Connectors

Identity & Access Management

Okta

Identity management: users, groups, applications, and lifecycle operations

Okta API referenceAPI checked August 16, 2026

Signs in with: Connection fields
Runs on: Cloud or On-Prem Worker
Operations: 734
Ready-made triggers: 0

Connect Okta

In Neblex open Connect › Connections and click New Connection.
Search for Okta and give the connection a clear name.
Fill in the fields. Secret values are encrypted and never shown again.
Click Test, then Create Connection.

Field	What to enter
Okta domainOptional	Full Okta, Okta Preview, or custom domain without a scheme or path.Example: `example.okta.com`
Legacy okta.com subdomainOptional	Backward-compatible fallback used only when Okta domain is empty.Example: `example`
Scoped OAuth 2.0 access tokenOptionalSecret	Recommended for least privilege.
SSWS API tokenOptionalSecret	Legacy administrator API token for operations that allow apiToken.

Use it in a flow

Open a flow, open the node library and search for Okta.
Drag it onto the canvas and choose an Operation and your connection.
Map the operation's fields from earlier steps, or click Map with Matt.
Use Test this step to see what it returns, then save.

To start a flow from Okta without a ready-made trigger: a Poll for changes trigger can check one of its list operations on a schedule and pass on only what is new; if Okta can send webhooks, a Webhook trigger receives them at its own URL.

Operations

734 operations in 121 groups. Each one is a step you can add to a flow.

AgentPool14

Activate an agent pool update`activateAgentPoolsUpdate`	POST	Activates a scheduled agent pool update
Create an agent pool update`createAgentPoolsUpdate`	POST	Creates an agent pool update
Deactivate an agent pool update`deactivateAgentPoolsUpdate`	POST	Deactivates scheduled agent pool update
Delete an agent pool update`deleteAgentPoolsUpdate`	DELETE	Deletes agent pool update
List all agent pool updates`listAgentPoolsUpdates`	GET	Lists all agent pool updates
List all agent pools`listAgentPools`	GET	Lists all agent pools with pagination support
Pause an agent pool update`pauseAgentPoolsUpdate`	POST	Pauses a running or queued agent pool update
Resume an agent pool update`resumeAgentPoolsUpdate`	POST	Resumes a running or queued agent pool update
Retrieve an agent pool update by ID`getAgentPoolsUpdateInstance`	GET	Retrieves an agent pool update by its updateId
Retrieve an agent pool update's settings`getAgentPoolsUpdateSettings`	GET	Retrieves the current state of the agent pool update instance settings
Retry an agent pool update`retryAgentPoolsUpdate`	POST	Retries an agent pool update if the update is unsuccessful or communication with Okta was interrupted during an agent auto-update
Stop an agent pool update`stopAgentPoolsUpdate`	POST	Stops an agent pool update
Update an agent pool update by ID`updateAgentPoolsUpdate`	POST	Updates an agent pool update instance and returns the latest agent pool update
Update an agent pool update settings`updateAgentPoolsUpdateSettings`	POST	Updates an agent pool update instance settings

ApiServiceIntegration9

Activate an API service integration instance secret`activateApiServiceIntegrationInstanceSecret`	POST	Activates an API Service Integration instance Secret by secretId
Create an API service integration instance`createApiServiceIntegrationInstance`	POST	Creates and authorizes an API Service Integration instance
Create an API service integration instance secret`createApiServiceIntegrationInstanceSecret`	POST	Creates an API Service Integration instance Secret object with a new active client secret.
Deactivate an API service integration instance secret`deactivateApiServiceIntegrationInstanceSecret`	POST	Deactivates an API Service Integration instance Secret by secretId
Delete an API service integration instance`deleteApiServiceIntegrationInstance`	DELETE	Deletes an API Service Integration instance by id.
Delete an API service integration instance secret`deleteApiServiceIntegrationInstanceSecret`	DELETE	Deletes an API Service Integration instance Secret by secretId.
List all API service integration instance secrets`listApiServiceIntegrationInstanceSecrets`	GET	Lists all client secrets for an API Service Integration instance by apiServiceId
List all API service integration instances`listApiServiceIntegrationInstances`	GET	Lists all API Service Integration instances with a pagination option
Retrieve an API service integration instance`getApiServiceIntegrationInstance`	GET	Retrieves an API Service Integration instance by id

ApiToken5

List all API token metadata`listApiTokens`	GET	Lists all the metadata of the active API tokens
Retrieve an API token's metadata`getApiToken`	GET	Retrieves the metadata for an active API token by apiTokenId
Revoke an API token`revokeApiToken`	DELETE	Revokes an API token by apiTokenId
Revoke the current API token`revokeCurrentApiToken`	DELETE	Revokes the API token provided in the Authorization header
Upsert an API token network condition`upsertApiToken`	PUT	Upserts an API Token Network Condition by apiTokenId

Application7

Activate an application`activateApplication`	POST	Activates an inactive application
Create an application`createApplication`	POST	Creates an app instance in your Okta org.
Deactivate an application`deactivateApplication`	POST	Deactivates an active application
Delete an application`deleteApplication`	DELETE	Deletes an inactive application
List all applications`listApplications`	GET	Lists all apps in the org with pagination.
Replace an application`replaceApplication`	PUT	Replaces properties for an application Notes: All required properties must be specified in the request body You can't modify system-assigned properties, such as id, name, status, created,...
Retrieve an application`getApplication`	GET	Retrieves an application from your Okta organization by id

ApplicationConnection6

Activate the default provisioning connection`activateDefaultProvisioningConnectionForApplication`	POST	Activates the default provisioning connection for an app
Deactivate the default provisioning connection`deactivateDefaultProvisioningConnectionForApplication`	POST	Deactivates the default provisioning connection for an app
Retrieve a JSON Web Key Set (JWKS) for the default provisioning`getUserProvisioningConnectionJWKS`	GET	Retrieves a JWKS for the default provisioning connection.
Retrieve the default provisioning connection`getDefaultProvisioningConnectionForApplication`	GET	Retrieves the default provisioning connection for an app
Update the default provisioning connection`updateDefaultProvisioningConnectionForApplication`	POST	Updates the default provisioning connection for an app
Verify the provisioning connection`verifyProvisioningConnectionForApplication`	POST	Verifies the OAuth 2.0-based connection as part of the OAuth 2.0 consent flow.

ApplicationCrossAppAccessConnection5

Create a Cross App Access connection`createCrossAppAccessConnection`	POST	Creates a Cross App Access connection
Delete a Cross App Access connection`deleteCrossAppAccessConnection`	DELETE	Deletes a Cross App Access connection with the specified ID
Retrieve a Cross App Access connection`getCrossAppAccessConnection`	GET	Retrieves the Cross App Access connection with the specified ID
Retrieve all Cross App Access connections`getAllCrossAppAccessConnections`	GET	Retrieves inbound and outbound Cross App Access connections associated with an app
Update a Cross App Access connection`updateCrossAppAccessConnection`	PATCH	Updates the Cross App Access connection with the specified ID

ApplicationFeature3

List all features`listFeaturesForApplication`	GET	Lists all features for an app Note: This request returns an error if provisioning isn't enabled for the app.
Retrieve a feature`getFeatureForApplication`	GET	Retrieves a Feature object for an app
Update a feature`updateFeatureForApplication`	PUT	Updates a Feature object for an app Note: This endpoint supports partial updates.

ApplicationGrant4

Grant consent to scope`grantConsentToScope`	POST	Grants consent for the app to request an OAuth 2.0 Okta scope
List all app grants`listScopeConsentGrants`	GET	Lists all scope consent Grants for the app
Retrieve an app grant`getScopeConsentGrant`	GET	Retrieves a single scope consent Grant object for the app
Revoke an app grant`revokeScopeConsentGrant`	DELETE	Revokes permission for the app to grant the given scope

ApplicationGroup5

Assign an application group`assignGroupToApplication`	PUT	Assigns a Group to an app, which in turn assigns the app to each User that belongs to the group.
List all application groups`listApplicationGroupAssignments`	GET	Lists all app group assignments
Retrieve an application group`getApplicationGroupAssignment`	GET	Retrieves an app group assignment
Unassign an application group`unassignApplicationFromGroup`	DELETE	Unassigns a Group from an app
Update an application group`updateGroupAssignmentToApplication`	PATCH	Updates a group assignment to an app

ApplicationInterclientTrustMapping4

Create an allowed app mapping for a target app`createInterclientTrustMapping`	POST	Creates a mapping between the target app and an allowed app for interclient SSO using the interclient token
Delete an interclient trust mapping`deleteInterclientTrustMapping`	DELETE	Deletes the mapping between the target app and an allowed app
List all allowed apps for a target app`listInterclientAllowedApplications`	GET	Lists all apps allowed by this app to request interclient SSO using the interclient token
List all target apps for an allowed app`listInterclientTargetApplications`	GET	Lists all the target apps that allow this app to request interclient SSO using an interclient token

ApplicationLogo1

Upload an application logouploadApplicationLogo POST Uploads a logo for the app instance.

ApplicationPolicy1

Assign an app sign-in policyassignApplicationPolicy PUT Assigns an app to an app sign-in policy, identified by policyId.

ApplicationSSO1

Preview the application SAML metadatapreviewSAMLmetadataForApplication GET Previews the SSO SAML metadata for an application

ApplicationSSOCredentialKey9

Clone a key credential`cloneApplicationKey`	POST	Clones an X.509 certificate for an application key credential from a source app to a target app.
Generate a certificate signing request`generateCsrForApplication`	POST	Generates a new key pair and returns the certificate signing request (CSR) for it.
Generate a key credential`generateApplicationKey`	POST	Generates a new X.509 certificate for an app key credential Note: To update an app with the newly generated key credential, use the Replace an Application request with the new...
List all certificate signing requests`listCsrsForApplication`	GET	Lists all certificate signing requests for an app
List all key credentials`listApplicationKeys`	GET	Lists all key credentials for an app
Publish a certificate signing request`publishCsrFromApplication`	POST	Publishes a certificate signing request (CSR) for the app with a signed X.509 certificate and adds it into the application key credentials.
Retrieve a certificate signing request`getCsrForApplication`	GET	Retrieves a certificate signing request (CSR) for the app by csrId.
Retrieve a key credential`getApplicationKey`	GET	Retrieves a specific application key credential by kid
Revoke a certificate signing request`revokeCsrFromApplication`	DELETE	Revokes a certificate signing request and deletes the key pair from the app

ApplicationSSOFederatedClaim5

Create a federated claim`createFederatedClaim`	POST	Creates a claim that will be included in tokens produced by federation protocols (for example: OIDC id tokens or SAML Assertions)
Delete a federated claim`deleteFederatedClaim`	DELETE	Deletes a federated claim by claimId
List all configured federated claims`listFederatedClaims`	GET	Lists all federated claims for your app
Replace a federated claim`replaceFederatedClaim`	PUT	Replaces a claim that will be included in tokens produced by federation protocols (for example: OIDC id tokens or SAML Assertions)
Retrieve a federated claim`getFederatedClaim`	GET	Retrieves a federated claim by claimId

