Integration · Developer tools
Connect Claude & ChatGPT to Okta
Ask your AI who has access to an app, which groups a user is in, or to unlock someone who is locked out of Okta. It can search users and groups, read app assignments, create users and groups, and add people to groups and apps. It can also suspend, unsuspend and unlock users, and update profile attributes like title or department.
Connect Okta free
Free plan, no credit card. Takes about a minute.
Try asking
“Which users are locked out right now?”
The AI searches users with the expression status eq "LOCKED_OUT".
“Unlock Mette Nielsen.”
It finds Mette and unlocks her account, so she can try her password again.
“Which apps does [email protected] have access to?”
It lists the apps assigned to Jonas, as shown on his Okta dashboard.
What your AI can do
Users
Search and read users, create users, update profile attributes, and suspend, unsuspend or unlock accounts.
Groups
Search and read groups, create groups, list members, and add or remove users.
Apps and access
List apps and see who is assigned, give users or groups access, and remove a user's direct access.
“Create a user for Anna Holm and add her to the Sales group.”
It creates the user with name, email and login and adds her to the group. With activate set to true, Okta sends the activation email right away.
“Who has access to the Slack app?”
It finds the app and lists the users and groups assigned to it.
“Suspend the account of the contractor who left today.”
It suspends the user so they cannot sign in. Their apps and groups are kept, and it can be undone.
702 tools for Okta
These tools are switched on when you connect. You can switch any of them off, or require your approval before it runs.
add_user_to_groupChanges dataAdd a user to a group by `group_id` and `user_id`; they get any apps assigned to that group.archive_updateVisible to othersDeactivate a update (update id). Has effects visible outside this system. API summary: Deactivate an agent pool update.archive_userVisible to othersDeactivate a user (app id). Has effects visible outside this system. API summary: Deactivate the default provisioning connection.archive_user_deactivateVisible to othersDeactivate a user (key id). Has effects visible outside this system. API summary: Deactivate an OAuth 2.0 client JSON Web Key.archive_user_deactivate_api_service_integration_instance_secretVisible to othersDeactivate a user (secret id). Has effects visible outside this system. API summary: Deactivate an API service integration instance secret.archive_user_deactivate_applicationVisible to othersDeactivate a user (app id). Has effects visible outside this system. API summary: Deactivate an application.archive_user_deactivate_authenticatorVisible to othersDeactivate a user (authenticator id). Has effects visible outside this system. API summary: Deactivate an authenticator.archive_user_deactivate_authenticator_methodVisible to othersDeactivate a user (method type). Has effects visible outside this system. API summary: Deactivate an authenticator method.archive_user_deactivate_authorization_serverVisible to othersDeactivate a user (auth server id). Has effects visible outside this system. API summary: Deactivate an authorization server.archive_user_deactivate_authorization_server_policyVisible to othersDeactivate a user (policy id). Has effects visible outside this system. API summary: Deactivate a policy.archive_user_deactivate_authorization_server_policy_ruleVisible to othersDeactivate a user (rule id). Has effects visible outside this system. API summary: Deactivate a policy rule.archive_user_deactivate_behavior_detection_ruleVisible to othersDeactivate a user (behavior id). Has effects visible outside this system. API summary: Deactivate a behavior detection rule.archive_user_deactivate_custom_telephony_credentialVisible to othersDeactivate a user (custom telephony provider id). Has effects visible outside this system. API summary: Deactivate a custom telephony provider.archive_user_deactivate_deviceVisible to othersDeactivate a user (device id). Has effects visible outside this system. API summary: Deactivate a device.archive_user_deactivate_device_integrationVisible to othersDeactivate a user (device integration id). Has effects visible outside this system. API summary: Deactivate a device integration.archive_user_deactivate_event_hookVisible to othersDeactivate a user (event hook id). Has effects visible outside this system. API summary: Deactivate an event hook.archive_user_deactivate_group_ruleVisible to othersDeactivate a user (group rule id). Has effects visible outside this system. API summary: Deactivate a group rule.archive_user_deactivate_identity_providerVisible to othersDeactivate a user (idp id). Has effects visible outside this system. API summary: Deactivate an IdP.archive_user_deactivate_inline_hookVisible to othersDeactivate a user (inline hook id). Has effects visible outside this system. API summary: Deactivate an inline hook.archive_user_deactivate_log_streamVisible to othersDeactivate a user (log stream id). Has effects visible outside this system. API summary: Deactivate a log stream.archive_user_deactivate_network_zoneVisible to othersDeactivate a user (zone id). Has effects visible outside this system. API summary: Deactivate a network zone.archive_user_deactivate_o_auth2_client_secretVisible to othersDeactivate a user (secret id). Has effects visible outside this system. API summary: Deactivate an OAuth 2.0 client secret.archive_user_deactivate_o_auth2_resource_server_json_web_keyVisible to othersDeactivate a user (key id). Has effects visible outside this system. API summary: Deactivate a Custom Authorization Server Public JSON Web Key.archive_user_deactivate_policyVisible to othersDeactivate a user (policy id). Has effects visible outside this system. API summary: Deactivate a policy.archive_user_deactivate_policy_ruleVisible to othersDeactivate a user (rule id). Has effects visible outside this system. API summary: Deactivate a policy rule.archive_user_deactivate_realm_assignmentVisible to othersDeactivate a user (assignment id). Has effects visible outside this system. API summary: Deactivate a realm assignment.archive_user_deactivate_security_events_provider_instanceVisible to othersDeactivate a user (security event provider id). Has effects visible outside this system. API summary: Deactivate a security events provider.archive_user_deactivate_trusted_originVisible to othersDeactivate a user (trusted origin id). Has effects visible outside this system. API summary: Deactivate a trusted origin.archive_user_deactivate_userVisible to othersDeactivate a user (user id). Has effects visible outside this system.assign_all_apps_as_target_to_admin_roleMoves moneyAttach a app (role assignment id). Financial or irreversible action; may require approval. API summary: Assign all apps as target to admin role.assign_group_to_appChanges dataGive every member of a group access to an app by `app_id` and `group_id`.assign_user_to_appChanges dataGive a user access to an app: `app_id` and the user's ID in `id`, with optional app-specific `profile`.attach_appDeletesAttach a app (app name). Destructive action; may require approval. API summary: Assign a group role app target.attach_client_privileges_settingVisible to othersAttach a client privileges setting. Has effects visible outside this system. API summary: Assign the default public client app role setting.attach_groupDeletesAttach a group (target group id). Destructive action; may require approval. API summary: Assign a group role group target.attach_linked_object_to_userChanges dataAttach a linked object (primary user id). API summary: Assign a linked object value for primary.attach_owner_to_groupChanges dataAttach a owner (group id). API summary: Assign a group owner.attach_policy_to_appChanges dataAttach a policy (policy id). API summary: Assign an app sign-in policy.attach_role_to_clientDeletesAttach a role (client id). Destructive action; may require approval. API summary: Assign a client role.attach_role_to_groupDeletesAttach a role (group id). Destructive action; may require approval. API summary: Assign a role to a group.attach_role_to_userDeletesAttach a role (user id). Destructive action; may require approval. API summary: Assign a user role.attach_user_to_idpChanges dataAttach a user (user id). API summary: Link a user to IdP.create_a_custom_smtp_serverVisible to othersEmail a message. Has effects visible outside this system. API summary: Create a custom SMTP server.create_a_policy_ruleChanges dataCreate a new rule for a policy. Search rules first to avoid duplicates. API summary: Create a policy rule.create_a_user_typeChanges dataCreate a new user. Required: display name or name. Search users first to avoid duplicates. API summary: Create a user type.create_accountChanges dataCreate a new account. Required: name or okta user id. API summary: Create an Okta managed user account.create_agent_pool_updateChanges dataCreate a new update for a agent pool. API summary: Create an agent pool update.create_an_api_service_integration_instance_secretChanges dataCreate a new secret. API summary: Create an API service integration instance secret.create_an_app_service_accountChanges dataCreate a new account. Required: container orn, name, password or username. API summary: Create an app service account.create_an_email_domainVisible to othersEmail a message. Has effects visible outside this system. API summary: Create an email domain.create_an_idp_key_credentialChanges dataCreate a new key. Required: x5c. API summary: Create an IdP key credential.create_an_orgChanges dataCreate a new org. Required: admin, edition, name or subdomain. API summary: Create an org.create_api_serviceChanges dataCreate a new api service. Required: granted scopes or type. API summary: Create an API service integration instance.create_appChanges dataCreate a new app. Required: label or sign on mode. Search apps first to avoid duplicates. API summary: Create an application.create_app_federated_claimChanges dataCreate a new federated claim for a app. API summary: Create a federated claim.create_app_grantChanges dataCreate a new grant for a app. Required: issuer or scope id. API summary: Grant consent to scope.create_app_interclient_allowed_appChanges dataCreate a new interclient allowed app for a app. API summary: Create an allowed app mapping for a target app.create_app_userChanges dataCreate a new user for a app. Search users first to avoid duplicates. API summary: Update the app user profile schema for an app.create_authenticatorChanges dataCreate a new authenticator. API summary: Create an authenticator.create_authenticator_aaguidChanges dataCreate a new aaguid for a authenticator. API summary: Create a custom AAGUID.create_authorization_serverChanges dataCreate a new authorization server. Search authorization servers first to avoid duplicates. API summary: Create an authorization server.create_authorization_server_associated_serverChanges dataCreate a new associated server for a authorization server. Search associated servers first to avoid duplicates. API summary: Create an associated authorization server.create_authorization_server_claimChanges dataCreate a new claim for a authorization server. API summary: Create a custom token claim.create_authorization_server_policyChanges dataCreate a new policy for a authorization server. Search policies first to avoid duplicates. API summary: Create a policy.create_authorization_server_scopeChanges dataCreate a new scope for a authorization server. Required: name. Search scopes first to avoid duplicates. API summary: Create a custom token scope.create_auto_assign_admin_app_settingDeletesCreate a new auto assign admin app setting. Destructive action; may require approval. API summary: Update the Okta Admin Console assignment setting.create_behaviorChanges dataCreate a new behavior. Required: name or type. API summary: Create a behavior detection rule.create_brandChanges dataCreate a new brand. Required: name. Search brands first to