Org Authorization Server

You can't customize the org authorization server's audience, claims, policies, or scopes.

• https://client-name.okta.com

• API Access Management license
• Custom Authorization Server: https://client-name.okta.com/oauth2/default

• Keycloak and Okta Integration: Complete Developer Guide
• /.well-known/openid-configuration

/oauth2/v1/ = Org Authorization Server

/oauth2/v1/token

Related

• Okta Authorization servers
• okta_app_oauth: groups_claim
• Authorization Server
• Okta pricing
• /.well-known/openid-configuration (Okta)
• Custom: /oauth2/default/v1/token
• /token

See also

• Okta Authorization, Okta Authorization servers: Org, Custom, Okta default custom authorization server
• Terraform okta_app_oauth (ref), type, groups_claim, redirect_uris, grant_types, post_logout_redirect_uris, token_endpoint_auth_method
• okta.com, /v1/, /v1/authorize, /oath2/, /oath2/default, /api/v1/users
• /token, Decode token: iss, /userinfo, /authorize, token_endpoint_auth_method, token_type, Bearer, invalid_grant, invalid_client, /.well-known/openid-configuration, /oauth2/v1/token, Token metadata