Device Authorization Grant Flow Custom Claims

I’ve been experimenting with the Device Authorization Grant Flow

When calling the oauth2/v1/token endpoint after verification has been completed I cannot seem to get any custom claims to return in either the ID or Access token. Not sure if this is by design or if there is some configuration that I am missing.

The Org Authorization Server (which uses endpoints like /oauth2/v1/token and /oauth2/v1/device/authorize) do not support custom claims. If you want to use your custom auth server instead, insure that you are using it as the base Url for your requests.

  1. Request the device verification code:
    https://org.okta.com/oauth2/authorizationServerId/v1/device/authorize
  2. Request access, ID, and refresh tokens:
    https://org.okta.com/oauth2/authorizationServerId/v1/token

Thank You! I was totally missing the custom auth server id.

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.