avoid duplicates. API summary: Create a brand.create_bundleChanges dataCreate a new bundle. API summary: Create a governance bundle.create_callbackChanges dataCreate a new callback. API summary: Verify the provisioning connection.create_captchaChanges dataCreate a new captcha. API summary: Create a CAPTCHA instance.create_configurationChanges dataCreate a new configuration. Required: level or mode. API summary: Update the bot protection configuration.create_connectionChanges dataCreate a new connection. API summary: Create a Cross App Access connection.create_csrChanges dataCreate a new csr. API summary: Generate a certificate signing request.create_csr_generate_csr_for_identity_providerChanges dataCreate a new csr. API summary: Generate a certificate signing request.create_device_assuranceChanges dataCreate a new device assurance. API summary: Create a device assurance policy.create_device_posture_checkChanges dataCreate a new device posture check. API summary: Create a device posture check.create_enrollChanges dataCreate a new enroll. API summary: Enroll a preregistered WebAuthn factor.create_event_hookChanges dataCreate a new event hook. Required: channel, events or name. API summary: Create an event hook.create_expire_password_with_temp_passwordDeletesCreate a new expire password with temp password. Destructive action; may require approval. API summary: Expire the password with a temporary password.create_failbackChanges dataCreate a new failback. API summary: Start the failback of your org.create_failoverChanges dataCreate a new failover. API summary: Start the failover of your org.create_forgot_passwordDeletesCreate a new forgot password. Destructive action; may require approval. API summary: Start forgot password flow.create_generateChanges dataCreate a new generate. Required: validity years. API summary: Generate a key credential.create_generate_generate_identity_provider_signing_keyChanges dataCreate a new generate. Required: validity years. API summary: Generate a new signing key credential for IdP.create_grantChanges dataCreate a new grant. Required: account id. API summary: Grant Okta Aerial access to your org.create_groupChanges dataCreate a group with a `profile` holding name and description.create_group_subscriptionChanges dataCreate a new subscription for a group. API summary: Create the memberships for the given identity source group.create_hide_end_user_footerChanges dataCreate a new hide end user footer. API summary: Set the hide dashboard footer preference.create_hook_keyChanges dataCreate a new hook key. API summary: Create a key.create_identity_source_groupChanges dataCreate a new group for a identity source. Search groups first to avoid duplicates. API summary: Create an identity source group.create_identity_source_userChanges dataCreate a new user for a identity source. Search users first to avoid duplicates. API summary: Create an identity source user.create_idpChanges dataCreate a new idp. Search idps first to avoid duplicates. API summary: Create an IdP.create_initiate_fulfillment_requestChanges dataCreate a new initiate fulfillment request. API summary: Generate a fulfillment request.create_inline_hookChanges dataCreate a new inline hook. API summary: Create an inline hook.create_inline_hook_executeChanges dataCreate a new execute for a inline hook. Required: body. API summary: Execute an inline hook.create_keyChanges dataCreate a new key. API summary: Add a JSON Web Key.create_key_rotateChanges dataCreate a new key rotate. API summary: Rotate all credential keys.create_linked_objectChanges dataCreate a new linked object. API summary: Create a linked object definition.create_log_streamChanges dataCreate a new log stream. Required: name or type. Search log streams first to avoid duplicates. API summary: Create a log stream.create_mappingChanges dataCreate a new mapping. Required: source group id. API summary: Create a group push mapping.create_messageChanges dataCreate a new message. Required: certificate source type or domain. API summary: Create a custom domain.create_message_customizationVisible to othersCreate a new customization for a message. Required: body, subject or language. Has effects visible outside this system. API summary: Create an email customization.create_message_test_email_serverVisible to othersCreate a new message for a message. Required: from address or to address. Has effects visible outside this system. API summary: Test an SMTP server configuration.create_modifyChanges dataCreate a new modify. Required: id or parameters. API summary: Update an external directory group membership.create_operationChanges dataCreate a new operation. API summary: Execute a realm assignment.create_opt_inChanges dataCreate a new opt in. API summary: Opt in the Admin Console to entitlement management.create_opt_in_opt_in_users_to_okta_communication_emailsChanges dataCreate a new opt in. API summary: Opt in to Okta user communication emails.create_opt_outChanges dataCreate a new opt out. API summary: Opt out the Admin Console from entitlement management.create_opt_out_opt_out_users_from_okta_communication_emailsChanges dataCreate a new opt out. API summary: Opt out of Okta user communication emails.create_orgChanges dataCreate a new org. API summary: Update the Org general settings.create_pageChanges dataCreate a new page. Required: body. API summary: Update the default provisioning connection.create_phoneChanges dataCreate a new phone. Required: authenticator id or profile. API summary: Create an auto-activated Phone authenticator enrollment.create_policyChanges dataCreate a new policy. Required: name or type. Search policies first to avoid duplicates. API summary: Create a policy.create_policy_mappingChanges dataCreate a new mapping for a policy. API summary: Map a resource to a policy.create_policy_ruleChanges dataCreate a new rule for a policy. Required: conditions, name or type. Search rules first to avoid duplicates. API summary: Create a policy rule.create_principal_rate_limitChanges dataCreate a new principal rate limit. Required: principal id or principal type. Search principal rate limits first to avoid duplicates. API summary: Create a principal rate limit.create_push_providerChanges dataCreate a new push provider. API summary: Create a push provider.create_realmChanges dataCreate a new realm. Search realms first to avoid duplicates. API summary: Create a realm.create_realm_assignmentChanges dataCreate a new realm assignment. API summary: Create a realm assignment.create_reset_factorChanges dataCreate a new reset factor. API summary: Reset the factors.create_reset_passwordDeletesCreate a new reset password. Required: send email. Destructive action; may require approval. API summary: Reset a password.create_resource_setChanges dataCreate a new resource set. Required: description, label or resources. API summary: Create a resource set.create_resource_set_bindingChanges dataCreate a new binding for a resource set. API summary: Create a role resource set binding.create_resource_set_resourceChanges dataCreate a new resource for a resource set. Required: conditions or resource orn or url. API summary: Add a resource set resource with conditions.create_revokeChanges dataCreate a new revoke. Required: account id. API summary: Revoke Okta Aerial access to your org.create_roleDeletesCreate a new role. Required: description, label or permissions. Destructive action; may require approval. API summary: Create a custom role.create_ruleChanges dataCreate a new rule. Search rules first to avoid duplicates. API summary: Create a group rule.create_secretChanges dataCreate a new secret. API summary: Create an OAuth 2.0 client secret.create_security_events_providerChanges dataCreate a new security events provider. Required: name, settings or type. API summary: Create a security events provider.create_session_start_importChanges dataCreate a new start import for a session. API summary: Start the import from the identity source.create_settingChanges dataCreate a new setting. Required: agent type. API summary: Update an agent pool update settings.create_simulateChanges dataCreate a new simulate. Required: items. API summary: Create a policy simulation.create_smsVisible to othersCreate a new sms. Has effects visible outside this system. API summary: Create an SMS template.create_streamChanges dataCreate a new stream. Required: delivery or events requested. API summary: Create an SSF stream.create_subscription_subscribeDeletesCreate a new subscribe for a subscription. Destructive action; may require approval. API summary: Subscribe a role to a specific notification type.create_subscription_subscribe_subscribe_by_notification_type_useChanges dataCreate a new subscribe for a subscription. API summary: Subscribe a user to a specific notification type.create_subscription_unsubscribeDeletesCreate a new unsubscribe for a subscription. Destructive action; may require approval. API summary: Unsubscribe a role from a specific notification type.create_subscription_unsubscribe_unsubscribe_by_notification_typeChanges dataCreate a new unsubscribe for a subscription. API summary: Unsubscribe a user from a specific notification type.create_suspendChanges dataCreate a new suspend. API summary: Suspend a Device.create_tacChanges dataCreate a new tac. Required: authenticator id. API summary: Create an auto-activated TAC authenticator enrollment.create_telephony_providerChanges dataCreate a new telephony provider. API summary: Create a custom telephony provider.create_third_party_admin_settingDeletesCreate a new third party admin setting. Destructive action; may require approval. API summary: Update the org third-party admin setting.create_trusted_originChanges dataCreate a new trusted origin. Search trusted origins first to avoid duplicates. API summary: Create a trusted origin.create_uischemaChanges dataCreate a new uischema. API summary: Create a UI schema.create_unsuspendChanges dataCreate a new unsuspend. API summary: Unsuspend a Device.create_update_pauseChanges dataCreate a new pause for a update. API summary: Pause an agent pool update.create_update_resumeChanges dataCreate a new resume for a update. API summary: Resume an agent pool update.create_update_retryChanges dataCreate a new retry for a update. API summary: Retry an agent pool update.create_update_stopChanges dataCreate a new stop for a update. API summary: Stop an agent pool update.create_userChanges dataCreate a user with a `profile` (firstName, lastName, email, login), optional `group_ids` to add them to, and `activate` true to send the activation email right away.create_user_2Changes dataCreate a new user. Required: body. Search users first to avoid duplicates. API summary: Add a JSON Web Key.create_user_enroll_factorChanges dataCreate a new user for a user. Search users first to avoid duplicates. API summary: Enroll a factor.create_user_expire_passwordDeletesCreate a new user. Search users first to avoid duplicates. Destructive action; may require approval. API summary: Expire the password.create_user_forgot_password_set_new_passwordDeletesCreate a new user. Search users first to avoid duplicates. Destructive action; may require approval. API summary: Reset password with recovery question.create_user_reactivate_userChanges dataCreate a new user. Search users first to avoid duplicates. API summary: Reactivate a user.create_verificationChanges dataCreate a new verification. Required: stream id. API summary: Verify an SSF stream.create_zoneChanges dataCreate a new zone. Required: name or type. Search zones first to avoid duplicates. API summary: Create a network zone.delete_a_policy_ruleDeletesPermanently delete a rule by rule id. Destructive action; may require approval. API summary: Delete a policy rule.delete_a_userDeletesPermanently delete a user by user id. Destructive action; may require approval.delete_a_user_typeDeletesPermanently delete a user by type id. Destructive action; may require approval. API summary: Delete a user type.delete_accountDeletesPermanently delete a account by account