# REST API rate limit

**URL:** <https://devforum.okta.com/t/rest-api-rate-limit/18360>\
**Category:** Questions\
**Created:** [December 3, 2021, 7:22am UTC](https://devforum.okta.com/t/rest-api-rate-limit/18360 "2021-12-03T07:22:10Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![lahiruchandima](https://avatars.discourse-cdn.com/v4/letter/l/e0b2c6/32.png) [@lahiruchandima](https://devforum.okta.com/u/lahiruchandima)\
**Post date:** [December 3, 2021, 7:22am UTC](https://devforum.okta.com/t/rest-api-rate-limit/18360/1 "2021-12-03T07:22:10Z")

</div>

[This](https://developer.okta.com/docs/reference/rl-global-enduser/) page specifies the rate limits that are applied to REST API calls.

What will happen to requests sent after breaching the rate limit?

I have to call the Okta [primary authentication endpoint](https://developer.okta.com/docs/reference/api/authn/#primary-authentication) in my application. Is it possible to set a lower rate limit for any requests made for a particular user, so the endpoint rate limit is not breached if endpoint is called rapidly for a single user, so any requests made for other users will not be affected?

---

<div class="post-metadata">

**Author:** ![phi1ipp](https://avatars.discourse-cdn.com/v4/letter/p/85f322/32.png) [@phi1ipp](https://devforum.okta.com/u/phi1ipp)\
**Post date:** [December 3, 2021, 2:36pm UTC](https://devforum.okta.com/t/rest-api-rate-limit/18360/2 "2021-12-03T14:36:16Z")

</div>

1. Requests above rate limit will get 429 response from Okta. It’s described in the documentation.
2. What you are describing is called ‘Client Rate Limit’, and it’s currently only configurable for `/authorize` and `/login/login.html` endpoints. Not sure if `/authn` is in the roadmap.

Any insights from Okta folks? @andrea

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [December 3, 2021, 4:12pm UTC](https://devforum.okta.com/t/rest-api-rate-limit/18360/3 "2021-12-03T16:12:29Z")

</div>

[Far as I know](https://developer.okta.com/docs/reference/rl-clientbased/), the two you listed are the only ones it applies to at this time.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [December 4, 2021, 4:13pm UTC](https://devforum.okta.com/t/rest-api-rate-limit/18360/4 "2021-12-04T16:13:26Z")

</div>

Closed on December 4, 2021, 4:13pm UTC

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.