For Single-Page Applications (SPA) and native apps, the admin UI does not allow editing client authentication configuration. However, the Rest API can be used to perform this change.

• OpenID Connect
• OAuth 2.0
• SPA App
• Native App

This is already set by default, but there could be an instance where it is not.

• For example, if the application was created programmatically and the parameter "token_endpoint_auth_method" is set to "client_secret_basic", the option is then greyed out.
  
   

1. Using Okta Public API Collections, make an API call to the /apps endpoint to get the parameters of the application:

2. Then, change the method from GET to PUT.
3. Set the body from "none" to "raw".
4. Copy and paste the setting and set "token_endpoint_auth_method" to "none".
5. Press SEND.

 
On the Okta dashboard can be seen that Client authentication is now set to "None".
 

Related References

• Retrieve an application
• Replace an application