Grant type 'https://auth0.com/oauth/grant-type/password-realm' not allowed for the client

Knowledge Articles
1

Problem statement

We are getting the error “Grant type ‘https://auth0.com/oauth/grant-type/password-realm’; not allowed for the client.” In our application settings we see a checkbox for the “Password” grant type, but not ‘https://auth0.com/oauth/grant-type/password-realm’. How can we enable this grant type?

1.jpeg
1.jpeg961×519 31.9 KB

Cause

This can usually happen when the ‘password’ grant is enabled in the client (application), but not ‘https://auth0.com/oauth/grant-type/password-realm’.

When you turn on the ‘Password’ grant type via the dashboard - under the Advanced Settings of the application - both of these get turned on. However, it’s possible to turn on only one via the Management API.

Solution

If you turn the ‘Password’ grant type off → Save → and then again → Save in the dashboard, you will get both grants working.

If that does not work for some reason, you can also update the client via the Management API. Auth0 Management API v2

Specifically, the “grant_types” array should have both the following grant types (and any other you need additionally):

{
  "grant_types": [
    "password",
    "https://auth0.com/oauth/grant-type/password-realm",
    // ... any other additional grant types
  ]
}

The order of the array does not matter.