Persistent Refresh Token behavior

[kulwch]

Hi,
Okta API Scopes can’t be used with the custom Auth servers indeed. And you can’t customize the lifetime for Org Server.

Change the Org Authorization Server Policy/Rules

The Org Authorization Server does not support the customizations you are referring to. These options (to create Access Policies and Rules, as well as custom Scopes and Claims) is only available for Custom Authorization Servers. The Org Authorization Server will only issue Access and ID tokens with a 1 hour lifetime.

Does this answer your question ?