SSO
Okta
API integration
Ship SSO features without building the integration. Full Okta API access via Proxy, normalized data through Unified APIs, and 730+ MCP-ready tools for AI agents — all extensible to your exact use case.
Talk to usUse Cases
Why integrate with Okta
Common scenarios for SaaS companies building Okta integrations for their customers.
Automate user provisioning and deprovisioning
SaaS companies moving upmarket need to automatically create and suspend user accounts when enterprise IT teams assign or remove employees in Okta. This eliminates manual account management and satisfies SOC 2 compliance requirements around timely access revocation.
Sync Okta groups to in-app roles and workspaces
Enterprise customers expect their Okta group structure to map directly to permissions and team assignments inside your product. By reading Okta groups through a unified API, your app can auto-assign users to the correct workspace, billing tier, or role without any manual configuration.
Pull rich user profiles to auto-populate your app
Instead of asking enterprise users to manually fill in their department, title, manager, and location, SaaS companies can pull this data directly from Okta's Universal Directory to pre-populate user profiles and personalize the product experience from day one.
Enforce license compliance by syncing app assignments
SaaS companies selling seat-based licenses need to know exactly which users are authorized in the customer's Okta tenant. By reading app and app-user assignments, your product can automatically reconcile license counts against the customer's SSO source of truth.
Ingest Okta activity logs for security and audit dashboards
Security-focused SaaS products can pull authentication events, MFA challenges, and failed login attempts from Okta to power their customers' compliance reporting, insider threat detection, or access review workflows.
What You Can Build
Ship these features with Truto + Okta
Concrete product features your team can ship faster by leveraging Truto’s Okta integration instead of building from scratch.
Zero-touch user onboarding from Okta groups
Automatically create user accounts and assign them to the correct workspace or project when they appear in a mapped Okta group, with no IT ticket or manual invite required.
Real-time account suspension on offboarding
Detect when a user is deactivated or removed from your app's assignment in Okta and immediately suspend their account in your product to close the access gap.
Group-to-role permission mapping
Let enterprise admins control your app's internal roles — Admin, Viewer, Editor — by simply managing Okta group memberships, with your product reflecting changes automatically.
Pre-populated user profiles from directory data
Pull department, title, manager, location, and employee number from Okta's user directory to enrich your app's profiles without asking users to self-report.
Seat-based license reconciliation dashboard
Build an admin view that compares active app-user assignments in Okta against consumed licenses in your product, flagging orphaned accounts and unauthorized access.
Authentication activity audit log
Surface Okta login events, MFA challenges, and failed authentication attempts inside your product's security dashboard so customers can correlate access patterns with in-app actions.
SuperAI
Okta AI agent tools
Comprehensive AI agent toolset with fine-grained control. Integrates with MCP clients like Cursor and Claude, or frameworks like LangChain.
list_all_okta_users
List all users in Okta. Returns a collection of user objects.
get_single_okta_user_by_id
Get a single Okta user by id. Returns the full user object including profile, status, and credential details. Required: id.
create_a_okta_user
Create a new user in Okta. Returns the created user object including its id, status, and profile.
update_a_okta_user_by_id
Replace an existing Okta user's profile and credentials in full via PUT. Returns the updated user object. Required: id.
delete_a_okta_user_by_id
Delete an Okta user by id. Returns an empty response on success. Required: id.
okta_users_deactivate
Deactivate an Okta user, transitioning them to the DEPROVISIONED lifecycle state. Returns an empty response on success. Required: user_id.
okta_users_suspend
Suspend an Okta user, preventing them from signing in while retaining their account. Returns an empty response on success. Required: user_id.
okta_users_bulk_update
Replace an existing identity source user. Replaces an existing user for the given identity source instance and external ID. Required: identity_source_id, external_id.
okta_users_bulk_delete
Delete an identity source user. Deletes a user in an identity source for the given identity source instance and external ID. Required: identity_source_id, external_id.
okta_users_list_subscriptions
List all subscriptions for a user. Lists all subscriptions available to a specified user. Required: id.
okta_users_partial_update
Update a user. Updates a user's profile or credentials with partial update semantics. Required: id.
list_all_okta_org
Get the Okta organization details for the current account. Returns organization information including id, name, and subdomain.
list_all_okta_groups
List all groups in Okta. Returns a collection of group objects.
get_single_okta_group_by_id
Get a single Okta group by id. Returns the full group object. Required: id.
create_a_okta_group
Create a new group in Okta. Returns the created group object including its id.
update_a_okta_group_by_id
Update an existing Okta group by id using a full replacement (PUT). Returns the updated group object. Required: id.
delete_a_okta_group_by_id
Delete a group. Deletes a group of the OKTA_GROUP or APP_GROUP type from your org. Required: id.
list_all_okta_group_members
List all members of an Okta group. Returns user objects belonging to the specified group. Required: group_id.
create_a_okta_group_member
Add a user to an Okta group. Returns an empty 204 response on success. Required: group_id and user_id.
delete_a_okta_group_member_by_id
Remove a user from an Okta group. Returns an empty 204 response on success. Required: group_id (query) and user id (id).
list_all_okta_apps
List all applications in Okta. Returns a collection of application objects.
get_single_okta_app_by_id
Get a single Okta application by id. Returns the full application object. Required: id.
create_a_okta_app
Create an application. Creates an app instance in your Okta org.
update_a_okta_app_by_id
Replace an application. Replaces properties for an application > * All required properties must be specified in the request body > * You can't modify system-assigned properties, such as id, name, status, created, and lastUpdated. Required: id.
delete_a_okta_app_by_id
Delete an application. Deletes an inactive application. Required: id.
list_all_okta_app_users
List all users assigned to an Okta application. Returns user assignment objects for the specified app. Required: app_id.
delete_a_okta_app_user_by_id
Remove a user from an Okta application by id. Returns an empty response on success. Required: app_id, id.
get_single_okta_app_user_by_id
Get a specific user assigned to an Okta application by id. Returns the user assignment object for the given app and user. Required: app_id, id.
okta_app_users_assign
Update an application user. Updates the profile or credentials of a user assigned to an app. Required: app_id, id.
list_all_okta_system_logs
List system log events from an Okta organization. Returns an array of LogEvent objects representing audit trail entries recorded by Okta.
list_all_okta_user_types
List all user types defined in Okta. Returns a collection of user type objects including their id, name, and display name.
list_all_okta_roles
List all IAM roles defined in Okta. Returns a collection of role objects from the roles array.
get_single_okta_role_by_id
Get a single Okta IAM role by id. Returns the full role object. Required: id.
okta_roles_assign
Assign a role to an Okta user. Required: user_id.
okta_roles_remove
Remove a role assignment from an Okta user. Returns an empty response on success. Required: user_id (query) and role id (id).
create_a_okta_role
Assign a role to a group. Assigns a standard role to a group. Required: group_id.
delete_a_okta_role_by_id
Unassign a group role. Unassigns a role assignment (identified by roleAssignmentId) from a group (identified by the groupId). Required: group_id, id.
okta_roles_list_subscriptions
List all subscriptions for a role. Lists all subscriptions available to a specified Role. Required: role_ref.
list_all_okta_user_roles
List all roles assigned to a specific Okta user. Returns the collection of role objects associated with the user. Required: user_id.
get_single_okta_user_role_by_id
Retrieve a user role assignment. Retrieves a role assigned to a user (identified by userId). Required: user_id, id.
delete_a_okta_user_role_by_id
Unassign a user role. Unassigns a role assignment (identified by roleAssignmentId) from a user (identified by userId). Required: user_id, id.
list_all_okta_user_groups
List all Okta groups that a specific user belongs to. Returns the collection of group objects associated with the user. Required: user_id.
list_all_okta_group_apps
List apps assigned to a specific Okta group. Returns the collection of application objects associated with the group. Required: group_id.
okta_app_authenticators_challenges_verify
Verify a push notification challenge response from an Okta app authenticator. Returns an empty response on success., challenge_id, method, and challengeResponse.
list_all_okta_authenticator_enrollments
List all Okta authenticator enrollments for the current user under a specific authenticator. Returns: id, name, created, canReset, canUnenroll., authenticator_id.
update_a_okta_authenticator_enrollment_by_id
Update an existing Okta authenticator enrollment for the current user. Required: authenticator_id (query) and enrollment id (id).
get_single_okta_authenticator_enrollment_by_id
Retrieve a single Okta authenticator enrollment by id. Returns: id, name, created, lastChallenged, canReset, canUnenroll. Required: authenticator_id (query) and enrollment id (id).
create_a_okta_email_challenge
Send an email challenge in Okta for a specific email address, delivering a one-time passcode to the user to confirm the email address change. Returns: id, status, expiresAt, and profile.email of the new challenge., id.
okta_email_challenges_verify
Verify an Okta email OTP challenge using the one-time passcode the user received, activating the email address upon success. Returns an empty 200 response on success., id, challenge_id, verificationCode.
get_single_okta_email_challenge_by_id
Poll the status of an Okta email challenge to check whether it has been verified via the magic link. Returns: id, status, expiresAt, and profile.email. Required: email_id (query) and challenge id (id).
okta_myaccount_app_authenticators_bulk_delete
Delete an Okta app authenticator enrollment by enrollment_id. Returns an empty response on success., enrollment_id.
okta_myaccount_app_authenticators_bulk_update
Partially update an existing Okta app authenticator enrollment by enrollment_id., enrollment_id.
create_a_okta_myaccount_app_authenticator
Create an Okta app authenticator enrollment for the current user. Returns the enrollment object including id, authenticatorId, createdDate, device, methods, and user., authenticatorId.
list_all_okta_myaccount_authenticators
List all Okta authenticators for the current user. Returns: id, key, name, enrollable.
get_single_okta_myaccount_authenticator_by_id
Retrieve a single Okta authenticator by id for the current user. Returns: id, key, name, enrollable.
create_a_okta_myaccount_email
Create a primary or secondary email address for the current Okta user's account. The new address is created with UNVERIFIED status. Returns: id, status, roles, profile.email.
delete_a_okta_myaccount_email_by_id
Delete an email address from the current Okta user's account by id. Only unverified primary and secondary emails can be deleted. Returns an empty 204 response on success. Required: id, base_url.
get_single_okta_myaccount_email_by_id
Get a specific email address for the current Okta user by id. Returns: id, status, roles, profile.email. Required: id, base_url.
list_all_okta_myaccount_emails
List all email addresses for the current Okta user's account. Returns an array of email objects each including id, status, roles, and profile.email.
list_all_okta_myaccount_okta_applications
List all Okta apps assigned to the current user. Returns: id, name, displayName for each app.
list_all_okta_myaccount_organizations
Retrieve org details for the authenticated user's Okta organization. Returns: name, url, supportEmail.
okta_myaccount_passwords_bulk_delete
Delete the current Okta user's enrolled password. Returns an empty response on success.
okta_myaccount_passwords_bulk_update
Replace the current Okta user's password. Returns: id, status, created, lastUpdated. and a profile object containing the new password.
create_a_okta_myaccount_password
Create and enroll a password for the current Okta user. Returns: id, status, created, lastUpdated. and a profile object containing the password.
list_all_okta_myaccount_passwords
Retrieve the current Okta user's password status (not the password value itself). Returns: id, status, created, lastUpdated.
create_a_okta_myaccount_phone
Create a phone for the current Okta user in UNVERIFIED status using SMS or CALL delivery. Returns: id, status, profile.phoneNumber. Required: profile.phoneNumber and method.
delete_a_okta_myaccount_phone_by_id
Delete the current Okta user's phone by id. Returns an empty 204 response on success. Required: id.
get_single_okta_myaccount_phone_by_id
Get the current Okta user's phone by id. Returns: id, status, profile.phoneNumber, and available operation links. Required: id.
list_all_okta_myaccount_phones
List all phones for the current Okta user. Returns an array of phone objects each including id, status, and profile.phoneNumber.
okta_myaccount_phones_verify
Verify the current Okta user's phone using a code received via SMS or CALL, activating the phone on success. Returns an empty 204 response on success. Required: id and verificationCode.
okta_myaccount_profiles_bulk_update
Update the caller's Okta user profile by sending a full replacement of the profile data.
list_all_okta_myaccount_profiles
Retrieve the caller's Okta user profile. Returns: createdAt, modifiedAt, and a profile object containing login and custom user attributes.
okta_myaccount_sessions_bulk_delete
Delete all Okta MyAccount sessions for the current user in a single call. Returns an empty 204 response on success.
create_a_okta_myaccount_webauthn
Create a Passkey (FIDO2 WebAuthn) enrollment in Okta. Returns: id, status, name, credentialId, created. Requires base_url; the Start WebAuthn enrollment endpoint must be called beforehand to obtain the registration challenge.
delete_a_okta_myaccount_webauthn_by_id
Delete a specific Passkey (FIDO2 WebAuthn) enrollment in Okta by id. Returns an empty 204 response on success. Requires base_url and id.
get_single_okta_myaccount_webauthn_by_id
Get a single Passkey (FIDO2 WebAuthn) enrollment in Okta by id. Returns: id, status, name, credentialId, created, lastUpdated. Requires base_url and id.
