Grant settings

Open a hosted authorization server and choose Settings, then Grants. Select the grant types, response types, and scopes the resource is allowed to advertise and execute.

Grant policy is evaluated with the resource's purpose and usages. An authorization server used by OID4VCI must expose the grants required by the issuer binding and credential offer. The issuer selector checks each grant independently and rejects a mixed or incompatible authorization-server selection.

Saving is an atomic, revision-guarded replacement of the typed grant section. Review affected clients and OID4VCI issuer bindings before removing a grant that is already in use.

Grant settings are fields of the aggregate hosted configuration below the selected UUID:

GET /api/platform/config/v1/tenants/{tenantId}/authorization-servers/{authorizationServerId}/configuration
PUT /api/platform/config/v1/tenants/{tenantId}/authorization-servers/{authorizationServerId}/configuration