# \#client-credentials-g **URL:** https://community.auth0.com/tag/client-credentials-g/470.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Client Credentials Flow for Organisation](https://community.auth0.com/t/client-credentials-flow-for-organisation/66390)
**Author:** [@mattbrown1](https://community.auth0.com/u/mattbrown1)\ **Replies:** 9\ **Last updated:** [July 8, 2024, 6:40pm UTC](https://community.auth0.com/t/client-credentials-flow-for-organisation/66390 "2024-07-08T18:40:47Z")
Hi. I’m looking to utilize the client credentials flow for organizations. Is it currently possible to request ‘organization’ scoped tokens using the API? Equally, is it possible to delegate the generation of these toke… --- ## [Unable to create custom claim with special character in the claim name](https://community.auth0.com/t/unable-to-create-custom-claim-with-special-character-in-the-claim-name/109670)
**Author:** [@venkatasandeep.kolis](https://community.auth0.com/u/venkatasandeep.kolis)\ **Replies:** 2\ **Last updated:** [June 21, 2023, 6:39pm UTC](https://community.auth0.com/t/unable-to-create-custom-claim-with-special-character-in-the-claim-name/109670 "2023-06-21T18:39:16Z")
I am trying to create an access token with a custom claim with a special character in the claim name(ex: user\_email) but I see the generated token is not taking up the claim. but I was successful with a special characte… --- ## [Client is not authorized to access, You need to create a \\"client-grant\\" associated to this API](https://community.auth0.com/t/client-is-not-authorized-to-access-you-need-to-create-a-client-grant-associated-to-this-api/81919)
**Author:** [@selvi](https://community.auth0.com/u/selvi)\ **Replies:** 3\ **Last updated:** [April 19, 2022, 11:33pm UTC](https://community.auth0.com/t/client-is-not-authorized-to-access-you-need-to-create-a-client-grant-associated-to-this-api/81919 "2022-04-19T23:33:40Z")
I am trying to get client credentials, but I am getting below error. URL: POST: https://domain/oauth/token Body: grant\_type: client\_credentials client\_id: client\_secret: audience: Error: { "error": "access\_… --- ## [Communicating secrets/secret exchange best practices](https://community.auth0.com/t/communicating-secrets-secret-exchange-best-practices/76234)
**Author:** [@Paul.K](https://community.auth0.com/u/Paul.K)\ **Replies:** 1\ **Last updated:** [January 13, 2022, 7:33pm UTC](https://community.auth0.com/t/communicating-secrets-secret-exchange-best-practices/76234 "2022-01-13T19:33:12Z")
I’m looking for a way to share credentials with my clients via an onboarding process securely, and I want to know if something exists I can reuse beyond the management API SDK (where I would be programming part of the so… --- ## [Add roles in payload of client credentials](https://community.auth0.com/t/add-roles-in-payload-of-client-credentials/67113)
**Author:** [@abelose90](https://community.auth0.com/u/abelose90)\ **Replies:** 5\ **Last updated:** [August 3, 2021, 3:17pm UTC](https://community.auth0.com/t/add-roles-in-payload-of-client-credentials/67113 "2021-08-03T15:17:33Z")
Hi, my use case is quite simple. I am running postman tests and the apis need the jwt token. Currently I am passing the bearer token manually, which I would like to automate. I payload of my bearer token I am adding Rol… --- ## [PKCE vs credentials grant token lifetime](https://community.auth0.com/t/pkce-vs-credentials-grant-token-lifetime/61990)
**Author:** [@corylogan](https://community.auth0.com/u/corylogan)\ **Replies:** 5\ **Last updated:** [May 4, 2021, 9:45am UTC](https://community.auth0.com/t/pkce-vs-credentials-grant-token-lifetime/61990 "2021-05-04T09:45:48Z")
We have two types of authentication to an API. One is where users log in through a react app on the web using the @auth0/auth0-react package, PKCE grant. The other type is machine to machine access using a client crede… --- ## [Adding custom payload data during M2M authentication(Client credentials flow)](https://community.auth0.com/t/adding-custom-payload-data-during-m2m-authentication-client-credentials-flow/59995)
**Author:** [@kamal.pradhan](https://community.auth0.com/u/kamal.pradhan)\ **Replies:** 3\ **Last updated:** [March 25, 2021, 10:47pm UTC](https://community.auth0.com/t/adding-custom-payload-data-during-m2m-authentication-client-credentials-flow/59995 "2021-03-25T22:47:48Z")
Hi, We are trying to pass some data in the form body when calling the “/oauth/token” endpoint during the m2m authentication using client client credential flow. payload custom data added : .xyz Domain Names | Join Gene… --- ## [Client Credentials Authentication via Pre-register Auth0 hook](https://community.auth0.com/t/client-credentials-authentication-via-pre-register-auth0-hook/58711)
**Author:** [@Orfen](https://community.auth0.com/u/Orfen)\ **Replies:** 1\ **Last updated:** [March 2, 2021, 4:53pm UTC](https://community.auth0.com/t/client-credentials-authentication-via-pre-register-auth0-hook/58711 "2021-03-02T16:53:34Z")
Hello, in my previous post I was after an invitation system using the Auth0 framework, but in the end we decided to manage the invites ourselves. We’ve set up our API as a regular web app, and i’m trying to get a client … --- ## [Best practices for machine to machine](https://community.auth0.com/t/best-practices-for-machine-to-machine/39016)