list_all_okta_myaccount_webauthns
List all Passkey (FIDO2 WebAuthn) enrollments for the current user in Okta. Returns: id, status, name, credentialId, created, lastUpdated per enrollment. Requires base_url.
create_a_okta_password_change_password
Update a password in Okta for the authenticated user. The caller must supply the current password to change it. Returns an empty 204 response on success., oldPassword, newPassword.
list_all_okta_password_complexity_requirements
Retrieve the password complexity requirements for the current okta user. Returns: description, complexity (minLength, minLowerCase, minUpperCase, minNumber, minSymbol, excludeUsername).
create_a_okta_phone_challenge
Send a phone challenge in Okta via SMS or CALL to begin phone number verification. Returns a `_links.verify.href` link to use with the verification code at the verify endpoint. Required: `id` (phone ID), `base_url`. The verification code expires in five minutes; set `retry` to `true` in the body to resend a failed challenge.
list_all_okta_profile_schemas
Retrieve the Okta profile schema for the authenticated user's user type. Returns the properties object containing field definitions (title, type, permissions) and associated _links.
list_all_okta_push_notifications
List all pending push notification challenges in Okta for a specific app authenticator enrollment. Returns: payloadVersion, challenge., enrollment_id.
create_a_okta_webauthn_registration
Start a WebAuthn (Passkey/FIDO2) enrollment process in okta. Returns options including the challenge, relying party info, user details, and an expiresAt timestamp needed to complete enrollment via the WebAuthn enroll endpoint.
list_all_okta_aaguids
List all custom AAGUIDs. Lists all custom Authenticator Attestation Global Unique Identifiers (AAGUIDs) in the org Only custom AAGUIDs that an admin has created are returned. Required: authenticator_id.
get_single_okta_aaguid_by_id
Retrieve a custom AAGUID. Retrieves a custom AAGUID. Required: authenticator_id, id.
create_a_okta_aaguid
Create a custom AAGUID. Creates a custom AAGUID for the Passkey (FIDO2 WebAuthn) authenticator. Required: authenticator_id.
update_a_okta_aaguid_by_id
Replace a custom AAGUID. Replaces a custom AAGUID for the specified Passkey (FIDO2 WebAuthn) authenticator. Required: authenticator_id, id.
delete_a_okta_aaguid_by_id
Delete a custom AAGUID. Deletes a custom AAGUID You can only delete custom AAGUIDs that an admin has created. Required: authenticator_id, id.
okta_aaguids_partial_update
Update a custom AAGUID. Updates the properties of a custom AAGUID by the authenticatorId and aaguid ID. Required: authenticator_id, id.
create_a_okta_aerial_grant
Grant Okta Aerial access to your org. Grants an Okta Aerial account consent to manage your org.
create_a_okta_aerial_revoke
Revoke Okta Aerial access to your org. Revokes access of an Okta Aerial account to your Org.
list_all_okta_agent_pools
List all agent pools. Lists all agent pools with pagination support
list_all_okta_api_tokens
List all API token metadata. Lists all the metadata of the active API tokens
get_single_okta_api_token_by_id
Retrieve an API token's metadata. Retrieves the metadata for an active API token by apiTokenId. Required: id.
update_a_okta_api_token_by_id
Upsert an API token network condition. Upserts an API Token Network Condition by apiTokenId. Required: id.
okta_api_tokens_revoke_current
Revoke the current API token. Revokes the API token provided in the Authorization header
delete_a_okta_api_token_by_id
Revoke an API token. Revokes an API token by apiTokenId. Required: id.
list_all_okta_app_links
List all assigned app links. Lists all app links for all direct or indirect (through group membership) assigned apps . Required: id.
list_all_okta_assignees_users
List all users with role assignments. Lists all users with role assignments
list_all_okta_associated_servers
List all associated authorization servers. Lists all associated Authorization Servers by trusted type for the given authServerId. Required: auth_server_id.
create_a_okta_associated_server
Create an associated authorization server. Creates trusted relationships between the given authorization server and other authorization servers. Required: auth_server_id.
delete_a_okta_associated_server_by_id
Delete an associated authorization server. Deletes an associated Authorization Server. Required: auth_server_id, id.
list_all_okta_attack_protection_authenticator_settings
Retrieve the authenticator settings. Retrieves the Authenticator Settings for an org
update_a_okta_attack_protection_authenticator_setting_by_id
Replace the authenticator settings. Replaces the Authenticator Settings for an org
list_all_okta_attack_protection_user_lockout_settings
Retrieve the user lockout settings. Retrieves the User Lockout Settings for an org
update_a_okta_attack_protection_user_lockout_setting_by_id
Replace the user lockout settings. Replaces the User Lockout Settings for an org
create_a_okta_authenticator_enrollments_phone
Create an auto-activated Phone authenticator enrollment. Creates a Phone authenticator enrollment that's automatically activated. Required: user_id.
create_a_okta_authenticator_enrollments_tac
Create an auto-activated TAC authenticator enrollment. Creates an auto-activated Temporary access code (TAC) authenticator enrollment. Required: user_id.
list_all_okta_authenticators
List all authenticators. Lists all authenticators
get_single_okta_authenticator_by_id
Retrieve an authenticator. Retrieves an authenticator from your Okta organization by authenticatorId. Required: id.
create_a_okta_authenticator
Create an authenticator. Creates an authenticator
update_a_okta_authenticator_by_id
Replace an authenticator. Replaces the properties for an authenticator identified by authenticatorId. Required: id.
list_all_okta_authorization_servers
List all authorization servers. Lists all custom authorization servers in the org
get_single_okta_authorization_server_by_id
Retrieve an authorization server. Retrieves an authorization server. Required: id.
create_a_okta_authorization_server
Create an authorization server. Creates an authorization server
update_a_okta_authorization_server_by_id
Replace an authorization server. Replaces an authorization server. Required: id.
delete_a_okta_authorization_server_by_id
Delete an authorization server. Deletes an authorization server. Required: id.
create_a_okta_background_image
Upload the background image. Uploads and replaces the background image for the theme. Required: brand_id, theme_id.
delete_a_okta_background_image_by_id
Delete the background image. Deletes a theme background image. Required: brand_id, theme_id.
list_all_okta_behaviors
List all behavior detection rules. Lists all behavior detection rules with pagination support
get_single_okta_behavior_by_id
Retrieve a behavior detection rule. Retrieves a Behavior Detection Rule by behaviorId. Required: id.
create_a_okta_behavior
Create a behavior detection rule. Creates a new behavior detection rule
update_a_okta_behavior_by_id
Replace a behavior detection rule. Replaces a Behavior Detection Rule by behaviorId. Required: id.
delete_a_okta_behavior_by_id
Delete a behavior detection rule. Deletes a Behavior Detection Rule by behaviorId. Required: id.
list_all_okta_bindings
List all role resource set bindings. Lists all bindings for a resource set with pagination support. Required: resource_set_id_or_label.
create_a_okta_binding
Create a role resource set binding. Creates a binding for the resource set, custom role, and members (users or groups) . Required: resource_set_id_or_label.
update_a_okta_binding_by_id
Add more role resource set binding members. Adds more members to a role resource set binding. Required: resource_set_id_or_label, role_id_or_label.
delete_a_okta_binding_by_id
Delete a role resource set binding. Deletes a binding of a role (identified by roleIdOrLabel) and a resource set (identified by resourceSetIdOrLabel). Required: resource_set_id_or_label, role_id_or_label.
okta_bindings_list_members
List all role resource set binding members. Lists all members of a role resource set binding with pagination support. Required: resource_set_id_or_label, role_id_or_label.
list_all_okta_blocks
List all user blocks. Lists information about how the user is blocked from accessing their account. Required: id.
list_all_okta_bot_protection_configurations
Retrieve the bot protection configuration. Retrieves the bot protection configuration for your org
create_a_okta_bot_protection_configuration
Update the bot protection configuration. Updates the bot protection configuration for your org
create_a_okta_bounces_remove_list
Remove bounced emails. Removes emails from an email service bounce list.
list_all_okta_brands
List all brands. Lists all the brands in your org
get_single_okta_brand_by_id
Retrieve a brand. Retrieves a brand by brandId. Required: id.
create_a_okta_brand
Create a brand. Creates a new brand in your org
update_a_okta_brand_by_id
Replace a brand. Replaces a brand by brandId Passing an invalid brandId returns a 404 Not Found status code with the error code E0000007. Required: id.
delete_a_okta_brand_by_id
Delete a brand. Deletes a brand by brandId. Required: id.
create_a_okta_bulk_delete
Upload the data to be deleted in Okta. Uploads external IDs of entities that need to be deleted in Okta from the identity source for the given session. Required: identity_source_id, session_id.
create_a_okta_bulk_group_memberships_delete
Upload the group memberships to be deleted in Okta. Uploads the group memberships that need to be deleted in Okta from the identity source for the given session. Required: identity_source_id, session_id.
create_a_okta_bulk_group_memberships_upsert
Upload the group memberships to be upserted in Okta. Uploads the group memberships that need to be inserted or updated in Okta from the identity source for the given session. Required: identity_source_id, session_id.
create_a_okta_bulk_groups_delete
Upload the group external IDs to be deleted in Okta. Uploads external IDs of groups that need to be deleted in Okta from the identity source for the given session. Required: identity_source_id, session_id.
create_a_okta_bulk_groups_upsert
Upload the group profiles without memberships to be upserted in Okta. Uploads the group profiles without memberships that need to be inserted or updated in Okta from the identity source for the given session. Required: identity_source_id, session_id.
create_a_okta_bulk_upsert
Upload the data to be upserted in Okta. Uploads entities that need to be inserted or updated in Okta from the identity source for the given session. Required: identity_source_id, session_id.
list_all_okta_captchas
List all CAPTCHA instances. Lists all CAPTCHA instances with pagination support.
get_single_okta_captcha_by_id
Retrieve a CAPTCHA instance. Retrieves the properties of a specified CAPTCHA instance. Required: id.
create_a_okta_captcha
Create a CAPTCHA instance. Creates a new CAPTCHA instance.
update_a_okta_captcha_by_id
Replace a CAPTCHA instance. Replaces the properties for a specified CAPTCHA instance. Required: id.
delete_a_okta_captcha_by_id
Delete a CAPTCHA instance. Deletes a specified CAPTCHA instance . Required: id.
okta_captchas_replace
Update a CAPTCHA instance. Partially updates the properties of a specified CAPTCHA instance. Required: id.
update_a_okta_certificate_by_id
Upsert the custom domain's certificate. Upserts (creates or renews) the MANUAL certificate for the custom domain > * If the existing certificateSourceType is OKTA_MANAGED, this operation changes the source type to MANUAL. Required: domain_id.
list_all_okta_claims
List all custom token claims. Lists all custom token Claims defined for a specified custom authorization server. Required: auth_server_id.
get_single_okta_claim_by_id
Retrieve a custom token claim. Retrieves a custom token Claim by the specified claimId. Required: auth_server_id, id.
create_a_okta_claim
Create a custom token claim. Creates a custom token Claim for a custom authorization server. Required: auth_server_id.
update_a_okta_claim_by_id
Replace a custom token claim. Replaces a custom token Claim specified by the claimId. Required: auth_server_id, id.
delete_a_okta_claim_by_id
Delete a custom token claim. Deletes a custom token Claim specified by the claimId. Required: auth_server_id, id.
list_all_okta_classifications
Retrieve a user's classification. Retrieves a user's classification. Required: user_id.
update_a_okta_classification_by_id
Replace the user's classification. Replaces the user's classification. Required: user_id.
list_all_okta_clients
List all client resources for an authorization server. Lists all client resources for which the specified authorization server has tokens. Required: auth_server_id.
get_single_okta_connection_by_id
Retrieve the default provisioning connection. Retrieves the default provisioning connection for an app. Required: app_id.
create_a_okta_connection
Update the default provisioning connection. Updates the default provisioning connection for an app. Required: app_id.
get_single_okta_connections_jwk_by_id
Retrieve a JSON Web Key Set (JWKS) for the default provisioning connection. Retrieves a JWKS for the default provisioning connection. Required: app_id.
create_a_okta_credentials_change_password
Update password. Updates a user's password by validating the user's current password. Required: user_id.
create_a_okta_credentials_change_recovery_question
Update recovery question. Updates a user's recovery question and answer credential by validating the user's current password. Required: user_id.
create_a_okta_credentials_forgot_password_recovery_question
Reset password with recovery question. Resets the user's password to the specified password if the provided answer to the recovery question is correct. Required: user_id.
create_a_okta_credentials_forgot_password
Start forgot password flow. Starts the forgot password flow. Required: user_id.
list_all_okta_credentials_tokens
List all tokens from OIDC IdP. Lists the tokens minted by the social authentication provider when the user authenticates with Okta via Social Auth. Required: idp_id, user_id.
list_all_okta_customizations
List all email customizations. Lists all customizations of an email template
create_a_okta_customization
Create an email customization. Creates a new Email Customization
okta_customizations_bulk_delete
Delete all email customizations. Deletes all customizations for an email template
get_single_okta_customization_by_id
Retrieve an email customization. Retrieves an email customization by its unique identifier
update_a_okta_customization_by_id
Replace an email customization. Replaces an email customization using property values
delete_a_okta_customization_by_id
Delete an email customization. Deletes an Email Customization by its unique identifier
okta_customizations_get_preview
Retrieve a preview of an email customization. Retrieves a Preview of an Email Customization. Required: brand_id, template_name, id.
