fkgfn (fkgfn) asked a question.
How do I request for okta.users.read scope from default okta authorization server ?
When I make this call with the correct url, clientId and redirectURI values ->
https://dev-123456.okta.com/oauth2/default/v1/authorize?
response_type=code&
client_id=123456random123456&
redirect_uri=https%3A%2F%2Fthis.is.correct.com&
scope=okta.users.read
I get an error as follows :
invalid_scope&error_description=One or more scopes are not configured for the authorization server resource.
NOTE : I have configured the scope okta.users.read in the application corresponding to the client I am trying to authorize. It still behaves the same way as above
Login to your OKTA org as Admin. Go to the API--->Authorization Servers. Click on default. go to the Scope TAB. Add your custom scope there. you can also make it default scope.