# \#oauth **URL:** https://devforum.okta.com/tag/oauth/36.md [Latest](https://devforum.okta.com/latest.md) · [Categories](https://devforum.okta.com/categories.md) · [Tags](https://devforum.okta.com/tags.md) --- ## [We’d ❤️ your input: 5-min Developer Experience Survey](https://devforum.okta.com/t/we-d-your-input-5-min-developer-experience-survey/34020)
**Author:** [@akanksha\_bhasin](https://devforum.okta.com/u/akanksha_bhasin)\ **Replies:** 1\ **Last updated:** [July 29, 2025, 6:27pm UTC](https://devforum.okta.com/t/we-d-your-input-5-min-developer-experience-survey/34020 "2025-07-29T18:27:30Z")
Hi everyone! We are gathering insights from developers who use (or evaluate) Okta SDKs, APIs, and the Sign-In Widget. We’ve compiled a quick ~5-minute Developer Experience Survey and would love your perspective. Why… --- ## [API custom scope scalability](https://devforum.okta.com/t/api-custom-scope-scalability/31950)
**Author:** [@Florian](https://devforum.okta.com/u/Florian)\ **Replies:** 1\ **Last updated:** [March 20, 2025, 1:15pm UTC](https://devforum.okta.com/t/api-custom-scope-scalability/31950 "2025-03-20T13:15:00Z")
We want to protect internal APIs for the machine-to-machine use-case. The clients for the API would have different privileges so using scopes seems reasonable for that. However, in Okta we define a custom scope on the a… --- ## [Is there a control on how many un-authorized OIDC token request would be allowed before blocking the client](https://devforum.okta.com/t/is-there-a-control-on-how-many-un-authorized-oidc-token-request-would-be-allowed-before-blocking-the-client/30925)
**Author:** [@manandan](https://devforum.okta.com/u/manandan)\ **Replies:** 1\ **Last updated:** [November 5, 2024, 4:19pm UTC](https://devforum.okta.com/t/is-there-a-control-on-how-many-un-authorized-oidc-token-request-would-be-allowed-before-blocking-the-client/30925 "2024-11-05T16:19:48Z")
Hi, Have an oidc client configured with client\_credentials grant, to obtain a token, client credentials are being passed, lets say if there is a typo in the credentials, at least in the secret, how many such un-authoriz… --- ## [Question about API Service Integration type, and Implement authorization by grant type](https://devforum.okta.com/t/question-about-api-service-integration-type-and-implement-authorization-by-grant-type/30670)
**Author:** [@Damian](https://devforum.okta.com/u/Damian)\ **Replies:** 3\ **Last updated:** [October 12, 2024, 11:51pm UTC](https://devforum.okta.com/t/question-about-api-service-integration-type-and-implement-authorization-by-grant-type/30670 "2024-10-12T23:51:37Z")
Hi, I am looking for a solution that will allow my external service, integrated into Okta as an OIN App, to read data from my customers’ Okta organizations. My goal is to avoid creating new Client IDs and Client Secrets… --- ## [What should be the correct workflow in the octa marketplace application to integrate different companies into our service?](https://devforum.okta.com/t/what-should-be-the-correct-workflow-in-the-octa-marketplace-application-to-integrate-different-companies-into-our-service/30796)
**Author:** [@Vovik](https://devforum.okta.com/u/Vovik)\ **Replies:** 0\ **Last updated:** [October 2, 2024, 8:21am UTC](https://devforum.okta.com/t/what-should-be-the-correct-workflow-in-the-octa-marketplace-application-to-integrate-different-companies-into-our-service/30796 "2024-10-02T08:21:26Z")
We have written an integration service with okta We can now create the same copies of applications saml for our clients so that they can log in to our service with okta. That is, we have for each client to write the… --- ## [OIN App - authorization](https://devforum.okta.com/t/oin-app-authorization/30786)
