The client is not authorized to use the provided grant type

Hi, I have been trying access my login page at http://localhost:3000 but getting below error.

POST https://{domain}.okta.com/oauth2/{authServer}/v1/interact 400 (Bad Request)

Sign in error: OAuthError: The client is not authorized to use the provided grant type. Configured grant types: [authorization_code, implicit].

I have enabled all the required grant types on server (Application page and Access policies page) and on the client side I am using Okta sign in widget. I have tried all the trail and error stuff but not able to get any breakthrough, I would appreciate any help regarding this as I am stuck on this for days now.

Thank you in advance.

Are you using an Okta Classic org, or an Okta Identity Engine org? The /interact endpoint is only possible if you are using an Okta Identity Engine org. If you’re not sure which you’re using, go to https://{domain}.okta.com/.well-known/okta-organization (you can just navigate to this in your browser). You should see a key “pipeline” in the JSON response. If the pipeline is “v1” you are using an Okta Classic Org, but if you see “idx” you are using an Okta Identity Engine org.

If you are using a Classic Org, set useClassicEngine to true in your widget config (Widget v7+). If you’re using an Widget v5 or 6, you instead need to set useInteractionCodeFlow to false

If you are in fact using an Identity Engine org, make sure “Embedded widget sign-in support” is enabled under Settings → Account, as mentioned in our docs here.

Hi Andrea,

FIXED

Thank you so much for your prompt response, I was using Okta Identity Engine org, and I was able to enable interaction code grant type by following the documentation link you gave. My issue got resolved and now I am able to login successfully.

1 Like

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.