Activates an inactive application.
Parameters: Name Type DescriptionappId
String
Success
Parameters: Name Type DescriptionauthServerId
String
Activate Authorization Server Policy
Parameters: Name Type DescriptionauthServerId
String policyId
String
Activate Authorization Server Policy Rule
Parameters: Name Type DescriptionauthServerId
String policyId
String ruleId
String
Success
Parameters: Name Type DescriptioneventHookId
String
The `sms` and `token:software:totp` factor types require activation to complete the enrollment process.
Parameters:Activates a specific group rule by id from your organization
Parameters: Name Type DescriptionruleId
String
Activates an inactive IdP.
Parameters: Name Type DescriptionidpId
String
Activates the Inline Hook matching the provided id
Parameters: Name Type DescriptioninlineHookId
String
Activate Network Zone
Parameters: Name Type DescriptionzoneId
String
Success
Parameters: Name Type DescriptiontrustedOriginId
String
Activates a policy.
Parameters: Name Type DescriptionpolicyId
String
Activates a policy rule.
Parameters: Name Type DescriptionpolicyId
String ruleId
String
Activates a user. This operation can only be performed on users with a `STAGED` status. Activation of a user is an asynchronous operation. The user will have the `transitioningToStatus` property with a value of `ACTIVE` during activation to indicate that the user hasn't completed the asynchronous operation. The user will have a status of `ACTIVE` when the activation process is complete.
Parameters: Name Type DescriptionuserId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description sendEmail
String <optional>
Success
Parameters: Name Type DescriptionuserId
String roleId
String
Add App Instance Target to App Administrator Role given to a Group
Parameters: Name Type DescriptiongroupId
String roleId
String appName
String applicationId
String
Success
Parameters: Name Type DescriptionuserId
String roleId
String appName
String
Success
Parameters: Name Type DescriptiongroupId
String roleId
String appName
String
Add App Instance Target to App Administrator Role given to a User
Parameters: Name Type DescriptionuserId
String roleId
String appName
String applicationId
String
Convenience method for /api/v1/groups/{groupId}/roles/{roleId}/targets/groups/{targetGroupId}
Parameters: Name Type DescriptiongroupId
String roleId
String targetGroupId
String
Success
Parameters: Name Type DescriptionuserId
String roleId
String groupId
String
Success
Parameters:Adds a user to a group with 'OKTA_GROUP' type.
Parameters: Name Type DescriptiongroupId
String userId
String
Assigns a Role to a Group
Parameters: Name Type DescriptiongroupId
String assignRoleRequest
AssignRoleRequest queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description disableNotifications
String <optional>
Assigns a role to a user.
Parameters: Name Type DescriptionuserId
String assignRoleRequest
AssignRoleRequest queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description disableNotifications
String <optional>
Assigns an user to an application with [credentials](#application-user-credentials-object) and an app-specific [profile](#application-user-profile-object). Profile mappings defined for the application are first applied before applying any profile properties specified in the request.
Parameters: Name Type DescriptionappId
String appUser
AppUser
Changes a user's password by validating the user's current password. This operation can only be performed on users in `STAGED`, `ACTIVE`, `PASSWORD_EXPIRED`, or `RECOVERY` status that have a valid password credential
Parameters: Name Type DescriptionuserId
String changePasswordRequest
ChangePasswordRequest queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description strict
String <optional>
Changes a user's recovery question & answer credential by validating the user's current password. This operation can only be performed on users in **STAGED**, **ACTIVE** or **RECOVERY** `status` that have a valid password credential
Parameters:Removes all active identity provider sessions. This forces the user to authenticate on the next operation. Optionally revokes OpenID Connect and OAuth refresh and access tokens issued to the user.
Parameters: Name Type DescriptionuserId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description oauthTokens
String <optional>
Clones a X.509 certificate for an application key credential from a source application to target application.
Parameters: Name Type DescriptionappId
String keyId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description targetAid
String <optional>
Clones a X.509 certificate for an IdP signing key credential from a source IdP to target IdP
Parameters: Name Type DescriptionidpId
String keyId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description targetIdpId
String <optional>
Adds a new application to your Okta organization.
Parameters: Name Type Descriptionapplication
Application queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description activate
String <optional>
Assigns a group to an application
Parameters:Success
Parameters:Success
Parameters:Creates a policy rule for the specified Custom Authorization Server and Policy.
