# How do you enable custom token exchange for tenant?

**URL:** <https://community.auth0.com/t/how-do-you-enable-custom-token-exchange-for-tenant/190171>\
**Category:** Get Help\
**Tags:** tenants, management-api\
**Created:** [August 5, 2025, 1:55pm UTC](https://community.auth0.com/t/how-do-you-enable-custom-token-exchange-for-tenant/190171 "2025-08-05T13:55:30Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jason\_7dwarves](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jason_7dwarves/32/71057_2.png) [@jason\_7dwarves](https://community.auth0.com/u/jason_7dwarves)\
**Post date:** [August 5, 2025, 1:55pm UTC](https://community.auth0.com/t/how-do-you-enable-custom-token-exchange-for-tenant/190171/1 "2025-08-05T13:55:30Z")

</div>

Hi! I am looking to leverage custom token exchange in our tenant. We have been told that the feature is available to us. When looking through this the [Custom Token Exchange] documentation, it only mentions how to enable it for an application. I attempted to enable for an application and got this error message:

`{ "statusCode": 403, "error": "Forbidden", "message": "The ` `token` ` exchange feature is not enabled for this tenant.", "errorCode": "feature_not_enabled"}`

I am guessing it needs to be enabled through the management API [Update tenant settings | Auth0 Management API v2], but the documentation doesn’t specify what key to pass to enable custom token exchange.

---

<div class="post-metadata">

**Author:** ![remus.ivan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/remus.ivan/32/68771_2.png) [@remus.ivan](https://community.auth0.com/u/remus.ivan)\
**Post date:** [August 5, 2025, 3:38pm UTC](https://community.auth0.com/t/how-do-you-enable-custom-token-exchange-for-tenant/190171/3 "2025-08-05T15:38:34Z")

</div>

Hi @jason_7dwarves,

Welcome to the Auth0 Community!

The **Setup** segment of our [Custom Token Exchange](https://auth0.com/docs/authenticate/custom-token-exchange) documentation presents how to enable it for you application by setting the `allow_any_profile_of_type` attribute under `token_exchange` to `["custom_authentication"]`when creating or updating the client via the Management API.

However, at first the documentation also states that:

> Custom Token Exchange is currently in Early Access for Enterprise customers only. Reach out to your Auth0 contact to request access.

This would be the requirements to use the new **Custom Token Exchange** feature.  
Hope this helps!  
Best regards,  
Remus

---

<div class="post-metadata">

**Author:** ![jason\_7dwarves](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jason_7dwarves/32/71057_2.png) [@jason\_7dwarves](https://community.auth0.com/u/jason_7dwarves)\
**Post date:** [August 11, 2025, 1:21pm UTC](https://community.auth0.com/t/how-do-you-enable-custom-token-exchange-for-tenant/190171/4 "2025-08-11T13:21:02Z")

</div>

Great, thanks @remus.ivan ! Our PM reached out to our Auth0 contact and they enabled it for us. Everything is working as expected now.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [August 25, 2025, 1:21pm UTC](https://community.auth0.com/t/how-do-you-enable-custom-token-exchange-for-tenant/190171/5 "2025-08-25T13:21:06Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.