ApplicationSSOPublicKey12

Activate an OAuth 2.0 client JSON Web Key`activateOAuth2ClientJsonWebKey`	POST	Activates an OAuth 2.0 client JSON Web Key by keyId Note: You can have only one active encryption key at any given time for an app.
Activate an OAuth 2.0 client secret`activateOAuth2ClientSecret`	POST	Activates an OAuth 2.0 client secret by secretId
Add a JSON Web Key`addJwk`	POST	Adds a new JSON Web Key to the clients JSON Web Keys.
Create an OAuth 2.0 client secret`createOAuth2ClientSecret`	POST	Creates an OAuth 2.0 client secret object with a new active client secret.
Deactivate an OAuth 2.0 client JSON Web Key`deactivateOAuth2ClientJsonWebKey`	POST	Deactivates an OAuth 2.0 client JSON Web Key by keyId Note: You can only deactivate signing keys.
Deactivate an OAuth 2.0 client secret`deactivateOAuth2ClientSecret`	POST	Deactivates an OAuth 2.0 client secret by secretId.
Delete an OAuth 2.0 client JSON Web Key`deletejwk`	DELETE	Deletes an OAuth 2.0 Client JSON Web Key by keyId.
Delete an OAuth 2.0 client secret`deleteOAuth2ClientSecret`	DELETE	Deletes an OAuth 2.0 client secret by secretId.
List all OAuth 2.0 client secrets`listOAuth2ClientSecrets`	GET	Lists all client secrets for an OAuth 2.0 client app
List all the OAuth 2.0 client JSON Web Keys`listJwk`	GET	Lists all JSON Web Keys for an OAuth 2.0 client app
Retrieve an OAuth 2.0 client JSON Web Key`getJwk`	GET	Retrieves an OAuth 2.0 client JSON Web Key by keyId
Retrieve an OAuth 2.0 client secret`getOAuth2ClientSecret`	GET	Retrieves an OAuth 2.0 client secrets by secretId

ApplicationToken4

List all application refresh tokens`listOAuth2TokensForApplication`	GET	Lists all refresh tokens for an app
Retrieve an application token`getOAuth2TokenForApplication`	GET	Retrieves a refresh token for the specified app
Revoke all application tokens`revokeOAuth2TokensForApplication`	DELETE	Revokes all OAuth 2.0 refresh tokens for the specified app.
Revoke an application token`revokeOAuth2TokenForApplication`	DELETE	Revokes the specified token for the specified app

ApplicationUser5

Assign an application user`assignUserToApplication`	POST	Assigns a user to an app for:
List all application users`listApplicationUsers`	GET	Lists all assigned users for an app
Retrieve an application user`getApplicationUser`	GET	Retrieves a specific user assignment for a specific app
Unassign an application user`unassignUserFromApplication`	DELETE	Unassigns a user from an app
Update an application user`updateApplicationUser`	POST	Updates the profile or credentials of a user assigned to an app

AssociatedDomainCustomization7

Replace the customized well-known URI of the specific path`replaceBrandWellKnownURI`	PUT	Replaces the content of a customized well-known URI that you specify.
Retrieve all the well-known URIs`getAllWellKnownURIs`	GET	Retrieves the content from each of the well-known URIs for a specified brand
Retrieve the customized apple-app-site-association URI content`getAppleAppSiteAssociationWellKnownURI`	GET	Retrieves the content of the apple-app-site-assocation well-known URI
Retrieve the customized assetlinks.json URI content`getAssetLinksWellKnownURI`	GET	Retrieves the content of the assetlinks.json well-known URI
Retrieve the customized content of the specified well-known URI`getBrandWellKnownURI`	GET	Retrieves the customized content of a well-known URI for a specific brand and well-known URI path
Retrieve the customized webauthn URI content`getWebAuthnWellKnownURI`	GET	Retrieves the content of the webauthn well-known URI
Retrieve the well-known URI of a specific brand`getRootBrandWellKnownURI`	GET	Retrieves the well-known URI of a specific brand and well-known URI path

AttackProtection4

Replace the authenticator settings`replaceAuthenticatorSettings`	PUT	Replaces the Authenticator Settings for an org
Replace the user lockout settings`replaceUserLockoutSettings`	PUT	Replaces the User Lockout Settings for an org
Retrieve the authenticator settings`getAuthenticatorSettings`	GET	Retrieves the Authenticator Settings for an org
Retrieve the user lockout settings`getUserLockoutSettings`	GET	Retrieves the User Lockout Settings for an org

Authenticator19

Activate an authenticator`activateAuthenticator`	POST	Activates an authenticator by authenticatorId
Activate an authenticator method`activateAuthenticatorMethod`	POST	Activates a method for an authenticator identified by authenticatorId and methodType
Create a custom AAGUID`createCustomAAGUID`	POST	Creates a custom AAGUID for the Passkey (FIDO2 WebAuthn) authenticator
Create an authenticator`createAuthenticator`	POST	Creates an authenticator
Deactivate an authenticator`deactivateAuthenticator`	POST	Deactivates an authenticator by authenticatorId
Deactivate an authenticator method`deactivateAuthenticatorMethod`	POST	Deactivates a method for an authenticator identified by authenticatorId and methodType
Delete a custom AAGUID`deleteCustomAAGUID`	DELETE	Deletes a custom AAGUID
List all authenticators`listAuthenticators`	GET	Lists all authenticators
List all custom AAGUIDs`listAllCustomAAGUIDs`	GET	Lists all custom Authenticator Attestation Global Unique Identifiers (AAGUIDs) in the org
List all methods of an authenticator`listAuthenticatorMethods`	GET	Lists all methods of an authenticator identified by authenticatorId
Replace a custom AAGUID`replaceCustomAAGUID`	PUT	Replaces a custom AAGUID for the specified Passkey (FIDO2 WebAuthn) authenticator
Replace an authenticator`replaceAuthenticator`	PUT	Replaces the properties for an authenticator identified by authenticatorId
Replace an authenticator method`replaceAuthenticatorMethod`	PUT	Replaces a method of methodType for an authenticator identified by authenticatorId
Retrieve a custom AAGUID`getCustomAAGUID`	GET	Retrieves a custom AAGUID
Retrieve an authenticator`getAuthenticator`	GET	Retrieves an authenticator from your Okta organization by authenticatorId
Retrieve an authenticator method`getAuthenticatorMethod`	GET	Retrieves a method identified by methodType of an authenticator identified by authenticatorId
Retrieve the well-known app authenticator configuration`getWellKnownAppAuthenticatorConfiguration`	GET	Retrieves the well-known app authenticator configuration.
Update a custom AAGUID`updateCustomAAGUID`	PATCH	Updates the properties of a custom AAGUID by the authenticatorId and aaguid ID
Verify a Relying Party ID domain`verifyRpIdDomain`	POST	Verifies the Relying Party identifier (RP ID) domain for the specified Passkey (FIDO2 WebAuthn) authenticator and the specific webauthn authenticator method

AuthorizationServer7

Activate an authorization server`activateAuthorizationServer`	POST	Activates an authorization server
Create an authorization server`createAuthorizationServer`	POST	Creates an authorization server
Deactivate an authorization server`deactivateAuthorizationServer`	POST	Deactivates an authorization server
Delete an authorization server`deleteAuthorizationServer`	DELETE	Deletes an authorization server
List all authorization servers`listAuthorizationServers`	GET	Lists all custom authorization servers in the org
Replace an authorization server`replaceAuthorizationServer`	PUT	Replaces an authorization server
Retrieve an authorization server`getAuthorizationServer`	GET	Retrieves an authorization server

AuthorizationServerAssoc3

Create an associated authorization server`createAssociatedServers`	POST	Creates trusted relationships between the given authorization server and other authorization servers
Delete an associated authorization server`deleteAssociatedServer`	DELETE	Deletes an associated Authorization Server
List all associated authorization servers`listAssociatedServersByTrustedType`	GET	Lists all associated Authorization Servers by trusted type for the given authServerId

AuthorizationServerClaim5

Create a custom token claim`createOAuth2Claim`	POST	Creates a custom token Claim for a custom authorization server
Delete a custom token claim`deleteOAuth2Claim`	DELETE	Deletes a custom token Claim specified by the claimId
List all custom token claims`listOAuth2Claims`	GET	Lists all custom token Claims defined for a specified custom authorization server
Replace a custom token claim`replaceOAuth2Claim`	PUT	Replaces a custom token Claim specified by the claimId
Retrieve a custom token claim`getOAuth2Claim`	GET	Retrieves a custom token Claim by the specified claimId

AuthorizationServerClient5

List all client resources for an authorization server`listOAuth2ClientsForAuthorizationServer`	GET	Lists all client resources for which the specified authorization server has tokens.
List all refresh tokens for a client`listRefreshTokensForAuthorizationServerAndClient`	GET	Lists all refresh tokens issued by an authorization server for a specific Client
Retrieve a refresh token for a client`getRefreshTokenForAuthorizationServerAndClient`	GET	Retrieves a refresh token for a Client
Revoke a refresh token for a client`revokeRefreshTokenForAuthorizationServerAndClient`	DELETE	Revokes a refresh token for a Client
Revoke all refresh tokens for a client`revokeRefreshTokensForAuthorizationServerAndClient`	DELETE	Revokes all refresh tokens for a Client

AuthorizationServerKey3

List all credential keys`listAuthorizationServerKeys`	GET	Lists all of the current, future, and expired Keys used by the Custom Authorization Server
Retrieve an authorization server key`getAuthorizationServerKey`	GET	Retrieves an Authorization Server Key specified by the keyId
Rotate all credential keys`rotateAuthorizationServerKeys`	POST	Rotates the current Keys for a Custom Authorization Server.

