{ "components": { "examples": { "APIDevicesListAllResponse": { "summary": "List all devices with embedded users", "value": [ { "_embedded": { "users": [] }, "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7YAHhjXrMK0g4/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET", "PATCH", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7YAHhjXrMK0g4" }, "users": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7YAHhjXrMK0g4/users" } }, "created": "2019-10-02T18:03:07.000Z", "id": "guo4a5u7YAHhjXrMK0g4", "lastUpdated": "2019-10-02T18:03:07.000Z", "profile": { "diskEncryptionType": "ALL_INTERNAL_VOLUMES", "displayName": "Example device name 1", "platform": "WINDOWS", "registered": true, "secureHardwarePresent": false, "serialNumber": "XXDDRFCFRGF3M8MD6D", "sid": "S-1-11-111" }, "resourceAlternateId": null, "resourceDisplayName": { "sensitive": false, "value": "Example device name 1" }, "resourceId": "guo4a5u7YAHhjXrMK0g4", "resourceType": "UDDevice", "status": "CREATED" }, { "_embedded": { "users": [ { "created": "2021-10-01T16:52:41.000Z", "managementStatus": "MANAGED", "screenLockType": "BIOMETRIC", "user": { "_links": { "changePassword": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/credentials/change_password" }, "changeRecoveryQuestion": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/credentials/change_recovery_question", "method": "POST" }, "deactivate": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/lifecycle/deactivate" }, "expirePassword": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/lifecycle/expire_password", "method": "POST" }, "forgotPassword": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/credentials/forgot_password", "method": "POST" }, "resetPassword": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/lifecycle/reset_password", "method": "POST" }, "schema": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/osc7ut9Uu76oHVUZc0w4" }, "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7" }, "suspend": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/lifecycle/suspend", "method": "POST" }, "type": { "href": "https://{yourOktaDomain}/api/v1/meta/types/user/oty7ut9Uu76oHVUZc0w4" } }, "activated": "2020-08-12T06:46:50.000Z", "created": "2020-08-12T06:46:50.000Z", "credentials": { "password": {}, "provider": { "name": "OKTA", "type": "OKTA" }, "recovery_question": { "question": "What is the food you least liked as a child?" } }, "id": "00u17vh0q8ov8IU881d7", "lastLogin": "2021-10-14T09:04:48.000Z", "lastUpdated": "2021-01-27T21:05:32.000Z", "passwordChanged": "2020-08-12T06:46:50.000Z", "profile": { "email": "email@email.com", "firstName": "fname", "lastName": "lname", "login": "email@email.com", "mobilePhone": null, "secondEmail": null }, "status": "ACTIVE", "statusChanged": "2021-01-27T21:05:32.000Z", "type": { "id": "oty7ut9Uu76oHVUZc0w4" } } } ] }, "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7YAHhjXrMK0g5/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET", "PATCH", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7YAHhjXrMK0g5" }, "users": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7YAHhjXrMK0g5/users" } }, "created": "2023-06-21T23:24:02.000Z", "id": "guo4a5u7YAHhjXrMK0g5", "lastUpdated": "2023-06-21T23:24:02.000Z", "profile": { "diskEncryptionType": "USER", "displayName": "Example device name 2", "manufacturer": "Google", "model": "Pixel 6", "osVersion": "13:2023-05-05", "platform": "ANDROID", "registered": true, "secureHardwarePresent": true }, "resourceAlternateId": null, "resourceDisplayName": { "sensitive": false, "value": "Example device name 2" }, "resourceId": "guo4a5u7YAHhjXrMK0g5", "resourceType": "UDDevice", "status": "ACTIVE" } ] }, "APIDevicesListAllUserSummaryResponse": { "summary": "List all devices with embedded user summaries", "value": [ { "_embedded": { "users": [] }, "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7YAHhjXrMK0g4/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET", "PATCH", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7YAHhjXrMK0g4" }, "users": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7YAHhjXrMK0g4/users" } }, "created": "2019-10-02T18:03:07.000Z", "id": "guo4a5u7YAHhjXrMK0g4", "lastUpdated": "2019-10-02T18:03:07.000Z", "profile": { "diskEncryptionType": "ALL_INTERNAL_VOLUMES", "displayName": "Example device name 1", "platform": "WINDOWS", "registered": true, "secureHardwarePresent": false, "serialNumber": "XXDDRFCFRGF3M8MD6D", "sid": "S-1-11-111" }, "resourceAlternateId": null, "resourceDisplayName": { "sensitive": false, "value": "Example device name 1" }, "resourceId": "guo4a5u7YAHhjXrMK0g4", "resourceType": "UDDevice", "status": "CREATED" }, { "_embedded": { "users": [ { "created": "2021-10-01T16:52:41.000Z", "managementStatus": "MANAGED", "screenLockType": "BIOMETRIC", "user": { "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7" } }, "id": "00u17vh0q8ov8IU881d7", "profile": { "email": "email@email.com", "firstName": "fname", "lastName": "lname", "login": "email@email.com" }, "realmId": "00u17vh0q8ov8IU8T0g5" } } ] }, "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7YAHhjXrMK0g5/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET", "PATCH", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7YAHhjXrMK0g5" }, "users": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7YAHhjXrMK0g5/users" } }, "created": "2023-06-21T23:24:02.000Z", "id": "guo4a5u7YAHhjXrMK0g5", "lastUpdated": "2023-06-21T23:24:02.000Z", "profile": { "diskEncryptionType": "USER", "displayName": "Example device name 2", "manufacturer": "Google", "model": "Pixel 6", "osVersion": "13:2023-05-05", "platform": "ANDROID", "registered": true, "secureHardwarePresent": true }, "resourceAlternateId": null, "resourceDisplayName": { "sensitive": false, "value": "Example device name 2" }, "resourceId": "guo4a5u7YAHhjXrMK0g5", "resourceType": "UDDevice", "status": "ACTIVE" } ] }, "APIDevicesListAllUsersResponse": { "summary": "Response example", "value": [ { "created": "2021-08-20T17:13:35.000Z", "managementStatus": "NOT_MANAGED", "screenLockType": "BIOMETRIC", "user": { "_links": { "changePassword": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/credentials/change_password", "method": "POST" }, "changeRecoveryQuestion": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/credentials/change_recovery_question", "method": "POST" }, "deactivate": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/lifecycle/deactivate", "method": "POST" }, "expirePassword": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/lifecycle/expire_password", "method": "POST" }, "forgotPassword": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/credentials/forgot_password", "method": "POST" }, "resetFactors": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/lifecycle/reset_factors", "method": "POST" }, "resetPassword": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/lifecycle/reset_password", "method": "POST" }, "schema": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/osc17vh0n2EHVnbYF1d7" }, "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7" }, "suspend": { "href": "https://{yourOktaDomain}/api/v1/users/00u17vh0q8ov8IU881d7/lifecycle/suspend", "method": "POST" }, "type": { "href": "https://{yourOktaDomain}/api/v1/meta/types/user/oty17vh0n2EHVnbYF1d7" } }, "activated": null, "created": "2021-08-20T16:08:25.000Z", "credentials": { "password": null, "provider": { "name": "OKTA", "type": "OKTA" } }, "id": "00u17vh0q8ov8IU881d7", "lastLogin": "2023-04-18T17:54:12.000Z", "lastUpdated": "2021-12-20T18:27:30.000Z", "passwordChanged": "2021-12-20T18:27:30.000Z", "profile": { "email": "bunk.moreland@example.com", "firstName": "Bunk", "lastName": "Moreland", "login": "bunk.moreland@example.com", "mobilePhone": null, "secondEmail": null }, "status": "ACTIVE", "statusChanged": "2021-08-20T16:39:41.000Z", "type": { "id": "oty17vh0n2EHVnbYF1d7" } } } ] }, "APIPushProvidersListAllResponse": { "value": [ { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/push-providers/{pushProviderId}" } }, "configuration": { "fileName": "fileName.p8", "keyId": "ABC123DEFG", "teamId": "DEF123GHIJ" }, "id": "ppchvbeucdTgqeiGxR0g4", "lastUpdatedDate": "2022-01-00T00:00:00.000Z", "name": "Example Push Provider 1", "providerType": "APNS" }, { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/push-providers/{pushProviderId}" } }, "configuration": { "fileName": "fileName.json", "projectId": "PROJECT_ID" }, "id": "ppctekcmngGaqeiBxB0g4", "lastUpdatedDate": "2022-01-00T00:00:00.000Z", "name": "Example Push Provider 2", "providerType": "FCM" } ] }, "APIServiceIntegrationInstanceSecretListResponse": { "summary": "Secrets list response example", "value": [ { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/integrations/api/v1/api-services/0oa1nkheCuDn82XVI0g4/credentials/secrets/ocs2f4zrZbs8nUa7p0g4/lifecycle/activate" }, "delete": { "hints": { "allow": [ "DELETE" ] }, "href": "https://{yourOktaDomain}/integrations/api/v1/api-services/0oa1nkheCuDn82XVI0g4/credentials/secrets/ocs2f4zrZbs8nUa7p0g4" } }, "client_secret": "***DhOW", "created": "2023-02-21T20:08:24.000Z", "id": "ocs2f4zrZbs8nUa7p0g4", "lastUpdated": "2023-02-21T20:08:24.000Z", "secret_hash": "yk4SVx4sUWVJVbHt6M-UPA", "status": "INACTIVE" }, { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/integrations/api/v1/api-services/0oa1nkheCuDn82XVI0g4/credentials/secrets/ocs2f50kZB0cITmYU0g4/lifecycle/deactivate" } }, "client_secret": "***MQGQ", "created": "2023-04-06T21:32:33.000Z", "id": "ocs2f50kZB0cITmYU0g4", "lastUpdated": "2023-04-06T21:32:33.000Z", "secret_hash": "0WOOvBSzV9clc4Nr7Rbaug", "status": "ACTIVE" } ] }, "APIServiceIntegrationListResponse": { "summary": "List response example", "value": [ { "_links": { "client": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/clients/0oa72lrepvp4WqEET1d9" }, "logo": { "href": "https://{logoDomain}/{logoPath}/my_app_cie_small_logo", "name": "small" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/integrations/api/v1/api-services/0oa72lrepvp4WqEET1d9" } }, "configGuideUrl": "https://{docDomain}/my-app-cie/configuration-guide", "createdAt": "2023-02-21T20:08:24.000Z", "createdBy": "00uu3u0ujW1P6AfZC2d5", "grantedScopes": [ "okta.logs.read", "okta.groups.read", "okta.users.read" ], "id": "0oa72lrepvp4WqEET1d9", "name": "My App Cloud Identity Engine", "type": "my_app_cie" } ] }, "APIServiceIntegrationResponse": { "summary": "Response example", "value": { "_links": { "client": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/clients/0oa72lrepvp4WqEET1d9" }, "logo": { "href": "https://{logoDomain}/{logoPath}/my_app_cie_small_logo", "name": "small" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/integrations/api/v1/api-services/0oa72lrepvp4WqEET1d9" } }, "configGuideUrl": "https://{docDomain}/my-app-cie/configuration-guide", "createdAt": "2023-02-21T20:08:24.000Z", "createdBy": "00uu3u0ujW1P6AfZC2d5", "grantedScopes": [ "okta.logs.read", "okta.groups.read", "okta.users.read" ], "id": "0oa72lrepvp4WqEET1d9", "name": "My App Cloud Identity Engine", "type": "my_app_cie" } }, "APIServiceWithPropertiesIntegrationResponse": { "summary": "Response example with app properties", "value": { "_links": { "client": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/clients/0oa72lrepvp4WqEET1d9" }, "logo": { "href": "https://{logoDomain}/{logoPath}/my_app_cie_small_logo", "name": "small" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/integrations/api/v1/api-services/0oa72lrepvp4WqEET1d9" } }, "configGuideUrl": "https://{docDomain}/my-app-cie/configuration-guide", "createdAt": "2023-02-21T20:08:24.000Z", "createdBy": "00uu3u0ujW1P6AfZC2d5", "grantedScopes": [ "okta.logs.read", "okta.groups.read", "okta.users.read" ], "id": "0oa72lrepvp4WqEET1d9", "name": "My App Cloud Identity Engine", "properties": { "baseUrl": "https://example.com", "orgId": "42" }, "type": "my_app_cie" }, "x-okta-lifecycle": { "isGenerallyAvailable": true, "lifecycle": "GA" } }, "APIUserListDevicesResponse": { "value": [ { "created": "2020-11-03T21:47:01.000Z", "device": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo8jx5vVoxfvJeLb0w4/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PATCH", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo8jx5vVoxfvJeLb0w4" }, "suspend": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo8jx5vVoxfvJeLb0w4/lifecycle/suspend" }, "users": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo8jx5vVoxfvJeLb0w4/users" } }, "created": "2020-11-03T21:47:01.000Z", "id": "guo8jx5vVoxfvJeLb0w4", "lastUpdated": "2020-11-03T23:46:27.000Z", "profile": { "diskEncryptionType": "NONE", "displayName": "DESKTOP-EHAD3IE", "manufacturer": "International Corp", "model": "VMware7,1", "osVersion": "10.0.18362", "platform": "WINDOWS", "registered": true, "secureHardwarePresent": false, "serialNumber": "56 4d 4f 95 74 c5 d3 e7-fc 3a 57 9c c2 f8 5d ce", "sid": "S-1-5-21-3992267483-1860856704-2413701314-500", "udid": "954F4D56-C574-E7D3-FC3A-579CC2F85DCE" }, "resourceAlternateId": null, "resourceDisplayName": { "sensitive": false, "value": "DESKTOP-EHAD3IE" }, "resourceId": "guo8jx5vVoxfvJeLb0w4", "resourceType": "UDDevice", "status": "ACTIVE" }, "deviceUserId": "lnk46w61OLJz1uSQW0g4" } ] }, "ActivateFactorCallResponse": { "summary": "call", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/clf1o51EADOTFXHHBXBP" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/clf1o51EADOTFXHHBXBP/verify" } }, "created": "2014-08-06T16:56:31.000Z", "factorType": "call", "id": "clf1o51EADOTFXHHBXBP", "lastUpdated": "2014-08-06T16:56:31.000Z", "profile": { "phoneExtension": "1234", "phoneNumber": "+1-555-415-1337" }, "provider": "OKTA", "status": "ACTIVE", "vendorName": "OKTA" } }, "ActivateFactorEmailResponse": { "summary": "email", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00umvfJKwXOQ1mEL50g3/factors/emfnf3gSScB8xXoXK0g3" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00umvfJKwXOQ1mEL50g3" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00umvfJKwXOQ1mEL50g3/factors/emfnf3gSScB8xXoXK0g3/verify" } }, "factorType": "email", "id": "emfnf3gSScB8xXoXK0g3", "profile": { "email": "changed@clouditude.net" }, "provider": "OKTA", "status": "ACTIVE", "vendorName": "OKTA" } }, "ActivateFactorPushResponse": { "summary": "push", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/opf3hkfocI4JTLAju0g4" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/opf3hkfocI4JTLAju0g4/verify" } }, "created": "2015-03-16T18:01:28.000Z", "factorType": "push", "id": "opf3hkfocI4JTLAju0g4", "lastUpdated": "2015-08-27T14:25:17.000Z", "profile": { "credentialId": "dade.murphy@example.com", "deviceType": "SmartPhone_IPhone", "name": "Gibson", "platform": "IOS", "version": "9.0" }, "provider": "OKTA", "status": "ACTIVE", "vendorName": "OKTA" } }, "ActivateFactorSmsResponse": { "summary": "sms", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/sms1o51EADOTFXHHBXBP" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/sms1o51EADOTFXHHBXBP/verify" } }, "created": "2014-08-06T16:56:31.000Z", "factorType": "sms", "id": "sms1o51EADOTFXHHBXBP", "lastUpdated": "2014-08-06T16:56:31.000Z", "profile": { "phoneNumber": "+1-555-415-1337" }, "provider": "OKTA", "status": "ACTIVE", "vendorName": "OKTA" } }, "ActivateFactorTotpResponse": { "summary": "token:software:totp", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ostf1fmaMGJLMNGNLIVG" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ostf1fmaMGJLMNGNLIVG/verify" } }, "created": "2014-07-16T16:13:56.000Z", "factorType": "token:software:totp", "id": "ostf1fmaMGJLMNGNLIVG", "lastUpdated": "2014-08-06T00:31:07.000Z", "profile": { "credentialId": "dade.murphy@example.com" }, "provider": "OKTA", "status": "ACTIVE", "vendorName": "OKTA" } }, "ActivateFactorU2fRequest": { "summary": "u2f", "value": { "clientData": "eyJ0eXAiOiJuYXZpZ2F0b3IuaWQuZmluaXNoRW5yb2xsbWVudCIsImNoYWxsZW5nZSI6IlhxR0h0RTBoUkxuVEoxYUF5U1oyIiwib3JpZ2luIjoiaHR0cHM6Ly9sb2NhbGhvc3Q6MzAwMCIsImNpZF9wdWJrZXkiOiJ1bnVzZWQifQ", "registrationData": "BQTEMUyOM8h1TiZG4DL-RdMr-tYgTYSf62Y52AmwEFTiSYWIRVO5L-MwWdRJOthmV3J3JrqpmGfmFb820-awx1YIQFlTvkMhxItHlpkzahEqicpw7SIH9yMfTn2kaDcC6JaLKPfV5ds0vzuxF1JJj3gCM01bRC-HWI4nCVgc-zaaoRgwggEcMIHDoAMCAQICCwD52fCSMoNczORdMAoGCCqGSM49BAMCMBUxEzARBgNVBAMTClUyRiBJc3N1ZXIwGhcLMDAwMTAxMDAwMFoXCzAwMDEwMTAwMDBaMBUxEzARBgNVBAMTClUyRiBEZXZpY2UwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQFKJupuUgPQcRHUphaW5JPfLvkkwlEwlHKk_ntSp7MS4aTHJyGnpziqncrjiTC_oUVtb-wN-y_t_IMIjueGkhxMAoGCCqGSM49BAMCA0gAMEUCIQDBo6aOLxanIUYnBX9iu3KMngPnobpi0EZSTkVtLC8_cwIgC1945RGqGBKfbyNtkhMifZK05n7fU-gW37Bdnci5D94wRQIhAJv3VvclbRkHAQhaUR8rr8qFTg9iF-GtHoXU95vWaQdyAiAbEr-440U4dQAZF-Sj8G2fxgh5DkgkkWpyUHZhz7N9ew" } }, "ActivateFactorU2fResponse": { "summary": "u2f", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/fuf2rovRxogXJ0nDy0g4" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/fuf2rovRxogXJ0nDy0g4/verify" } }, "created": "2018-05-24T20:43:19.000Z", "factorType": "u2f", "id": "fuf2rovRxogXJ0nDy0g4", "lastUpdated": "2018-05-24T21:43:32.000Z", "profile": { "credentialId": "WVO-QyHEi0eWmTNqESqJynDtIgf3Ix9OfaRoNwLoloso99Xl2zS_O7EXUkmPeAIzTVtEL4dYjicJWBz7NpqhGA", "version": "U2F_V2" }, "provider": "FIDO", "status": "ACTIVE", "vendorName": "FIDO" } }, "ActivateFactorWebauthnRequest": { "summary": "webAuthn", "value": { "attestation": "o2NmbXRmcGFja2VkZ2F0dFN0bXSiY2FsZyZjc2lnWEgwRgIhAMvf2+dzXlHZN1um38Y8aFzrKvX0k5dt/hnDu9lahbR4AiEAuwtMg3IoaElWMp00QrP/+3Po/6LwXfmYQVfsnsQ+da1oYXV0aERhdGFYxkgb9OHGifjS2dG03qLRqvXrDIRyfGAuc+GzF1z20/eVRV2wvl6tzgACNbzGCmSLCyXx8FUDAEIBvWNHOcE3QDUkDP/HB1kRbrIOoZ1dR874ZaGbMuvaSVHVWN2kfNiO4D+HlAzUEFaqlNi5FPqKw+mF8f0XwdpEBlClAQIDJiABIVgg0a6oo3W0JdYPu6+eBrbr0WyB3uJLI3ODVgDfQnpgafgiWCB4fFo/5iiVrFhB8pNH2tbBtKewyAHuDkRolcCnVaCcmQ==", "clientData": "eyJjaGFsbGVuZ2UiOiJVSk5wYW9sVWt0dF9vcEZPNXJMYyIsIm9yaWdpbiI6Imh0dHBzOi8vcmFpbi5va3RhMS5jb20iLCJ0eXBlIjoid2ViYXV0aG4uY3JlYXRlIn0=" } }, "ActivateFactorWebauthnResponse": { "summary": "webAuthn", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/fwf2rovRxogXJ0nDy0g4" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/fwf2rovRxogXJ0nDy0g4/verify" } }, "created": "2018-05-24T20:43:19.000Z", "factorType": "webauthn", "id": "fwf2rovRxogXJ0nDy0g4", "lastUpdated": "2018-05-24T21:43:32.000Z", "profile": { "authenticatorName": "MacBook Touch ID", "credentialId": "l3Br0n-7H3g047NqESqJynFtIgf3Ix9OfaRoNwLoloso99Xl2zS_O7EXUkmPeAIzTVtEL4dYjicJWBz7NpqhGA" }, "provider": "FIDO", "status": "ACTIVE", "vendorName": "FIDO" } }, "ActivateIdPResponse": { "summary": "Activate an IdP", "value": { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize?idp=0oa62bfdiumsUndnZ0h7&\n client_id={clientId}&response_type={responseType}&response_mode={responseMode}&\n scope={scopes}&redirect_uri={redirectUri}&state={state}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize/callback" } }, "created": "2016-03-24T23:21:49.000Z", "id": "0oa62bfdiumsUndnZ0h7", "lastUpdated": "2016-03-25T19:14:23.000Z", "name": "Google", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.email" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://accounts.google.com/o/oauth2/auth" }, "token": { "binding": "HTTP-POST", "url": "https://www.googleapis.com/oauth2/v3/token" } }, "scopes": [ "profile", "email", "openid" ], "type": "OIDC" }, "status": "ACTIVE", "type": "GOOGLE" } }, "ActivateNetworkZone": { "summary": "Activated network zone", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzowc1U5Jh5xuAK0o0g3/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzowc1U5Jh5xuAK0o0g3" } }, "created": "2021-06-24T20:37:32.000Z", "gateways": [ { "type": "CIDR", "value": "1.2.3.4/24" } ], "id": "nzowc1U5Jh5xuAK0o0g3", "lastUpdated": "2021-06-24T20:37:32.000Z", "name": "MyIpZone", "proxies": [ { "type": "RANGE", "value": "3.3.4.5-3.3.4.15" } ], "status": "ACTIVE", "system": false, "type": "IP", "usage": "POLICY" } }, "ActiveAuthorizationServerKey": { "summary": "Active authorization server key", "value": { "_links": { "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/credentials/keys/RQ8DuhdxCczyMvy7GNJb4Ka3lQ99vrSo3oFBUiZjzzc" } }, "alg": "RS256", "e": "AQAB", "kid": "RQ8DuhdxCczyMvy7GNJb4Ka3lQ99vrSo3oFBUiZjzzc", "kty": "RSA", "n": "g0MirhrysJMPm_wK45jvMbbyanfhl-jmTBv0o69GeifPaISaXGv8LKn3-CyJvUJcjjeHE17KtumJWVxUDRzFqtIMZ1ctCZyIAuWO0n LKilg7_EIDXJrS8k14biqkPO1lXGFwtjo3zLHeFSLw6sWf-CEN9zv6Ff3IAXb-RMYpfh-bVrxIgWsWCxjLW-UKI3la-gs0nWHH2PJr5HLJuI JIOL5HLJuIJIOLWahqTnm_r1LSCSYr6N4C-fh--w2_BW8DzTHalBYe76bNr0d7AqtR4tGazmrvrc79Wa2bjyxmhhN1u9jSaZQqq-3VZEod8q3, WHH2PJ5v1LoXniJQ4a2W8nDVqb6h4E8MUKYOpljTfQ", "status": "ACTIVE", "use": "sig" } }, "ActiveIdPSigningKeyCredentialResponse": { "summary": "IdP active signing key credential", "value": [ { "created": "2025-04-14T16:29:59.000Z", "e": "AQAB", "expiresAt": "2035-04-14T16:29:59.000Z", "kid": "your-key-id", "kty": "RSA", "lastUpdated": "2025-04-14T16:29:59.000Z", "n": "wdmW7pNqxzmlrsWbHq6rQJDiMu4T344AKEzQ1jGffyCLCU-HKk5WqIVtQ4EJ5FU3Rk6kNeoTdkQbxn7t2QFj37ScHZkxXDbNEhFbZpvGh7-rYBG7TCnk8jO9ct_bpT-PCLCgC9L_67H2eCXXN-_gFVZAx7KEibb4NgUET2p34b5scGI2LwEefS-z8UBGlNkg9+SmI9PvjMXplFKazb6qlb27fp0PSfC4S5g8kOCqEGC9oNOCBHO5jyzlzcFq04AIaAX9N1X13UULrj-262O1-RCnQNTadbdrO6FXwfQ6lsLmvWCFBVzLTqxYxCGNY85lhAH1zjoEvXnInKYgnvmcuw", "use": "sig", "x5c": [ "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" ], "x5t#S256": "pX0kpGWPotMaEqqtIoOH9L-sFBa-htNFu0MZiJz1Hi4" } ] }, "AddMappingBody": { "summary": "Update an existing profile mapping by adding one or more properties", "value": { "properties": { "fullName": { "expression": "user.firstName + user.lastName", "pushStatus": "PUSH" }, "nickName": { "expression": "user.nickName", "pushStatus": "PUSH" } } } }, "AddMappingResponse": { "summary": "Update an existing profile mapping by adding one or more properties", "value": { "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/mappings/prm1k48weFSOnEUnw0g4" } }, "id": "prm1k47ghydIQOTBW0g4", "properties": { "fullName": { "expression": "user.firstName + user.lastName", "pushStatus": "PUSH" }, "nickName": { "expression": "user.nickName", "pushStatus": "PUSH" } }, "source": { "_links": { "schema": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/oscsbePhQ3yqt4cVv0g3" }, "self": { "href": "https://{yourOktaDomain}/api/v1/meta/types/user/otysbePhQ3yqt4cVv0g3" } }, "id": "otysbePhQ3yqt4cVv0g3", "name": "user", "type": "user" }, "target": { "_links": { "schema": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/apps/0oa1qmn4LZQQEH0wZ0g4/default" }, "self": { "href": "https://{yourOktaDomain}/api/v1/apps/0oa1qmn4LZQQEH0wZ0g4" } }, "id": "0oa1qmn4LZQQEH0wZ0g4", "name": "okta_org2org", "type": "appuser" } } }, "AddOAuth2ResourceServerJsonWebKeyRequest": { "summary": "JSON Web Key request example", "value": { "e": "AQAB", "kid": "ASHJHGasa782333-Sla3x3POBiIxDreBCdZuFs5B", "kty": "RSA", "n": "AJncrzOrouIUCSMlRL0HU.....Kuine49_CEVR4GPn=", "status": "INACTIVE", "use": "enc" } }, "AdminConsoleSettingsExample": { "summary": "Default Okta Admin Console settings", "value": { "sessionIdleTimeoutMinutes": 15, "sessionMaxLifetimeMinutes": 720 } }, "AerialConsentDetails": { "description": "Example response of consent details", "value": { "accountId": "0200bs0617vvhv2v675mch1cukp", "grantDate": "2023-04-06T21:32:33.000Z", "grantedBy": "00uabcdefg1234567890" } }, "AerialConsentInvalidAccountIdResponse": { "description": "Aerial account ID is invalid", "value": { "errorCauses": [ { "errorSummary": "Invalid aerial account ID." } ], "errorCode": "E0000001", "errorId": "oaewjePjfdBT7m71KkPz0Ipaw", "errorLink": "E0000001", "errorSummary": "API validation failed: account" } }, "AerialConsentOrgAlreadyLinkedResponse": { "description": "The revoke operation isn't possible when the org is already linked", "value": { "errorCauses": [ { "errorSummary": "The org is already linked to an Account." } ], "errorCode": "E0000001", "errorId": "oae_wheRkaxRT-EFAXwBmBKLg", "errorLink": "E0000001", "errorSummary": "API