Skip to content

feat(app_oauth): add dpop_bound_access_tokens attribute - #2860

Open
Azmah-Bad wants to merge 1 commit into
okta:masterfrom
Azmah-Bad:feat/2028-dpop-bound-access-tokens
Open

feat(app_oauth): add dpop_bound_access_tokens attribute#2860
Azmah-Bad wants to merge 1 commit into
okta:masterfrom
Azmah-Bad:feat/2028-dpop-bound-access-tokens

Conversation

@Azmah-Bad

Copy link
Copy Markdown

Expose settings.oauthClient.dpopBoundAccessTokens on okta_app_oauth as a read/write boolean. Omitted -> Okta API default (false, surfaced via Computed); explicit value drift-detects an out-of-band Admin-UI flip, using the same GetRawConfig() null-vs-set pattern as pkce_required.

The v6 okta-sdk-golang already models the field
(OpenIdConnectApplicationSettingsClient.DpopBoundAccessTokens), so this is pure schema/build/read plumbing plus an acceptance test.

Fixes #2028

Expose settings.oauthClient.dpopBoundAccessTokens on okta_app_oauth as a
read/write boolean. Omitted -> Okta API default (false, surfaced via
Computed); explicit value drift-detects an out-of-band Admin-UI flip,
using the same GetRawConfig() null-vs-set pattern as pkce_required.

The v6 okta-sdk-golang already models the field
(OpenIdConnectApplicationSettingsClient.DpopBoundAccessTokens), so this is
pure schema/build/read plumbing plus an acceptance test.

Fixes okta#2028

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@esmelser-ze

Copy link
Copy Markdown

@pranav-okta @aditya-okta - would you be willing to review this at your convenience? We'd like it as DPoP is required for Org2Org OAuth SCIM provisioning. Thanks!

@jkodroff

jkodroff commented Aug 4, 2026

Copy link
Copy Markdown

@dhiwakar-okta Maybe you could help get this reviewed? We (Pulumi) have a mutual customer who is waiting on this fix.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add DPoP flag on Oauth apps

3 participants