Skip to content

SSO

Okta
API integration

Ship SSO features without building the integration. Full Okta API access via Proxy, normalized data through Unified APIs, and 730+ MCP-ready tools for AI agents — all extensible to your exact use case.

Talk to us
Okta

Use Cases

Why integrate with Okta

Common scenarios for SaaS companies building Okta integrations for their customers.

01

Automate user provisioning and deprovisioning

SaaS companies moving upmarket need to automatically create and suspend user accounts when enterprise IT teams assign or remove employees in Okta. This eliminates manual account management and satisfies SOC 2 compliance requirements around timely access revocation.

02

Sync Okta groups to in-app roles and workspaces

Enterprise customers expect their Okta group structure to map directly to permissions and team assignments inside your product. By reading Okta groups through a unified API, your app can auto-assign users to the correct workspace, billing tier, or role without any manual configuration.

03

Pull rich user profiles to auto-populate your app

Instead of asking enterprise users to manually fill in their department, title, manager, and location, SaaS companies can pull this data directly from Okta's Universal Directory to pre-populate user profiles and personalize the product experience from day one.

04

Enforce license compliance by syncing app assignments

SaaS companies selling seat-based licenses need to know exactly which users are authorized in the customer's Okta tenant. By reading app and app-user assignments, your product can automatically reconcile license counts against the customer's SSO source of truth.

05

Ingest Okta activity logs for security and audit dashboards

Security-focused SaaS products can pull authentication events, MFA challenges, and failed login attempts from Okta to power their customers' compliance reporting, insider threat detection, or access review workflows.

What You Can Build

Ship these features with Truto + Okta

Concrete product features your team can ship faster by leveraging Truto’s Okta integration instead of building from scratch.

01

Zero-touch user onboarding from Okta groups

Automatically create user accounts and assign them to the correct workspace or project when they appear in a mapped Okta group, with no IT ticket or manual invite required.

02

Real-time account suspension on offboarding

Detect when a user is deactivated or removed from your app's assignment in Okta and immediately suspend their account in your product to close the access gap.

03

Group-to-role permission mapping

Let enterprise admins control your app's internal roles — Admin, Viewer, Editor — by simply managing Okta group memberships, with your product reflecting changes automatically.

04

Pre-populated user profiles from directory data

Pull department, title, manager, location, and employee number from Okta's user directory to enrich your app's profiles without asking users to self-report.

05

Seat-based license reconciliation dashboard

Build an admin view that compares active app-user assignments in Okta against consumed licenses in your product, flagging orphaned accounts and unauthorized access.

06

Authentication activity audit log

Surface Okta login events, MFA challenges, and failed authentication attempts inside your product's security dashboard so customers can correlate access patterns with in-app actions.

SuperAI

Okta AI agent tools

Comprehensive AI agent toolset with fine-grained control. Integrates with MCP clients like Cursor and Claude, or frameworks like LangChain.

list_all_okta_users

List all users in Okta. Returns a collection of user objects.

get_single_okta_user_by_id

Get a single Okta user by id. Returns the full user object including profile, status, and credential details. Required: id.

create_a_okta_user

Create a new user in Okta. Returns the created user object including its id, status, and profile.

update_a_okta_user_by_id

Replace an existing Okta user's profile and credentials in full via PUT. Returns the updated user object. Required: id.

delete_a_okta_user_by_id

Delete an Okta user by id. Returns an empty response on success. Required: id.

okta_users_deactivate

Deactivate an Okta user, transitioning them to the DEPROVISIONED lifecycle state. Returns an empty response on success. Required: user_id.

okta_users_suspend

Suspend an Okta user, preventing them from signing in while retaining their account. Returns an empty response on success. Required: user_id.

okta_users_bulk_update

Replace an existing identity source user. Replaces an existing user for the given identity source instance and external ID. Required: identity_source_id, external_id.

okta_users_bulk_delete

Delete an identity source user. Deletes a user in an identity source for the given identity source instance and external ID. Required: identity_source_id, external_id.

okta_users_list_subscriptions

List all subscriptions for a user. Lists all subscriptions available to a specified user. Required: id.

okta_users_partial_update

Update a user. Updates a user's profile or credentials with partial update semantics. Required: id.

list_all_okta_org

Get the Okta organization details for the current account. Returns organization information including id, name, and subdomain.

list_all_okta_groups

List all groups in Okta. Returns a collection of group objects.

get_single_okta_group_by_id

Get a single Okta group by id. Returns the full group object. Required: id.

create_a_okta_group

Create a new group in Okta. Returns the created group object including its id.

update_a_okta_group_by_id

Update an existing Okta group by id using a full replacement (PUT). Returns the updated group object. Required: id.

delete_a_okta_group_by_id

Delete a group. Deletes a group of the OKTA_GROUP or APP_GROUP type from your org. Required: id.

list_all_okta_group_members

List all members of an Okta group. Returns user objects belonging to the specified group. Required: group_id.

create_a_okta_group_member

Add a user to an Okta group. Returns an empty 204 response on success. Required: group_id and user_id.

delete_a_okta_group_member_by_id

Remove a user from an Okta group. Returns an empty 204 response on success. Required: group_id (query) and user id (id).

list_all_okta_apps

List all applications in Okta. Returns a collection of application objects.

get_single_okta_app_by_id

Get a single Okta application by id. Returns the full application object. Required: id.

create_a_okta_app

Create an application. Creates an app instance in your Okta org.

update_a_okta_app_by_id

Replace an application. Replaces properties for an application > * All required properties must be specified in the request body > * You can't modify system-assigned properties, such as id, name, status, created, and lastUpdated. Required: id.

delete_a_okta_app_by_id

Delete an application. Deletes an inactive application. Required: id.

list_all_okta_app_users

List all users assigned to an Okta application. Returns user assignment objects for the specified app. Required: app_id.

delete_a_okta_app_user_by_id

Remove a user from an Okta application by id. Returns an empty response on success. Required: app_id, id.

get_single_okta_app_user_by_id

Get a specific user assigned to an Okta application by id. Returns the user assignment object for the given app and user. Required: app_id, id.

okta_app_users_assign

Update an application user. Updates the profile or credentials of a user assigned to an app. Required: app_id, id.

list_all_okta_system_logs

List system log events from an Okta organization. Returns an array of LogEvent objects representing audit trail entries recorded by Okta.

list_all_okta_user_types

List all user types defined in Okta. Returns a collection of user type objects including their id, name, and display name.

list_all_okta_roles

List all IAM roles defined in Okta. Returns a collection of role objects from the roles array.

get_single_okta_role_by_id

Get a single Okta IAM role by id. Returns the full role object. Required: id.

okta_roles_assign

Assign a role to an Okta user. Required: user_id.

okta_roles_remove

Remove a role assignment from an Okta user. Returns an empty response on success. Required: user_id (query) and role id (id).

create_a_okta_role

Assign a role to a group. Assigns a standard role to a group. Required: group_id.

delete_a_okta_role_by_id

Unassign a group role. Unassigns a role assignment (identified by roleAssignmentId) from a group (identified by the groupId). Required: group_id, id.

okta_roles_list_subscriptions

List all subscriptions for a role. Lists all subscriptions available to a specified Role. Required: role_ref.

list_all_okta_user_roles

List all roles assigned to a specific Okta user. Returns the collection of role objects associated with the user. Required: user_id.

get_single_okta_user_role_by_id

Retrieve a user role assignment. Retrieves a role assigned to a user (identified by userId). Required: user_id, id.

delete_a_okta_user_role_by_id

Unassign a user role. Unassigns a role assignment (identified by roleAssignmentId) from a user (identified by userId). Required: user_id, id.

list_all_okta_user_groups

List all Okta groups that a specific user belongs to. Returns the collection of group objects associated with the user. Required: user_id.

list_all_okta_group_apps

List apps assigned to a specific Okta group. Returns the collection of application objects associated with the group. Required: group_id.

okta_app_authenticators_challenges_verify

Verify a push notification challenge response from an Okta app authenticator. Returns an empty response on success., challenge_id, method, and challengeResponse.

list_all_okta_authenticator_enrollments

List all Okta authenticator enrollments for the current user under a specific authenticator. Returns: id, name, created, canReset, canUnenroll., authenticator_id.

update_a_okta_authenticator_enrollment_by_id

Update an existing Okta authenticator enrollment for the current user. Required: authenticator_id (query) and enrollment id (id).

get_single_okta_authenticator_enrollment_by_id

Retrieve a single Okta authenticator enrollment by id. Returns: id, name, created, lastChallenged, canReset, canUnenroll. Required: authenticator_id (query) and enrollment id (id).

create_a_okta_email_challenge

Send an email challenge in Okta for a specific email address, delivering a one-time passcode to the user to confirm the email address change. Returns: id, status, expiresAt, and profile.email of the new challenge., id.

okta_email_challenges_verify

Verify an Okta email OTP challenge using the one-time passcode the user received, activating the email address upon success. Returns an empty 200 response on success., id, challenge_id, verificationCode.

get_single_okta_email_challenge_by_id

Poll the status of an Okta email challenge to check whether it has been verified via the magic link. Returns: id, status, expiresAt, and profile.email. Required: email_id (query) and challenge id (id).

okta_myaccount_app_authenticators_bulk_delete

Delete an Okta app authenticator enrollment by enrollment_id. Returns an empty response on success., enrollment_id.

okta_myaccount_app_authenticators_bulk_update

Partially update an existing Okta app authenticator enrollment by enrollment_id., enrollment_id.

create_a_okta_myaccount_app_authenticator

Create an Okta app authenticator enrollment for the current user. Returns the enrollment object including id, authenticatorId, createdDate, device, methods, and user., authenticatorId.

list_all_okta_myaccount_authenticators

List all Okta authenticators for the current user. Returns: id, key, name, enrollable.

get_single_okta_myaccount_authenticator_by_id

Retrieve a single Okta authenticator by id for the current user. Returns: id, key, name, enrollable.

create_a_okta_myaccount_email

Create a primary or secondary email address for the current Okta user's account. The new address is created with UNVERIFIED status. Returns: id, status, roles, profile.email.

delete_a_okta_myaccount_email_by_id

Delete an email address from the current Okta user's account by id. Only unverified primary and secondary emails can be deleted. Returns an empty 204 response on success. Required: id, base_url.

get_single_okta_myaccount_email_by_id

Get a specific email address for the current Okta user by id. Returns: id, status, roles, profile.email. Required: id, base_url.

list_all_okta_myaccount_emails

List all email addresses for the current Okta user's account. Returns an array of email objects each including id, status, roles, and profile.email.

list_all_okta_myaccount_okta_applications

List all Okta apps assigned to the current user. Returns: id, name, displayName for each app.

list_all_okta_myaccount_organizations

Retrieve org details for the authenticated user's Okta organization. Returns: name, url, supportEmail.

okta_myaccount_passwords_bulk_delete

Delete the current Okta user's enrolled password. Returns an empty response on success.

okta_myaccount_passwords_bulk_update

Replace the current Okta user's password. Returns: id, status, created, lastUpdated. and a profile object containing the new password.

create_a_okta_myaccount_password

Create and enroll a password for the current Okta user. Returns: id, status, created, lastUpdated. and a profile object containing the password.

list_all_okta_myaccount_passwords

Retrieve the current Okta user's password status (not the password value itself). Returns: id, status, created, lastUpdated.

create_a_okta_myaccount_phone

Create a phone for the current Okta user in UNVERIFIED status using SMS or CALL delivery. Returns: id, status, profile.phoneNumber. Required: profile.phoneNumber and method.

delete_a_okta_myaccount_phone_by_id

Delete the current Okta user's phone by id. Returns an empty 204 response on success. Required: id.

get_single_okta_myaccount_phone_by_id

Get the current Okta user's phone by id. Returns: id, status, profile.phoneNumber, and available operation links. Required: id.

list_all_okta_myaccount_phones

List all phones for the current Okta user. Returns an array of phone objects each including id, status, and profile.phoneNumber.

okta_myaccount_phones_verify

Verify the current Okta user's phone using a code received via SMS or CALL, activating the phone on success. Returns an empty 204 response on success. Required: id and verificationCode.

okta_myaccount_profiles_bulk_update

Update the caller's Okta user profile by sending a full replacement of the profile data.

list_all_okta_myaccount_profiles

Retrieve the caller's Okta user profile. Returns: createdAt, modifiedAt, and a profile object containing login and custom user attributes.

okta_myaccount_sessions_bulk_delete

Delete all Okta MyAccount sessions for the current user in a single call. Returns an empty 204 response on success.

create_a_okta_myaccount_webauthn

Create a Passkey (FIDO2 WebAuthn) enrollment in Okta. Returns: id, status, name, credentialId, created. Requires base_url; the Start WebAuthn enrollment endpoint must be called beforehand to obtain the registration challenge.

delete_a_okta_myaccount_webauthn_by_id

Delete a specific Passkey (FIDO2 WebAuthn) enrollment in Okta by id. Returns an empty 204 response on success. Requires base_url and id.

get_single_okta_myaccount_webauthn_by_id

Get a single Passkey (FIDO2 WebAuthn) enrollment in Okta by id. Returns: id, status, name, credentialId, created, lastUpdated. Requires base_url and id.

list_all_okta_myaccount_webauthns

List all Passkey (FIDO2 WebAuthn) enrollments for the current user in Okta. Returns: id, status, name, credentialId, created, lastUpdated per enrollment. Requires base_url.