AuthorizationServerPolicy7

Activate a policy`activateAuthorizationServerPolicy`	POST	Activates an authorization server policy
Create a policy`createAuthorizationServerPolicy`	POST	Creates a policy
Deactivate a policy`deactivateAuthorizationServerPolicy`	POST	Deactivates an authorization server policy
Delete a policy`deleteAuthorizationServerPolicy`	DELETE	Deletes a policy
List all policies`listAuthorizationServerPolicies`	GET	Lists all policies
Replace a policy`replaceAuthorizationServerPolicy`	PUT	Replaces a policy
Retrieve a policy`getAuthorizationServerPolicy`	GET	Retrieves a policy

AuthorizationServerRule7

Activate a policy rule`activateAuthorizationServerPolicyRule`	POST	Activates an authorization server policy rule
Create a policy rule`createAuthorizationServerPolicyRule`	POST	Creates a policy rule for the specified Custom Authorization Server and Policy
Deactivate a policy rule`deactivateAuthorizationServerPolicyRule`	POST	Deactivates an authorization server policy rule
Delete a policy rule`deleteAuthorizationServerPolicyRule`	DELETE	Deletes a Policy Rule defined in the specified Custom Authorization Server and Policy
List all policy rules`listAuthorizationServerPolicyRules`	GET	Lists all policy rules for the specified Custom Authorization Server and Policy
Replace a policy rule`replaceAuthorizationServerPolicyRule`	PUT	Replaces the configuration of the Policy Rule defined in the specified Custom Authorization Server and Policy
Retrieve a policy rule`getAuthorizationServerPolicyRule`	GET	Retrieves a policy rule by ruleId

AuthorizationServerScope5

Create a custom token scope`createOAuth2Scope`	POST	Creates a custom token scope
Delete a custom token scope`deleteOAuth2Scope`	DELETE	Deletes a custom token scope
List all custom token scopes`listOAuth2Scopes`	GET	Lists all custom token scopes
Replace a custom token scope`replaceOAuth2Scope`	PUT	Replaces a custom token scope
Retrieve a custom token scope`getOAuth2Scope`	GET	Retrieves a custom token scope

Behavior7

Activate a behavior detection rule`activateBehaviorDetectionRule`	POST	Activates a behavior detection rule
Create a behavior detection rule`createBehaviorDetectionRule`	POST	Creates a new behavior detection rule
Deactivate a behavior detection rule`deactivateBehaviorDetectionRule`	POST	Deactivates a behavior detection rule
Delete a behavior detection rule`deleteBehaviorDetectionRule`	DELETE	Deletes a Behavior Detection Rule by behaviorId
List all behavior detection rules`listBehaviorDetectionRules`	GET	Lists all behavior detection rules with pagination support
Replace a behavior detection rule`replaceBehaviorDetectionRule`	PUT	Replaces a Behavior Detection Rule by behaviorId
Retrieve a behavior detection rule`getBehaviorDetectionRule`	GET	Retrieves a Behavior Detection Rule by behaviorId

BotProtection2

Retrieve the bot protection configuration`getBotProtectionConfiguration`	GET	Retrieves the bot protection configuration for your org
Update the bot protection configuration`updateBotProtectionConfiguration`	POST	Updates the bot protection configuration for your org

Brand6

Create a brand`createBrand`	POST	Creates a new brand in your org
Delete a brand`deleteBrand`	DELETE	Deletes a brand by brandId
List all brands`listBrands`	GET	Lists all the brands in your org
List all domains associated with a brand`listBrandDomains`	GET	Lists all domains associated with a brand by brandId
Replace a brand`replaceBrand`	PUT	Replaces a brand by brandId
Retrieve a brand`getBrand`	GET	Retrieves a brand by brandId

CAPTCHA9

Create a CAPTCHA instance`createCaptchaInstance`	POST	Creates a new CAPTCHA instance.
Delete a CAPTCHA instance`deleteCaptchaInstance`	DELETE	Deletes a specified CAPTCHA instance Note: If your CAPTCHA instance is still associated with your org, the request fails.
Delete the org-wide CAPTCHA settings`deleteOrgCaptchaSettings`	DELETE	Deletes the CAPTCHA settings object for your organization
List all CAPTCHA instances`listCaptchaInstances`	GET	Lists all CAPTCHA instances with pagination support.
Replace a CAPTCHA instance`replaceCaptchaInstance`	PUT	Replaces the properties for a specified CAPTCHA instance
Replace the org-wide CAPTCHA settings`replacesOrgCaptchaSettings`	PUT	Replaces the CAPTCHA settings object for your organization Note : You can disable CAPTCHA for your organization by setting captchaId and enabledPages to null.
Retrieve a CAPTCHA instance`getCaptchaInstance`	GET	Retrieves the properties of a specified CAPTCHA instance
Retrieve the org-wide CAPTCHA settings`getOrgCaptchaSettings`	GET	Retrieves the CAPTCHA settings object for your organization Note : If the current organization hasn't configured CAPTCHA Settings, the request returns an empty object.
Update a CAPTCHA instance`updateCaptchaInstance`	POST	Partially updates the properties of a specified CAPTCHA instance

CustomDomain7

Create a custom domain`createCustomDomain`	POST	Creates your custom domain
Delete a custom domain`deleteCustomDomain`	DELETE	Deletes a custom domain by domainId
List all custom domains`listCustomDomains`	GET	Lists all verified custom domains for the org
Replace a custom domain's brand`replaceCustomDomain`	PUT	Replaces a custom domain's brand
Retrieve a custom domain`getCustomDomain`	GET	Retrieves a custom domain by domainId
Upsert the custom domain's certificate`upsertCertificate`	PUT	Upserts (creates or renews) the MANUAL certificate for the custom domain
Verify a custom domain`verifyDomain`	POST	Verifies the custom domain and validity of DNS records by domainId.

CustomPage19

Delete the customized error page`deleteCustomizedErrorPage`	DELETE	Deletes the customized error page.
Delete the customized sign-in page`deleteCustomizedSignInPage`	DELETE	Deletes the customized sign-in page.
Delete the preview error page`deletePreviewErrorPage`	DELETE	Deletes the preview error page.
Delete the preview sign-in page`deletePreviewSignInPage`	DELETE	Deletes the preview sign-in page.
List all Sign-In Widget versions`listAllSignInWidgetVersions`	GET	Lists all sign-in widget versions supported by the current org
Replace the customized error page`replaceCustomizedErrorPage`	PUT	Replaces the customized error page.
Replace the customized sign-in page`replaceCustomizedSignInPage`	PUT	Replaces the customized sign-in page.
Replace the preview error page`replacePreviewErrorPage`	PUT	Replaces the preview error page.
Replace the preview sign-in page`replacePreviewSignInPage`	PUT	Replaces the preview sign-in page.
Replace the sign-out page settings`replaceSignOutPageSettings`	PUT	Replaces the sign-out page settings
Retrieve the customized error page`getCustomizedErrorPage`	GET	Retrieves the customized error page.
Retrieve the customized sign-in page`getCustomizedSignInPage`	GET	Retrieves the customized sign-in page.
Retrieve the default error page`getDefaultErrorPage`	GET	Retrieves the default error page.
Retrieve the default sign-in page`getDefaultSignInPage`	GET	Retrieves the default sign-in page.
Retrieve the error page sub-resources`getErrorPage`	GET	Retrieves the error page sub-resources.
Retrieve the preview error page preview`getPreviewErrorPage`	GET	Retrieves the preview error page.
Retrieve the preview sign-in page preview`getPreviewSignInPage`	GET	Retrieves the preview sign-in page.
Retrieve the sign-in page sub-resources`getSignInPage`	GET	Retrieves the sign-in page sub-resources.
Retrieve the sign-out page settings`getSignOutPageSettings`	GET	Retrieves the sign-out page settings

CustomTelephonyProvider9

Activate a custom telephony provider`activateCustomTelephonyCredential`	POST	Activates a custom telephony provider by its ID.
Create a custom telephony provider`createCustomTelephonyProviderCredentials`	POST	Creates a custom telephony provider with the provided credentials
Deactivate a custom telephony provider`deactivateCustomTelephonyCredential`	POST	Deactivates a custom telephony provider by its ID.
Delete a custom telephony provider`deleteCustomTelephonyProviderCredential`	DELETE	Deletes a custom telephony provider by its ID.
List all custom telephony providers`listAllCustomTelephonyProviderCredentials`	GET	Lists all custom telephony providers that are configured in your org
Retrieve a custom telephony provider`getCustomTelephonyProviderCredential`	GET	Retrieves the details of a custom telephony provider by its ID
Send a test message from a custom telephony provider`sendTestCustomTelephonyProviderCredential`	POST	Sends a test message (SMS or call) using the specified custom telephony provider to verify that the provider is configured correctly.
Set a custom telephony provider as a primary telephony provider`setAsPrimaryCustomTelephonyCredential`	POST	Sets a custom telephony provider as the primary telephony provider for the org.
Update a custom telephony provider credential`updateCustomTelephonyProviderCredential`	PATCH	Updates the credentials of an existing custom telephony provider

CustomTemplate14

Create an email customization`createEmailCustomization`	POST	Creates a new Email Customization
Delete all email customizations`deleteAllCustomizations`	DELETE	Deletes all customizations for an email template
Delete an email customization`deleteEmailCustomization`	DELETE	Deletes an Email Customization by its unique identifier
List all email customizations`listEmailCustomizations`	GET	Lists all customizations of an email template
List all email templates`listEmailTemplates`	GET	Lists all supported email templates
Replace an email customization`replaceEmailCustomization`	PUT	Replaces an email customization using property values
Replace the email template settings`replaceEmailSettings`	PUT	Replaces an email template's settings
Retrieve a preview of an email customization`getCustomizationPreview`	GET	Retrieves a Preview of an Email Customization.
Retrieve a preview of the email template default content`getEmailDefaultPreview`	GET	Retrieves a preview of an Email Template's default content.
Retrieve an email customization`getEmailCustomization`	GET	Retrieves an email customization by its unique identifier
Retrieve an email template`getEmailTemplate`	GET	Retrieves the details of an email template by name
Retrieve an email template default content`getEmailDefaultContent`	GET	Retrieves an email template's default content
Retrieve the email template settings`getEmailSettings`	GET	Retrieves an email template's settings
Send a test email`sendTestEmail`	POST	Sends a test email to the current user's primary and secondary email addresses.

Device10

Activate a device`activateDevice`	POST	Activates a device by setting its status to ACTIVE by deviceId.
Deactivate a device`deactivateDevice`	POST	Deactivates a device by setting its status to DEACTIVATED by deviceId.
Delete a device`deleteDevice`	DELETE	Deletes (permanently) a device by deviceId if it has a status of DEACTIVATED.
List all devices`listDevices`	GET	Lists all devices with pagination support.
List all OS accounts for a device`listDeviceOSAccounts`	GET	Lists all OS accounts for a device by deviceId
List all users for a device`listDeviceUsers`	GET	Lists all Users for a device by deviceId
Retrieve a device`getDevice`	GET	Retrieves a device by deviceId
Retrieve an OS account`getDeviceOSAccount`	GET	Retrieves an OS account by osAccountId for a device
Suspend a Device`suspendDevice`	POST	Suspends a device by setting its status to SUSPENDED.
Unsuspend a Device`unsuspendDevice`	POST	Unsuspends a device by returning its status to ACTIVE.

DeviceAssurance5

Create a device assurance policy`createDeviceAssurancePolicy`	POST	Creates a new device assurance policy
Delete a device assurance policy`deleteDeviceAssurancePolicy`	DELETE	Deletes a device assurance policy by deviceAssuranceId.
List all device assurance policies`listDeviceAssurancePolicies`	GET	Lists all device assurance policies
Replace a device assurance policy`replaceDeviceAssurancePolicy`	PUT	Replaces a device assurance policy by deviceAssuranceId
Retrieve a device assurance policy`getDeviceAssurancePolicy`	GET	Retrieves a device assurance policy by deviceAssuranceId

DeviceIntegration4

Activate a device integration`activateDeviceIntegration`	POST	Activates a device integration and populates the related configurations by deviceIntegrationId
Deactivate a device integration`deactivateDeviceIntegration`	POST	Deactivates a device integration by deviceIntegrationId
List all device integrations`listDeviceIntegrations`	GET	Lists all device integrations for your org.
Retrieve a device integration`getDeviceIntegration`	GET	Retrieves a device integration by deviceIntegrationId

DevicePostureCheck6

Create a device posture check`createDevicePostureCheck`	POST	Creates a device posture check
Delete a device posture check`deleteDevicePostureCheck`	DELETE	Deletes a device posture check by postureCheckId.
List all default device posture checks`listDefaultDevicePostureChecks`	GET	Lists all default device posture checks.
List all device posture checks`listDevicePostureChecks`	GET	Lists all device posture checks
Replace a device posture check`replaceDevicePostureCheck`	PUT	Replaces a device posture check by postureCheckId
Retrieve a device posture check`getDevicePostureCheck`	GET	Retrieves a device posture check by postureCheckId

DirectoriesIntegration3

Retrieve the results of an AD group query`getGroupAttributeQueryResult`	GET	Retrieves the results of the requested Active Directory (AD) group attributes using the resultId returned from the POST /api/v1/directories/{appInstanceId}/groups/{groupId}/query call.
Submit a query for AD Group`submitGroupAttributeQuery`	POST	Submits a query search on the on-premises agent to asynchronously fetch specific Active Directory (AD) attributes for a group.
Update an external directory group membership`updateGroupMembership`	POST	Updates an Active Directory or LDAP group membership directly in the Active Directory or LDAP server.