Parameters:Creates the Certificate for the Domain.
Parameters:Creates your domain.
Parameters: Name Type Descriptiondomain
Domain
Success
Parameters:Adds a new group with `OKTA_GROUP` type to your organization.
Parameters: Name Type Descriptiongroup
Group
Creates a group rule to dynamically add users to the specified group if they match the condition
Parameters:Adds a new IdP to your organization.
Parameters:Adds a new X.509 certificate credential to the IdP key store.
Parameters:Success
Parameters:Adds a new network zone to your Okta organization.
Parameters:Success
Parameters: Name Type DescriptionauthServerId
String oAuth2Claim
OAuth2Claim
Success
Parameters: Name Type DescriptionauthServerId
String oAuth2Scope
OAuth2Scope
Success
Parameters:Creates a policy.
Parameters: Name Type Descriptionpolicy
Policy queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description activate
String <optional>
Creates a policy rule.
Parameters: Name Type DescriptionpolicyId
String policyRule
PolicyRule
Creates a new session for a user with a valid session token. Use this API if, for example, you want to set the session cookie yourself instead of allowing Okta to set it, or want to hold the session ID in order to delete a session via the API instead of visiting the logout URL.
Parameters:Adds a new custom SMS template to your organization.
Parameters:Creates a new user in your Okta organization with or without credentials.
Parameters: Name Type DescriptioncreateUserRequest
CreateUserRequest queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description activate
String <optional>
provider
String <optional>
nextLogin
String <optional>
Creates a new User Type. A default User Type is automatically created along with your org, and you may add another 9 User Types for a maximum of 10.
Parameters:Deactivates an active application.
Parameters: Name Type DescriptionappId
String
Success
Parameters: Name Type DescriptionauthServerId
String
Deactivate Authorization Server Policy
Parameters: Name Type DescriptionauthServerId
String policyId
String
Deactivate Authorization Server Policy Rule
Parameters: Name Type DescriptionauthServerId
String policyId
String ruleId
String
Success
Parameters: Name Type DescriptioneventHookId
String
Deactivates a specific group rule by id from your organization
Parameters: Name Type DescriptionruleId
String
Deactivates an active IdP.
Parameters: Name Type DescriptionidpId
String
Deactivates the Inline Hook matching the provided id
Parameters: Name Type DescriptioninlineHookId
String
Deactivates a network zone.
Parameters: Name Type DescriptionzoneId
String
Deletes a user permanently. This operation can only be performed on users that have a `DEPROVISIONED` status. **This action cannot be recovered!**
Parameters: Name Type DescriptionuserId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description sendEmail
String <optional>
Success
Parameters: Name Type DescriptiontrustedOriginId
String
Deactivates a policy.
Parameters: Name Type DescriptionpolicyId
String
Deactivates a policy rule.
Parameters: Name Type DescriptionpolicyId
String ruleId
String
Deactivates a user. This operation can only be performed on users that do not have a `DEPROVISIONED` status. Deactivation of a user is an asynchronous operation. The user will have the `transitioningToStatus` property with a value of `DEPROVISIONED` during deactivation to indicate that the user hasn't completed the asynchronous operation. The user will have a status of `DEPROVISIONED` when the deactivation process is complete.
Parameters: Name Type DescriptionuserId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description sendEmail
String <optional>
Removes an inactive application.
Parameters: Name Type DescriptionappId
String
Removes a group assignment from an application.
Parameters: Name Type DescriptionappId
String groupId
String
Removes an assignment for a user from an application.
Parameters: Name Type DescriptionappId
String userId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description sendEmail
String <optional>
Success
Parameters: Name Type DescriptionauthServerId
String
Success
Parameters: Name Type DescriptionauthServerId
String policyId
String
Deletes a Policy Rule defined in the specified Custom Authorization Server and Policy.
Parameters: Name Type DescriptionpolicyId
String authServerId
String ruleId
String
Deletes a Domain by `id`.
Parameters: Name Type DescriptiondomainId
String
Success
Parameters: Name Type DescriptioneventHookId
String
Unenrolls an existing factor for the specified user, allowing the user to enroll a new factor.
Parameters: Name Type DescriptionuserId
String factorId
String
Removes a group with `OKTA_GROUP` type from your organization.