create_a_okta_password_change_password

Update a password in Okta for the authenticated user. The caller must supply the current password to change it. Returns an empty 204 response on success., oldPassword, newPassword.

list_all_okta_password_complexity_requirements

Retrieve the password complexity requirements for the current okta user. Returns: description, complexity (minLength, minLowerCase, minUpperCase, minNumber, minSymbol, excludeUsername).

create_a_okta_phone_challenge

Send a phone challenge in Okta via SMS or CALL to begin phone number verification. Returns a `_links.verify.href` link to use with the verification code at the verify endpoint. Required: `id` (phone ID), `base_url`. The verification code expires in five minutes; set `retry` to `true` in the body to resend a failed challenge.

list_all_okta_profile_schemas

Retrieve the Okta profile schema for the authenticated user's user type. Returns the properties object containing field definitions (title, type, permissions) and associated _links.

list_all_okta_push_notifications

List all pending push notification challenges in Okta for a specific app authenticator enrollment. Returns: payloadVersion, challenge., enrollment_id.

create_a_okta_webauthn_registration

Start a WebAuthn (Passkey/FIDO2) enrollment process in okta. Returns options including the challenge, relying party info, user details, and an expiresAt timestamp needed to complete enrollment via the WebAuthn enroll endpoint.

list_all_okta_aaguids

List all custom AAGUIDs. Lists all custom Authenticator Attestation Global Unique Identifiers (AAGUIDs) in the org Only custom AAGUIDs that an admin has created are returned. Required: authenticator_id.

get_single_okta_aaguid_by_id

Retrieve a custom AAGUID. Retrieves a custom AAGUID. Required: authenticator_id, id.

create_a_okta_aaguid

Create a custom AAGUID. Creates a custom AAGUID for the Passkey (FIDO2 WebAuthn) authenticator. Required: authenticator_id.

update_a_okta_aaguid_by_id

Replace a custom AAGUID. Replaces a custom AAGUID for the specified Passkey (FIDO2 WebAuthn) authenticator. Required: authenticator_id, id.

delete_a_okta_aaguid_by_id

Delete a custom AAGUID. Deletes a custom AAGUID You can only delete custom AAGUIDs that an admin has created. Required: authenticator_id, id.

okta_aaguids_partial_update

Update a custom AAGUID. Updates the properties of a custom AAGUID by the authenticatorId and aaguid ID. Required: authenticator_id, id.

create_a_okta_aerial_grant

Grant Okta Aerial access to your org. Grants an Okta Aerial account consent to manage your org.

create_a_okta_aerial_revoke

Revoke Okta Aerial access to your org. Revokes access of an Okta Aerial account to your Org.

list_all_okta_agent_pools

List all agent pools. Lists all agent pools with pagination support

list_all_okta_api_tokens

List all API token metadata. Lists all the metadata of the active API tokens

get_single_okta_api_token_by_id

Retrieve an API token's metadata. Retrieves the metadata for an active API token by apiTokenId. Required: id.

update_a_okta_api_token_by_id

Upsert an API token network condition. Upserts an API Token Network Condition by apiTokenId. Required: id.

okta_api_tokens_revoke_current

Revoke the current API token. Revokes the API token provided in the Authorization header

delete_a_okta_api_token_by_id

Revoke an API token. Revokes an API token by apiTokenId. Required: id.

list_all_okta_app_links

List all assigned app links. Lists all app links for all direct or indirect (through group membership) assigned apps . Required: id.

list_all_okta_assignees_users

List all users with role assignments. Lists all users with role assignments

list_all_okta_associated_servers

List all associated authorization servers. Lists all associated Authorization Servers by trusted type for the given authServerId. Required: auth_server_id.

create_a_okta_associated_server

Create an associated authorization server. Creates trusted relationships between the given authorization server and other authorization servers. Required: auth_server_id.

delete_a_okta_associated_server_by_id

Delete an associated authorization server. Deletes an associated Authorization Server. Required: auth_server_id, id.

list_all_okta_attack_protection_authenticator_settings

Retrieve the authenticator settings. Retrieves the Authenticator Settings for an org

update_a_okta_attack_protection_authenticator_setting_by_id

Replace the authenticator settings. Replaces the Authenticator Settings for an org

list_all_okta_attack_protection_user_lockout_settings

Retrieve the user lockout settings. Retrieves the User Lockout Settings for an org

update_a_okta_attack_protection_user_lockout_setting_by_id

Replace the user lockout settings. Replaces the User Lockout Settings for an org

create_a_okta_authenticator_enrollments_phone

Create an auto-activated Phone authenticator enrollment. Creates a Phone authenticator enrollment that's automatically activated. Required: user_id.

create_a_okta_authenticator_enrollments_tac

Create an auto-activated TAC authenticator enrollment. Creates an auto-activated Temporary access code (TAC) authenticator enrollment. Required: user_id.

list_all_okta_authenticators

List all authenticators. Lists all authenticators

get_single_okta_authenticator_by_id

Retrieve an authenticator. Retrieves an authenticator from your Okta organization by authenticatorId. Required: id.

create_a_okta_authenticator

Create an authenticator. Creates an authenticator

update_a_okta_authenticator_by_id

Replace an authenticator. Replaces the properties for an authenticator identified by authenticatorId. Required: id.

list_all_okta_authorization_servers

List all authorization servers. Lists all custom authorization servers in the org

get_single_okta_authorization_server_by_id

Retrieve an authorization server. Retrieves an authorization server. Required: id.

create_a_okta_authorization_server

Create an authorization server. Creates an authorization server

update_a_okta_authorization_server_by_id

Replace an authorization server. Replaces an authorization server. Required: id.

delete_a_okta_authorization_server_by_id

Delete an authorization server. Deletes an authorization server. Required: id.

create_a_okta_background_image

Upload the background image. Uploads and replaces the background image for the theme. Required: brand_id, theme_id.

delete_a_okta_background_image_by_id

Delete the background image. Deletes a theme background image. Required: brand_id, theme_id.

list_all_okta_behaviors

List all behavior detection rules. Lists all behavior detection rules with pagination support

get_single_okta_behavior_by_id

Retrieve a behavior detection rule. Retrieves a Behavior Detection Rule by behaviorId. Required: id.

create_a_okta_behavior

Create a behavior detection rule. Creates a new behavior detection rule

update_a_okta_behavior_by_id

Replace a behavior detection rule. Replaces a Behavior Detection Rule by behaviorId. Required: id.

delete_a_okta_behavior_by_id

Delete a behavior detection rule. Deletes a Behavior Detection Rule by behaviorId. Required: id.

list_all_okta_bindings

List all role resource set bindings. Lists all bindings for a resource set with pagination support. Required: resource_set_id_or_label.

create_a_okta_binding

Create a role resource set binding. Creates a binding for the resource set, custom role, and members (users or groups) . Required: resource_set_id_or_label.

update_a_okta_binding_by_id

Add more role resource set binding members. Adds more members to a role resource set binding. Required: resource_set_id_or_label, role_id_or_label.

delete_a_okta_binding_by_id

Delete a role resource set binding. Deletes a binding of a role (identified by roleIdOrLabel) and a resource set (identified by resourceSetIdOrLabel). Required: resource_set_id_or_label, role_id_or_label.

okta_bindings_list_members

List all role resource set binding members. Lists all members of a role resource set binding with pagination support. Required: resource_set_id_or_label, role_id_or_label.

list_all_okta_blocks

List all user blocks. Lists information about how the user is blocked from accessing their account. Required: id.

list_all_okta_bot_protection_configurations

Retrieve the bot protection configuration. Retrieves the bot protection configuration for your org

create_a_okta_bot_protection_configuration

Update the bot protection configuration. Updates the bot protection configuration for your org

create_a_okta_bounces_remove_list

Remove bounced emails. Removes emails from an email service bounce list.

list_all_okta_brands

List all brands. Lists all the brands in your org

get_single_okta_brand_by_id

Retrieve a brand. Retrieves a brand by brandId. Required: id.

create_a_okta_brand

Create a brand. Creates a new brand in your org

update_a_okta_brand_by_id

Replace a brand. Replaces a brand by brandId Passing an invalid brandId returns a 404 Not Found status code with the error code E0000007. Required: id.

delete_a_okta_brand_by_id

Delete a brand. Deletes a brand by brandId. Required: id.

create_a_okta_bulk_delete

Upload the data to be deleted in Okta. Uploads external IDs of entities that need to be deleted in Okta from the identity source for the given session. Required: identity_source_id, session_id.

create_a_okta_bulk_group_memberships_delete

Upload the group memberships to be deleted in Okta. Uploads the group memberships that need to be deleted in Okta from the identity source for the given session. Required: identity_source_id, session_id.

create_a_okta_bulk_group_memberships_upsert

Upload the group memberships to be upserted in Okta. Uploads the group memberships that need to be inserted or updated in Okta from the identity source for the given session. Required: identity_source_id, session_id.

create_a_okta_bulk_groups_delete

Upload the group external IDs to be deleted in Okta. Uploads external IDs of groups that need to be deleted in Okta from the identity source for the given session. Required: identity_source_id, session_id.

create_a_okta_bulk_groups_upsert

Upload the group profiles without memberships to be upserted in Okta. Uploads the group profiles without memberships that need to be inserted or updated in Okta from the identity source for the given session. Required: identity_source_id, session_id.

create_a_okta_bulk_upsert

Upload the data to be upserted in Okta. Uploads entities that need to be inserted or updated in Okta from the identity source for the given session. Required: identity_source_id, session_id.

list_all_okta_captchas

List all CAPTCHA instances. Lists all CAPTCHA instances with pagination support.

get_single_okta_captcha_by_id

Retrieve a CAPTCHA instance. Retrieves the properties of a specified CAPTCHA instance. Required: id.

create_a_okta_captcha

Create a CAPTCHA instance. Creates a new CAPTCHA instance.

update_a_okta_captcha_by_id

Replace a CAPTCHA instance. Replaces the properties for a specified CAPTCHA instance. Required: id.

delete_a_okta_captcha_by_id

Delete a CAPTCHA instance. Deletes a specified CAPTCHA instance . Required: id.

okta_captchas_replace

Update a CAPTCHA instance. Partially updates the properties of a specified CAPTCHA instance. Required: id.

update_a_okta_certificate_by_id

Upsert the custom domain's certificate. Upserts (creates or renews) the MANUAL certificate for the custom domain > * If the existing certificateSourceType is OKTA_MANAGED, this operation changes the source type to MANUAL. Required: domain_id.

list_all_okta_claims

List all custom token claims. Lists all custom token Claims defined for a specified custom authorization server. Required: auth_server_id.

get_single_okta_claim_by_id

Retrieve a custom token claim. Retrieves a custom token Claim by the specified claimId. Required: auth_server_id, id.

create_a_okta_claim

Create a custom token claim. Creates a custom token Claim for a custom authorization server. Required: auth_server_id.

update_a_okta_claim_by_id

Replace a custom token claim. Replaces a custom token Claim specified by the claimId. Required: auth_server_id, id.

delete_a_okta_claim_by_id

Delete a custom token claim. Deletes a custom token Claim specified by the claimId. Required: auth_server_id, id.

list_all_okta_classifications

Retrieve a user's classification. Retrieves a user's classification. Required: user_id.

update_a_okta_classification_by_id

Replace the user's classification. Replaces the user's classification. Required: user_id.

list_all_okta_clients

List all client resources for an authorization server. Lists all client resources for which the specified authorization server has tokens. Required: auth_server_id.

get_single_okta_connection_by_id

Retrieve the default provisioning connection. Retrieves the default provisioning connection for an app. Required: app_id.

create_a_okta_connection

Update the default provisioning connection. Updates the default provisioning connection for an app. Required: app_id.

get_single_okta_connections_jwk_by_id

Retrieve a JSON Web Key Set (JWKS) for the default provisioning connection. Retrieves a JWKS for the default provisioning connection. Required: app_id.

create_a_okta_credentials_change_password

Update password. Updates a user's password by validating the user's current password. Required: user_id.

create_a_okta_credentials_change_recovery_question

Update recovery question. Updates a user's recovery question and answer credential by validating the user's current password. Required: user_id.

create_a_okta_credentials_forgot_password_recovery_question

Reset password with recovery question. Resets the user's password to the specified password if the provided answer to the recovery question is correct. Required: user_id.

create_a_okta_credentials_forgot_password

Start forgot password flow. Starts the forgot password flow. Required: user_id.

list_all_okta_credentials_tokens

List all tokens from OIDC IdP. Lists the tokens minted by the social authentication provider when the user authenticates with Okta via Social Auth. Required: idp_id, user_id.

list_all_okta_customizations

List all email customizations. Lists all customizations of an email template If Custom languages for Okta Email Templates is enabled, all existing customizations are retrieved, including customizations for additional languages. Required: brand_id, template_name.

create_a_okta_customization

Create an email customization. Creates a new Email Customization If Custom languages for Okta Email Templates is enabled, you can create a customization for any BCP47 language in addition to the Okta-supported languages. Required: brand_id, template_name.

okta_customizations_bulk_delete

Delete all email customizations. Deletes all customizations for an email template If Custom languages for Okta Email Templates is enabled, all customizations are deleted, including customizations for additional languages. Required: brand_id, template_name.

