In Okta Access Gateway (OAG) versions below 2022.10.0, the API Keep Alive is not automatically refreshing API tokens, causing them to expire after 30 days, invalidating the OAG configuration status.

• Okta Access Gateway versions below 2022.10.0
• API
• API Token Expiration

Upgrade OAG to the latest version or, at minimum, to version 2022.10.0, as this is the version that fixed this issue.

For versions below 2022.10.0, consider the following workaround:

• From OAG AdminUI > select and edit (by clicking on the pencil icon) any application > click Save and then Done within 30 days to force save the application and force an API refresh.
• If the API token has already expired, create a NEW API token in Okta Admin under Security > API > Tokens Tab > Create Token.

Related References

• Configure Okta tenant as an Identity Provider
• How an API Token is Expired and Gets Deactivated
• See Release notes from Okta OAG