id. Destructive action; may require approval. API summary: Delete an Okta managed user account.delete_agent_pool_updateDeletesPermanently delete a update by update id. Destructive action; may require approval. API summary: Delete an agent pool update.delete_an_api_service_integration_instance_secretDeletesPermanently delete a secret by secret id. Destructive action; may require approval. API summary: Delete an API service integration instance secret.delete_an_app_service_accountDeletesPermanently delete a account by account id. Destructive action; may require approval. API summary: Delete an app service account.delete_an_email_domainDeletesPermanently delete a message by message id. Destructive action; may require approval. API summary: Delete an email domain.delete_an_idp_key_credentialDeletesPermanently delete a key by kid. Destructive action; may require approval. API summary: Delete an IdP key credential.delete_an_smtp_server_configurationDeletesPermanently delete a message by message id. Destructive action; may require approval. API summary: Delete an SMTP server configuration.delete_api_serviceDeletesPermanently delete a api service by api service id. Destructive action; may require approval. API summary: Delete an API service integration instance.delete_api_tokenDeletesPermanently delete a api token by api token id. Destructive action; may require approval. API summary: Revoke an API token.delete_appDeletesPermanently delete a app by app id. Destructive action; may require approval. API summary: Delete an application.delete_app_federated_claimDeletesPermanently delete a federated claim by claim id. Destructive action; may require approval.delete_app_grantDeletesPermanently delete a grant by grant id. Destructive action; may require approval. API summary: Revoke an app grant.delete_app_interclient_allowed_appDeletesPermanently delete a interclient allowed app by allowed app id. Destructive action; may require approval. API summary: Delete an interclient trust mapping.delete_app_remove_app_target_instance_role_for_clientDeletesPermanently delete a app by app id. Destructive action; may require approval. API summary: Unassign a client role app instance target.delete_app_remove_app_target_role_from_clientDeletesPermanently delete a app by app name. Destructive action; may require approval. API summary: Unassign a client role app target.delete_app_tokenDeletesPermanently delete a token by token id. Destructive action; may require approval. API summary: Revoke an application token.delete_app_tokensMoves moneyPermanently delete a token by app id. Financial or irreversible action; may require approval. API summary: Revoke all application tokens.delete_authenticator_aaguidDeletesPermanently delete a aaguid by aaguid. Destructive action; may require approval. API summary: Delete a custom AAGUID.delete_authorization_serverDeletesPermanently delete a authorization server by auth server id. Destructive action; may require approval. API summary: Delete an authorization server.delete_authorization_server_associated_serverDeletesPermanently delete a associated server by associated server id. Destructive action; may require approval. API summary: Delete an associated authorization server.delete_authorization_server_claimDeletesPermanently delete a claim by claim id. Destructive action; may require approval. API summary: Delete a custom token claim.delete_authorization_server_policyDeletesPermanently delete a policy by policy id. Destructive action; may require approval.delete_authorization_server_scopeDeletesPermanently delete a scope by scope id. Destructive action; may require approval. API summary: Delete a custom token scope.delete_behaviorDeletesPermanently delete a behavior by behavior id. Destructive action; may require approval. API summary: Delete a behavior detection rule.delete_bounces_listMoves moneyPermanently delete a bounce. Financial or irreversible action; may require approval. API summary: Remove bounced emails.delete_brandDeletesPermanently delete a brand by brand id. Destructive action; may require approval.delete_bundleDeletesPermanently delete a bundle by bundle id. Destructive action; may require approval. API summary: Delete a governance bundle.delete_captchaDeletesPermanently delete a captcha by captcha id. Destructive action; may require approval. API summary: Delete a CAPTCHA instance.delete_captchasMoves moneyPermanently delete a captcha. Financial or irreversible action; may require approval. API summary: Delete the org-wide CAPTCHA settings.delete_client_grantsMoves moneyPermanently delete a grant by client id. Financial or irreversible action; may require approval. API summary: Revoke all grants for a client.delete_client_roleDeletesPermanently delete a role by role assignment id. Destructive action; may require approval. API summary: Unassign a client role.delete_client_tokenDeletesPermanently delete a token by token id. Destructive action; may require approval. API summary: Revoke a refresh token for a client.delete_client_token_revoke_token_for_user_and_clientDeletesPermanently delete a token by token id. Destructive action; may require approval. API summary: Revoke a token for a client.delete_client_tokensMoves moneyPermanently delete a token by client id. Financial or irreversible action; may require approval. API summary: Revoke all refresh tokens for a client.delete_client_tokens_revoke_tokens_for_user_and_clientMoves moneyPermanently delete a token by client id. Financial or irreversible action; may require approval. API summary: Revoke all refresh tokens for a client.delete_connectionDeletesPermanently delete a connection by connection id. Destructive action; may require approval. API summary: Delete a Cross App Access connection.delete_csrDeletesPermanently delete a csr by csr id. Destructive action; may require approval. API summary: Revoke a certificate signing request.delete_csr_revoke_csr_for_identity_providerDeletesPermanently delete a csr by idp csr id. Destructive action; may require approval. API summary: Revoke a certificate signing request.delete_currentsMoves moneyPermanently delete a current. Financial or irreversible action; may require approval. API summary: Revoke the current API token.delete_deviceDeletesPermanently delete a device by device id. Destructive action; may require approval.delete_device_assuranceDeletesPermanently delete a device assurance by device assurance id. Destructive action; may require approval. API summary: Delete a device assurance policy.delete_device_posture_checkDeletesPermanently delete a device posture check by posture check id. Destructive action; may require approval.delete_event_hookDeletesPermanently delete a event hook by event hook id. Destructive action; may require approval. API summary: Delete an event hook.delete_groupDeletesPermanently delete a group by group id. Destructive action; may require approval.delete_group_ownerDeletesPermanently delete a owner by owner id. Destructive action; may require approval. API summary: Delete a group owner.delete_group_remove_group_target_role_from_clientDeletesPermanently delete a group by group id. Destructive action; may require approval. API summary: Unassign a client role group target.delete_group_subscriptionDeletesPermanently delete a subscription by member external id. Destructive action; may require approval. API summary: Delete the memberships for the specified identity source group.delete_hook_keyDeletesPermanently delete a hook key by hook key id. Destructive action; may require approval. API summary: Delete a key.delete_identity_source_groupDeletesPermanently delete a group by group or external id. Destructive action; may require approval. API summary: Delete an identity source group.delete_identity_source_sessionDeletesPermanently delete a session by session id. Destructive action; may require approval. API summary: Delete an identity source session.delete_identity_source_userDeletesPermanently delete a user by external id. Destructive action; may require approval. API summary: Delete an identity source user.delete_idpDeletesPermanently delete a idp by idp id. Destructive action; may require approval. API summary: Delete an IdP.delete_inline_hookDeletesPermanently delete a inline hook by inline hook id. Destructive action; may require approval. API summary: Delete an inline hook.delete_keyDeletesPermanently delete a key by key id. Destructive action; may require approval. API summary: Delete a Custom Authorization Server Public JSON Web Key.delete_linked_objectDeletesPermanently delete a linked object by linked object name. Destructive action; may require approval. API summary: Delete a linked object definition.delete_log_streamDeletesPermanently delete a log stream by log stream id. Destructive action; may require approval.delete_mappingDeletesPermanently delete a mapping by mapping id. Destructive action; may require approval. API summary: Delete a group push mapping.delete_messageDeletesPermanently delete a message by message id. Destructive action; may require approval. API summary: Delete a custom domain.delete_message_customizationDeletesPermanently delete a customization by customization id. Destructive action; may require approval. API summary: Delete an email customization.delete_message_customizationsMoves moneyPermanently delete a customization by template name. Financial or irreversible action; may require approval. API summary: Delete all email customizations.delete_pagesMoves moneyPermanently delete a page by brand id. Financial or irreversible action; may require approval. API summary: Delete the customized error page.delete_policyDeletesPermanently delete a policy by policy id. Destructive action; may require approval.delete_policy_mappingDeletesPermanently delete a mapping by mapping id. Destructive action; may require approval. API summary: Delete a policy resource mapping.delete_policy_ruleDeletesPermanently delete a rule by rule id. Destructive action; may require approval. API summary: Delete a policy rule.delete_push_providerDeletesPermanently delete a push provider by push provider id. Destructive action; may require approval.delete_realmDeletesPermanently delete a realm by realm id. Destructive action; may require approval.delete_realm_assignmentDeletesPermanently delete a realm assignment by assignment id. Destructive action; may require approval.delete_resource_setDeletesPermanently delete a resource set by resource set id or label. Destructive action; may require approval.delete_resource_set_bindingDeletesPermanently delete a binding by role id or label. Destructive action; may require approval. API summary: Delete a role resource set binding.delete_resource_set_resourceDeletesPermanently delete a resource by resource id. Destructive action; may require approval. API summary: Delete a resource set resource.delete_roleDeletesPermanently delete a role by role id or label. Destructive action; may require approval. API summary: Delete a custom role.delete_role_permissionDeletesPermanently delete a permission by permission type. Destructive action; may require approval. API summary: Delete a custom role permission.delete_ruleDeletesPermanently delete a rule by group rule id. Destructive action; may require approval. API summary: Delete a group rule.delete_secretDeletesPermanently delete a secret by secret id. Destructive action; may require approval. API summary: Delete an OAuth 2.0 client secret.delete_security_events_providerDeletesPermanently delete a security events provider by security event provider id. Destructive action; may require approval.delete_sessionDeletesPermanently delete a session by session id. Destructive action; may require approval. API summary: Revoke a session.delete_smsDeletesPermanently delete a sms by template id. Destructive action; may require approval. API summary: Delete an SMS template.delete_streamsMoves moneyPermanently delete a stream. Financial or irreversible action; may require approval. API summary: Delete an SSF stream.delete_telephony_providerDeletesPermanently delete a