get_single_okta_customization_by_id

Retrieve an email customization. Retrieves an email customization by its unique identifier If Custom languages for Okta Email Templates is disabled, requests to retrieve an additional language customization by ID result in a 404 Not Found error response. Required: brand_id, template_name, id.

update_a_okta_customization_by_id

Replace an email customization. Replaces an email customization using property values If Custom languages for Okta Email Templates is disabled, requests to update a customization for an additional language return a 404 Not Found error response. Required: brand_id, template_name, id.

delete_a_okta_customization_by_id

Delete an email customization. Deletes an Email Customization by its unique identifier If Custom languages for Okta Email Templates is disabled, deletion of an existing additional language customization by ID doesn't register. Required: brand_id, template_name, id.

okta_customizations_get_preview

Retrieve a preview of an email customization. Retrieves a Preview of an Email Customization. Required: brand_id, template_name, id.

list_all_okta_customizeds

Retrieve the customized content of the specified well-known URI. Retrieves the customized content of a well-known URI for a specific brand and well-known URI path. Required: brand_id, path.

update_a_okta_customized_by_id

Replace the customized well-known URI of the specific path. Replaces the content of a customized well-known URI that you specify. Required: brand_id, path.

list_all_okta_cwo_connections

Retrieve all Cross App Access connections. Retrieves inbound and outbound Cross App Access connections associated with an app. Required: app_id.

create_a_okta_cwo_connection

Create a Cross App Access connection. Creates a Cross App Access connection. Required: app_id.

update_a_okta_cwo_connection_by_id

Update a Cross App Access connection. Updates the Cross App Access connection with the specified ID. Required: app_id, connection_id.

delete_a_okta_cwo_connection_by_id

Delete a Cross App Access connection. Deletes a Cross App Access connection with the specified ID. Required: app_id, connection_id.

list_all_okta_default_content_previews

Retrieve a preview of the email template default content. Retrieves a preview of an Email Template's default content. Required: brand_id, template_name.

list_all_okta_default_contents

Retrieve an email template default content. Retrieves an email template's default content Defaults to the current user's language given the following: - Custom languages for Okta Email Templates is enabled - An additional language is specified f. Required: brand_id, template_name.

list_all_okta_dependencies

List all dependencies. Lists all feature dependencies for a specified feature. Required: feature_id.

list_all_okta_dependents

List all dependents. Lists all feature dependents for the specified feature. Required: feature_id.

list_all_okta_device_assurances

List all device assurance policies. Lists all device assurance policies

get_single_okta_device_assurance_by_id

Retrieve a device assurance policy. Retrieves a device assurance policy by deviceAssuranceId. Required: id.

create_a_okta_device_assurance

Create a device assurance policy. Creates a new device assurance policy

update_a_okta_device_assurance_by_id

Replace a device assurance policy. Replaces a device assurance policy by deviceAssuranceId. Required: id.

delete_a_okta_device_assurance_by_id

Delete a device assurance policy. Deletes a device assurance policy by deviceAssuranceId. Required: id.

list_all_okta_device_integrations

List all device integrations. Lists all device integrations for your org.

get_single_okta_device_integration_by_id

Retrieve a device integration. Retrieves a device integration by deviceIntegrationId. Required: id.

list_all_okta_device_posture_checks

List all device posture checks. Lists all device posture checks

create_a_okta_device_posture_check

Create a device posture check. Creates a device posture check

update_a_okta_device_posture_check_by_id

Replace a device posture check. Replaces a device posture check by postureCheckId. Required: id.

delete_a_okta_device_posture_check_by_id

Delete a device posture check. Deletes a device posture check by postureCheckId. Required: id.

okta_device_posture_checks_get_default

List all default device posture checks. Lists all default device posture checks.

get_single_okta_device_posture_check_by_id

Retrieve a device posture check. Retrieves a device posture check by postureCheckId. Required: id.

list_all_okta_devices

List all devices. Lists all devices with pagination support.

get_single_okta_device_by_id

Retrieve a device. Retrieves a device by deviceId. Required: id.

delete_a_okta_device_by_id

Delete a device. Deletes (permanently) a device by deviceId if it has a status of DEACTIVATED. Required: id.

list_all_okta_domains

List all domains associated with a brand. Lists all domains associated with a brand by brandId. Required: brand_id.

create_a_okta_domain

Create a custom domain. Creates your custom domain

get_single_okta_domain_by_id

Retrieve a custom domain. Retrieves a custom domain by domainId. Required: id.

update_a_okta_domain_by_id

Replace a custom domain's brand. Replaces a custom domain's brand. Required: id.

delete_a_okta_domain_by_id

Delete a custom domain. Deletes a custom domain by domainId. Required: id.

okta_domains_verify

Verify a custom domain. Verifies the custom domain and validity of DNS records by domainId. Required: id.

create_a_okta_dr_failback

Start the failback of your org. Starts the failback of your org

create_a_okta_dr_failover

Start the failover of your org. Starts the failover of your org

list_all_okta_dr_status

Retrieve the disaster recovery status for all domains. Retrieves the failover or failback status for all the domains for your org

list_all_okta_email_domains

List all email domains. Lists all the Email Domains in your org

get_single_okta_email_domain_by_id

Retrieve an email domain. Retrieves an Email Domain by emailDomainId. Required: id.

create_a_okta_email_domain

Create an email domain. Creates an Email Domain in your org

update_a_okta_email_domain_by_id

Replace an email domain. Replaces associated username and sender display name by emailDomainId. Required: id.

delete_a_okta_email_domain_by_id

Delete an email domain. Deletes an Email Domain by emailDomainId. Required: id.

okta_email_domains_verify

Verify an email domain. Verifies an Email Domain by emailDomainId. Required: id.

list_all_okta_email_servers

List all enrolled SMTP servers. Lists all the enrolled custom SMTP server configurations

get_single_okta_email_server_by_id

Retrieve an SMTP server configuration. Retrieves the specified custom SMTP server configuration. Required: id.

create_a_okta_email_server

Create a custom SMTP server. Creates a custom email SMTP server configuration for your org.

update_a_okta_email_server_by_id

Update an SMTP server configuration. Updates the specified custom SMTP server configuration .0 authentication, the authType property is required in the request body. Required: id.

delete_a_okta_email_server_by_id

Delete an SMTP server configuration. Deletes the specified custom SMTP server configuration. Required: id.

list_all_okta_enrollments

List all WebAuthn preregistration factors. Lists all WebAuthn preregistration factors for the specified user. Required: user_id.

delete_a_okta_enrollment_by_id

Delete a WebAuthn preregistration factor. Deletes a specific WebAuthn preregistration factor for a user. Required: user_id, authenticator_enrollment_id.

list_all_okta_entitlements

List all entitlements for a governance bundle. Lists all entitlements specific to a governance bundle. Required: bundle_id.

list_all_okta_error_customizeds

Retrieve the customized error page. Retrieves the customized error page. Required: brand_id.

update_a_okta_error_customized_by_id

Replace the customized error page. Replaces the customized error page. Required: brand_id.

delete_a_okta_error_customized_by_id

Delete the customized error page. Deletes the customized error page. Required: brand_id.

list_all_okta_error_previews

Retrieve the preview error page preview. Retrieves the preview error page. Required: brand_id.

update_a_okta_error_preview_by_id

Replace the preview error page. Replaces the preview error page. Required: brand_id.

delete_a_okta_error_preview_by_id

Delete the preview error page. Deletes the preview error page. Required: brand_id.

list_all_okta_event_hooks

List all event hooks. Lists all event hooks

get_single_okta_event_hook_by_id

Retrieve an event hook. Retrieves an event hook. Required: id.

create_a_okta_event_hook

Create an event hook. Creates a new event hook for your organization in ACTIVE status.

update_a_okta_event_hook_by_id

Replace an event hook. Replaces an event hook. Required: id.

delete_a_okta_event_hook_by_id

Delete an event hook. Deletes the event hook that matches the provided id. Required: id.

list_all_okta_factors

List all enrolled factors. Lists all enrolled factors for the specified user that are included in the highest priority authenticator enrollment policy that applies to the user. Required: user_id.

get_single_okta_factor_by_id

Retrieve a factor. Retrieves an existing factor for the specified user. Required: user_id, id.

create_a_okta_factor

Enroll a factor. Enrolls a supported factor for the specified user > * All responses return the enrolled factor with a status of either PENDING_ACTIVATION or ACTIVE. Required: user_id.

delete_a_okta_factor_by_id

Unenroll a factor. Unenrolls an existing factor for the specified user. Required: user_id, id.

okta_factors_verify

Verify a factor. Verifies an OTP for a factor. Required: user_id, id.

list_all_okta_factors_catalogs

List all supported factors. Lists all the supported factors that can be enrolled for the specified user that are included in the highest priority authenticator enrollment policy that applies to the user. Required: user_id.

list_all_okta_factors_questions

List all supported security questions. Lists all available security questions for the specified user. Required: user_id.

create_a_okta_favicon

Upload the favicon. Uploads and replaces the favicon for the theme. Required: brand_id, theme_id.

delete_a_okta_favicon_by_id

Delete the favicon. Deletes a theme favicon. Required: brand_id, theme_id.

list_all_okta_federated_claims

List all configured federated claims. Lists all federated claims for your app. Required: app_id.

create_a_okta_federated_claim

Create a federated claim. Creates a claim that will be included in tokens produced by federation protocols (for example: OIDC id_tokens or SAML Assertions). Required: app_id.

update_a_okta_federated_claim_by_id

Replace a federated claim. Replaces a claim that will be included in tokens produced by federation protocols (for example: OIDC id_tokens or SAML Assertions). Required: app_id, claim_id.

delete_a_okta_federated_claim_by_id

Delete a federated claim. Deletes a federated claim by claimId. Required: app_id, claim_id.

list_all_okta_first_party_app_settings

Retrieve the Okta application settings. Retrieves the settings for an Okta app (also known as an Okta first-party app). Required: app_name.

update_a_okta_first_party_app_setting_by_id

Replace the Okta application settings. Replaces the settings for an Okta app (also known as an Okta first-party app). Required: app_name.

list_all_okta_governance_bundles

List all governance bundles. Lists all governance bundles for the Admin Console in your org

get_single_okta_governance_bundle_by_id

Retrieve a governance bundle. Retrieves a governance bundle for the Admin Console. Required: id.

create_a_okta_governance_bundle

Create a governance bundle. Creates a governance bundle of entitlements for the Admin Console

update_a_okta_governance_bundle_by_id

Replace a governance bundle. Replaces the properties of a governance bundle for the Admin Console. Required: id.

delete_a_okta_governance_bundle_by_id

Delete a governance bundle. Deletes an Admin Console governance bundle. Required: id.

list_all_okta_governance_opt_ins

Retrieve the Admin Console opt-in status. Retrieves the entitlement management opt-in status for the Admin Console

create_a_okta_governance_opt_in

Opt in the Admin Console to entitlement management. Opts in the Admin Console to entitlement management

create_a_okta_governance_opt_out

Opt out the Admin Console from entitlement management. Opts out the Admin Console from entitlement management

list_all_okta_governances

Retrieve all user role governance sources. Retrieves the governance sources of a role (identified by roleAssignmentId) that's assigned to a user (identified by userId). Required: user_id, role_assignment_id.

list_all_okta_grants

List all app grants. Lists all scope consent Grants for the app. Required: app_id.

get_single_okta_grant_by_id

Retrieve an app grant. Retrieves a single scope consent Grant object for the app. Required: app_id, id.

create_a_okta_grant

Grant consent to scope. Grants consent for the app to request an OAuth 2.0 Okta scope. Required: app_id.

delete_a_okta_grant_by_id

Revoke an app grant. Revokes permission for the app to grant the given scope. Required: app_id, id.

okta_grants_bulk_delete

Revoke all grants for a client. Revokes all grants for the specified user and client. Required: user_id, client_id.

list_all_okta_group_push_mappings

List all group push mappings. Lists all group push mappings with pagination support. Required: app_id.

create_a_okta_group_push_mapping

Create a group push mapping. Creates or links a group push mapping. Required: app_id.

update_a_okta_group_push_mapping_by_id

Update a group push mapping. Updates the status of a group push mapping. Required: app_id, mapping_id.

delete_a_okta_group_push_mapping_by_id

Delete a group push mapping. Deletes a specific group push mapping. Required: app_id, mapping_id.

create_a_okta_groups_modify

Update an external directory group membership. Updates an Active Directory or LDAP group membership directly in the Active Directory or LDAP server. Required: app_instance_id.

list_all_okta_groups_rules

List all group rules. Lists all group rules for your org

get_single_okta_groups_rule_by_id

Retrieve a group rule. Retrieves a specific group rule by ID from your org. Required: id.

create_a_okta_groups_rule

Create a group rule. Creates a group rule to dynamically add users to the specified group if they match the condition.

update_a_okta_groups_rule_by_id

Replace a group rule. Replaces a group rule . Required: id.

delete_a_okta_groups_rule_by_id

Delete a group rule. Deletes a specific group rule by groupRuleId. Required: id.

list_all_okta_hook_keys

List all keys. Lists all keys

get_single_okta_hook_key_by_id

Retrieve a key by ID. Retrieves the public portion of the Key object using the id parameter . Required: id.

create_a_okta_hook_key

Create a key. Creates a key for use with other parts of the application, such as inline hooks .

