Add okta.myAccount.* Reserved Scopes to a Custom Authorization Server
Oct 8, 2025
API Access Management
Okta Classic Engine
Okta Identity Engine
Overview
Before July 2024, Okta displayed okta.myAccount.* scopes within a Custom Authorization Server's Scope page by default. However, as of July they will need to be added manually in the Scope table.
Applies To
- Custom Authorization Server
- API Access Management
Cause
okta.myAccount.* scopes do not show up in the Scopes tab for a Custom Authorization Server.
Solution
All scopes documented in MyAccount Management need to be manually added by going to Security > API. Then, after selecting the Custom Authorization Server, select the Scopes tab, and then add a scope by:
- Click the Add Scope Button.
- Add one of the okta.myAccount.* scopes and click Create.
- The scope will be added at the top of the table.
NOTE: Okta also reserves the okta.* namespace, so arbitrary scopes with okta.* cannot be created. Only the ones listed in the above link are permitted.
