<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D50Z00008C3jYFSAZOkta Classic EngineAdministrationAnswered2024-04-30T09:18:25.000Z2018-02-20T02:04:13.000Z2018-03-15T17:13:35.000Z
How do I request an access token for a specific resource?
i have several client applications (web app) and several (APIs).  Each app can call a select set of those APIs.  Is there a way, that I can protect each api.  Say by having my client apps request an access token for a specific api?  And passing along the user information in the access token?

  • Hi Cletis,

     

    Thank you for reaching out to Okta community.

    The documentation shown for the Okta API Management should be able to assist you with this. Take a look here: https://support.okta.com/help/Documentation/Knowledge_Article/API-Access-Management

    I recommend opening a Customer Support ticket if you want that feature to be activated.

     

    Best regards,

     

    Adina Enache 

    Okta Support
    Expand Post
  • CletisG.63095 (Customer)

    That didn't really answer my question.  I have looked over all the documentation and videos.

     

    Lets say my .NET app, requires access to two separate apis.  How do I handle that configuration in okta?  Do I have two different authorization servers or one?  As in the .net example, I dont really see a way to request an access token from another "authorization server".

     

    Basically we are going to have multiple .net apps and multipe apis.  These apps need to be able to call the apis on behalf of the user.  Each app will have a certain subset of the apis that is allowed to call.  

     

    I am sure someone has done this before, I am just not sure how to mimic that in okta.  The documentation is very basic and does not really go into more advanced scenarios.

     

    Is there an example of something like this that I can look at?
    Expand Post
  • Hi Cletis,

     

    You will need separate OIDC in Okta for every web app and for every API you will need an authorization server. 

    For a deeper understanding of your configuration and desired functionality, please open a support ticket via https://support.okta.com/help/open_case so we can better assist you.

     

     

    Thank you,

     

    Adina Enache

    Okta support
    Expand Post
  • j5v7c (j5v7c)

    Hello,

     

    Thanks for posting your inquiry in Okta Community Portal.

     

    ​If you receive a great answer to your question(s), please help readers find it by marking it the best answer. Hover over the answer and click "Best Answer." 

     

    Thank you,

     

    ​Dylann Fezeu

    OHC Team
    Expand Post
This question is closed.
Loading
How do I request an access token for a specific resource?