update_a_okta_hook_key_by_id

Replace a key. Replaces a key by id This request replaces existing properties after passing validation. Required: id.

delete_a_okta_hook_key_by_id

Delete a key. Deletes a key by id. Required: id.

get_single_okta_hook_keys_public_by_id

Retrieve a public key. Retrieves a public key by keyId . Required: id.

list_all_okta_iam_resource_sets

List all resource sets. Lists all resource sets with pagination support

create_a_okta_iam_resource_set

Create a resource set. Creates a new resource set.

update_a_okta_iam_resource_set_by_id

Replace a resource set. Replaces the label and description of a resource set. Required: resource_set_id_or_label.

delete_a_okta_iam_resource_set_by_id

Delete a resource set. Deletes a resource set by resourceSetIdOrLabel. Required: resource_set_id_or_label.

create_a_okta_iam_role

Create a custom role. Creates a custom role

update_a_okta_iam_role_by_id

Replace a custom role. Replaces the label and description for a custom role by roleIdOrLabel. Required: id.

delete_a_okta_iam_role_by_id

Delete a custom role. Deletes a custom role by roleIdOrLabel. Required: id.

okta_iam_roles_list_permissions

List all custom role permissions. Lists all permissions for a custom role by roleIdOrLabel. Required: role_id_or_label.

list_all_okta_idps

List all IdPs. Lists all identity provider (IdP) integrations with pagination.

get_single_okta_idp_by_id

Retrieve an IdP. Retrieves an identity provider (IdP) integration by idpId. Required: id.

create_a_okta_idp

Create an IdP. Creates a new identity provider (IdP) integration.

update_a_okta_idp_by_id

Replace an IdP. Replaces an identity provider (IdP) integration by idpId. Required: id.

delete_a_okta_idp_by_id

Delete an IdP. Deletes an identity provider (IdP) integration by idpId * All existing IdP users are unlinked with the highest order profile source taking precedence for each IdP user. Required: id.

list_all_okta_inline_hooks

List all inline hooks. Lists all inline hooks or all inline hooks of a specific type.

get_single_okta_inline_hook_by_id

Retrieve an inline hook. Retrieves an inline hook by inlineHookId. Required: id.

create_a_okta_inline_hook

Create an inline hook. Creates an inline hook This endpoint creates an inline hook for your org in an ACTIVE status.

update_a_okta_inline_hook_by_id

Replace an inline hook. Replaces an inline hook by inlineHookId. Required: id.

delete_a_okta_inline_hook_by_id

Delete an inline hook. Deletes an inline hook by inlineHookId. Required: id.

okta_inline_hooks_execute

Execute an inline hook. Executes the inline hook that matches the provided inlineHookId by using the request body as the input. Required: id.

okta_inline_hooks_replace

Update an inline hook. Updates an inline hook by inlineHookId. Required: id.

list_all_okta_integrations_api_services

List all API service integration instances. Lists all API Service Integration instances with a pagination option

get_single_okta_integrations_api_service_by_id

Retrieve an API service integration instance. Retrieves an API Service Integration instance by id. Required: id.

create_a_okta_integrations_api_service

Create an API service integration instance. Creates and authorizes an API Service Integration instance

delete_a_okta_integrations_api_service_by_id

Delete an API service integration instance. Deletes an API Service Integration instance by id. Required: id.

list_all_okta_interclient_allowed_apps

List all allowed apps for a target app. Lists all apps allowed by this app to request interclient SSO using the interclient token. Required: app_id.

create_a_okta_interclient_allowed_app

Create an allowed app mapping for a target app. Creates a mapping between the target app and an allowed app for interclient SSO using the interclient token. Required: app_id.

delete_a_okta_interclient_allowed_app_by_id

Delete an interclient trust mapping. Deletes the mapping between the target app and an allowed app. Required: app_id, allowed_app_id.

list_all_okta_interclient_target_apps

List all target apps for an allowed app. Lists all the target apps that allow this app to request interclient SSO using an interclient token. Required: app_id.

list_all_okta_keys_actives

List the active signing key credential for IdP. Lists the active signing key credential for an identity provider (IdP). Required: idp_id.

okta_lifecycle_activates_activate_app_default_connection

Activate the default provisioning connection. Activates the default provisioning connection for an app. Required: app_id.

okta_lifecycle_activates_activate_app_jwk

Activate an OAuth 2.0 client JSON Web Key. Activates an OAuth 2.0 client JSON Web Key by keyId . Required: app_id, id.

okta_lifecycle_activates_activate_app_secret

Activate an OAuth 2.0 client secret. Activates an OAuth 2.0 client secret by secretId. Required: app_id, id.

okta_lifecycle_activates_activate_app

Activate an application. Activates an inactive application. Required: app_id.

okta_lifecycle_activates_activate_authenticator

Activate an authenticator. Activates an authenticator by authenticatorId. Required: authenticator_id.

okta_lifecycle_activates_activate_authenticator_method

Activate an authenticator method. Activates a method for an authenticator identified by authenticatorId and methodType. Required: authenticator_id, id.

okta_lifecycle_activates_activate_authorization_server

Activate an authorization server. Activates an authorization server. Required: auth_server_id.

okta_lifecycle_activates_activate_authorization_server_policy

Activate a policy. Activates an authorization server policy. Required: auth_server_id, policy_id.

lifecycle_activates_activate_authorization_server_policy_rule

Activate a policy rule. Activates an authorization server policy rule. Required: auth_server_id, policy_id, rule_id.

okta_lifecycle_deactivates_deactivate_app_default_connection

Deactivate the default provisioning connection. Deactivates the default provisioning connection for an app. Required: app_id.

okta_lifecycle_deactivates_deactivate_app_jwk

Deactivate an OAuth 2.0 client JSON Web Key. Deactivates an OAuth 2.0 client JSON Web Key by keyId . Required: app_id, id.

okta_lifecycle_deactivates_deactivate_app_secret

Deactivate an OAuth 2.0 client secret. Deactivates an OAuth 2.0 client secret by secretId. Required: app_id, id.

okta_lifecycle_deactivates_deactivate_app

Deactivate an application. Deactivates an active application . Required: app_id.

okta_lifecycle_deactivates_deactivate_authenticator

Deactivate an authenticator. Deactivates an authenticator by authenticatorId. Required: authenticator_id.

okta_lifecycle_deactivates_deactivate_authenticator_method

Deactivate an authenticator method. Deactivates a method for an authenticator identified by authenticatorId and methodType. Required: authenticator_id, id.

okta_lifecycle_deactivates_deactivate_authorization_server

Deactivate an authorization server. Deactivates an authorization server. Required: auth_server_id.

lifecycle_deactivates_deactivate_authorization_server_policy

Deactivate a policy. Deactivates an authorization server policy. Required: auth_server_id, policy_id.

lifecycle_deactivates_deactivate_authorization_server_policy_rul

Deactivate a policy rule. Deactivates an authorization server policy rule. Required: auth_server_id, policy_id, rule_id.

create_a_okta_lifecycle_expire_password_with_temp_password

Expire the password with a temporary password. Expires the password and resets the user's password to a temporary password. Required: id.

create_a_okta_lifecycle_expire_password

Expire the password. Expires the password. Required: id.

create_a_okta_lifecycle_key_rotate

Rotate all credential keys. Rotates the current Keys for a Custom Authorization Server. Required: auth_server_id.

okta_lifecycle_publishes_publish_app_csr

Publish a certificate signing request. Publishes a certificate signing request (CSR) for the app with a signed X.509 certificate and adds it into the application key credentials. Required: app_id, id.

okta_lifecycle_publishes_publish_idp_csr

Publish a certificate signing request. Publishes the certificate signing request (CSR) with a signed X.509 certificate and adds it into the signing key credentials for the identity provider (IdP) > * Publishing a certificate completes the lifecycle of the CSR, and it's no longer accessible. Required: idp_id, id.

create_a_okta_lifecycle_reactivate

Reactivate a user. Reactivates a user. Required: id.

create_a_okta_lifecycle_refresh

Refresh a session. Refreshes an existing session using the id for that session. Required: session_id.

create_a_okta_lifecycle_reset_factor

Reset the factors. Resets all factors for the specified user. Required: id.

create_a_okta_lifecycle_reset_password

Reset a password. Resets a password. Required: id.

okta_lifecycle_suspends_suspend_device

Suspend a Device. Suspends a device by setting its status to SUSPENDED. Required: device_id.

okta_lifecycle_suspends_suspend_user

Suspend a user. Suspends a user. Required: id.

create_a_okta_lifecycle_unlock

Unlock a user. Unlocks a user with a LOCKED_OUT status or unlocks a user with an ACTIVE status that's blocked from unknown devices. Required: id.

okta_lifecycle_unsuspends_unsuspend_device

Unsuspend a Device. Unsuspends a device by returning its status to ACTIVE. Required: device_id.

okta_lifecycle_unsuspends_unsuspend_user

Unsuspend a user. Unsuspends a user and returns them to the ACTIVE state. Required: id.

create_a_okta_lifecycle_verify

Verify an event hook. Verifies that the event hook matches the provided eventHookId. Required: event_hook_id.

list_all_okta_linked_objects

List the primary or all of the associated linked object values. Lists either the self link for the primary user or all associated users in the relationship specified by relationshipName. Required: user_id_or_login, relationship_name.

update_a_okta_linked_object_by_id

Assign a linked object value for primary. Assigns the first user as the associated and the second user as the primary for the specified relationship. Required: user_id_or_login, primary_relationship_name, primary_user_id.

delete_a_okta_linked_object_by_id

Delete a linked object value. Deletes any existing relationship between the associated and primary user. Required: user_id_or_login, relationship_name.

list_all_okta_log_streams

List all log streams. Lists all log stream objects in your org.

get_single_okta_log_stream_by_id

Retrieve a log stream. Retrieves a log stream object by ID. Required: id.

create_a_okta_log_stream

Create a log stream. Creates a new log stream object

update_a_okta_log_stream_by_id

Replace a log stream. Replaces the log stream object properties for a given ID. Required: id.

delete_a_okta_log_stream_by_id

Delete a log stream. Deletes a log stream object from your org by ID. Required: id.

create_a_okta_logo

Upload an application logo. Uploads a logo for the app instance. Required: app_id.

delete_a_okta_logo_by_id

Delete the logo. Deletes a Theme logo. Required: brand_id, theme_id.

list_all_okta_mappings

List all profile mappings. Lists all profile mappings in your org with pagination.

get_single_okta_mapping_by_id

Retrieve a profile mapping. Retrieves a single profile mapping referenced by its ID. Required: id.

create_a_okta_mapping

Update a profile mapping. Updates an existing profile mapping by adding, updating, or removing one or many property mappings. Required: id.

delete_a_okta_mapping_by_id

Delete a policy resource mapping. Deletes the resource mapping for a policy identified by policyId and mappingId. Required: policy_id, id.

create_a_okta_mark_error

Assign the fulfillment error status to a WebAuthn preregistration factor. Assigns the fulfillment error status to a WebAuthn preregistration factor for a user. Required: user_id, authenticator_enrollment_id.

get_single_okta_member_by_id

Retrieve a role resource set binding member. Retrieves a member (identified by memberId) that belongs to a role resource set binding. Required: resource_set_id_or_label, role_id_or_label, id.

delete_a_okta_member_by_id

Unassign a role resource set binding member. Unassigns a member (identified by memberId) from a role resource set binding. Required: resource_set_id_or_label, role_id_or_label, id.

list_all_okta_memberships

Retrieve the memberships for the given identity source group. Retrieves the group memberships for the given identity source group in the given identity source instance. Required: identity_source_id, group_or_external_id.

create_a_okta_membership

Create the memberships for the given identity source group. Creates the group memberships for the given identity source group. Required: identity_source_id, group_or_external_id.

delete_a_okta_membership_by_id

Delete the memberships for the specified identity source group. Deletes group memberships for the specified identity source group using member external IDs. Required: identity_source_id, group_or_external_id, member_external_id.

list_all_okta_meta_uischemas

List all UI schemas. Lists all UI Schemas in your org

get_single_okta_meta_uischema_by_id

Retrieve a UI schema. Retrieves a UI Schema by id. Required: id.

create_a_okta_meta_uischema

Create a UI schema. Creates an input for an enrollment form

update_a_okta_meta_uischema_by_id

Replace a UI schema. Replaces a UI Schema by id. Required: id.

delete_a_okta_meta_uischema_by_id

Delete a UI schema. Deletes a UI Schema by id. Required: id.

list_all_okta_methods

List all methods of an authenticator. Lists all methods of an authenticator identified by authenticatorId. Required: authenticator_id.

update_a_okta_method_by_id

Replace an authenticator method. Replaces a method of methodType for an authenticator identified by authenticatorId. Required: authenticator_id, method_type.

create_a_okta_oauth_2_callback

Verify the provisioning connection. Verifies the OAuth 2.0-based connection as part of the OAuth 2.0 consent flow. Required: app_name, app_id.