Parameters: Name Type DescriptiongroupId
String
Removes a specific group rule by id from your organization
Parameters: Name Type DescriptionruleId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description removeUsers
String <optional>
Removes an IdP from your organization.
Parameters: Name Type DescriptionidpId
String
Deletes a specific IdP Key Credential by `kid` if it is not currently being used by an Active or Inactive IdP.
Parameters: Name Type DescriptionkeyId
String
Deletes the Inline Hook matching the provided id. Once deleted, the Inline Hook is unrecoverable. As a safety precaution, only Inline Hooks with a status of INACTIVE are eligible for deletion.
Parameters: Name Type DescriptioninlineHookId
String
Success
Parameters: Name Type DescriptionlinkedObjectName
String
Removes network zone.
Parameters: Name Type DescriptionzoneId
String
Success
Parameters: Name Type DescriptionauthServerId
String claimId
String
Success
Parameters: Name Type DescriptionauthServerId
String scopeId
String
Success
Parameters: Name Type DescriptiontrustedOriginId
String
Removes a policy.
Parameters: Name Type DescriptionpolicyId
String
Removes a policy rule.
Parameters: Name Type DescriptionpolicyId
String ruleId
String
Removes an SMS template.
Parameters: Name Type DescriptiontemplateId
String
Deletes a User Type permanently. This operation is not permitted for the default type, nor for any User Type that has existing users
Parameters: Name Type DescriptiontypeId
String
Convenience method for /api/v1/sessions/{sessionId}
Parameters: Name Type DescriptionsessionId
String
Enrolls a user with a supported factor.
Parameters: Name Type DescriptionuserId
String userFactor
UserFactor queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description updatePhone
String <optional>
templateId
String <optional>
tokenLifetimeSeconds
String <optional>
activate
String <optional>
Executes the Inline Hook matching the provided inlineHookId using the request body as the input. This will send the provided data through the Channel and return a response if it matches the correct data contract. This execution endpoint should only be used for testing purposes.
Parameters:This operation transitions the user to the status of `PASSWORD_EXPIRED` so that the user is required to change their password at their next login.
Parameters: Name Type DescriptionuserId
String
This operation transitions the user to the status of `PASSWORD_EXPIRED` and the user's password is reset to a temporary password that is returned.
Parameters: Name Type DescriptionuserId
String
Extends the length of time that Okta Support can access your org by 24 hours. This means that 24 hours are added to the remaining access time.
Generates a one-time token (OTT) that can be used to reset a user's password
Parameters: Name Type DescriptionuserId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description sendEmail
String <optional>
Sets a new password for a user by validating the user's answer to their current recovery question
Parameters: Name Type DescriptionuserId
String userCredentials
UserCredentials queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description sendEmail
String <optional>
Generates a new X.509 certificate for an application key credential
Parameters: Name Type DescriptionappId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description validityYears
String <optional>
Generates a new key pair and returns the Certificate Signing Request for it.
Parameters: Name Type DescriptionappId
String csrMetadata
CsrMetadata
Generates a new key pair and returns a Certificate Signing Request for it.
Parameters: Name Type DescriptionidpId
String csrMetadata
CsrMetadata
Generates a new X.509 certificate for an IdP signing key credential to be used for signing assertions sent to the IdP
Parameters: Name Type DescriptionidpId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description validityYears
String <optional>
Fetches an application from your Okta organization by `id`.
Parameters: Name Type DescriptionappId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
Fetches an application group assignment
Parameters: Name Type DescriptionappId
String groupId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
Gets a specific application key credential by kid
Parameters: Name Type DescriptionappId
String keyId
String
Fetches a specific user assignment for application by `id`.
Parameters: Name Type DescriptionappId
String userId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
Fetches the Schema for an App User
Parameters: Name Type DescriptionappInstanceId
String
Success
Parameters: Name Type DescriptionauthServerId
String
Success
Parameters: Name Type DescriptionauthServerId
String policyId
String
Returns a Policy Rule by ID that is defined in the specified Custom Authorization Server and Policy.
Parameters: Name Type DescriptionpolicyId
String authServerId
String ruleId
String
Convenience method for /api/v1/apps/{appId}/credentials/csrs/{csrId}
Parameters: Name Type DescriptionappId
String csrId
String
Gets a specific Certificate Signing Request model by id
Parameters: Name Type DescriptionidpId
String csrId
String
Gets current ThreatInsight configuration
Fetches a Domain by `id`.