telephony provider by custom telephony provider id. Destructive action; may require approval. API summary: Delete a custom telephony provider.delete_the_customized_sign_in_pageMoves moneyPermanently delete a page by brand id. Financial or irreversible action; may require approval. API summary: Delete the customized sign-in page.delete_the_preview_error_pageMoves moneyPermanently delete a page by brand id. Financial or irreversible action; may require approval. API summary: Delete the preview error page.delete_the_preview_sign_in_pageMoves moneyPermanently delete a page by brand id. Financial or irreversible action; may require approval. API summary: Delete the preview sign-in page.delete_theme_background_imagesMoves moneyPermanently delete a background image by theme id. Financial or irreversible action; may require approval. API summary: Delete the background image.delete_theme_faviconsMoves moneyPermanently delete a favicon by theme id. Financial or irreversible action; may require approval. API summary: Delete the favicon.delete_theme_logosMoves moneyPermanently delete a logo by theme id. Financial or irreversible action; may require approval. API summary: Delete the logo.delete_trusted_originDeletesPermanently delete a trusted origin by trusted origin id. Destructive action; may require approval.delete_uischemaDeletesPermanently delete a uischema by uischema id. Destructive action; may require approval. API summary: Delete a UI schema.delete_userDeletesPermanently delete a user by key id. Destructive action; may require approval. API summary: Delete an OAuth 2.0 client JSON Web Key.delete_user_authenticator_enrollmentDeletesPermanently delete a authenticator enrollment by enrollment id. Destructive action; may require approval. API summary: Delete an authenticator enrollment.delete_user_enrollmentDeletesPermanently delete a enrollment by authenticator enrollment id. Destructive action; may require approval. API summary: Delete a WebAuthn preregistration factor.delete_user_grantDeletesPermanently delete a grant by grant id. Destructive action; may require approval. API summary: Revoke a user grant.delete_user_grantsMoves moneyPermanently delete a grant by user id. Financial or irreversible action; may require approval. API summary: Revoke all user grants.delete_user_linked_objectDeletesPermanently delete a linked object by relationship name. Destructive action; may require approval. API summary: Delete a linked object value.delete_user_unenroll_factorDeletesPermanently delete a user by user id 2. Destructive action; may require approval. API summary: Unenroll a factor.delete_zoneDeletesPermanently delete a zone by zone id. Destructive action; may require approval. API summary: Delete a network zone.detach_appDeletesDetach a app (app name). Destructive action; may require approval. API summary: Unassign a group role app target.detach_app_unassign_app_instance_target_from_admin_role_for_userDeletesDetach a app (app id). Destructive action; may require approval. API summary: Unassign an admin role app instance target.detach_app_unassign_app_instance_target_to_app_admin_role_for_grDeletesDetach a app (app id). Destructive action; may require approval. API summary: Unassign a group role app instance target.detach_app_unassign_app_target_from_app_admin_role_for_userDeletesDetach a app (app name). Destructive action; may require approval. API summary: Unassign an admin role app target.detach_groupDeletesDetach a group (target group id). Destructive action; may require approval. API summary: Unassign a group role group target.detach_group_to_appDeletesDetach a group (group id). Destructive action; may require approval. API summary: Unassign an application group.detach_group_unassign_group_target_from_user_admin_roleDeletesDetach a group (group id). Destructive action; may require approval. API summary: Unassign an admin role group target.detach_role_to_groupDeletesDetach a role (role assignment id). Destructive action; may require approval. API summary: Unassign a group role.detach_role_to_userDeletesDetach a role (role assignment id). Destructive action; may require approval. API summary: Unassign a user role.detach_user_to_bindingDeletesDetach a user (user id). Destructive action; may require approval. API summary: Unassign a role resource set binding member.detach_user_to_idpDeletesDetach a user (user id). Destructive action; may require approval. API summary: Unlink a user from IdP.export_v1s_blocklistsExport v1s. API summary: List all blocked email domains.get_accountGet one account by account id. API summary: Retrieve an Okta managed user account.get_agent_pool_updateGet one update for a agent pool by update id. API summary: Retrieve an agent pool update by ID.get_api_serviceGet one api service by api service id. API summary: Retrieve an API service integration instance.get_api_tokenGet one api token by api token id. API summary: Retrieve an API token's metadata.get_appGet one app by `app_id`, with its label, status and sign-on mode.get_app_featureGet one feature for a app by feature name. API summary: Retrieve a feature.get_app_federated_claimGet one federated claim for a app by claim id. API summary: Retrieve a federated claim.get_app_grantGet one grant for a app by grant id. API summary: Retrieve an app grant.get_app_groupGet one group for a app by group id. API summary: Retrieve an application group.get_app_tokenGet one token for a app by token id. API summary: Retrieve an application token.get_app_userGet one user for a app by user id. API summary: Retrieve an application user.get_authenticatorGet one authenticator by authenticator id. API summary: Retrieve an authenticator.get_authenticator_aaguidGet one aaguid for a authenticator by aaguid. API summary: Retrieve a custom AAGUID.get_authenticator_methodGet one method for a authenticator by method type. API summary: Retrieve an authenticator method.get_authorization_serverGet one authorization server by auth server id. API summary: Retrieve an authorization server.get_authorization_server_claimGet one claim for a authorization server by claim id. API summary: Retrieve a custom token claim.get_authorization_server_policyGet one policy for a authorization server by policy id. API summary: Retrieve a policy.get_authorization_server_scopeGet one scope for a authorization server by scope id. API summary: Retrieve a custom token scope.get_behaviorGet one behavior by behavior id. API summary: Retrieve a behavior detection rule.get_binding_userGet one user for a binding by user id. API summary: Retrieve a role resource set binding member.get_brandGet one brand by brand id. API summary: Retrieve a brand.get_brand_themeGet one theme for a brand by theme id. API summary: Retrieve a theme.get_brand_well_known_uriGet one well known uri for a brand by path. API summary: Retrieve the well-known URI of a specific brand.get_bundleGet one bundle by bundle id. API summary: Retrieve a governance bundle.get_captchaGet one captcha by captcha id. API summary: Retrieve a CAPTCHA instance.get_client_roleGet one role for a client by role assignment id. API summary: Retrieve a client role.get_client_tokenGet one token for a client by token id. API summary: Retrieve a refresh token for a client.get_connectionGet one connection by connection id. API summary: Retrieve a Cross App Access connection.get_contactGet one contact by contact type. API summary: Retrieve the contact type user.get_csrGet one csr by csr id. API summary: Retrieve a certificate signing request.get_default_contentGet one default content by template name. API summary: Retrieve a preview of the email template default content.get_deviceGet one device by device id. API summary: Retrieve a device.get_device_accountGet one account for a device by account id. API summary: Retrieve an OS account.get_device_assuranceGet one device assurance by device assurance id. API summary: Retrieve a device assurance policy.get_device_integrationGet one device integration by device integration id. API summary: Retrieve a device integration.get_device_posture_checkGet one device posture check by posture check id. API summary: Retrieve a device posture check.get_dr_statusGet the current status of a dr. API summary: Retrieve the disaster recovery status for all domains.get_event_hookGet one event hook by event hook id. API summary: Retrieve an event hook.get_factor_paymentGet one payment for a factor by payment id. API summary: Retrieve a factor transaction status.get_featureGet one feature by feature id. API summary: Retrieve a feature.get_first_party_app_settingGet one first party app setting by app name. API summary: Retrieve the Okta application settings.get_groupGet one group by `group_id`, with its name, description and type.get_group_queryGet one query for a group by result id. API summary: Retrieve the results of an AD group query.get_group_roleGet one role for a group by role assignment id. API summary: Retrieve a group role assignment.get_hook_keyGet one hook key by hook key id. API summary: Retrieve a key by ID.get_identity_source_groupGet one group for a identity source by group or external id. API summary: Retrieve an identity source group.get_identity_source_sessionGet one session for a identity source by session id. API summary: Retrieve an identity source session.get_identity_source_userGet one user for a identity source by external id. API summary: Retrieve an identity source user.get_idpGet one idp by idp id. API summary: Retrieve an IdP.get_idp_userGet one user for a idp by user id. API summary: Retrieve a user for IdP.get_inline_hookGet one inline hook by inline hook id. API summary: Retrieve an inline hook.get_keyGet one key by key id. API summary: Retrieve a key credential.get_key_get_o_auth2_resource_server_json_web_keyGet one key by key id. API summary: Retrieve a Custom Authorization Server Public JSON Web Key.get_linked_objectGet one linked object by linked object name. API summary: Retrieve a linked object definition.get_log_streamGet one log stream by log stream id. API summary: Retrieve a log stream.get_log_stream_get_log_stream_schemaGet one log stream by log stream type. API summary: Retrieve the log stream schema for the schema type.get_mappingGet one mapping by mapping id. API summary: Retrieve a group push mapping.get_messageGet one message by template name. API summary: Retrieve an email template.get_message_customizationGet one customization for a message by customization id. API summary: Retrieve an email customization.get_pageGet one page by brand id. API summary: Retrieve the preview error page preview.get_policyGet one policy by policy id. API summary: Retrieve a policy.get_policy_mappingGet one mapping for a policy by mapping id. API summary: Retrieve a policy resource mapping.get_policy_ruleGet one rule for a policy by rule id. API summary: Retrieve a policy rule.get_preference_end_user_footerChanges dataGet one preference. API summary: Set the show dashboard footer preference.get_principal_rate_limitGet one principal rate limit by principal rate limit id. API summary: Retrieve a principal rate limit.get_publicGet one public by key id. API summary: Retrieve a public key.get_push_providerGet one push provider by push provider id. API summary: Retrieve a push provider.get_realmGet one realm by realm id. API summary: Retrieve a realm.get_realm_assignmentGet one realm assignment by assignment id. API summary: Retrieve a realm assignment.get_resource_setGet one resource set by resource set id or label. API summary: Retrieve a resource set.get_resource_set_bindingGet one binding for a resource set by role id or label. API summary: Retrieve a role resource set binding.get_resource_set_resourceGet one resource for a resource set by resource id. API summary: Retrieve a resource set resource.get_roleGet one role by role id or label. API summary: Retrieve a role.get_role_governanceGet one governance for a role by grant id. API summary: Retrieve a user role governance source.get_role_permissionGet one permission for a role by permission type. API summary: Retrieve a