Overview
On This Page
What is a refresh token
A refresh token is a special token that is used to generate additional access tokens. This allows you to have short-lived access tokens without having to collect credentials every time one expires. You request this token alongside the access and/or ID tokens as part of a user's initial authentication flow.
Set up your application
Refresh tokens are available for a subset of Okta OAuth 2.0 client applications, specifically web or native applications. See our OAuth 2.0 and OIDC overview for more about creating an OpenID Connect application.
Be sure to specify refresh_token as a data_type value for the grant_type parameter when adding an OAuth client app using the /apps API. Alternatively, after you set up an application, you can select the Refresh Token option for Allowed grant types on the General Settings tab in the Admin Console.
Support
If you need help or have an issue, post a question in our Developer Forum.