**Author:** [@liquidus](https://devforum.okta.com/u/liquidus)\ **Replies:** 0\ **Last updated:** [October 1, 2024, 1:19pm UTC](https://devforum.okta.com/t/oin-app-authorization/30786 "2024-10-01T13:19:02Z")
Hi I would like to become ISV for okta. I want to use Okta API to fetch customers data from okta orgs (users, groups etc.). I know there is a procedure to submit OIN app which is not ideal solution for me. I would like … --- ## [OIDC login from mobile app fails when using Okta as external IDP](https://devforum.okta.com/t/oidc-login-from-mobile-app-fails-when-using-okta-as-external-idp/29658)
**Author:** [@adg102](https://devforum.okta.com/u/adg102)\ **Replies:** 2\ **Last updated:** [August 13, 2024, 9:23am UTC](https://devforum.okta.com/t/oidc-login-from-mobile-app-fails-when-using-okta-as-external-idp/29658 "2024-08-13T09:23:41Z")
I’m using Okta as an external IDP with IdentityServer 3 (legacy software, I know). I’ve used IdentityServer 3 with other OIDC clients and they’ve all worked correctly. Okta works correctly when the user is logging in fro… --- ## [Invalid grant and The refresh token is invalid or expired](https://devforum.okta.com/t/invalid-grant-and-the-refresh-token-is-invalid-or-expired/29454)
**Author:** [@nyfer](https://devforum.okta.com/u/nyfer)\ **Replies:** 10\ **Last updated:** [July 22, 2024, 11:48am UTC](https://devforum.okta.com/t/invalid-grant-and-the-refresh-token-is-invalid-or-expired/29454 "2024-07-22T11:48:47Z")
I faced issue of bad request for default/v1/token endpoint and with error message as follows {"error":"invalid\_grant","error\_description":"The refresh token is invalid or expired."} This happened after I logged in to… --- ## [OIDC iss parameter in URL](https://devforum.okta.com/t/oidc-iss-parameter-in-url/19187)
**Author:** [@Hekmil](https://devforum.okta.com/u/Hekmil)\ **Replies:** 3\ **Last updated:** [January 31, 2024, 4:52pm UTC](https://devforum.okta.com/t/oidc-iss-parameter-in-url/19187 "2024-01-31T16:52:05Z")
Hi, I have implemented 2 OIDC SPA apps that are accessible through direct link or through Okta dashboard. I have an interrogation that I can’t answer reading Okta admin or developer documentation so I’m trying here. Th… --- ## [Do i need custom authorization server for machine to machine authentication?](https://devforum.okta.com/t/do-i-need-custom-authorization-server-for-machine-to-machine-authentication/26225)
**Author:** [@katsurace](https://devforum.okta.com/u/katsurace)\ **Replies:** 1\ **Last updated:** [January 5, 2024, 12:45am UTC](https://devforum.okta.com/t/do-i-need-custom-authorization-server-for-machine-to-machine-authentication/26225 "2024-01-05T00:45:27Z")
We have API gateway and it requires a valid token from Okta to access the API, now we want to open this API for other applications to use (same organization) and are planning to implement machine to machine app and using… --- ## [Why not all scopes are available for API applications?](https://devforum.okta.com/t/why-not-all-scopes-are-available-for-api-applications/26197)
**Author:** [@alex-linx](https://devforum.okta.com/u/alex-linx)\ **Replies:** 1\ **Last updated:** [January 2, 2024, 4:50pm UTC](https://devforum.okta.com/t/why-not-all-scopes-are-available-for-api-applications/26197 "2024-01-02T16:50:53Z")
Hi, I created an API application, I am using client credentials flow to read some data from the API. One of the things I need it to have a scope of okta.org.read in order to read the org settings. However, I see that … --- ## [Attend our "Hands on introduction to OAuth" workshop for a chance at Okta Developer Certification Scholarship](https://devforum.okta.com/t/attend-our-hands-on-introduction-to-oauth-workshop-for-a-chance-at-okta-developer-certification-scholarship/16579)