custom role permission.get_role_subscriptionGet one subscription for a role by notification type. API summary: Retrieve a subscription for a role.get_ruleGet one rule by group rule id. API summary: Retrieve a group rule.get_secretGet one secret by secret id. API summary: Retrieve an OAuth 2.0 client secret.get_security_events_providerGet one security events provider by security event provider id. API summary: Retrieve the security events provider.get_sessionGet one session by session id. API summary: Retrieve a session.get_smsGet one sms by template id. API summary: Retrieve an SMS template.get_statusGet one status by domain. API summary: Retrieve the disaster recovery status for a domain.get_stream_statusGet the current status of a stream. API summary: Retrieve the SSF stream status.get_telephony_providerGet one telephony provider by custom telephony provider id. API summary: Retrieve a custom telephony provider.get_trusted_originGet one trusted origin by trusted origin id. API summary: Retrieve a trusted origin.get_uischemaGet one uischema by uischema id. API summary: Retrieve a UI schema.get_userGet one user by `user_id`, login or email (use 'me' for yourself), with profile, status and last login.get_user_2Get one user by key id. API summary: Retrieve an OAuth 2.0 client JSON Web Key.get_user_authenticator_enrollmentGet one authenticator enrollment for a user by enrollment id. API summary: Retrieve an authenticator enrollment.get_user_grantGet one grant for a user by grant id. API summary: Retrieve a user grant.get_user_linked_objectGet one linked object for a user by relationship name. API summary: List the primary or all of the associated linked object values.get_user_roleGet one role for a user by role assignment id. API summary: Retrieve a user role assignment.get_user_subscriptionGet one subscription for a user by notification type. API summary: Retrieve a subscription for a user.get_zoneGet one zone by zone id. API summary: Retrieve a network zone.list_accountsList accounts. Optional filters: match. Results are paginated. API summary: List all Okta managed user accounts.list_activesList actives. API summary: List the active signing key credential for IdP.list_admin_notificationsList admin notifications. API summary: Retrieve the rate limit admin notification settings.list_aerialsList aerials. API summary: Retrieve Okta Aerial consent for your org.list_agent_pool_updatesList updates for a agent pool. Optional filters: scheduled. API summary: List all agent pool updates.list_agent_poolsList agent pools. Optional filters: limit per pool type or pool type. Results are paginated. API summary: List all agent pools.list_all_admin_role_app_targetsList apps. Results are paginated. API summary: List all admin role app targets.list_all_admin_role_group_targetsList groups. Results are paginated. API summary: List all admin role group targets.list_all_api_service_integration_instance_secretsList secrets. API summary: List all API service integration instance secrets.list_all_app_service_accountsList accounts. Optional filters: match. Results are paginated. API summary: List all app service accounts.list_all_certificate_signing_requestsList csrs. API summary: List all certificate signing requests.list_all_client_role_app_targetsList apps. Results are paginated. API summary: List all client role app targets.list_all_client_role_group_targetsList groups. Results are paginated. API summary: List all client role group targets.list_all_credential_keysList keys. API summary: List all credential keys.list_all_default_device_posture_checksList pages. API summary: List all default device posture checks.list_all_devices_for_an_enrolled_userList users for a user. API summary: List all devices for an enrolled user.list_all_enrolled_factorsList users for a user. API summary: List all enrolled factors.list_all_enrolled_smtp_serversVisible to othersEmail a message. Has effects visible outside this system. API summary: List all enrolled SMTP servers.list_all_idp_key_credentialsList keys. Results are paginated. API summary: List all IdP key credentials.list_all_policy_rulesList rules for a policy. Results are paginated. API summary: List all policy rules.list_all_profile_mappingsList mappings. Optional filters: source id or target id. Results are paginated. API summary: List all profile mappings.list_all_refresh_tokens_for_a_clientList tokens for a client. Results are paginated. API summary: List all refresh tokens for a client.list_all_signing_key_credentials_for_idpList keys. API summary: List all signing key credentials for IdP.list_all_supported_factorsList users. API summary: List all supported factors.list_all_supported_security_questionsList users. API summary: List all supported security questions.list_all_the_oauth_2_0_client_json_web_keysList users. API summary: List all the OAuth 2.0 client JSON Web Keys.list_all_tokens_from_oidc_idpList users. API summary: List all tokens from OIDC IdP.list_all_user_blocksList users for a user. API summary: List all user blocks.list_all_user_typesList users. API summary: List all user types.list_all_users_with_role_assignmentsList users. Results are paginated. API summary: List all users with role assignments.list_api_servicesList api services. Results are paginated. API summary: List all API service integration instances.list_api_tokensList api tokens. API summary: List all API token metadata.list_app_authenticator_configurationsList app authenticator configurations. Optional filters: oauth client id. API summary: Retrieve the well-known app authenticator configuration.list_app_featuresList features for a app. API summary: List all features.list_app_federated_claimsList federated claims for a app. API summary: List all configured federated claims.list_app_grantsList grants for a app. API summary: List all app grants.list_app_groupsList the groups assigned to an app.list_app_interclient_allowed_appsList interclient allowed apps for a app. API summary: List all allowed apps for a target app.list_app_interclient_target_appsList interclient target apps for a app. API summary: List all target apps for an allowed app.list_app_tokensList tokens for a app. Results are paginated. API summary: List all application refresh tokens.list_app_usersList the users assigned to an app, optionally filtered with `q`.list_app_users_2List users for a app. API summary: Retrieve the default app user schema for an app.list_apple_app_site_associationsList apple app site associations. API summary: Retrieve the customized apple-app-site-association URI content.list_appsList the apps in your Okta org, optionally filtered by name with `q` or by `filter` such as 'status eq "ACTIVE"'.list_apps_2List apps. Results are paginated. API summary: List all group role app targets.list_assetlinks_jsonsList assetlinks jsons. API summary: Retrieve the customized assetlinks.json URI content.list_authenticator_aaguidsList aaguids for a authenticator. API summary: List all custom AAGUIDs.list_authenticator_methodsList methods for a authenticator. API summary: List all methods of an authenticator.list_authenticator_settingsList authenticator settings. API summary: Retrieve the authenticator settings.list_authenticatorsList authenticators. API summary: List all authenticators.list_authorization_server_claimsList claims for a authorization server. API summary: List all custom token claims.list_authorization_server_customersList customers for a authorization server. API summary: List all client resources for an authorization server.list_authorization_server_policiesList policies for a authorization server. API summary: List all policies.list_auto_assign_admin_app_settingsList auto assign admin app settings. API summary: Retrieve the Okta Admin Console assignment setting.list_behaviorsList behaviors. API summary: List all behavior detection rules.list_binding_usersList users for a binding. Results are paginated. API summary: List all role resource set binding members.list_brand_domainsList domains for a brand. API summary: List all domains associated with a brand.list_brand_themesList themes for a brand. API summary: List all themes.list_brand_well_known_urisList well known uris for a brand. API summary: Retrieve all the well-known URIs.list_bundle_entitlementsList entitlements for a bundle. Results are paginated. API summary: List all entitlements for a governance bundle.list_bundlesList bundles. Results are paginated. API summary: List all governance bundles.list_captchasList captchas. API summary: List all CAPTCHA instances.list_client_grantsList grants for a client. Results are paginated. API summary: List all grants for a client.list_client_privileges_settingsList client privileges settings. API summary: Retrieve the default public client app role setting.list_client_rolesList roles for a client. API summary: List all client role assignments.list_client_tokensList tokens for a client. Results are paginated. API summary: List all refresh tokens for a client.list_companiesList companies. API summary: Retrieve the Org metadata.list_configurationsList configurations. API summary: Retrieve the bot protection configuration.list_connectionsList connections. Optional filters: status, requesting app id, resource app id, active apps only, requesting app name or resource app name. Results are paginated. API summary: Retrieve all Cross App Access connections.list_contactsList contacts. API summary: List all org contact types.list_csrsList csrs. API summary: List all certificate signing requests.list_customersList customers. API summary: Retrieve the per-client rate limit settings.list_device_accountsList accounts for a device. API summary: List all OS accounts for a device.list_device_assurancesList device assurances. API summary: List all device assurance policies.list_device_integrationsList device integrations. API summary: List all device integrations.list_device_posture_checksList device posture checks. API summary: List all device posture checks.list_device_usersList users for a device. API summary: List all users for a device.list_entitlement_valuesList values for a entitlement. Results are paginated. API summary: List all values for a governance bundle entitlement.list_event_hooksList event hooks. API summary: List all event hooks.list_feature_dependenciesList dependencies for a feature. API summary: List all dependencies.list_feature_dependentsList dependents for a feature. API summary: List all dependents.list_featuresList features. API summary: List all features.list_governance_resourcesList resources for a governance. API summary: Retrieve the user role governance source resources.list_group_appsList the apps assigned to a group.list_group_membersList the users who are members of a group.list_group_rolesList roles for a group. API summary: List all group role assignments.list_group_subscriptionsList subscriptions for a group. Results are paginated. API summary: Retrieve the memberships for the given identity source group.list_groupsList groups. Results are paginated. API summary: List all group role group targets.list_hook_keysList hook keys. API summary: List all keys.list_inline_hooksList inline hooks. Optional filters: type. API summary: List all inline hooks.list_keysList keys. API summary: List all key credentials.list_keys_list_o_auth2_resource_server_json_web_keysList keys. API summary: List all Custom Authorization Server Public JSON Web Keys.list_linked_objectsList linked objects. API summary: List all linked object definitions.list_log_streamsList log streams. API summary: List the log stream schemas.list_mappingsList mappings. Optional filters: last updated, source group id or status. Results are paginated. API summary: List all group push mappings.list_message_customizationsList customizations for a message. Results are paginated. API summary: List all email customizations.list_message_default_contentsList default contents for a message. Optional filters: language. API summary: Retrieve an email template default content.list_message_settingsList settings for a message. API