Can a Single API Token Be Used for Multiple Tenants
Jul 21, 2025
Administration
Okta Identity Engine
Okta Classic Engine
Overview
This article clarifies whether an API token created in one organization can be used in a different, separate organization.
Applies To
- API Tokens
Solution
API tokens created in one tenant cannot be used to perform API requests in another tenant.
- API tokens are used to authenticate requests to the Okta API.
- An API token is issued for a specific user and all requests with the token act on behalf of the user.
- API tokens inherit the privilege level of the admin that created them.
- For security reasons, the tokens are tied to the user and tenant in which they are created and, therefore, cannot be used to authenticate API requests made on another tenant.