**Author:** [@emeka](https://devforum.okta.com/u/emeka)\ **Replies:** 0\ **Last updated:** [October 13, 2021, 6:19pm UTC](https://devforum.okta.com/t/attend-our-hands-on-introduction-to-oauth-workshop-for-a-chance-at-okta-developer-certification-scholarship/16579 "2021-10-13T18:19:10Z")
Join Okta for an interactive two-part workshop designed to teach you everything you need to know to successfully build secure websites, mobile apps, and API services using OAuth and OpenID Connect. Aaron Parecki Senior … --- ## ["The access token provided does not contain the required scopes" in OAuth for Okta](https://devforum.okta.com/t/the-access-token-provided-does-not-contain-the-required-scopes-in-oauth-for-okta/25569)
**Author:** [@jeffemandel](https://devforum.okta.com/u/jeffemandel)\ **Replies:** 2\ **Last updated:** [October 16, 2023, 5:20am UTC](https://devforum.okta.com/t/the-access-token-provided-does-not-contain-the-required-scopes-in-oauth-for-okta/25569 "2023-10-16T05:20:16Z")
I am trying to access the UserInfo endpoint from java using Nimbusds. I created a client: "oauthClient": { "autoKeyRotation": true, "client\_id": "0oaal5rjiwSkD2yvB5d7", "token\_… --- ## [Is there a way we can unlock a user once he updates his password?](https://devforum.okta.com/t/is-there-a-way-we-can-unlock-a-user-once-he-updates-his-password/25514)
**Author:** [@kirannambiar](https://devforum.okta.com/u/kirannambiar)\ **Replies:** 0\ **Last updated:** [October 9, 2023, 7:46am UTC](https://devforum.okta.com/t/is-there-a-way-we-can-unlock-a-user-once-he-updates-his-password/25514 "2023-10-09T07:46:45Z")
We are trying to improve the user experience and the requirement we have is user instead of going in and unlocking, if the users account is locked we want the user to update the password and along with that their account… --- ## [API dotnet with user Right](https://devforum.okta.com/t/api-dotnet-with-user-right/24735)
**Author:** [@AlexandreUnca](https://devforum.okta.com/u/AlexandreUnca)\ **Replies:** 0\ **Last updated:** [July 3, 2023, 8:24am UTC](https://devforum.okta.com/t/api-dotnet-with-user-right/24735 "2023-07-03T08:24:48Z")
Hello, I am builder a Angular + dotnet core api app. I pass the token jtw to the api to secure the end point. I want my API to have only the right that the user has. When i am doing this, I pass the jtw that the a… --- ## [Custom Auth Server Not Returning AD Groups In Token](https://devforum.okta.com/t/custom-auth-server-not-returning-ad-groups-in-token/24411)
**Author:** [@ntalbot77](https://devforum.okta.com/u/ntalbot77)\ **Replies:** 3\ **Last updated:** [May 31, 2023, 5:37pm UTC](https://devforum.okta.com/t/custom-auth-server-not-returning-ad-groups-in-token/24411 "2023-05-31T17:37:09Z")
I have created a claim on a custom auth server entitled groups and used the info found at the link below to create the expression for both okta and active directory groups…When I preview the token, it only shows the Okta… --- ## [Allow users to manage their own (or other) profiles?](https://devforum.okta.com/t/allow-users-to-manage-their-own-or-other-profiles/24063)
**Author:** [@murrayg](https://devforum.okta.com/u/murrayg)\ **Replies:** 2\ **Last updated:** [April 25, 2023, 3:52pm UTC](https://devforum.okta.com/t/allow-users-to-manage-their-own-or-other-profiles/24063 "2023-04-25T15:52:08Z")
Hello, We have numerous SaaS applications where we are planning to use Okta for authentication and authorization. Each application uses it’s own APIs with API-defined scopes to perform app-specific functions. Additio… --- ## [Register a new user through IDX](https://devforum.okta.com/t/register-a-new-user-through-idx/23925)
**Author:** [@vdc305](https://devforum.okta.com/u/vdc305)\ **Replies:** 1\ **Last updated:** [April 11, 2023, 11:05pm UTC](https://devforum.okta.com/t/register-a-new-user-through-idx/23925 "2023-04-11T23:05:22Z")
I am unable to register a user with Okta OEI. Below is the okta configuration export const oktaClient = () =\> { return new OktaAuth({ issuer: 'https://{customAuthzServer}/oauth2/{customAuthzServerID}', clientI… --- ## [Okta ADSSO is not working for non admin local user](https://devforum.okta.com/t/okta-adsso-is-not-working-for-non-admin-local-user/23602)
