In addition to allowing users to sign in to our web application, we’d like them to be able to create API tokens that they can use to call our REST APIs from scheduled jobs or other applications.
This seems like something that Okta would have 1st class support for, but I am having trouble finding documentation for it. Can you help point me in the right direction?
You can use OAuth 2.0 for Okta APIs feature in order to issue access tokens and use them on Okta API endpoints. If you would like to try it out, please send us an email to support@okta.com and request this feature to be activated on your tenant.