create_a_okta_okta_communication_opt_in

Opt in to Okta user communication emails. Opts in all users of this org to Okta communication emails

create_a_okta_okta_communication_opt_out

Opt out of Okta user communication emails. Opts out all users of this org from Okta communication emails

update_a_okta_okta_personal_settings_edit_feature_by_id

Replace the Okta Personal admin settings. Replaces Okta Personal admin settings in a Workforce org

list_all_okta_okta_personal_settings_export_blocklists

List all blocked email domains. Lists all blocked email domains which are excluded from app migration

update_a_okta_okta_personal_settings_export_blocklist_by_id

Replace the blocked email domains. Replaces the list of blocked email domains which are excluded from app migration

list_all_okta_okta_support_cases

List all Okta Support cases. Lists all Okta Support cases that the requesting principal has permission to view

update_a_okta_okta_support_case_by_id

Update an Okta Support case. Updates access to the org for an Okta Support case: * You can enable, disable, or extend access to your org for an Okta Support case. Required: case_number.

create_a_okta_okta_support_extend

Extend Okta Support access. Extends the length of time that Okta Support can access your org by 24 hours.

create_a_okta_okta_support_grant

Grant Okta Support access. Grants Okta Support temporary access to your org as an administrator for eight hours .

create_a_okta_okta_support_revoke

Revoke Okta Support access. Revokes Okta Support access to your org .

list_all_okta_org_captchas

Retrieve the org-wide CAPTCHA settings. Retrieves the CAPTCHA settings object for your organization .

update_a_okta_org_captcha_by_id

Replace the org-wide CAPTCHA settings. Replaces the CAPTCHA settings object for your organization .

delete_a_okta_org_captcha_by_id

Delete the org-wide CAPTCHA settings. Deletes the CAPTCHA settings object for your organization

list_all_okta_org_contacts

List all org contact types. Lists all org contact types for your Okta org

update_a_okta_org_contact_by_id

Replace the contact type user. Replaces the user associated with the specified contact type. Required: contact_type.

get_single_okta_org_contact_by_id

Retrieve the contact type user. Retrieves the ID and the user resource associated with the specified contact type. Required: id.

list_all_okta_org_preferences

Retrieve the org preferences. Retrieves preferences of your Okta org

list_all_okta_org_settings_third_party_admin_settings

Retrieve the org third-party admin setting. Retrieves the third-party admin setting.

create_a_okta_org_settings_third_party_admin_setting

Update the org third-party admin setting. Updates the third-party admin setting.

create_a_okta_org

Update the Org general settings. Updates partial Org General Settings

update_a_okta_org_by_id

Replace the Org general settings. Replaces the Org General Settings for your Okta org

list_all_okta_owners

List all group owners. Lists all owners for a specific group. Required: group_id.

create_a_okta_owner

Assign a group owner. Assigns a group owner. Required: group_id.

delete_a_okta_owner_by_id

Delete a group owner. Deletes a group owner from a specific group. Required: group_id, id.

list_all_okta_pages_errors

Retrieve the error page sub-resources. Retrieves the error page sub-resources. Required: brand_id.

get_single_okta_pages_error_by_id

Retrieve the default error page. Retrieves the default error page. Required: brand_id.

list_all_okta_pages_sign_ins

Retrieve the sign-in page sub-resources. Retrieves the sign-in page sub-resources. Required: brand_id.

get_single_okta_pages_sign_in_by_id

Retrieve the default sign-in page. Retrieves the default sign-in page. Required: brand_id.

list_all_okta_permissions

Retrieve a custom role permission. Retrieves a permission (identified by permissionType) for a custom role. Required: role_id_or_label, permission_type.

create_a_okta_permission

Create a custom role permission. Creates a permission (specified by permissionType) for a custom role. Required: role_id_or_label, permission_type.

update_a_okta_permission_by_id

Replace a custom role permission. Replaces a permission (specified by permissionType) for a custom role. Required: role_id_or_label, permission_type.

delete_a_okta_permission_by_id

Delete a custom role permission. Deletes a permission (identified by permissionType) from a custom role. Required: role_id_or_label, permission_type.

list_all_okta_policies

List all policies. Lists all policies. Required: auth_server_id.

get_single_okta_policy_by_id

Retrieve a policy. Retrieves a policy. Required: id.

create_a_okta_policy

Create a policy. Creates a policy. Required: auth_server_id.

update_a_okta_policy_by_id

Replace a policy. Replaces the properties of a policy identified by policyId. Required: id.

delete_a_okta_policy_by_id

Delete a policy. Deletes a policy. Required: id.

okta_policies_bulk_update

Assign an app sign-in policy. Assigns an app to an app sign-in policy, identified by policyId. Required: app_id, policy_id.

okta_policies_bulk_delete

Delete a policy. Deletes a policy. Required: auth_server_id, policy_id.

okta_policies_clone

Clone an existing policy. Clones an existing policy. Required: policy_id.

create_a_okta_policies_simulate

Create a policy simulation. Creates a policy or policy rule simulation.

create_a_okta_preferences_hide_end_user_footer

Set the hide dashboard footer preference. Sets the preference to hide the Okta End-User Dashboard footer for all end users of your org

create_a_okta_preferences_show_end_user_footer

Set the show dashboard footer preference. Sets the preference to show the Okta UI footer for all end users of your org

list_all_okta_principal_rate_limits

List all principal rate limits. Lists all Principal Rate Limit entities considering the provided parameters

get_single_okta_principal_rate_limit_by_id

Retrieve a principal rate limit. Retrieves a principal rate limit entity by principalRateLimitId. Required: id.

create_a_okta_principal_rate_limit

Create a principal rate limit. Creates a new principal rate limit entity.

update_a_okta_principal_rate_limit_by_id

Replace a principal rate limit. Replaces a principal rate limit entity by principalRateLimitId. Required: id.

list_all_okta_privacy_aerials

Retrieve Okta Aerial consent for your org. Retrieves the Okta Aerial consent grant details for your Org.

list_all_okta_privacy_okta_communications

Retrieve the Okta communication settings. Retrieves Okta Communication Settings of your org

list_all_okta_privacy_okta_supports

Retrieve the Okta Support settings. Retrieves Okta Support Settings for your org

list_all_okta_privileged_access_okta_service_accounts

List all Okta managed user accounts. Lists all Okta managed user accounts in your org.

get_single_okta_privileged_access_okta_service_account_by_id

Retrieve an Okta managed user account. Retrieves an Okta managed user account specified by ID. Required: id.

create_a_okta_privileged_access_okta_service_account

Create an Okta managed user account. Creates a new Okta managed user account for managing a Universal Directory user as a service account.

update_a_okta_privileged_access_okta_service_account_by_id

Update an Okta managed user account. Updates an existing Okta managed user account specified by ID. Required: id.

delete_a_okta_privileged_access_okta_service_account_by_id

Delete an Okta managed user account. Deletes an Okta managed user account specified by ID. Required: id.

list_all_okta_privileged_access_service_accounts

List all app service accounts. Lists all app service accounts

get_single_okta_privileged_access_service_account_by_id

Retrieve an app service account. Retrieves an app service account specified by ID. Required: id.

create_a_okta_privileged_access_service_account

Create an app service account. Creates a new app service account for managing an app account

update_a_okta_privileged_access_service_account_by_id

Update an existing app service account. Updates an existing app service account specified by ID. Required: id.

delete_a_okta_privileged_access_service_account_by_id

Delete an app service account. Deletes an app service account specified by ID. Required: id.

list_all_okta_push_providers

List all push providers. Lists all push providers

get_single_okta_push_provider_by_id

Retrieve a push provider. Retrieves a push provider by pushProviderId. Required: id.

create_a_okta_push_provider

Create a push provider. Creates a new push provider.

update_a_okta_push_provider_by_id

Replace a push provider. Replaces a push provider by pushProviderId. Required: id.

delete_a_okta_push_provider_by_id

Delete a push provider. Deletes a push provider by pushProviderId. Required: id.

create_a_okta_query

Submit a query for AD Group. Submits a query search on the on-premises agent to asynchronously fetch specific Active Directory (AD) attributes for a group. Required: app_instance_id, group_id.

list_all_okta_queries

Retrieve the results of an AD group query. Retrieves the results of the requested Active Directory (AD) group attributes using the resultId returned from the POST /api/v1/directories/{appInstanceId}/groups/{groupId}/query call. Required: app_instance_id, group_id, result_id.

list_all_okta_rate_limit_settings_admin_notifications

Retrieve the rate limit admin notification settings. Retrieves the currently configured Rate Limit Admin Notification Settings

update_a_okta_rate_limit_settings_admin_notification_by_id

Replace the rate limit admin notification settings. Replaces the Rate Limit Admin Notification Settings and returns the configured properties

list_all_okta_rate_limit_settings_per_clients

Retrieve the per-client rate limit settings. Retrieves the currently configured Per-Client Rate Limit Settings

update_a_okta_rate_limit_settings_per_client_by_id

Replace the per-client rate limit settings. Replaces the Per-Client Rate Limit Settings and returns the configured properties

list_all_okta_rate_limit_settings_warning_thresholds

Retrieve the rate limit warning threshold percentage. Retrieves the currently configured threshold for warning notifications when the API's rate limit is exceeded

update_a_okta_rate_limit_settings_warning_threshold_by_id

Replace the rate limit warning threshold percentage. Replaces the Rate Limit Warning Threshold Percentage and returns the configured property

list_all_okta_realm_assignments

List all realm assignments. Lists all realm assignments

get_single_okta_realm_assignment_by_id

Retrieve a realm assignment. Retrieves a realm assignment. Required: id.

create_a_okta_realm_assignment

Create a realm assignment. Creates a new realm assignment

update_a_okta_realm_assignment_by_id

Replace a realm assignment. Replaces a realm assignment. Required: id.

delete_a_okta_realm_assignment_by_id

Delete a realm assignment. Deletes a realm assignment. Required: id.

list_all_okta_realm_assignments_operations

List all realm assignment operations. Lists all realm assignment operations.

create_a_okta_realm_assignments_operation

Execute a realm assignment. Executes a realm assignment

list_all_okta_realms

List all realms. Lists all realms.

get_single_okta_realm_by_id

Retrieve a realm. Retrieves a realm. Required: id.

create_a_okta_realm

Create a realm. Creates a new realm

update_a_okta_realm_by_id

Replace the realm profile. Replaces the realm profile. Required: id.

delete_a_okta_realm_by_id

Delete a realm. Deletes a realm permanently. Required: id.

create_a_okta_resend

Resend a factor enrollment. Resends an sms, call, or email factor challenge as part of an enrollment flow. Required: user_id, factor_id.

list_all_okta_resources

List all resource set resources. Lists all resources for the resource set. Required: resource_set_id_or_label.

get_single_okta_resource_by_id

Retrieve a resource set resource. Retrieves a resource identified by resourceId in a resource set. Required: resource_set_id_or_label, id.

create_a_okta_resource

Add a resource set resource with conditions. Adds a resource with conditions for a resource set. Required: resource_set_id_or_label.

update_a_okta_resource_by_id

Replace the resource set resource conditions. Replaces the conditions of a resource identified by resourceId in a resource set. Required: resource_set_id_or_label, id.

delete_a_okta_resource_by_id

Delete a resource set resource. Deletes a resource (identified by resourceId) from a resource set. Required: resource_set_id_or_label, id.

okta_resources_bulk_update

Add more resources to a resource set. Adds more resources to a resource set. Required: resource_set_id_or_label.

list_all_okta_resourceservercredentials_keys

List all Custom Authorization Server Public JSON Web Keys. Lists all the public keys used by the custom authorization server. Required: auth_server_id.

create_a_okta_resourceservercredentials_key

Add a JSON Web Key. Adds a new JSON Web Key to the custom authorization servers JSON web keys. Required: auth_server_id.

delete_a_okta_resourceservercredentials_key_by_id

Delete a Custom Authorization Server Public JSON Web Key. Deletes a custom authorization server public JSON web key by key id. Required: auth_server_id, key_id.

create_a_okta_retry

Retry an agent pool update. Retries an agent pool update if the update is unsuccessful or communication with Okta was interrupted during an agent auto-update. Required: pool_id, update_id.

list_all_okta_risks

Retrieve the user's risk. Retrieves the user risk object for a user ID. Required: user_id.

update_a_okta_risk_by_id

Upsert the user's risk. Upserts (creates or updates) the user risk object for a user ID. Required: user_id.

list_all_okta_rules

List all policy rules. Lists all policy rules for the specified Custom Authorization Server and Policy. Required: auth_server_id, policy_id.

get_single_okta_rule_by_id

Retrieve a policy rule. Retrieves a policy rule by ruleId. Required: auth_server_id, policy_id, id.

create_a_okta_rule

Create a policy rule. Creates a policy rule for the specified Custom Authorization Server and Policy. Required: auth_server_id, policy_id.

update_a_okta_rule_by_id

Replace a policy rule. Replaces the configuration of the Policy Rule defined in the specified Custom Authorization Server and Policy. Required: auth_server_id, policy_id, id.

delete_a_okta_rule_by_id

Delete a policy rule. Deletes a Policy Rule defined in the specified Custom Authorization Server and Policy. Required: auth_server_id, policy_id, id.

list_all_okta_saml_metadata

Preview the application SAML metadata. Previews the SSO SAML metadata for an application. Required: app_id.

get_single_okta_schemas_app_by_id

Retrieve the default app user schema for an app. Retrieves the default schema for an app user. Required: app_id.

create_a_okta_schemas_app

Update the app user profile schema for an app. Updates the app user schema. Required: app_id.

get_single_okta_schemas_group_by_id

Retrieve the default group schema. Retrieves the group schema The User Types feature does not extend to groups.