Parameters: Name Type DescriptiondomainId
String
Success
Parameters: Name Type DescriptioneventHookId
String
Fetches a factor for the specified user
Parameters: Name Type DescriptionuserId
String factorId
String
Polls factors verification transaction for status.
Parameters: Name Type DescriptionuserId
String factorId
String transactionId
String
Success
Parameters: Name Type DescriptionfeatureId
String
Fetches a group from your organization.
Parameters: Name Type DescriptiongroupId
String
Fetches a specific group rule by id from your organization
Parameters: Name Type DescriptionruleId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
Fetches the group schema
Fetches an IdP by `id`.
Parameters: Name Type DescriptionidpId
String
Fetches a linked IdP user by ID
Parameters: Name Type DescriptionidpId
String userId
String
Gets a specific IdP Key Credential by `kid`
Parameters: Name Type DescriptionkeyId
String
Gets a specific IdP Key Credential by `kid`
Parameters: Name Type DescriptionidpId
String keyId
String
Gets an inline hook by ID
Parameters: Name Type DescriptioninlineHookId
String
Success
Parameters: Name Type DescriptionlinkedObjectName
String
Get linked objects for a user, relationshipName can be a primary or associated relationship name
Parameters: Name Type DescriptionuserId
String relationshipName
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description after
String <optional>
limit
String <optional>
The Okta System Log API provides read access to your organization’s system log. This API provides more functionality than the Events API
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description since
String <optional>
until
String <optional>
filter
String <optional>
q
String <optional>
limit
String <optional>
sortOrder
String <optional>
after
String <optional>
A collection that will yield
LogEventinstances.
Fetches a network zone from your Okta organization by `id`.
Parameters: Name Type DescriptionzoneId
String
Success
Parameters: Name Type DescriptionauthServerId
String claimId
String
Success
Parameters: Name Type DescriptionauthServerId
String scopeId
String
Gets a token for the specified application
Parameters: Name Type DescriptionappId
String tokenId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
Gets Okta Communication Settings of your organization.
Gets Contact Types of your organization.
Retrieves the URL of the User associated with the specified Contact Type.
Parameters: Name Type DescriptioncontactType
String
Gets Okta Support Settings of your organization.
Gets preferences of your organization.
Get settings of your organization.
Success
Parameters: Name Type DescriptiontrustedOriginId
String
Gets a policy.
Parameters: Name Type DescriptionpolicyId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
Gets a policy rule.
Parameters: Name Type DescriptionpolicyId
String ruleId
String
Fetches a single Profile Mapping referenced by its ID.
Parameters: Name Type DescriptionmappingId
String
Success
Parameters: Name Type DescriptionauthServerId
String clientId
String tokenId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
Gets a refresh token issued for the specified User and Client.
Parameters: Name Type DescriptionuserId
String clientId
String tokenId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
limit
String <optional>
after
String <optional>
Success
Parameters: Name Type DescriptiongroupId
String roleId
String
Fetches a single scope consent grant for the application
Parameters: Name Type DescriptionappId
String grantId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
Get details about a session.
Parameters: Name Type DescriptionsessionId
String
Fetches a specific template by `id`
Parameters: Name Type DescriptiontemplateId
String
Fetches a user from your Okta organization.
Parameters: Name Type DescriptionuserId
String
Gets a grant for the specified user
Parameters: Name Type DescriptionuserId
String grantId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
Gets role that is assigne to user.
Parameters: Name Type DescriptionuserId
String roleId
String
Fetches the schema for a Schema Id.
Parameters: Name Type DescriptionschemaId
String
Fetches a User Type by ID. The special identifier `default` may be used to fetch the default User Type.
Parameters: Name Type DescriptiontypeId
String
Grants consent for the application to request an OAuth 2.0 Okta scope
Parameters:Enables you to temporarily allow Okta Support to access your org as an administrator for eight hours.
Hide the Okta UI footer for all end users of your organization.
Links an Okta user to an existing Social Identity Provider. This does not support the SAML2 Identity Provider Type
Parameters:Enumerates group assignments for an application.
Parameters: Name Type DescriptionappId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description q
String <optional>
after
String <optional>
limit
String <optional>
expand
String <optional>
Enumerates key credentials for an application
Parameters: Name Type DescriptionappId
String
A collection that will yield
JsonWebKeyinstances.
