Generating the OAuth Access Token

When generating an OAuth access token, you must include a scope object which defines a set of resources and operations that an access token allows. There are two application scopes available. They both contain all of the permitted Oracle Identity Cloud Service scopes based on the privileges represented by the Oracle Identity Cloud Service application roles granted to the user specified in the JWT.

urn:opc:idm:__myscopes__: This scope will generate an OAauth token expiry up to a 3600 second (1 hour). The applicable range is 60 seconds to 3600 seconds.
urn:opc:idm:__myscopes__ urn:opc:resource:expiry=<valueinseconds>: This scope will generate an OAuth token expiry up to 31556952 seconds (1 year). The value must be passed in seconds and the applicable range is 60 seconds to 31556952 seconds (1 year)

Related Topics