validation failed: account" } }, "AerialGrantAlreadyPresentErrorResponse": { "description": "Grant is already present", "value": { "errorCauses": [ { "errorSummary": "The org already has a consent grant added to Aerial." } ], "errorCode": "E0000001", "errorId": "oaewjePjfdBT7m71KkPz0Ipaw", "errorLink": "E0000001", "errorSummary": "Api validation failed: account" } }, "AerialGrantNotFoundResponse": { "description": "No grant found for org", "value": { "errorCauses": [], "errorCode": "E0000007", "errorId": "sampleFYH_dTSSTdpPYIAdHJw", "errorLink": "E0000007", "errorSummary": "Not found: Resource not found: grant (String)" } }, "AllAssignmentsOperationResponse": { "value": { "_links": { "self": { "href": "http://your-subdomain.okta.com/api/v1/operations/rre4mje4ez7B2a7B60g7", "method": "GET", "rel": "self" } }, "assignmentOperation": { "configuration": { "id": "ALL", "name": "All Assignments" } }, "completed": "2023-10-25T21:02:54.000Z", "created": "2023-10-25T21:02:54.000Z", "id": "rre4mje4ez7B2a7B60g7", "numUserMoved": 50, "started": "2023-10-25T21:02:54.000Z", "status": "COMPLETED", "type": "realm:assignment" } }, "AllCustomAAGUIDResponse": { "summary": "List of custom AAGUIDs", "value": [ { "_links": { "self": { "hints": { "allow": [ "GET", "PUT", "PATCH", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/aaguids/cb69481e-8ff7-4039-93ec-0a272911111" } }, "aaguid": "cb69481e-8ff7-4039-93ec-0a272911111", "attestationRootCertificates": [ { "exp": "2035-05-26T16:04:58.000Z", "iss": "Yubico U2F Root CA Serial 457200631", "x5c": "X5C...", "x5t#S256": "SHA-256 x5t of the X.509 root certificate" } ], "authenticatorCharacteristics": { "fipsCompliant": false, "hardwareProtected": false, "platformAttached": false }, "name": "My Security Key" } ] }, "AllowOktaSupportAccessStatus": { "summary": "Allow Okta Support access", "value": { "caseNumber": "1011001", "impersonation": { "expiration": "2024-01-24T11:13:14.000Z", "status": "ENABLED" } } }, "AllowOktaSupportAccessStatusRequest": { "summary": "Allow Okta Support access", "value": { "impersonation": { "status": "ENABLED" } } }, "AllowSelfAssigned": { "summary": "Allow self-assigned Okta Support cases", "value": { "caseNumber": "1011001", "selfAssigned": { "status": "APPROVED" } } }, "AllowSelfAssignedRequest": { "summary": "Allow self-assigned Okta Support cases", "value": { "selfAssigned": { "status": "APPROVED" } } }, "ApiServiceExample": { "summary": "API Service Configuration example", "value": { "authenticationMethod": "client_secret_basic", "scopes": [ "okta.users.manage", "okta.groups.read" ], "setupInstructionsUri": "https://doc.example.com/api-service-setup" } }, "ApiTokenListMetadataResponse": { "value": [ { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/api-tokens/00Tabcdefg1234567890" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00uabcdefg1234567890" } }, "clientName": "Okta API", "created": "2021-11-09T20:38:10.000Z", "expiresAt": "2021-12-11T20:38:10.000Z", "id": "00Tabcdefg1234567890", "lastUpdated": "2021-11-11T20:38:10.000Z", "name": "My API Token", "network": { "connection": "ANYWHERE" }, "tokenWindow": "P30D", "userId": "00uabcdefg1234567890" }, { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/api-tokens/00T1234567890abcdefg" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00uabcdefg1234567890" } }, "clientName": "Okta API", "created": "2021-11-09T20:38:10.000Z", "expiresAt": "2021-11-11T20:43:10.000Z", "id": "00T1234567890abcdefg", "lastUpdated": "2021-11-11T20:38:10.000Z", "name": "Another API Token", "tokenWindow": "PT5M", "userId": "00uabcdefg1234567890" } ] }, "ApiTokenMetadataResponse": { "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/api-tokens/00Tabcdefg1234567890" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00uXXXXXXXXXXXXXXXXX" } }, "clientName": "Okta API", "created": "2021-11-09T20:38:10.000Z", "expiresAt": "2021-12-11T20:38:10.000Z", "id": "00Tabcdefg1234567890", "lastUpdated": "2021-11-11T20:38:10.000Z", "name": "My API Token", "network": { "connection": "ANYWHERE" }, "tokenWindow": "P30D", "userId": "00uXXXXXXXXXXXXXXXXX" } }, "AppCsrJsonResponse": { "summary": "CSR object in JSON format", "value": { "_links": { "publish": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/apps/0oad5lTSBOMUBOBVVQSC/credentials/csrs/h9zkutaSe7fZX0SwN1GqDApofgD1OW8g2B5l2azha50/lifecycle/publish" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/apps/0oad5lTSBOMUBOBVVQSC/credentials/csrs/h9zkutaSe7fZX0SwN1GqDApofgD1OW8g2B5l2azha50" } }, "created": "2017-03-28T01:11:10.000Z", "csr": "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", "id": "h9zkutaSe7fZX0SwN1GqDApofgD1OW8g2B5l2azha50", "kty": "RSA" } }, "AppCsrPkcs10Response": { "summary": "CSR in DER format", "value": "MIIC4DCCAcgCAQAwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xEzARBgNVBAoMCk9rdGEsIEluYy4xDDAKBgNVBAsMA0RldjESMBAGA1UEAwwJU1AgSXNzdWVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6m8jHVCr9" }, "AppFeatureListResponseEx": { "summary": "List app feature response", "value": [ { "_links": { "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/apps/${appId}/features/USER_PROVISIONING" } }, "capabilities": { "create": { "lifecycleCreate": { "status": "DISABLED" } }, "update": { "lifecycleDeactivate": { "status": "DISABLED" }, "password": { "change": "KEEP_EXISTING", "seed": "RANDOM", "status": "DISABLED" }, "profile": { "status": "DISABLED" } } }, "description": "User provisioning settings from Okta to a downstream application", "name": "USER_PROVISIONING", "status": "ENABLED" } ] }, "AppFeatureResponseEx": { "summary": "App feature response", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/apps/${appId}/features/USER_PROVISIONING" } }, "capabilities": { "create": { "lifecycleCreate": { "status": "DISABLED" } }, "update": { "lifecycleDeactivate": { "status": "DISABLED" }, "password": { "change": "KEEP_EXISTING", "seed": "RANDOM", "status": "DISABLED" }, "profile": { "status": "DISABLED" } } }, "description": "User provisioning settings from Okta to a downstream application", "name": "USER_PROVISIONING", "status": "ENABLED" } }, "AppGrantsEx": { "summary": "App grants example", "value": { "_embedded": { "scope": { "id": "okta.users.read" } }, "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/{appId}", "title": "Application name" }, "client": { "href": "https://{yourOktaDomain}/oauth2/v1/clients/{clientId}", "title": "Client name" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/apps/{appId}/grants/oag91n9ruw3dsaXzP0h6" } }, "clientId": "{clientId}", "created": "2023-02-21T16:54:00.000Z", "createdBy": { "id": "00u6eltha0nrSc47i0h7", "type": "User" }, "id": "oag91n9ruw3dsaXzP0h6", "issuer": "{yourOktaDomain}", "lastUpdated": "2023-02-21T16:54:00.000Z", "scopeId": "okta.users.read", "source": "ADMIN", "status": "ACTIVE" } }, "AppGrantsPostEx": { "summary": "App grants example", "value": { "issuer": "{yourOktaDomain}", "scopeId": "okta.users.read" } }, "AppResponseBaseEx": { "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "id": "0oafxqCAJWWGELFTYASJ", "lastUpdated": "2023-01-21T14:11:24.000Z", "status": "ACTIVE" } }, "AppUserAssignProvRequest": { "summary": "SSO and provisioning application user request example", "value": { "credentials": { "userName": "saml.jackson@example.com" }, "id": "00u15s1KDETTQMQYABRL", "profile": { "profile": "Standard User", "role": "Developer", "salesforceGroups": [ "Employee" ] }, "scope": "USER" } }, "AppUserAssignSSORequest": { "summary": "SSO application user request example", "value": { "credentials": { "userName": "rae.cloud@example.com" }, "id": "00ud4tVDDXYVKPXKVLCO", "scope": "USER" } }, "AppUserCredUpdateResponse": { "summary": "Application user credential update", "value": { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/{appId}" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00ud4tVDDXYVKPXKVLCO" } }, "created": "2024-01-27T03:52:45.000Z", "credentials\"": { "password": {}, "userName": "rae.cloud@example.com" }, "externalId": null, "id": "00ud4tVDDXYVKPXKVLCO", "lastUpdated": "2024-01-27T05:15:30.000Z", "passwordChanged": "2024-01-27T05:15:30.000Z", "profile": { "birthdate": null, "country": null, "email": "rae.cloud@example.com", "family_name": "Cloud", "formatted": null, "gender": null, "given_name": "Rae", "locale": "en_US", "locality": null, "middle_name": null, "name": "Rae Cloud", "nickname": null, "phone_number": null, "picture": null, "postal_code": null, "profile": null, "region": null, "street_address": null, "website": null, "zoneinfo": "America/Los_Angeles" }, "scope": "USER", "status": "ACTIVE", "statusChanged": "2024-01-27T03:52:45.000Z", "syncState": "DISABLED" } }, "AppUserListEx": { "summary": "List application user example", "value": [ { "_embedded": { "user": { "_links": { "changePassword": { "href": "https://rain.okta1.com/api/v1/users/00u1dnq5S0CfjlkpABCD/credentials/change_password", "method": "POST" }, "changeRecoveryQuestion": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD/credentials/change_recovery_question", "method": "POST" }, "deactivate": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD/lifecycle/deactivate", "method": "POST" }, "expirePassword": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD/lifecycle/expire_password", "method": "POST" }, "resetPassword": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD/lifecycle/reset_password", "method": "POST" }, "schema": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/oscarho9g7PythoN23z9" }, "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD" }, "suspend": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD/lifecycle/suspend", "method": "POST" }, "type": { "href": "https://{yourOktaDomain}/api/v1/meta/types/user/otyzhh29g7Python90g3" } }, "activated": "2024-01-09T15:36:05.000Z", "created": "2024-01-09T15:36:04.000Z", "credentials": { "password": {}, "provider": { "name": "OKTA", "type": "OKTA" } }, "id": "00u1dnq5S0CfjlkpABCD", "lastLogin": null, "lastUpdated": "2024-01-09T15:36:05.000Z", "passwordChanged": "2024-01-09T15:36:05.000Z", "profile": { "email": "saml.test@example.com", "firstName": "Saml", "lastName": "Test", "login": "saml.test@example.com", "mobilePhone": null, "secondEmail": null }, "status": "ACTIVE", "statusChanged": "2024-01-09T15:36:05.000Z", "type": { "id": "otyzhh29g7Python90g3" } } }, "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oajiqIRNXPPJBNZMGYL" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD" } }, "created": "2024-01-31T18:25:01.000Z", "credentials": { "userName": "saml.test@example.com" }, "externalId": "00u5edt3PNbbjzvIABCD", "id": "00u1dnq5S0CfjlkpABCD", "lastSync": "2024-01-31T18:25:03.000Z", "lastUpdated": "2024-01-31T18:25:03.000Z", "passwordChanged": null, "profile": { "displayName": "Saml O Test", "email": "saml.test@example.com", "firstName": "Saml", "lastName": "Test", "mobilePhone": null, "profile": "Standard Platform User", "role": "Tester", "salesforceGroups": [], "secondEmail": null, "streetAddress": null }, "scope": "USER", "status": "PROVISIONED", "statusChanged": "2024-01-31T18:25:03.000Z", "syncState": "SYNCHRONIZED" } ] }, "AppUserProfUpdateResponse": { "summary": "Application user profile update", "value": { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/{appId}" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00ud4tVDDXYVKPXKVLCO" } }, "created": "2024-01-27T03:52:45.000Z", "credentials\"": { "userName": "rae.cloud@example.com" }, "externalId": null, "id": "00ud4tVDDXYVKPXKVLCO", "lastUpdated": "2024-01-27T05:05:32.000Z", "passwordChanged": null, "profile": { "birthdate": null, "country": null, "email": "rae.cloud@example.com", "family_name": "Cloud", "formatted": null, "gender": null, "given_name": "Rae", "locale": "en_US", "locality": null, "middle_name": "Mae", "name": "Rae Mae Cloud", "nickname": null, "phone_number": null, "picture": null, "postal_code": null, "profile": null, "region": null, "street_address": null, "website": null, "zoneinfo": "America/Los_Angeles" }, "scope": "USER", "status": "ACTIVE", "statusChanged": "2024-01-27T03:52:45.000Z", "syncState": "DISABLED" } }, "AppUserProvExpandResponse": { "summary": "Application user expand example", "value": { "_embedded": { "user": { "_links": { "changePassword": { "href": "https://rain.okta1.com/api/v1/users/00u1dnq5S0CfjlkpABCD/credentials/change_password", "method": "POST" }, "changeRecoveryQuestion": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD/credentials/change_recovery_question", "method": "POST" }, "deactivate": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD/lifecycle/deactivate", "method": "POST" }, "expirePassword": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD/lifecycle/expire_password", "method": "POST" }, "resetPassword": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD/lifecycle/reset_password", "method": "POST" }, "schema": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/oscarho9g7PythoN23z9" }, "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD" }, "suspend": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD/lifecycle/suspend", "method": "POST" }, "type": { "href": "https://{yourOktaDomain}/api/v1/meta/types/user/otyzhh29g7Python90g3" } }, "activated": "2024-01-09T15:36:05.000Z", "created": "2024-01-09T15:36:04.000Z", "credentials": { "password": {}, "provider": { "name": "OKTA", "type": "OKTA" } }, "id": "00u1dnq5S0CfjlkpABCD", "lastLogin": null, "lastUpdated": "2024-01-09T15:36:05.000Z", "passwordChanged": "2024-01-09T15:36:05.000Z", "profile": { "email": "saml.test@example.com", "firstName": "Saml", "lastName": "Test", "login": "saml.test@example.com", "mobilePhone": null, "secondEmail": null }, "status": "ACTIVE", "statusChanged": "2024-01-09T15:36:05.000Z", "type": { "id": "otyzhh29g7Python90g3" } } }, "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oajiqIRNXPPJBNZMGYL" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00u1dnq5S0CfjlkpABCD" } }, "created": "2024-01-31T18:25:01.000Z", "credentials": { "userName": "saml.test@example.com" }, "externalId": "00u5edt3PNbbjzvIABCD", "id": "00u1dnq5S0CfjlkpABCD", "lastSync": "2024-01-31T18:25:03.000Z", "lastUpdated": "2024-01-31T18:25:03.000Z", "passwordChanged": null, "profile": { "displayName": "Saml O Test", "email": "saml.test@example.com", "firstName": "Saml", "lastName": "Test", "mobilePhone": null, "profile": "Standard Platform User", "role": "Tester", "salesforceGroups": [], "secondEmail": null, "streetAddress": null }, "scope": "USER", "status": "PROVISIONED", "statusChanged": "2024-01-31T18:25:03.000Z", "syncState": "SYNCHRONIZED" } }, "AppUserProvResponse": { "summary": "SSO and provisioning application user response example", "value": { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/{appId}" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" } }, "created": "2014-08-16T02:35:14.000Z", "credentials": { "userName": "saml.jackson@example.com" }, "externalId": "005o0000000ogQ9AAI", "id": "00u15s1KDETTQMQYABRL", "lastSync": "2014-08-16T02:56:49.000Z", "lastUpdated": "2014-08-16T02:56:49.000Z", "passwordChanged": null, "profile": { "email": "saml.jackson@example.com", "firstName": "Saml", "lastName": "Jackson", "mobilePhone": null, "profile": "Standard User", "role": "Developer", "salesforceGroups": [ "Employee" ], "secondEmail": null }, "scope": "USER", "status": "PROVISIONED", "statusChanged": "2014-08-16T02:56:49.000Z", "syncState": "SYNCHRONIZED" } }, "AppUserSSOResponse": { "summary": "SSO application user response example", "value": { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/{appId}" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00ud4tVDDXYVKPXKVLCO" } }, "created": "2024-01-27T03:52:45.000Z", "credentials\"": { "userName": "rae.cloud@example.com" }, "externalId": null, "id": "00ud4tVDDXYVKPXKVLCO", "lastUpdated": "2024-01-27T03:52:45.000Z", "passwordChanged": null, "profile": { "birthdate": null, "country": null, "email": "rae.cloud@example.com", "family_name": "Cloud", "formatted": null, "gender": null, "given_name": "Rae", "locale": "en_US", "locality": null, "middle_name": null, "name": "Rae Cloud", "nickname": null, "phone_number": null, "picture": null, "postal_code": null, "profile": null, "region": null, "street_address": null, "website": null, "zoneinfo": "America/Los_Angeles" }, "scope": "USER", "status": "ACTIVE", "statusChanged": "2024-01-27T03:52:45.000Z", "syncState": "DISABLED" } }, "AppUserSchemaAddRequest": { "value": { "definitions": { "custom": { "id": "#custom", "properties": { "salesforceUserName": { "description": "User's username for Salesforce", "externalName": "salesforceUserName", "maxLength": 20, "minLength": 1, "required": false, "title": "Salesforce username", "type": "string" } }, "required": [], "type": "object" } } } }, "AppUserSchemaResponse": { "value": { "$schema": "http://json-schema.org/draft-04/schema#", "created": "2017-07-18T22:35:30.000Z", "definitions": { "base": { "id": "#base", "properties": { "userName": { "maxLength": 100, "required": true, "scope": "NONE", "title": "Username", "type": "string" } }, "required": [ "userName" ], "type": "object" }, "custom": { "id": "#custom", "properties": { "salesforceUserName": { "description": "User's username for Salesforce", "externalName": "salesforceUserName", "maxLength": 20, "minLength": 1, "scope": "NONE", "title": "Salesforce username", "type": "string" } }, "required": [], "type": "object" } }, "id": "https://{yourOktaDomain}/meta/schemas/apps/0oa25gejWwdXNnFH90g4/default", "lastUpdated": "2017-07-18T23:18:43.000Z", "name": "Example app", "properties": { "profile": { "allOf": [ { "$ref": "#/definitions/base" }, { "$ref": "#/definitions/custom" } ] } }, "title": "Example app user", "type": "object" } }, "AppUserUpdateCredRequest": { "summary": "Application User credentials update", "value": { "credentials": { "password": { "value": "updatedP@55word" }, "userName": "rae.cloud@example.com" } } }, "AppUserUpdateProfileRequest": { "summary": "Application user profile update", "value": { "profile": { "middle_name": "Mae", "name": "Rae Mae Cloud" } } }, "AppleIdPResponse": { "summary": "Apple IdP", "value": { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize?idp=0oa18hsHsG3boVejU0g4&client_id={clientId}&response_type={responseType}&response_mode={responseMode}&scope={scopes}&redirect_uri=${redirectUri}&state={state}&nonce={nonce}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize/callback" } }, "created": "2020-06-05T20:57:51.000Z", "id": "0oa18hsHsG3boVejU0g4", "issuerMode": "ORG_URL", "lastUpdated": "2020-06-05T20:57:51.000Z", "name": "Apple IdP", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchAttribute": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.email" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id" }, "signing": { "kid": "test key ID", "privateKey": "MIGTAgEAMBM........Cb9PnybCnzDv+3cWSGWqpAIsQQZ", "teamId": "test team ID" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://appleid.apple.com/auth/authorize" }, "token": { "binding": "HTTP-POST", "url": "https://appleid.apple.com/auth/token" } }, "scopes": [ "openid", "email", "name" ], "type": "OIDC" }, "status": "ACTIVE", "type": "APPLE" } }, "AssignGroupOwnerRequest": { "summary": "Assign a group owner request example", "value": { "id": "00u1cmc03xjzePoWD0h8", "type": "USER" } }, "AssignGroupOwnerResponse": { "summary": "Assign a group owner response example", "value": { "displayName": "Oliver Putnam", "id": "00u1cmc03xjzePoWD0h8", "lastUpdated": "Wed Mar 29 18:34:31 UTC 2023", "originId": null, "originType": "OKTA_DIRECTORY", "resolved": true, "type": "USER" } }, "AuthenticatorEnrollmentCreateRequestPhone": { "summary": "Enroll phone - SMS authenticator request", "value": { "authenticatorId": "aut5l4ttFyGEWdy6V0k7", "profile": { "phoneNumber": "+14086673418" } } }, "AuthenticatorEnrollmentCreateRequestTac": { "summary": "Enroll TAC authenticator request", "value": { "authenticatorId": "autnmtl4xbt8RQVzA0g4", "profile": { "multiUse": false, "ttl": 11 } } }, "AuthenticatorEnrollmentResponseListAll": { "summary": "List of authenticator enrollments", "value": [ { "_links": { "authenticator": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/auth60xfl7VbebsFr0g6" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7/authenticator-enrollments/eae4za57woixzodEK0g7" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7" } }, "created": "2020-07-26T21:05:23.000Z", "id": "eae4za57woixzodEK0g7", "key": "okta_email", "lastUpdated": "2020-07-28T21:45:52.000Z", "name": "Email", "nickname": null, "profile": { "email": "joe@example.com" }, "status": "ACTIVE", "type": "email" }, { "_links": { "authenticator": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/auth60xfl7VbebsFr0g6" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7/authenticator-enrollments/laeh60xfl7VbebsFr0g6" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7" } }, "created": "2020-07-26T21:05:23.000Z", "id": "laeh60xfl7VbebsFr0g6", "key": "okta_password", "lastUpdated": "2020-07-26T21:05:23.000Z", "name": "Password", "nickname": null, "status": "ACTIVE", "type": "password" }, { "_links": { "authenticator": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/auth60xfl7VbebsFr0g6" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7/authenticator-enrollments/laeh60xfl7VbebsFr0g6" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7" } }, "created": "2020-07-26T21:05:23.000Z", "id": "sms8evhwh0Ne35iPR0g7", "key": "phone_number", "lastUpdated": "2020-07-29T00:21:29.000Z", "name": "Phone", "nickname": "Joe's Work Phone", "profile": { "phoneNumber": "+1 XXX-XXX-6065" }, "status": "ACTIVE", "type": "phone" } ] }, "AuthenticatorEnrollmentResponsePhoneDisclosed": { "summary": "Phone number disclosed - SMS authenticator enrollment response", "value": { "_links": { "authenticator": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/auth60xfl7VbebsFr0g6" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7/authenticator-enrollments/sms8evhwh0Ne35iPR0g7" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7" } }, "created": "2020-07-26T21:05:23.000Z", "id": "sms8evhwh0Ne35iPR0g7", "key": "phone_number", "lastUpdated": "2020-07-29T00:21:29.000Z", "name": "Phone", "nickname": "Ann's Home Phone", "profile": { "phoneNumber": 14085551235 }, "status": "ACTIVE", "type": "phone" } }, "AuthenticatorEnrollmentResponsePhoneSms": { "summary": "phone - SMS authenticator enrollment response", "value": { "_links": { "authenticator": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/auth60xfl7VbebsFr0g6" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7/authenticator-enrollments/sms8evhwh0Ne35iPR0g7" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7" } }, "created": "2020-07-26T21:05:23.000Z", "id": "sms8evhwh0Ne35iPR0g7", "key": "phone_number", "lastUpdated": "2020-07-29T00:21:29.000Z", "name": "Phone", "nickname": "Joe's Work Phone", "profile": { "phoneNumber": "+1 XXX-XXX-6065" }, "status": "ACTIVE", "type": "phone" } }, "AuthenticatorEnrollmentResponsePhoneVoice": { "summary": "phone - voice authenticator enrollment response", "value": { "_links": { "authenticator": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/auth60xfl7VbebsFr0g6" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7/authenticator-enrollments/clf8evhwh0Ne35iPR0g7" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7" } }, "created": "2020-07-26T21:05:23.000Z", "id": "clf8evhwh0Ne35iPR0g7", "key": "phone_number", "lastUpdated": "2020-07-29T00:21:29.000Z", "name": "Phone", "nickname": "Joe's Work Phone", "profile": { "phoneNumber": "+1 XXX-XXX-6065" }, "status": "ACTIVE", "type": "phone" } }, "AuthenticatorEnrollmentResponseTac": { "summary": "TAC authenticator enrollment response", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7/authenticator-enrollments/clf8evhwh0Ne35iPR0g7" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u4za57vqNsQAN8S0g7" } }, "created": "2025-05-28T17:21:14.000Z", "id": "tac8evhwh0Ne35iPR0g7", "key": "tac", "lastUpdated": "2025-05-28T17:21:14.000Z", "name": "Temporary