Resource Owner Password

OAuth 2.0 Resource Owner Password Credentials Grant

Configuration
Resource Owner Password Flow
1
CLIENT APP

Authenticate with Username & Password

Send the user's credentials directly to the token endpoint using the password grant type to receive tokens.

/oauth2/v1/token grant_type=password
Configuration
/oauth2/default/v1/
Configure Okta Domain and Authorization Server to load scopes
cURL Command

          
        
2
CLIENT APP Optional

Test Token with API

Test the access token by making an authenticated API request to a resource server.

cURL Command

          
        

Optional APIs

Use the endpoints below to inspect, revoke, or end sessions for the tokens obtained above.

Call the /userinfo endpoint with the access token to retrieve the authenticated user's profile claims. API Reference ↗

cURL Command

              
            

Call the /introspect endpoint to inspect the token and verify its active status, scopes, and metadata. API Reference ↗

cURL Command

              
            

Call the /revoke endpoint to revoke an access or refresh token, rendering it unusable. API Reference ↗

cURL Command

              
            

End the user's Okta session using RP-Initiated Logout. Will open in a new browser window. API Reference ↗

Auto from Step 1
cURL Command

              
            

App Management APIs

Use the Okta Management API to view and update the application. Requires management scopes (e.g. okta.apps.read, okta.apps.manage).

Call GET /api/v1/apps/{appId} with the access token to retrieve the application object from Okta. API Reference ↗

cURL Command

              
            

Call PUT /api/v1/apps/{appId} to update the application. Use "Load Current" to fetch the current app JSON, edit it, then send the update. API Reference ↗

cURL Command