DisasterRecovery4

Retrieve the disaster recovery status for a domain`getDRStatusForDomain`	GET	Retrieves the failover or failback status for the domain specified in the request path
Retrieve the disaster recovery status for all domains`getDRStatus`	GET	Retrieves the failover or failback status for all the domains for your org
Start the failback of your org`startOrgFailback`	POST	Starts the failback of your org
Start the failover of your org`startOrgFailover`	POST	Starts the failover of your org

EmailCustomization1

Remove bounced emailsbulkRemoveEmailAddressBounces POST Removes emails from an email service bounce list.

EmailDomain6

Create an email domain`createEmailDomain`	POST	Creates an Email Domain in your org
Delete an email domain`deleteEmailDomain`	DELETE	Deletes an Email Domain by emailDomainId
List all email domains`listEmailDomains`	GET	Lists all the Email Domains in your org
Replace an email domain`replaceEmailDomain`	PUT	Replaces associated username and sender display name by emailDomainId
Retrieve an email domain`getEmailDomain`	GET	Retrieves an Email Domain by emailDomainId
Verify an email domain`verifyEmailDomain`	POST	Verifies an Email Domain by emailDomainId

EmailServer6

Create a custom SMTP server`createEmailServer`	POST	Creates a custom email SMTP server configuration for your org.
Delete an SMTP server configuration`deleteEmailServer`	DELETE	Deletes the specified custom SMTP server configuration
List all enrolled SMTP servers`listEmailServers`	GET	Lists all the enrolled custom SMTP server configurations
Retrieve an SMTP server configuration`getEmailServer`	GET	Retrieves the specified custom SMTP server configuration
Test an SMTP server configuration`testEmailServer`	POST	Tests the specified custom SMTP server configuration
Update an SMTP server configuration`updateEmailServer`	PATCH	Updates the specified custom SMTP server configuration

EventHook8

Activate an event hook`activateEventHook`	POST	Activates the event hook that matches the provided id
Create an event hook`createEventHook`	POST	Creates a new event hook for your organization in ACTIVE status.
Deactivate an event hook`deactivateEventHook`	POST	Deactivates the event hook that matches the provided id
Delete an event hook`deleteEventHook`	DELETE	Deletes the event hook that matches the provided id.
List all event hooks`listEventHooks`	GET	Lists all event hooks
Replace an event hook`replaceEventHook`	PUT	Replaces an event hook.
Retrieve an event hook`getEventHook`	GET	Retrieves an event hook
Verify an event hook`verifyEventHook`	POST	Verifies that the event hook matches the provided eventHookId.

Feature5

List all dependencies`listFeatureDependencies`	GET	Lists all feature dependencies for a specified feature.
List all dependents`listFeatureDependents`	GET	Lists all feature dependents for the specified feature.
List all features`listFeatures`	GET	Lists all self-service features for your org
Retrieve a feature`getFeature`	GET	Retrieves a feature by ID
Update a feature lifecycle`updateFeatureLifecycle`	POST	Updates a feature's lifecycle status.

GovernanceBundle10

Create a governance bundle`createGovernanceBundle`	POST	Creates a governance bundle of entitlements for the Admin Console
Delete a governance bundle`deleteGovernanceBundle`	DELETE	Deletes an Admin Console governance bundle
List all entitlements for a governance bundle`listBundleEntitlements`	GET	Lists all entitlements specific to a governance bundle
List all governance bundles`listGovernanceBundles`	GET	Lists all governance bundles for the Admin Console in your org
List all values for a governance bundle entitlement`listBundleEntitlementValues`	GET	Lists all entitlement values that are specific to a governance bundle entitlement
Opt in the Admin Console to entitlement management`optIn`	POST	Opts in the Admin Console to entitlement management
Opt out the Admin Console from entitlement management`optOut`	POST	Opts out the Admin Console from entitlement management
Replace a governance bundle`replaceGovernanceBundle`	PUT	Replaces the properties of a governance bundle for the Admin Console
Retrieve a governance bundle`getGovernanceBundle`	GET	Retrieves a governance bundle for the Admin Console
Retrieve the Admin Console opt-in status`getOptInStatus`	GET	Retrieves the entitlement management opt-in status for the Admin Console

Group9

Add a group`addGroup`	POST	Adds a new group with the OKTA GROUP type to your org.
Assign a user to a group`assignUserToGroup`	PUT	Assigns a user to a group with the OKTA GROUP type.
Delete a group`deleteGroup`	DELETE	Deletes a group of the OKTA GROUP or APP GROUP type from your org.
List all assigned apps`listAssignedApplicationsForGroup`	GET	Lists all apps that are assigned to a group.
List all groups`listGroups`	GET	Lists all groups with pagination support.
List all member users`listGroupUsers`	GET	Lists all users that are a member of a group.
Replace a group`replaceGroup`	PUT	Replaces the profile for a group of OKTA GROUP type from your org.
Retrieve a group`getGroup`	GET	Retrieves a specific group by id from your org
Unassign a user from a group`unassignUserFromGroup`	DELETE	Unassigns a user from a group with the OKTA GROUP type.

GroupOwner3

Assign a group owner`assignGroupOwner`	POST	Assigns a group owner
Delete a group owner`deleteGroupOwner`	DELETE	Deletes a group owner from a specific group
List all group owners`listGroupOwners`	GET	Lists all owners for a specific group

GroupPushMapping5

Create a group push mapping`createGroupPushMapping`	POST	Creates or links a group push mapping.
Delete a group push mapping`deleteGroupPushMapping`	DELETE	Deletes a specific group push mapping.
List all group push mappings`listGroupPushMappings`	GET	Lists all group push mappings with pagination support
Retrieve a group push mapping`getGroupPushMapping`	GET	Retrieves a group push mapping by ID
Update a group push mapping`updateGroupPushMapping`	PATCH	Updates the status of a group push mapping

GroupRule7

Activate a group rule`activateGroupRule`	POST	Activates a specific group rule by ID from your org
Create a group rule`createGroupRule`	POST	Creates a group rule to dynamically add users to the specified group if they match the condition.
Deactivate a group rule`deactivateGroupRule`	POST	Deactivates a specific group rule by ID from your org
Delete a group rule`deleteGroupRule`	DELETE	Deletes a specific group rule by groupRuleId
List all group rules`listGroupRules`	GET	Lists all group rules for your org
Replace a group rule`replaceGroupRule`	PUT	Replaces a group rule Notes: You can only update rules with a group whose status is set to INACTIVE.
Retrieve a group rule`getGroupRule`	GET	Retrieves a specific group rule by ID from your org

HookKey6

Create a key`createHookKey`	POST	Creates a key for use with other parts of the application, such as inline hooks
Delete a key`deleteHookKey`	DELETE	Deletes a key by id.
List all keys`listHookKeys`	GET	Lists all keys
Replace a key`replaceHookKey`	PUT	Replaces a key by id
Retrieve a key by ID`getHookKey`	GET	Retrieves the public portion of the Key object using the id parameter
Retrieve a public key`getPublicKey`	GET	Retrieves a public key by keyId

IdentityProvider7

Activate an IdP`activateIdentityProvider`	POST	Activates an inactive identity provider (IdP)
Create an IdP`createIdentityProvider`	POST	Creates a new identity provider (IdP) integration.
Deactivate an IdP`deactivateIdentityProvider`	POST	Deactivates an active identity provider (IdP)
Delete an IdP`deleteIdentityProvider`	DELETE	Deletes an identity provider (IdP) integration by idpId All existing IdP users are unlinked with the highest order profile source taking precedence for each IdP user.
List all IdPs`listIdentityProviders`	GET	Lists all identity provider (IdP) integrations with pagination.
Replace an IdP`replaceIdentityProvider`	PUT	Replaces an identity provider (IdP) integration by idpId
Retrieve an IdP`getIdentityProvider`	GET	Retrieves an identity provider (IdP) integration by idpId

IdentityProviderKey5

Create an IdP key credential`createIdentityProviderKey`	POST	Creates a new X.509 certificate credential in the identity provider (IdP) key store Note: RSA-based certificates are supported for all IdP types.
Delete an IdP key credential`deleteIdentityProviderKey`	DELETE	Deletes a specific identity provider (IdP) key credential by kid if it isn't currently being used by an active or inactive IdP
List all IdP key credentials`listIdentityProviderKeys`	GET	Lists all identity provider (IdP) key credentials
Replace an IdP key credential`replaceIdentityProviderKey`	PUT	Replaces an identity provider (IdP) key credential by kid
Retrieve an IdP key credential`getIdentityProviderKey`	GET	Retrieves a specific identity provider (IdP) key credential by kid

IdentityProviderSigningKey10

Clone a signing key credential for IdP`cloneIdentityProviderKey`	POST	Clones an X.509 certificate for an identity provider (IdP) signing key credential from a source IdP to target IdP Caution: Sharing certificates isn't a recommended security practice.
Generate a certificate signing request`generateCsrForIdentityProvider`	POST	Generates a new key pair and returns a certificate signing request (CSR) for it Note: The private key isn't listed in the signing key credentials for the identity provider (IdP) until...
Generate a new signing key credential for IdP`generateIdentityProviderSigningKey`	POST	Generates a new X.509 certificate for an identity provider (IdP) signing key credential to be used for signing assertions sent to the IdP.
List all certificate signing requests`listCsrsForIdentityProvider`	GET	Lists all certificate signing requests (CSRs) for an identity provider (IdP)
List all signing key credentials for IdP`listIdentityProviderSigningKeys`	GET	Lists all signing key credentials for an identity provider (IdP)
List the active signing key credential for IdP`listActiveIdentityProviderSigningKey`	GET	Lists the active signing key credential for an identity provider (IdP)
Publish a certificate signing request`publishCsrForIdentityProvider`	POST	Publishes the certificate signing request (CSR) with a signed X.509 certificate and adds it into the signing key credentials for the identity provider (IdP) Notes: Publishing a...
Retrieve a certificate signing request`getCsrForIdentityProvider`	GET	Retrieves a specific certificate signing request (CSR) by id
Retrieve a signing key credential for IdP`getIdentityProviderSigningKey`	GET	Retrieves a specific identity provider (IdP) key credential by kid
Revoke a certificate signing request`revokeCsrForIdentityProvider`	DELETE	Revokes a certificate signing request (CSR) and deletes the key pair from the identity provider (IdP)

IdentityProviderUser6

Link a user to IdP`linkUserToIdentityProvider`	POST	Links an Okta user to an existing SAML or social identity provider (IdP).
List all IdPs for user`listUserIdentityProviders`	GET	Lists the identity providers (IdPs) associated with the user
List all tokens from OIDC IdP`listSocialAuthTokens`	GET	Lists the tokens minted by the social authentication provider when the user authenticates with Okta via Social Auth.
List all users for IdP`listIdentityProviderApplicationUsers`	GET	Lists all the users linked to an identity provider (IdP)
Retrieve a user for IdP`getIdentityProviderApplicationUser`	GET	Retrieves a linked identity provider (IdP) user by ID
Unlink a user from IdP`unlinkUserFromIdentityProvider`	DELETE	Unlinks the Okta user and the identity provider (IdP) user.