create_a_okta_schemas_group

Update the group profile schema. Updates the group profile schema.

list_all_okta_schemas_log_streams

List the log stream schemas. Lists the schema for all log stream types visible for this org

get_single_okta_schemas_user_by_id

Retrieve a user schema. Retrieves the schema for a user type. Required: id.

create_a_okta_schemas_user

Update a user schema. Updates a user schema. Required: id.

list_all_okta_scopes

List all custom token scopes. Lists all custom token scopes. Required: auth_server_id.

get_single_okta_scope_by_id

Retrieve a custom token scope. Retrieves a custom token scope. Required: auth_server_id, id.

create_a_okta_scope

Create a custom token scope. Creates a custom token scope. Required: auth_server_id.

update_a_okta_scope_by_id

Replace a custom token scope. Replaces a custom token scope. Required: auth_server_id, id.

delete_a_okta_scope_by_id

Delete a custom token scope. Deletes a custom token scope. Required: auth_server_id, id.

list_all_okta_security_events_providers

List all security events providers. Lists all security events provider instances

get_single_okta_security_events_provider_by_id

Retrieve the security events provider. Retrieves the security events provider instance specified by id. Required: id.

create_a_okta_security_events_provider

Create a security events provider. Creates a security events provider instance

update_a_okta_security_events_provider_by_id

Replace a security events provider. Replaces a security events provider instance specified by id. Required: id.

delete_a_okta_security_events_provider_by_id

Delete a security events provider. Deletes a security events provider instance specified by id. Required: id.

create_a_okta_security_security_event

Publish a security event token. Publishes a security event token (SET) sent by a security events provider.

list_all_okta_sessions

List all identity source sessions. Lists all identity source sessions for the given identity source instance. Required: identity_source_id.

get_single_okta_session_by_id

Retrieve an identity source session. Retrieves an identity source session for a given identity source ID and session ID. Required: identity_source_id, id.

create_a_okta_session

Create an identity source session. Creates an identity source session for the given identity source instance. Required: identity_source_id.

delete_a_okta_session_by_id

Delete an identity source session. Deletes an identity source session for a given identity source ID and session Id. Required: identity_source_id, id.

okta_sessions_bulk_delete

Revoke all user sessions. Revokes all active identity provider sessions of the user. Required: user_id.

create_a_okta_set_as_primary

Set a custom telephony provider as a primary telephony provider. Sets a custom telephony provider as the primary telephony provider for the org. Required: custom_telephony_provider_id.

list_all_okta_settings

Retrieve the email template settings. Retrieves an email template's settings. Required: brand_id, template_name.

update_a_okta_setting_by_id

Replace the email template settings. Replaces an email template's settings. Required: brand_id, template_name.

list_all_okta_settings_auto_assign_admin_app_settings

Retrieve the Okta Admin Console assignment setting. Retrieves the org setting to automatically assign the Okta Admin Console when an admin role is assigned

create_a_okta_settings_auto_assign_admin_app_setting

Update the Okta Admin Console assignment setting. Updates the org setting to automatically assign the Okta Admin Console when an admin role is assigned .

list_all_okta_settings_client_privileges_settings

Retrieve the default public client app role setting. Retrieves the org setting to assign the Super Admin role to new public client apps

update_a_okta_settings_client_privileges_setting_by_id

Assign the default public client app role setting. Assigns the Super Admin role as the default role for new public client apps

list_all_okta_sign_in_customizeds

Retrieve the customized sign-in page. Retrieves the customized sign-in page. Required: brand_id.

update_a_okta_sign_in_customized_by_id

Replace the customized sign-in page. Replaces the customized sign-in page. Required: brand_id.

delete_a_okta_sign_in_customized_by_id

Delete the customized sign-in page. Deletes the customized sign-in page. Required: brand_id.

list_all_okta_sign_in_previews

Retrieve the preview sign-in page preview. Retrieves the preview sign-in page. Required: brand_id.

update_a_okta_sign_in_preview_by_id

Replace the preview sign-in page. Replaces the preview sign-in page. Required: brand_id.

delete_a_okta_sign_in_preview_by_id

Delete the preview sign-in page. Deletes the preview sign-in page. Required: brand_id.

list_all_okta_sign_in_widget_versions

List all Sign-In Widget versions. Lists all sign-in widget versions supported by the current org. Required: brand_id.

list_all_okta_sign_out_customizeds

Retrieve the sign-out page settings. Retrieves the sign-out page settings. Required: brand_id.

update_a_okta_sign_out_customized_by_id

Replace the sign-out page settings. Replaces the sign-out page settings. Required: brand_id.

list_all_okta_ssf_streams

Retrieve the SSF stream configuration(s). Retrieves either a list of all known SSF stream configurations or the individual configuration if specified by ID.

create_a_okta_ssf_stream

Create an SSF stream. Creates an SSF stream for an event receiver to start receiving security events in the form of Security Event Tokens (SETs) from Okta.

update_a_okta_ssf_stream_by_id

Replace an SSF stream. Replaces all properties for an existing SSF stream configuration.

delete_a_okta_ssf_stream_by_id

Delete an SSF stream. Deletes the specified SSF stream.

okta_ssf_streams_partial_update

Update an SSF stream. Updates properties for an existing SSF stream configuration.

create_a_okta_start_import

Start the import from the identity source. Starts the import from the identity source described by the uploaded bulk operations. Required: identity_source_id, session_id.

list_all_okta_stream_status

Retrieve the SSF stream status. Retrieves the status of an SSF stream.

create_a_okta_stream_verification

Verify an SSF stream. Verifies an SSF stream by publishing a verification event requested by a security events provider.

create_a_okta_subscribe

Subscribe a role to a specific notification type. Subscribes a Role to a specified notification type. Required: role_ref, notification_type.

list_all_okta_subscriptions

Retrieve a subscription for a role. Retrieves a subscription by notificationType for a specified Role. Required: role_ref, notification_type.

list_all_okta_targets

Retrieve a role target by assignment type. Retrieves all role targets for an APP_ADMIN, USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user by user or group assignment type. Required: user_id, role_id_or_encoded_role_id.

list_all_okta_telephony_providers

List all custom telephony providers. Lists all custom telephony providers that are configured in your org

get_single_okta_telephony_provider_by_id

Retrieve a custom telephony provider. Retrieves the details of a custom telephony provider by its ID. Required: id.

create_a_okta_telephony_provider

Create a custom telephony provider. Creates a custom telephony provider with the provided credentials

update_a_okta_telephony_provider_by_id

Update a custom telephony provider credential. Updates the credentials of an existing custom telephony provider. Required: id.

delete_a_okta_telephony_provider_by_id

Delete a custom telephony provider. Deletes a custom telephony provider by its ID. Required: id.

list_all_okta_templates_emails

List all email templates. Lists all supported email templates. Required: brand_id.

list_all_okta_templates_sms

List all SMS templates. Lists all custom SMS templates.

get_single_okta_templates_sm_by_id

Retrieve an SMS template. Retrieves a specific template by id. Required: id.

create_a_okta_templates_sm

Create an SMS template. Creates a new custom SMS template

update_a_okta_templates_sm_by_id

Replace an SMS template. Replaces the SMS Template . Required: id.

delete_a_okta_templates_sm_by_id

Delete an SMS template. Deletes an SMS template. Required: id.

okta_templates_sms_replace

Update an SMS template. Updates only some of the SMS Template properties: * All properties within the custom SMS Template that have values are updated. Required: id.

create_a_okta_test

Send a test email. Sends a test email to the current user's primary and secondary email addresses. Required: brand_id, template_name.

list_all_okta_themes

List all themes. Lists all the themes in your brand. Required: brand_id.

get_single_okta_theme_by_id

Retrieve a theme. Retrieves a theme for a brand. Required: brand_id, id.

update_a_okta_theme_by_id

Replace a theme. Replaces a theme for a brand. Required: brand_id, id.

list_all_okta_threats_configurations

Retrieve the ThreatInsight configuration. Retrieves the ThreatInsight configuration for the org

create_a_okta_threats_configuration

Update the ThreatInsight configuration. Updates the ThreatInsight configuration for the org

list_all_okta_tokens

List all application refresh tokens. Lists all refresh tokens for an app . Required: app_id.

get_single_okta_token_by_id

Retrieve an application token. Retrieves a refresh token for the specified app. Required: app_id, id.

delete_a_okta_token_by_id

Revoke an application token. Revokes the specified token for the specified app. Required: app_id, id.

okta_tokens_bulk_delete

Revoke all application tokens. Revokes all OAuth 2.0 refresh tokens for the specified app. Required: app_id.

get_single_okta_transaction_by_id

Retrieve a factor transaction status. Retrieves the status of a push factor verification transaction > The response body for a number matching push challenge to an Okta Verify push factor enrollment is different from the response body of a standard push challenge. Required: user_id, factor_id, id.

list_all_okta_trusted_origins

List all trusted origins. Lists all trusted origins

get_single_okta_trusted_origin_by_id

Retrieve a trusted origin. Retrieves a trusted origin. Required: id.

create_a_okta_trusted_origin

Create a trusted origin. Creates a trusted origin

update_a_okta_trusted_origin_by_id

Replace a trusted origin. Replaces a trusted origin. Required: id.

delete_a_okta_trusted_origin_by_id

Delete a trusted origin. Deletes a trusted origin. Required: id.

get_single_okta_types_user_by_id

Retrieve a user type. Retrieves a user type by ID. Required: id.

create_a_okta_types_user

Create a user type. Creates a new user type.

update_a_okta_types_user_by_id

Replace a user type. Replaces an existing user type. Required: id.

delete_a_okta_types_user_by_id

Delete a user type. Deletes a user type permanently. Required: id.

okta_types_users_replace

Update a user type. Updates an existing user type. Required: id.

create_a_okta_unsubscribe

Unsubscribe a role from a specific notification type. Unsubscribes a Role from a specified notification type. Required: role_ref, notification_type.

list_all_okta_updates

List all agent pool updates. Lists all agent pool updates. Required: pool_id.

create_a_okta_update

Create an agent pool update. Creates an agent pool update. Required: pool_id.

get_single_okta_update_by_id

Retrieve an agent pool update by ID. Retrieves an agent pool update by its updateId. Required: pool_id, id.

delete_a_okta_update_by_id

Delete an agent pool update. Deletes agent pool update. Required: pool_id, id.

okta_updates_activate

Activate an agent pool update. Activates a scheduled agent pool update. Required: pool_id, id.

okta_updates_deactivate

Deactivate an agent pool update. Deactivates scheduled agent pool update. Required: pool_id, id.

okta_updates_pause

Pause an agent pool update. Pauses a running or queued agent pool update. Required: pool_id, id.

okta_updates_resume

Resume an agent pool update. Resumes a running or queued agent pool update. Required: pool_id, id.

okta_updates_stop

Stop an agent pool update. Stops an agent pool update. Required: pool_id, id.

okta_updates_replace

Update an agent pool update by ID. Updates an agent pool update instance and returns the latest agent pool update. Required: pool_id, id.

list_all_okta_updates_settings

Retrieve an agent pool update's settings. Retrieves the current state of the agent pool update instance settings. Required: pool_id.

create_a_okta_updates_setting

Update an agent pool update settings. Updates an agent pool update instance settings. Required: pool_id.

list_all_okta_user_authenticator_enrollments

List all authenticator enrollments. Lists all authenticator enrollments of the specified user. Required: user_id.

get_single_okta_user_authenticator_enrollment_by_id

Retrieve an authenticator enrollment. Retrieves a user's authenticator enrollment by enrollmentId. Required: user_id, id.

delete_a_okta_user_authenticator_enrollment_by_id

Delete an authenticator enrollment. Deletes an existing enrollment for the specified user. Required: user_id, id.

list_all_okta_user_linked_objects

List all linked object definitions. Lists all Linked Object definitions

create_a_okta_user_linked_object

Create a linked object definition. Creates a Linked Object definition

delete_a_okta_user_linked_object_by_id

Delete a linked object definition. Deletes the Linked Object definition specified by either the primary or associated name. Required: linked_object_name.

list_all_okta_values

List all values for a governance bundle entitlement. Lists all entitlement values that are specific to a governance bundle entitlement. Required: bundle_id, entitlement_id.

create_a_okta_verify_rp_id_domain

Verify a Relying Party ID domain. Verifies the Relying Party identifier (RP ID) domain for the specified Passkey (FIDO2 WebAuthn) authenticator and the specific webauthn authenticator method. Required: authenticator_id, web_authn_method_type.

create_a_okta_webauthn_registration_activate

Activate a preregistered WebAuthn factor. Activates a preregistered WebAuthn factor.

create_a_okta_webauthn_registration_enroll

Enroll a preregistered WebAuthn factor. Enrolls a preregistered WebAuthn factor.

create_a_okta_webauthn_registration_initiate_fulfillment_request

Generate a fulfillment request. Generates a fulfillment request by sending a WebAuthn preregistration event to start the flow.

create_a_okta_webauthn_registration_send_pin

Send a PIN to user. Sends the decoded PIN for the specified WebAuthn preregistration enrollment.

list_all_okta_well_known_app_authenticator_configurations

Retrieve the well-known app authenticator configuration. Retrieves the well-known app authenticator configuration.