list_all_okta_customizeds
Retrieve the customized content of the specified well-known URI. Retrieves the customized content of a well-known URI for a specific brand and well-known URI path. Required: brand_id, path.
update_a_okta_customized_by_id
Replace the customized well-known URI of the specific path. Replaces the content of a customized well-known URI that you specify. Required: brand_id, path.
list_all_okta_cwo_connections
Retrieve all Cross App Access connections. Retrieves inbound and outbound Cross App Access connections associated with an app. Required: app_id.
create_a_okta_cwo_connection
Create a Cross App Access connection. Creates a Cross App Access connection. Required: app_id.
update_a_okta_cwo_connection_by_id
Update a Cross App Access connection. Updates the Cross App Access connection with the specified ID. Required: app_id, connection_id.
delete_a_okta_cwo_connection_by_id
Delete a Cross App Access connection. Deletes a Cross App Access connection with the specified ID. Required: app_id, connection_id.
list_all_okta_default_content_previews
Retrieve a preview of the email template default content. Retrieves a preview of an Email Template's default content. Required: brand_id, template_name.
list_all_okta_default_contents
Retrieve an email template default content. Retrieves an email template's default content
list_all_okta_dependencies
List all dependencies. Lists all feature dependencies for a specified feature. Required: feature_id.
list_all_okta_dependents
List all dependents. Lists all feature dependents for the specified feature. Required: feature_id.
list_all_okta_device_assurances
List all device assurance policies. Lists all device assurance policies
get_single_okta_device_assurance_by_id
Retrieve a device assurance policy. Retrieves a device assurance policy by deviceAssuranceId. Required: id.
create_a_okta_device_assurance
Create a device assurance policy. Creates a new device assurance policy
update_a_okta_device_assurance_by_id
Replace a device assurance policy. Replaces a device assurance policy by deviceAssuranceId. Required: id.
delete_a_okta_device_assurance_by_id
Delete a device assurance policy. Deletes a device assurance policy by deviceAssuranceId. Required: id.
list_all_okta_device_integrations
List all device integrations. Lists all device integrations for your org.
get_single_okta_device_integration_by_id
Retrieve a device integration. Retrieves a device integration by deviceIntegrationId. Required: id.
list_all_okta_device_posture_checks
List all device posture checks. Lists all device posture checks
create_a_okta_device_posture_check
Create a device posture check. Creates a device posture check
update_a_okta_device_posture_check_by_id
Replace a device posture check. Replaces a device posture check by postureCheckId. Required: id.
delete_a_okta_device_posture_check_by_id
Delete a device posture check. Deletes a device posture check by postureCheckId. Required: id.
okta_device_posture_checks_get_default
List all default device posture checks. Lists all default device posture checks.
get_single_okta_device_posture_check_by_id
Retrieve a device posture check. Retrieves a device posture check by postureCheckId. Required: id.
list_all_okta_devices
List all devices. Lists all devices with pagination support.
get_single_okta_device_by_id
Retrieve a device. Retrieves a device by deviceId. Required: id.
delete_a_okta_device_by_id
Delete a device. Deletes (permanently) a device by deviceId if it has a status of DEACTIVATED. Required: id.
list_all_okta_domains
List all domains associated with a brand. Lists all domains associated with a brand by brandId. Required: brand_id.
create_a_okta_domain
Create a custom domain. Creates your custom domain
get_single_okta_domain_by_id
Retrieve a custom domain. Retrieves a custom domain by domainId. Required: id.
update_a_okta_domain_by_id
Replace a custom domain's brand. Replaces a custom domain's brand. Required: id.
delete_a_okta_domain_by_id
Delete a custom domain. Deletes a custom domain by domainId. Required: id.
okta_domains_verify
Verify a custom domain. Verifies the custom domain and validity of DNS records by domainId. Required: id.
create_a_okta_dr_failback
Start the failback of your org. Starts the failback of your org
create_a_okta_dr_failover
Start the failover of your org. Starts the failover of your org
list_all_okta_dr_status
Retrieve the disaster recovery status for all domains. Retrieves the failover or failback status for all the domains for your org
list_all_okta_email_domains
List all email domains. Lists all the Email Domains in your org
get_single_okta_email_domain_by_id
Retrieve an email domain. Retrieves an Email Domain by emailDomainId. Required: id.
create_a_okta_email_domain
Create an email domain. Creates an Email Domain in your org
update_a_okta_email_domain_by_id
Replace an email domain. Replaces associated username and sender display name by emailDomainId. Required: id.
delete_a_okta_email_domain_by_id
Delete an email domain. Deletes an Email Domain by emailDomainId. Required: id.
okta_email_domains_verify
Verify an email domain. Verifies an Email Domain by emailDomainId. Required: id.
list_all_okta_email_servers
List all enrolled SMTP servers. Lists all the enrolled custom SMTP server configurations
get_single_okta_email_server_by_id
Retrieve an SMTP server configuration. Retrieves the specified custom SMTP server configuration. Required: id.
create_a_okta_email_server
Create a custom SMTP server. Creates a custom email SMTP server configuration for your org.
update_a_okta_email_server_by_id
Update an SMTP server configuration. Updates the specified custom SMTP server configuration .0 authentication, the authType property is required in the request body. Required: id.
delete_a_okta_email_server_by_id
Delete an SMTP server configuration. Deletes the specified custom SMTP server configuration. Required: id.
list_all_okta_enrollments
List all WebAuthn preregistration factors. Lists all WebAuthn preregistration factors for the specified user. Required: user_id.
delete_a_okta_enrollment_by_id
Delete a WebAuthn preregistration factor. Deletes a specific WebAuthn preregistration factor for a user. Required: user_id, authenticator_enrollment_id.
list_all_okta_entitlements
List all entitlements for a governance bundle. Lists all entitlements specific to a governance bundle. Required: bundle_id.
list_all_okta_error_customizeds
Retrieve the customized error page. Retrieves the customized error page. Required: brand_id.
update_a_okta_error_customized_by_id
Replace the customized error page. Replaces the customized error page. Required: brand_id.
delete_a_okta_error_customized_by_id
Delete the customized error page. Deletes the customized error page. Required: brand_id.
list_all_okta_error_previews
Retrieve the preview error page preview. Retrieves the preview error page. Required: brand_id.
update_a_okta_error_preview_by_id
Replace the preview error page. Replaces the preview error page. Required: brand_id.
delete_a_okta_error_preview_by_id
Delete the preview error page. Deletes the preview error page. Required: brand_id.
list_all_okta_event_hooks
List all event hooks. Lists all event hooks
get_single_okta_event_hook_by_id
Retrieve an event hook. Retrieves an event hook. Required: id.
create_a_okta_event_hook
Create an event hook. Creates a new event hook for your organization in ACTIVE status.
update_a_okta_event_hook_by_id
Replace an event hook. Replaces an event hook. Required: id.
delete_a_okta_event_hook_by_id
Delete an event hook. Deletes the event hook that matches the provided id. Required: id.
list_all_okta_factors
List all enrolled factors. Lists all enrolled factors for the specified user that are included in the highest priority authenticator enrollment policy that applies to the user. Required: user_id.
get_single_okta_factor_by_id
Retrieve a factor. Retrieves an existing factor for the specified user. Required: user_id, id.
create_a_okta_factor
Enroll a factor. Enrolls a supported factor for the specified user > * All responses return the enrolled factor with a status of either PENDING_ACTIVATION or ACTIVE. Required: user_id.
delete_a_okta_factor_by_id
Unenroll a factor. Unenrolls an existing factor for the specified user. Required: user_id, id.
okta_factors_verify
Verify a factor. Verifies an OTP for a factor. Required: user_id, id.
list_all_okta_factors_catalogs
List all supported factors. Lists all the supported factors that can be enrolled for the specified user that are included in the highest priority authenticator enrollment policy that applies to the user. Required: user_id.
list_all_okta_factors_questions
List all supported security questions. Lists all available security questions for the specified user. Required: user_id.
create_a_okta_favicon
Upload the favicon. Uploads and replaces the favicon for the theme. Required: brand_id, theme_id.
delete_a_okta_favicon_by_id
Delete the favicon. Deletes a theme favicon. Required: brand_id, theme_id.
list_all_okta_federated_claims
List all configured federated claims. Lists all federated claims for your app. Required: app_id.
create_a_okta_federated_claim
Create a federated claim. Creates a claim that will be included in tokens produced by federation protocols (for example: OIDC id_tokens or SAML Assertions). Required: app_id.
update_a_okta_federated_claim_by_id
Replace a federated claim. Replaces a claim that will be included in tokens produced by federation protocols (for example: OIDC id_tokens or SAML Assertions). Required: app_id, claim_id.
delete_a_okta_federated_claim_by_id
Delete a federated claim. Deletes a federated claim by claimId. Required: app_id, claim_id.
list_all_okta_first_party_app_settings
Retrieve the Okta application settings. Retrieves the settings for an Okta app (also known as an Okta first-party app). Required: app_name.
update_a_okta_first_party_app_setting_by_id
Replace the Okta application settings. Replaces the settings for an Okta app (also known as an Okta first-party app). Required: app_name.
list_all_okta_governance_bundles
List all governance bundles. Lists all governance bundles for the Admin Console in your org
get_single_okta_governance_bundle_by_id
Retrieve a governance bundle. Retrieves a governance bundle for the Admin Console. Required: id.
create_a_okta_governance_bundle
Create a governance bundle. Creates a governance bundle of entitlements for the Admin Console
update_a_okta_governance_bundle_by_id
Replace a governance bundle. Replaces the properties of a governance bundle for the Admin Console. Required: id.
delete_a_okta_governance_bundle_by_id
Delete a governance bundle. Deletes an Admin Console governance bundle. Required: id.
list_all_okta_governance_opt_ins
Retrieve the Admin Console opt-in status. Retrieves the entitlement management opt-in status for the Admin Console
create_a_okta_governance_opt_in
Opt in the Admin Console to entitlement management. Opts in the Admin Console to entitlement management
create_a_okta_governance_opt_out
Opt out the Admin Console from entitlement management. Opts out the Admin Console from entitlement management
list_all_okta_governances
Retrieve all user role governance sources. Retrieves the governance sources of a role (identified by roleAssignmentId) that's assigned to a user (identified by userId). Required: user_id, role_assignment_id.
list_all_okta_grants
List all app grants. Lists all scope consent Grants for the app. Required: app_id.
get_single_okta_grant_by_id
Retrieve an app grant. Retrieves a single scope consent Grant object for the app. Required: app_id, id.
create_a_okta_grant
Grant consent to scope. Grants consent for the app to request an OAuth 2.0 Okta scope. Required: app_id.
delete_a_okta_grant_by_id
Revoke an app grant. Revokes permission for the app to grant the given scope. Required: app_id, id.
okta_grants_bulk_delete
Revoke all grants for a client. Revokes all grants for the specified user and client. Required: user_id, client_id.
list_all_okta_group_push_mappings
List all group push mappings. Lists all group push mappings with pagination support. Required: app_id.
create_a_okta_group_push_mapping
Create a group push mapping. Creates or links a group push mapping. Required: app_id.
update_a_okta_group_push_mapping_by_id
Update a group push mapping. Updates the status of a group push mapping. Required: app_id, mapping_id.
delete_a_okta_group_push_mapping_by_id
Delete a group push mapping. Deletes a specific group push mapping. Required: app_id, mapping_id.
create_a_okta_groups_modify
Update an external directory group membership. Updates an Active Directory or LDAP group membership directly in the Active Directory or LDAP server. Required: app_instance_id.
list_all_okta_groups_rules
List all group rules. Lists all group rules for your org
get_single_okta_groups_rule_by_id
Retrieve a group rule. Retrieves a specific group rule by ID from your org. Required: id.
create_a_okta_groups_rule
Create a group rule. Creates a group rule to dynamically add users to the specified group if they match the condition.
update_a_okta_groups_rule_by_id
Replace a group rule. Replaces a group rule . Required: id.
delete_a_okta_groups_rule_by_id
Delete a group rule. Deletes a specific group rule by groupRuleId. Required: id.
list_all_okta_hook_keys
List all keys. Lists all keys
get_single_okta_hook_key_by_id
Retrieve a key by ID. Retrieves the public portion of the Key object using the id parameter . Required: id.
create_a_okta_hook_key
Create a key. Creates a key for use with other parts of the application, such as inline hooks .
update_a_okta_hook_key_by_id
Replace a key. Replaces a key by id This request replaces existing properties after passing validation. Required: id.
delete_a_okta_hook_key_by_id
Delete a key. Deletes a key by id. Required: id.
get_single_okta_hook_keys_public_by_id
Retrieve a public key. Retrieves a public key by keyId . Required: id.
list_all_okta_iam_resource_sets
List all resource sets. Lists all resource sets with pagination support
create_a_okta_iam_resource_set
Create a resource set. Creates a new resource set.
