Authorization Code Timeout (seconds)
Authorization Code Entropy (bytes)
Disallow the plain PKCE code challenge method
Include Issuer Identifier in Authorization Response
Track User Sessions for Logout
Client Secret Retention Period (Minutes)
Pushed Authorization Request (PAR) Settings
PAR Status	Disabled Enabled Required
PAR Reference Timeout (seconds)
PAR Reference Entropy (bytes)
Refresh Token and Persistent Grant Settings
Persistent Grant Max Lifetime	Grants Do Not Expire
Persistent Grant Idle Timeout	Grants Do Not Timeout Due To Inactivity
Refresh Token Length (characters)
Roll Refresh Token Values (default policy)
Minimum Interval to Roll Refresh Tokens
Refresh Token Rolling Grace Period (Seconds)
Reuse Existing Persistent Access Grants for Grant Types	Implicit Authorization Code Resource Owner Password Credentials
Allow Unidentified Clients to Make Resource Owner Password Credentials Grants
Allow Unidentified Clients to Make Assertion Grants
Token Endpoint Base URL
Require offline_access Scope To Issue Refresh Tokens
offline_access Require Consent Prompt
Persistent Grant Extended Attributes

Authorization Consent
Bypass Authorization for Previously Approved Persistent Grants
Bypass Authorization for Previously Approved Consents
Consent Max Lifetime (Days)	Consents Do Not Expire
Consent User Interface	Default External
External Consent IdP Adapter
External Consent Scopes Attribute
External Consent Authorization Details Attribute
OAuth Administrative Web Services Settings
Password Credential Validator
Persistent Grant Management API
Access Token Manager
Required Scope
Cross-Origin Resource Sharing Settings

Device Authorization Grant Settings
User authorization URL
Registered Authorization Path
pending authorization timeout (seconds)
device polling interval (seconds)
Check Activation Code	After Authentication Before Authentication
bypass activation code confirmation
Enable Cookieless authentication api user authorization
Return ID token on OpenID with Device Authorization Grant
JWT Secured Authorization Response Mode (JARM)
JWT Lifetime (Seconds)
Demonstrating Proof-of-Possession (DPoP)
Require DPoP proof JWT nonce
DPoP proof JWT lifetime (Seconds)
Enforce DPoP proof JWT replay prevention