Answer
The basic OData connector's authentication options don't line up well with IFS Cloud's identity provider in some setups — routing the same connection through Power Query's more flexible connector, using an OAuth-style sign-in flow, has worked around this for at least one case where the basic connector failed outright.