IdentitySource23

Create an identity source group`createIdentitySourceGroups`	POST	Creates a group in an identity source for the given identity source instance
Create an identity source session`createIdentitySourceSession`	POST	Creates an identity source session for the given identity source instance
Create an identity source user`createIdentitySourceUser`	POST	Creates a user in an identity source for the given identity source instance
Create the memberships for the given identity source group`createIdentitySourceGroupsMemberships`	POST	Creates the group memberships for the given identity source group
Delete an identity source group`deleteIdentitySourceGroup`	DELETE	Deletes a group in an identity source for a given identity source ID and group ID
Delete an identity source session`deleteIdentitySourceSession`	DELETE	Deletes an identity source session for a given identity source ID and session Id
Delete an identity source user`deleteIdentitySourceUser`	DELETE	Deletes a user in an identity source for the given identity source instance and external ID
Delete the memberships for the specified identity source group`deleteIdentitySourceGroupMemberships`	DELETE	Deletes group memberships for the specified identity source group using member external IDs
List all identity source sessions`listIdentitySourceSessions`	GET	Lists all identity source sessions for the given identity source instance
Replace an existing identity source user`replaceExistingIdentitySourceUser`	PUT	Replaces an existing user for the given identity source instance and external ID
Retrieve an identity source group`getIdentitySourceGroup`	GET	Retrieves a group from an identity source for a given identity source ID and group ID or external ID
Retrieve an identity source session`getIdentitySourceSession`	GET	Retrieves an identity source session for a given identity source ID and session ID
Retrieve an identity source user`getIdentitySourceUser`	GET	Retrieves a user by external ID in an identity source for the given identity source instance
Retrieve the memberships for the given identity source group`getIdentitySourceGroupMemberships`	GET	Retrieves the group memberships for the given identity source group in the given identity source instance
Start the import from the identity source`startImportFromIdentitySource`	POST	Starts the import from the identity source described by the uploaded bulk operations
Update an identity source group`updateIdentitySourceGroups`	POST	Updates a group to an identity source for the given identity source instance and group ID
Update an identity source user`updateIdentitySourceUsers`	PATCH	Updates a user to an identity source for the given identity source instance and external ID
Upload the data to be deleted in Okta`uploadIdentitySourceDataForDelete`	POST	Uploads external IDs of entities that need to be deleted in Okta from the identity source for the given session
Upload the data to be upserted in Okta`uploadIdentitySourceDataForUpsert`	POST	Uploads entities that need to be inserted or updated in Okta from the identity source for the given session
Upload the group external IDs to be deleted in Okta`uploadIdentitySourceGroupsDataForDelete`	POST	Uploads external IDs of groups that need to be deleted in Okta from the identity source for the given session
Upload the group memberships to be deleted in Okta`uploadIdentitySourceGroupMembershipsForDelete`	POST	Uploads the group memberships that need to be deleted in Okta from the identity source for the given session
Upload the group memberships to be upserted in Okta`uploadIdentitySourceGroupMembershipsForUpsert`	POST	Uploads the group memberships that need to be inserted or updated in Okta from the identity source for the given session
Upload the group profiles without memberships to be upserted in`uploadIdentitySourceGroupsForUpsert`	POST	Uploads the group profiles without memberships that need to be inserted or updated in Okta from the identity source for the given session

InlineHook9

Activate an inline hook`activateInlineHook`	POST	Activates the inline hook by inlineHookId
Create an inline hook`createInlineHook`	POST	Creates an inline hook
Deactivate an inline hook`deactivateInlineHook`	POST	Deactivates the inline hook by inlineHookId
Delete an inline hook`deleteInlineHook`	DELETE	Deletes an inline hook by inlineHookId.
Execute an inline hook`executeInlineHook`	POST	Executes the inline hook that matches the provided inlineHookId by using the request body as the input.
List all inline hooks`listInlineHooks`	GET	Lists all inline hooks or all inline hooks of a specific type.
Replace an inline hook`replaceInlineHook`	PUT	Replaces an inline hook by inlineHookId.
Retrieve an inline hook`getInlineHook`	GET	Retrieves an inline hook by inlineHookId
Update an inline hook`updateInlineHook`	POST	Updates an inline hook by inlineHookId

LinkedObject4

Create a linked object definition`createLinkedObjectDefinition`	POST	Creates a Linked Object definition
Delete a linked object definition`deleteLinkedObjectDefinition`	DELETE	Deletes the Linked Object definition specified by either the primary or associated name.
List all linked object definitions`listLinkedObjectDefinitions`	GET	Lists all Linked Object definitions
Retrieve a linked object definition`getLinkedObjectDefinition`	GET	Retrieves a Linked Object definition

LogStream7

Activate a log stream`activateLogStream`	POST	Activates a log stream by logStreamId
Create a log stream`createLogStream`	POST	Creates a new log stream object
Deactivate a log stream`deactivateLogStream`	POST	Deactivates a log stream by logStreamId
Delete a log stream`deleteLogStream`	DELETE	Deletes a log stream object from your org by ID
List all log streams`listLogStreams`	GET	Lists all log stream objects in your org.
Replace a log stream`replaceLogStream`	PUT	Replaces the log stream object properties for a given ID.
Retrieve a log stream`getLogStream`	GET	Retrieves a log stream object by ID

NetworkZone7

Activate a network zone`activateNetworkZone`	POST	Activates a Network Zone by zoneId
Create a network zone`createNetworkZone`	POST	Creates a Network Zone For an IP Network Zone, you must define either gateways or proxies.
Deactivate a network zone`deactivateNetworkZone`	POST	Deactivates a Network Zone by zoneId
Delete a network zone`deleteNetworkZone`	DELETE	Deletes a Network Zone by zoneId Notes: You can't delete a Network Zone that's used by a Policy or Rule.
List all network zones`listNetworkZones`	GET	Lists all Network Zones with pagination.
Replace a network zone`replaceNetworkZone`	PUT	Replaces a Network Zone by zoneId.
Retrieve a network zone`getNetworkZone`	GET	Retrieves a Network Zone by zoneId

OAuth2ResourceServerCredentialsKey6

Activate a Custom Authorization Server Public JSON Web Key`activateOAuth2ResourceServerJsonWebKey`	POST	Activates a custom authorization server public JSON web key by key id.
Add a JSON Web Key`addOAuth2ResourceServerJsonWebKey`	POST	Adds a new JSON Web Key to the custom authorization servers JSON web keys.
Deactivate a Custom Authorization Server Public JSON Web Key`deactivateOAuth2ResourceServerJsonWebKey`	POST	Deactivates a custom authorization server public JSON web key by key id.
Delete a Custom Authorization Server Public JSON Web Key`deleteOAuth2ResourceServerJsonWebKey`	DELETE	Deletes a custom authorization server public JSON web key by key id.
List all Custom Authorization Server Public JSON Web Keys`listOAuth2ResourceServerJsonWebKeys`	GET	Lists all the public keys used by the custom authorization server
Retrieve a Custom Authorization Server Public JSON Web Key`getOAuth2ResourceServerJsonWebKey`	GET	Retrieves a custom authorization server public JSON web key by key id

OktaApplicationSetting2

Replace the Okta application settings`replaceFirstPartyAppSettings`	PUT	Replaces the settings for an Okta app (also known as an Okta first-party app)
Retrieve the Okta application settings`getFirstPartyAppSettings`	GET	Retrieves the settings for an Okta app (also known as an Okta first-party app)

OktaManagedUserAccount5

Create an Okta managed user account`createOktaManagedUserAccount`	POST	Creates a new Okta managed user account for managing a Universal Directory user as a service account.
Delete an Okta managed user account`deleteOktaManagedUserAccount`	DELETE	Deletes an Okta managed user account specified by ID.
List all Okta managed user accounts`listOktaManagedUserAccounts`	GET	Lists all Okta managed user accounts in your org.
Retrieve an Okta managed user account`getOktaManagedUserAccount`	GET	Retrieves an Okta managed user account specified by ID
Update an Okta managed user account`updateOktaManagedUserAccount`	PATCH	Updates an existing Okta managed user account specified by ID.

OktaPersonalSetting3

List all blocked email domains`listPersonalAppsExportBlockList`	GET	Lists all blocked email domains which are excluded from app migration
Replace the blocked email domains`replaceBlockedEmailDomains`	PUT	Replaces the list of blocked email domains which are excluded from app migration
Replace the Okta Personal admin settings`replaceOktaPersonalAdminSettings`	PUT	Replaces Okta Personal admin settings in a Workforce org

OrgCreator1

Create an orgcreateChildOrg POST Creates an org (child org) that has the same features as the current requesting org (parent org).

OrgSettingAdmin6

Assign the default public client app role setting`assignClientPrivilegesSetting`	PUT	Assigns the Super Admin role as the default role for new public client apps
Retrieve the default public client app role setting`getClientPrivilegesSetting`	GET	Retrieves the org setting to assign the Super Admin role to new public client apps
Retrieve the Okta Admin Console assignment setting`getAutoAssignAdminAppSetting`	GET	Retrieves the org setting to automatically assign the Okta Admin Console when an admin role is assigned
Retrieve the org third-party admin setting`getThirdPartyAdminSetting`	GET	Retrieves the third-party admin setting.
Update the Okta Admin Console assignment setting`updateAutoAssignAdminAppSetting`	POST	Updates the org setting to automatically assign the Okta Admin Console when an admin role is assigned
Update the org third-party admin setting`updateThirdPartyAdminSetting`	POST	Updates the third-party admin setting.