summary: Retrieve the email template settings.list_messagesList messages. API summary: List all custom domains.list_metadataList metadata. Optional filters: kid. API summary: Preview the application SAML metadata.list_okta_communicationsList okta communications. API summary: Retrieve the Okta communication settings.list_okta_supportsList okta supports. API summary: Retrieve the Okta Support settings.list_operationsList operations. Results are paginated. API summary: List all realm assignment operations.list_opt_insList opt ins. API summary: Retrieve the Admin Console opt-in status.list_orgsList orgs. API summary: Retrieve the Org general settings.list_pagesList pages. API summary: Retrieve the default provisioning connection.list_policy_mappingsList mappings for a policy. API summary: List all resources mapped to a policy.list_policy_rulesList rules for a policy. API summary: List all policy rules.list_preferencesList preferences. API summary: Retrieve the org preferences.list_push_providersList push providers. Optional filters: type. API summary: List all push providers.list_realm_assignmentsList realm assignments. Results are paginated. API summary: List all realm assignments.list_resource_set_bindingsList bindings for a resource set. Results are paginated. API summary: List all role resource set bindings.list_resource_set_resourcesList resources for a resource set. Results are paginated. API summary: List all resource set resources.list_resource_setsList resource sets. Results are paginated. API summary: List all resource sets.list_role_governancesList governances for a role. API summary: Retrieve all user role governance sources.list_role_permissionsList permissions for a role. API summary: List all custom role permissions.list_role_subscriptionsList subscriptions for a role. API summary: List all subscriptions for a role.list_role_targetsList targets for a role. Optional filters: assignment type. Results are paginated. API summary: Retrieve a role target by assignment type.list_rolesList roles. Results are paginated. API summary: List all custom roles.list_secretsList secrets. API summary: List all OAuth 2.0 client secrets.list_security_events_providersList security events providers. API summary: List all security events providers.list_settingsList settings. API summary: Retrieve an agent pool update's settings.list_smsList sms. Optional filters: template type. API summary: List all SMS templates.list_ssf_configurationsList ssf configurations. API summary: Retrieve the SSF transmitter metadata.list_streamsList streams. Optional filters: stream id. API summary: Retrieve the SSF stream configuration(s).list_telephony_providersList telephony providers. API summary: List all custom telephony providers.list_third_party_admin_settingsList third party admin settings. API summary: Retrieve the org third-party admin setting.list_ticketsList tickets. API summary: List all Okta Support cases.list_uischemasList uischemas. API summary: List all UI schemas.list_user_appsList the apps assigned to a user, as shown on their Okta dashboard.list_user_authenticator_enrollmentsList authenticator enrollments for a user. Optional filters: disclose identifiers. API summary: List all authenticator enrollments.list_user_customersList customers for a user. API summary: List all clients.list_user_enrollmentsList enrollments for a user. API summary: List all WebAuthn preregistration factors.list_user_grantsList grants for a user. Optional filters: scope id. Results are paginated. API summary: List all user grants.list_user_groupsList the groups a user belongs to.list_user_idpsList idps for a user. API summary: List all IdPs for user.list_user_rolesList roles for a user. API summary: List all user role assignments.list_user_subscriptionsList subscriptions for a user. API summary: List all subscriptions for a user.list_usersList users. API summary: Retrieve a JSON Web Key Set (JWKS) for the default provisioning connection.list_warning_thresholdsList warning thresholds. API summary: Retrieve the rate limit warning threshold percentage.list_webauthnsList webauthns. API summary: Retrieve the customized webauthn URI content.list_well_known_uri_customizedsList customizeds for a well known uri. API summary: Retrieve the customized content of the specified well-known URI.list_widget_versionsList widget versions. API summary: List all Sign-In Widget versions.publish_a_certificate_signing_requestVisible to othersPublish a user (csr id). Has effects visible outside this system. API summary: Publish a certificate signing request.remove_user_from_groupDeletesRemove a user from a group by `group_id` and `user_id`; they lose apps they only had through that group.replace_an_email_domainVisible to othersUpdate an existing message identified by message id. Has effects visible outside this system. API summary: Replace an email domain.replace_the_blocked_email_domainsDeletesExport v1s. Destructive action; may require approval. API summary: Replace the blocked email domains.replace_the_preview_sign_in_pageDeletesPreview a page (brand id). Destructive action; may require approval. API summary: Replace the preview sign-in page.replace_the_user_lockout_settingsVisible to othersUpdate an existing user. Has effects visible outside this system. API summary: Replace the user lockout settings.retrieve_a_certificate_signing_requestGet one csr by idp csr id. API summary: Retrieve a certificate signing request.retrieve_a_custom_domainGet one message by message id. API summary: Retrieve a custom domain.retrieve_a_factorGet one user for a user by user id 2. API summary: Retrieve a factor.retrieve_a_policy_ruleGet one rule for a policy by rule id. API summary: Retrieve a policy rule.retrieve_a_preview_of_an_email_customizationGet one customization for a message by customization id. API summary: Retrieve a preview of an email customization.retrieve_a_profile_mappingGet one mapping by mapping id. API summary: Retrieve a profile mapping.retrieve_a_refresh_token_for_a_clientGet one token for a client by token id. API summary: Retrieve a refresh token for a client.retrieve_a_signing_key_credential_for_idpGet one key by kid. API summary: Retrieve a signing key credential for IdP.retrieve_a_user_s_classificationList users for a user. API summary: Retrieve a user's classification.retrieve_a_user_schemaGet one user by schema id. API summary: Retrieve a user schema.retrieve_a_user_typeGet one user by type id. API summary: Retrieve a user type.retrieve_a_yubikey_otp_tokenGet one user by user id. API summary: Retrieve a YubiKey OTP token.retrieve_an_app_service_accountGet one account by account id. API summary: Retrieve an app service account.retrieve_an_authorization_server_keyGet one key by key id. API summary: Retrieve an authorization server key.retrieve_an_email_domainGet one message by message id. API summary: Retrieve an email domain.retrieve_an_idp_key_credentialGet one key by kid. API summary: Retrieve an IdP key credential.retrieve_an_smtp_server_configurationGet one message by message id. API summary: Retrieve an SMTP server configuration.retrieve_the_customized_error_pageList pages. API summary: Retrieve the customized error page.retrieve_the_customized_sign_in_pageList pages. API summary: Retrieve the customized sign-in page.retrieve_the_default_error_pageList pages. API summary: Retrieve the default error page.retrieve_the_default_group_schemaList pages. API summary: Retrieve the default group schema.retrieve_the_default_sign_in_pageList pages. API summary: Retrieve the default sign-in page.retrieve_the_error_page_sub_resourcesList pages. API summary: Retrieve the error page sub-resources.retrieve_the_org_wide_captcha_settingsList captchas. API summary: Retrieve the org-wide CAPTCHA settings.retrieve_the_preview_sign_in_page_previewGet one page by brand id. API summary: Retrieve the preview sign-in page preview.retrieve_the_sign_out_page_settingsList pages. API summary: Retrieve the sign-out page settings.retrieve_the_threatinsight_configurationList configurations. API summary: Retrieve the ThreatInsight configuration.retrieve_the_user_lockout_settingsList users. API summary: Retrieve the user lockout settings.retrieve_the_user_s_riskList users for a user. API summary: Retrieve the user's risk.search_authorization_server_associated_serversSearch associated servers for a authorization server by trusted or q. Use this to find existing associated servers before creating a new associated server. Results are paginated. API summary: List all associated authorization servers.search_authorization_server_scopesSearch scopes for a authorization server by q or filter. Use this to find existing scopes before creating a new scope. Results are paginated. API summary: List all custom token scopes.search_authorization_serversSearch authorization servers by q. Use this to find existing authorization servers before creating a new authorization server. Results are paginated. API summary: List all authorization servers.search_brandsSearch brands by q. Use this to find existing brands before creating a new brand. Results are paginated. API summary: List all brands.search_devicesSearch devices by search. Use this to find existing devices before creating a new device. Results are paginated. API summary: List all devices.search_directory_groupsVisible to othersSearch groups for a directory. Use this to find existing groups before creating a new group. Has effects visible outside this system. API summary: Submit a query for AD Group.search_group_ownersSearch owners for a group by search. Use this to find existing owners before creating a new owner. Results are paginated. API summary: List all group owners.search_groupsFind groups by name with `q`, or with a `search` expression such as 'type eq "OKTA_GROUP"'.search_idp_usersSearch users for a idp by q. Use this to find existing users before creating a new user. Results are paginated. API summary: List all users for IdP.search_idpsSearch idps by q or type. Use this to find existing idps before creating a new idp. Results are paginated. API summary: List all IdPs.search_log_streamsSearch log streams by filter. Use this to find existing log streams before creating a new log stream. Results are paginated. API summary: List all log streams.search_logsSearch logs by since, until, filter, q or sort order. Use this to find existing logs before creating a new log. Results are paginated. API summary: List all System Log events.search_policiesSearch policies by type, status, q, sort by or resource id. Use this to find existing policies before creating a new policy. Results are paginated. API summary: List all policies.search_principal_rate_limitsSearch principal rate limits by filter. Use this to find existing principal rate limits before creating a new principal rate limit. Results are paginated. API summary: List all principal rate limits.search_realmsSearch realms by search, sort by or sort order. Use this to find existing realms before creating a new realm. Results are paginated. API summary: List all realms.search_rulesSearch rules by search. Use this to find existing rules before creating a new rule. Results are paginated. API summary: List all group rules.search_trusted_originsSearch trusted origins by q or filter. Use this to find existing trusted origins before creating a new trusted origin. Results are paginated. API summary: List all trusted origins.search_usersFind users by name or email with `q`, or with an Okta `search` expression such as 'profile.department eq "Sales"' or 'status eq "LOCKED_OUT"'.search_users_2Search users by filter, for download, sort by or sort order. Use this to find existing users before creating a new user. Results are paginated. API summary: List all YubiKey OTP tokens.search_zonesSearch zones by filter. Use this to find existing zones before creating a new zone. Results are paginated. API summary: List all network zones.send_messageVisible to othersEmail a message. Has effects visible outside this system. API summary: List all email domains.send_templateVisible to othersEmail