Enumerates apps added to your organization with pagination. A subset of apps can be returned that match a supported filter expression or query.
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description q
String <optional>
after
String <optional>
limit
String <optional>
filter
String <optional>
expand
String <optional>
includeNonDeleted
String <optional>
Lists all App targets for an `APP_ADMIN` Role assigned to a Group. This methods return list may include full Applications or Instances. The response for an instance will have an `ID` value, while Application will not have an ID.
Parameters: Name Type DescriptiongroupId
String roleId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description after
String <optional>
limit
String <optional>
Lists all App targets for an `APP_ADMIN` Role assigned to a User. This methods return list may include full Applications or Instances. The response for an instance will have an `ID` value, while Application will not have an ID.
Parameters: Name Type DescriptionuserId
String roleId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description after
String <optional>
limit
String <optional>
Enumerates all assigned [application users](#application-user-model) for an application.
Parameters: Name Type DescriptionappId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description q
String <optional>
query_scope
String <optional>
after
String <optional>
limit
String <optional>
filter
String <optional>
expand
String <optional>
A collection that will yield
AppUserinstances.
Fetches appLinks for all direct or indirect (via group membership) assigned applications.
Parameters: Name Type DescriptionuserId
String
A collection that will yield
AppLinkinstances.
Enumerates all applications that are assigned to a group.
Parameters: Name Type DescriptiongroupId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description after
String <optional>
limit
String <optional>
Lists all roles assigned to a user.
Parameters: Name Type DescriptionuserId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
A collection that will yield
Roleinstances.
Success
Parameters: Name Type DescriptionauthServerId
String
A collection that will yield
JsonWebKeyinstances.
Success
Parameters: Name Type DescriptionauthServerId
String
Enumerates all policy rules for the specified Custom Authorization Server and Policy.
Parameters: Name Type DescriptionpolicyId
String authServerId
String
Success
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description q
String <optional>
limit
String <optional>
after
String <optional>
Enumerates Certificate Signing Requests for an application
Parameters: Name Type DescriptionappId
String
A collection that will yield
Csrinstances.
Enumerates Certificate Signing Requests for an IdP
Parameters: Name Type DescriptionidpId
String
A collection that will yield
Csrinstances.
List all verified custom Domains for the org.
Success
A collection that will yield
EventHookinstances.
Enumerates all the enrolled factors for the specified user
Parameters: Name Type DescriptionuserId
String
A collection that will yield
UserFactorinstances.
Success
Parameters: Name Type DescriptionfeatureId
String
A collection that will yield
Featureinstances.
Success
Parameters: Name Type DescriptionfeatureId
String
A collection that will yield
Featureinstances.
Success
A collection that will yield
Featureinstances.
Lists all grants for a specified user and client
Parameters: Name Type DescriptionuserId
String clientId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
after
String <optional>
limit
String <optional>
Success
Parameters: Name Type DescriptiongroupId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
A collection that will yield
Roleinstances.
Lists all group rules for your organization.
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description limit
String <optional>
after
String <optional>
search
String <optional>
expand
String <optional>
A collection that will yield
GroupRuleinstances.
Enumerates groups in your organization with pagination. A subset of groups can be returned that match a supported filter expression or query.
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description q
String <optional>
search
String <optional>
after
String <optional>
limit
String <optional>
expand
String <optional>
A collection that will yield
Groupinstances.
Success
Parameters: Name Type DescriptiongroupId
String roleId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description after
String <optional>
limit
String <optional>
A collection that will yield
Groupinstances.
Success
Parameters: Name Type DescriptionuserId
String roleId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description after
String <optional>
limit
String <optional>
A collection that will yield
Groupinstances.
Enumerates all users that are a member of a group.
Parameters: Name Type DescriptiongroupId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description after
String <optional>
limit
String <optional>
A collection that will yield
Userinstances.
Find all the users linked to an identity provider
Parameters: Name Type DescriptionidpId
String
Enumerates IdP key credentials.
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description after
String <optional>
limit
String <optional>
A collection that will yield
JsonWebKeyinstances.
Enumerates IdPs in your organization with pagination. A subset of IdPs can be returned that match a supported filter expression or query.