Access Code", "profile": { "expiresAt": "2025-05-28T19:21:14", "multiUse": true, "tac": "n@C*bU26" }, "status": "ACTIVE", "type": "tac" } }, "AuthenticatorMethodInactiveVoice": { "summary": "Phone authenticator - Voice method", "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/voice/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/voice" } }, "status": "INACTIVE", "type": "voice" } }, "AuthenticatorMethodPhone": { "summary": "List of phone authenticator methods", "value": [ { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/sms/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/sms" } }, "status": "ACTIVE", "type": "sms" }, { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/voice/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/voice" } }, "status": "INACTIVE", "type": "voice" } ] }, "AuthenticatorMethodSms": { "summary": "Phone authenticator - SMS method", "value": { "_links": { "deactivate": { "hints": { "allow\"": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/sms/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/sms" } }, "status": "ACTIVE", "type": "sms" } }, "AuthenticatorMethodTac": { "summary": "Temporary Access Code authenticator method", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut3l0cm6voCtVWK20g7/methods/tac/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut3l0cm6voCtVWK20g7/methods/tac" } }, "status": "ACTIVE", "type": "tac" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "AuthenticatorMethodWebAuthn": { "summary": "Passkey (FIDO2 WebAuthn) authenticator method", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/webauthn" } }, "settings": { "attachment": "ANY", "userVerification": "DISCOURAGED" }, "status": "ACTIVE", "type": "webauthn" } }, "AuthenticatorMethodWebAuthnWithRebrandSettings": { "summary": "Passkeys method with rebranded and new settings", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/webauthn" }, "verify-rp-id-domain": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/webauthn/verify-rp-id-domain" } }, "settings": { "allowSyncablePasskeys": true, "attachment": "ANY", "certBasedAttestationValidation": false, "fipsCompliant": false, "hardwareProtected": false, "residentKeyRequirement": "REQUIRED", "rpId": { "domain": { "dnsRecord": { "fqdn": "_oktaverification.mycustomdomain.com,", "recordType": "TXT", "verificationValue": "5e2dc662c8ce4f4aa4cd1cd292490d35" }, "name": "mycustomdomain.com", "validationStatus": "NOT_STARTED" }, "enabled": false }, "showSignInWithAPasskeyButton": false, "userVerification": "PREFERRED", "userVerificationForVerify": "PREFERRED" }, "status": "ACTIVE", "type": "webauthn" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "AuthenticatorMethodWebAuthnWithRpId": { "summary": "Passkey (FIDO2 WebAuthn) authenticator method with a custom RP ID", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/webauthn" }, "verify-rp-id-domain": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods/webauthn/verify-rp-id-domain" } }, "settings": { "attachment": "ANY", "rpId": { "domain": { "dnsRecord": { "fqdn": "_oktaverification.mycustomdomain.com,", "recordType": "TXT", "verificationValue": "5e2dc662c8ce4f4aa4cd1cd292490d35" }, "name": "mycustomdomain.com", "validationStatus": "NOT_STARTED" }, "enabled": false }, "userVerification": "DISCOURAGED" }, "status": "ACTIVE", "type": "webauthn" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "AuthenticatorRequestDuo": { "summary": "Duo", "value": { "key": "duo", "name": "Duo Security", "provider": { "configuration": { "host": "https://api-xxxxxxxx.duosecurity.com", "integrationKey": "testIntegrationKey", "secretKey": "testSecretKey", "userNameTemplate": { "template": "oktaId" } }, "type": "DUO" } } }, "AuthenticatorRequestTac": { "summary": "Temporary Access Code", "value": { "key": "tac", "name": "Temporary Access Code", "provider": { "configuration": { "complexity": { "letters": true, "numbers": true, "specialCharacters": true }, "defaultTtl": 120, "length": 16, "maxTtl": 14400, "minTtl": 10, "multiUseAllowed": true }, "type": "tac" } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "AuthenticatorRequestWebAuthnWithNameAndDescription": { "value": { "description": "Custom description for Passkey (FIDO2 WebAuthn) authenticator", "key": "webauthn", "name": "Custom Passkey (FIDO2 WebAuthn) authenticator name" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "AuthenticatorResponseDuo": { "summary": "Duo", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut5gnvcjUHIWb25J0g4/lifecycle/deactivate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut5gnvcjUHIWb25J0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut5gnvcjUHIWb25J0g4" } }, "created": "2022-07-15T21:14:02.000Z", "id": "aut9gnvcjUHIWb37J0g4", "key": "duo", "lastUpdated": "2022-07-15T21:14:02.000Z", "name": "Duo Security", "provider": { "configuration": { "host": "https://api-xxxxxxxx.duosecurity.com", "userNameTemplate": { "template": "oktaId" } }, "type": "DUO" }, "settings": {}, "status": "ACTIVE", "type": "app" } }, "AuthenticatorResponseEmail": { "summary": "Email", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbsPHh7jNjjyP0g4/lifecycle/deactivate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbsPHh7jNjjyP0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbsPHh7jNjjyP0g4" } }, "created": "2020-07-26T21:05:23.000Z", "id": "aut1nbsPHh7jNjjyP0g4", "key": "okta_email", "lastUpdated": "2020-07-28T21:45:52.000Z", "name": "Email", "settings": { "allowedFor": "any", "tokenLifetimeInMinutes": 5 }, "status": "ACTIVE", "type": "email" } }, "AuthenticatorResponseInactiveWebAuthn": { "summary": "Inactive Passkey (FIDO2 WebAuthn) authenticator", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/lifecycle/deactivate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4" } }, "created": "2020-07-26T21:16:37.000Z", "id": "aut1nd8PQhGcQtSxB0g4", "key": "webauthn", "lastUpdated": "2020-07-27T18:59:30.000Z", "name": "Security Key or Biometric", "status": "INACTIVE", "type": "security_key" } }, "AuthenticatorResponsePassword": { "summary": "Password", "value": { "_links": { "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbtrJKKA9m45a0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbtrJKKA9m45a0g4" } }, "created": "2020-07-26T21:05:23.000Z", "id": "aut1nbtrJKKA9m45a0g4", "key": "okta_password", "lastUpdated": "2020-07-26T21:05:23.000Z", "name": "Password", "status": "ACTIVE", "type": "password" } }, "AuthenticatorResponsePhone": { "summary": "Phone", "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbuyD8m1ckAYc0g4/lifecycle/activate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbuyD8m1ckAYc0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbuyD8m1ckAYc0g4" } }, "created": "2020-07-26T21:05:23.000Z", "id": "aut1nbuyD8m1ckAYc0g4", "key": "phone_number", "lastUpdated": "2020-07-29T00:21:29.000Z", "name": "Phone", "settings": { "allowedFor": "none" }, "status": "INACTIVE", "type": "phone" } }, "AuthenticatorResponseSecurityQuestion": { "summary": "Security question", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbvIgEenhwE6c0g4/lifecycle/deactivate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbvIgEenhwE6c0g4/methods" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbvIgEenhwE6c0g4" } }, "created": "2020-07-26T21:05:23.000Z", "id": "aut1nbvIgEenhwE6c0g4", "key": "security_question", "lastUpdated": "2020-07-26T21:05:23.000Z", "name": "Security Question", "status": "ACTIVE", "type": "security_question" } }, "AuthenticatorResponseTac": { "summary": "Temporary Access Code", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut3l0cm6voCtVWK20g7/lifecycle/deactivate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut3l0cm6voCtVWK20g7/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut3l0cm6voCtVWK20g7" } }, "created": "2022-07-15T21:14:02.000Z", "id": "aut3l0cm6voCtVWK20g7", "key": "tac", "lastUpdated": "2022-07-15T21:14:02.000Z", "name": "Temporary Access Code", "provider": { "configuration": { "complexity": { "letters": true, "numbers": true, "specialCharacters": true }, "defaultTtl": 120, "length": 16, "maxTtl": 14400, "minTtl": 10, "multiUseAllowed": true }, "type": "tac" }, "status": "ACTIVE", "type": "tac" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "AuthenticatorResponseWebAuthn": { "summary": "Passkey (FIDO2 WebAuthn)", "value": { "_links": { "aaguids": { "hints": { "allow": [ "GET", "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/aaguids" }, "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/lifecycle/deactivate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4" } }, "created": "2020-07-26T21:16:37.000Z", "id": "aut1nd8PQhGcQtSxB0g4", "key": "webauthn", "lastUpdated": "2020-07-27T18:59:30.000Z", "name": "Security Key or Biometric", "status": "ACTIVE", "type": "security_key" } }, "AuthenticatorResponseWebAuthnWithNameAndDescription": { "value": { "_links": { "aaguids": { "hints": { "allow": [ "GET", "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/aaguids" }, "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/lifecycle/deactivate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4" } }, "created": "2020-07-26T21:16:37.000Z", "description": "Custom description for Passkey (FIDO2 WebAuthn) authenticator", "id": "aut1nd8PQhGcQtSxB0g4", "key": "webauthn", "lastUpdated": "2020-07-27T18:59:30.000Z", "name": "Custom Passkey (FIDO2 WebAuthn) authenticator name", "status": "ACTIVE", "type": "security_key" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "AuthenticatorsResponse": { "summary": "List of org's authenticators", "value": [ { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbsPHh7jNjjyP0g4/lifecycle/deactivate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbsPHh7jNjjyP0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbsPHh7jNjjyP0g4" } }, "created": "2020-07-26T21:05:23.000Z", "id": "aut1nbsPHh7jNjjyP0g4", "key": "okta_email", "lastUpdated": "2020-07-28T21:45:52.000Z", "name": "Email", "settings": { "allowedFor": "any", "tokenLifetimeInMinutes": 5 }, "status": "ACTIVE", "type": "email" }, { "_links": { "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbtrJKKA9m45a0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbtrJKKA9m45a0g4" } }, "created": "2020-07-26T21:05:23.000Z", "id": "aut1nbtrJKKA9m45a0g4", "key": "okta_password", "lastUpdated": "2020-07-26T21:05:23.000Z", "name": "Password", "status": "ACTIVE", "type": "password" }, { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbuyD8m1ckAYc0g4/lifecycle/activate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbuyD8m1ckAYc0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbuyD8m1ckAYc0g4" } }, "created": "2020-07-26T21:05:23.000Z", "id": "aut1nbuyD8m1ckAYc0g4", "key": "phone_number", "lastUpdated": "2020-07-29T00:21:29.000Z", "name": "Phone", "settings": { "allowedFor": "none" }, "status": "INACTIVE", "type": "phone" }, { "_links": { "aaguids": { "hints": { "allow": [ "GET", "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/aaguids" }, "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/lifecycle/deactivate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4" } }, "created": "2020-07-26T21:16:37.000Z", "id": "aut1nd8PQhGcQtSxB0g4", "key": "webauthn", "lastUpdated": "2020-07-27T18:59:30.000Z", "name": "Security Key or Biometric", "status": "ACTIVE", "type": "security_key" } ] }, "AuthenticatorsResponseWithWebAuthnNameAndDescription": { "summary": "Org authenticators with Passkey (FIDO2 WebAuthn) authenticator name and description", "value": [ { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbsPHh7jNjjyP0g4/lifecycle/deactivate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbsPHh7jNjjyP0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbsPHh7jNjjyP0g4" } }, "created": "2020-07-26T21:05:23.000Z", "id": "aut1nbsPHh7jNjjyP0g4", "key": "okta_email", "lastUpdated": "2020-07-28T21:45:52.000Z", "name": "Email", "settings": { "allowedFor": "any", "tokenLifetimeInMinutes": 5 }, "status": "ACTIVE", "type": "email" }, { "_links": { "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbtrJKKA9m45a0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbtrJKKA9m45a0g4" } }, "created": "2020-07-26T21:05:23.000Z", "id": "aut1nbtrJKKA9m45a0g4", "key": "okta_password", "lastUpdated": "2020-07-26T21:05:23.000Z", "name": "Password", "status": "ACTIVE", "type": "password" }, { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbuyD8m1ckAYc0g4/lifecycle/activate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbuyD8m1ckAYc0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nbuyD8m1ckAYc0g4" } }, "created": "2020-07-26T21:05:23.000Z", "id": "aut1nbuyD8m1ckAYc0g4", "key": "phone_number", "lastUpdated": "2020-07-29T00:21:29.000Z", "name": "Phone", "settings": { "allowedFor": "none" }, "status": "INACTIVE", "type": "phone" }, { "_links": { "aaguids": { "hints": { "allow": [ "GET", "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/aaguids" }, "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/lifecycle/deactivate" }, "methods": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/methods" }, "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4" } }, "created": "2020-07-26T21:16:37.000Z", "description": "Custom description for Passkey (FIDO2 WebAuthn) authenticator", "id": "aut1nd8PQhGcQtSxB0g4", "key": "webauthn", "lastUpdated": "2020-07-27T18:59:30.000Z", "name": "Custom Passkey (FIDO2 WebAuthn) authenticator name", "status": "ACTIVE", "type": "security_key" } ], "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "AuthorizationServerPolicy": { "summary": "Authorization server policy", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/policies/00palyaappA22DPkj0h7/lifecycle/deactivate" }, "rules": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/policies/00palyaappA22DPkj0h7/rules" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/policies/00palyaappA22DPkj0h7" } }, "conditions": { "clients": { "include": [ "ALL_CLIENTS" ] } }, "created": "2017-05-26T19:43:53.000Z", "description": "Vendor2 policy description", "id": "00palyaappA22DPkj0h7", "lastUpdated": "2017-06-07T15:28:17.000Z", "name": "Vendor2 Policy", "priority": 1, "status": "ACTIVE", "system": false, "type": "OAUTH_AUTHORIZATION_POLICY" } }, "AuthorizationServerPolicyRule": { "summary": "Authorization server policy rule", "value": { "_links": { "self": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/0prbsjfyl01zfSZ9K0h7/lifecycle/deactivate" }, "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/0prbsjfyl01zfSZ9K0h7" } }, "actions": { "token": { "accessTokenLifetimeMinutes": 60, "inlineHook": { "id": "cal4egvp1mbMldrYN0g7" }, "refreshTokenLifetimeMinutes": 0, "refreshTokenWindowMinutes": 10080 } }, "conditions": { "grantTypes": { "include": [ "implicit", "client_credentials", "authorization_code", "password" ] }, "people": { "groups": { "exclude": [], "include": [ "EVERYONE" ] }, "users": { "exclude": [], "include": [] } }, "scopes": { "include": [ "*" ] } }, "created": "2017-08-25T16:57:02.000Z", "id": "0prbsjfyl01zfSZ9K0h7", "lastUpdated": "2017-08-30T14:51:05.000Z", "name": "Default Policy Rule", "priority": 1, "status": "ACTIVE", "system": false, "type": "RESOURCE_ACCESS" } }, "AutoLoginAppResponseEx": { "summary": "AUTO_LOGIN", "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "credentials": { "revealPassword": false, "scheme": "EDIT_USERNAME_AND_PASSWORD", "signing": {}, "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "id": "0oafxqCAJWWGELFTYASJ", "label": "Custom SWA App", "lastUpdated": "2023-01-21T14:11:24.000Z", "name": "customswaapp", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:customswaapp:0oafxqCAJWWGELFTYASJ", "settings": { "app": {}, "emOptInStatus": "DISABLED", "implicitAssignment": false, "manualProvisioning": false, "notes": { "admin": null, "enduser": null }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } }, "signOn": { "loginUrl": "http://swaprimaryloginurl.okta.com", "redirectUrl": "http://swasecondaryredirecturl.okta.com" } }, "signOnMode": "AUTO_LOGIN", "status": "ACTIVE", "visibility": { "appLinks": { "customswaapp_link": true }, "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "AutoLoginEx": { "summary": "AUTO_LOGIN", "value": { "label": "Custom SWA App", "settings": { "signOn": { "loginUrl": "http://swaprimaryloginurl.okta.com", "redirectUrl": "http://swasecondaryredirecturl.okta.com" } }, "signOnMode": "AUTO_LOGIN", "visibility": { "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "AutoLoginPutEx": { "summary": "AUTO_LOGIN", "value": { "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "credentials": { "scheme": "ADMIN_SETS_CREDENTIALS", "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "label": "Custom SWA App updated", "settings": { "signOn": { "loginUrl": "http://swaprimaryloginurl.okta.com", "redirectUrl": "http://swasecondaryredirecturlupdated.okta.com" } }, "signOnMode": "AUTO_LOGIN", "status": "ACTIVE", "visibility": { "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "AutoLoginPutResponseEx": { "summary": "AUTO_LOGIN", "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "credentials": { "revealPassword": false, "scheme": "ADMIN_SETS_CREDENTIALS", "signing": {}, "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "id": "0oafxqCAJWWGELFTYASJ", "label": "Custom SWA App updated", "lastUpdated": "2023-01-21T14:11:24.000Z", "name": "customswaapp", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:customswaapp:0oafxqCAJWWGELFTYASJ", "settings": { "app": {}, "emOptInStatus": "DISABLED", "implicitAssignment": false, "manualProvisioning": false, "notes": { "admin": null, "enduser": null }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } }, "signOn": { "loginUrl": "http://swaprimaryloginurl.okta.com", "redirectUrl": "http://swasecondaryredirecturlupdated.okta.com" } }, "signOnMode": "AUTO_LOGIN", "status": "ACTIVE", "visibility": { "appLinks": { "customswaapp_link": true }, "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "AvailableActions": { "summary": "Available actions example", "value": { "actions": [ { "id": "okta:action1", "provider": { "actionName": "Provision User", "externalId": "JKL490DQNV", "link": "https://example.com/workflows/flow1", "type": "WORKFLOWS" } } ] } }, "BaseSignOnModeEx": { "value": { "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "features": [], "status": "ACTIVE", "visibility": { "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "BasicAuthEx": { "summary": "BASIC_AUTH", "value": { "label": "Sample Basic Auth App", "name": "template_basic_auth", "settings": { "app": { "authURL": "https://example.com/auth.html", "url": "https://example.com/login.html" } }, "signOnMode": "BASIC_AUTH" } }, "BasicAuthPutEx": { "summary": "BASIC_AUTH", "value": { "label": "Sample Basic Auth App updated", "settings": { "app": { "authURL": "https://example.com/auth.html", "url": "https://example.com/loginUpdated.html" } }, "signOnMode": "BASIC_AUTH" } }, "BasicAuthPutResponseEx": { "summary": "BASIC_AUTH", "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "credentials": { "revealPassword": false, "scheme": "EDIT_USERNAME_AND_PASSWORD", "signing": {}, "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "id": "0oafxqCAJWWGELFTYASJ", "label": "Sample Basic Auth App updated", "lastUpdated": "2023-01-21T14:11:24.000Z", "name": "template_basic_auth", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:template_basic_auth:0oafxqCAJWWGELFTYASJ", "settings": { "app": { "authURL": "https://example.com/auth.html", "loginUrlRegex": null, "url": "https://example.com/loginUpdated.html" }, "emOptInStatus": "DISABLED", "implicitAssignment": false, "manualProvisioning": false, "notes": { "admin": null, "enduser": null }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } } }, "signOnMode": "BASIC_AUTH", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "BasicAuthResponseEx": { "summary": "BASIC_AUTH", "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "credentials": { "revealPassword": false, "scheme": "EDIT_USERNAME_AND_PASSWORD", "signing": {}, "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "id": "0oafxqCAJWWGELFTYASJ", "label": "Sample Basic Auth App", "lastUpdated": "2023-01-21T14:11:24.000Z", "name": "template_basic_auth", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:template_basic_auth:0oafxqCAJWWGELFTYASJ", "settings": { "app": { "authURL": "https://example.com/auth.html", "loginUrlRegex": null, "url": "https://example.com/login.html" }, "emOptInStatus": "DISABLED", "implicitAssignment": false, "manualProvisioning": false, "notes": { "admin": null, "enduser": null }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } } }, "signOnMode": "BASIC_AUTH", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "BasicAuthSettings": { "summary": "Basic auth settings example", "value": { "authType": "BASIC" } }, "BasicSMTPPatchRequest": { "summary": "Update basic SMTP server", "value": { "alias": "CustomServer1 New Alias", "password": "New password" } }, "BasicSMTPPatchResponse": { "summary": "Basic authentication SMTP server patch response", "value": { "alias": "CustomServer1 New Alias", "authType": "BASIC_SMTP_AUTH", "enabled": true, "host": "smtp.example.com", "id": "ces7n3u7sSohfoaou0g1", "port": 587, "username": "user@example.com" } }, "BasicSMTPRequest": { "summary": "Create basic authentication SMTP server", "value": { "alias": "CustomServer1", "authType": "BASIC_SMTP_AUTH", "enabled": true, "host": "smtp.example.com", "password": "securepassword", "port": 587, "username": "user@example.com" } }, "BasicSMTPResponse": { "summary": "Basic authentication SMTP server response", "value": { "alias": "CustomServer1", "authType": "BASIC_SMTP_AUTH", "enabled": true, "host": "smtp.example.com", "id": "ces7n3u7sSohfoaou0g1", "port": 587, "username": "user@example.com" } }, "BehaviorRuleRequest": { "value": { "name": "My Behavior Rule", "type": "VELOCITY" } }, "BehaviorRuleResponse": { "value": { "_link": { "self": { "hints": { "allow": [ "GET", "POST", "PUT", "DELETE" ] }, "href": "https://your-subdomain.okta.com/api/v1/behaviors/abcd1234" } }, "created": "2021-11-09 20:38:10.0", "id": "abcd1234", "lastUpdated": "2021-11-11 20:38:10.0", "name": "My Behavior Rule", "settings": { "velocityKph": 805 }, "status": "ACTIVE", "type": "VELOCITY" } }, "BookmarkAppResponseEx": { "summary": "BOOKMARK", "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "credentials": { "signing": {}, "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "id": "0oafxqCAJWWGELFTYASJ", "label": "Sample Bookmark App", "lastUpdated": "2023-01-21T14:11:24.000Z", "name": "bookmark", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:bookmark:0oafxqCAJWWGELFTYASJ", "settings": { "app": { "requestIntegration": false, "url": "https://example.com/bookmark.html" }, "emOptInStatus": "DISABLED", "implicitAssignment": false, "manualProvisioning": false, "notes": { "admin": null, "enduser": null }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } } }, "signOnMode": "BOOKMARK", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "BookmarkEx": { "summary": "BOOKMARK", "value": { "label": "Sample Bookmark App", "name": "bookmark", "settings": { "app": { "url": "https://example.com/bookmark.html" } }, "signOnMode": "BOOKMARK" } }, "BookmarkPutEx": { "summary": "BOOKMARK", "value": { "label": "Sample Bookmark App updated", "name": "bookmark", "settings": { "app": { "requestIntegration": true, "url": "https://example.com/bookmark.html" } }, "signOnMode": "BOOKMARK" } }, "BookmarkPutResponseEx": { "summary": "BOOKMARK", "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "credentials": { "signing": {}, "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "id": "0oafxqCAJWWGELFTYASJ", "label": "Sample