a template (brand id). Has effects visible outside this system. Results are paginated. API summary: List all email templates.send_testVisible to othersSend a test (template name). Has effects visible outside this system. API summary: Send a test email.send_test_send_test_custom_telephony_provider_credentialVisible to othersSend a test (custom telephony provider id). Has effects visible outside this system. API summary: Send a test message from a custom telephony provider.send_v1_pinVisible to othersSend a v1. Has effects visible outside this system. API summary: Send a PIN to user.submit_enrollmentVisible to othersMark error a enrollment (authenticator enrollment id). Has effects visible outside this system. API summary: Assign the fulfillment error status to a WebAuthn preregistration factor.submit_keyVisible to othersClone a key (key id). Has effects visible outside this system. API summary: Clone a key credential.submit_key_cloneVisible to othersClone a key (kid). Has effects visible outside this system. API summary: Clone a signing key credential for IdP.submit_messageVisible to othersVerify a message (domain id). Has effects visible outside this system. API summary: Verify a custom domain.submit_message_verifyVisible to othersVerify a message (email domain id). Has effects visible outside this system. API summary: Verify an email domain.submit_method_rp_id_domainVisible to othersVerify a method (web authn method type). Has effects visible outside this system. API summary: Verify a Relying Party ID domain.submit_pageDeletesPreview a page (brand id). Destructive action; may require approval. API summary: Replace the preview error page.submit_policyVisible to othersClone a policy (policy id). Has effects visible outside this system. API summary: Clone an existing policy.submit_security_eventDeletesSubmit a security event. Destructive action; may require approval. API summary: Publish a security event token.submit_updateVisible to othersActivate a update (update id). Has effects visible outside this system. API summary: Activate an agent pool update.submit_userVisible to othersActivate a user (app id). Has effects visible outside this system. API summary: Activate the default provisioning connection.submit_user_activateVisible to othersActivate a user (key id). Has effects visible outside this system. API summary: Activate an OAuth 2.0 client JSON Web Key.submit_user_activate_api_service_integration_instance_secretVisible to othersActivate a user (secret id). Has effects visible outside this system. API summary: Activate an API service integration instance secret.submit_user_activate_applicationVisible to othersActivate a user (app id). Has effects visible outside this system. API summary: Activate an application.submit_user_activate_authenticatorVisible to othersActivate a user (authenticator id). Has effects visible outside this system. API summary: Activate an authenticator.submit_user_activate_authenticator_methodVisible to othersActivate a user (method type). Has effects visible outside this system. API summary: Activate an authenticator method.submit_user_activate_authorization_serverVisible to othersActivate a user (auth server id). Has effects visible outside this system. API summary: Activate an authorization server.submit_user_activate_authorization_server_policyVisible to othersActivate a user (policy id). Has effects visible outside this system. API summary: Activate a policy.submit_user_activate_authorization_server_policy_ruleVisible to othersActivate a user (rule id). Has effects visible outside this system. API summary: Activate a policy rule.submit_user_activate_behavior_detection_ruleVisible to othersActivate a user (behavior id). Has effects visible outside this system. API summary: Activate a behavior detection rule.submit_user_activate_custom_telephony_credentialVisible to othersActivate a user (custom telephony provider id). Has effects visible outside this system. API summary: Activate a custom telephony provider.submit_user_activate_deviceVisible to othersActivate a user (device id). Has effects visible outside this system. API summary: Activate a device.submit_user_activate_device_integrationVisible to othersActivate a user (device integration id). Has effects visible outside this system. API summary: Activate a device integration.submit_user_activate_event_hookVisible to othersActivate a user (event hook id). Has effects visible outside this system. API summary: Activate an event hook.submit_user_activate_factorVisible to othersActivate a user (factor id). Has effects visible outside this system. API summary: Activate a factor.submit_user_activate_group_ruleVisible to othersActivate a user (group rule id). Has effects visible outside this system. API summary: Activate a group rule.submit_user_activate_identity_providerVisible to othersActivate a user (idp id). Has effects visible outside this system. API summary: Activate an IdP.submit_user_activate_inline_hookVisible to othersActivate a user (inline hook id). Has effects visible outside this system. API summary: Activate an inline hook.submit_user_activate_log_streamVisible to othersActivate a user (log stream id). Has effects visible outside this system. API summary: Activate a log stream.submit_user_activate_network_zoneVisible to othersActivate a user (zone id). Has effects visible outside this system. API summary: Activate a network zone.submit_user_activate_o_auth2_client_secretVisible to othersActivate a user (secret id). Has effects visible outside this system. API summary: Activate an OAuth 2.0 client secret.submit_user_activate_o_auth2_resource_server_json_web_keyVisible to othersActivate a user (key id). Has effects visible outside this system. API summary: Activate a Custom Authorization Server Public JSON Web Key.submit_user_activate_policyVisible to othersActivate a user (policy id). Has effects visible outside this system. API summary: Activate a policy.submit_user_activate_policy_ruleVisible to othersActivate a user (rule id). Has effects visible outside this system. API summary: Activate a policy rule.submit_user_activate_realm_assignmentVisible to othersActivate a user (assignment id). Has effects visible outside this system. API summary: Activate a realm assignment.submit_user_activate_security_events_provider_instanceVisible to othersActivate a user (security event provider id). Has effects visible outside this system. API summary: Activate a security events provider.submit_user_activate_trusted_originVisible to othersActivate a user (trusted origin id). Has effects visible outside this system. API summary: Activate a trusted origin.submit_user_activate_userVisible to othersActivate a user (user id). Has effects visible outside this system.submit_user_publishVisible to othersPublish a user (idp csr id). Has effects visible outside this system. API summary: Publish a certificate signing request.submit_user_refreshVisible to othersRefresh a user (session id). Has effects visible outside this system. API summary: Refresh a session.submit_user_resendVisible to othersResend a user (factor id). Has effects visible outside this system. API summary: Resend a factor enrollment.submit_user_verifyVisible to othersVerify a user (event hook id). Has effects visible outside this system. API summary: Verify an event hook.submit_user_verify_factorVisible to othersVerify a user (factor id). Has effects visible outside this system. API summary: Verify a factor.submit_v1Visible to othersActivate a v1. Has effects visible outside this system. API summary: Activate a preregistered WebAuthn factor.suspend_userChanges dataSuspend an active user so they cannot sign in, keeping their apps and groups; undo with unsuspend_user.unassign_user_from_appDeletesRemove a user's direct access to an app by `app_id` and `user_id`; this can deprovision their account in that app.unlock_userVisible to othersUnlock a user who is locked out after too many failed sign-ins, so they can try their password again.unsuspend_userChanges dataRestore sign-in for a suspended user.update_a_profile_mappingChanges dataUpdate an existing mapping identified by mapping id. API summary: Update a profile mapping.update_a_user_typeChanges dataUpdate an existing user identified by type id. API summary: Update a user type.update_accountChanges dataUpdate an existing account identified by account id. Only the fields you pass are changed. API summary: Update an Okta managed user account.update_admin_notificationsMoves moneyUpdate an existing admin notification. Financial or irreversible action; may require approval. API summary: Replace the rate limit admin notification settings.update_agent_pool_updateChanges dataUpdate an existing update identified by update id. API summary: Update an agent pool update by ID.update_an_existing_app_service_accountChanges dataUpdate an existing account identified by account id. Only the fields you pass are changed. API summary: Update an existing app service account.update_an_smtp_server_configurationVisible to othersUpdate an existing message identified by message id. Only the fields you pass are changed. Has effects visible outside this system. API summary: Update an SMTP server configuration.update_api_tokenDeletesUpdate an existing api token identified by api token id. Destructive action; may require approval. API summary: Upsert an API token network condition.update_appChanges dataUpdate an existing app identified by app id. API summary: Replace an application.update_app_featureChanges dataUpdate an existing feature identified by feature name. API summary: Update a feature.update_app_federated_claimChanges dataUpdate an existing federated claim identified by claim id. API summary: Replace a federated claim.update_app_groupChanges dataUpdate an existing group identified by group id. Only the fields you pass are changed. API summary: Update an application group.update_app_userChanges dataUpdate an existing user identified by user id. API summary: Update an application user.update_authenticatorChanges dataUpdate an existing authenticator identified by authenticator id. API summary: Replace an authenticator.update_authenticator_aaguidChanges dataUpdate an existing aaguid identified by aaguid. Only the fields you pass are changed. API summary: Update a custom AAGUID.update_authenticator_methodChanges dataUpdate an existing method identified by method type. API summary: Replace an authenticator method.update_authenticator_settingsVisible to othersUpdate an existing authenticator setting. Has effects visible outside this system. API summary: Replace the authenticator settings.update_authorization_serverChanges dataUpdate an existing authorization server identified by auth server id. API summary: Replace an authorization server.update_authorization_server_claimChanges dataUpdate an existing claim identified by claim id. API summary: Replace a custom token claim.update_authorization_server_policyChanges dataUpdate an existing policy identified by policy id. API summary: Replace a policy.update_authorization_server_scopeChanges dataUpdate an existing scope identified by scope id. API summary: Replace a custom token scope.update_behaviorChanges dataUpdate an existing behavior identified by behavior id. API summary: Replace a behavior detection rule.update_binding_usersMoves moneyUpdate an existing user identified by role id or label. Only the fields you pass are changed. Financial or irreversible action; may require approval. API summary: Add more role resource set binding members.update_brandChanges dataUpdate an existing brand identified by brand id. API summary: Replace a brand.update_brand_themeChanges dataUpdate an existing theme identified by theme id. API summary: Replace a theme.update_bundleChanges dataUpdate an existing bundle identified by bundle id. API summary: Replace a governance bundle.update_captchaChanges dataUpdate an existing captcha identified by captcha id. API summary: Replace a CAPTCHA instance.update_captchasVisible to othersUpdate an existing captcha. Has effects visible outside