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description q
String <optional>
after
String <optional>
limit
String <optional>
type
String <optional>
Enumerates signing key credentials for an IdP
Parameters: Name Type DescriptionidpId
String
A collection that will yield
JsonWebKeyinstances.
Success
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description type
String <optional>
A collection that will yield
InlineHookinstances.
Success
Enumerates network zones added to your organization with pagination. A subset of zones can be returned that match a supported filter expression or query.
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description after
String <optional>
limit
String <optional>
filter
String <optional>
Success
Parameters: Name Type DescriptionauthServerId
String
Success
Parameters: Name Type DescriptionauthServerId
String
Success
Parameters: Name Type DescriptionauthServerId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description q
String <optional>
filter
String <optional>
cursor
String <optional>
limit
String <optional>
Lists all tokens for the application
Parameters: Name Type DescriptionappId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
after
String <optional>
limit
String <optional>
Success
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description q
String <optional>
filter
String <optional>
after
String <optional>
limit
String <optional>
Gets all policies with the specified type.
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description type
String <optional>
status
String <optional>
expand
String <optional>
A collection that will yield
Policyinstances.
Enumerates all policy rules.
Parameters: Name Type DescriptionpolicyId
String
A collection that will yield
PolicyRuleinstances.
Enumerates Profile Mappings in your organization with pagination.
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description after
String <optional>
limit
String <optional>
sourceId
String <optional>
targetId
String <optional>
Success
Parameters: Name Type DescriptionauthServerId
String clientId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
after
String <optional>
limit
String <optional>
Lists all refresh tokens issued for the specified User and Client.
Parameters: Name Type DescriptionuserId
String clientId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
after
String <optional>
limit
String <optional>
Lists all scope consent grants for the application
Parameters: Name Type DescriptionappId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description expand
String <optional>
Enumerates custom SMS templates in your organization. A subset of templates can be returned that match a template type.
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description templateType
String <optional>
Fetches the tokens minted by the Social Authentication Provider when the user authenticates with Okta via Social Auth.
Parameters: Name Type DescriptionidpId
String userId
String
Enumerates all the supported factors that can be enrolled for the specified user
Parameters: Name Type DescriptionuserId
String
A collection that will yield
UserFactorinstances.
Enumerates all available security questions for a user's `question` factor
Parameters: Name Type DescriptionuserId
String
Lists all client resources for which the specified user has grants or tokens.
Parameters: Name Type DescriptionuserId
String
Lists all grants for the specified user
Parameters: Name Type DescriptionuserId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description scopeId
String <optional>
expand
String <optional>
after
String <optional>
limit
String <optional>
Fetches the groups of which the user is a member.
Parameters: Name Type DescriptionuserId
String
A collection that will yield
Groupinstances.
Lists the IdPs associated with the user.
Parameters: Name Type DescriptionuserId
String
Lists users in your organization with pagination in most cases. A subset of users can be returned that match a supported filter expression or search criteria.
Parameters: Name Type DescriptionqueryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description q
String <optional>
after
String <optional>
limit
String <optional>
filter
String <optional>
search
String <optional>
sortBy
String <optional>
sortOrder
String <optional>
A collection that will yield
Userinstances.
Fetches all User Types in your org
A collection that will yield
UserTypeinstances.
Opts in all users of this org to Okta Communication emails.
Opts out all users of this org from Okta Communication emails.
Partial update settings of your organization.
Parameters:Updates only some of the SMS template properties:
Parameters: Name Type DescriptiontemplateId
String smsTemplate
SmsTemplate
Fetch a user by `id`, `login`, or `login shortname` if the short name is unambiguous.
Parameters: Name Type DescriptionuserId
String user
User queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description strict
String <optional>
Convenience method for /api/v1/apps/{appId}/credentials/csrs/{csrId}/lifecycle/publish
Parameters: Name Type DescriptionappId
String csrId
String string
string
Update the Certificate Signing Request with a signed X.509 certificate and add it into the signing key credentials for the IdP.
Parameters: Name Type DescriptionidpId
String csrId
String string
string
Convenience method for /api/v1/apps/{appId}/credentials/csrs/{csrId}/lifecycle/publish
Parameters: Name Type DescriptionappId
String csrId
String string
string
Update the Certificate Signing Request with a signed X.509 certificate and add it into the signing key credentials for the IdP.