list_all_okta_well_known_apple_app_site_associations

Retrieve the customized apple-app-site-association URI content. Retrieves the content of the apple-app-site-assocation well-known URI .

list_all_okta_well_known_assetlinks_jsons

Retrieve the customized assetlinks.json URI content. Retrieves the content of the assetlinks.json well-known URI

list_all_okta_well_known_okta_organizations

Retrieve the Org metadata. Retrieves the org metadata, which includes the org ID, configured custom domains, and authentication pipeline

list_all_okta_well_known_ssf_configurations

Retrieve the SSF transmitter metadata. Retrieves SSF transmitter configuration metadata.

list_all_okta_well_known_uris

Retrieve all the well-known URIs. Retrieves the content from each of the well-known URIs for a specified brand. Required: brand_id.

list_all_okta_well_known_webauthns

Retrieve the customized webauthn URI content. Retrieves the content of the webauthn well-known URI

list_all_okta_yubikey_token_tokens

List all YubiKey OTP tokens. Lists all YubiKey OTP tokens

get_single_okta_yubikey_token_token_by_id

Retrieve a YubiKey OTP token. Retrieves the specified YubiKey OTP token by id. Required: id.

create_a_okta_yubikey_token_token

Upload a YubiKey OTP seed. Uploads a seed for a user to enroll a YubiKey OTP

list_all_okta_zones

List all network zones. Lists all Network Zones with pagination.

get_single_okta_zone_by_id

Retrieve a network zone. Retrieves a Network Zone by zoneId. Required: id.

create_a_okta_zone

Create a network zone. Creates a Network Zone * For an IP Network Zone, you must define either gateways or proxies.

update_a_okta_zone_by_id

Replace a network zone. Replaces a Network Zone by zoneId. Required: id.

delete_a_okta_zone_by_id

Delete a network zone. Deletes a Network Zone by zoneId > * You can't delete a Network Zone that's used by a Policy or Rule. Required: id.

list_all_okta_policy_apps

List all apps mapped to a policy. Lists all applications mapped to a policy identified by policyId . Required: policy_id.

get_single_okta_iam_resource_set_binding_by_id

Retrieve a role resource set binding. Retrieves the binding of a role (identified by roleIdOrLabel) for a resource set (identified by resourceSetIdOrLabel). Required: resource_set_id_or_label, id.

list_all_okta_iam_resource_set_bindings

Retrieve a resource set. Retrieves a resource set by resourceSetIdOrLabel. Required: resource_set_id_or_label.

list_all_okta_group_role_catalog_app_targets

List all group role app targets. Lists all app targets for an APP_ADMIN role assignment to a group. Required: group_id, role_assignment_id.

update_a_okta_group_role_catalog_app_target_by_id

Assign a group role app target. Assigns an OIN app target to an APP_ADMIN role assignment to a group. Required: group_id, role_assignment_id, app_name.

okta_group_role_catalog_app_targets_update_instance

Assign a group role app instance target. Assigns an app instance target to an APP_ADMIN role assignment to a group. Required: group_id, role_assignment_id, app_name, app_id.

delete_a_okta_group_role_catalog_app_target_by_id

Unassign a group role app target. Unassigns an OIN app target from an APP_ADMIN role assignment to a group . Required: group_id, role_assignment_id, app_name.

okta_group_role_catalog_app_targets_delete_instance

Unassign a group role app instance target. Unassigns an app instance target from an APP_ADMIN role assignment to a group . Required: group_id, role_assignment_id, app_name, app_id.

list_all_okta_user_role_catalog_app_targets

List all admin role app targets. Lists all app targets for an APP_ADMIN role assigned to a user. Required: user_id, role_assignment_id.

update_a_okta_user_role_catalog_app_target_by_id

Assign all apps as target to admin role. Assigns all apps as target to an APP_ADMIN role. Required: user_id, role_assignment_id.

okta_user_role_catalog_app_targets_update_by_name

Assign an admin role app target. Assigns an OIN app target for an APP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, app_name.

okta_user_role_catalog_app_targets_update_instance

Assign an admin role app instance target. Assigns an app instance target to an APP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, app_name, app_id.

delete_a_okta_user_role_catalog_app_target_by_id

Unassign an admin role app target. Unassigns an OIN app target from an APP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, app_name.

okta_user_role_catalog_app_targets_delete_instance

Unassign an admin role app instance target. Unassigns an app instance target from an APP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, app_name, app_id.

list_all_okta_oauth_client_role_catalog_app_targets

List all client role app targets. Lists all OIN app targets for an APP_ADMIN role that's assigned to a client (by clientId). Required: client_id, role_assignment_id.

okta_oauth_client_role_catalog_app_targets_update_by_name

Assign a client role app target. Assigns an OIN app target for an APP_ADMIN role assignment to a client. Required: client_id, role_assignment_id, app_name.

okta_oauth_client_role_catalog_app_targets_update_instance

Assign a client role app instance target. Assigns an app instance target to an APP_ADMIN role assignment to a client. Required: client_id, role_assignment_id, app_name, app_id.

delete_a_okta_oauth_client_role_catalog_app_target_by_id

Unassign a client role app target. Unassigns an OIN app target for a role assignment to a client app . Required: client_id, role_assignment_id, app_name.

okta_oauth_client_role_catalog_app_targets_delete_instance

Unassign a client role app instance target. Unassigns an app instance target from a role assignment to a client app . Required: client_id, role_assignment_id, app_name, app_id.

list_all_okta_user_oauth_clients

List all clients. Lists all client resources for which the specified user has grants or tokens . Required: user_id.

list_all_okta_app_certificate_csrs

List all certificate signing requests. Lists all certificate signing requests for an app. Required: app_id.

get_single_okta_app_certificate_csr_by_id

Retrieve a certificate signing request. Retrieves a certificate signing request (CSR) for the app by csrId. Required: app_id, id.

create_a_okta_app_certificate_csr

Generate a certificate signing request. Generates a new key pair and returns the certificate signing request (CSR) for it. Required: app_id.

delete_a_okta_app_certificate_csr_by_id

Revoke a certificate signing request. Revokes a certificate signing request and deletes the key pair from the app. Required: app_id, id.

list_all_okta_idp_certificate_csrs

List all certificate signing requests. Lists all certificate signing requests (CSRs) for an identity provider (IdP). Required: idp_id.

get_single_okta_idp_certificate_csr_by_id

Retrieve a certificate signing request. Retrieves a specific certificate signing request (CSR) by id. Required: idp_id, id.

create_a_okta_idp_certificate_csr

Generate a certificate signing request. Generates a new key pair and returns a certificate signing request (CSR) for it . Required: idp_id.

delete_a_okta_idp_certificate_csr_by_id

Revoke a certificate signing request. Revokes a certificate signing request (CSR) and deletes the key pair from the identity provider (IdP). Required: idp_id, id.

list_all_okta_app_jwks

List all the OAuth 2.0 client JSON Web Keys. Lists all JSON Web Keys for an OAuth 2.0 client app. Required: app_id.

get_single_okta_app_jwk_by_id

Retrieve an OAuth 2.0 client JSON Web Key. Retrieves an OAuth 2.0 client JSON Web Key by keyId. Required: app_id, id.

create_a_okta_app_jwk

Add a JSON Web Key. Adds a new JSON Web Key to the clients JSON Web Keys. Required: app_id.

delete_a_okta_app_jwk_by_id

Delete an OAuth 2.0 client JSON Web Key. Deletes an OAuth 2.0 Client JSON Web Key by keyId. Required: app_id, id.

list_all_okta_app_credentials_keys

List all key credentials. Lists all key credentials for an app. Required: app_id.

get_single_okta_app_credentials_key_by_id

Retrieve a key credential. Retrieves a specific application key credential by kid. Required: app_id, id.

okta_app_credentials_keys_clone

Clone a key credential. Clones an X.509 certificate for an application key credential from a source app to a target app. Required: app_id, id.

okta_app_credentials_keys_generate

Generate a key credential. Generates a new X.509 certificate for an app key credential .signing.kid value in the request body. Required: app_id.

list_all_okta_authorization_server_credentials_keys

List all credential keys. Lists all of the current, future, and expired Keys used by the Custom Authorization Server. Required: auth_server_id.

get_single_okta_authorization_server_credentials_key_by_id

Retrieve an authorization server key. Retrieves an Authorization Server Key specified by the keyId. Required: auth_server_id, id.

list_all_okta_org_idp_credentials_keys

List all IdP key credentials. Lists all identity provider (IdP) key credentials

get_single_okta_org_idp_credentials_key_by_id

Retrieve an IdP key credential. Retrieves a specific identity provider (IdP) key credential by kid. Required: id.

create_a_okta_org_idp_credentials_key

Create an IdP key credential. Creates a new X.509 certificate credential in the identity provider (IdP) key store .

update_a_okta_org_idp_credentials_key_by_id

Replace an IdP key credential. Replaces an identity provider (IdP) key credential by kid. Required: id.

delete_a_okta_org_idp_credentials_key_by_id

Delete an IdP key credential. Deletes a specific identity provider (IdP) key credential by kid if it isn't currently being used by an active or inactive IdP. Required: id.

list_all_okta_idp_credentials_keys

List all signing key credentials for IdP. Lists all signing key credentials for an identity provider (IdP). Required: idp_id.

get_single_okta_idp_credentials_key_by_id

Retrieve a signing key credential for IdP. Retrieves a specific identity provider (IdP) key credential by kid. Required: idp_id, id.

okta_idp_credentials_keys_clone

Clone a signing key credential for IdP. Clones an X.509 certificate for an identity provider (IdP) signing key credential from a source IdP to target IdP . Required: idp_id, id.

okta_idp_credentials_keys_generate

Generate a new signing key credential for IdP. Generates a new X.509 certificate for an identity provider (IdP) signing key credential to be used for signing assertions sent to the IdP. Required: idp_id.

list_all_okta_app_credentials_secrets

List all OAuth 2.0 client secrets. Lists all client secrets for an OAuth 2.0 client app. Required: app_id.

get_single_okta_app_credentials_secret_by_id

Retrieve an OAuth 2.0 client secret. Retrieves an OAuth 2.0 client secrets by secretId. Required: app_id, id.

create_a_okta_app_credentials_secret

Create an OAuth 2.0 client secret. Creates an OAuth 2.0 client secret object with a new active client secret. Required: app_id.

delete_a_okta_app_credentials_secret_by_id

Delete an OAuth 2.0 client secret. Deletes an OAuth 2.0 client secret by secretId. Required: app_id, id.

list_all_okta_api_service_credentials_secrets

List all API service integration instance secrets. Lists all client secrets for an API Service Integration instance by apiServiceId. Required: api_service_id.

create_a_okta_api_service_credentials_secret

Create an API service integration instance secret. Creates an API Service Integration instance Secret object with a new active client secret. Required: api_service_id.

delete_a_okta_api_service_credentials_secret_by_id

Delete an API service integration instance secret. Deletes an API Service Integration instance Secret by secretId. Required: api_service_id, id.

get_single_okta_app_cwo_connection_by_id

Retrieve a Cross App Access connection. Retrieves the Cross App Access connection with the specified ID. Required: app_id, id.

list_all_okta_user_devices

List all devices for an enrolled user. Lists all devices enrolled by a user . Required: user_id.

list_all_okta_org_domains

List all custom domains. Lists all verified custom domains for the org

get_single_okta_disaster_recovery_status_by_id

Retrieve the disaster recovery status for a domain. Retrieves the failover or failback status for the domain specified in the request path. Required: domain.

list_all_okta_app_features

List all features. Lists all features for an app . Required: app_id.

get_single_okta_app_feature_by_id

Retrieve a feature. Retrieves a Feature object for an app. Required: app_id, id.

update_a_okta_app_feature_by_id

Update a feature. Updates a Feature object for an app . Required: app_id, id.

list_all_okta_org_features

List all features. Lists all self-service features for your org

get_single_okta_org_feature_by_id

Retrieve a feature. Retrieves a feature by ID. Required: id.

create_a_okta_org_feature

Update a feature lifecycle. Updates a feature's lifecycle status. Required: lifecycle, id.

get_single_okta_app_federated_claim_by_id

Retrieve a federated claim. Retrieves a federated claim by claimId. Required: app_id, claim_id.

get_single_okta_user_role_governance_grant_by_id

Retrieve a user role governance source. Retrieves a governance source (identified by grantId) for a role (identified by roleAssignmentId) that's assigned to a user (identified by userId). Required: user_id, role_assignment_id, grant_id.

list_all_okta_user_client_grants

List all grants for a client. Lists all grants for a specified user and client. Required: user_id, client_id.

list_all_okta_user_grants

List all user grants. Lists all grants for the specified user. Required: user_id.

get_single_okta_user_grant_by_id

Retrieve a user grant. Retrieves a grant for the specified user. Required: user_id, id.

okta_user_grants_bulk_delete

Revoke all user grants. Revokes all grants for a specified user. Required: user_id.

delete_a_okta_user_grant_by_id

Revoke a user grant. Revokes one grant for a specified user. Required: user_id, id.

get_single_okta_app_group_push_mapping_by_id

Retrieve a group push mapping. Retrieves a group push mapping by ID. Required: app_id, id.

delete_a_okta_app_group_by_id

Unassign an application group. Unassigns a Group from an app. Required: app_id, id.

okta_app_groups_partial_update

Update an application group. Updates a group assignment to an app. Required: app_id, id.