update_a_okta_iam_resource_set_by_id
Replace a resource set. Replaces the label and description of a resource set. Required: resource_set_id_or_label.
delete_a_okta_iam_resource_set_by_id
Delete a resource set. Deletes a resource set by resourceSetIdOrLabel. Required: resource_set_id_or_label.
create_a_okta_iam_role
Create a custom role. Creates a custom role
update_a_okta_iam_role_by_id
Replace a custom role. Replaces the label and description for a custom role by roleIdOrLabel. Required: id.
delete_a_okta_iam_role_by_id
Delete a custom role. Deletes a custom role by roleIdOrLabel. Required: id.
okta_iam_roles_list_permissions
List all custom role permissions. Lists all permissions for a custom role by roleIdOrLabel. Required: role_id_or_label.
list_all_okta_idps
List all IdPs. Lists all identity provider (IdP) integrations with pagination.
get_single_okta_idp_by_id
Retrieve an IdP. Retrieves an identity provider (IdP) integration by idpId. Required: id.
create_a_okta_idp
Create an IdP. Creates a new identity provider (IdP) integration.
update_a_okta_idp_by_id
Replace an IdP. Replaces an identity provider (IdP) integration by idpId. Required: id.
delete_a_okta_idp_by_id
Delete an IdP. Deletes an identity provider (IdP) integration by idpId * All existing IdP users are unlinked with the highest order profile source taking precedence for each IdP user. Required: id.
list_all_okta_inline_hooks
List all inline hooks. Lists all inline hooks or all inline hooks of a specific type.
get_single_okta_inline_hook_by_id
Retrieve an inline hook. Retrieves an inline hook by inlineHookId. Required: id.
create_a_okta_inline_hook
Create an inline hook. Creates an inline hook This endpoint creates an inline hook for your org in an ACTIVE status.
update_a_okta_inline_hook_by_id
Replace an inline hook. Replaces an inline hook by inlineHookId. Required: id.
delete_a_okta_inline_hook_by_id
Delete an inline hook. Deletes an inline hook by inlineHookId. Required: id.
okta_inline_hooks_execute
Execute an inline hook. Executes the inline hook that matches the provided inlineHookId by using the request body as the input. Required: id.
okta_inline_hooks_replace
Update an inline hook. Updates an inline hook by inlineHookId. Required: id.
list_all_okta_integrations_api_services
List all API service integration instances. Lists all API Service Integration instances with a pagination option
get_single_okta_integrations_api_service_by_id
Retrieve an API service integration instance. Retrieves an API Service Integration instance by id. Required: id.
create_a_okta_integrations_api_service
Create an API service integration instance. Creates and authorizes an API Service Integration instance
delete_a_okta_integrations_api_service_by_id
Delete an API service integration instance. Deletes an API Service Integration instance by id. Required: id.
list_all_okta_interclient_allowed_apps
List all allowed apps for a target app. Lists all apps allowed by this app to request interclient SSO using the interclient token. Required: app_id.
create_a_okta_interclient_allowed_app
Create an allowed app mapping for a target app. Creates a mapping between the target app and an allowed app for interclient SSO using the interclient token. Required: app_id.
delete_a_okta_interclient_allowed_app_by_id
Delete an interclient trust mapping. Deletes the mapping between the target app and an allowed app. Required: app_id, allowed_app_id.
list_all_okta_interclient_target_apps
List all target apps for an allowed app. Lists all the target apps that allow this app to request interclient SSO using an interclient token. Required: app_id.
list_all_okta_keys_actives
List the active signing key credential for IdP. Lists the active signing key credential for an identity provider (IdP). Required: idp_id.
okta_lifecycle_activates_activate_app_default_connection
Activate the default provisioning connection. Activates the default provisioning connection for an app. Required: app_id.
okta_lifecycle_activates_activate_app_jwk
Activate an OAuth 2.0 client JSON Web Key. Activates an OAuth 2.0 client JSON Web Key by keyId . Required: app_id, id.
okta_lifecycle_activates_activate_app_secret
Activate an OAuth 2.0 client secret. Activates an OAuth 2.0 client secret by secretId. Required: app_id, id.
okta_lifecycle_activates_activate_app
Activate an application. Activates an inactive application. Required: app_id.
okta_lifecycle_activates_activate_authenticator
Activate an authenticator. Activates an authenticator by authenticatorId. Required: authenticator_id.
okta_lifecycle_activates_activate_authenticator_method
Activate an authenticator method. Activates a method for an authenticator identified by authenticatorId and methodType. Required: authenticator_id, id.
okta_lifecycle_activates_activate_authorization_server
Activate an authorization server. Activates an authorization server. Required: auth_server_id.
okta_lifecycle_activates_activate_authorization_server_policy
Activate a policy. Activates an authorization server policy. Required: auth_server_id, policy_id.
lifecycle_activates_activate_authorization_server_policy_rule
Activate a policy rule. Activates an authorization server policy rule. Required: auth_server_id, policy_id, rule_id.
okta_lifecycle_deactivates_deactivate_app_default_connection
Deactivate the default provisioning connection. Deactivates the default provisioning connection for an app. Required: app_id.
okta_lifecycle_deactivates_deactivate_app_jwk
Deactivate an OAuth 2.0 client JSON Web Key. Deactivates an OAuth 2.0 client JSON Web Key by keyId . Required: app_id, id.
okta_lifecycle_deactivates_deactivate_app_secret
Deactivate an OAuth 2.0 client secret. Deactivates an OAuth 2.0 client secret by secretId. Required: app_id, id.
okta_lifecycle_deactivates_deactivate_app
Deactivate an application. Deactivates an active application . Required: app_id.
okta_lifecycle_deactivates_deactivate_authenticator
Deactivate an authenticator. Deactivates an authenticator by authenticatorId. Required: authenticator_id.
okta_lifecycle_deactivates_deactivate_authenticator_method
Deactivate an authenticator method. Deactivates a method for an authenticator identified by authenticatorId and methodType. Required: authenticator_id, id.
okta_lifecycle_deactivates_deactivate_authorization_server
Deactivate an authorization server. Deactivates an authorization server. Required: auth_server_id.
lifecycle_deactivates_deactivate_authorization_server_policy
Deactivate a policy. Deactivates an authorization server policy. Required: auth_server_id, policy_id.
lifecycle_deactivates_deactivate_authorization_server_policy_rul
Deactivate a policy rule. Deactivates an authorization server policy rule. Required: auth_server_id, policy_id, rule_id.
create_a_okta_lifecycle_expire_password_with_temp_password
Expire the password with a temporary password. Expires the password and resets the user's password to a temporary password. Required: id.
create_a_okta_lifecycle_expire_password
Expire the password. Expires the password. Required: id.
create_a_okta_lifecycle_key_rotate
Rotate all credential keys. Rotates the current Keys for a Custom Authorization Server. Required: auth_server_id.
okta_lifecycle_publishes_publish_app_csr
Publish a certificate signing request. Publishes a certificate signing request (CSR) for the app with a signed X.509 certificate and adds it into the application key credentials. Required: app_id, id.
okta_lifecycle_publishes_publish_idp_csr
Publish a certificate signing request. Publishes the certificate signing request (CSR) with a signed X.509 certificate and adds it into the signing key credentials for the identity provider (IdP) > * Publishing a certificate completes the lifecycle of the CSR, and it's no longer accessible. Required: idp_id, id.
create_a_okta_lifecycle_reactivate
Reactivate a user. Reactivates a user. Required: id.
create_a_okta_lifecycle_refresh
Refresh a session. Refreshes an existing session using the id for that session. Required: session_id.
create_a_okta_lifecycle_reset_factor
Reset the factors. Resets all factors for the specified user. Required: id.
create_a_okta_lifecycle_reset_password
Reset a password. Resets a password. Required: id.
okta_lifecycle_suspends_suspend_device
Suspend a Device. Suspends a device by setting its status to SUSPENDED. Required: device_id.
okta_lifecycle_suspends_suspend_user
Suspend a user. Suspends a user. Required: id.
create_a_okta_lifecycle_unlock
Unlock a user. Unlocks a user with a LOCKED_OUT status or unlocks a user with an ACTIVE status that's blocked from unknown devices. Required: id.
okta_lifecycle_unsuspends_unsuspend_device
Unsuspend a Device. Unsuspends a device by returning its status to ACTIVE. Required: device_id.
okta_lifecycle_unsuspends_unsuspend_user
Unsuspend a user. Unsuspends a user and returns them to the ACTIVE state. Required: id.
create_a_okta_lifecycle_verify
Verify an event hook. Verifies that the event hook matches the provided eventHookId. Required: event_hook_id.
list_all_okta_linked_objects
List the primary or all of the associated linked object values. Lists either the self link for the primary user or all associated users in the relationship specified by relationshipName. Required: user_id_or_login, relationship_name.
update_a_okta_linked_object_by_id
Assign a linked object value for primary. Assigns the first user as the associated and the second user as the primary for the specified relationship. Required: user_id_or_login, primary_relationship_name, primary_user_id.
delete_a_okta_linked_object_by_id
Delete a linked object value. Deletes any existing relationship between the associated and primary user. Required: user_id_or_login, relationship_name.
list_all_okta_log_streams
List all log streams. Lists all log stream objects in your org.
get_single_okta_log_stream_by_id
Retrieve a log stream. Retrieves a log stream object by ID. Required: id.
create_a_okta_log_stream
Create a log stream. Creates a new log stream object
update_a_okta_log_stream_by_id
Replace a log stream. Replaces the log stream object properties for a given ID. Required: id.
delete_a_okta_log_stream_by_id
Delete a log stream. Deletes a log stream object from your org by ID. Required: id.
create_a_okta_logo
Upload an application logo. Uploads a logo for the app instance. Required: app_id.
delete_a_okta_logo_by_id
Delete the logo. Deletes a Theme logo. Required: brand_id, theme_id.
list_all_okta_mappings
List all profile mappings. Lists all profile mappings in your org with pagination.
get_single_okta_mapping_by_id
Retrieve a profile mapping. Retrieves a single profile mapping referenced by its ID. Required: id.
create_a_okta_mapping
Update a profile mapping. Updates an existing profile mapping by adding, updating, or removing one or many property mappings. Required: id.
delete_a_okta_mapping_by_id
Delete a policy resource mapping. Deletes the resource mapping for a policy identified by policyId and mappingId. Required: policy_id, id.
create_a_okta_mark_error
Assign the fulfillment error status to a WebAuthn preregistration factor. Assigns the fulfillment error status to a WebAuthn preregistration factor for a user. Required: user_id, authenticator_enrollment_id.
get_single_okta_member_by_id
Retrieve a role resource set binding member. Retrieves a member (identified by memberId) that belongs to a role resource set binding. Required: resource_set_id_or_label, role_id_or_label, id.
delete_a_okta_member_by_id
Unassign a role resource set binding member. Unassigns a member (identified by memberId) from a role resource set binding. Required: resource_set_id_or_label, role_id_or_label, id.
list_all_okta_memberships
Retrieve the memberships for the given identity source group. Retrieves the group memberships for the given identity source group in the given identity source instance. Required: identity_source_id, group_or_external_id.
create_a_okta_membership
Create the memberships for the given identity source group. Creates the group memberships for the given identity source group. Required: identity_source_id, group_or_external_id.
delete_a_okta_membership_by_id
Delete the memberships for the specified identity source group. Deletes group memberships for the specified identity source group using member external IDs. Required: identity_source_id, group_or_external_id, member_external_id.
list_all_okta_meta_uischemas
List all UI schemas. Lists all UI Schemas in your org
get_single_okta_meta_uischema_by_id
Retrieve a UI schema. Retrieves a UI Schema by id. Required: id.
create_a_okta_meta_uischema
Create a UI schema. Creates an input for an enrollment form
update_a_okta_meta_uischema_by_id
Replace a UI schema. Replaces a UI Schema by id. Required: id.
delete_a_okta_meta_uischema_by_id
Delete a UI schema. Deletes a UI Schema by id. Required: id.
list_all_okta_methods
List all methods of an authenticator. Lists all methods of an authenticator identified by authenticatorId. Required: authenticator_id.
update_a_okta_method_by_id
Replace an authenticator method. Replaces a method of methodType for an authenticator identified by authenticatorId. Required: authenticator_id, method_type.
create_a_okta_oauth_2_callback
Verify the provisioning connection. Verifies the OAuth 2.0-based connection as part of the OAuth 2.0 consent flow. Required: app_name, app_id.
create_a_okta_okta_communication_opt_in
Opt in to Okta user communication emails. Opts in all users of this org to Okta communication emails
create_a_okta_okta_communication_opt_out
Opt out of Okta user communication emails. Opts out all users of this org from Okta communication emails
update_a_okta_okta_personal_settings_edit_feature_by_id
Replace the Okta Personal admin settings. Replaces Okta Personal admin settings in a Workforce org
list_all_okta_okta_personal_settings_export_blocklists
List all blocked email domains. Lists all blocked email domains which are excluded from app migration
update_a_okta_okta_personal_settings_export_blocklist_by_id
Replace the blocked email domains. Replaces the list of blocked email domains which are excluded from app migration
list_all_okta_okta_support_cases
List all Okta Support cases. Lists all Okta Support cases that the requesting principal has permission to view
update_a_okta_okta_support_case_by_id
Update an Okta Support case. Updates access to the org for an Okta Support case: * You can enable, disable, or extend access to your org for an Okta Support case. Required: case_number.
