Error 400 When Making Postman API Calls to Okta REST APIs Integrated with Microsoft ADFS (MFA)

[tnguyen571]

I am creating Okta REST APIs with Postman, following the documentation at https://developer.okta.com/docs/reference/rest/*get-an-access-token-and-make-a-request.

However, when I attempt to call Get New Access Token, I receive a 400 Bad Request response.

My URL is:

“oauth2/default/v1/authorize?response_type=code&client_id=xxx&state=2&scope=okta.users.read&redirect_uri=xxx&code_challenge=xxx&code_challenge_method=S256”

There are no apparent errors in the System Log.

Pls suggest a possible root cause.
Thanks

[andrea]

Remove /default from your request path. When requesting okta.* API scopes, you MUST use the Org Authorization Server and not a Custom Authorization Server. The ‘Default’ server you are trying to use is actually a Custom Authorization Server and is not the same thing as the Org Authorization Server.

More details in our docs here about how to Implement OAuth for Okta: Implement OAuth for Okta | Okta Developer