Authorizing API service app with okta.orgs.read or okta.orgs.manage scope causes error

Questions OIN Submissions
1

Hello, I’m working on an API service integration app for the OIN. I would like to add the okta.orgs.read scope to my app but this is causing an error when I try to authorize it in my developer org for testing.

Here are the steps I’m doing:

  1. Create an API service app in the OIN manager.
  2. Add the required scopes (such as okta.users.read, etc.) without the okta.orgs.read scope.
  3. Click “Test in Okta” in the OIN manager.
  4. Click “Install & Authorize” in my developer okta tenant.

This all works successfully. However, when I add okta.orgs.read or okta.orgs.manage to the list of requested scopes and attempt to “Install & Authorize” in my developer tenant I get the following error.

image
image2034×190 19.6 KB

Looking in the developer console the request made when I click to “Install & Authorize” the connection returns 400

{
    "errorCode": "E0000001",
    "errorSummary": "Api validation failed: grantedScopes",
    "errorLink": "E0000001",
    "errorId": "oaetn8leGTsQVSL0XU7FumToA"
}