create_a_okta_okta_support_extend
Extend Okta Support access. Extends the length of time that Okta Support can access your org by 24 hours.
create_a_okta_okta_support_grant
Grant Okta Support access. Grants Okta Support temporary access to your org as an administrator for eight hours .
create_a_okta_okta_support_revoke
Revoke Okta Support access. Revokes Okta Support access to your org .
list_all_okta_org_captchas
Retrieve the org-wide CAPTCHA settings. Retrieves the CAPTCHA settings object for your organization .
update_a_okta_org_captcha_by_id
Replace the org-wide CAPTCHA settings. Replaces the CAPTCHA settings object for your organization .
delete_a_okta_org_captcha_by_id
Delete the org-wide CAPTCHA settings. Deletes the CAPTCHA settings object for your organization
list_all_okta_org_contacts
List all org contact types. Lists all org contact types for your Okta org
update_a_okta_org_contact_by_id
Replace the contact type user. Replaces the user associated with the specified contact type. Required: contact_type.
get_single_okta_org_contact_by_id
Retrieve the contact type user. Retrieves the ID and the user resource associated with the specified contact type. Required: id.
list_all_okta_org_preferences
Retrieve the org preferences. Retrieves preferences of your Okta org
list_all_okta_org_settings_third_party_admin_settings
Retrieve the org third-party admin setting. Retrieves the third-party admin setting.
create_a_okta_org_settings_third_party_admin_setting
Update the org third-party admin setting. Updates the third-party admin setting.
create_a_okta_org
Update the Org general settings. Updates partial Org General Settings
update_a_okta_org_by_id
Replace the Org general settings. Replaces the Org General Settings for your Okta org
list_all_okta_owners
List all group owners. Lists all owners for a specific group. Required: group_id.
create_a_okta_owner
Assign a group owner. Assigns a group owner. Required: group_id.
delete_a_okta_owner_by_id
Delete a group owner. Deletes a group owner from a specific group. Required: group_id, id.
list_all_okta_pages_errors
Retrieve the error page sub-resources. Retrieves the error page sub-resources. Required: brand_id.
get_single_okta_pages_error_by_id
Retrieve the default error page. Retrieves the default error page. Required: brand_id.
list_all_okta_pages_sign_ins
Retrieve the sign-in page sub-resources. Retrieves the sign-in page sub-resources. Required: brand_id.
get_single_okta_pages_sign_in_by_id
Retrieve the default sign-in page. Retrieves the default sign-in page. Required: brand_id.
list_all_okta_permissions
Retrieve a custom role permission. Retrieves a permission (identified by permissionType) for a custom role. Required: role_id_or_label, permission_type.
create_a_okta_permission
Create a custom role permission. Creates a permission (specified by permissionType) for a custom role. Required: role_id_or_label, permission_type.
update_a_okta_permission_by_id
Replace a custom role permission. Replaces a permission (specified by permissionType) for a custom role. Required: role_id_or_label, permission_type.
delete_a_okta_permission_by_id
Delete a custom role permission. Deletes a permission (identified by permissionType) from a custom role. Required: role_id_or_label, permission_type.
list_all_okta_policies
List all policies. Lists all policies. Required: auth_server_id.
get_single_okta_policy_by_id
Retrieve a policy. Retrieves a policy. Required: id.
create_a_okta_policy
Create a policy. Creates a policy. Required: auth_server_id.
update_a_okta_policy_by_id
Replace a policy. Replaces the properties of a policy identified by policyId. Required: id.
delete_a_okta_policy_by_id
Delete a policy. Deletes a policy. Required: id.
okta_policies_bulk_update
Assign an app sign-in policy. Assigns an app to an app sign-in policy, identified by policyId. Required: app_id, policy_id.
okta_policies_bulk_delete
Delete a policy. Deletes a policy. Required: auth_server_id, policy_id.
okta_policies_clone
Clone an existing policy. Clones an existing policy. Required: policy_id.
create_a_okta_policies_simulate
Create a policy simulation. Creates a policy or policy rule simulation.
create_a_okta_preferences_hide_end_user_footer
Set the hide dashboard footer preference. Sets the preference to hide the Okta End-User Dashboard footer for all end users of your org
create_a_okta_preferences_show_end_user_footer
Set the show dashboard footer preference. Sets the preference to show the Okta UI footer for all end users of your org
list_all_okta_principal_rate_limits
List all principal rate limits. Lists all Principal Rate Limit entities considering the provided parameters
get_single_okta_principal_rate_limit_by_id
Retrieve a principal rate limit. Retrieves a principal rate limit entity by principalRateLimitId. Required: id.
create_a_okta_principal_rate_limit
Create a principal rate limit. Creates a new principal rate limit entity.
update_a_okta_principal_rate_limit_by_id
Replace a principal rate limit. Replaces a principal rate limit entity by principalRateLimitId. Required: id.
list_all_okta_privacy_aerials
Retrieve Okta Aerial consent for your org. Retrieves the Okta Aerial consent grant details for your Org.
list_all_okta_privacy_okta_communications
Retrieve the Okta communication settings. Retrieves Okta Communication Settings of your org
list_all_okta_privacy_okta_supports
Retrieve the Okta Support settings. Retrieves Okta Support Settings for your org
list_all_okta_privileged_access_okta_service_accounts
List all Okta managed user accounts. Lists all Okta managed user accounts in your org.
get_single_okta_privileged_access_okta_service_account_by_id
Retrieve an Okta managed user account. Retrieves an Okta managed user account specified by ID. Required: id.
create_a_okta_privileged_access_okta_service_account
Create an Okta managed user account. Creates a new Okta managed user account for managing a Universal Directory user as a service account.
update_a_okta_privileged_access_okta_service_account_by_id
Update an Okta managed user account. Updates an existing Okta managed user account specified by ID. Required: id.
delete_a_okta_privileged_access_okta_service_account_by_id
Delete an Okta managed user account. Deletes an Okta managed user account specified by ID. Required: id.
list_all_okta_privileged_access_service_accounts
List all app service accounts. Lists all app service accounts
get_single_okta_privileged_access_service_account_by_id
Retrieve an app service account. Retrieves an app service account specified by ID. Required: id.
create_a_okta_privileged_access_service_account
Create an app service account. Creates a new app service account for managing an app account
update_a_okta_privileged_access_service_account_by_id
Update an existing app service account. Updates an existing app service account specified by ID. Required: id.
delete_a_okta_privileged_access_service_account_by_id
Delete an app service account. Deletes an app service account specified by ID. Required: id.
list_all_okta_push_providers
List all push providers. Lists all push providers
get_single_okta_push_provider_by_id
Retrieve a push provider. Retrieves a push provider by pushProviderId. Required: id.
create_a_okta_push_provider
Create a push provider. Creates a new push provider.
update_a_okta_push_provider_by_id
Replace a push provider. Replaces a push provider by pushProviderId. Required: id.
delete_a_okta_push_provider_by_id
Delete a push provider. Deletes a push provider by pushProviderId. Required: id.
create_a_okta_query
Submit a query for AD Group. Submits a query search on the on-premises agent to asynchronously fetch specific Active Directory (AD) attributes for a group. Required: app_instance_id, group_id.
list_all_okta_queries
Retrieve the results of an AD group query. Retrieves the results of the requested Active Directory (AD) group attributes using the resultId returned from the POST /api/v1/directories/{appInstanceId}/groups/{groupId}/query call. Required: app_instance_id, group_id, result_id.
list_all_okta_rate_limit_settings_admin_notifications
Retrieve the rate limit admin notification settings. Retrieves the currently configured Rate Limit Admin Notification Settings
update_a_okta_rate_limit_settings_admin_notification_by_id
Replace the rate limit admin notification settings. Replaces the Rate Limit Admin Notification Settings and returns the configured properties
list_all_okta_rate_limit_settings_per_clients
Retrieve the per-client rate limit settings. Retrieves the currently configured Per-Client Rate Limit Settings
update_a_okta_rate_limit_settings_per_client_by_id
Replace the per-client rate limit settings. Replaces the Per-Client Rate Limit Settings and returns the configured properties
list_all_okta_rate_limit_settings_warning_thresholds
Retrieve the rate limit warning threshold percentage. Retrieves the currently configured threshold for warning notifications when the API's rate limit is exceeded
update_a_okta_rate_limit_settings_warning_threshold_by_id
Replace the rate limit warning threshold percentage. Replaces the Rate Limit Warning Threshold Percentage and returns the configured property
list_all_okta_realm_assignments
List all realm assignments. Lists all realm assignments
get_single_okta_realm_assignment_by_id
Retrieve a realm assignment. Retrieves a realm assignment. Required: id.
create_a_okta_realm_assignment
Create a realm assignment. Creates a new realm assignment
update_a_okta_realm_assignment_by_id
Replace a realm assignment. Replaces a realm assignment. Required: id.
delete_a_okta_realm_assignment_by_id
Delete a realm assignment. Deletes a realm assignment. Required: id.
list_all_okta_realm_assignments_operations
List all realm assignment operations. Lists all realm assignment operations.
create_a_okta_realm_assignments_operation
Execute a realm assignment. Executes a realm assignment
list_all_okta_realms
List all realms. Lists all realms.
get_single_okta_realm_by_id
Retrieve a realm. Retrieves a realm. Required: id.
create_a_okta_realm
Create a realm. Creates a new realm
update_a_okta_realm_by_id
Replace the realm profile. Replaces the realm profile. Required: id.
delete_a_okta_realm_by_id
Delete a realm. Deletes a realm permanently. Required: id.
create_a_okta_resend
Resend a factor enrollment. Resends an sms, call, or email factor challenge as part of an enrollment flow. Required: user_id, factor_id.
list_all_okta_resources
List all resource set resources. Lists all resources for the resource set. Required: resource_set_id_or_label.
get_single_okta_resource_by_id
Retrieve a resource set resource. Retrieves a resource identified by resourceId in a resource set. Required: resource_set_id_or_label, id.
create_a_okta_resource
Add a resource set resource with conditions. Adds a resource with conditions for a resource set. Required: resource_set_id_or_label.
update_a_okta_resource_by_id
Replace the resource set resource conditions. Replaces the conditions of a resource identified by resourceId in a resource set. Required: resource_set_id_or_label, id.
delete_a_okta_resource_by_id
Delete a resource set resource. Deletes a resource (identified by resourceId) from a resource set. Required: resource_set_id_or_label, id.
okta_resources_bulk_update
Add more resources to a resource set. Adds more resources to a resource set. Required: resource_set_id_or_label.
list_all_okta_resourceservercredentials_keys
List all Custom Authorization Server Public JSON Web Keys. Lists all the public keys used by the custom authorization server. Required: auth_server_id.
create_a_okta_resourceservercredentials_key
Add a JSON Web Key. Adds a new JSON Web Key to the custom authorization servers JSON web keys. Required: auth_server_id.
delete_a_okta_resourceservercredentials_key_by_id
Delete a Custom Authorization Server Public JSON Web Key. Deletes a custom authorization server public JSON web key by key id. Required: auth_server_id, key_id.
create_a_okta_retry
Retry an agent pool update. Retries an agent pool update if the update is unsuccessful or communication with Okta was interrupted during an agent auto-update. Required: pool_id, update_id.
list_all_okta_risks
Retrieve the user's risk. Retrieves the user risk object for a user ID. Required: user_id.
update_a_okta_risk_by_id
Upsert the user's risk. Upserts (creates or updates) the user risk object for a user ID. Required: user_id.
list_all_okta_rules
List all policy rules. Lists all policy rules for the specified Custom Authorization Server and Policy. Required: auth_server_id, policy_id.
get_single_okta_rule_by_id
Retrieve a policy rule. Retrieves a policy rule by ruleId. Required: auth_server_id, policy_id, id.
create_a_okta_rule
Create a policy rule. Creates a policy rule for the specified Custom Authorization Server and Policy. Required: auth_server_id, policy_id.
update_a_okta_rule_by_id
Replace a policy rule. Replaces the configuration of the Policy Rule defined in the specified Custom Authorization Server and Policy. Required: auth_server_id, policy_id, id.
delete_a_okta_rule_by_id
Delete a policy rule. Deletes a Policy Rule defined in the specified Custom Authorization Server and Policy. Required: auth_server_id, policy_id, id.
list_all_okta_saml_metadata
Preview the application SAML metadata. Previews the SSO SAML metadata for an application. Required: app_id.
get_single_okta_schemas_app_by_id
Retrieve the default app user schema for an app. Retrieves the default schema for an app user. Required: app_id.
create_a_okta_schemas_app
Update the app user profile schema for an app. Updates the app user schema. Required: app_id.
get_single_okta_schemas_group_by_id
Retrieve the default group schema. Retrieves the group schema The User Types feature does not extend to groups.
create_a_okta_schemas_group
Update the group profile schema. Updates the group profile schema.