Parameters: Name Type DescriptionidpId
String csrId
String string
string
Convenience method for /api/v1/apps/{appId}/credentials/csrs/{csrId}/lifecycle/publish
Parameters: Name Type DescriptionappId
String csrId
String string
string
Update the Certificate Signing Request with a signed X.509 certificate and add it into the signing key credentials for the IdP.
Parameters: Name Type DescriptionidpId
String csrId
String string
string
Convenience method for /api/v1/apps/{appId}/credentials/csrs/{csrId}/lifecycle/publish
Parameters: Name Type DescriptionappId
String csrId
String string
string
Update the Certificate Signing Request with a signed X.509 certificate and add it into the signing key credentials for the IdP.
Parameters: Name Type DescriptionidpId
String csrId
String string
string
Convenience method for /api/v1/apps/{appId}/credentials/csrs/{csrId}/lifecycle/publish
Parameters: Name Type DescriptionappId
String csrId
String string
string
Update the Certificate Signing Request with a signed X.509 certificate and add it into the signing key credentials for the IdP.
Parameters: Name Type DescriptionidpId
String csrId
String string
string
Reactivates a user. This operation can only be performed on users with a `PROVISIONED` status. This operation restarts the activation workflow if for some reason the user activation was not completed when using the activationToken from [Activate User](#activate-user).
Parameters: Name Type DescriptionuserId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description sendEmail
String <optional>
Convenience method for /api/v1/sessions/{sessionId}/lifecycle/refresh
Parameters: Name Type DescriptionsessionId
String
Remove App Instance Target to App Administrator Role given to a User
Parameters: Name Type DescriptionuserId
String roleId
String appName
String applicationId
String
Remove App Instance Target to App Administrator Role given to a Group
Parameters: Name Type DescriptiongroupId
String roleId
String appName
String applicationId
String
Success
Parameters: Name Type DescriptionuserId
String roleId
String appName
String
Success
Parameters: Name Type DescriptiongroupId
String roleId
String appName
String
Convenience method for /api/v1/groups/{groupId}/roles/{roleId}/targets/groups/{targetGroupId}
Parameters: Name Type DescriptiongroupId
String roleId
String targetGroupId
String
Success
Parameters: Name Type DescriptionuserId
String roleId
String groupId
String
Delete linked objects for a user, relationshipName can be ONLY a primary relationship name
Parameters: Name Type DescriptionuserId
String relationshipName
String
Unassigns a Role from a Group
Parameters: Name Type DescriptiongroupId
String roleId
String
Unassigns a role from a user.
Parameters: Name Type DescriptionuserId
String roleId
String
Removes a user from a group with 'OKTA_GROUP' type.
Parameters: Name Type DescriptiongroupId
String userId
String
Replace an existing User Type
Parameters: Name Type DescriptiontypeId
String userType
UserType
This operation resets all factors for the specified user. All MFA factor enrollments returned to the unenrolled state. The user's status remains ACTIVE. This link is present only if the user is currently enrolled in one or more MFA factors.
Parameters: Name Type DescriptionuserId
String
Generates a one-time token (OTT) that can be used to reset a user's password. The OTT link can be automatically emailed to the user or returned to the API caller and distributed using a custom flow.
Parameters: Name Type DescriptionuserId
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description sendEmail
String <optional>
Revoke a Certificate Signing Request and delete the key pair from the IdP
Parameters: Name Type DescriptionidpId
String csrId
String
Convenience method for /api/v1/apps/{appId}/credentials/csrs/{csrId}
Parameters: Name Type DescriptionappId
String csrId
String
Revokes all grants for the specified user and client
Parameters: Name Type DescriptionuserId
String clientId
String
Revokes the specified token for the specified application
Parameters: Name Type DescriptionappId
String tokenId
String
Revokes all tokens for the specified application
Parameters: Name Type DescriptionappId
String
Revokes Okta Support access to your organization.
Success
Parameters: Name Type DescriptionauthServerId
String clientId
String tokenId
String
Success
Parameters: Name Type DescriptionauthServerId
String clientId
String
Revokes permission for the application to request the given scope
Parameters: Name Type DescriptionappId
String grantId
String
Revokes the specified refresh token.
Parameters: Name Type DescriptionuserId
String clientId
String tokenId
String
Revokes all refresh tokens issued for the specified User and Client.