OrgSettingCommunication3

Opt in to Okta user communication emails`optInUsersToOktaCommunicationEmails`	POST	Opts in all users of this org to Okta communication emails
Opt out of Okta user communication emails`optOutUsersFromOktaCommunicationEmails`	POST	Opts out all users of this org from Okta communication emails
Retrieve the Okta communication settings`getOktaCommunicationSettings`	GET	Retrieves Okta Communication Settings of your org

OrgSettingContact3

List all org contact types`listOrgContactTypes`	GET	Lists all org contact types for your Okta org
Replace the contact type user`replaceOrgContactUser`	PUT	Replaces the user associated with the specified contact type
Retrieve the contact type user`getOrgContactUser`	GET	Retrieves the ID and the user resource associated with the specified contact type

OrgSettingCustomization3

Retrieve the org preferences`getOrgPreferences`	GET	Retrieves preferences of your Okta org
Set the hide dashboard footer preference`setOrgHideOktaUIFooter`	POST	Sets the preference to hide the Okta End-User Dashboard footer for all end users of your org
Set the show dashboard footer preference`setOrgShowOktaUIFooter`	POST	Sets the preference to show the Okta UI footer for all end users of your org

OrgSettingGeneral3

Replace the Org general settings`replaceOrgSettings`	PUT	Replaces the Org General Settings for your Okta org
Retrieve the Org general settings`getOrgSettings`	GET	Retrieves the Org General Settings
Update the Org general settings`updateOrgSettings`	POST	Updates partial Org General Settings

OrgSettingMetadata1

Retrieve the Org metadatagetWellknownOrgMetadata GET Retrieves the org metadata, which includes the org ID, configured custom domains, and authentication pipeline

OrgSettingSupport9

Extend Okta Support access`extendOktaSupport`	POST	Extends the length of time that Okta Support can access your org by 24 hours.
Grant Okta Aerial access to your org`grantAerialConsent`	POST	Grants an Okta Aerial account consent to manage your org.
Grant Okta Support access`grantOktaSupport`	POST	Grants Okta Support temporary access to your org as an administrator for eight hours
List all Okta Support cases`listOktaSupportCases`	GET	Lists all Okta Support cases that the requesting principal has permission to view
Retrieve Okta Aerial consent for your org`getAerialConsent`	GET	Retrieves the Okta Aerial consent grant details for your Org.
Retrieve the Okta Support settings`getOrgOktaSupportSettings`	GET	Retrieves Okta Support Settings for your org
Revoke Okta Aerial access to your org`revokeAerialConsent`	POST	Revokes access of an Okta Aerial account to your Org.
Revoke Okta Support access`revokeOktaSupport`	POST	Revokes Okta Support access to your org
Update an Okta Support case`updateOktaSupportCase`	PATCH	Updates access to the org for an Okta Support case:

Policy21

Activate a policy`activatePolicy`	POST	Activates a policy
Activate a policy rule`activatePolicyRule`	POST	Activates a policy rule identified by policyId and ruleId
Clone an existing policy`clonePolicy`	POST	Clones an existing policy
Create a policy`createPolicy`	POST	Creates a policy.
Create a policy rule`createPolicyRule`	POST	Creates a policy rule
Create a policy simulation`createPolicySimulation`	POST	Creates a policy or policy rule simulation.
Deactivate a policy`deactivatePolicy`	POST	Deactivates a policy
Deactivate a policy rule`deactivatePolicyRule`	POST	Deactivates a policy rule identified by policyId and ruleId
Delete a policy`deletePolicy`	DELETE	Deletes a policy
Delete a policy resource mapping`deletePolicyResourceMapping`	DELETE	Deletes the resource mapping for a policy identified by policyId and mappingId
Delete a policy rule`deletePolicyRule`	DELETE	Deletes a policy rule identified by policyId and ruleId
List all apps mapped to a policy`listPolicyApps`	GET	Lists all applications mapped to a policy identified by policyId
List all policies`listPolicies`	GET	Lists all policies with the specified type
List all policy rules`listPolicyRules`	GET	Lists all policy rules
List all resources mapped to a policy`listPolicyMappings`	GET	Lists all resources mapped to a policy identified by policyId
Map a resource to a policy`mapResourceToPolicy`	POST	Maps a resource to a policy identified by policyId
Replace a policy`replacePolicy`	PUT	Replaces the properties of a policy identified by policyId
Replace a policy rule`replacePolicyRule`	PUT	Replaces the properties for a policy rule identified by policyId and ruleId
Retrieve a policy`getPolicy`	GET	Retrieves a policy
Retrieve a policy resource mapping`getPolicyMapping`	GET	Retrieves a resource mapping for a policy identified by policyId and mappingId
Retrieve a policy rule`getPolicyRule`	GET	Retrieves a policy rule

PrincipalRateLimit4

Create a principal rate limit`createPrincipalRateLimitEntity`	POST	Creates a new principal rate limit entity.
List all principal rate limits`listPrincipalRateLimitEntities`	GET	Lists all Principal Rate Limit entities considering the provided parameters
Replace a principal rate limit`replacePrincipalRateLimitEntity`	PUT	Replaces a principal rate limit entity by principalRateLimitId
Retrieve a principal rate limit`getPrincipalRateLimitEntity`	GET	Retrieves a principal rate limit entity by principalRateLimitId

ProfileMapping3

List all profile mappings`listProfileMappings`	GET	Lists all profile mappings in your org with pagination.
Retrieve a profile mapping`getProfileMapping`	GET	Retrieves a single profile mapping referenced by its ID
Update a profile mapping`updateProfileMapping`	POST	Updates an existing profile mapping by adding, updating, or removing one or many property mappings

PushProvider5

Create a push provider`createPushProvider`	POST	Creates a new push provider.
Delete a push provider`deletePushProvider`	DELETE	Deletes a push provider by pushProviderId.
List all push providers`listPushProviders`	GET	Lists all push providers
Replace a push provider`replacePushProvider`	PUT	Replaces a push provider by pushProviderId
Retrieve a push provider`getPushProvider`	GET	Retrieves a push provider by pushProviderId

RateLimitSetting6

Replace the per-client rate limit settings`replaceRateLimitSettingsPerClient`	PUT	Replaces the Per-Client Rate Limit Settings and returns the configured properties
Replace the rate limit admin notification settings`replaceRateLimitSettingsAdminNotifications`	PUT	Replaces the Rate Limit Admin Notification Settings and returns the configured properties
Replace the rate limit warning threshold percentage`replaceRateLimitSettingsWarningThreshold`	PUT	Replaces the Rate Limit Warning Threshold Percentage and returns the configured property
Retrieve the per-client rate limit settings`getRateLimitSettingsPerClient`	GET	Retrieves the currently configured Per-Client Rate Limit Settings
Retrieve the rate limit admin notification settings`getRateLimitSettingsAdminNotifications`	GET	Retrieves the currently configured Rate Limit Admin Notification Settings
Retrieve the rate limit warning threshold percentage`getRateLimitSettingsWarningThreshold`	GET	Retrieves the currently configured threshold for warning notifications when the API's rate limit is exceeded

Realm5

Create a realm`createRealm`	POST	Creates a new realm
Delete a realm`deleteRealm`	DELETE	Deletes a realm permanently.
List all realms`listRealms`	GET	Lists all realms.
Replace the realm profile`replaceRealm`	PUT	Replaces the realm profile
Retrieve a realm`getRealm`	GET	Retrieves a realm

RealmAssignment9

Activate a realm assignment`activateRealmAssignment`	POST	Activates a realm assignment
Create a realm assignment`createRealmAssignment`	POST	Creates a new realm assignment
Deactivate a realm assignment`deactivateRealmAssignment`	POST	Deactivates a realm assignment
Delete a realm assignment`deleteRealmAssignment`	DELETE	Deletes a realm assignment
Execute a realm assignment`executeRealmAssignment`	POST	Executes a realm assignment
List all realm assignment operations`listRealmAssignmentOperations`	GET	Lists all realm assignment operations.
List all realm assignments`listRealmAssignments`	GET	Lists all realm assignments
Replace a realm assignment`replaceRealmAssignment`	PUT	Replaces a realm assignment
Retrieve a realm assignment`getRealmAssignment`	GET	Retrieves a realm assignment

RoleAssignmentAUser8

Assign a user role`assignRoleToUser`	POST	Assigns a standard role to a user.
List all user role assignments`listAssignedRolesForUser`	GET	Lists all roles assigned to a user (identified by userId)
List all users with role assignments`listUsersWithRoleAssignments`	GET	Lists all users with role assignments
Retrieve a user role assignment`getUserAssignedRole`	GET	Retrieves a role assigned to a user (identified by userId).
Retrieve a user role governance source`getRoleAssignmentGovernanceGrant`	GET	Retrieves a governance source (identified by grantId) for a role (identified by roleAssignmentId) that's assigned to a user (identified by userId)
Retrieve all user role governance sources`getUserAssignedRoleGovernance`	GET	Retrieves the governance sources of a role (identified by roleAssignmentId) that's assigned to a user (identified by userId)
Retrieve the user role governance source resources`getRoleAssignmentGovernanceGrantResources`	GET	Retrieves the resources of a governance source (identified by grantId) for a role (identified by roleAssignmentId) that's assigned to a user (identified by userId)
Unassign a user role`unassignRoleFromUser`	DELETE	Unassigns a role assignment (identified by roleAssignmentId) from a user (identified by userId)

RoleAssignmentBGroup4

Assign a role to a group`assignRoleToGroup`	POST	Assigns a standard role to a group.
List all group role assignments`listGroupAssignedRoles`	GET	Lists all assigned roles of a group by groupId
Retrieve a group role assignment`getGroupAssignedRole`	GET	Retrieves a role assigned to a group (identified by the groupId).
Unassign a group role`unassignRoleFromGroup`	DELETE	Unassigns a role assignment (identified by roleAssignmentId) from a group (identified by the groupId)

RoleAssignmentClient4

Assign a client role`assignRoleToClient`	POST	Assigns a standard role to a client app.
List all client role assignments`listRolesForClient`	GET	Lists all roles assigned to a client app identified by clientId
Retrieve a client role`retrieveClientRole`	GET	Retrieves a role assignment (identified by roleAssignmentId) for a client app (identified by clientId)
Unassign a client role`deleteRoleFromClient`	DELETE	Unassigns a role assignment (identified by roleAssignmentId) from a client app (identified by clientId)

RoleBTargetAdmin10

Assign all apps as target to admin role`assignAllAppsAsTargetToRoleForUser`	PUT	Assigns all apps as target to an APP ADMIN role
Assign an admin role app instance target`assignAppInstanceTargetToAppAdminRoleForUser`	PUT	Assigns an app instance target to an APP ADMIN role assignment to an admin user.
Assign an admin role app target`assignAppTargetToAdminRoleForUser`	PUT	Assigns an OIN app target for an APP ADMIN role assignment to an admin user.
Assign an admin role group target`assignGroupTargetToUserRole`	PUT	Assigns a group target for a USER ADMIN, HELP DESK ADMIN, or GROUP MEMBERSHIP ADMIN role assignment to an admin user.
List all admin role app targets`listApplicationTargetsForApplicationAdministratorRoleForUser`	GET	Lists all app targets for an APP ADMIN role assigned to a user.
List all admin role group targets`listGroupTargetsForRole`	GET	Lists all group targets for a USER ADMIN, HELP DESK ADMIN, or GROUP MEMBERSHIP ADMIN role assignment to an admin user.
Retrieve a role target by assignment type`getRoleTargetsByUserIdAndRoleId`	GET	Retrieves all role targets for an APP ADMIN, USER ADMIN, HELP DESK ADMIN, or GROUP MEMBERSHIP ADMIN role assignment to an admin user by user or group assignment type.
Unassign an admin role app instance target`unassignAppInstanceTargetFromAdminRoleForUser`	DELETE	Unassigns an app instance target from an APP ADMIN role assignment to an admin user.
Unassign an admin role app target`unassignAppTargetFromAppAdminRoleForUser`	DELETE	Unassigns an OIN app target from an APP ADMIN role assignment to an admin user.
Unassign an admin role group target`unassignGroupTargetFromUserAdminRole`	DELETE	Unassigns a group target from a USER ADMIN, HELP DESK ADMIN, or GROUP MEMBERSHIP ADMIN role assignment to an admin user.

