I want to use on behalf of token exchange for a few of our endpoints, but I currently run into issues on organizations with Per-Application Access enabled.
The moment I turn it off, it works. But when I enable it, I get an ‘invalid request’ with as description ‘parameter organization is invalid: org_blablabla’ (with blablabla obviously replaced with the actual org id) on the /oauth/token endpoint.
I’m following this tutorial: On-Behalf-Of Token Exchange - Auth0 Docs
I’ve also tried adding the custom api client as one of the applications of the organization but this had no effect.
I know that Per-Application access is currently in early access, but we want to use this if possible.
And I was wondering if this is a known issue or whether I need to follow some other steps perhaps not described in the tutorial.