Deleting tokens

Client applications use the tokens to access the resources on webMethods Integration. When you delete the tokens, the client application loses access to the resources owned by the resource owners.

Before you begin

Only users who have the required permission can delete tokens.

About this task

For expired Access Tokens, the Expiry Time column on the Token Management page displays Expired. If the Refresh Count is also 0, then the row in the Token Management page is removed.

Procedure

  1. Select Settings > OAuth 2.0 > Token Management.
  2. For a token, click Delete. When you delete a token from the list of active tokens, webMethods Integration deletes both the access token and the refresh token. If you want to prevent a client from accessing resources, you can delete the client.
    Note: If you are running a flow service or REST API multiple times, for example if you have scheduled the flow service or REST API, and if you delete the access token or deactivate or delete the client while the scheduled flow service or REST APIs are running, the flow service or REST API executions will still continue to work sometimes for a maximum of 840 seconds. After 840 seconds, the session expires and the token validation happens again. This is applicable only if the token has not expired.