How to enforce Client-Based Rate Limiting for OAuth Service Clients (Client Credentials Grant) in Okta?

Questions OAuth/OIDC
2

Hi Sami,

I don’t believe there is a way to setup Client-Based RL for the /token endpoint, its RL would fall under,

For the Resource Owner Password Grant type the /token endpoint is limited to 4 per second.
This might be a good enhancement Request at ideas.okta.com to see if something similar could be done for the Client Credentials flow.

thank you,