# \#early-access **URL:** https://community.auth0.com/tag/early-access/2479.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [On-Behalf-Of token exchange with Per-Application Access](https://community.auth0.com/t/on-behalf-of-token-exchange-with-per-application-access/204473)
**Author:** [@tvc](https://community.auth0.com/u/tvc)\ **Replies:** 3\ **Last updated:** [October 23, 2026, 9:28am UTC](https://community.auth0.com/t/on-behalf-of-token-exchange-with-per-application-access/204473 "2026-10-23T09:28:54Z")
I want to use on behalf of token exchange for a few of our endpoints, but I currently run into issues on organizations with Per-Application Access enabled. The moment I turn it off, it works. But when I enable it, I get…