Okta

Lists all applications in your Okta org with pagination, filtering, and search

Retrieves a specific application by ID from your Okta org

Lists all group assignments for an application

Retrieves a specific group assignment for an application

Lists all users assigned to an application

Retrieves a specific user assigned to an application

Lists all devices with pagination support and flexible search options

Retrieves a device by its ID

Permanently deletes a device. Device must be in DEACTIVATED status first.

Activates a device by setting its status to ACTIVE

Deactivates a device by setting its status to DEACTIVATED

Lists all groups with pagination support

Retrieves a specific group by ID from your org

Adds a new group with OKTA_GROUP type to your org

Replaces the profile for a group of OKTA_GROUP type

Deletes a group of OKTA_GROUP or APP_GROUP type from your org

Lists all users that are a member of a group

Assigns a user to a group with OKTA_GROUP type

Unassigns a user from a group with OKTA_GROUP type

Lists all policies of a given type

Retrieves a specific policy by ID. Use list_policies to obtain the policyId.

Creates a new policy of the specified type. The returned policy ID can be used with get_policy, replace_policy, delete_p…

Replaces a policy with the provided data. Use list_policies or create_policy to obtain the policyId.

Deletes a policy by ID

Activates a policy by setting its status to ACTIVE

Deactivates a policy by setting its status to INACTIVE

Clones an existing ACCESS_POLICY to create a copy

Simulates a policy evaluation to test access outcomes

Lists all applications mapped to an ACCESS_POLICY. Use list_policies with type ACCESS_POLICY to obtain the policyId.

Lists all resources mapped to a policy. Use list_policies to obtain the policyId.

Retrieves a specific policy resource mapping. Use list_policy_mappings to obtain the mappingId.

Lists all rules for a specific policy. Use list_policies to obtain the policyId first.

Retrieves a specific rule for a policy

Creates a new rule for a policy. Use list_policies to obtain the policyId. The created rule ID is returned in the respon…

Replaces a policy rule with the provided data. Use list_policy_rules to obtain the ruleId.

Deletes a policy rule. Use list_policy_rules to obtain the ruleId.

Activates a policy rule. Use list_policy_rules to obtain the ruleId.

Deactivates a policy rule. Use list_policy_rules to obtain the ruleId.

Lists all Realms with pagination support

Retrieves a Realm by its ID

Creates a new Realm

Replaces the realm profile by its ID

Deletes a Realm by its ID

Retrieves information about the currently authenticated user from the OAuth 2.0 UserInfo endpoint.

Lists events from the Okta System Log with filtering, keyword search, and pagination

Lists all users in your org with pagination and flexible query options

Retrieves a user from your Okta org by ID, login, or shortname

Creates a new user in your Okta org with or without credentials

Updates a user’s profile or credentials with partial update semantics

Replaces a user’s profile, credentials, or both using strict-update semantics

Lists information about how a user is blocked from accessing their account

Permanently deletes a user from your Okta organization

Lists all user types in your Okta organization

Retrieves a user type by ID

Creates a new user type in your Okta organization

Partially updates an existing user type

Fully replaces an existing user type

Permanently deletes a user type

Responds to Okta’s one-time verification GET by echoing the x-okta-verification-challenge header value back in the JSON…

Emitted when a new user account is created in Okta (provisioned by an admin, sourced from a directory, or self-registere…

Emitted when a user transitions from STAGED, PROVISIONED, or DEPROVISIONED to ACTIVE status and gains access. Maps to Ok…

Emitted when a user is deactivated — access is revoked and sessions are invalidated, but the account is preserved (statu…

Emitted when a user is temporarily suspended — sign-in is blocked and sessions are invalidated, but the user can be unsu…

Emitted when a user-deletion request is initiated — the user enters DELETED status. Note that `user.lifecycle.delete.con…

Emitted when a user’s password is reset (admin-initiated, self-service, or via the connector’s reset action). Maps to Ok…

Emitted when one or more user profile attributes are changed (first name, last name, email, phone, custom attributes, et…

Emitted when a Universal Logout signal terminates all of a user’s sessions and tokens across federated apps. Maps to Okt…

Emitted when a new group is created in Okta. Maps to Okta event group.lifecycle.create.

Emitted when a group is deleted from Okta. Note that there is no group.lifecycle.modify or update event — group attr…

Emitted when a user is added as a member of a group. Maps to Okta event group.user_membership.add.

Emitted when a user is removed from a group’s membership. Maps to Okta event group.user_membership.remove.

Emitted when a device transitions from STAGED to ACTIVE status and becomes trusted. Maps to Okta event `device.lifecycle…

Emitted when a device is deactivated and loses its trusted status. Maps to Okta event device.lifecycle.deactivate.

Emitted when a device is permanently removed from Okta. Maps to Okta event device.lifecycle.delete.

Emitted when a user is assigned to an application — the core “who has access to what” IAM signal. Maps to Okta event `ap…

Emitted when a user is removed from an application — deprovisioning / access-loss signal critical for downstream cleanup…

Emitted when an application sign-on policy denies a user access during sign-in. Security / compliance signal — useful fo…

Emitted when a new Okta admin API token is created. Security-critical signal — useful for audit logging, anomaly detecti…

Emitted when an Okta admin API token is revoked. Security signal — useful for tracking credential lifecycle and detectin…