get_single_okta_identity_source_group_by_id

Retrieve an identity source group. Retrieves a group from an identity source for a given identity source ID and group ID or external ID. Required: identity_source_id, id.

create_a_okta_identity_source_group

Create an identity source group. Creates a group in an identity source for the given identity source instance. Required: identity_source_id.

okta_identity_source_groups_create_with_id

Update an identity source group. Updates a group to an identity source for the given identity source instance and group ID. Required: identity_source_id, id.

delete_a_okta_identity_source_group_by_id

Delete an identity source group. Deletes a group in an identity source for a given identity source ID and group ID. Required: identity_source_id, id.

list_all_okta_user_idps

List all IdPs for user. Lists the identity providers (IdPs) associated with the user. Required: id.

create_a_okta_brand_theme_logo

Upload the logo. Uploads and replaces the logo for the theme. Required: brand_id, theme_id.

list_all_okta_policy_mappings

List all resources mapped to a policy. Lists all resources mapped to a policy identified by policyId. Required: policy_id.

get_single_okta_policy_mapping_by_id

Retrieve a policy resource mapping. Retrieves a resource mapping for a policy identified by policyId and mappingId. Required: policy_id, id.

create_a_okta_policy_mapping

Map a resource to a policy. Maps a resource to a policy identified by policyId . Required: policy_id.

get_single_okta_authenticator_method_by_id

Retrieve an authenticator method. Retrieves a method identified by methodType of an authenticator identified by authenticatorId. Required: authenticator_id, id.

create_a_okta_child_org

Create an org. Creates an org (child org) that has the same features as the current requesting org (parent org).

get_single_okta_authorization_server_policy_by_id

Retrieve a policy. Retrieves a policy. Required: auth_server_id, id.

update_a_okta_authorization_server_policy_by_id

Replace a policy. Replaces a policy. Required: auth_server_id, id.

list_all_okta_org_policies

List all policies. Lists all policies with the specified type

create_a_okta_org_policy

Create a policy. Creates a policy.

list_all_okta_user_role_governance_resources

Retrieve the user role governance source resources. Retrieves the resources of a governance source (identified by grantId) for a role (identified by roleAssignmentId) that's assigned to a user (identified by userId). Required: user_id, role_assignment_id, grant_id.

get_single_okta_authorization_server_signing_key_by_id

Retrieve a Custom Authorization Server Public JSON Web Key. Retrieves a custom authorization server public JSON web key by key id. Required: auth_server_id, id.

list_all_okta_oauth_client_roles

List all client role assignments. Lists all roles assigned to a client app identified by clientId. Required: client_id.

get_single_okta_oauth_client_role_by_id

Retrieve a client role. Retrieves a role assignment (identified by roleAssignmentId) for a client app (identified by clientId). Required: client_id, id.

create_a_okta_oauth_client_role

Assign a client role. Assigns a standard role to a client app. Required: client_id.

delete_a_okta_oauth_client_role_by_id

Unassign a client role. Unassigns a role assignment (identified by roleAssignmentId) from a client app (identified by clientId). Required: client_id, id.

list_all_okta_policy_rules

List all policy rules. Lists all policy rules. Required: policy_id.

get_single_okta_policy_rule_by_id

Retrieve a policy rule. Retrieves a policy rule. Required: policy_id, id.

create_a_okta_policy_rule

Create a policy rule. Creates a policy rule . Required: policy_id.

update_a_okta_policy_rule_by_id

Replace a policy rule. Replaces the properties for a policy rule identified by policyId and ruleId. Required: policy_id, id.

delete_a_okta_policy_rule_by_id

Delete a policy rule. Deletes a policy rule identified by policyId and ruleId. Required: policy_id, id.

get_single_okta_log_stream_schema_by_id

Retrieve the log stream schema for the schema type. Retrieves the schema for a log stream type. Required: log_stream_type.

get_single_okta_okta_session_by_id

Retrieve a session. Retrieves information about the session specified by the given session ID. Required: id.

delete_a_okta_okta_session_by_id

Revoke a session. Revokes the specified session. Required: id.

okta_user_notification_subscriptions_subscribe

Subscribe a user to a specific notification type. Subscribes the current user to a specified notification type. Required: user_id, notification_type.

okta_user_notification_subscriptions_unsubscribe

Unsubscribe a user from a specific notification type. Unsubscribes the current user from a specified notification type. Required: user_id, notification_type.

list_all_okta_user_notification_subscriptions

Retrieve a subscription for a user. Retrieves a subscription by notificationType for a specified user. Required: user_id, notification_type.

list_all_okta_group_role_group_targets

List all group role group targets. Lists all group targets for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a group. Required: group_id, role_assignment_id.

update_a_okta_group_role_group_target_by_id

Assign a group role group target. Assigns a group target to a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a group. Required: group_id, role_assignment_id, target_group_id.

delete_a_okta_group_role_group_target_by_id

Unassign a group role group target. Unassigns a group target from a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a group. Required: group_id, role_assignment_id, target_group_id.

list_all_okta_user_role_group_targets

List all admin role group targets. Lists all group targets for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id.

update_a_okta_user_role_group_target_by_id

Assign an admin role group target. Assigns a group target for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, group_id.

delete_a_okta_user_role_group_target_by_id

Unassign an admin role group target. Unassigns a group target from a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, group_id.

list_all_okta_oauth_client_role_group_targets

List all client role group targets. Lists all group targets for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a client. Required: client_id, role_assignment_id.

update_a_okta_oauth_client_role_group_target_by_id

Assign a client role group target. Assigns a group target to a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a client app. Required: client_id, role_assignment_id, group_id.

delete_a_okta_oauth_client_role_group_target_by_id

Unassign a client role group target. Unassigns a Group target from a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a client app. Required: client_id, role_assignment_id, group_id.

get_single_okta_brand_email_template_by_id

Retrieve an email template. Retrieves the details of an email template by name. Required: brand_id, id.

okta_email_server_tests_test

Test an SMTP server configuration. Tests the specified custom SMTP server configuration. Required: email_server_id.

okta_telephony_provider_tests_test

Send a test message from a custom telephony provider. Sends a test message (SMS or call) using the specified custom telephony provider to verify that the provider is configured correctly. Required: custom_telephony_provider_id.

list_all_okta_authorization_server_client_tokens

List all refresh tokens for a client. Lists all refresh tokens issued by an authorization server for a specific Client. Required: auth_server_id, client_id.

get_single_okta_authorization_server_client_token_by_id

Retrieve a refresh token for a client. Retrieves a refresh token for a Client. Required: auth_server_id, client_id, id.

okta_authorization_server_client_tokens_bulk_delete

Revoke all refresh tokens for a client. Revokes all refresh tokens for a Client. Required: auth_server_id, client_id.

delete_a_okta_authorization_server_client_token_by_id

Revoke a refresh token for a client. Revokes a refresh token for a Client. Required: auth_server_id, client_id, id.

list_all_okta_user_client_tokens

List all refresh tokens for a client. Lists all refresh tokens issued for the specified user and client. Required: user_id, client_id.

get_single_okta_user_client_token_by_id

Retrieve a refresh token for a client. Retrieves a refresh token issued for the specified user and client. Required: user_id, client_id, id.

okta_user_client_tokens_bulk_delete

Revoke all refresh tokens for a client. Revokes all refresh tokens issued for the specified user and client. Required: user_id, client_id.

delete_a_okta_user_client_token_by_id

Revoke a token for a client. Revokes the specified refresh and access tokens. Required: user_id, client_id, id.

get_single_okta_user_linked_object_schema_by_id

Retrieve a linked object definition. Retrieves a Linked Object definition. Required: linked_object_name.

list_all_okta_device_users

List all users for a device. Lists all Users for a device by deviceId. Required: device_id.

get_single_okta_identity_source_user_by_id

Retrieve an identity source user. Retrieves a user by external ID in an identity source for the given identity source instance. Required: identity_source_id, id.

create_a_okta_identity_source_user

Create an identity source user. Creates a user in an identity source for the given identity source instance. Required: identity_source_id.

okta_identity_source_users_partial_update

Update an identity source user. Updates a user to an identity source for the given identity source instance and external ID. Required: identity_source_id, id.

list_all_okta_idp_users

List all users for IdP. Lists all the users linked to an identity provider (IdP). Required: idp_id.

get_single_okta_idp_user_by_id

Retrieve a user for IdP. Retrieves a linked identity provider (IdP) user by ID. Required: idp_id, id.

create_a_okta_idp_user

Link a user to IdP. Links an Okta user to an existing SAML or social identity provider (IdP). Required: idp_id, id.

delete_a_okta_idp_user_by_id

Unlink a user from IdP. Unlinks the Okta user and the identity provider (IdP) user. Required: idp_id, id.

get_single_okta_brand_well_known_uris_by_id

Retrieve the well-known URI of a specific brand. Retrieves the well-known URI of a specific brand and well-known URI path. Required: brand_id, id.

Why Truto

Why use Truto’s MCP server for Okta

Other MCP servers give you a static tool list for one app. Truto gives you a managed, multi-tenant MCP infrastructure across 500+ integrations.

01

Auto-generated, always up to date

Tools are dynamically generated from curated documentation — not hand-coded. As integrations evolve, tools stay current without manual maintenance.

02

Fine-grained access control

Scope each MCP server to read-only, write-only, specific methods, or tagged tool groups. Expose only what your AI agent needs — nothing more.

03

Multi-tenant by design

Each MCP server is scoped to a single connected account with its own credentials. The URL itself is the auth token — no shared secrets, no credential leaking across tenants.

04

Works with every MCP client

Standard JSON-RPC 2.0 protocol. Paste the URL into Claude, ChatGPT, Cursor, or any MCP-compatible agent framework — tools are discovered automatically.

05

Built-in auth, rate limits, and error handling

Tool calls execute through Truto’s proxy layer with automatic OAuth refresh, rate-limit handling, and normalized error responses. No raw API plumbing in your agent.

06

Expiring and auditable servers

Create time-limited MCP servers for contractors or automated workflows. Optional dual-auth requires both the URL and a Truto API token for high-security environments.

Unified APIs

Unified APIs for Okta

Skip writing code for every integration. Use Truto’s category-specific Unified APIs out of the box or customize the mappings with AI.

Unified HRIS API

Companies

Companies represent the companies in HRIS

View Docs

Employees

Represents an employee in HRIS

View Docs

Groups

Groups represent the groups for an Employee

View Docs

Locations

Locations represent the locations in HRIS

View Docs

Unified User Directory API

Activities

Activities are the actions performed by users in the source application.

View Docs

Groups

Groups are a collection of users in the source application. In some applications, they might also be called Teams.

View Docs

Roles

The Role object represents a role of a User.

View Docs

Users

The User object represents a User.

View Docs

Unified Single Sign-On API

App Users

AppUsers represent the users assigned to an application.

View Docs

Apps

Applications represent the applications that are registered with the SSO service.

View Docs

How It Works

From zero to integrated

Go live with Okta in under an hour. No boilerplate, no maintenance burden.

01

Link your customer’s Okta account

Use Truto’s frontend SDK to connect your customer’s Okta account. We handle all OAuth and API key flows — you don’t need to create the OAuth app.

02

We handle authentication

Don’t spend time refreshing access tokens or figuring out secure storage. We handle it and inject credentials into every API request.

03

Call our API, we call Okta

Truto’s Proxy API is a 1-to-1 mapping of the Okta API. You call us, we call Okta, and pass the response back in the same cycle.

04

Unified response format

Every response follows a single format across all integrations. We translate Okta’s pagination into unified cursor-based pagination. Data is always in the result attribute.

FAQs

Common questions about Okta on Truto

Authentication, rate limits, data freshness, and everything else you need to know before you integrate.

Which Truto Unified APIs support Okta?

Okta is available through three Unified APIs: the Unified HRIS API (Companies, Employees, Groups, Locations), the Unified User Directory API (Activities, Groups, Roles, Users), and the Unified Single Sign-On API (App Users, Apps). If you need functionality beyond these unified models, Truto can build custom tools on request.

How does authentication work for Okta integrations through Truto?

Truto handles the OAuth 2.0 flow for Okta on your behalf. Your end users authorize the connection through Truto's embedded linking experience, and Truto manages token storage, refresh, and revocation so you never handle credentials directly.

Does Truto handle Okta's API rate limits?

Yes. Truto manages pagination and respects Okta's rate limit headers automatically, including backoff and retry logic. You interact with a consistent unified API and don't need to implement Okta-specific rate limit handling in your code.

Can I access custom user profile attributes from Okta?

The Unified APIs expose standard profile fields like department, title, manager, and location. For custom Okta profile attributes beyond the unified schema, Truto supports proxy requests and can build custom tools on request to surface the specific fields you need.

What kind of activity data can I read from Okta?

Through the Unified User Directory API's Activities resource, you can retrieve Okta system log events including authentication successes, MFA challenges, failed login attempts, and other identity-related events that feed audit and compliance workflows.

Can I write data back to Okta or is it read-only?

The supported operations depend on the specific Unified API resources. For capabilities like creating or updating users in Okta (e.g., for HR-to-Okta profile mastering), Truto can build custom tools on request. Contact the Truto team to scope write operations for your use case.

Okta

Get Okta integrated into your app

Our team understands what it takes to make a Okta integration successful. A short, crisp 30 minute call with folks who understand the problem.