Bookmark App updated", "lastUpdated": "2023-01-21T14:11:24.000Z", "name": "bookmark", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:bookmark:0oafxqCAJWWGELFTYASJ", "settings": { "app": { "requestIntegration": true, "url": "https://example.com/bookmark.html" }, "emOptInStatus": "DISABLED", "implicitAssignment": false, "manualProvisioning": false, "notes": { "admin": null, "enduser": null }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } } }, "signOnMode": "BOOKMARK", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "BotProtectionConfigurationDefault": { "summary": "Default bot protection configuration (`LOG_ONLY` mode)", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/bot-protection/configuration" } }, "level": "LOW", "mode": "LOG_ONLY", "supportedFlows": [ "SIGN_IN", "SSR", "SSPR" ] } }, "BotProtectionConfigurationEnforced": { "summary": "Enforced bot protection configuration", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/bot-protection/configuration" } }, "enforcementType": "OKTA_CHALLENGE", "level": "MEDIUM", "mode": "ENFORCED", "supportedFlows": [ "SIGN_IN", "SSR", "SSPR" ] } }, "BotProtectionConfigurationRequestEnforced": { "summary": "Update to `ENFORCED` mode", "value": { "enforcementType": "OKTA_CHALLENGE", "level": "MEDIUM", "mode": "ENFORCED", "supportedFlows": [ "SSR", "SSPR" ] } }, "BotProtectionConfigurationRequestLogOnly": { "summary": "Update to `LOG_ONLY` mode", "value": { "level": "LOW", "mode": "LOG_ONLY", "supportedFlows": [ "SIGN_IN", "SSR", "SSPR" ] } }, "BrowserPluginEx": { "summary": "BROWSER_PLUGIN", "value": { "label": "Sample Plugin App", "name": "template_swa", "settings": { "app": { "buttonField": "btn-login", "passwordField": "txtbox-password", "url": "https://example.com/login.html", "usernameField": "txtbox-username" } }, "signOnMode": "BROWSER_PLUGIN" } }, "BrowserPluginPutEx": { "summary": "BROWSER_PLUGIN", "value": { "label": "Sample Plugin App updated", "name": "template_swa", "settings": { "app": { "buttonField": "btn-login", "passwordField": "txtbox-password", "url": "https://example_updated.com/login.html", "usernameField": "txtbox-username" } }, "signOnMode": "BROWSER_PLUGIN" } }, "BrowserPluginPutResponseEx": { "summary": "BROWSER_PLUGIN", "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "credentials": { "revealPassword": false, "scheme": "EDIT_USERNAME_AND_PASSWORD", "signing": {}, "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "id": "0oafxqCAJWWGELFTYASJ", "label": "Sample Plugin App updated", "lastUpdated": "2023-01-21T14:11:24.000Z", "name": "template_swa", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:template_swa:0oafxqCAJWWGELFTYASJ", "settings": { "app": { "buttonField": "btn-login", "loginUrlRegex": null, "passwordField": "txtbox-password", "url": "https://example_updated.com/login.html", "usernameField": "txtbox-username" }, "emOptInStatus": "DISABLED", "implicitAssignment": false, "manualProvisioning": false, "notes": { "admin": null, "enduser": null }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } } }, "signOnMode": "BROWSER_PLUGIN", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "BrowserPluginResponseEx": { "summary": "BROWSER_PLUGIN", "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "credentials": { "revealPassword": false, "scheme": "EDIT_USERNAME_AND_PASSWORD", "signing": {}, "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "id": "0oafxqCAJWWGELFTYASJ", "label": "Sample Plugin App", "lastUpdated": "2023-01-21T14:11:24.000Z", "name": "template_swa", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:template_swa:0oafxqCAJWWGELFTYASJ", "settings": { "app": { "buttonField": "btn-login", "loginUrlRegex": null, "passwordField": "txtbox-password", "url": "https://example.com/login.html", "usernameField": "txtbox-username" }, "emOptInStatus": "DISABLED", "implicitAssignment": false, "manualProvisioning": false, "notes": { "admin": null, "enduser": null }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } } }, "signOnMode": "BROWSER_PLUGIN", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "BrowserPluginSwa3FieldEx": { "summary": "BROWSER_PLUGIN with three CSS selectors", "value": { "label": "Sample Plugin App", "name": "template_swa3field", "settings": { "app": { "buttonSelector": "#btn-login", "extraFieldSelector": ".login", "extraFieldValue": "SOMEVALUE", "passwordSelector": "#txtbox-password", "targetURL": "https://example.com/login.html", "userNameSelector": "#txtbox-username" } }, "signOnMode": "BROWSER_PLUGIN" } }, "BrowserPluginSwa3FieldPutEx": { "summary": "BROWSER_PLUGIN with three CSS selectors", "value": { "label": "Sample Plugin App updated", "name": "template_swa3field", "settings": { "app": { "buttonSelector": "#btn-login", "extraFieldSelector": ".login", "extraFieldValue": "SOMEVALUE", "passwordSelector": "#txtbox-password", "targetURL": "https://exampleupdated.com/login.html", "userNameSelector": "#txtbox-username" } }, "signOnMode": "BROWSER_PLUGIN" } }, "BrowserPluginSwa3FieldPutResponseEx": { "summary": "BROWSER_PLUGIN with three CSS selectors", "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "credentials": { "revealPassword": false, "scheme": "EDIT_USERNAME_AND_PASSWORD", "signing": {}, "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "id": "0oafxqCAJWWGELFTYASJ", "label": "Sample Plugin App updated", "lastUpdated": "2023-01-21T14:11:24.000Z", "name": "template_swa3field", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:template_swa3field:0oafxqCAJWWGELFTYASJ", "settings": { "app": { "buttonSelector": "#btn-login", "extraFieldSelector": ".login", "extraFieldValue": "SOMEVALUE", "loginUrlRegex": null, "passwordSelector": "#txtbox-password", "targetURL": "https://exampleupdated.com/login.html", "userNameSelector": "#txtbox-username" }, "emOptInStatus": "DISABLED", "implicitAssignment": false, "manualProvisioning": false, "notes": { "admin": null, "enduser": null }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } } }, "signOnMode": "BROWSER_PLUGIN", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "BrowserPluginSwa3FieldResponseEx": { "summary": "BROWSER_PLUGIN with three CSS selectors", "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "credentials": { "revealPassword": false, "scheme": "EDIT_USERNAME_AND_PASSWORD", "signing": {}, "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "id": "0oafxqCAJWWGELFTYASJ", "label": "Sample Plugin App", "lastUpdated": "2023-01-21T14:11:24.000Z", "name": "template_swa3field", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:template_swa3field:0oafxqCAJWWGELFTYASJ", "settings": { "app": { "buttonSelector": "#btn-login", "extraFieldSelector": ".login", "extraFieldValue": "SOMEVALUE", "loginUrlRegex": null, "passwordSelector": "#txtbox-password", "targetURL": "https://example.com/login.html", "userNameSelector": "#txtbox-username" }, "emOptInStatus": "DISABLED", "implicitAssignment": false, "manualProvisioning": false, "notes": { "admin": null, "enduser": null }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } } }, "signOnMode": "BROWSER_PLUGIN", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "BundleEntitlementsResponse": { "summary": "List of governance bundle entitlements", "value": { "_links": { "bundle": { "href": "http://your-subdomain.okta.com/api/v1/iam/governance/bundles/0bbfxqCAJWWGELFTYAAA" }, "next": { "href": "http://your-subdomain.okta.com/api/v1/iam/governance/bundles?after=bundleId12" }, "self": { "href": "http://your-subdomain.okta.com/api/v1/iam/governance/bundles?limit=2&after=10" } }, "entitlements": [ { "_links": { "values": "http://your-subdomain.okta.com/api/v1/iam/governance/bundles/0bbfxqCAJWWGELFTYAAA/entitlements/espfxqCAJWWGELFTYASJ/values" }, "description": "Perform all admin activities for groups in the org", "id": "espfxqCAJWWGELFTYASJ", "name": "Group Membership Admin", "role": "GROUP_MEMBERSHIP_ADMIN" } ] } }, "CAPTCHAInstanceRequestHCaptcha": { "value": { "name": "myHCaptcha", "secretKey": "xxxxxxxxxxx", "siteKey": "xxxxxxxxxxx", "type": "HCAPTCHA" } }, "CAPTCHAInstanceRequestReCaptcha": { "value": { "name": "myReCaptcha", "secretKey": "xxxxxxxxxxx", "siteKey": "yyyyyyyyyyyyyyy", "type": "RECAPTCHA_V2" } }, "CAPTCHAInstanceResponseHCaptcha": { "value": { "_links": { "self": { "hints": { "allow": [ "GET", "POST", "PUT", "DELETE" ] }, "href": "https://your-subdomain.okta.com/api/v1/captchas/abcd1234" } }, "id": "abcd1234", "name": "myHCaptcha", "siteKey": "xxxxxxxxxxx", "type": "HCAPTCHA" } }, "CAPTCHAInstanceResponseReCaptcha": { "value": { "_links": { "self": { "hints": { "allow": [ "GET", "POST", "PUT", "DELETE" ] }, "href": "https://your-subdomain.okta.com/api/v1/captchas/abcd4567" } }, "id": "abcd4567", "name": "myReCaptcha", "siteKey": "yyyyyyyyyyyyyyy", "type": "RECAPTCHA_V2" } }, "CLEARIDVResponse": { "summary": "CLEAR Verified as IdP", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oab50jh0UPiB6xde0w6/lifecycle/deactivate" }, "users": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oab50jh0UPiB6xde0w6/users" } }, "created": "2025-01-14T19:59:41.000Z", "id": "0oab50jh0UPiB6xde0w6", "lastUpdated": "2025-01-14T19:59:41.000Z", "name": "CLEAR Verified IDV", "policy": { "maxClockSkew": 0, "provisioning": { "action": "DISABLED", "groups": null, "profileMaster": false }, "subject": { "filter": null, "matchAttribute": null, "matchType": "USERNAME", "userNameTemplate": { "template": "source.userName" } } }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://verified.clearme.com/oauth/idv_authorize" }, "par": { "binding": "HTTP-POST", "url": "https://verified.clearme.com/oauth/par" }, "token": { "binding": "HTTP-POST", "url": "https://verified.clearme.com/hydra/oauth2/token" } }, "scopes": [ "openid", "profile", "identity_assurance" ], "type": "ID_PROOFING" }, "status": "ACTIVE", "type": "IDV_CLEAR" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "CannotUpdateWellKnownUriForDefaultBrandError": { "summary": "Cannot update well-known URI for default brand", "value": { "errorCauses": [ { "errorSummary": "Cannot update the content for the default brand." } ], "errorCode": "E0000257", "errorId": "sampleiCF-8D5rLW6myqiPItW", "errorLink": "E0000257", "errorSummary": "Api validation failed: request" } }, "ChangePwdRequest": { "value": { "newPassword": { "value": "uTVM,TPw55" }, "oldPassword": { "value": "tlpWENT2m" }, "revokeSessions": true } }, "ChangePwdResponse": { "value": { "password": {}, "provider": { "name": "OKTA", "type": "OKTA" }, "recovery_question": { "question": "Who's a major player in the cowboy scene?" } } }, "ClientRoleTargetResponseFacebookEx": { "summary": "Facebook target app example", "value": [ { "_links": { "logo": [ { "href": "https://{oktaCDNDomain}/fs/bcg/4/abcdefghijABCC4V1234", "name": "medium" } ], "self": { "href": "https://{yourOktaDomain}/api/v1/catalog/apps/facebook" } }, "category": "SOCIAL", "description": "Giving people the power to share and make the world more open and connected.", "displayName": "Facebook", "lastUpdated": "2021-03-18T17:37:56.000Z", "name": "facebook", "signOnModes": [ "BROWSER_PLUGIN" ], "status": "ACTIVE", "verificationStatus": "OKTA_VERIFIED", "website": "https://www.facebook.com/" } ] }, "ClientRoleTargetResponseInstanceEx": { "summary": "Non-catalog target app example", "value": [ { "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/apps/0oasrudLtMlzAsTxk0g3" } }, "id": "0oasrudLtMlzAsTxk0g3", "name": "My_access_app", "status": "ACTIVE" } ] }, "CreateAnEventHook": { "summary": "Create an event hook", "value": { "channel": { "config": { "authScheme": { "key": "Authorization", "type": "HEADER", "value": "my-shared-secret" }, "headers": [ { "key": "X-Other-Header", "value": "my-header-value" } ], "uri": "https://example_external_service/userAdded" }, "type": "HTTP", "version": "1.0.0" }, "events": { "items": [ "group.user_membership.add" ], "type": "EVENT_TYPE" }, "name": "Event Hook Test" } }, "CreateAnEventHookWithFilter": { "summary": "Create an event hook with a filter", "value": { "channel": { "config": { "authScheme": { "key": "Authorization", "type": "HEADER", "value": "my-shared-secret" }, "uri": "https://example_external_service/userAdded" }, "type": "HTTP", "version": "1.0.0" }, "description": "An event hook using an Okta Expression Language filter", "events": { "filter": { "eventFilterMap": [ { "condition": { "expression": "event.target.?[type eq 'UserGroup'].size()>0 && event.target.?[displayName eq 'Sales'].size()>0" }, "event": "group.user_membership.add" } ], "type": "EXPRESSION_LANGUAGE" }, "items": [ "group.user_membership.add" ], "type": "EVENT_TYPE" }, "name": "Event Hook with Filter" } }, "CreateAppleIdPRequest": { "summary": "Create Apple IdP", "value": { "name": "Apple IdP", "policy": { "accountLink": { "action": "AUTO" }, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.email" } } }, "protocol": { "credentials": { "client": { "client_id": "your-client-id" }, "signing": { "kid": "test key ID", "privateKey": "MIGTAgEAMBM........Cb9PnybCnzDv+3cWSGWqpAIsQQZ", "teamId": "test team ID" } }, "scopes": [ "openid", "email", "name" ], "type": "OIDC" }, "type": "APPLE" } }, "CreateAssocAuthServerBody": { "summary": "Create a trusted relationship between authorization servers", "value": [ { "trusted": "{authorizationServerId}" } ] }, "CreateAssocAuthServerResponse": { "summary": "Create a trusted relationship between authorization servers", "value": [ { "_links": { "self": { "hints": { "allow": [ "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}" } }, "audiences": [ "https://api.resource.com" ], "created": "2023-05-17T22:25:57.000Z", "credentials": { "signing": { "kid": "WYQxoK4XAwGFn5Zw5AzLxFvqEKLP79BbsKmWeuc5TB4", "lastRotated": "2023-05-17T22:25:57.000Z", "nextRotation": "2023-08-15T22:25:57.000Z", "rotationMode": "AUTO", "use": "sig" } }, "description": "Sample Authorization Server description", "id": "{authorizationServerId}", "issuer": "https://{yourOktaDomain}/oauth2/{authorizationServerId}", "issuerMode": "CUSTOM_URL", "lastUpdated": "2023-05-17T22:25:57.000Z", "name": "Sample Authorization Server", "status": "ACTIVE" } ] }, "CreateAuthServerBody": { "summary": "Create a custom authorization server", "value": { "audiences": [ "api://default" ], "description": "Sample Authorization Server description", "name": "Sample Authorization Server" } }, "CreateAuthServerResponse": { "summary": "Create a custom authorization server", "value": { "_links": { "claims": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/claims" }, "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/lifecycle/deactivate" }, "metadata": [ { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/{authorizationServerId}/.well-known/oauth-authorization-server", "name": "oauth-authorization-server" }, { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/{authorizationServerId}/.well-known/openid-configuration", "name": "openid-configuration" } ], "policies": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/policies" }, "rotateKey": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/credentials/lifecycle/keyRotate" }, "scopes": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/scopes" }, "self": { "hints": { "allow": [ "GET", "DELETE", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}" } }, "audiences": [ "https://api.resource.com" ], "created": "2023-05-17T22:25:57.000Z", "credentials": { "signing": { "kid": "WYQxoK4XAwGFn5Zw5AzLxFvqEKLP79BbsKmWeuc5TB4", "lastRotated": "2023-05-17T22:25:57.000Z", "nextRotation": "2023-08-15T22:25:57.000Z", "rotationMode": "AUTO" } }, "description": "Sample Authorization Server description", "id": "{authorizationServerId}", "issuer": "https://{yourOktaDomain}/oauth2/{authorizationServerId}", "issuerMode": "ORG_URL", "lastUpdated": "2023-05-17T22:25:57.000Z", "name": "Sample Authorization Server", "status": "ACTIVE" } }, "CreateAuthServerWithAccessTokenEncryptionBody": { "summary": "Create a custom authorization server with access token encryption enabled", "value": { "accessTokenEncryptedResponseAlgorithm": "RSA-OAEP-256", "audiences": [ "api://default" ], "description": "Sample authorization server description", "jwks": { "keys": [ { "e": "AQAB", "id": "apk2g3sd6bqV5YZxu0h8", "kid": "encKey", "kty": "RSA", "n": "iHYyA5KXL82veBfNP81D7Q1GMRWIixNTu5jY03Z19DN7qTg1xYPRyPEPuMJ5Xjdhrm3dJdW7p1woRa6CHfw8FS7aosXUZkplxPs0NICP32nCkwpX3U3CltgVWrpMEUrd-JljKm0AgrervZuLkgBEfwY3BXP_SCKjF0JtbQjcK9MOKFNUUUK3_xTrFcyZThlSOtiOmhjDHTfHzeG2Q0NG2Opom1kfKWLDUVy5qrzYJWgcCaPOyEE1xnk4u5syH_8APOi2tKwKBCgS_D-kXzZ_379VhVuEpo2CGBU20t9Ys_m8KLqMCOyJaoQ3R1r6cWHfnYSab31L1my3rLwuippXkQ", "status": "ACTIVE", "use": "enc" } ] }, "name": "Sample Authorization Server" } }, "CreateAuthServerWithAccessTokenEncryptionResponse": { "summary": "Create a custom authorization server with access token encryption enabled", "value": { "_links": { "claims": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/claims" }, "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/lifecycle/deactivate" }, "metadata": [ { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/{authorizationServerId}/.well-known/oauth-authorization-server", "name": "oauth-authorization-server" }, { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/{authorizationServerId}/.well-known/openid-configuration", "name": "openid-configuration" } ], "policies": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/policies" }, "rotateKey": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/credentials/lifecycle/keyRotate" }, "scopes": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/scopes" }, "self": { "hints": { "allow": [ "GET", "DELETE", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}" } }, "accessTokenEncryptedResponseAlgorithm": "RSA-OAEP-256", "audiences": [ "https://api.resource.com" ], "created": "2023-05-17T22:25:57.000Z", "credentials": { "signing": { "kid": "WYQxoK4XAwGFn5Zw5AzLxFvqEKLP79BbsKmWeuc5TB4", "lastRotated": "2023-05-17T22:25:57.000Z", "nextRotation": "2023-08-15T22:25:57.000Z", "rotationMode": "AUTO" } }, "description": "Sample authorization server description", "id": "{authorizationServerId}", "issuer": "https://{yourOktaDomain}/oauth2/{authorizationServerId}", "issuerMode": "ORG_URL", "jwks": { "keys": [ { "e": "AQAB", "id": "apk2g3sd6bqV5YZxu0h8", "kid": "encKey", "kty": "RSA", "n": "iHYyA5KXL82veBfNP81D7Q1GMRWIixNTu5jY03Z19DN7qTg1xYPRyPEPuMJ5Xjdhrm3dJdW7p1woRa6CHfw8FS7aosXUZkplxPs0NICP32nCkwpX3U3CltgVWrpMEUrd-JljKm0AgrervZuLkgBEfwY3BXP_SCKjF0JtbQjcK9MOKFNUUUK3_xTrFcyZThlSOtiOmhjDHTfHzeG2Q0NG2Opom1kfKWLDUVy5qrzYJWgcCaPOyEE1xnk4u5syH_8APOi2tKwKBCgS_D-kXzZ_379VhVuEpo2CGBU20t9Ys_m8KLqMCOyJaoQ3R1r6cWHfnYSab31L1my3rLwuippXkQ", "status": "ACTIVE", "use": "enc" } ] }, "lastUpdated": "2023-05-17T22:25:57.000Z", "name": "Sample Authorization Server", "status": "ACTIVE" } }, "CreateAuthorizationServerPolicyRequest": { "summary": "Create an authorization server policy", "value": { "conditions": { "clients\"": { "include\"": [ "ALL_CLIENTS" ] } }, "description": "Default policy description", "name": "Default Policy", "priority": 1, "status": "ACTIVE", "system": false, "type": "OAUTH_AUTHORIZATION_POLICY" } }, "CreateAuthorizationServerPolicyRuleRequest": { "summary": "Create authorization server policy rule", "value": { "actions": { "token": { "accessTokenLifetimeMinutes": 60, "inlineHook": { "id": "cal4egvp1mbMldrYN0g7" }, "refreshTokenLifetimeMinutes": 0, "refreshTokenWindowMinutes": 10080 } }, "conditions": { "grantTypes": { "include": [ "implicit", "client_credentials", "authorization_code", "password" ] }, "people": { "groups": { "include": [ "EVERYONE" ] } }, "scopes": { "include": [ "*" ] } }, "name": "Default Policy Rule", "priority": 1, "type": "RESOURCE_ACCESS" } }, "CreateBrandRequest": { "value": { "name": "My Awesome Brand" } }, "CreateBrandResponse": { "value": { "_links": { "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/bnd114iNkrcN6aR680g5" }, "themes": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/bnd114iNkrcN6aR680g5/themes" } }, "agreeToCustomPrivacyPolicy": "false,", "customPrivacyPolicyUrl": "null,", "defaultApp": { "appInstanceId": null, "appLinkName": null, "classicApplicationUri": null }, "id": "bnd114iNkrcN6aR680g5", "isDefault": false, "locale": "en", "name": "My Awesome Brand", "removePoweredByOkta": false } }, "CreateCLEARIDVRequest": { "summary": "Create CLEAR Verified as IdP", "value": { "name": "CLEAR Verified IDV", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "maxClockSkew": 0, "provisioning": { "action": "DISABLED", "groups": null, "profileMaster": false }, "subject": { "filter": null, "matchAttribute": null, "matchType": "USERNAME", "userNameTemplate": { "template": "source.userName" } } }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "scopes": [ "profile", "identity_assurance", "openid" ], "type": "ID_PROOFING" }, "type": "IDV_CLEAR" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "CreateChildOrgRequestEx": { "summary": "Create org request", "value": { "admin": { "credentials": { "password": { "value": "XXXX" } }, "profile": { "email": "FirstLast@example.com", "firstName": "First", "lastName": "Last", "login": "FirstLast@example.com", "mobilePhone": null } }, "edition": "SKU", "name": "My Child Org 1", "subdomain": "my-child-org-1", "website": "http://www.examplecorp.com" } }, "CreateChildOrgResponseEx": { "summary": "Create org response", "value": { "_links": { "administrator": { "href": "https://my-child-org-1.oktapreview.com/api/v1/users/00u1n8sheI1WBQlDV406" }, "contacts": { "href": "https://my-child-org-1.oktapreview.com/api/v1/orgs/my-child-org-1/contacts" }, "organization": { "href": "https://my-child-org-1.oktapreview.com/api/v1/orgs/my-child-org-1" }, "policy": { "href": "https://my-child-org-1.oktapreview.com/api/v1/orgs/my-child-org-1/policy" }, "uploadLogo": { "href": "https://my-child-org-1.oktapreview.com/api/v1/org/logo" } }, "created": "2024-08-27T15:42:52.000Z", "edition": "SKU", "expiresAt": null, "id": "00o1n8sbwArJ7OQRw406", "lastUpdated": "2024-08-27T15:42:56.000Z", "licensing": { "apps": [] }, "name": "My Child Org 1", "settings": { "app": { "errorRedirectUrl": null, "interstitialMinWaitTime": 1200, "interstitialUrl": null }, "logs": { "level": "INFO" }, "portal": { "errorRedirectUrl": null, "signOutUrl": null }, "userAccount": { "attributes": { "secondaryEmail": true, "secondaryImage": true } } }, "status": "ACTIVE", "subdomain": "my-child-org-1", "token": "XXXXXXXXXXXXX", "tokenType": "SSWS", "website": "http://www.examplecorp.com" } }, "CreateCustomIDVRequest": { "summary": "Create Custom IDV as IdP", "value": { "name": "Custom IDV", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "maxClockSkew": 0, "provisioning": { "action": "DISABLED", "groups": null, "profileMaster": false }, "subject": { "filter": null, "matchAttribute": null, "matchType": "USERNAME", "userNameTemplate": { "template": "source.userName" } } }, "properties": { "idvMetadata": { "privacyPolicy": "https://idv.example.com/privacy", "termsOfUse": "https://idv.example.com/terms", "vendorDisplayName": "Custom IDV" } }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://idv.example.com/authorize" }, "jwks": { "binding": "HTTP-REDIRECT", "url": "https://idv.example.com/jwks" }, "par": { "binding": "HTTP-REDIRECT", "url": "https://idv.example.com/par" }, "token": { "binding": "HTTP-POST", "url": "https://idv.example.com/token" } }, "issuer": { "url": "https://idv.example.com" }, "scopes": [ "profile", "identity_assurance", "openid" ], "type": "ID_PROOFING" }, "type": "IDV_STANDARD" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "CreateCustomRoleResponseGroup": { "value": { "_links": { "assignee": { "href": "https://{yourOktaDomain}/api/v1/groups/00gsr2IepS8YhHRFf0g3" }, "permissions": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3/permissions" }, "resource-set": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/iamoJDFKaJxGIr0oamd9g" }, "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3" } }, "assignmentType": "GROUP", "created": "2019-02-06T16:20:57.000Z", "id": "irb1q92TFAHzySt3x0g4", "label": "UserCreatorRole", "lastUpdated": "2019-02-06T16:20:57.000Z", "resource-set": "iamoJDFKaJxGIr0oamd9g", "role": "cr0Yq6IJxGIr0ouum0g3", "status": "ACTIVE", "type": "CUSTOM" } }, "CreateCustomTokenClaimBody": { "summary": "Create