list_all_okta_schemas_log_streams
List the log stream schemas. Lists the schema for all log stream types visible for this org
get_single_okta_schemas_user_by_id
Retrieve a user schema. Retrieves the schema for a user type. Required: id.
create_a_okta_schemas_user
Update a user schema. Updates a user schema. Required: id.
list_all_okta_scopes
List all custom token scopes. Lists all custom token scopes. Required: auth_server_id.
get_single_okta_scope_by_id
Retrieve a custom token scope. Retrieves a custom token scope. Required: auth_server_id, id.
create_a_okta_scope
Create a custom token scope. Creates a custom token scope. Required: auth_server_id.
update_a_okta_scope_by_id
Replace a custom token scope. Replaces a custom token scope. Required: auth_server_id, id.
delete_a_okta_scope_by_id
Delete a custom token scope. Deletes a custom token scope. Required: auth_server_id, id.
list_all_okta_security_events_providers
List all security events providers. Lists all security events provider instances
get_single_okta_security_events_provider_by_id
Retrieve the security events provider. Retrieves the security events provider instance specified by id. Required: id.
create_a_okta_security_events_provider
Create a security events provider. Creates a security events provider instance
update_a_okta_security_events_provider_by_id
Replace a security events provider. Replaces a security events provider instance specified by id. Required: id.
delete_a_okta_security_events_provider_by_id
Delete a security events provider. Deletes a security events provider instance specified by id. Required: id.
create_a_okta_security_security_event
Publish a security event token. Publishes a security event token (SET) sent by a security events provider.
list_all_okta_sessions
List all identity source sessions. Lists all identity source sessions for the given identity source instance. Required: identity_source_id.
get_single_okta_session_by_id
Retrieve an identity source session. Retrieves an identity source session for a given identity source ID and session ID. Required: identity_source_id, id.
create_a_okta_session
Create an identity source session. Creates an identity source session for the given identity source instance. Required: identity_source_id.
delete_a_okta_session_by_id
Delete an identity source session. Deletes an identity source session for a given identity source ID and session Id. Required: identity_source_id, id.
okta_sessions_bulk_delete
Revoke all user sessions. Revokes all active identity provider sessions of the user. Required: user_id.
create_a_okta_set_as_primary
Set a custom telephony provider as a primary telephony provider. Sets a custom telephony provider as the primary telephony provider for the org. Required: custom_telephony_provider_id.
list_all_okta_settings
Retrieve the email template settings. Retrieves an email template's settings. Required: brand_id, template_name.
update_a_okta_setting_by_id
Replace the email template settings. Replaces an email template's settings. Required: brand_id, template_name.
list_all_okta_settings_auto_assign_admin_app_settings
Retrieve the Okta Admin Console assignment setting. Retrieves the org setting to automatically assign the Okta Admin Console when an admin role is assigned
create_a_okta_settings_auto_assign_admin_app_setting
Update the Okta Admin Console assignment setting. Updates the org setting to automatically assign the Okta Admin Console when an admin role is assigned .
list_all_okta_settings_client_privileges_settings
Retrieve the default public client app role setting. Retrieves the org setting to assign the Super Admin role to new public client apps
update_a_okta_settings_client_privileges_setting_by_id
Assign the default public client app role setting. Assigns the Super Admin role as the default role for new public client apps
list_all_okta_sign_in_customizeds
Retrieve the customized sign-in page. Retrieves the customized sign-in page. Required: brand_id.
update_a_okta_sign_in_customized_by_id
Replace the customized sign-in page. Replaces the customized sign-in page. Required: brand_id.
delete_a_okta_sign_in_customized_by_id
Delete the customized sign-in page. Deletes the customized sign-in page. Required: brand_id.
list_all_okta_sign_in_previews
Retrieve the preview sign-in page preview. Retrieves the preview sign-in page. Required: brand_id.
update_a_okta_sign_in_preview_by_id
Replace the preview sign-in page. Replaces the preview sign-in page. Required: brand_id.
delete_a_okta_sign_in_preview_by_id
Delete the preview sign-in page. Deletes the preview sign-in page. Required: brand_id.
list_all_okta_sign_in_widget_versions
List all Sign-In Widget versions. Lists all sign-in widget versions supported by the current org. Required: brand_id.
list_all_okta_sign_out_customizeds
Retrieve the sign-out page settings. Retrieves the sign-out page settings. Required: brand_id.
update_a_okta_sign_out_customized_by_id
Replace the sign-out page settings. Replaces the sign-out page settings. Required: brand_id.
list_all_okta_ssf_streams
Retrieve the SSF stream configuration(s). Retrieves either a list of all known SSF stream configurations or the individual configuration if specified by ID.
create_a_okta_ssf_stream
Create an SSF stream. Creates an SSF stream for an event receiver to start receiving security events in the form of Security Event Tokens (SETs) from Okta.
update_a_okta_ssf_stream_by_id
Replace an SSF stream. Replaces all properties for an existing SSF stream configuration.
delete_a_okta_ssf_stream_by_id
Delete an SSF stream. Deletes the specified SSF stream.
okta_ssf_streams_partial_update
Update an SSF stream. Updates properties for an existing SSF stream configuration.
create_a_okta_start_import
Start the import from the identity source. Starts the import from the identity source described by the uploaded bulk operations. Required: identity_source_id, session_id.
list_all_okta_stream_status
Retrieve the SSF stream status. Retrieves the status of an SSF stream.
create_a_okta_stream_verification
Verify an SSF stream. Verifies an SSF stream by publishing a verification event requested by a security events provider.
create_a_okta_subscribe
Subscribe a role to a specific notification type. Subscribes a Role to a specified notification type. Required: role_ref, notification_type.
list_all_okta_subscriptions
Retrieve a subscription for a role. Retrieves a subscription by notificationType for a specified Role. Required: role_ref, notification_type.
list_all_okta_targets
Retrieve a role target by assignment type. Retrieves all role targets for an APP_ADMIN, USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user by user or group assignment type. Required: user_id, role_id_or_encoded_role_id.
list_all_okta_telephony_providers
List all custom telephony providers. Lists all custom telephony providers that are configured in your org
get_single_okta_telephony_provider_by_id
Retrieve a custom telephony provider. Retrieves the details of a custom telephony provider by its ID. Required: id.
create_a_okta_telephony_provider
Create a custom telephony provider. Creates a custom telephony provider with the provided credentials
update_a_okta_telephony_provider_by_id
Update a custom telephony provider credential. Updates the credentials of an existing custom telephony provider. Required: id.
delete_a_okta_telephony_provider_by_id
Delete a custom telephony provider. Deletes a custom telephony provider by its ID. Required: id.
list_all_okta_templates_emails
List all email templates. Lists all supported email templates. Required: brand_id.
list_all_okta_templates_sms
List all SMS templates. Lists all custom SMS templates.
get_single_okta_templates_sm_by_id
Retrieve an SMS template. Retrieves a specific template by id. Required: id.
create_a_okta_templates_sm
Create an SMS template. Creates a new custom SMS template
update_a_okta_templates_sm_by_id
Replace an SMS template. Replaces the SMS Template . Required: id.
delete_a_okta_templates_sm_by_id
Delete an SMS template. Deletes an SMS template. Required: id.
okta_templates_sms_replace
Update an SMS template. Updates only some of the SMS Template properties: * All properties within the custom SMS Template that have values are updated. Required: id.
create_a_okta_test
Send a test email. Sends a test email to the current user's primary and secondary email addresses. Required: brand_id, template_name.
list_all_okta_themes
List all themes. Lists all the themes in your brand. Required: brand_id.
get_single_okta_theme_by_id
Retrieve a theme. Retrieves a theme for a brand. Required: brand_id, id.
update_a_okta_theme_by_id
Replace a theme. Replaces a theme for a brand. Required: brand_id, id.
list_all_okta_threats_configurations
Retrieve the ThreatInsight configuration. Retrieves the ThreatInsight configuration for the org
create_a_okta_threats_configuration
Update the ThreatInsight configuration. Updates the ThreatInsight configuration for the org
list_all_okta_tokens
List all application refresh tokens. Lists all refresh tokens for an app . Required: app_id.
get_single_okta_token_by_id
Retrieve an application token. Retrieves a refresh token for the specified app. Required: app_id, id.
delete_a_okta_token_by_id
Revoke an application token. Revokes the specified token for the specified app. Required: app_id, id.
okta_tokens_bulk_delete
Revoke all application tokens. Revokes all OAuth 2.0 refresh tokens for the specified app. Required: app_id.
get_single_okta_transaction_by_id
Retrieve a factor transaction status. Retrieves the status of a push factor verification transaction > The response body for a number matching push challenge to an Okta Verify push factor enrollment is different from the response body of a standard push challenge. Required: user_id, factor_id, id.
list_all_okta_trusted_origins
List all trusted origins. Lists all trusted origins
get_single_okta_trusted_origin_by_id
Retrieve a trusted origin. Retrieves a trusted origin. Required: id.
create_a_okta_trusted_origin
Create a trusted origin. Creates a trusted origin
update_a_okta_trusted_origin_by_id
Replace a trusted origin. Replaces a trusted origin. Required: id.
delete_a_okta_trusted_origin_by_id
Delete a trusted origin. Deletes a trusted origin. Required: id.
get_single_okta_types_user_by_id
Retrieve a user type. Retrieves a user type by ID. Required: id.
create_a_okta_types_user
Create a user type. Creates a new user type.
update_a_okta_types_user_by_id
Replace a user type. Replaces an existing user type. Required: id.
delete_a_okta_types_user_by_id
Delete a user type. Deletes a user type permanently. Required: id.
okta_types_users_replace
Update a user type. Updates an existing user type. Required: id.
create_a_okta_unsubscribe
Unsubscribe a role from a specific notification type. Unsubscribes a Role from a specified notification type. Required: role_ref, notification_type.
list_all_okta_updates
List all agent pool updates. Lists all agent pool updates. Required: pool_id.
create_a_okta_update
Create an agent pool update. Creates an agent pool update. Required: pool_id.
get_single_okta_update_by_id
Retrieve an agent pool update by ID. Retrieves an agent pool update by its updateId. Required: pool_id, id.
delete_a_okta_update_by_id
Delete an agent pool update. Deletes agent pool update. Required: pool_id, id.
okta_updates_activate
Activate an agent pool update. Activates a scheduled agent pool update. Required: pool_id, id.
okta_updates_deactivate
Deactivate an agent pool update. Deactivates scheduled agent pool update. Required: pool_id, id.
okta_updates_pause
Pause an agent pool update. Pauses a running or queued agent pool update. Required: pool_id, id.
okta_updates_resume
Resume an agent pool update. Resumes a running or queued agent pool update. Required: pool_id, id.
okta_updates_stop
Stop an agent pool update. Stops an agent pool update. Required: pool_id, id.
okta_updates_replace
Update an agent pool update by ID. Updates an agent pool update instance and returns the latest agent pool update. Required: pool_id, id.
list_all_okta_updates_settings
Retrieve an agent pool update's settings. Retrieves the current state of the agent pool update instance settings. Required: pool_id.
create_a_okta_updates_setting
Update an agent pool update settings. Updates an agent pool update instance settings. Required: pool_id.
list_all_okta_user_authenticator_enrollments
List all authenticator enrollments. Lists all authenticator enrollments of the specified user. Required: user_id.
get_single_okta_user_authenticator_enrollment_by_id
Retrieve an authenticator enrollment. Retrieves a user's authenticator enrollment by enrollmentId. Required: user_id, id.
delete_a_okta_user_authenticator_enrollment_by_id
Delete an authenticator enrollment. Deletes an existing enrollment for the specified user. Required: user_id, id.
list_all_okta_user_linked_objects
List all linked object definitions. Lists all Linked Object definitions
create_a_okta_user_linked_object
Create a linked object definition. Creates a Linked Object definition
delete_a_okta_user_linked_object_by_id
Delete a linked object definition. Deletes the Linked Object definition specified by either the primary or associated name. Required: linked_object_name.
list_all_okta_values
List all values for a governance bundle entitlement. Lists all entitlement values that are specific to a governance bundle entitlement. Required: bundle_id, entitlement_id.
create_a_okta_verify_rp_id_domain
Verify a Relying Party ID domain. Verifies the Relying Party identifier (RP ID) domain for the specified Passkey (FIDO2 WebAuthn) authenticator and the specific webauthn authenticator method. Required: authenticator_id, web_authn_method_type.
create_a_okta_webauthn_registration_activate
Activate a preregistered WebAuthn factor. Activates a preregistered WebAuthn factor.
create_a_okta_webauthn_registration_enroll
Enroll a preregistered WebAuthn factor. Enrolls a preregistered WebAuthn factor.
create_a_okta_webauthn_registration_initiate_fulfillment_request
Generate a fulfillment request. Generates a fulfillment request by sending a WebAuthn preregistration event to start the flow.
create_a_okta_webauthn_registration_send_pin
Send a PIN to user. Sends the decoded PIN for the specified WebAuthn preregistration enrollment.
list_all_okta_well_known_app_authenticator_configurations
Retrieve the well-known app authenticator configuration. Retrieves the well-known app authenticator configuration.
