
DeanL.07862 (Test test) asked a question.
Is it possible to create an OpenID application that is used for authentication on this organization and at the same time, enabling client credentials flow on this app so that I can call the API endpoint to discover the organization's directory structure?
Am I bound to
- create a separate API services type app, OR
- have the admin sign in with OKTA - save the admin's refresh token
to do that?

I have Client Credentials checked and this is the error I get when accessing the /token endpoint.
Hello @DeanL.07862 (Test test) Thank you for reacting out to our Community!
Please see our documentation on how to achieve this below:
https://developer.okta.com/docs/guides/implement-grant-type/clientcreds/main/#about-the-client-credentials-grant
Hope this helps and if this answered your question, please mark this as Best Answer!