Parameters: Name Type DescriptionuserId
String clientId
String
Revokes one grant for a specified user
Parameters: Name Type DescriptionuserId
String grantId
String
Revokes all grants for a specified user
Parameters: Name Type DescriptionuserId
String
Success
Parameters: Name Type DescriptionauthServerId
String
A collection that will yield
JsonWebKeyinstances.
Convenience method for /api/v1/users/{associatedUserId}/linkedObjects/{primaryRelationshipName}/{primaryUserId}
Parameters: Name Type DescriptionassociatedUserId
String primaryRelationshipName
String primaryUserId
String
Makes the Okta UI footer visible for all end users of your organization.
Suspends a user. This operation can only be performed on users with an `ACTIVE` status. The user will have a status of `SUSPENDED` when the process is complete.
Parameters: Name Type DescriptionuserId
String
Removes the link between the Okta user and the IdP user.
Parameters: Name Type DescriptionidpId
String userId
String
Unlocks a user with a `LOCKED_OUT` status and returns them to `ACTIVE` status. Users will be able to login with their current password.
Parameters: Name Type DescriptionuserId
String
Unsuspends a user and returns them to the `ACTIVE` state. This operation can only be performed on users that have a `SUSPENDED` status.
Parameters: Name Type DescriptionuserId
String
Updates an application in your organization.
Parameters: Name Type DescriptionappId
String application
Application
Updates a user's profile for an application
Parameters: Name Type DescriptionappId
String userId
String appUser
AppUser
Partial updates on the User Profile properties of the Application User Schema.
Parameters: Name Type DescriptionappInstanceId
String userSchema
UserSchema
Success
Parameters:Success
Parameters:Updates the configuration of the Policy Rule defined in the specified Custom Authorization Server and Policy.
Parameters:Updates ThreatInsight configuration
Parameters:Success
Parameters: Name Type DescriptioneventHookId
String eventHook
EventHook
Success
Parameters: Name Type DescriptionfeatureId
String lifecycle
String queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description mode
String <optional>
Updates the profile for a group with `OKTA_GROUP` type from your organization.
Parameters: Name Type DescriptiongroupId
String group
Group
Updates a group rule. Only `INACTIVE` rules can be updated.
Parameters: Name Type DescriptionruleId
String groupRule
GroupRule
Updates, adds ore removes one or more custom Group Profile properties in the schema
Parameters:Updates the configuration for an IdP.
Parameters:Updates an inline hook by ID
Parameters: Name Type DescriptioninlineHookId
String inlineHook
InlineHook
Updates a network zone in your organization.
Parameters: Name Type DescriptionzoneId
String networkZone
NetworkZone
Success
Parameters: Name Type DescriptionauthServerId
String claimId
String oAuth2Claim
OAuth2Claim
Success
Parameters: Name Type DescriptionauthServerId
String scopeId
String oAuth2Scope
OAuth2Scope
Updates the User associated with the specified Contact Type.
Parameters: Name Type DescriptioncontactType
String userIdString
UserIdString
Update settings of your organization.
Parameters:Success
Parameters: Name Type DescriptiontrustedOriginId
String trustedOrigin
TrustedOrigin
Updates a policy.
Parameters: Name Type DescriptionpolicyId
String policy
Policy
Updates a policy rule.
Parameters: Name Type DescriptionpolicyId
String ruleId
String policyRule
PolicyRule
Updates an existing Profile Mapping by adding, updating, or removing one or many Property Mappings.
Parameters:Updates the SMS template.
Parameters: Name Type DescriptiontemplateId
String smsTemplate
SmsTemplate
Update a user's profile and/or credentials using strict-update semantics.
Parameters: Name Type DescriptionuserId
String user
User queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description strict
String <optional>
Partial updates on the User Profile properties of the user schema.
Parameters: Name Type DescriptionschemaId
String userSchema
UserSchema
Updates an existing User Type
Parameters: Name Type DescriptiontypeId
String userType
UserType
Verifies the Domain by `id`.
Parameters: Name Type DescriptiondomainId
String
Success
Parameters: Name Type DescriptioneventHookId
String
Verifies an OTP for a `token` or `token:hardware` factor
Parameters: Name Type DescriptionuserId
String factorId
String verifyFactorRequest
VerifyFactorRequest queryParams
Object Map of query parameters to add to this request Properties Name Type Argument Description templateId
String <optional>
tokenLifetimeSeconds
String <optional>
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4