a custom token claim", "value": [ { "alwaysIncludeInToken": true, "claimType": "IDENTITY", "conditions": { "scopes": [ "profile" ] }, "group_filter_type": "CONTAINS", "name": "Support", "status": "ACTIVE", "system": false, "value": "Support", "valueType": "GROUPS" } ] }, "CreateCustomTokenClaimResponse": { "summary": "Create a custom token claim response", "value": [ { "_links": { "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/claims/{claimId}" } }, "alwaysIncludeInToken": true, "apiResourceId": null, "claimType": "IDENTITY", "conditions": { "scopes": [ "profile" ] }, "group_filter_type": "CONTAINS", "id": "{claimId}", "name": "Support", "status": "ACTIVE", "system": false, "value": "Support", "valueType": "GROUPS" } ] }, "CreateEDNZRequest": { "summary": "Create an enhanced dynamic network zone", "value": { "asns": { "exclude": [], "include": [] }, "ipServiceCategories": { "exclude": [], "include": [ "ALL_ANONYMIZERS" ] }, "locations": { "exclude": [], "include": [] }, "name": "testZone106", "status": "ACTIVE", "type": "DYNAMIC_V2", "usage": "BLOCKLIST" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "CreateEDNZResponse": { "summary": "Enhanced dynamic network zone", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/zones/nzok0oz2xYHOZtIch0g4/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "http://{yourOktaDomain}/api/v1/zones/nzok0oz2xYHOZtIch0g4" } }, "asns": { "exclude": [], "include": [] }, "create": "2024-05-13T16:33:44.000Z", "id": "nzok0oz2xYHOZtIch0g4", "ipServiceCategories": { "exclude": [], "include": [ "ALL_ANONYMIZERS" ] }, "lastUpdated": "2024-05-13T16:33:44.000Z", "locations": { "exclude": [], "include": [] }, "name": "testZone106", "status": "ACTIVE", "system": false, "type": "DYNAMIC_V2", "usage": "BLOCKLIST" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "CreateEmailDomainRequest": { "value": { "brandId": "bnd100iSrkcN6aR680g1", "displayName": "Admin", "domain": "example.com", "userName": "admin", "validationSubdomain": "mail" } }, "CreateFacebookIdPRequest": { "summary": "Create Facebook IdP", "value": { "name": "Facebook", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.userPrincipalName" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "scopes": [ "public_profile", "email" ], "type": "OAUTH2" }, "type": "FACEBOOK" } }, "CreateGenericOidcIdPRequest": { "summary": "Create generic OpenID Connect IdP", "value": { "name": "Example OpenID Connect IdP", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 120000, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" } }, "subject": { "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.email" } }, "trustClaims": false }, "protocol": { "algorithms": { "request": { "signature": { "algorithm": "HS256", "scope": "REQUEST" } } }, "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret", "pkce_required": "true" } }, "endpoints": { "acs": { "binding": "HTTP-POST", "type": "INSTANCE" }, "authorization": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/authorize" }, "jwks": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/keys" }, "slo": { "url": "https://idp.example.com/slo" }, "token": { "binding": "HTTP-POST", "url": "https://idp.example.com/token" }, "userInfo": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/userinfo" } }, "issuer": { "url": "https://idp.example.com" }, "scopes": [ "openid", "profile", "email" ], "settings": { "participateSlo": true }, "type": "OIDC" }, "type": "OIDC" } }, "CreateGoogleIdPRequest": { "summary": "Create Google IdP", "value": { "name": "Google", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.userPrincipalName" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "scopes": [ "profile", "email", "openid" ], "type": "OAUTH2" }, "type": "GOOGLE" } }, "CreateGroupPushMappingRequest_ExampleCreate": { "value": { "sourceGroupId": "00g00000000000000000", "status": "ACTIVE", "targetGroupName": "NewGroup" } }, "CreateGroupPushMappingRequest_ExampleCreate_ActiveDirectory": { "value": { "appConfig": { "distinguishedName": "dc=example,dc=com", "groupScope": "GLOBAL", "groupType": "SECURITY", "samAccountName": "NewGroup", "type": "ACTIVE_DIRECTORY" }, "sourceGroupId": "00g00000000000000000", "status": "ACTIVE", "targetGroupName": "NewGroup" } }, "CreateGroupPushMappingRequest_ExampleLink": { "value": { "sourceGroupId": "00g00000000000000000", "status": "ACTIVE", "targetGroupId": "00g00000000000000001" } }, "CreateGroupPushMappingResponse_ExampleCreate": { "value": { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oa00000000000000000" }, "sourceGroup": { "href": "https://{yourOktaDomain}/api/v1/groups/00g00000000000000000" }, "targetGroup": { "href": "https://{yourOktaDomain}/api/v1/groups/00g00000000000000001" } }, "created": "2025-01-01T00:00:00Z", "errorSummary": "", "id": "gPm00000000000000000", "lastPush": "2025-01-01T00:00:00Z", "lastUpdated": "2025-01-01T00:00:00Z", "sourceGroupId": "00g00000000000000000", "status": "ACTIVE", "targetGroupId": "00g00000000000000001" } }, "CreateGroupPushMappingResponse_ExampleCreate_ActiveDirectory": { "value": { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oa00000000000000000" }, "sourceGroup": { "href": "https://{yourOktaDomain}/api/v1/groups/00g00000000000000000" }, "targetGroup": { "href": "https://{yourOktaDomain}/api/v1/groups/00g00000000000000001" } }, "appConfig": { "distinguishedName": "dc=example,dc=com", "groupScope": "GLOBAL", "groupType": "SECURITY", "samAccountName": "NewGroup", "type": "ACTIVE_DIRECTORY" }, "created": "2025-01-01T00:00:00Z", "errorSummary": "", "id": "gPm00000000000000000", "lastPush": "2025-01-01T00:00:00Z", "lastUpdated": "2025-01-01T00:00:00Z", "sourceGroupId": "00g00000000000000000", "status": "ACTIVE", "targetGroupId": "00g00000000000000001" } }, "CreateGroupPushMappingResponse_ExampleLink": { "value": { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oa00000000000000000" }, "sourceGroup": { "href": "https://{yourOktaDomain}/api/v1/groups/00g00000000000000000" }, "targetGroup": { "href": "https://{yourOktaDomain}/api/v1/groups/00g00000000000000001" } }, "created": "2025-01-01T00:00:00Z", "errorSummary": "", "id": "gPm00000000000000000", "lastPush": "2025-01-01T00:00:00Z", "lastUpdated": "2025-01-01T00:00:00Z", "sourceGroupId": "00g00000000000000000", "status": "ACTIVE", "targetGroupId": "00g00000000000000001" } }, "CreateHookKeyResponse": { "summary": "Create a key response example", "value": { "_embedded": { "alg": "RSA", "e": "AQAB", "kid": "7fbc27fd-e3df-4522-86bf-1930110256ad", "kty": "RSA", "n": "2naqCnv6r4xNQs7207lRtKQvdtnlVND-8k5iYBIiqoKGY3CqUmRm1jleoOniiQoMkFX8Wj2DmVqr002efF3vOQ7_gjtTatBTVUNbNIQLybun4dkVoUtfP7pRc5SLpcP3eGPRVar734ZrpQXzmCEdpqBt3jrVjwYjNE5DqOjbYXFJtMsy8CWE9LRJ3kyHEoHPzo22dG_vMrXH0_sAQoCk_4TgNCbvyzVmGVYXI_BkUnp0hv2pR4bQVRYzGB9dKJdctOh8zULqc_EJ8tiYsS05YnF7whrWEyARK0rH-e4d4W-OmBTga_zhY4kJ4NsoQ4PyvcatZkxjPO92QHQOFDnf3w`", "use": "null" }, "created": "2022-08-31T18:09:58.000Z", "id": "HKY1p7jWLndGQV9M60g4", "isUsed": "false", "keyId": "7fbc27fd-e3df-4522-86bf-1930110256ad", "lastUpdated": "2022-08-31T18:09:58.000Z", "name": "My new key" } }, "CreateIAMStandardRoleResponseGroup": { "value": { "_links": { "assignee": { "href": "https://{yourOktaDomain}/api/v1/groups/00gsr2IepS8YhHRFf0g3" }, "member": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/ACCESS_CERTIFICATIONS_IAM_POLICY/bindings/ACCESS_REQUESTS_ADMIN/members/irb4jlomnnDBuBDyJ0g7" }, "permissions": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/ACCESS_REQUESTS_ADMIN/permissions" }, "resource-set": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/ACCESS_CERTIFICATIONS_IAM_POLICY" }, "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/ACCESS_REQUESTS_ADMIN" } }, "assignmentType": "GROUP", "created": "2019-02-06T16:20:57.000Z", "id": "irb1q92TFAHzySt3x0g4", "label": "Access Requests Administrator", "lastUpdated": "2019-02-06T16:20:57.000Z", "resource-set": "ACCESS_CERTIFICATIONS_IAM_POLICY", "role": "ACCESS_REQUESTS_ADMIN", "status": "ACTIVE", "type": "ACCESS_REQUESTS_ADMIN" } }, "CreateIPPolicyBlockListNetworkZone": { "summary": "Create an IP blocklist network zone", "value": { "gateways": [ { "type": "CIDR", "value": "1.2.3.4/24" }, { "type": "CIDR", "value": "2.3.4.5/24" } ], "name": "newBlockListNetworkZone", "proxies": null, "status": "ACTIVE", "type": "IP", "usage": "BLOCKLIST" } }, "CreateIPPolicyBlockListNetworkZoneResponse": { "summary": "IP blocklist network zone", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzo1qasnPb1kqEq0e0g4/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzo1qasnPb1kqEq0e0g4" } }, "created": "2021-08-09T20:22:09.000Z", "gateways": [ { "type": "CIDR", "value": "1.2.3.4/24" }, { "type": "CIDR", "value": "2.3.4.5/24" } ], "id": "nzo1qasnPb1kqEq0e0g4", "lastUpdated": "2021-08-09T20:22:09.000Z", "name": "newBlockListNetworkzone", "proxies": null, "status": "ACTIVE", "system": false, "type": "IP", "usage": "BLOCKLIST" } }, "CreateIPPolicyNetworkZone": { "summary": "Create an IP policy network zone", "value": { "gateways": [ { "type": "CIDR", "value": "1.2.3.4/24" }, { "type": "CIDR", "value": "2.3.4.5/24" } ], "name": "newNetworkZone", "proxies": [ { "type": "CIDR", "value": "2.2.3.4/24" }, { "type": "CIDR", "value": "3.3.4.5/24" } ], "type": "IP" } }, "CreateIPPolicyNetworkZoneResponse": { "summary": "IP policy network zone", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzowb8T5Jh5xuAJ0o0g7/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzowb8T5Jh5xuAJ0o0g7" } }, "created": "2021-08-09T21:32:01.000Z", "gateways": [ { "type": "CIDR", "value": "1.2.3.4/24'" }, { "type": "CIDR", "value": "2.3.4.5/24" } ], "id": "nzowb8T5Jh5xuAJ0o0g7", "lastUpdated": "2021-08-09T21:32:01.000Z", "name": "newNetworkZone", "proxies": [ { "type": "CIDR", "value": "2.2.3.4/24" }, { "type": "CIDR", "value": "3.3.4.5/24" } ], "status": "ACTIVE", "system": false, "type": "IP", "usage": "POLICY" } }, "CreateIncodeIDVRequest": { "summary": "Create Incode as IdP", "value": { "name": "Incode IDV", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "maxClockSkew": 0, "provisioning": { "action": "DISABLED", "groups": null, "profileMaster": false }, "subject": { "filter": null, "matchAttribute": null, "matchType": "USERNAME", "userNameTemplate": { "template": "source.userName" } } }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "scopes": [ "profile", "identity_assurance", "openid" ], "type": "ID_PROOFING" }, "type": "IDV_INCODE" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "CreateLinkedObjectRequest": { "summary": "Create manager-subordinate link request", "value": { "associated": { "description": "Subordinate link property", "name": "subordinate", "title": "subordinate", "type": "USER" }, "primary": { "description": "Manager link property", "name": "manager", "title": "manager", "type": "USER" } } }, "CreateLinkedObjectResponse": { "summary": "Create manager-subordinate link property response", "value": { "_links": { "self": { "href": "http://your-subdomain.okta.com/api/v1/meta/schemas/user/linkedObjects/manager" } }, "associated": { "description": "Subordinate link property", "name": "subordinate", "title": "subordinate", "type": "USER" }, "primary": { "description": "Manager link property", "name": "manager", "title": "manager", "type": "USER" } } }, "CreateMicrosoftIdPRequest": { "summary": "Create Microsoft IdP", "value": { "name": "Microsoft", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.userPrincipalName" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "scopes": [ "openid", "email", "profile", "https://graph.microsoft.com/User.Read" ], "type": "OIDC" }, "type": "MICROSOFT" } }, "CreateOAuth2ScopeRequest": { "summary": "Example scope", "value": { "consent": "REQUIRED", "description": "Drive car", "displayName": "Saml Jackson", "name": "car:drive" } }, "CreateOktaIntegrationIdPRequest": { "summary": "Create Okta Integration IdP", "value": { "name": "Example Okta Integration IdP", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "maxClockSkew": 120000, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" } }, "subject": { "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.email" } } }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "token_endpoint_auth_method": "private_key_jwt" } }, "oktaIdpOrgUrl": "https://your-spoke-org.example.com", "type": "SAML2" }, "type": "OKTA_INTEGRATION" } }, "CreateOktaManagedUserAccountRequest": { "summary": "Create an Okta managed user account", "value": { "description": "Shared admin account for managing AD integrations", "name": "AD Integrations Admin", "oktaUserId": "00u11s48P9zGW8yqm0g5", "ownerGroupIds": [ "00g57qp78yZT2XBA40g7" ], "ownerUserIds": [ "00u22t59Q0aHbNEXi1h8" ] } }, "CreateOrReplaceSMSTemplateRequest": { "value": { "name": "Custom", "template": "${org.name}: your verification code is ${code}", "translations": { "es": "${org.name}: el c\u00f3digo de verificaci\u00f3n es ${code}", "fr": "${org.name}: votre code de v\u00e9rification est ${code}", "it": "${org.name}: il codice di verifica \u00e8 ${code}" }, "type": "SMS_VERIFY_CODE" } }, "CreateOrReplaceSMSTemplateResponse": { "value": { "created": "2024-04-25T17:35:02.000Z", "id": "6NQUJ5yR3bpgEiYmq8IC", "lastUpdated": "2024-04-25T17:35:02.000Z", "name": "Custom", "template": "${org.name}: your verification code is ${code}", "translations": { "es": "${org.name}: el c\u00f3digo de verificaci\u00f3n es ${code}", "fr": "${org.name}: votre code de v\u00e9rification est ${code}", "it": "${org.name}: il codice di verifica \u00e8 ${code}" }, "type": "SMS_VERIFY_CODE" } }, "CreatePersonaIDVRequest": { "summary": "Create Persona as IdP", "value": { "name": "Persona IDV", "policy": { "maxClockSkew": 0, "provisioning": { "action": "DISABLED", "groups": null, "profileMaster": false }, "subject": { "filter": null, "matchAttribute": null, "matchType": "USERNAME", "userNameTemplate": { "template": "source.userName" } } }, "properties": { "inquiryTemplateId": "itmpl_HSctx8fNvXoHtrQfz2hxUVH8RBjG" }, "protocol": { "credentials": { "bearer": { "apiKey": "your-api-key" } }, "type": "ID_PROOFING" }, "type": "IDV_PERSONA" } }, "CreateRealmAssignmentRequest": { "value": { "actions": { "assignUserToRealm": { "realmId": "00g1b7rvh0xPLKXFf0g5" } }, "conditions": { "expression": { "value": "user.profile.role ==\\\"Manager\\\"" }, "profileSourceId": "0oa4enoRyjwSCy5hx0g4" }, "name": "Realm Assignment 1", "priority": 0 } }, "CreateRealmRequest": { "value": { "profile": { "domains": [ "atko.com", "user.com" ], "name": "Car Co", "realmType": "PARTNER" } } }, "CreateSamlIdPRequest": { "summary": "Create SAML 2.0 IdP", "value": { "name": "Example SAML IdP", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": "(\\S+@example\\.com)", "format": [ "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" ], "matchType": "USERNAME", "userNameTemplate": { "template": "saml.subjectNameId" } } }, "protocol": { "algorithms": { "request": { "signature": { "algorithm": "SHA-256", "scope": "REQUEST" } }, "response": { "signature": { "algorithm": "SHA-256", "scope": "ANY" } } }, "credentials": { "trust": { "additionalKids": [ "additional-key-id" ], "audience": "http://www.okta.com/123", "issuer": "https://idp.example.com", "kid": "your-key-id" } }, "endpoints": { "acs": { "binding": "HTTP-POST", "type": "INSTANCE" }, "slo": { "binding": "HTTP-POST", "url": "https://idp.example.com/slo" }, "sso": { "binding": "HTTP-POST", "destination": "https://idp.example.com", "url": "https://idp.example.com" } }, "settings": { "participateSlo": true }, "type": "SAML2" }, "type": "SAML2" } }, "CreateSessionBody": { "summary": "Create a new session with a valid session token", "value": { "sessionToken": "00HiohZYpJgMSHwmL9TQy7RRzuY-q9soKp1SPmYYow" } }, "CreateSessionResponse": { "summary": "Create a new session with a valid session token", "value": { "_links": { "href": "https://{yourOktaDomain}/api/v1/sessions/l7FbDVqS8zHSy65uJD85", "self": { "hints": { "allow": [ "DELETE" ] } } }, "amr": [ "pwd" ], "createdAt": "2019-08-24T14:15:22Z", "expiresAt": "2019-08-24T14:15:22Z", "id": "l7FbDVqS8zHSy65uJD85", "idp": { "id": "01a2bcdef3GHIJKLMNOP", "type": "ACTIVE_DIRECTORY" }, "lastFactorVerification": "2019-08-24T14:15:22Z", "lastPasswordVerification": "2019-08-24T14:15:22Z", "login": "user@example.com", "status": "ACTIVE", "userId": "00u0abcdefGHIJKLMNOP" } }, "CreateSmartCardIdPRequest": { "summary": "Create SmartCard IdP", "value": { "name": "Smart Card IDP Name", "policy": { "mapAMRClaims": false, "maxClockSkew": 120000, "provisioning": { "action": "DISABLED" }, "subject": { "matchAttribute": "", "matchType": "EMAIL", "userNameTemplate": { "template": "idpuser.subjectAltNameEmail" } }, "trustClaims": false }, "properties": { "additionalAmr": [ "sc", "hwk", "pin", "mfa" ] }, "protocol": { "credentials": { "trust": { "issuer": "your-issuer", "kid": "your-kid", "revocation": "CRL", "revocationCacheLifetime": 2880 } }, "type": "MTLS" }, "status": "ACTIVE", "type": "X509" } }, "CreateStandardRoleAssignmentResponseGroup": { "value": { "_links": { "assignee": { "href": "https://{yourOktaDomain}/api/v1/groups/00gsr2IepS8YhHRFf0g3" } }, "assignmentType": "GROUP", "created": "2019-02-27T14:56:55.000Z", "id": "grasraHPx7i79ajaJ0g3", "label": "Organization Administrator", "lastUpdated": "2019-02-27T14:56:55.000Z", "status": "ACTIVE", "type": "ORG_ADMIN" } }, "CreateUISchemaBody": { "summary": "UI schema body request", "value": { "uiSchema": { "buttonLabel": "Submit", "elements": [ { "label": "First Name", "options": { "format": "text" }, "scope": "#/properties/firstName", "type": "Control" }, { "label": "Last Name", "options": { "format": "text" }, "scope": "#/properties/lastName", "type": "Control" }, { "label": "Primary email", "options": { "format": "text" }, "scope": "#/properties/email", "type": "Control" } ], "label": "Sign in", "type": "Group" } } }, "CreateUISchemaResponse": { "summary": "Returns full UI schema body", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://exmaple.com/api/v1/meta/uischemas/uis4a7liocgcRgcxZ0g7" } }, "created": "2022-07-25T12:56:31.000Z", "id": "uis4a7liocgcRgcxZ0g7", "lastUpdated": "2022-07-26T11:53:59.000Z", "uiSchema": { "buttonLabel": "Submit", "elements": [ { "label": "First name", "options": { "format": "text" }, "scope": "#/properties/firstName", "type": "Control" }, { "label": "Last name", "options": { "format": "text" }, "scope": "#/properties/lastName", "type": "Control" }, { "label": "Primary email", "options": { "format": "text" }, "scope": "#/properties/email", "type": "Control" } ], "label": "Sign in", "type": "Group" } } }, "CreateUpdateEmailCustomizationRequest": { "value": { "body": "
Bonjour ${user.profile.firstName}. Activer le compte
", "isDefault": false, "language": "fr", "subject": "Bienvenue dans ${org.name}!" } }, "CreateUpdateEmailCustomizationResponse": { "value": { "_links": { "preview": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/customizations/oel11u6DqUiMbQkpl0g4/preview" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/customizations/oel11u6DqUiMbQkpl0g4" }, "template": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation" }, "test": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/test" } }, "body": "Bonjour ${user.profile.firstName}. Activer le compte
", "created": "2021-11-09T20:38:10.000Z", "id": "oel11u6DqUiMbQkpl0g4", "isDefault": false, "language": "fr", "lastUpdated": "2021-11-11T20:38:10.000Z", "subject": "Bienvenue dans ${org.name}!" } }, "CreateUpdateIamRolePermissionRequestExampleWithExclude": { "value": { "conditions": { "exclude": { "okta:ResourceAttribute/User/Profile": [ "zipCode" ] } } } }, "CreateUpdateIamRolePermissionRequestExampleWithInclude": { "value": { "conditions": { "include": { "okta:ResourceAttribute/User/Profile": [ "city", "state" ] } } } }, "CreateUserRequest": { "summary": "Create a user type request", "value": { "description": "A new custom user type", "displayName": "New user type", "name": "newUserType" } }, "CreateUserResponse": { "summary": "Create a user type response", "value": { "_links": { "schema": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/oscz9fj2jMiRBC1ZT1d6" }, "self": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/oscz9fj2jMiRBC1ZT1d6" } }, "created": "2021-07-05T20:40:38.000Z", "createdBy": "sprz9fj1ycBcsgopy1d6", "default": false, "description": "A new custom user type", "displayName": "New user type", "id": "otyfnly5cQjJT9PnR0g4", "lastUpdated": "2021-07-05T20:40:38.000Z", "lastUpdatedBy": "sprz9fj1ycBcsgopy1d6", "name": "newUserType" } }, "CsrJsonResponse": { "summary": "CSR object in JSON format", "value": { "_links": { "publish": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oad5lTSBOMUBOBVVQSC/credentials/csrs/h9zkutaSe7fZX0SwN1GqDApofgD1OW8g2B5l2azha50/lifecycle/publish" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oad5lTSBOMUBOBVVQSC/credentials/csrs/h9zkutaSe7fZX0SwN1GqDApofgD1OW8g2B5l2azha50" } }, "created": "2017-03-28T01:11:10.000Z", "csr": "MIIC4DCCAcgCAQAwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xEzARBgNVBAoMCk9rdGEsIEluYy4xDDAKBgNVBAsMA0RldjESMBAGA1UEAwwJU1AgSXNzdWVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6m8jHVCr9/tKvvbFN59T4raoCs/78KRm4fSefHQOv1TKLXo4wTLbsqYWRWc5u0sd5orUMQgPQOyj3i6qh13mALY4BzrT057EG1BUNjGg29QgYlnOk2iX890e5BIDMQQEIKFrvOi2V8cLUkLvE2ydRn0VO1Q1frbUkYeStJYC5Api2JQsYRwa+1ZeDH1ITnIzUaugWhW2WB2lSnwZkenne5KtffxMPYVu+IhNRHoKaRA6Z51YNhMJIx17JM2hs/H4Ka3drk6kzDf7ofk/yBpb9yBWyU7CTSQhdoHidxqFprMDaT66W928t3AeOENHBuwn8c2K9WeGG+bELNyQRJVmawIDAQABoCowKAYJKoZIhvcNAQkOMRswGTAXBgNVHREEEDAOggxkZXYub2t0YS5jb20wDQYJKoZIhvcNAQELBQADggEBAA2hsVJRVM+A83X9MekjTnIbt19UNT8wX7wlE9jUKirWsxceLiZBpVGn9qfKhhVIpvdaIRSeoFYS2Kg/m1G6bCvjmZLcrQ5FcEBjZH2NKfNppGVnfC2ugtUkBtCB+UUzOhKhRKJtGugenKbP33zRWWIqnd2waF6Cy8TIuqQVPbwEDN9bCbAs7ND6CFYNguY7KYjWzQOeAR716eqpEEXuPYAS4nx/ty4ylonR8cv+gpq51rvq80A4k/36aoeM0Y6I4w64vhTfuvWW2UYFUD+/+y2FA2CSP4JfctySrf1s525v6fzTFZ3qZbB5OZQtP2b8xYWktMzywsxGKDoVDB4wkH4=", "id": "h9zkutaSe7fZX0SwN1GqDApofgD1OW8g2B5l2azha50", "kty": "RSA" } }, "CsrPkcs10Response": { "summary": "CSR in DER format", "value": "MIIC4DCCAcgCAQAwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xEzARBgNVBAoMCk9rdGEsIEluYy4xDDAKBgNVBAsMA0RldjESMBAGA1UEAwwJU1AgSXNzdWVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6m8jHVCr9" }, "CustomAAGUIDRequest": { "summary": "Create a custom AAGUID", "value": { "aaguid": "cb69481e-8ff7-4039-93ec-0a272911111", "attestationRootCertificates": [ { "x5c": "X5C..." } ], "authenticatorCharacteristics": { "fipsCompliant": false, "hardwareProtected": false, "platformAttached": false }, "name": "My Security Key" } }, "CustomAAGUIDResponse": { "summary": "Custom AAGUID", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "PUT", "PATCH", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authenticators/aut1nd8PQhGcQtSxB0g4/aaguids/cb69481e-8ff7-4039-93ec-0a272911111" } }, "aaguid": "cb69481e-8ff7-4039-93ec-0a272911111", "attestationRootCertificates": [ { "exp": "2035-05-26T16:04:58.000Z", "iss": "Yubico U2F Root CA Serial 457200631", "x5c": "X5C...", "x5t#S256": "SHA-256 x5t of the X.509 root certificate" } ], "authenticatorCharacteristics": { "fipsCompliant": false, "hardwareProtected": false, "platformAttached": false }, "name": "My Security Key" } }, "CustomAAGUIDUpdateRequest": { "summary": "Update a custom AAGUID", "value": { "attestationRootCertificates": [ { "x5c": "X5C..." } ], "authenticatorCharacteristics": { "fipsCompliant": false, "hardwareProtected": false, "platformAttached": false }, "name": "My Security Key" } }, "CustomAuthSettings": { "summary": "Custom auth settings example", "value": { "appInstanceProperties": [ { "label": "API Key", "name": "apiKey" }, { "label": "API Secret", "name": "apiSecret" } ], "authType": "CUSTOM", "customSettings": null } }, "CustomIDVResponse": { "summary": "Custom IDV as IdP", "value": { "_links": { "users": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oa2pstvoFV4GYCw30g5/users" } }, "created": "2025-01-15T20:54:04.000Z", "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oa2pstvoFV4GYCw30g5/lifecycle/deactivate" }, "id": "0oa2pstvoFV4GYCw30g5", "lastUpdated": "2025-01-15T20:54:05.000Z", "name": "Custom IDV IdP", "policy": { "maxClockSkew": 0, "provisioning": { "action": "DISABLED", "groups": null, "profileMaster": false }, "subject": { "filter": null, "matchAttribute": null, "matchType": "USERNAME", "userNameTemplate": { "template": "source.userName" } } }, "properties": { "idvMetadata": { "privacyPolicy": "https://idv.example.com/privacy", "termsOfUse": "https://idv.example.com/terms", "vendorDisplayName": "Custom IDV" } }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://idv.example.com/authorize" }, "jwks": { "binding": "HTTP-REDIRECT", "url": "https://idv.example.com/jwks" }, "par": { "binding": "HTTP-REDIRECT", "url": "https://idv.example.com/par" }, "token": { "binding": "HTTP-POST", "url": "https://idv.example.com/token" } }, "issuer": { "url": "https://idv.example.com" }, "scopes": [ "openid", "profile", "identity_assurance" ], "type": "ID_PROOFING" }, "status": "ACTIVE", "type": "IDV_STANDARD" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "CustomRoleAssignmentRequest": { "value": { "resource-set": "iam4cxy6z7hhaZCSk0g7", "role": "cr04cxy6yzSCtNciD0g7", "type": "CUSTOM" } }, "CustomRoleResponseClient": { "value": { "_links": { "assignee": { "href": "https://{yourOktaDomain}/oauth2/v1/clients/0oa4ee9vgbIuqTUvd0g7" }, "member": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/iam4cxy6z7hhaZCSk0g7/bindings/cr04cxy6yzSCtNciD0g7/members/irb4ey26fpFI3vQ8y0g7" }, "permissions": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr04cxy6yzSCtNciD0g7/permissions" }, "resource-set": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/iam4cxy6z7hhaZCSk0g7" }, "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr04cxy6yzSCtNciD0g7" } }, "assignmentType": "CLIENT", "created": "2023-05-01T15:16:47.000Z", "id": "irb4ey26fpFI3vQ8y0g7", "label": "view_minimal", "lastUpdated": "2023-05-01T15:16:47.000Z", "resource-set": "iam4cxy6z7hhaZCSk0g7", "role": "cr04cxy6yzSCtNciD0g7", "status": "ACTIVE", "type": "CUSTOM" } }, "CustomRoleResponseUser": { "value": { "_links": { "assignee": { "href\"": "https://{yourOktaDomain}/api/v1/users/00ub0oNGTSWTBKOLGLNR" }, "permissions": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3/permissions" }, "resource-set": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/iamoJDFKaJxGIr0oamd9g" }, "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3" } }, "assignmentType": "USER", "created": "2019-02-06T16:20:57.000Z", "id": "irb1q92TFAHzySt3x0g4", "label": "UserCreatorRole", "lastUpdated": "2019-02-06T16:20:57.000Z", "resource-set": "iamoJDFKaJxGIr0oamd9g", "role": "cr0Yq6IJxGIr0ouum0g3", "status": "ACTIVE", "type": "CUSTOM" } }, "CustomRolesListResponseClient": { "value": [ { "_links": { "assignee": { "href": "https://{yourOktaDomain}/oauth2/v1/clients/0oa4ee9vgbIuqTUvd0g7" }, "member": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/iam4cxy6z7hhaZCSk0g7/bindings/cr04cxy6yzSCtNciD0g7/members/irb4ey26fpFI3vQ8y0g7" }, "permissions": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr04cxy6yzSCtNciD0g7/permissions" }, "resource-set": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/iam4cxy6z7hhaZCSk0g7" }, "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr04cxy6yzSCtNciD0g7" } }, "assignmentType": "CLIENT", "created": "2023-05-01T15:16:47.000Z", "id": "irb4ey26fpFI3vQ8y0g7", "label": "view_minimal", "lastUpdated": "2023-05-01T15:16:47.000Z", "resource-set": "iam4cxy6z7hhaZCSk0g7", "role": "cr04cxy6yzSCtNciD0g7", "status": "ACTIVE", "type": "CUSTOM" } ] }, "CustomRolesListResponseGroup": { "value": [ { "_links": { "assignee": { "href": "https://{yourOktaDomain}/api/v1/groups/00g1emaKYZTWRYYRRTSK" }, "member": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/iamoJDFKaJxGIr0oamd9g/bindings/cr0Yq6IJxGIr0ouum0g3/members/irb1qe6PGuMc7Oh8N0g4" }, "permissions": { "href": "https://{yourOktaDomain}/api/v1/iam/permission-sets/cr0Yq6IJxGIr0ouum0g3/permissions" }, "resource-set": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/iamoJDFKaJxGIr0oamd9g" }, "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3" } }, "assignmentType": "GROUP", "created": "2019-02-06T16:20:57.000Z", "id": "irb1q92TFAHzySt3x0g4", "label": "UserCreatorRole", "lastUpdated": "2019-02-06T16:20:57.000Z", "resource-set": "iamoJDFKaJxGIr0oamd9g", "role": "cr0Yq6IJxGIr0ouum0g3", "status": "ACTIVE", "type": "CUSTOM" } ] }, "CustomTelephonyProviderCredentialCreateRequestTelesignEx": { "summary": "Create a Telesign custom telephony provider", "value": { "providerAuthToken": "67bf6c435967abe806f4f0d6eg2p645", "providerCapability": "ALL", "providerName": "TELESIGN", "providerSettings": { "call": { "telesignService": "telesignVerifyService" }, "sms": { "telesignService": "telesignMessagingService" } }, "providerSid": "CF98EDb19a09b2f5d2f121fe1c207722F7" } }, "CustomTelephonyProviderCredentialCreateRequestTwilioEx": { "summary": "Create a Twilio custom telephony provider", "value": { "providerAuthToken": "11a9b6c435967abe806f4f0d6ec0f382", "providerCapability": "ALL", "providerName": "TWILIO", "providerSettings": { "call": { "twilioVerifySid": "example-verify-sid" }, "sms": { "twilioPhoneNumber": "+1234567890" } }, "providerSid": "ACb49fb19a09b2f5d2f121fe1c207689dt" } }, "CustomTelephonyProviderCredentialCreateResponseTelesignEx": { "summary": "Response for Telesign custom telephony provider", "value": { "enabled": true, "id": "oct1ko8bzvN4smpBU0g5", "isPrimaryProvider": true, "providerCapability": "ALL", "providerName": "TELESIGN", "providerSettings": { "call": { "telesignService": "telesignVoiceService" }, "sms": { "telesignService": "telesignMessagingService" } }, "providerSid": "ACl82fb19a09b2b422f121fe1c2076ch29" } }, "CustomTelephonyProviderCredentialCreateResponseTwilioEx": { "summary": "Response for Twilio custom telephony provider", "value": { "enabled": true, "id": "oct3v00k4iOFlEJmQ806", "isPrimaryProvider": true, "providerCapability": "ALL", "providerName": "TWILIO", "providerSettings": { "call": { "twilioVerifySid": "example-verify-sid" }, "sms": { "twilioPhoneNumber": "+1234567890" } }, "providerSid": "ACb49fb19a09b2f5d2f121fe1c207689dt" } }, "CustomTelephonyProviderCredentialDeactivatedResponseEx": { "summary": "Response for deactivated custom telephony provider", "value": { "enabled": false, "id": "oct3v00k4iOFlEJmQ806", "isPrimaryProvider": false, "providerCapability": "ALL", "providerName": "TWILIO", "providerSettings": { "call": { "twilioVerifySid": "example-verify-sid" }, "sms": { "twilioPhoneNumber": "+1234567890" } }, "providerSid": "ACb49fb19a09b2f5d2f121fe1c207689dt" } }, "CustomTelephonyProviderCredentialListOneResponseEx": { "summary": "Response for credentials of one custom telephony provider", "value": { "enabled": true, "id": "oct3v00k4iOFlEJmQ806", "isPrimaryProvider": true, "providerCapability": "ALL", "providerName": "TWILIO", "providerSettings": { "call": { "twilioVerifySid": "example-verify-sid" }, "sms": { "twilioPhoneNumber": "+1234567890" } }, "providerSid": "ACb49fb19a09b2f5d2f121fe1c207689dt" } }, "CustomTelephonyProviderCredentialPrimaryResponseEx": { "summary": "Response for setting primary custom telephony provider", "value": { "enabled": true, "id": "oct3v00k4iOFlEJmQ806", "isPrimaryProvider": true, "providerCapability": "ALL", "providerName": "TWILIO", "providerSettings": { "call": { "twilioVerifySid": "example-verify-sid" }, "sms": { "twilioPhoneNumber": "+1234567890" } }, "providerSid": "ACb49fb19a09b2f5d2f121fe1c207689dt" } }, "CustomTelephonyProviderCredentialSendTestRequestEx": { "summary": "Send test SMS message", "value": { "countryCodeIso2": "US", "factor": "SMS", "phoneNumber": "+1234567890" } }, "CustomTelephonyProviderCredentialUpdateRequestEx": { "summary": "Update custom telephony provider credentials", "value": { "id": "oct3v00k4iOFlEJmQ806", "providerAuthToken": "11a9b6c435967abe806f4f0d6ec0f382", "providerSettings": { "call": { "twilioVerifySid": "updated-verify-sid" }, "sms": { "twilioPhoneNumber": "+1234567890" } }, "providerSid": "ACb49fb19a09b2f5d2f121fe1c207689dt" } }, "CustomTelephonyProviderCredentialsListAllResponseEx": { "summary": "List of custom telephony provider credentials", "value": [ { "enabled": true, "id": "oct3v00k4iOFlEJmQ806", "isPrimaryProvider": true, "providerCapability": "ALL", "providerName": "TWILIO", "providerSettings": { "call": { "twilioVerifySid": "example-verify-sid" }, "sms": { "twilioPhoneNumber": "+1234567890" } }, "providerSid": "ACb49fb19a09b2f5d2f121fe1c207689dt" }, { "enabled": true, "id": "oct3v00k4iOFlEG3dR45", "isPrimaryProvider": false, "providerCapability": "ALL", "providerName": "TELESIGN", "providerSettings": { "call": { "telesignService": "telesignVerifyService" }, "sms": { "telesignService": "telesignMessagingService" } }, "providerSid": "AC42tfy19a09b2f5d2f121fe1c207fg456r" } ] }, "CustomTelephonyProviderCredentialsUpdateResponseEx": { "summary": "Response for updated custom telephony provider", "value": { "enabled": true, "id": "oct3v00k4iOFlEJmQ806", "isPrimaryProvider": true, "providerCapability": "ALL", "providerName": "TWILIO", "providerSettings": { "call": { "twilioVerifySid": "updated-verify-sid" }, "sms": { "twilioPhoneNumber": "+1234567890" } }, "providerSid": "11a9b6c435967abe806f4f0d6ec0f382" } }, "DbscRefreshResponseExample": { "summary": "Successful DBSC refresh", "value": { "credentials": [ { "attributes": "Domain=example.okta.com; Path=/; Secure; HttpOnly; SameSite=None", "name": "dbsc", "type": "cookie" } ], "refresh_url": "/idp/dbsc/refresh", "scope": { "include_site": false, "origin": "https://example.okta.com" }, "session_identifier": "NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9Xs" } }, "DbscStartResponseExample": { "summary": "Successful DBSC registration", "value": { "credentials": [ { "attributes": "Domain=example.okta.com; Path=/; Secure; HttpOnly; SameSite=None", "name": "dbsc", "type": "cookie" } ], "refresh_url": "/idp/dbsc/refresh", "scope": { "include_site": false, "origin": "https://example.okta.com" }, "session_identifier": "NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9Xs" } }, "DeactivateIdPResponse": { "summary": "Deactivate an IdP", "value": { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize?idp=0oa62bfdiumsUndnZ0h7&\n client_id={clientId}&response_type={responseType}&response_mode={responseMode}&\n scope={scopes}&redirect_uri={redirectUri}&state={state}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize/callback" } }, "created": "2016-03-24T23:21:49.000Z", "id": "0oa62bfdiumsUndnZ0h7", "lastUpdated": "2016-03-25T19:16:53.000Z", "name": "Google", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.userPrincipalName" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://accounts.google.com/o/oauth2/auth" }, "token": { "binding": "HTTP-POST", "url": "https://www.googleapis.com/oauth2/v3/token" } }, "scopes": [ "profile", "email", "openid" ], "type": "OIDC" }, "status": "INACTIVE", "type": "GOOGLE" } }, "DeactivateNetworkZone": { "summary": "Deactivated network zone", "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzowc1U5Jh5xuAK0o0g3/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzowc1U5Jh5xuAK0o0g3" } }, "created": "2021-06-24T20:37:32.000Z", "gateways": [ { "type": "CIDR", "value": "1.2.3.4/24" } ], "id": "nzowc1U5Jh5xuAK0o0g3", "lastUpdated": "2021-06-24T20:37:32.000Z", "name": "MyIpZone", "proxies": [ { "type": "RANGE", "value": "3.3.4.5-3.3.4.15" } ], "status": "INACTIVE", "system": false, "type": "IP", "usage": "POLICY" } }, "DeactivatedSecurityEventsProviderResponse": { "summary": "Inactive security events provider", "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://example.okta.com/api/v1/security-events-providers/sse1qg25RpusjUP6m0g5/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://example.okta.com/api/v1/security-events-providers/sse1qg25RpusjUP6m0g5" } }, "id": "sse1qg25RpusjUP6m0g5", "name": "Security events provider with well-known URL", "settings": { "issuer": "Issuer", "jwks_url": "https://example.okta.com/jwks/path", "well_known_url": "https://example.okta.com/.well-known/ssf-configuration" }, "status": "INACTIVE", "type": "okta" } }, "DefaultAppUserSchemaResponse": { "value": { "$schema": "http://json-schema.org/draft-04/schema#", "created": "2015-02-02T10:27:36.000Z", "definitions": { "base": { "id": "#base", "properties": { "email": { "description": "End-User's preferred email address.", "master": { "type": "PROFILE_MASTER" }, "scope": "SELF", "title": "Email", "type": "string" }, "name": { "description": "End-User's full name in displayable form.", "master": { "type": "PROFILE_MASTER" }, "scope": "SELF", "title": "Name", "type": "string" }, "userName": { "master": { "type": "PROFILE_MASTER" }, "required": true, "scope": "SELF", "title": "Username", "type": "string" } }, "required": [ "userName" ], "type": "object" }, "custom": { "id": "#custom", "properties": {}, "type": "object" }, "properties": { "profile": { "allOf": [ { "$ref": "#/definitions/base" }, { "$ref": "#/definitions/custom" } ] } }, "type": "object" }, "id": "https://{yourOktaDomain}/meta/schemas/apps/{appId}/default", "lastUpdated": "2015-09-05T10:40:45.000Z", "name": "Example app", "title": "Example app User" } }, "DefaultEnhancedDynamicNetworkZone": { "summary": "Default enhanced dynamic network zone", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzou3u0stMCmgOzXK1d6/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzou3u0stMCmgOzXK1d6" } }, "asns": { "exclude": [], "include": [] }, "created": "2024-05-06T19:12:29.000Z", "id": "nzohcnxFrSgsiwyHp0g4", "ipServiceCategories": { "exclue": [], "include": [ "ALL_ANONYMIZERS" ] }, "lastUpdated": "2024-05-09T21:02:31.000Z", "locations": { "exclude": [], "include": [] }, "name": "DefaultEnhancedDynamicZone", "status": "ACTIVE", "system": true, "type": "DYNAMIC_V2", "usage": "BLOCKLIST" } }, "DefaultIpBlocklistNetworkZone": { "summary": "Default IP blocklist network zone", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzou3u0stMCmgOzXK1d6/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzou3u0stMCmgOzXK1d6" } }, "created": "2021-06-09T21:32:46.000Z", "gateways": null, "id": "nzou3u0stMCmgOzXK1d6", "lastUpdated": "2021-06-09T21:32:46.000Z", "name": "BlockedIpZone", "proxies": null, "status": "ACTIVE", "system": true, "type": "IP", "usage": "BLOCKLIST" } }, "DefaultIpNetworkZone": { "summary": "Default IP network zone", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzou3u0ssJfZjYsWL1d6/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/zones/nzou3u0ssJfZjYsWL1d6" } }, "created": "2021-06-09T21:32:46.000Z", "gateways": null, "id": "nzou3u0ssJfZjYsWL1d6", "lastUpdated": "2021-06-09T21:32:46.000Z", "name": "LegacyIpZone", "proxies": null, "status": "ACTIVE", "system": true, "type": "IP", "usage": "POLICY" } }, "DefaultRealmAssignment": { "value": { "_links": { "self": { "href": "http://your-subdomain.okta.com/api/v1/realm-assignments/rul2jy7jLUlnO5ng00g4", "method": "GET", "rel": "self" } }, "actions": { "assignUserToRealm": { "realmId": "00g1b7rvh0xPLKXFf2g5" } }, "conditions": { "expression": { "value": "string" }, "profileSourceId": "0oa4enoRyjwSCy6hx0g4," }, "created": "2022-04-04T15:56:05.000Z", "id": "rul2jy7jLUlnO5ng00g4", "isDefault": true, "lastUpdated": "2022-05-05T18:15:44.000Z", "name": "Catch-all", "priority": 499, "status": "ACTIVE" } }, "DefaultRealmResponse": { "value": { "_links": { "self": { "href": "http://your-subdomain.okta.com/api/v1/realms/guox9jQ16k9V8IQWL0g3", "method": "GET", "rel": "self" } }, "created": "2022-04-04T15:56:05.000Z", "id": "guox9jQ16k9V8IQWL0g3", "isDefault": true, "lastUpdated": "2022-05-05T18:15:44.000Z", "profile": { "name": "Default realm" } } }, "DeviceAssuranceAndroidRequest": { "summary": "Android request", "value": { "diskEncryptionType": { "include": [ "USER", "FULL" ] }, "jailbreak": false, "name": "Device assurance Android", "osVersion": { "minimum": "12" }, "platform": "ANDROID", "screenLockType": { "include": [ "BIOMETRIC" ] }, "secureHardwarePresent": true } }, "DeviceAssuranceAndroidResponse": { "summary": "Android response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "USER", "FULL" ] }, "id": "dae3m8o4rWhwReDeM1c5", "jailbreak": false, "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Android", "osVersion": { "minimum": "12.4.5" }, "platform": "ANDROID", "screenLockType": { "include": [ "BIOMETRIC" ] }, "secureHardwarePresent": true } }, "DeviceAssuranceAndroidWithAndroidDeviceTrustThirdPartySignalProvidersRequest": { "summary": "Android with Android Device Trust as third-party signal provider request", "value": { "diskEncryptionType": { "include": [ "USER", "FULL" ] }, "jailbreak": false, "name": "Device assurance Android with Android Device Trust third-party signals", "osVersion": { "dynamicVersionRequirement": { "distanceFromLatestMajor": 0, "latestSecurityPatch": true, "type": "EXACT" } }, "platform": "ANDROID", "screenLockType": { "include": [ "BIOMETRIC" ] }, "secureHardwarePresent": true, "thirdPartySignalProviders": { "androidDeviceTrust": { "deviceIntegrityLevel": "MEETS_STRONG_INTEGRITY", "networkProxyDisabled": true, "playProtectVerdict": "LOW", "requireMajorVersionUpdate": true, "screenLockComplexity": "HIGH", "usbDebuggingDisabled": true, "wifiSecured": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceAndroidWithAndroidDeviceTrustThirdPartySignalProvidersResponse": { "summary": "Android with Android Device Trust as third-party signal provider response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "USER", "FULL" ] }, "id": "dae3m8o4rWhwReDeM1c5", "jailbreak": false, "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Android with Android Device Trust third-party signals", "osVersion": { "dynamicVersionRequirement": { "distanceFromLatestMajor": 0, "latestSecurityPatch": true, "type": "EXACT" } }, "platform": "ANDROID", "screenLockType": { "include": [ "BIOMETRIC" ] }, "secureHardwarePresent": true, "thirdPartySignalProviders": { "androidDeviceTrust": { "deviceIntegrityLevel": "MEETS_STRONG_INTEGRITY", "networkProxyDisabled": true, "playProtectVerdict": "LOW", "requireMajorVersionUpdate": true, "screenLockComplexity": "HIGH", "usbDebuggingDisabled": true, "wifiSecured": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceAndroidWithCallerContextRequest": { "summary": "Android with caller context request", "value": { "callerContext": { "managedApp": true }, "diskEncryptionType": { "include": [ "USER", "FULL" ] }, "jailbreak": false, "name": "Device assurance Android", "osVersion": { "minimum": "12" }, "platform": "ANDROID", "screenLockType": { "include": [ "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "DeviceAssuranceAndroidWithCallerContextResponse": { "summary": "Android with caller context response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "callerContext": { "managedApp": true }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "USER", "FULL" ] }, "id": "dae3m8o4rWhwReDeM1c5", "jailbreak": false, "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Android", "osVersion": { "minimum": "12.4.5" }, "platform": "ANDROID", "screenLockType": { "include": [ "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "DeviceAssuranceAndroidWithDevicePostureIdPThirdPartySignalProvidersRequest": { "summary": "Android with Device Posture IdP as third-party signal provider request", "value": { "diskEncryptionType": { "include": [ "USER", "FULL" ] }, "jailbreak": false, "name": "Device assurance Android", "osVersion": { "dynamicVersionRequirement": { "distanceFromLatestMajor": 0, "latestSecurityPatch": true, "type": "EXACT" } }, "platform": "ANDROID", "screenLockType": { "include": [ "BIOMETRIC" ] }, "secureHardwarePresent": true, "thirdPartySignalProviders": { "devicePostureIdP": { "compliant": true, "managed": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "DeviceAssuranceAndroidWithDevicePostureIdPThirdPartySignalProvidersResponse": { "summary": "Android with Device Posture IdP as third-party signal provider response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "USER", "FULL" ] }, "id": "dae3m8o4rWhwReDeM1c5", "jailbreak": false, "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Android", "osVersion": { "dynamicVersionRequirement": { "distanceFromLatestMajor": 0, "latestSecurityPatch": true, "type": "EXACT" } }, "platform": "ANDROID", "screenLockType": { "include": [ "BIOMETRIC" ] }, "secureHardwarePresent": true, "thirdPartySignalProviders": { "devicePostureIdP": { "compliant": true, "managed": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "DeviceAssuranceAndroidWithDynamicVersionRequirementRequest": { "summary": "Android with dynamic version requirement request", "value": { "diskEncryptionType": { "include": [ "USER", "FULL" ] }, "jailbreak": false, "name": "Device assurance Android", "osVersion": { "dynamicVersionRequirement": { "distanceFromLatestMajor": 0, "type": "MINIMUM" } }, "platform": "ANDROID", "screenLockType": { "include": [ "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceAndroidWithDynamicVersionRequirementResponse": { "summary": "Android with dynamic version requirement response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "USER", "FULL" ] }, "id": "dae3m8o4rWhwReDeM1c5", "jailbreak": false, "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Android", "osVersion": { "dynamicVersionRequirement": { "distanceFromLatestMajor": 0, "type": "MINIMUM" } }, "platform": "ANDROID", "screenLockType": { "include": [ "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceAndroidWithGracePeriodRequest": { "summary": "Android with due by date grace period request", "value": { "diskEncryptionType": { "include": [ "USER", "FULL" ] }, "displayRemediationMode": "SHOW", "gracePeriod": { "expiry": "2024-12-01T00:00:00.00Z", "type": "BY_DATE_TIME" }, "jailbreak": false, "name": "Device assurance Android Grace Period", "osVersion": { "dynamicVersionRequirement": { "distanceFromLatestMajor": 0, "type": "MINIMUM" } }, "platform": "ANDROID", "screenLockType": { "include": [ "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceAndroidWithGracePeriodResponse": { "summary": "Android with due by date grace period response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "USER", "FULL" ] }, "displayRemediationMode": "SHOW", "gracePeriod": { "expiry": "2024-12-01T00:00:00.00Z", "type": "BY_DATE_TIME" }, "id": "dae3m8o4rWhwReDeM1c5", "jailbreak": false, "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Android", "osVersion": { "minimum": "12.4.5" }, "platform": "ANDROID", "screenLockType": { "include": [ "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceChromeOSWithDevicePostureIdPThirdPartySignalProvidersRequest": { "summary": "ChromeOS with Device Posture IdP as third-party signal provider request", "value": { "name": "Device assurance ChromeOS", "platform": "CHROMEOS", "thirdPartySignalProviders": { "devicePostureIdP": { "compliant": true, "managed": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "DeviceAssuranceChromeOSWithDevicePostureIdPThirdPartySignalProvidersResponse": { "summary": "ChromeOS with Device Posture IdP as third-party signal provider response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance ChromeOS", "platform": "CHROMEOS", "thirdPartySignalProviders": { "devicePostureIdP": { "compliant": true, "managed": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "DeviceAssuranceChromeOSWithDeviceTrustConnectorThirdPartySignalProvidersRequest": { "summary": "ChromeOS with Device Trust Connector as third-party signal provider request", "value": { "name": "Device assurance ChromeOS", "platform": "CHROMEOS", "thirdPartySignalProviders": { "dtc": { "allowScreenLock": true, "browserVersion": { "minimum": "15393.27.0" }, "builtInDnsClientEnabled": true, "chromeRemoteDesktopAppBlocked": true, "deviceEnrollmentDomain": "testDomain", "diskEncrypted": true, "keyTrustLevel": "CHROME_OS_VERIFIED_MODE", "osFirewall": true, "osVersion": { "minimum": "10.0.19041.1110" }, "passwordProtectionWarningTrigger": "PASSWORD_PROTECTION_OFF", "realtimeUrlCheckMode": true, "safeBrowsingProtectionLevel": "ENHANCED_PROTECTION", "screenLockSecured": true, "siteIsolationEnabled": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceChromeOSWithDeviceTrustConnectorThirdPartySignalProvidersResponse": { "summary": "ChromeOS with Device Trust Connector as third-party signal provider response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance ChromeOS", "platform": "CHROMEOS", "thirdPartySignalProviders": { "dtc": { "allowScreenLock": true, "browserVersion": { "minimum": "15393.27.0" }, "builtInDnsClientEnabled": true, "chromeRemoteDesktopAppBlocked": true, "deviceEnrollmentDomain": "testDomain", "diskEncrypted": true, "keyTrustLevel": "CHROME_OS_VERIFIED_MODE", "osFirewall": true, "osVersion": { "minimum": "10.0.19041.1110" }, "passwordProtectionWarningTrigger": "PASSWORD_PROTECTION_OFF", "realtimeUrlCheckMode": true, "safeBrowsingProtectionLevel": "ENHANCED_PROTECTION", "screenLockSecured": true, "siteIsolationEnabled": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceChromeOSWithGracePeriodRequest": { "summary": "ChromeOS with 7 day grace period request", "value": { "displayRemediationMode": "SHOW", "gracePeriod": { "expiry": "P7D", "type": "BY_DURATION" }, "name": "Device assurance ChromeOS", "platform": "CHROMEOS", "thirdPartySignalProviders": { "dtc": { "allowScreenLock": true, "browserVersion": { "minimum": "15393.27.0" }, "builtInDnsClientEnabled": true, "chromeRemoteDesktopAppBlocked": true, "deviceEnrollmentDomain": "testDomain", "diskEncrypted": true, "keyTrustLevel": "CHROME_OS_VERIFIED_MODE", "osFirewall": true, "osVersion": { "minimum": "10.0.19041.1110" }, "passwordProtectionWarningTrigger": "PASSWORD_PROTECTION_OFF", "realtimeUrlCheckMode": true, "safeBrowsingProtectionLevel": "ENHANCED_PROTECTION", "screenLockSecured": true, "siteIsolationEnabled": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceChromeOSWithGracePeriodResponse": { "summary": "ChromeOS with due by days grace period response", "value": { "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "displayRemediationMode": "SHOW", "gracePeriod": { "expiry": "P7D", "type": "BY_DURATION" }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance ChromeOS", "platform": "CHROMEOS", "thirdPartySignalProviders": { "dtc": { "allowScreenLock": true, "browserVersion": { "minimum": "15393.27.0" }, "builtInDnsClientEnabled": true, "chromeRemoteDesktopAppBlocked": true, "deviceEnrollmentDomain": "testDomain", "diskEncrypted": true, "keyTrustLevel": "CHROME_OS_VERIFIED_MODE", "osFirewall": true, "osVersion": { "minimum": "10.0.19041.1110" }, "passwordProtectionWarningTrigger": "PASSWORD_PROTECTION_OFF", "realtimeUrlCheckMode": true, "safeBrowsingProtectionLevel": "ENHANCED_PROTECTION", "screenLockSecured": true, "siteIsolationEnabled": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceIosRequest": { "summary": "iOS request", "value": { "jailbreak": false, "name": "Device assurance iOS", "osVersion": { "minimum": "12.4.5" }, "platform": "IOS", "screenLockType": { "include": [ "BIOMETRIC" ] } } }, "DeviceAssuranceIosResponse": { "summary": "iOS response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "id": "dae3m8o4rWhwReDeM1c5", "jailbroken": false, "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance iOS", "osVersion": { "minimum": "12.4.5.9" }, "platform": "IOS", "screenLockType": { "include": [ "BIOMETRIC" ] } } }, "DeviceAssuranceIosWithDevicePostureIdPSignalProvidersRequest": { "summary": "iOS with Device Posture IdP as third-party signal provider request", "value": { "jailbreak": false, "name": "Device assurance iOS", "osVersion": { "minimum": "12.4.5" }, "platform": "IOS", "screenLockType": { "include": [ "BIOMETRIC" ] }, "thirdPartySignalProviders": { "devicePostureIdP": { "compliant": true, "managed": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "DeviceAssuranceIosWithDevicePostureIdPSignalProvidersResponse": { "summary": "iOS with Device Posture IdP as third-party signal provider response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "id": "dae3m8o4rWhwReDeM1c5", "jailbroken": false, "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance iOS", "osVersion": { "minimum": "12.4.5" }, "platform": "IOS", "screenLockType": { "include": [ "BIOMETRIC" ] }, "thirdPartySignalProviders": { "devicePostureIdP": { "compliant": true, "managed": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "DeviceAssuranceIosWithDynamicVersionRequirementRequest": { "summary": "iOS with dynamic version requirement request", "value": { "jailbreak": false, "name": "Device assurance iOS", "osVersion": { "dynamicVersionRequirement": { "latestSecurityPatch": true, "type": "EXACT_ANY_SUPPORTED" } }, "platform": "IOS", "screenLockType": { "include": [ "BIOMETRIC" ] } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceIosWithDynamicVersionRequirementResponse": { "summary": "iOS with dynamic version requirement response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "id": "dae3m8o4rWhwReDeM1c5", "jailbroken": false, "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance iOS", "osVersion": { "dynamicVersionRequirement": { "latestSecurityPatch": true, "type": "EXACT_ANY_SUPPORTED" } }, "platform": "IOS", "screenLockType": { "include": [ "BIOMETRIC" ] } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceIosWithGracePeriodRequest": { "summary": "iOS with 30 day grace period request", "value": { "displayRemediationMode": "SHOW", "gracePeriod": { "expiry": "P30D", "type": "BY_DURATION" }, "jailbreak": false, "name": "Device assurance iOS Grace Period", "osVersion": { "minimum": "12.4.5" }, "platform": "IOS", "screenLockType": { "include": [ "BIOMETRIC" ] } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceIosWithGracePeriodResponse": { "summary": "iOS with due by days grace period response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "displayRemediationMode": "SHOW", "gracePeriod": { "expiry": "P30D", "type": "BY_DURATION" }, "id": "dae3m8o4rWhwReDeM1c5", "jailbroken": false, "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance iOS", "osVersion": { "minimum": "12.4.5.9" }, "platform": "IOS", "screenLockType": { "include": [ "BIOMETRIC" ] } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceMacOSRequest": { "summary": "macOS request", "value": { "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "name": "Device assurance macOS", "osVersion": { "minimum": "12.4.5" }, "platform": "MACOS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true } }, "DeviceAssuranceMacOSResponse": { "summary": "macOS response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance macOS", "osVersion": { "minimum": "12.4.5" }, "platform": "MACOS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true } }, "DeviceAssuranceMacOSWithDevicePostureChecksRequest": { "summary": "macOS request with OSQuery device posture check", "value": { "devicePostureChecks": { "include": [ { "value": "1", "variableName": "macOSFirewall" } ] }, "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "name": "Device assurance macOS", "osVersion": { "minimum": "12.4.5" }, "platform": "MACOS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "DeviceAssuranceMacOSWithDevicePostureChecksResponse": { "summary": "macOS request with OSQuery device posture check", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "devicePostureChecks": { "include": [ { "value": "1", "variableName": "macOSFirewall" } ] }, "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance macOS", "osVersion": { "minimum": "12.4.5" }, "platform": "MACOS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "DeviceAssuranceMacOSWithDevicePostureIdPThirdPartySignalProvidersRequest": { "summary": "macOS with Device Posture IdP as third-party signal provider request", "value": { "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "name": "Device assurance macOS", "osVersion": { "minimum": "12.4.5" }, "platform": "MACOS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true, "thirdPartySignalProviders": { "devicePostureIdP": { "compliant": true, "managed": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "DeviceAssuranceMacOSWithDevicePostureIdPThirdPartySignalProvidersResponse": { "summary": "macOS with Device Posture IdP as third-party signal provider response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance macOS", "osVersion": { "minimum": "12.4.5.9" }, "platform": "MACOS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true, "thirdPartySignalProviders": { "devicePostureIdP": { "compliant": true, "managed": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "DeviceAssuranceMacOSWithDeviceTrustConnectorThirdPartySignalProvidersRequest": { "summary": "macOS with Device Trust Connector as third-party signal provider request", "value": { "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "name": "Device assurance macOS", "osVersion": { "minimum": "12.4.5" }, "platform": "MACOS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true, "thirdPartySignalProviders": { "dtc": { "browserVersion": { "minimum": "15393.27.0" }, "builtInDnsClientEnabled\"": true, "chromeRemoteDesktopAppBlocked\"": true, "deviceEnrollmentDomain\"": "testDomain", "diskEncrypted": true, "osFirewall": true, "osVersion": { "minimum": "10.0.19041.1110" }, "passwordProtectionWarningTrigger\"": "PASSWORD_PROTECTION_OFF", "realtimeUrlCheckMode\"": true, "safeBrowsingProtectionLevel\"": true, "screenLockSecured": true, "siteIsolationEnabled\"": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceMacOSWithDeviceTrustConnectorThirdPartySignalProvidersResponse": { "summary": "macOS with Device Trust Connector as third-party signal provider response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance macOS", "osVersion": { "minimum": "12.4.5.9" }, "platform": "MACOS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true, "thirdPartySignalProviders": { "dtc": { "browserVersion": { "minimum": "15393.27.0" }, "builtInDnsClientEnabled": true, "chromeRemoteDesktopAppBlocked": true, "deviceEnrollmentDomain": "testDomain", "diskEncrypted": true, "keyTrustLevel": "CHROME_BROWSER_HW_KEY", "osFirewall": true, "osVersion": { "minimum": "10.0.19041.1110" }, "passwordProtectionWarningTrigger": "PASSWORD_PROTECTION_OFF", "realtimeUrlCheckMode": true, "safeBrowsingProtectionLevel": "ENHANCED_PROTECTION", "screenLockSecured": true, "siteIsolationEnabled": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceMacOSWithDynamicVersionRequirementRequest": { "summary": "macOS with dynamic version requirement request", "value": { "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "name": "Device assurance macOS", "osVersion": { "dynamicVersionRequirement": { "distanceFromLatestMajor": 0, "latestSecurityPatch": true, "type": "EXACT" } }, "platform": "MACOS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceMacOSWithDynamicVersionRequirementResponse": { "summary": "macOS with dynamic version requirement response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance macOS", "osVersion": { "dynamicVersionRequirement": { "distanceFromLatestMajor": 0, "latestSecurityPatch": true, "type": "EXACT" } }, "platform": "MACOS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceMacOSWithGracePeriodRequest": { "summary": "macOS request with due by date grace period request", "value": { "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "displayRemediationMode": "SHOW", "gracePeriod": { "expiry": "2024-12-01T00:00:00.00Z", "type": "BY_DATE_TIME" }, "name": "Device assurance macOS", "osVersion": { "minimum": "12.4.5" }, "platform": "MACOS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceMacOSWithGracePeriodResponse": { "summary": "macOS with due by date grace period response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "displayRemediationMode": "SHOW", "gracePeriod": { "expiry": "2024-12-01T00:00:00.00Z", "type": "BY_DATE_TIME" }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance macOS", "osVersion": { "minimum": "12.4.5" }, "platform": "MACOS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceWindowsRequest": { "summary": "Windows request", "value": { "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "name": "Device assurance Windows", "osVersion": { "minimum": "12.4.5.9" }, "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true } }, "DeviceAssuranceWindowsResponse": { "summary": "Windows response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Windows", "osVersion": { "minimum": "12.4.5.9" }, "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true } }, "DeviceAssuranceWindowsWithDevicePostureChecksRequest": { "summary": "Windows request with OSQuery device posture check", "value": { "devicePostureChecks": { "include": [ { "value": "1", "variableName": "windowsFirewall" } ] }, "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "name": "Device assurance Windows", "osVersion": { "minimum": "12.4.5.9" }, "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "DeviceAssuranceWindowsWithDevicePostureChecksResponse": { "summary": "Windows request with OSQuery device posture check", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "devicePostureChecks": { "include": [ { "value": "1", "variableName": "windowsFirewall" } ] }, "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Windows", "osVersion": { "minimum": "12.4.5.9" }, "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "DeviceAssuranceWindowsWithDevicePostureIdPThirdPartySignalProvidersRequest": { "summary": "Windows with Device Posture IdP as third-party signal provider request", "value": { "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "name": "Device assurance Windows", "osVersion": { "minimum": "12.4.5.9" }, "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true, "thirdPartySignalProviders": { "devicePostureIdP": { "compliant": true, "managed": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "DeviceAssuranceWindowsWithDevicePostureIdPThirdPartySignalProvidersResponse": { "summary": "Windows with Device Posture IdP as third-party signal provider response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Windows", "osVersion": { "minimum": "12.4.5.9" }, "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true, "thirdPartySignalProviders": { "devicePostureIdP": { "compliant": true, "managed": true } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "DeviceAssuranceWindowsWithDeviceTrustConnectorThirdPartySignalProvidersRequest": { "summary": "Windows with Device Trust Connector as third-party signal provider request", "value": { "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "name": "Device assurance Windows", "osVersion": { "minimum": "12.4.5.9" }, "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true, "thirdPartySignalProviders": { "dtc": { "antivirusEnabled": true, "browserVersion": { "minimum": "15393.27.0" }, "builtInDnsClientEnabled": true, "chromeRemoteDesktopAppBlocked": true, "crowdStrikeAgentId": "testAgentId", "crowdStrikeCustomerId": "testCustomerId", "deviceEnrollmentDomain": "testDomain", "diskEncrypted": true, "keyTrustLevel": "CHROME_BROWSER_HW_KEY", "osFirewall": true, "osVersion": { "minimum": "10.0.19041.1110" }, "passwordProtectionWarningTrigger": "PASSWORD_PROTECTION_OFF", "realtimeUrlCheckMode": true, "safeBrowsingProtectionLevel": "ENHANCED_PROTECTION", "screenLockSecured": true, "secureBootEnabled": true, "siteIsolationEnabled": true, "windowsMachineDomain": "testMachineDomain", "windowsUserDomain": "testUserDomain" } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceWindowsWithDeviceTrustConnectorThirdPartySignalProvidersResponse": { "summary": "Windows with Device Trust Connector as third-party signal provider response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Windows", "osVersion": { "minimum": "12.4.5.9" }, "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true, "thirdPartySignalProviders": { "dtc": { "antivirusEnabled": true, "browserVersion": { "minimum": "15393.27.0" }, "builtInDnsClientEnabled": true, "chromeRemoteDesktopAppBlocked": true, "crowdStrikeAgentId": "testAgentId", "crowdStrikeCustomerId": "testCustomerId", "deviceEnrollmentDomain": "testDomain", "diskEncrypted": true, "keyTrustLevel": "CHROME_BROWSER_HW_KEY", "osFirewall": true, "osVersion": { "minimum": "10.0.19041.1110" }, "passwordProtectionWarningTrigger": "PASSWORD_PROTECTION_OFF", "realtimeUrlCheckMode": true, "safeBrowsingProtectionLevel": "ENHANCED_PROTECTION", "screenLockSecured": true, "secureBootEnabled": true, "siteIsolationEnabled": true, "windowsMachineDomain": "testMachineDomain", "windowsUserDomain": "testUserDomain" } } }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceWindowsWithDynamicVersionRequirementsRequest": { "summary": "Windows with Windows 11 and Windows 10 dynamic version requirements request", "value": { "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "name": "Device assurance Windows", "osVersionConstraints": [ { "dynamicVersionRequirement": { "distanceFromLatestMajor": 1, "latestSecurityPatch": true, "type": "MINIMUM" }, "majorVersionConstraint": "WINDOWS_11" }, { "dynamicVersionRequirement": { "type": "EXACT_ANY_SUPPORTED" }, "majorVersionConstraint": "WINDOWS_10" } ], "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceWindowsWithDynamicVersionRequirementsResponse": { "summary": "Windows with Windows 11 and Windows 10 dynamic version requirements response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Windows", "osVersionConstraints": [ { "dynamicVersionRequirement": { "distanceFromLatestMajor": 1, "latestSecurityPatch": true, "type": "MINIMUM" }, "majorVersionConstraint": "WINDOWS_11" }, { "dynamicVersionRequirement": { "type": "EXACT_ANY_SUPPORTED" }, "majorVersionConstraint": "WINDOWS_10" } ], "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceWindowsWithGracePeriodRequest": { "summary": "Windows with 7 day grace period request", "value": { "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "displayRemediationMode": "SHOW", "gracePeriod": { "expiry": "P7D", "type": "BY_DURATION" }, "name": "Device assurance Windows", "osVersion": { "minimum": "12.4.5.9" }, "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceWindowsWithGracePeriodResponse": { "summary": "Windows with due by days grace period response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "displayRemediationMode": "SHOW", "gracePeriod": { "expiry": "P7D", "type": "BY_DURATION" }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Windows", "osVersion": { "minimum": "12.4.5.9" }, "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceWindowsWithWin11DynamicVersionRequirementAndWin10MinimumVersionStringRequest": { "summary": "Windows with Windows 11 dynamic version requirement and Windows 10 minimum version request", "value": { "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "name": "Device assurance Windows", "osVersionConstraints": [ { "dynamicVersionRequirement": { "distanceFromLatestMajor": 1, "type": "EXACT" }, "majorVersionConstraint": "WINDOWS_11" }, { "majorVersionConstraint": "WINDOWS_10", "minimum": "10.0.19045.0" } ], "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceWindowsWithWin11DynamicVersionRequirementAndWin10MinimumVersionStringResponse": { "summary": "Windows with Windows 11 dynamic version requirement and Windows 10 minimum version response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Windows", "osVersionConstraints": [ { "dynamicVersionRequirement": { "distanceFromLatestMajor": 1, "type": "EXACT" }, "majorVersionConstraint": "WINDOWS_11" }, { "majorVersionConstraint": "WINDOWS_10", "minimum": "10.0.19045.0" } ], "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceWindowsWithWin11MinimumVersionStringAndWin10DynamicVersionRequirementRequest": { "summary": "Windows with Windows 11 minimum version and a Windows 10 dynamic version requirement request", "value": { "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "name": "Device assurance Windows", "osVersionConstraints": [ { "majorVersionConstraint": "WINDOWS_11", "minimum": "10.0.22000.0" }, { "dynamicVersionRequirement": { "type": "NOT_ALLOWED" }, "majorVersionConstraint": "WINDOWS_10" } ], "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceAssuranceWindowsWithWin11MinimumVersionStringAndWin10DynamicVersionRequirementResponse": { "summary": "Windows with Windows 11 minimum version and Windows 10 dynamic version requirement response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-assurances/dae3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdDate": "2022-01-01T00:00:00.000Z", "diskEncryptionType": { "include": [ "ALL_INTERNAL_VOLUMES" ] }, "id": "dae3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "name": "Device assurance Windows", "osVersionConstraints": [ { "majorVersionConstraint": "WINDOWS_11", "minimum": "10.0.22000.0" }, { "dynamicVersionRequirement": { "type": "NOT_ALLOWED" }, "majorVersionConstraint": "WINDOWS_10" } ], "platform": "WINDOWS", "screenLockType": { "include": [ "PASSCODE", "BIOMETRIC" ] }, "secureHardwarePresent": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "DeviceIntegrationAndroidZeroTrustResponse": { "summary": "Response of device integration for Android Device Trust", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-integrations/din9lzd33mvS9kjr60g4/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-integrations/din9lzd33mvS9kjr60g4" } }, "displayName": "Android Device Trust", "id": "din9lzd33mvS9kjr60g4", "name": "com.android.zero.trust", "platform": "ANDROID", "status": "ACTIVE" } }, "DeviceIntegrationChromeDeviceTrustConnectorResponse": { "summary": "Response of a device integration for Chrome Device Trust", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-integrations/din15gaNrC7BvlBgx0g4/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-integrations/din15gaNrC7BvlBgx0g4" } }, "displayName": "Chrome Device Trust", "id": "din15gaNrC7BvlBgx0g4", "metadata": { "serviceAccountEmail": "okta-gci-00o158oxTmBNgrgyM0g4@vocal-invention-346218.iam.gserviceaccount.com", "serviceAccountName": "okta-gci-00o158oxTmBNgrgyM0g4", "type": "CHROME" }, "name": "com.google.dtc", "platform": "CHROMEOS", "status": "ACTIVE" } }, "DeviceIntegrationCrowdStrikeResponse": { "summary": "Response of a device integration for CrowdStrike", "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-integrations/dindyfy1f7Pv1eoVF0g4/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-integrations/dindyfy1f7Pv1eoVF0g4" } }, "displayName": "Device Posture Provider", "id": "dindyfy1f7Pv1eoVF0g4", "metadata": { "idpId": "0oa2owlGX5l74kjr60g4", "type": "DEVICE_IDP" }, "name": "com.okta.deviceidp", "platform": "IOS", "status": "DEACTIVATED" } }, "DeviceIntegrationDevicePostureCheckResponse": { "summary": "Response of device integration for Device Posture Check", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-integrations/din9lzd33mvS9vBwN1c5/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-integrations/din9lzd33mvS9vBwN1c5" } }, "displayName": "OSQuery", "id": "din9lzd33mvS9vBwN1c5", "name": "com.okta.device.osquery", "platform": "MACOS", "status": "ACTIVE" } }, "DeviceIntegrationDevicePostureIdPResponse": { "summary": "Response