# Client Credentials missing from Access Policy Rule editor in Free Trial Plan tenant (API Services app) **URL:** \ **Category:** OAuth/OIDC\ **Created:** [September 30, 2026, 9:48am UTC](https://devforum.okta.com/t/client-credentials-missing-from-access-policy-rule-editor-in-free-trial-plan-tenant-api-services-app/35480 "2026-09-30T09:48:03Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![abhijit.mali](https://avatars.discourse-cdn.com/v4/letter/a/b5e925/32.png) [@abhijit.mali](https://devforum.okta.com/u/abhijit.mali)\ **Post date:** [September 30, 2026, 9:48am UTC](https://devforum.okta.com/t/client-credentials-missing-from-access-policy-rule-editor-in-free-trial-plan-tenant-api-services-app/35480/1 "2026-09-30T09:48:03Z")
Hi Team, I’m seeing unexpected behavior in a newly created Okta tenant and would like to understand whether this is expected behavior, a tenant entitlement limitation, or a UI defect. **Tenant Type** - This issue is occurring in an Okta Free Trial Plan tenant. The Admin Console shows: - **FREE TRIAL PLAN** Created an application using: Applications → Create App Integration → API Services Name - AllegroWebCore **Application Configuration** Application settings: Application Type: Service Grant Types: ✓ Client Credentials The General Settings page shows: Application type: Service Grant type: Client acting on behalf of itself ☑ Client Credentials **Authorization Server Configuration:** Security → API → Authorization Servers → default Created an Access Policy: Policy Name: Server To Server Assigned clients: AllegroWebCore **Issue** : When I click **Add Rule** under the Access Policy, the Grant Type section only displays: Authorization Code Device Authorization The following section is missing: Client acting on behalf of itself ☑ Client Credentials **Additional Observation** I also reviewed the Okta support article: \< [Okta Support Center (Lightning)](https://support.okta.com/help/s/article/the-client-is-not-authorized-to-use-the-provided-grant-type?language=en_US) \> The article states that, for a grant type to be authorized: 1. The grant type must be enabled on the client application. 2. The grant type must be enabled in the Authorization Server Access Policy Rule. [[support.okta.com]](https://support.okta.com/help/s/article/the-client-is-not-authorized-to-use-the-provided-grant-type?language=en_US) In my tenant: Application Type: Service Grant Types: ✓ Client Credentials However, the Rule editor does not provide any option to enable **Client Credentials** , making it impossible to complete the configuration described in the support documentation. **Troubleshooting Performed** I have already tried: 1. Creating a brand-new API Services application. 2. Creating a brand-new Access Policy. 3. Assigning only the new Service App to the policy. 4. Testing in Incognito mode and a different browser. 5. Verifying that the application type is **Service**. 6. Verifying that **Client Credentials** is enabled on the application. 7. Verifying that the Authorization Server and Access Policy are configured correctly. The behavior remains the same. **Questions** 1. Is **Client Credentials** expected to appear in the Access Policy Rule editor for Service Apps in an **Okta Free Trial Plan** tenant? 2. Has there been any recent change related to Service Apps, machine-to-machine applications, or Non-Human Identity capabilities that changes how Client Credentials rules are configured? 3. Is this a known Admin Console UI issue, feature flag issue, or tenant-specific entitlement limitation? Let me know if you need any more info. **Include These Screenshots** 1. Service App General Settings 2. Access Policy 3. Add Rule dialog ---
**Author:** ![vk-giri](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/vk-giri/32/5178_2.png) [@vk-giri](https://devforum.okta.com/u/vk-giri)\ **Post date:** [September 30, 2026, 10:18am UTC](https://devforum.okta.com/t/client-credentials-missing-from-access-policy-rule-editor-in-free-trial-plan-tenant-api-services-app/35480/2 "2026-09-30T10:18:18Z")
Hi, Currently, the Free Orgs don’t support the Client Credential flow type. So this is an expected behaviour. ---
**Author:** ![alisaduncan](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/alisaduncan/32/3429_2.png) [@alisaduncan](https://devforum.okta.com/u/alisaduncan)\ **Post date:** [September 30, 2026, 1:26pm UTC](https://devforum.okta.com/t/client-credentials-missing-from-access-policy-rule-editor-in-free-trial-plan-tenant-api-services-app/35480/3 "2026-09-30T13:26:24Z")
Hi @abhijit.mali , Welcome to the community! As @vk-giri mentioned, this is expected in Integrator Free Org plans. As it is a new change, I’d love to understand your use case so I can advocate for our dev community’s needs. Thank you for posting this and alerting us to what you tried. If you feel comfortable sharing more information about how you’re using this Okta org and the work you need to do with it, please feel free to DM. I’m gathering stories like yours to present to the Product team. Happy coding! ---
**Author:** ![mob](https://avatars.discourse-cdn.com/v4/letter/m/858c86/32.png) [@mob](https://devforum.okta.com/u/mob)\ **Post date:** [October 21, 2026, 10:31pm UTC](https://devforum.okta.com/t/client-credentials-missing-from-access-policy-rule-editor-in-free-trial-plan-tenant-api-services-app/35480/4 "2026-10-21T22:31:29Z")
I’m running into this exact same issue. Spinning my wheels trying to figure out why I’m not seeing this option… Working on a PoC in an integrator account and cant do something as basic as client credentials? Is there any way to get this enabled on an ad-hoc basis?