this system. API summary: Replace the org-wide CAPTCHA settings.update_connectionChanges dataUpdate an existing connection identified by connection id. Only the fields you pass are changed. API summary: Update a Cross App Access connection.update_contactChanges dataUpdate an existing contact identified by contact type. API summary: Replace the contact type user.update_customersVisible to othersUpdate an existing customer. Has effects visible outside this system. API summary: Replace the per-client rate limit settings.update_device_assuranceChanges dataUpdate an existing device assurance identified by device assurance id. API summary: Replace a device assurance policy.update_device_posture_checkChanges dataUpdate an existing device posture check identified by posture check id. API summary: Replace a device posture check.update_event_hookChanges dataUpdate an existing event hook identified by event hook id. API summary: Replace an event hook.update_featureChanges dataUpdate an existing feature identified by lifecycle. API summary: Update a feature lifecycle.update_first_party_app_settingChanges dataUpdate an existing first party app setting identified by app name. API summary: Replace the Okta application settings.update_groupChanges dataUpdate an existing group identified by group id. API summary: Replace a group.update_hook_keyChanges dataUpdate an existing hook key identified by hook key id. API summary: Replace a key.update_identity_source_groupChanges dataUpdate an existing group identified by group or external id. API summary: Update an identity source group.update_identity_source_userChanges dataUpdate an existing user identified by external id. Only the fields you pass are changed. API summary: Update an identity source user.update_idpChanges dataUpdate an existing idp identified by idp id. API summary: Replace an IdP.update_inline_hookChanges dataUpdate an existing inline hook identified by inline hook id. API summary: Replace an inline hook.update_log_streamChanges dataUpdate an existing log stream identified by log stream id. API summary: Replace a log stream.update_mappingChanges dataUpdate an existing mapping identified by mapping id. Only the fields you pass are changed. API summary: Update a group push mapping.update_messageChanges dataUpdate an existing message identified by message id. API summary: Replace a custom domain's brand.update_message_certificatesVisible to othersUpdate an existing certificate identified by domain id. Has effects visible outside this system. API summary: Upsert the custom domain's certificate.update_message_customizationVisible to othersUpdate an existing customization identified by customization id. Has effects visible outside this system. API summary: Replace an email customization.update_message_settingsDeletesUpdate an existing setting identified by template name. Destructive action; may require approval. API summary: Replace the email template settings.update_orgsVisible to othersUpdate an existing org. Has effects visible outside this system. API summary: Replace the Org general settings.update_pagesVisible to othersUpdate an existing page identified by brand id. Has effects visible outside this system. API summary: Replace the customized error page.update_passwordDeletesCreate a new user. Search users first to avoid duplicates. Destructive action; may require approval. API summary: Update password.update_policyChanges dataUpdate an existing policy identified by policy id. API summary: Replace a policy.update_policy_ruleChanges dataUpdate an existing rule identified by rule id. API summary: Replace a policy rule.update_principal_rate_limitChanges dataUpdate an existing principal rate limit identified by principal rate limit id. API summary: Replace a principal rate limit.update_push_providerChanges dataUpdate an existing push provider identified by push provider id. API summary: Replace a push provider.update_realmChanges dataUpdate an existing realm identified by realm id. API summary: Replace the realm profile.update_realm_assignmentChanges dataUpdate an existing realm assignment identified by assignment id. API summary: Replace a realm assignment.update_recovery_questionChanges dataCreate a new user. Search users first to avoid duplicates. API summary: Update recovery question.update_resource_setChanges dataUpdate an existing resource set identified by resource set id or label. API summary: Replace a resource set.update_resource_set_resourceChanges dataUpdate an existing resource identified by resource id. API summary: Replace the resource set resource conditions.update_resource_set_resourcesVisible to othersUpdate an existing resource identified by resource set id or label. Only the fields you pass are changed. Has effects visible outside this system. API summary: Add more resources to a resource set.update_roleDeletesUpdate an existing role identified by role id or label. Destructive action; may require approval. API summary: Replace a custom role.update_role_permissionDeletesUpdate an existing permission identified by permission type. Destructive action; may require approval. API summary: Replace a custom role permission.update_ruleChanges dataUpdate an existing rule identified by group rule id. API summary: Replace a group rule.update_security_events_providerChanges dataUpdate an existing security events provider identified by security event provider id. API summary: Replace a security events provider.update_smsVisible to othersUpdate an existing sms identified by template id. Has effects visible outside this system. API summary: Replace an SMS template.update_streamsVisible to othersUpdate an existing stream. Only the fields you pass are changed. Has effects visible outside this system. API summary: Update an SSF stream.update_telephony_providerChanges dataUpdate an existing telephony provider identified by custom telephony provider id. Only the fields you pass are changed. API summary: Update a custom telephony provider credential.update_telephony_provider_as_primaryChanges dataUpdate an existing telephony provider identified by custom telephony provider id. API summary: Set a custom telephony provider as a primary telephony provider.update_the_group_profile_schemaChanges dataCreate a new page. API summary: Update the group profile schema.update_the_threatinsight_configurationChanges dataCreate a new configuration. Required: action. API summary: Update the ThreatInsight configuration.update_ticketChanges dataUpdate an existing ticket identified by ticket number. Only the fields you pass are changed. API summary: Update an Okta Support case.update_trusted_originChanges dataUpdate an existing trusted origin identified by trusted origin id. API summary: Replace a trusted origin.update_uischemaChanges dataUpdate an existing uischema identified by uischema id. API summary: Replace a UI schema.update_userChanges dataUpdate a user's profile attributes by `user_id`, e.g. title, department, mobilePhone or manager; only the fields you pass change.update_user_2Changes dataUpdate an existing user identified by schema id. API summary: Update a user schema.update_usersVisible to othersUpdate an existing user identified by user id. Has effects visible outside this system. API summary: Replace the user's classification.update_users_upsert_user_riskVisible to othersUpdate an existing user identified by user id. Has effects visible outside this system. API summary: Upsert the user's risk.update_v1s_featureMoves moneyUpdate an existing v1. Financial or irreversible action; may require approval. API summary: Replace the Okta Personal admin settings.update_warning_thresholdsVisible to othersUpdate an existing warning threshold. Has effects visible outside this system. API summary: Replace the rate limit warning threshold percentage.update_well_known_uri_customizedsVisible to othersUpdate an existing customized identified by path. Has effects visible outside this system. API summary: Replace the customized well-known URI of the specific path.update_zoneChanges dataUpdate an existing zone identified by zone id. API summary: Replace a network zone.upload_bulk_deleteVisible to othersUpload a bulk delete (session id). Has effects visible outside this system. API summary: Upload the data to be deleted in Okta.upload_bulk_group_memberships_deleteVisible to othersUpload a bulk group memberships delete (session id). Has effects visible outside this system. API summary: Upload the group memberships to be deleted in Okta.upload_bulk_group_memberships_upsertVisible to othersUpload a bulk group memberships upsert (session id). Has effects visible outside this system. API summary: Upload the group memberships to be upserted in Okta.upload_bulk_groups_deleteVisible to othersUpload a bulk groups delete (session id). Has effects visible outside this system. API summary: Upload the group external IDs to be deleted in Okta.upload_bulk_groups_upsertVisible to othersUpload a bulk groups upsert (session id). Has effects visible outside this system. API summary: Upload the group profiles without memberships to be upserted in Okta.upload_bulk_upsertVisible to othersUpload a bulk upsert (session id). Has effects visible outside this system. API summary: Upload the data to be upserted in Okta.upload_userDeletesUpload a user. Destructive action; may require approval. API summary: Upload a YubiKey OTP seed.
Set up in three steps
- 1
Pick the app
Create a free HeyMyApps account and choose Okta from the app list.
- 2
Paste your key
Enter your Okta org address and an API token. In the Okta Admin Console go to Security → API → Tokens and click Create token. Name it and copy the value, because Okta shows it only once. The token has the permissions of the admin who created it.
- 3
Add the link to your AI
You get a personal MCP link. Add it to Claude, ChatGPT or Cursor:
- Click your name, then Settings › Connectors › Add custom connector.
- Paste your link as the Remote MCP server URL.
- Switch it on from the + menu in a chat.
Questions
What can the AI do in Okta?
The AI can search and read users, groups and apps, and list group members, a user's groups and apps, and the users and groups assigned to an app. It can create users and groups, update user profiles, add users to groups and apps, assign groups to apps, suspend, unsuspend and unlock users, and remove users from groups or apps.
Does the AI see my Okta credentials?
No. Your Okta API token is encrypted at rest and never shown to the AI. After you save it, it is not shown again, not even to you. The AI only sees the results of the tools it calls.
Can I control what the AI is allowed to do?
Yes. You choose which tools are switched on, so you can start read-only. The token has the permissions of the admin who created it, so the tool choice matters. Removing a user from a group or an app can cost them access, and those tools, like unlocking users, can require your approval before they run. Every tool call is logged.
Does it work with ChatGPT?
Yes. In ChatGPT go to Settings › Apps & Connectors › Advanced and turn on Developer mode, then add your HeyMyApps link. Developer mode needs a paid ChatGPT plan: Plus, Pro, Business or Enterprise. The same link also works in Claude (Settings › Connectors › Add custom connector), Cursor and other MCP clients.
What does it cost?
HeyMyApps has a free plan with no credit card required. Paid plans bill per completed task. You also need your own Okta account.
What happens when the AI removes someone's access?
When the AI removes a user from a group, they lose the apps they only had through that group. When it removes a user's direct access to an app, their account in that app can be deprovisioned. Keep these tools off or require approval for them. Suspending a user is the gentler option: they cannot sign in, but apps and groups are kept, and unsuspend_user restores sign-in.
Let your AI work in Okta today.
Start free. Your key stays encrypted, and you decide what the AI may do.
Connect Okta freeHeyMyApps is not affiliated with Okta. Product names are trademarks of their owners.