This article describes how to configure an Okta Custom Authorization Server to use manual signing key rotation instead of the default automatic key rotation feature.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• API Access Management
• Key Rotation

NOTE: Manual key rotation should be used only when automatic key rotation is not feasible. If there is a security incident, Okta rotates all keys as part of a defensive maneuver; this setting may conflict during that process.

Navigate to the API security settings in the Okta Admin Console, change the signing key rotation value to manual, and rotate the signing keys.

1. Go to Security > API in the Okta Admin Console.
2. Select the relevant authorization server.
3. Change the value of Signing Key Rotation to Manual and click Save.
4. Go to the authorization server Settings tab and click Rotate Signing Keys to manually rotate the keys.

NOTE: The Rotate Signing Keys button and the Valid Signing Keys section only display when the Signing Key Rotation option is set to Manual.

Related References

• Key Rotation
• Rotate Signing Keys