How to change the OAuth token iss/aud fields value

Questions OAuth/OIDC
1

Is it possible to change the iss/aud fields value when generating OAuth token with client credentials flow?
for example, from:
“iss”:“https://dev-349567.okta.com/oauth2/ausz7jzv93ET9WUYj356”,
“aud”:“oauth2app”

to:
“iss”:“https://mydomain.com”,
“aud”:“http://anotherdomain.com”

thanks.

2

Hi @yiwugan

At the moment, only the audience can be changed using Token Inline Hook functionality which requires API Access Management. If you do not have Token Inline Hook enabled on your Okta org, please feel free to drop an email to support@okta.com and request it.

The response of the hook should be like the following

{
    "commands": [{
        "type": "com.okta.access.patch",
        "value": [{
            "op": "replace",
            "path": "/claims/aud",
            "value": "http://anotherdomain.com"
        }]
    }]
}
3

Is this the current status as well or can we modify the iss value as of now? It will be really helpful when doing migrations.

4

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.