**Author:** [@Jvalekar](https://devforum.okta.com/u/Jvalekar)\ **Replies:** 0\ **Last updated:** [March 9, 2023, 3:28pm UTC](https://devforum.okta.com/t/okta-adsso-is-not-working-for-non-admin-local-user/23602 "2023-03-09T15:28:54Z")
Hi All, We are facing an okta ADSSO issue in the client environment. We are using react SPA for the authentication and authorization of the application for all the desktop apps. Now Desktop user who doesn’t have local a… --- ## [Trying to implement okta-oauth-js examples, no permission to fetch openid-configuration](https://devforum.okta.com/t/trying-to-implement-okta-oauth-js-examples-no-permission-to-fetch-openid-configuration/23527)
**Author:** [@jrg](https://devforum.okta.com/u/jrg)\ **Replies:** 3\ **Last updated:** [March 4, 2023, 5:49pm UTC](https://devforum.okta.com/t/trying-to-implement-okta-oauth-js-examples-no-permission-to-fetch-openid-configuration/23527 "2023-03-04T17:49:36Z")
I have an Okta developer account set up with the ‘default’ authorization server that it came with, and configured for an SPA requiring PKCE and a grant type of Authorization Code. I’ve manually worked through the author… --- ## [Specify redirectURI in getWithRedirect() Okta-auth-js library](https://devforum.okta.com/t/specify-redirecturi-in-getwithredirect-okta-auth-js-library/23313)
**Author:** [@sseekamp](https://devforum.okta.com/u/sseekamp)\ **Replies:** 3\ **Last updated:** [February 27, 2023, 10:11pm UTC](https://devforum.okta.com/t/specify-redirecturi-in-getwithredirect-okta-auth-js-library/23313 "2023-02-27T22:11:47Z")
What I want to accomplish: A user signs into my app and lands on an authenticated page. I need to call various vendor specific authorization servers and apps (web app with client secret) from the UI to retrieve an auth… --- ## [Okta signin-widget automatically redirect users already logged](https://devforum.okta.com/t/okta-signin-widget-automatically-redirect-users-already-logged/21534)
**Author:** [@fcerullo](https://devforum.okta.com/u/fcerullo)\ **Replies:** 2\ **Last updated:** [February 21, 2023, 2:07pm UTC](https://devforum.okta.com/t/okta-signin-widget-automatically-redirect-users-already-logged/21534 "2023-02-21T14:07:11Z")
Hi All we have an angular SPA using below Okta js libraries: "@okta/okta-angular": "^5.2.0", "@okta/okta-auth-js": "6.7.4", "@okta/okta-signin-widget": "6.6.1" token/storage oktaAuth settings are as below: "tokenMana… --- ## [Refresh token exchanges to /oauth2/default/v1/token 401s from staging but not from local](https://devforum.okta.com/t/refresh-token-exchanges-to-oauth2-default-v1-token-401s-from-staging-but-not-from-local/22587)
**Author:** [@slemly](https://devforum.okta.com/u/slemly)\ **Replies:** 8\ **Last updated:** [December 1, 2022, 8:12pm UTC](https://devforum.okta.com/t/refresh-token-exchanges-to-oauth2-default-v1-token-401s-from-staging-but-not-from-local/22587 "2022-12-01T20:12:11Z")
We recently built out an endpoint in our API to allow a user to supply a refresh token and retrieve a new refresh token, using a request from our services as described here. When testing on our local machines, this flow… --- ## [Okta SSO with Desktop App](https://devforum.okta.com/t/okta-sso-with-desktop-app/21616)
**Author:** [@Jvalekar](https://devforum.okta.com/u/Jvalekar)\ **Replies:** 0\ **Last updated:** [August 18, 2022, 9:57am UTC](https://devforum.okta.com/t/okta-sso-with-desktop-app/21616 "2022-08-18T09:57:14Z")
We have one use case where we need to perform okta integration with desktop enterprise standalone application and perform the SSO. I need guidance on the following points, Which SDK needs to be used for Okta sso? 2.We… --- ## [Access to fetch issue with "Swagger","Spring Webflux" and "Okta"](https://devforum.okta.com/t/access-to-fetch-issue-with-swagger-spring-webflux-and-okta/20947)
