title: For a B2B Enterprise REST API, should requesting an access token in oAuth2 invalidate previously granted access tokens to that Client ID?
body: <p>For a B2B REST API servicing Enterprise clients who may have multiple applications using a Client ID/Secret: </p>
  
  <p>If you send a request for an oAuth2 access token for a specific Client ID and Client Secret and receive an access token then later on send another request for a token with that same Client ID/Secret, should that invalidate the previous access token?</p>
  
  <p>In other words, in this case, should a Client ID/Secret be able to request and use multiple valid access tokens?  Are there different cases where this should be implemented or not?</p>