Why is a new OAuth token generated for every REST API call even when using the same connection alias

ShajuJ · Thursday

Hi all,

I’m working on a Service Portal landing page that loads multiple widgets. Each widget executes a server script that calls a SailPoint API using a sn_ws.RESTMessageV2 instance.

I’m noticing that every RESTMessage execution is generating a new OAuth token, even though all the widgets:

Use the same REST Message record

Use the same OAuth 2.0 connection alias

Point to the same Application Registry

I confirmed this by checking sys_outbound_http_log — multiple /token requests appear even when the page is idle and only loads once.