list_all_okta_well_known_apple_app_site_associations
Retrieve the customized apple-app-site-association URI content. Retrieves the content of the apple-app-site-assocation well-known URI .
list_all_okta_well_known_assetlinks_jsons
Retrieve the customized assetlinks.json URI content. Retrieves the content of the assetlinks.json well-known URI
list_all_okta_well_known_okta_organizations
Retrieve the Org metadata. Retrieves the org metadata, which includes the org ID, configured custom domains, and authentication pipeline
list_all_okta_well_known_ssf_configurations
Retrieve the SSF transmitter metadata. Retrieves SSF transmitter configuration metadata.
list_all_okta_well_known_uris
Retrieve all the well-known URIs. Retrieves the content from each of the well-known URIs for a specified brand. Required: brand_id.
list_all_okta_well_known_webauthns
Retrieve the customized webauthn URI content. Retrieves the content of the webauthn well-known URI
list_all_okta_yubikey_token_tokens
List all YubiKey OTP tokens. Lists all YubiKey OTP tokens
get_single_okta_yubikey_token_token_by_id
Retrieve a YubiKey OTP token. Retrieves the specified YubiKey OTP token by id. Required: id.
create_a_okta_yubikey_token_token
Upload a YubiKey OTP seed. Uploads a seed for a user to enroll a YubiKey OTP
list_all_okta_zones
List all network zones. Lists all Network Zones with pagination.
get_single_okta_zone_by_id
Retrieve a network zone. Retrieves a Network Zone by zoneId. Required: id.
create_a_okta_zone
Create a network zone. Creates a Network Zone * For an IP Network Zone, you must define either gateways or proxies.
update_a_okta_zone_by_id
Replace a network zone. Replaces a Network Zone by zoneId. Required: id.
delete_a_okta_zone_by_id
Delete a network zone. Deletes a Network Zone by zoneId > * You can't delete a Network Zone that's used by a Policy or Rule. Required: id.
list_all_okta_policy_apps
List all apps mapped to a policy. Lists all applications mapped to a policy identified by policyId . Required: policy_id.
get_single_okta_iam_resource_set_binding_by_id
Retrieve a role resource set binding. Retrieves the binding of a role (identified by roleIdOrLabel) for a resource set (identified by resourceSetIdOrLabel). Required: resource_set_id_or_label, id.
list_all_okta_iam_resource_set_bindings
Retrieve a resource set. Retrieves a resource set by resourceSetIdOrLabel. Required: resource_set_id_or_label.
list_all_okta_group_role_catalog_app_targets
List all group role app targets. Lists all app targets for an APP_ADMIN role assignment to a group. Required: group_id, role_assignment_id.
update_a_okta_group_role_catalog_app_target_by_id
Assign a group role app target. Assigns an OIN app target to an APP_ADMIN role assignment to a group. Required: group_id, role_assignment_id, app_name.
okta_group_role_catalog_app_targets_update_instance
Assign a group role app instance target. Assigns an app instance target to an APP_ADMIN role assignment to a group. Required: group_id, role_assignment_id, app_name, app_id.
delete_a_okta_group_role_catalog_app_target_by_id
Unassign a group role app target. Unassigns an OIN app target from an APP_ADMIN role assignment to a group . Required: group_id, role_assignment_id, app_name.
okta_group_role_catalog_app_targets_delete_instance
Unassign a group role app instance target. Unassigns an app instance target from an APP_ADMIN role assignment to a group . Required: group_id, role_assignment_id, app_name, app_id.
list_all_okta_user_role_catalog_app_targets
List all admin role app targets. Lists all app targets for an APP_ADMIN role assigned to a user. Required: user_id, role_assignment_id.
update_a_okta_user_role_catalog_app_target_by_id
Assign all apps as target to admin role. Assigns all apps as target to an APP_ADMIN role. Required: user_id, role_assignment_id.
okta_user_role_catalog_app_targets_update_by_name
Assign an admin role app target. Assigns an OIN app target for an APP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, app_name.
okta_user_role_catalog_app_targets_update_instance
Assign an admin role app instance target. Assigns an app instance target to an APP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, app_name, app_id.
delete_a_okta_user_role_catalog_app_target_by_id
Unassign an admin role app target. Unassigns an OIN app target from an APP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, app_name.
okta_user_role_catalog_app_targets_delete_instance
Unassign an admin role app instance target. Unassigns an app instance target from an APP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, app_name, app_id.
list_all_okta_oauth_client_role_catalog_app_targets
List all client role app targets. Lists all OIN app targets for an APP_ADMIN role that's assigned to a client (by clientId). Required: client_id, role_assignment_id.
okta_oauth_client_role_catalog_app_targets_update_by_name
Assign a client role app target. Assigns an OIN app target for an APP_ADMIN role assignment to a client. Required: client_id, role_assignment_id, app_name.
okta_oauth_client_role_catalog_app_targets_update_instance
Assign a client role app instance target. Assigns an app instance target to an APP_ADMIN role assignment to a client. Required: client_id, role_assignment_id, app_name, app_id.
delete_a_okta_oauth_client_role_catalog_app_target_by_id
Unassign a client role app target. Unassigns an OIN app target for a role assignment to a client app . Required: client_id, role_assignment_id, app_name.
okta_oauth_client_role_catalog_app_targets_delete_instance
Unassign a client role app instance target. Unassigns an app instance target from a role assignment to a client app . Required: client_id, role_assignment_id, app_name, app_id.
list_all_okta_user_oauth_clients
List all clients. Lists all client resources for which the specified user has grants or tokens . Required: user_id.
list_all_okta_app_certificate_csrs
List all certificate signing requests. Lists all certificate signing requests for an app. Required: app_id.
get_single_okta_app_certificate_csr_by_id
Retrieve a certificate signing request. Retrieves a certificate signing request (CSR) for the app by csrId. Required: app_id, id.
create_a_okta_app_certificate_csr
Generate a certificate signing request. Generates a new key pair and returns the certificate signing request (CSR) for it. Required: app_id.
delete_a_okta_app_certificate_csr_by_id
Revoke a certificate signing request. Revokes a certificate signing request and deletes the key pair from the app. Required: app_id, id.
list_all_okta_idp_certificate_csrs
List all certificate signing requests. Lists all certificate signing requests (CSRs) for an identity provider (IdP). Required: idp_id.
get_single_okta_idp_certificate_csr_by_id
Retrieve a certificate signing request. Retrieves a specific certificate signing request (CSR) by id. Required: idp_id, id.
create_a_okta_idp_certificate_csr
Generate a certificate signing request. Generates a new key pair and returns a certificate signing request (CSR) for it . Required: idp_id.
delete_a_okta_idp_certificate_csr_by_id
Revoke a certificate signing request. Revokes a certificate signing request (CSR) and deletes the key pair from the identity provider (IdP). Required: idp_id, id.
list_all_okta_app_jwks
List all the OAuth 2.0 client JSON Web Keys. Lists all JSON Web Keys for an OAuth 2.0 client app. Required: app_id.
get_single_okta_app_jwk_by_id
Retrieve an OAuth 2.0 client JSON Web Key. Retrieves an OAuth 2.0 client JSON Web Key by keyId. Required: app_id, id.
create_a_okta_app_jwk
Add a JSON Web Key. Adds a new JSON Web Key to the clients JSON Web Keys. Required: app_id.
delete_a_okta_app_jwk_by_id
Delete an OAuth 2.0 client JSON Web Key. Deletes an OAuth 2.0 Client JSON Web Key by keyId. Required: app_id, id.
list_all_okta_app_credentials_keys
List all key credentials. Lists all key credentials for an app. Required: app_id.
get_single_okta_app_credentials_key_by_id
Retrieve a key credential. Retrieves a specific application key credential by kid. Required: app_id, id.
okta_app_credentials_keys_clone
Clone a key credential. Clones an X.509 certificate for an application key credential from a source app to a target app. Required: app_id, id.
okta_app_credentials_keys_generate
Generate a key credential. Generates a new X.509 certificate for an app key credential .signing.kid value in the request body. Required: app_id.
list_all_okta_authorization_server_credentials_keys
List all credential keys. Lists all of the current, future, and expired Keys used by the Custom Authorization Server. Required: auth_server_id.
get_single_okta_authorization_server_credentials_key_by_id
Retrieve an authorization server key. Retrieves an Authorization Server Key specified by the keyId. Required: auth_server_id, id.
list_all_okta_org_idp_credentials_keys
List all IdP key credentials. Lists all identity provider (IdP) key credentials
get_single_okta_org_idp_credentials_key_by_id
Retrieve an IdP key credential. Retrieves a specific identity provider (IdP) key credential by kid. Required: id.
create_a_okta_org_idp_credentials_key
Create an IdP key credential. Creates a new X.509 certificate credential in the identity provider (IdP) key store .
update_a_okta_org_idp_credentials_key_by_id
Replace an IdP key credential. Replaces an identity provider (IdP) key credential by kid. Required: id.
delete_a_okta_org_idp_credentials_key_by_id
Delete an IdP key credential. Deletes a specific identity provider (IdP) key credential by kid if it isn't currently being used by an active or inactive IdP. Required: id.
list_all_okta_idp_credentials_keys
List all signing key credentials for IdP. Lists all signing key credentials for an identity provider (IdP). Required: idp_id.
get_single_okta_idp_credentials_key_by_id
Retrieve a signing key credential for IdP. Retrieves a specific identity provider (IdP) key credential by kid. Required: idp_id, id.
okta_idp_credentials_keys_clone
Clone a signing key credential for IdP. Clones an X.509 certificate for an identity provider (IdP) signing key credential from a source IdP to target IdP . Required: idp_id, id.
okta_idp_credentials_keys_generate
Generate a new signing key credential for IdP. Generates a new X.509 certificate for an identity provider (IdP) signing key credential to be used for signing assertions sent to the IdP. Required: idp_id.
list_all_okta_app_credentials_secrets
List all OAuth 2.0 client secrets. Lists all client secrets for an OAuth 2.0 client app. Required: app_id.
get_single_okta_app_credentials_secret_by_id
Retrieve an OAuth 2.0 client secret. Retrieves an OAuth 2.0 client secrets by secretId. Required: app_id, id.
create_a_okta_app_credentials_secret
Create an OAuth 2.0 client secret. Creates an OAuth 2.0 client secret object with a new active client secret. Required: app_id.
delete_a_okta_app_credentials_secret_by_id
Delete an OAuth 2.0 client secret. Deletes an OAuth 2.0 client secret by secretId. Required: app_id, id.
list_all_okta_api_service_credentials_secrets
List all API service integration instance secrets. Lists all client secrets for an API Service Integration instance by apiServiceId. Required: api_service_id.
create_a_okta_api_service_credentials_secret
Create an API service integration instance secret. Creates an API Service Integration instance Secret object with a new active client secret. Required: api_service_id.
delete_a_okta_api_service_credentials_secret_by_id
Delete an API service integration instance secret. Deletes an API Service Integration instance Secret by secretId. Required: api_service_id, id.
get_single_okta_app_cwo_connection_by_id
Retrieve a Cross App Access connection. Retrieves the Cross App Access connection with the specified ID. Required: app_id, id.
list_all_okta_user_devices
List all devices for an enrolled user. Lists all devices enrolled by a user . Required: user_id.
list_all_okta_org_domains
List all custom domains. Lists all verified custom domains for the org
get_single_okta_disaster_recovery_status_by_id
Retrieve the disaster recovery status for a domain. Retrieves the failover or failback status for the domain specified in the request path. Required: domain.
list_all_okta_app_features
List all features. Lists all features for an app . Required: app_id.
get_single_okta_app_feature_by_id
Retrieve a feature. Retrieves a Feature object for an app. Required: app_id, id.
update_a_okta_app_feature_by_id
Update a feature. Updates a Feature object for an app . Required: app_id, id.
list_all_okta_org_features
List all features. Lists all self-service features for your org
get_single_okta_org_feature_by_id
Retrieve a feature. Retrieves a feature by ID. Required: id.
create_a_okta_org_feature
Update a feature lifecycle. Updates a feature's lifecycle status. Required: lifecycle, id.
get_single_okta_app_federated_claim_by_id
Retrieve a federated claim. Retrieves a federated claim by claimId. Required: app_id, claim_id.
get_single_okta_user_role_governance_grant_by_id
Retrieve a user role governance source. Retrieves a governance source (identified by grantId) for a role (identified by roleAssignmentId) that's assigned to a user (identified by userId). Required: user_id, role_assignment_id, grant_id.
list_all_okta_user_client_grants
List all grants for a client. Lists all grants for a specified user and client. Required: user_id, client_id.
list_all_okta_user_grants
List all user grants. Lists all grants for the specified user. Required: user_id.
get_single_okta_user_grant_by_id
Retrieve a user grant. Retrieves a grant for the specified user. Required: user_id, id.
okta_user_grants_bulk_delete
Revoke all user grants. Revokes all grants for a specified user. Required: user_id.
delete_a_okta_user_grant_by_id
Revoke a user grant. Revokes one grant for a specified user. Required: user_id, id.
get_single_okta_app_group_push_mapping_by_id
Retrieve a group push mapping. Retrieves a group push mapping by ID. Required: app_id, id.
