Token expiration and deactivation

Tokens expire automatically after a certain period and can also be deactivated at any time.

Token expiration

Tokens are valid for 30 days from creation or last use, so that the 30 day expiration automatically refreshes with each API call.

Tokens that aren't used for 30 days expire.

The 30-day period is currently fixed and can't be changed for your organization.

Token deactivation

If a user account is deactivated in Okta, any API token created by that user account is deprovisioned at the same time.