**Author:** [@SarahK](https://devforum.okta.com/u/SarahK)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 4:25pm UTC](https://devforum.okta.com/t/access-to-fetch-issue-with-swagger-spring-webflux-and-okta/20947 "2022-06-13T16:25:06Z")
Hello, I’m building my jr. portfolio and I ran into a strange issue… I thought, I already created a Security Config for Swagger, but it’s not working. I take it from: Baeldung Have anyone of you an idea, where my is… --- ## [OIDC Okta integration](https://devforum.okta.com/t/oidc-okta-integration/20300)
**Author:** [@jkirkpatrick](https://devforum.okta.com/u/jkirkpatrick)\ **Replies:** 5\ **Last updated:** [May 31, 2022, 7:07pm UTC](https://devforum.okta.com/t/oidc-okta-integration/20300 "2022-05-31T19:07:00Z")
I just want to ask if anyone here has any good info/documentation for handling an OIDC app on the OIN. I want other orgs to be able to integrate with us, so they can login and get authenticated by Okta and then I use the… --- ## [Inbound Federation using okta-auth-js SDK](https://devforum.okta.com/t/inbound-federation-using-okta-auth-js-sdk/20193)
**Author:** [@ShaikLuqmaan](https://devforum.okta.com/u/ShaikLuqmaan)\ **Replies:** 6\ **Last updated:** [May 1, 2022, 5:20pm UTC](https://devforum.okta.com/t/inbound-federation-using-okta-auth-js-sdk/20193 "2022-05-01T17:20:00Z")
We have a SPA that uses okta-auth js SDK to authenticate users. Now we wanted to implement a use case where the external IDP users will be able to access our application using Okta’s Inbound Federation. To implement the… --- ## [/api/v1/authn - Change Primary authentication model to validate the posted username against Okta users profile email field instead of login field](https://devforum.okta.com/t/api-v1-authn-change-primary-authentication-model-to-validate-the-posted-username-against-okta-users-profile-email-field-instead-of-login-field/18849)
**Author:** [@Melroy.Britto](https://devforum.okta.com/u/Melroy.Britto)\ **Replies:** 0\ **Last updated:** [January 11, 2022, 3:49pm UTC](https://devforum.okta.com/t/api-v1-authn-change-primary-authentication-model-to-validate-the-posted-username-against-okta-users-profile-email-field-instead-of-login-field/18849 "2022-01-11T15:49:03Z")
Background - most of our Okta users have their login as firstname.lastname and email as a valid email, they access multiple applications, we want to standardized login policy so we decided that login should always be an … --- ## [How To Access The /Verify Network Response In My JavaScript Using Okta Widget and MFA](https://devforum.okta.com/t/how-to-access-the-verify-network-response-in-my-javascript-using-okta-widget-and-mfa/20050)
**Author:** [@0ccDave](https://devforum.okta.com/u/0ccDave)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 1:31pm UTC](https://devforum.okta.com/t/how-to-access-the-verify-network-response-in-my-javascript-using-okta-widget-and-mfa/20050 "2022-04-05T13:31:44Z")
Hi, I’m using the Okta Widget on my browser and I am trying to implement MFA. Before when I was just using the password to confirm my users without MFA the below worked just fine. const oktaSignIn = new OktaSignIn({ … --- ## [Using the Okta sign-in widget, I need to get user session status via Okta API in my own API](https://devforum.okta.com/t/using-the-okta-sign-in-widget-i-need-to-get-user-session-status-via-okta-api-in-my-own-api/19715)
**Author:** [@0ccDave](https://devforum.okta.com/u/0ccDave)\ **Replies:** 5\ **Last updated:** [March 15, 2022, 8:15pm UTC](https://devforum.okta.com/t/using-the-okta-sign-in-widget-i-need-to-get-user-session-status-via-okta-api-in-my-own-api/19715 "2022-03-15T20:15:41Z")
Hi, What I’m trying to accomplish is this flow: Utilize the okta sign-in widget On successful response from the sign in widget grab the accessToken and email (or whatever is needed to accomplish what I’m thinking of t… [Next page](https://devforum.okta.com/tag/oauth/36.md?match_all_tags=true&page=1&tags%5B%5D=oauth)