delete_a_okta_app_group_by_id
Unassign an application group. Unassigns a Group from an app. Required: app_id, id.
okta_app_groups_partial_update
Update an application group. Updates a group assignment to an app. Required: app_id, id.
get_single_okta_identity_source_group_by_id
Retrieve an identity source group. Retrieves a group from an identity source for a given identity source ID and group ID or external ID. Required: identity_source_id, id.
create_a_okta_identity_source_group
Create an identity source group. Creates a group in an identity source for the given identity source instance. Required: identity_source_id.
okta_identity_source_groups_create_with_id
Update an identity source group. Updates a group to an identity source for the given identity source instance and group ID. Required: identity_source_id, id.
delete_a_okta_identity_source_group_by_id
Delete an identity source group. Deletes a group in an identity source for a given identity source ID and group ID. Required: identity_source_id, id.
list_all_okta_user_idps
List all IdPs for user. Lists the identity providers (IdPs) associated with the user. Required: id.
create_a_okta_brand_theme_logo
Upload the logo. Uploads and replaces the logo for the theme. Required: brand_id, theme_id.
list_all_okta_policy_mappings
List all resources mapped to a policy. Lists all resources mapped to a policy identified by policyId. Required: policy_id.
get_single_okta_policy_mapping_by_id
Retrieve a policy resource mapping. Retrieves a resource mapping for a policy identified by policyId and mappingId. Required: policy_id, id.
create_a_okta_policy_mapping
Map a resource to a policy. Maps a resource to a policy identified by policyId . Required: policy_id.
get_single_okta_authenticator_method_by_id
Retrieve an authenticator method. Retrieves a method identified by methodType of an authenticator identified by authenticatorId. Required: authenticator_id, id.
create_a_okta_child_org
Create an org. Creates an org (child org) that has the same features as the current requesting org (parent org).
get_single_okta_authorization_server_policy_by_id
Retrieve a policy. Retrieves a policy. Required: auth_server_id, id.
update_a_okta_authorization_server_policy_by_id
Replace a policy. Replaces a policy. Required: auth_server_id, id.
list_all_okta_org_policies
List all policies. Lists all policies with the specified type
create_a_okta_org_policy
Create a policy. Creates a policy.
list_all_okta_user_role_governance_resources
Retrieve the user role governance source resources. Retrieves the resources of a governance source (identified by grantId) for a role (identified by roleAssignmentId) that's assigned to a user (identified by userId). Required: user_id, role_assignment_id, grant_id.
get_single_okta_authorization_server_signing_key_by_id
Retrieve a Custom Authorization Server Public JSON Web Key. Retrieves a custom authorization server public JSON web key by key id. Required: auth_server_id, id.
list_all_okta_oauth_client_roles
List all client role assignments. Lists all roles assigned to a client app identified by clientId. Required: client_id.
get_single_okta_oauth_client_role_by_id
Retrieve a client role. Retrieves a role assignment (identified by roleAssignmentId) for a client app (identified by clientId). Required: client_id, id.
create_a_okta_oauth_client_role
Assign a client role. Assigns a standard role to a client app. Required: client_id.
delete_a_okta_oauth_client_role_by_id
Unassign a client role. Unassigns a role assignment (identified by roleAssignmentId) from a client app (identified by clientId). Required: client_id, id.
list_all_okta_policy_rules
List all policy rules. Lists all policy rules. Required: policy_id.
get_single_okta_policy_rule_by_id
Retrieve a policy rule. Retrieves a policy rule. Required: policy_id, id.
create_a_okta_policy_rule
Create a policy rule. Creates a policy rule . Required: policy_id.
update_a_okta_policy_rule_by_id
Replace a policy rule. Replaces the properties for a policy rule identified by policyId and ruleId. Required: policy_id, id.
delete_a_okta_policy_rule_by_id
Delete a policy rule. Deletes a policy rule identified by policyId and ruleId. Required: policy_id, id.
get_single_okta_log_stream_schema_by_id
Retrieve the log stream schema for the schema type. Retrieves the schema for a log stream type. Required: log_stream_type.
get_single_okta_okta_session_by_id
Retrieve a session. Retrieves information about the session specified by the given session ID. Required: id.
delete_a_okta_okta_session_by_id
Revoke a session. Revokes the specified session. Required: id.
okta_user_notification_subscriptions_subscribe
Subscribe a user to a specific notification type. Subscribes the current user to a specified notification type. Required: user_id, notification_type.
okta_user_notification_subscriptions_unsubscribe
Unsubscribe a user from a specific notification type. Unsubscribes the current user from a specified notification type. Required: user_id, notification_type.
list_all_okta_user_notification_subscriptions
Retrieve a subscription for a user. Retrieves a subscription by notificationType for a specified user. Required: user_id, notification_type.
list_all_okta_group_role_group_targets
List all group role group targets. Lists all group targets for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a group. Required: group_id, role_assignment_id.
update_a_okta_group_role_group_target_by_id
Assign a group role group target. Assigns a group target to a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a group. Required: group_id, role_assignment_id, target_group_id.
delete_a_okta_group_role_group_target_by_id
Unassign a group role group target. Unassigns a group target from a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a group. Required: group_id, role_assignment_id, target_group_id.
list_all_okta_user_role_group_targets
List all admin role group targets. Lists all group targets for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id.
update_a_okta_user_role_group_target_by_id
Assign an admin role group target. Assigns a group target for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, group_id.
delete_a_okta_user_role_group_target_by_id
Unassign an admin role group target. Unassigns a group target from a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, group_id.
list_all_okta_oauth_client_role_group_targets
List all client role group targets. Lists all group targets for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a client. Required: client_id, role_assignment_id.
update_a_okta_oauth_client_role_group_target_by_id
Assign a client role group target. Assigns a group target to a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a client app. Required: client_id, role_assignment_id, group_id.
delete_a_okta_oauth_client_role_group_target_by_id
Unassign a client role group target. Unassigns a Group target from a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a client app. Required: client_id, role_assignment_id, group_id.
get_single_okta_brand_email_template_by_id
Retrieve an email template. Retrieves the details of an email template by name. Required: brand_id, id.
okta_email_server_tests_test
Test an SMTP server configuration. Tests the specified custom SMTP server configuration. Required: email_server_id.
okta_telephony_provider_tests_test
Send a test message from a custom telephony provider. Sends a test message (SMS or call) using the specified custom telephony provider to verify that the provider is configured correctly. Required: custom_telephony_provider_id.
list_all_okta_authorization_server_client_tokens
List all refresh tokens for a client. Lists all refresh tokens issued by an authorization server for a specific Client. Required: auth_server_id, client_id.
get_single_okta_authorization_server_client_token_by_id
Retrieve a refresh token for a client. Retrieves a refresh token for a Client. Required: auth_server_id, client_id, id.
okta_authorization_server_client_tokens_bulk_delete
Revoke all refresh tokens for a client. Revokes all refresh tokens for a Client. Required: auth_server_id, client_id.
delete_a_okta_authorization_server_client_token_by_id
Revoke a refresh token for a client. Revokes a refresh token for a Client. Required: auth_server_id, client_id, id.
list_all_okta_user_client_tokens
List all refresh tokens for a client. Lists all refresh tokens issued for the specified user and client. Required: user_id, client_id.
get_single_okta_user_client_token_by_id
Retrieve a refresh token for a client. Retrieves a refresh token issued for the specified user and client. Required: user_id, client_id, id.
okta_user_client_tokens_bulk_delete
Revoke all refresh tokens for a client. Revokes all refresh tokens issued for the specified user and client. Required: user_id, client_id.
delete_a_okta_user_client_token_by_id
Revoke a token for a client. Revokes the specified refresh and access tokens. Required: user_id, client_id, id.
get_single_okta_user_linked_object_schema_by_id
Retrieve a linked object definition. Retrieves a Linked Object definition. Required: linked_object_name.
list_all_okta_device_users
List all users for a device. Lists all Users for a device by deviceId. Required: device_id.
get_single_okta_identity_source_user_by_id
Retrieve an identity source user. Retrieves a user by external ID in an identity source for the given identity source instance. Required: identity_source_id, id.
create_a_okta_identity_source_user
Create an identity source user. Creates a user in an identity source for the given identity source instance. Required: identity_source_id.
okta_identity_source_users_partial_update
Update an identity source user. Updates a user to an identity source for the given identity source instance and external ID. Required: identity_source_id, id.
list_all_okta_idp_users
List all users for IdP. Lists all the users linked to an identity provider (IdP). Required: idp_id.
get_single_okta_idp_user_by_id
Retrieve a user for IdP. Retrieves a linked identity provider (IdP) user by ID. Required: idp_id, id.
create_a_okta_idp_user
Link a user to IdP. Links an Okta user to an existing SAML or social identity provider (IdP). Required: idp_id, id.
delete_a_okta_idp_user_by_id
Unlink a user from IdP. Unlinks the Okta user and the identity provider (IdP) user. Required: idp_id, id.
get_single_okta_brand_well_known_uris_by_id
Retrieve the well-known URI of a specific brand. Retrieves the well-known URI of a specific brand and well-known URI path. Required: brand_id, id.
Why Truto
Why use Truto’s MCP server for Okta
Other MCP servers give you a static tool list for one app. Truto gives you a managed, multi-tenant MCP infrastructure across 500+ integrations.
Auto-generated, always up to date
Tools are dynamically generated from curated documentation — not hand-coded. As integrations evolve, tools stay current without manual maintenance.
Fine-grained access control
Scope each MCP server to read-only, write-only, specific methods, or tagged tool groups. Expose only what your AI agent needs — nothing more.
Multi-tenant by design
Each MCP server is scoped to a single connected account with its own credentials. The URL itself is the auth token — no shared secrets, no credential leaking across tenants.
Works with every MCP client
Standard JSON-RPC 2.0 protocol. Paste the URL into Claude, ChatGPT, Cursor, or any MCP-compatible agent framework — tools are discovered automatically.
Built-in auth, rate limits, and error handling
Tool calls execute through Truto’s proxy layer with automatic OAuth refresh, rate-limit handling, and normalized error responses. No raw API plumbing in your agent.
Expiring and auditable servers
Create time-limited MCP servers for contractors or automated workflows. Optional dual-auth requires both the URL and a Truto API token for high-security environments.
Unified APIs
Unified APIs for Okta
Skip writing code for every integration. Use Truto’s category-specific Unified APIs out of the box or customize the mappings with AI.
Unified HRIS API
Unified User Directory API
Activities
Activities are the actions performed by users in the source application.
Groups
Groups are a collection of users in the source application. In some applications, they might also be called Teams.
Roles
The Role object represents a role of a User.
Users
The User object represents a User.
How It Works
From zero to integrated
Go live with Okta in under an hour. No boilerplate, no maintenance burden.
Link your customer’s Okta account
Use Truto’s frontend SDK to connect your customer’s Okta account. We handle all OAuth and API key flows — you don’t need to create the OAuth app.
We handle authentication
Don’t spend time refreshing access tokens or figuring out secure storage. We handle it and inject credentials into every API request.
Call our API, we call Okta
Truto’s Proxy API is a 1-to-1 mapping of the Okta API. You call us, we call Okta, and pass the response back in the same cycle.
Unified response format
Every response follows a single format across all integrations. We translate Okta’s pagination into unified cursor-based pagination. Data is always in the result attribute.
FAQs
Common questions about Okta on Truto
Authentication, rate limits, data freshness, and everything else you need to know before you integrate.
Which Truto Unified APIs support Okta?
Okta is available through three Unified APIs: the Unified HRIS API (Companies, Employees, Groups, Locations), the Unified User Directory API (Activities, Groups, Roles, Users), and the Unified Single Sign-On API (App Users, Apps). If you need functionality beyond these unified models, Truto can build custom tools on request.
How does authentication work for Okta integrations through Truto?
Truto handles the OAuth 2.0 flow for Okta on your behalf. Your end users authorize the connection through Truto's embedded linking experience, and Truto manages token storage, refresh, and revocation so you never handle credentials directly.
Does Truto handle Okta's API rate limits?
Yes. Truto manages pagination and respects Okta's rate limit headers automatically, including backoff and retry logic. You interact with a consistent unified API and don't need to implement Okta-specific rate limit handling in your code.
Can I access custom user profile attributes from Okta?
The Unified APIs expose standard profile fields like department, title, manager, and location. For custom Okta profile attributes beyond the unified schema, Truto supports proxy requests and can build custom tools on request to surface the specific fields you need.
What kind of activity data can I read from Okta?
Through the Unified User Directory API's Activities resource, you can retrieve Okta system log events including authentication successes, MFA challenges, failed login attempts, and other identity-related events that feed audit and compliance workflows.
Can I write data back to Okta or is it read-only?
The supported operations depend on the specific Unified API resources. For capabilities like creating or updating users in Okta (e.g., for HR-to-Okta profile mastering), Truto can build custom tools on request. Contact the Truto team to scope write operations for your use case.
From the Blog
Okta integration guides
Deep dives, architecture guides, and practical tutorials for building Okta integrations.
Okta
Get Okta integrated into your app
Our team understands what it takes to make a Okta integration successful. A short, crisp 30 minute call with folks who understand the problem.