RoleBTargetBGroup8

Assign a group role app instance target`assignAppInstanceTargetToAppAdminRoleForGroup`	PUT	Assigns an app instance target to an APP ADMIN role assignment to a group.
Assign a group role app target`assignAppTargetToAdminRoleForGroup`	PUT	Assigns an OIN app target to an APP ADMIN role assignment to a group.
Assign a group role group target`assignGroupTargetToGroupAdminRole`	PUT	Assigns a group target to a USER ADMIN, HELP DESK ADMIN, or GROUP MEMBERSHIP ADMIN role assignment to a group.
List all group role app targets`listApplicationTargetsForApplicationAdministratorRoleForGroup`	GET	Lists all app targets for an APP ADMIN role assignment to a group.
List all group role group targets`listGroupTargetsForGroupRole`	GET	Lists all group targets for a USER ADMIN, HELP DESK ADMIN, or GROUP MEMBERSHIP ADMIN role assignment to a group.
Unassign a group role app instance target`unassignAppInstanceTargetToAppAdminRoleForGroup`	DELETE	Unassigns an app instance target from an APP ADMIN role assignment to a group
Unassign a group role app target`unassignAppTargetToAdminRoleForGroup`	DELETE	Unassigns an OIN app target from an APP ADMIN role assignment to a group
Unassign a group role group target`unassignGroupTargetFromGroupAdminRole`	DELETE	Unassigns a group target from a USER ADMIN, HELP DESK ADMIN, or GROUP MEMBERSHIP ADMIN role assignment to a group.

RoleBTargetClient8

Assign a client role app instance target`assignAppTargetInstanceRoleForClient`	PUT	Assigns an app instance target to an APP ADMIN role assignment to a client.
Assign a client role app target`assignAppTargetRoleToClient`	PUT	Assigns an OIN app target for an APP ADMIN role assignment to a client.
Assign a client role group target`assignGroupTargetRoleForClient`	PUT	Assigns a group target to a USER ADMIN, HELP DESK ADMIN, or GROUP MEMBERSHIP ADMIN role assignment to a client app.
List all client role app targets`listAppTargetRoleToClient`	GET	Lists all OIN app targets for an APP ADMIN role that's assigned to a client (by clientId).
List all client role group targets`listGroupTargetRoleForClient`	GET	Lists all group targets for a USER ADMIN, HELP DESK ADMIN, or GROUP MEMBERSHIP ADMIN role assignment to a client.
Unassign a client role app instance target`removeAppTargetInstanceRoleForClient`	DELETE	Unassigns an app instance target from a role assignment to a client app
Unassign a client role app target`removeAppTargetRoleFromClient`	DELETE	Unassigns an OIN app target for a role assignment to a client app
Unassign a client role group target`removeGroupTargetRoleFromClient`	DELETE	Unassigns a Group target from a USER ADMIN, HELP DESK ADMIN, or GROUP MEMBERSHIP ADMIN role assignment to a client app.

RoleCResourceSet5

Create a resource set`createResourceSet`	POST	Creates a new resource set.
Delete a resource set`deleteResourceSet`	DELETE	Deletes a resource set by resourceSetIdOrLabel
List all resource sets`listResourceSets`	GET	Lists all resource sets with pagination support
Replace a resource set`replaceResourceSet`	PUT	Replaces the label and description of a resource set.
Retrieve a resource set`getResourceSet`	GET	Retrieves a resource set by resourceSetIdOrLabel

RoleCResourceSetResource6

Add a resource set resource with conditions`addResourceSetResource`	POST	Adds a resource with conditions for a resource set
Add more resources to a resource set`addResourceSetResources`	PATCH	Adds more resources to a resource set
Delete a resource set resource`deleteResourceSetResource`	DELETE	Deletes a resource (identified by resourceId) from a resource set
List all resource set resources`listResourceSetResources`	GET	Lists all resources for the resource set
Replace the resource set resource conditions`replaceResourceSetResource`	PUT	Replaces the conditions of a resource identified by resourceId in a resource set
Retrieve a resource set resource`getResourceSetResource`	GET	Retrieves a resource identified by resourceId in a resource set

RoleDResourceSetBinding4

Create a role resource set binding`createResourceSetBinding`	POST	Creates a binding for the resource set, custom role, and members (users or groups)
Delete a role resource set binding`deleteBinding`	DELETE	Deletes a binding of a role (identified by roleIdOrLabel) and a resource set (identified by resourceSetIdOrLabel)
List all role resource set bindings`listBindings`	GET	Lists all bindings for a resource set with pagination support.
Retrieve a role resource set binding`getBinding`	GET	Retrieves the binding of a role (identified by roleIdOrLabel) for a resource set (identified by resourceSetIdOrLabel)

RoleDResourceSetBindingMember4

Add more role resource set binding members`addMembersToBinding`	PATCH	Adds more members to a role resource set binding
List all role resource set binding members`listMembersOfBinding`	GET	Lists all members of a role resource set binding with pagination support
Retrieve a role resource set binding member`getMemberOfBinding`	GET	Retrieves a member (identified by memberId) that belongs to a role resource set binding
Unassign a role resource set binding member`unassignMemberFromBinding`	DELETE	Unassigns a member (identified by memberId) from a role resource set binding

RoleECustom5

Create a custom role`createRole`	POST	Creates a custom role
Delete a custom role`deleteRole`	DELETE	Deletes a custom role by roleIdOrLabel
List all custom roles`listRoles`	GET	Lists all custom roles with pagination support
Replace a custom role`replaceRole`	PUT	Replaces the label and description for a custom role by roleIdOrLabel
Retrieve a role`getRole`	GET	Retrieves a role by roleIdOrLabel

RoleECustomPermission5

Create a custom role permission`createRolePermission`	POST	Creates a permission (specified by permissionType) for a custom role
Delete a custom role permission`deleteRolePermission`	DELETE	Deletes a permission (identified by permissionType) from a custom role
List all custom role permissions`listRolePermissions`	GET	Lists all permissions for a custom role by roleIdOrLabel
Replace a custom role permission`replaceRolePermission`	PUT	Replaces a permission (specified by permissionType) for a custom role
Retrieve a custom role permission`getRolePermission`	GET	Retrieves a permission (identified by permissionType) for a custom role

Schema8

List the log stream schemas`listLogStreamSchemas`	GET	Lists the schema for all log stream types visible for this org
Retrieve a user schema`getUserSchema`	GET	Retrieves the schema for a user type
Retrieve the default app user schema for an app`getApplicationUserSchema`	GET	Retrieves the default schema for an app user.
Retrieve the default group schema`getGroupSchema`	GET	Retrieves the group schema
Retrieve the log stream schema for the schema type`getLogStreamSchema`	GET	Retrieves the schema for a log stream type.
Update a user schema`updateUserProfile`	POST	Updates a user schema.
Update the app user profile schema for an app`updateApplicationUserProfile`	POST	Updates the app user schema.
Update the group profile schema`updateGroupSchema`	POST	Updates the group profile schema.

ServiceAccount5

Create an app service account`createAppServiceAccount`	POST	Creates a new app service account for managing an app account
Delete an app service account`deleteAppServiceAccount`	DELETE	Deletes an app service account specified by ID
List all app service accounts`listAppServiceAccounts`	GET	Lists all app service accounts
Retrieve an app service account`getAppServiceAccount`	GET	Retrieves an app service account specified by ID
Update an existing app service account`updateAppServiceAccount`	PATCH	Updates an existing app service account specified by ID

Session3

Refresh a session`refreshSession`	POST	Refreshes an existing session using the id for that session.
Retrieve a session`getSession`	GET	Retrieves information about the session specified by the given session ID
Revoke a session`revokeSession`	DELETE	Revokes the specified session

SSFReceiver7

Activate a security events provider`activateSecurityEventsProviderInstance`	POST	Activates a security events provider instance by setting its status to ACTIVE.
Create a security events provider`createSecurityEventsProviderInstance`	POST	Creates a security events provider instance
Deactivate a security events provider`deactivateSecurityEventsProviderInstance`	POST	Deactivates a security events provider instance by setting its status to INACTIVE.
Delete a security events provider`deleteSecurityEventsProviderInstance`	DELETE	Deletes a security events provider instance specified by id
List all security events providers`listSecurityEventsProviderInstances`	GET	Lists all security events provider instances
Replace a security events provider`replaceSecurityEventsProviderInstance`	PUT	Replaces a security events provider instance specified by id
Retrieve the security events provider`getSecurityEventsProviderInstance`	GET	Retrieves the security events provider instance specified by id

SSFSecurityEventToken1

Publish a security event tokenpublishSecurityEventTokens POST Publishes a security event token (SET) sent by a security events provider.

SSFTransmitter8

Create an SSF stream`createSsfStream`	POST	Creates an SSF stream for an event receiver to start receiving security events in the form of Security Event Tokens (SETs) from Okta.
Delete an SSF stream`deleteSsfStream`	DELETE	Deletes the specified SSF stream.
Replace an SSF stream`replaceSsfStream`	PUT	Replaces all properties for an existing SSF stream configuration.
Retrieve the SSF stream configuration(s)`getSsfStreams`	GET	Retrieves either a list of all known SSF stream configurations or the individual configuration if specified by ID.
Retrieve the SSF stream status`getSsfStreamStatus`	GET	Retrieves the status of an SSF stream.
Retrieve the SSF transmitter metadata`getWellknownSsfMetadata`	GET	Retrieves SSF transmitter configuration metadata.
Update an SSF stream`updateSsfStream`	PATCH	Updates properties for an existing SSF stream configuration.
Verify an SSF stream`verifySsfStream`	POST	Verifies an SSF stream by publishing a verification event requested by a security events provider.

Subscription8

List all subscriptions for a role`listSubscriptionsRole`	GET	Lists all subscriptions available to a specified Role
List all subscriptions for a user`listSubscriptionsUser`	GET	Lists all subscriptions available to a specified user.
Retrieve a subscription for a role`getSubscriptionsNotificationTypeRole`	GET	Retrieves a subscription by notificationType for a specified Role
Retrieve a subscription for a user`getSubscriptionsNotificationTypeUser`	GET	Retrieves a subscription by notificationType for a specified user.
Subscribe a role to a specific notification type`subscribeByNotificationTypeRole`	POST	Subscribes a Role to a specified notification type.
Subscribe a user to a specific notification type`subscribeByNotificationTypeUser`	POST	Subscribes the current user to a specified notification type.
Unsubscribe a role from a specific notification type`unsubscribeByNotificationTypeRole`	POST	Unsubscribes a Role from a specified notification type.
Unsubscribe a user from a specific notification type`unsubscribeByNotificationTypeUser`	POST	Unsubscribes the current user from a specified notification type.

