Requesting /oauth2/default/v1/authorize with openid okta.users.manage as the scopes seems to succeed, but trying to get a token from /oauth2/default/v1/token then fails: error=invalid_scope&error_description=One+or+more+scopes+are+not+configured+for+the+authorization+server+resource What’s the obv…

The confusingly named “Default” authorization is actually a custom authorization server, its just the one that we create for you. The Org Authorization Server is different, and is the one used when making the request to /oauth2/v1/authorize and /oauth2/v1/token. If you use these endpoints instead, …

Authorizing Okta scopes: invalid scope error

Questions

andrea January 21, 2022, 9:48pm 2

Custom Authorization Servers do not support the Okta API scopes, like okta.users.manage. See this thread and the linked documentation for reference

Post		Replies	Views
Getting 401 after using access token Questions	5	6416	June 19, 2020
Okta built in scopes not available for custom authorization servers? Questions	3	7966	November 24, 2020
Scope issue when authorizing Oauth OAuth/OIDC api , java	2	2630	June 13, 2022
Problem in generating OAuth token for Okta API scopes OAuth/OIDC	4	5029	February 12, 2024
Invalid_scope when trying to get a bearer token via API in Postman API	2	2832	February 13, 2024

Authorizing Okta scopes: invalid scope error

Related topics