Getting error with JWT Profile Grant

Original message was deleted

FFO•2/21/23, 4:52 PM

Hm is it not urn:ietf:params:oauth:client-assertion-type:jwt-bearerurn:ietf:params:oauth:client-assertion-type:jwt-bearer in this case?

FFO•2/21/23, 4:56 PM

Hm gime a sec

FFO•2/21/23, 4:59 PM

Ah now i see it. "urn:ietf:params:oauth:client-assertion-type:jwt-bearer" is used to authenticate a client/app directly against the /introspect

FFO•2/21/23, 4:59 PM

no need to pass along the /token

FFO•2/21/23, 4:59 PM

If you want to get a token to send to an API you need to use a service user instead

FFO•2/21/23, 5:14 PM

Yes

FFO•2/21/23, 9:08 PM

The client/app credentials are not intended to get tokens.
We use service accounts for this, because they can receive access rights and generally are manageable like a user.