I have an API (resource server) configured, with a given set of scopes declared. I have multiple 3rd party Clients configured that use the implicit grant autorisation call flow to get access_tokens on behalf of our users. Each 3rd party Client has different rights over the resource server and shou…

How can I restrict scopes a Client can use without duplicating APIs (ressource servers) ?

Topic		Replies	Views
How to restrict scopes requested by a third-party application Knowledge Articles authorization , scope , authorization-flow	1	1836	November 10, 2022
How to add client scopes and validate them for each login? Get Help scopes	4	3599	September 14, 2021
Is it possible to restrict the scopes available to a SPA Get Help scopes , spa	6	5638	February 6, 2023
What are the options for custom scopes per user and per Client. Get Help rules , custom-database , scopes	2	4124	December 17, 2018
More info on "any user on any application can ask for any scope defined here" Get Help scopes	7	4215	August 30, 2019