
SumitJ.99820 (Customer) asked a question.
I want to test the Okta clientId and clientSecret provided by customer. The only API I see helpful is the token API ({issuerURI}/oauth2/default/v1/token) but this API requires the admin to create a custom token for the authorization server. This impacts the user experience. Is there a way to validate the clientId and clientSecret?

Correction: Admin needs to create a custom scope in order for the token API to work. The existing default scopes such as "profile, email, openid" do not work with the token API