Okta for AI Agents Generates an Invalid Request Error When Executing XAA
Last Updated:
Overview
Corrupted Postman and Python repositories cause an invalid request error when an agent executes XAA on behalf of a service. Rebuilding the repositories resolves the error. The request to the Organization Authorization Server (AS) for an ID-JAG fails, and Okta generates the following error:
{
"error": "invalid_request",
"error_description": "'subject_token' is invalid: no delegation policy authorizes this token."
}
Applies To
- Okta Identity Engine (OIE)
- Okta for AI Agents
Cause
Corrupted Postman and Python repositories cause the failure.
Solution
How is the invalid request error resolved?
Rebuild the corrupted Postman and Python repositories to restore XAA functionality and allow the agent to execute successfully on behalf of the service.
- Rebuild the Postman repository.
- Rebuild the Python repository.
