manages users' Google Calendar. Recently, I got an "invalid credential" error when retriving calendar list and figured out the user account is a g suite account (because of different domain). However, I still can get the access token as well as refresh token. I also can get open ID information from the account. But just cannot access the calendar. Other accounts ends with gmail.com worked fine.
Did I miss anything in authentication for these g suite users?