Error "Grant type 'https://auth0.com/oauth/grant-type/password-realm' not allowed for the client"

Last Updated: Nov 29, 2024

Overview

The following error is received:

Grant type ‘https://auth0.com/oauth/grant-type/password-realm’ not allowed for the client.

In the application settings, there is a checkbox for the “Password” grant type, but not ‘https://auth0.com/oauth/grant-type/password-realm’. How can this grant type be enabled?

Applies To

  • Grant type

Cause

This usually happens when the ‘password’ grant is enabled in the client (application), but ‘https://auth0.com/oauth/grant-type/password-realm’ is not.

Both are turned on when the ‘Password’ grant type is turned on via the dashboard (under the application’s Advanced Settings). However, it’s possible to turn on only one via the Management API, which must be what has happened in this case.

Solution

Turn the ‘Password’ grant type off > Save > and then on again > Save in the dashboard. This way, both grants will be working.

If that does not work for some reason, update the client via the Management API. Specifically, the “grant_types” array should have both the following grant types (and any other additionally needed):

{
  "grant_types": [
    "password",
    "https://auth0.com/oauth/grant-type/password-realm",
    // ... any other additional grant types
  ]
}

The order of the array does not matter.