**Author:** [@GenadyMgr](https://community.auth0.com/u/GenadyMgr)\ **Replies:** 3\ **Last updated:** [March 9, 2020, 8:26am UTC](https://community.auth0.com/t/best-practices-for-machine-to-machine/39016 "2020-03-09T08:26:54Z")
Hi all! My application has a service. This service has multiple external clients (that are not necessarily users of the application). I want to use machine to machine auth flow for that service. Is there a way to set ea… --- ## [Client Credentials flow - pass extra parameters into Hook](https://community.auth0.com/t/client-credentials-flow-pass-extra-parameters-into-hook/9147)
**Author:** [@nick.savenko](https://community.auth0.com/u/nick.savenko)\ **Replies:** 1\ **Last updated:** [December 14, 2018, 5:24pm UTC](https://community.auth0.com/t/client-credentials-flow-pass-extra-parameters-into-hook/9147 "2018-12-14T17:24:09Z")
Hi guys, I am having some issues with Hooks. So, this is my case. I have a multi-tenant platform. And I am allowing tenant admins to request a client id and client secret, to call my platform apis. Every time, when ad… --- ## [Client Credentials flow to secure website - need to load web page after form post](https://community.auth0.com/t/client-credentials-flow-to-secure-website-need-to-load-web-page-after-form-post/8711)
**Author:** [@ecarter](https://community.auth0.com/u/ecarter)\ **Replies:** 0\ **Last updated:** [November 9, 2017, 6:11pm UTC](https://community.auth0.com/t/client-credentials-flow-to-secure-website-need-to-load-web-page-after-form-post/8711 "2017-11-09T18:11:05Z")
Hi all, Working with client credentials and a website - not an API. Ajax post will allow me to add a custom header with an access token, but I need the behavior of a standard form post. The result of the post should b… --- ## [Client Credentials and vulnerabilities](https://community.auth0.com/t/client-credentials-and-vulnerabilities/7951)
**Author:** [@ecarter](https://community.auth0.com/u/ecarter)\ **Replies:** 2\ **Last updated:** [August 28, 2017, 7:14pm UTC](https://community.auth0.com/t/client-credentials-and-vulnerabilities/7951 "2017-08-28T19:14:24Z")
I’ve read through your documents for client\_credentials as this is the flow we need to implement. I’m trying to develop a proof of concept through Auth0 for our company with for one of our Resources. If we trust the cl… --- ## [How to generate JWT and add to header via rules](https://community.auth0.com/t/how-to-generate-jwt-and-add-to-header-via-rules/7880)
**Author:** [@auth-zero-dev](https://community.auth0.com/u/auth-zero-dev)\ **Replies:** 1\ **Last updated:** [August 18, 2017, 5:06pm UTC](https://community.auth0.com/t/how-to-generate-jwt-and-add-to-header-via-rules/7880 "2017-08-18T17:06:54Z")
So I’m writing some rules that will call my own user API, and I’d like to include a JWT in the request to authorise auth0 as a trusted user, I’ve created a client credentials grant user and now would like to login in the… --- ## [Issue access token after third party API validation and include custom claims .NET API](https://community.auth0.com/t/issue-access-token-after-third-party-api-validation-and-include-custom-claims-net-api/7589)
**Author:** [@m.wagner](https://community.auth0.com/u/m.wagner)\ **Replies:** 2\ **Last updated:** [August 8, 2017, 2:30am UTC](https://community.auth0.com/t/issue-access-token-after-third-party-api-validation-and-include-custom-claims-net-api/7589 "2017-08-08T02:30:26Z")
Hi! I’m hoping to get some clarification and guidance with an API authentication flow that I am trying to implement in my ASP.NET C# Web API. I have some key goals: Use a trusted third-party’s jwt to authenticate with … --- ## [Why is the returned jwt access token invalid for Resource Server access?](https://community.auth0.com/t/why-is-the-returned-jwt-access-token-invalid-for-resource-server-access/7634)
**Author:** [@omar1](https://community.auth0.com/u/omar1)\ **Replies:** 1\ **Last updated:** [August 3, 2017, 7:40pm UTC](https://community.auth0.com/t/why-is-the-returned-jwt-access-token-invalid-for-resource-server-access/7634 "2017-08-03T19:40:47Z")
I have attempting to gain access to the a Management API via PHP so I can update user details. I’ve create a Resource Server API in my account area, validated the user, provided them with scopes (update:users, create:cli… --- ## [Accessing a Third Party Api Without Storing Credentials](https://community.auth0.com/t/accessing-a-third-party-api-without-storing-credentials/7140)
**Author:** [@me3](https://community.auth0.com/u/me3)\ **Replies:** 1\ **Last updated:** [June 20, 2017, 12:28am UTC](https://community.auth0.com/t/accessing-a-third-party-api-without-storing-credentials/7140 "2017-06-20T00:28:17Z")
Howdy! We are trying to develop a solution where we have an OIDC API (authenticated via Auth0) that calls external web API(s) (e.g, zendesk, harvest, stripe, …). When we call these external APIs we must not store the th… --- ## [Flow for SPA to API and API to API](https://community.auth0.com/t/flow-for-spa-to-api-and-api-to-api/6587)
**Author:** [@trondhindenes](https://community.auth0.com/u/trondhindenes)\ **Replies:** 4\ **Last updated:** [May 24, 2017, 5:42pm UTC](https://community.auth0.com/t/flow-for-spa-to-api-and-api-to-api/6587 "2017-05-24T17:42:18Z")
We have a bunch of administrative apis where we’re using Aurelia and Lock on the frontend to access them, and this works really well. The problem is that we’d also like to script against the same api using a multitude of…