SystemLog1

List all System Log eventslistLogEvents GET Lists all System Log events

Template6

Create an SMS template`createSmsTemplate`	POST	Creates a new custom SMS template
Delete an SMS template`deleteSmsTemplate`	DELETE	Deletes an SMS template
List all SMS templates`listSmsTemplates`	GET	Lists all custom SMS templates.
Replace an SMS template`replaceSmsTemplate`	PUT	Replaces the SMS Template Notes: You can't update the default SMS Template.
Retrieve an SMS template`getSmsTemplate`	GET	Retrieves a specific template by id
Update an SMS template`updateSmsTemplate`	POST	Updates only some of the SMS Template properties: All properties within the custom SMS Template that have values are updated.

Theme9

Delete the background image`deleteBrandThemeBackgroundImage`	DELETE	Deletes a theme background image
Delete the favicon`deleteBrandThemeFavicon`	DELETE	Deletes a theme favicon.
Delete the logo`deleteBrandThemeLogo`	DELETE	Deletes a Theme logo.
List all themes`listBrandThemes`	GET	Lists all the themes in your brand.
Replace a theme`replaceBrandTheme`	PUT	Replaces a theme for a brand
Retrieve a theme`getBrandTheme`	GET	Retrieves a theme for a brand
Upload the background image`uploadBrandThemeBackgroundImage`	POST	Uploads and replaces the background image for the theme.
Upload the favicon`uploadBrandThemeFavicon`	POST	Uploads and replaces the favicon for the theme
Upload the logo`uploadBrandThemeLogo`	POST	Uploads and replaces the logo for the theme.

ThreatInsight2

Retrieve the ThreatInsight configuration`getCurrentConfiguration`	GET	Retrieves the ThreatInsight configuration for the org
Update the ThreatInsight configuration`updateConfiguration`	POST	Updates the ThreatInsight configuration for the org

TrustedOrigin7

Activate a trusted origin`activateTrustedOrigin`	POST	Activates a trusted origin.
Create a trusted origin`createTrustedOrigin`	POST	Creates a trusted origin
Deactivate a trusted origin`deactivateTrustedOrigin`	POST	Deactivates a trusted origin.
Delete a trusted origin`deleteTrustedOrigin`	DELETE	Deletes a trusted origin
List all trusted origins`listTrustedOrigins`	GET	Lists all trusted origins
Replace a trusted origin`replaceTrustedOrigin`	PUT	Replaces a trusted origin
Retrieve a trusted origin`getTrustedOrigin`	GET	Retrieves a trusted origin

UISchema5

Create a UI schema`createUISchema`	POST	Creates an input for an enrollment form
Delete a UI schema`deleteUISchemas`	DELETE	Deletes a UI Schema by id
List all UI schemas`listUISchemas`	GET	Lists all UI Schemas in your org
Replace a UI schema`replaceUISchemas`	PUT	Replaces a UI Schema by id
Retrieve a UI schema`getUISchema`	GET	Retrieves a UI Schema by id

User7

Create a user`createUser`	POST	Creates a new user in your Okta org with or without credentials.
Delete a user`deleteUser`	DELETE	Deletes a user permanently.
List all user blocks`listUserBlocks`	GET	Lists information about how the user is blocked from accessing their account
List all users`listUsers`	GET	Lists users in your org, with pagination in most cases.
Replace a user`replaceUser`	PUT	Replaces a user's profile, credentials, or both using strict-update semantics.
Retrieve a user`getUser`	GET	Retrieves a user from your Okta org.
Update a user`updateUser`	POST	Updates a user's profile or credentials with partial update semantics.

UserAuthenticatorEnrollment5

Create an auto-activated Phone authenticator enrollment`createAuthenticatorEnrollment`	POST	Creates a Phone authenticator enrollment that's automatically activated
Create an auto-activated TAC authenticator enrollment`createTacAuthenticatorEnrollment`	POST	Creates an auto-activated Temporary access code (TAC) authenticator enrollment
Delete an authenticator enrollment`deleteAuthenticatorEnrollment`	DELETE	Deletes an existing enrollment for the specified user.
List all authenticator enrollments`listAuthenticatorEnrollments`	GET	Lists all authenticator enrollments of the specified user
Retrieve an authenticator enrollment`getAuthenticatorEnrollment`	GET	Retrieves a user's authenticator enrollment by enrollmentId

UserClassification2

Replace the user's classification`replaceUserClassification`	PUT	Replaces the user's classification
Retrieve a user's classification`getUserClassification`	GET	Retrieves a user's classification

UserCred7

Expire the password`expirePassword`	POST	Expires the password.
Expire the password with a temporary password`expirePasswordWithTempPassword`	POST	Expires the password and resets the user's password to a temporary password.
Reset a password`resetPassword`	POST	Resets a password.
Reset password with recovery question`forgotPasswordSetNewPassword`	POST	Resets the user's password to the specified password if the provided answer to the recovery question is correct.
Start forgot password flow`forgotPassword`	POST	Starts the forgot password flow.
Update password`changePassword`	POST	Updates a user's password by validating the user's current password.
Update recovery question`changeRecoveryQuestion`	POST	Updates a user's recovery question and answer credential by validating the user's current password.

UserFactor13

Activate a factor`activateFactor`	POST	Activates a factor.
Enroll a factor`enrollFactor`	POST	Enrolls a supported factor for the specified user
List all enrolled factors`listFactors`	GET	Lists all enrolled factors for the specified user that are included in the highest priority authenticator enrollment policy that applies to the user.
List all supported factors`listSupportedFactors`	GET	Lists all the supported factors that can be enrolled for the specified user that are included in the highest priority authenticator enrollment policy that applies to the user.
List all supported security questions`listSupportedSecurityQuestions`	GET	Lists all available security questions for the specified user
List all YubiKey OTP tokens`listYubikeyOtpTokens`	GET	Lists all YubiKey OTP tokens
Resend a factor enrollment`resendEnrollFactor`	POST	Resends an sms, call, or email factor challenge as part of an enrollment flow.
Retrieve a factor`getFactor`	GET	Retrieves an existing factor for the specified user
Retrieve a factor transaction status`getFactorTransactionStatus`	GET	Retrieves the status of a push factor verification transaction
Retrieve a YubiKey OTP token`getYubikeyOtpTokenById`	GET	Retrieves the specified YubiKey OTP token by id
Unenroll a factor`unenrollFactor`	DELETE	Unenrolls an existing factor for the specified user.
Upload a YubiKey OTP seed`uploadYubikeyOtpTokenSeed`	POST	Uploads a seed for a user to enroll a YubiKey OTP
Verify a factor`verifyFactor`	POST	Verifies an OTP for a factor.

UserGrant6

List all grants for a client`listGrantsForUserAndClient`	GET	Lists all grants for a specified user and client
List all user grants`listUserGrants`	GET	Lists all grants for the specified user
Retrieve a user grant`getUserGrant`	GET	Retrieves a grant for the specified user
Revoke a user grant`revokeUserGrant`	DELETE	Revokes one grant for a specified user
Revoke all grants for a client`revokeGrantsForUserAndClient`	DELETE	Revokes all grants for the specified user and client
Revoke all user grants`revokeUserGrants`	DELETE	Revokes all grants for a specified user

UserLifecycle7

Activate a user`activateUser`	POST	Activates a user.
Deactivate a user`deactivateUser`	POST	Deactivates a user.
Reactivate a user`reactivateUser`	POST	Reactivates a user.
Reset the factors`resetFactors`	POST	Resets all factors for the specified user.
Suspend a user`suspendUser`	POST	Suspends a user.
Unlock a user`unlockUser`	POST	Unlocks a user with a LOCKED OUT status or unlocks a user with an ACTIVE status that's blocked from unknown devices.
Unsuspend a user`unsuspendUser`	POST	Unsuspends a user and returns them to the ACTIVE state.

UserLinkedObject3

Assign a linked object value for primary`assignLinkedObjectValueForPrimary`	PUT	Assigns the first user as the associated and the second user as the primary for the specified relationship.
Delete a linked object value`deleteLinkedObjectForUser`	DELETE	Deletes any existing relationship between the associated and primary user.
List the primary or all of the associated linked object values`listLinkedObjectsForUser`	GET	Lists either the self link for the primary user or all associated users in the relationship specified by relationshipName.

UserOAuth4

List all refresh tokens for a client`listRefreshTokensForUserAndClient`	GET	Lists all refresh tokens issued for the specified user and client
Retrieve a refresh token for a client`getRefreshTokenForUserAndClient`	GET	Retrieves a refresh token issued for the specified user and client
Revoke a token for a client`revokeTokenForUserAndClient`	DELETE	Revokes the specified refresh and access tokens
Revoke all refresh tokens for a client`revokeTokensForUserAndClient`	DELETE	Revokes all refresh tokens issued for the specified user and client

UserResource4

List all assigned app links`listAppLinks`	GET	Lists all app links for all direct or indirect (through group membership) assigned apps
List all clients`listUserClients`	GET	Lists all client resources for which the specified user has grants or tokens
List all devices for an enrolled user`listUserDevices`	GET	Lists all devices enrolled by a user
List all groups`listUserGroups`	GET	Lists all groups of which the user is a member Note: To list all groups in your org, use the List all groups endpoints in the Groups API.

UserRisk2

Retrieve the user's risk`getUserRisk`	GET	Retrieves the user risk object for a user ID
Upsert the user's risk`upsertUserRisk`	PUT	Upserts (creates or updates) the user risk object for a user ID.

UserSession1

Revoke all user sessionsrevokeUserSessions DELETE Revokes all active identity provider sessions of the user.

UserType6

Create a user type`createUserType`	POST	Creates a new user type.
Delete a user type`deleteUserType`	DELETE	Deletes a user type permanently.
List all user types`listUserTypes`	GET	Lists all user types in your org
Replace a user type`replaceUserType`	PUT	Replaces an existing user type.
Retrieve a user type`getUserType`	GET	Retrieves a user type by ID.
Update a user type`updateUserType`	POST	Updates an existing user type.

WebAuthnPreregistration7

Activate a preregistered WebAuthn factor`activatePreregistrationEnrollment`	POST	Activates a preregistered WebAuthn factor.
Assign the fulfillment error status to a WebAuthn`assignFulfillmentErrorWebAuthnPreregistrationFactor`	POST	Assigns the fulfillment error status to a WebAuthn preregistration factor for a user.
Delete a WebAuthn preregistration factor`deleteWebAuthnPreregistrationFactor`	DELETE	Deletes a specific WebAuthn preregistration factor for a user
Enroll a preregistered WebAuthn factor`enrollPreregistrationEnrollment`	POST	Enrolls a preregistered WebAuthn factor.
Generate a fulfillment request`generateFulfillmentRequest`	POST	Generates a fulfillment request by sending a WebAuthn preregistration event to start the flow.
List all WebAuthn preregistration factors`listWebAuthnPreregistrationFactors`	GET	Lists all WebAuthn preregistration factors for the specified user
Send a PIN to user`sendPin`	POST	Sends the decoded PIN for the specified WebAuthn preregistration enrollment.