of a device integration for Device Posture Provider", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-integrations/dindyfzlaerjWVdqt0g4/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-integrations/dindyfzlaerjWVdqt0g4" } }, "displayName": "Device Posture Provider", "id": "dindyfzlaerjWVdqt0g4", "metadata": { "idpId": "0oa2owlGX5l74kjr60g4", "type": "DEVICE_IDP" }, "name": "com.okta.deviceidp", "platform": "WINDOWS", "status": "ACTIVE" } }, "DeviceIntegrationWindowsSecurityCenterResponse": { "summary": "Response of a device integration for Windows Security Center", "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-integrations/dinjihtR8qWZZF6qe0g4/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-integrations/dinjihtR8qWZZF6qe0g4" } }, "displayName": "Windows Security Center", "id": "dinjihtR8qWZZF6qe0g4", "name": "com.okta.windowssecuritycenter", "platform": "WINDOWS", "status": "DEACTIVATED" } }, "DevicePostureChecksMacOSRequest": { "summary": "macOS request", "value": { "description": "Query macOS devices to check if firewall is enabled", "mappingType": "CHECKBOX", "name": "Device posture check macOS", "platform": "MACOS", "query": "SELECT CASE WHEN global_state = 0 THEN 0 ELSE 1 END AS firewall_enabled FROM alf;", "remediationSettings": { "link": { "customUrl": "example.myremediationurl.com/docs", "defaultUrl": null }, "message": { "customText": "It is our company policy that all devices must have a firewall enabled.", "defaultI18nKey": null } }, "type": "CUSTOM", "variableName": "macOSFirewall" } }, "DevicePostureChecksMacOSResponse": { "summary": "macOS response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-posture-checks/dch3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdUpdate": "2022-01-01T00:00:00.000Z", "description": "Query macOS devices to check if firewall is enabled", "id": "dch3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "mappingType": "CHECKBOX", "name": "Device posture check macOS", "platform": "MACOS", "query": "SELECT CASE WHEN global_state = 0 THEN 0 ELSE 1 END AS firewall_enabled FROM alf;", "remediationSettings": { "link": { "customUrl": "example.myremediationurl.com/docs", "defaultUrl": null }, "message": { "customText": "It is our company policy that all devices must have a firewall enabled.", "defaultI18nKey": null } }, "type": "CUSTOM", "variableName": "macOSFirewall" } }, "DevicePostureChecksWindowsRequest": { "summary": "Windows request", "value": { "description": "Query Windows devices to check if firewall is enabled", "mappingType": "CHECKBOX", "name": "Device posture check Windows", "platform": "WINDOWS", "query": "SELECT CASE WHEN enabled = 1 THEN 1 ELSE 0 END AS firewall_enabled FROM windows_firewall_profiles;", "remediationSettings": { "link": { "customUrl": "example.myremediationurl.com/docs", "defaultUrl": null }, "message": { "customText": "It is our company policy that all devices must have a firewall enabled.", "defaultI18nKey": null } }, "type": "CUSTOM", "variableName": "windowsFirewall" } }, "DevicePostureChecksWindowsResponse": { "summary": "Windows response", "value": { "_links": { "self": { "hints": { "allow": [ "DELETE", "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/device-posture-checks/dch3m8o4rWhwReDeM1c5" } }, "createdBy": "00u217pyf72CdUrBt1c5", "createdUpdate": "2022-01-01T00:00:00.000Z", "description": "Query Windows devices to check if firewall is enabled", "id": "dch3m8o4rWhwReDeM1c5", "lastUpdate": "2022-01-01T00:00:00.000Z", "lastUpdatedBy": "00u217pyf72CdUrBt1c5", "mappingType": "CHECKBOX", "name": "Device posture check Windows", "platform": "WINDOWS", "query": "SELECT CASE WHEN enabled = 1 THEN 1 ELSE 0 END AS firewall_enabled FROM windows_firewall_profiles;", "remediationSettings": { "link": { "customUrl": "example.myremediationurl.com/docs", "defaultUrl": null }, "message": { "customText": "It is our company policy that all devices must have a firewall enabled.", "defaultI18nKey": null } }, "type": "CUSTOM", "variableName": "windowsFirewall" } }, "DeviceResponse": { "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo8jx5vVoxfvJeLb0w4/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PATCH", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo8jx5vVoxfvJeLb0w4" }, "suspend": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo8jx5vVoxfvJeLb0w4/lifecycle/suspend" }, "users": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo8jx5vVoxfvJeLb0w4/users" } }, "created": "2020-11-03T21:47:01.000Z", "id": "guo8jx5vVoxfvJeLb0w4", "lastUpdated": "2020-11-03T23:46:27.000Z", "profile": { "diskEncryptionType": "NONE", "displayName": "DESKTOP-EHAD3IE", "manufacturer": "International Corp", "model": "VMware7,1", "osVersion": "10.0.18362", "platform": "WINDOWS", "registered": true, "secureHardwarePresent": false, "serialNumber": "56 4d 4f 95 74 c5 d3 e7-fc 3a 57 9c c2 f8 5d ce", "sid": "S-1-5-21-3992267483-1860856704-2413701314-500", "udid": "954F4D56-C574-E7D3-FC3A-579CC2F85DCE" }, "resourceAlternateId": null, "resourceDisplayName": { "sensitive": false, "value": "DESKTOP-EHAD3IE" }, "resourceId": "guo8jx5vVoxfvJeLb0w4", "resourceType": "UDDevice", "status": "ACTIVE" } }, "DeviceWithProvidersResponse": { "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo8jx5vVoxfvJeLb0w4/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PATCH", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo8jx5vVoxfvJeLb0w4" }, "suspend": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo8jx5vVoxfvJeLb0w4/lifecycle/suspend" }, "users": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo8jx5vVoxfvJeLb0w4/users" } }, "created": "2020-11-03T21:47:01.000Z", "id": "guo8jx5vVoxfvJeLb0w4", "lastUpdated": "2020-11-03T23:46:27.000Z", "profile": { "diskEncryptionType": "NONE", "displayName": "DESKTOP-EHAD3IE", "manufacturer": "International Corp", "model": "VMware7,1", "osVersion": "10.0.18362", "platform": "WINDOWS", "registered": true, "secureHardwarePresent": false, "serialNumber": "56 4d 4f 95 74 c5 d3 e7-fc 3a 57 9c c2 f8 5d ce", "sid": "S-1-5-21-3992267483-1860856704-2413701314-500", "udid": "954F4D56-C574-E7D3-FC3A-579CC2F85DCE" }, "providers": [ { "payload": { "clientVersion": "7.0" }, "payloadVersion": "1.0", "provider": "oktaVerify" } ], "resourceAlternateId": null, "resourceDisplayName": { "sensitive": false, "value": "DESKTOP-EHAD3IE" }, "resourceId": "guo8jx5vVoxfvJeLb0w4", "resourceType": "UDDevice", "status": "ACTIVE" } }, "EmailCustomizationResponse": { "value": { "_links": { "preview": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/customizations/oel11u6DqUiMbQkpl0g4/preview" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/customizations/oel11u6DqUiMbQkpl0g4" }, "template": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation" }, "test": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/test" } }, "body": "Hello, ${user.profile.firstName}. Click here to activate your account.", "created": "2021-11-09T20:38:10.000Z", "id": "oel11u6DqUiMbQkpl0g4", "isDefault": true, "language": "en", "lastUpdated": "2021-11-11T20:38:10.000Z", "subject": "Welcome to ${org.name}!" } }, "EmailDomainResponse": { "value": { "displayName": "Admin", "dnsValidationRecords": [ { "fqdn": "_oktaverification.example.com", "recordType": "TXT", "verificationValue": "759080212bda43e3bc825a7d73b4bb64" }, { "fqdn": "mail.example.com", "recordType": "CNAME", "verificationValue": "u22224444.wl024.sendgrid.net" }, { "fqdn": "t02._domainkey.example.com", "recordType": "CNAME", "verificationValue": "t02.domainkey.u22224444.wl024.sendgrid.net" }, { "fqdn": "t022._domainkey.example.com", "recordType": "CNAME", "verificationValue": "t02.domainkey.u22224444.wl024.sendgrid.net" } ], "domain": "example.com", "id": "OeD114iNkrcN6aR680g4", "userName": "admin", "validationStatus": "NOT_STARTED", "validationSubdomain": "mail" } }, "EmailSettingsRequest": { "value": { "recipients": "ALL_USERS" } }, "EmailSettingsResponse": { "value": { "_links": { "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/settings" }, "template": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation" } }, "recipients": "ALL_USERS" } }, "EmailTemplateDefaultContentResponse": { "value": { "_links": { "preview": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/default-content/preview" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/default-content" }, "template": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation" } }, "body": "
Hello, ${user.profile.firstName}. Click here to activate your account.", "subject": "Welcome to ${org.name}!" } }, "EmbeddedGroupAssignmentSampleResponse": { "summary": "Application group with an embedded group", "value": { "_embedded": { "group": { "_links": { "apps": { "href": "http://{yourOktaDomain}/api/v1/groups/00g15acRUy0SYb9GT0g4/apps" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/groups/odyssey/okta-medium.30ce6d4085dff29412984e4c191bc874.png", "name": "medium", "type": "image/png" }, { "href": "http://{yourOktaDomain}/assets/img/logos/groups/odyssey/okta-large.c3cb8cda8ae0add1b4fe928f5844dbe3.png", "name": "large", "type": "image/png" } ], "users": { "href": "http://{yourOktaDomain}/api/v1/groups/00g15acRUy0SYb9GT0g4/users" } }, "created": "2024-06-02T13:02:12.000Z", "id": "00g15acRUy0SYb9GT0g4", "lastMembershipUpdated": "2024-06-02T13:03:13.000Z", "lastUpdated": "2024-06-02T13:02:12.000Z", "objectClass": [ "okta:user_group" ], "profile": { "description": "Group with professional footballers", "name": "Football Group" }, "type": "OKTA_GROUP" } }, "_links": { "app": { "href": "http://{yourOktaDomain}/api/v1/apps/0oa15anjcUHSI6hTB0g4" }, "group": { "href": "http://{yourOktaDomain}/api/v1/groups/00g15acRUy0SYb9GT0g4" }, "self": { "href": "http://{yourOktaDomain}/api/v1/apps/0oa15anjcUHSI6hTB0g4/groups/00g15acRUy0SYb9GT0g4" } }, "id": "00g15acRUy0SYb9GT0g4", "lastUpdated": "2024-06-02T13:17:57.000Z", "priority": 0, "profile": { "department": "marketing", "division": "top", "initialStatus": "active_with_pass", "locale": "en_US", "manager": "Donald Glover", "managerId": "ike.ogb@gmail.com", "organization": "wazobia", "preferredLanguage": "English", "securityAnswer": "Ronaldinho", "securityQuestion": "Who is the footballer to have played the game", "timezone": "Canada/Eastern", "userType": null } } }, "EmbeddedMetadataGroupAssignmentSampleResponse": { "summary": "Application group with embedded metadata", "value": { "_embedded": { "metadata": { "credentials": {}, "profile": { "department": { "lastUpdated": null, "source": { "type": "MAPPING", "value": [ { "id": null } ] } }, "division": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "initialStatus": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "locale": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "manager": { "lastUpdated": null, "source": { "type": "MAPPING", "value": [ { "id": null } ] } }, "managerId": { "lastUpdated": null, "source": { "type": "MAPPING", "value": [ { "id": null } ] } }, "organization": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "preferredLanguage": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "securityAnswer": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "securityQuestion": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "timezone": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "userType": { "lastUpdated": null, "source": { "type": "MAPPING", "value": [ { "id": null } ] } } } } }, "_links": { "app": { "href": "http://{yourOktaDomain}/api/v1/apps/0oa15anjcUHSI6hTB0g4" }, "group": { "href": "http://{yourOktaDomain}/api/v1/groups/00g15acRUy0SYb9GT0g4" }, "self": { "href": "http://{yourOktaDomain}/api/v1/apps/0oa15anjcUHSI6hTB0g4/groups/00g15acRUy0SYb9GT0g4" } }, "id": "00g15acRUy0SYb9GT0g4", "lastUpdated": "2024-06-02T13:17:57.000Z", "priority": 0, "profile": { "department": "marketing", "division": "top", "initialStatus": "active_with_pass", "locale": "en_US", "manager": "Donald Glover", "managerId": "ike.ogb@gmail.com", "organization": "wazobia", "preferredLanguage": "English", "securityAnswer": "Ronaldinho", "securityQuestion": "Who is the footballer to have played the game", "timezone": "Canada/Eastern", "userType": null } } }, "EnrollFactorCallRequest": { "summary": "call", "value": { "factorType": "call", "profile": { "phoneExtension": "1234", "phoneNumber": "+1-555-415-1337" }, "provider": "OKTA" } }, "EnrollFactorCallResponse": { "summary": "call", "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/clf1nz9JHJGHWRKMTLHP/lifecycle/activate" }, "resend": [ { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/clf1nz9JHJGHWRKMTLHP/resend", "name": "call" } ], "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/clf1nz9JHJGHWRKMTLHP" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" } }, "created": "2014-08-05T20:59:49.000Z", "factorType": "call", "id": "clf1nz9JHJGHWRKMTLHP", "lastUpdated": "2014-08-06T03:59:49.000Z", "profile": { "phoneExtension": "1234", "phoneNumber": "+1-555-415-1337" }, "provider": "OKTA", "status": "PENDING_ACTIVATION", "vendorName": "OKTA" } }, "EnrollFactorCustomTotpRequest": { "summary": "custom totp", "value": { "factorProfileId": "fpr20l2mDyaUGWGCa0g4", "factorType": "token:hotp", "profile": { "sharedSecret": "484f97be3213b117e3a20438e291540a" }, "provider": "CUSTOM" } }, "EnrollFactorCustomTotpResponse": { "summary": "custom totp", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00utf43LCCmTJVcsK0g3/factors/chf20l33Ks8U2Zjba0g4" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00utf43LCCmTJVcsK0g3" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00utf43LCCmTJVcsK0g3/factors/chf20l33Ks8U2Zjba0g4/verify" } }, "created": "2019-07-22T23:22:36.000Z", "factorType": "token:hotp", "id": "chf20l33Ks8U2Zjba0g4", "lastUpdated": "2019-07-22T23:22:36.000Z", "provider": "CUSTOM", "status": "ACTIVE", "vendorName": "Entrust Datacard" } }, "EnrollFactorEmailRequest": { "summary": "email", "value": { "factorType": "email", "profile": { "email": "test@gmail.com" }, "provider": "OKTA" } }, "EnrollFactorEmailResponse": { "summary": "email", "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00umvfJKwXOQ1mEL50g3/factors/emfnf3gSScB8xXoXK0g3/lifecycle/activate" }, "resend": [ { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00umvfJKwXOQ1mEL50g3/factors/emfnf3gSScB8xXoXK0g3/resend", "name": "email" } ], "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00umvfJKwXOQ1mEL50g3/factors/emfnf3gSScB8xXoXK0g3" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00umvfJKwXOQ1mEL50g3" } }, "factorType": "email", "id": "emfnf3gSScB8xXoXK0g3", "provider": "OKTA", "status": "PENDING_ACTIVATION", "vendorName": "OKTA" } }, "EnrollFactorGoogleRequest": { "summary": "google token:software:totp", "value": { "factorType": "token:software:totp", "provider": "GOOGLE" } }, "EnrollFactorGoogleResponse": { "value": { "_embedded": { "activation": { "_links": { "qrcode": { "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ostf1fmaMGJLMNGNLIVG/qr/00fukNElRS_Tz6k-CFhg3pH4KO2dj2guhmaapXWbc4", "type": "image/png" } }, "encoding": "base32", "keyLength": 16, "sharedSecret": "JBTWGV22G4ZGKV3N", "timeStep": 30 } }, "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ostf1fmaMGJLMNGNLIVG/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ostf1fmaMGJLMNGNLIVG" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" } }, "created": "2014-07-16T16:13:56.000Z", "factorType": "token:software:totp", "id": "ostf1fmaMGJLMNGNLIVG", "lastUpdated": "2014-07-16T16:13:56.000Z", "profile": { "credentialId": "dade.murphy@example.com" }, "provider": "GOOGLE", "status": "PENDING_ACTIVATION", "vendorName": "GOOGLE" } }, "EnrollFactorOVPushRequest": { "summary": "token:software:totp push", "value": { "factorType": "push", "provider": "OKTA" } }, "EnrollFactorOVPushResponse": { "summary": "token:software:totp", "value": { "_embedded": { "activation": { "_links": { "qrcode": { "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/opfbtzzrjgwauUsxO0g4/qr/00Ji8qVBNJD4LmjYy1WZO2VbNqvvPdaCVua-1qjypa", "type": "image/png" }, "send": [ { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/opfbtzzrjgwauUsxO0g4/lifecycle/activate/email", "name": "email" }, { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/opfbtzzrjgwauUsxO0g4/lifecycle/activate/sms", "name": "sms" } ] }, "expiresAt": "2015-11-13T07:44:22.000Z", "factorResult": "WAITING" } }, "_links": { "poll": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/opfbtzzrjgwauUsxO0g4/lifecycle/activate/poll" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/opfbtzzrjgwauUsxO0g4" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" } }, "created": "2015-11-13T07:34:22.000Z", "factorType": "push", "id": "opfbtzzrjgwauUsxO0g4", "lastUpdated": "2015-11-13T07:34:22.000Z", "provider": "OKTA", "status": "PENDING_ACTIVATION", "vendorName": "OKTA" } }, "EnrollFactorOVTotpRequest": { "summary": "token:software:totp", "value": { "factorType": "token:software:totp", "provider": "OKTA" } }, "EnrollFactorOVTotpResponse": { "summary": "token:software:totp", "value": { "_embedded": { "_links": { "qrcode": { "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ostf1fmaMGJLMNGNLIVG/qr/00fukNElRS_Tz6k-CFhg3pH4KO2dj2guhmaapXWbc4", "type": "image/png" } }, "activation": { "encoding": "base32", "keyLength": 6, "sharedSecret": "JBTWGV22G4ZGKV3N", "timeStep": 30 } }, "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ostf1fmaMGJLMNGNLIVG/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ostf1fmaMGJLMNGNLIVG" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" } }, "created": "2014-07-16T16:13:56.000Z", "factorType": "token:software:totp", "id": "ostf1fmaMGJLMNGNLIVG", "lastUpdated": "2014-07-16T16:13:56.000Z", "profile": { "credentialId": "dade.murphy@example.com" }, "provider": "OKTA", "status": "PENDING_ACTIVATION", "vendorName": "OKTA" } }, "EnrollFactorQuestionRequest": { "summary": "question", "value": { "question": { "summary": "question factor", "value": { "factorType": "question", "profile": { "answer": "mayonnaise", "question": "disliked_food" }, "provider": "OKTA" } } } }, "EnrollFactorQuestionResponse": { "summary": "question", "value": { "_links": { "questions": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/questions" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ufs1o01OTMGHLAJPVHDZ" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" } }, "created": "2014-08-05T22:58:49.000Z", "factorType": "question", "id": "ufs1o01OTMGHLAJPVHDZ", "lastUpdated": "2014-08-05T22:58:49.000Z", "profile": { "question": "disliked_food", "questionText": "What is the food you least liked as a child?" }, "provider": "OKTA", "status": "ACTIVE", "vendorName": "OKTA" } }, "EnrollFactorRsaSecurIdRequest": { "summary": "RSA SecurID", "value": { "factorType": "token", "profile": { "credentialId": "dade.murphy@example.com" }, "provider": "RSA", "verify": { "passCode": "5275875498" } } }, "EnrollFactorRsaSecurIdResponse": { "summary": "RSA SecurID", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/rsabtznMn6cp94ez20g4" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/rsabtznMn6cp94ez20g4/verify" } }, "created": "2015-11-13T07:05:53.000Z", "factorType": "token", "id": "rsabtznMn6cp94ez20g4", "lastUpdated": "2015-11-13T07:05:53.000Z", "profile": { "credentialId": "dade.murphy@example.com" }, "provider": "RSA", "status": "ACTIVE", "vendorName": "RSA" } }, "EnrollFactorSmsRequest": { "summary": "sms", "value": { "factorType": "sms", "profile": { "phoneNumber": "+1-555-415-1337" }, "provider": "OKTA" } }, "EnrollFactorSmsResponse": { "summary": "sms", "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/mbl1nz9JHJGHWRKMTLHP/lifecycle/activate" }, "resend": [ { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/mbl1nz9JHJGHWRKMTLHP/resend", "name": "sms" } ], "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/mbl1nz9JHJGHWRKMTLHP" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" } }, "created": "2014-08-05T20:59:49.000Z", "factorType": "sms", "id": "mbl1nz9JHJGHWRKMTLHP", "lastUpdated": "2014-08-06T03:59:49.000Z", "profile": { "phoneNumber": "+1-555-415-1337" }, "provider": "OKTA", "status": "PENDING_ACTIVATION", "vendorName": "OKTA" } }, "EnrollFactorSymantecVipRequest": { "summary": "Symantec VIP", "value": { "factorType": "token", "profile": { "credentialId": "VSMT14393584" }, "provider": "SYMANTEC", "verify": { "nextPassCode": "678195", "passCode": "875498" } } }, "EnrollFactorSymantecVipResponse": { "summary": "Symantec VIP", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ufvbtzgkYaA7zTKdQ0g4" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ufvbtzgkYaA7zTKdQ0g4/verify" } }, "created": "2015-11-13T06:52:08.000Z", "factorType": "token", "id": "ufvbtzgkYaA7zTKdQ0g4", "lastUpdated": "2015-11-13T06:52:08.000Z", "profile": { "credentialId": "VSMT14393584" }, "provider": "SYMANTEC", "status": "ACTIVE", "vendorName": "SYMANTEC" } }, "EnrollFactorU2fRequest": { "summary": "u2f", "value": { "factorType": "u2f", "provider": "FIDO" } }, "EnrollFactorU2fResponse": { "summary": "u2f", "value": { "_embedded": { "activation": { "nonce": "9DmGJDLvaU6KWxJbfrZ0", "timeoutSeconds": 20, "version": "U2F_V2" } }, "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/fuf2rovRxogXJ0nDy0g4/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/fuf2rovRxogXJ0nDy0g4" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" } }, "created": "2018-05-24T20:43:19.000Z", "factorType": "u2f", "id": "fuf2rovRxogXJ0nDy0g4", "lastUpdated": "2018-05-24T20:43:19.000Z", "provider": "FIDO", "status": "PENDING_ACTIVATION", "vendorName": "FIDO" } }, "EnrollFactorWebauthnRequest": { "summary": "webAuthn", "value": { "factorType": "webauthn", "provider": "FIDO" } }, "EnrollFactorWebauthnResponse": { "summary": "webAuthn", "value": { "_embedded": { "activation": { "attestation": "direct", "authenticatorSelection": { "requireResidentKey": false, "userVerification": "preferred" }, "challenge": "cdsZ1V10E0BGE4GcG3IK", "excludeCredentials": [], "pubKeyCredParams": [ { "alg": -7, "type": "public-key" }, { "alg": -257, "type": "public-key" } ], "rp": { "name": "Rain-Cloud59" }, "user": { "displayName": "First Last", "id": "00u15s1KDETTQMQYABRL", "name": "first.last@gmail.com" } } }, "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/fwf2rovRxogXJ0nDy0g4/lifecycle/activate" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/fwf2rovRxogXJ0nDy0g4" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" } }, "created": "2018-05-24T20:43:19.000Z", "factorType": "webauthn", "id": "fwf2rovRxogXJ0nDy0g4", "lastUpdated": "2018-05-24T20:43:19.000Z", "provider": "FIDO", "status": "PENDING_ACTIVATION", "vendorName": "FIDO" } }, "EnrollFactorYubikeyRequest": { "summary": "yubikey", "value": { "factorType": "token:hardware", "provider": "YUBICO", "verify": { "passCode": "cccccceukngdfgkukfctkcvfidnetljjiknckkcjulji" } } }, "EnrollFactorYubikeyResponse": { "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "hhttps://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ykfbty3BJeBgUi3750g4" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ykfbty3BJeBgUi3750g4/verify" } }, "created": "2015-11-13T05:27:49.000Z", "factorType": "token:hardware", "id": "ykfbty3BJeBgUi3750g4", "lastUpdated": "2015-11-13T05:27:49.000Z", "profile": { "credentialId": "000004102994" }, "provider": "YUBICO", "status": "ACTIVE", "vendorName": "YUBICO" } }, "EnrollmentActivationRequestExample": { "summary": "Enrollment activation request", "value": { "credResponses": [ { "authenticatorEnrollmentId": "fwf5ajzJEWqknX6lk0g4", "credResponseJwe": "eyJlcGsiOnsia3R5IjoiRUM..." } ], "fulfillmentProvider": "yubico", "pinResponseJwe": "eyJl5IjoiRUMiLCJjcnYcGsiOnsia3...", "serial": "3632071", "userId": "00us2hPODQncCkxef0g3", "version": "5.4.3", "yubicoSigningJwks": [ { "crv": "P-384", "kid": "APCS-Tsgnkey-C19881-H0027616953", "kty": "EC", "use": "sig", "x": "tJc-j5osUCP-75ihCOKsswTOj3XsekayG3x79K2ndyOIXu08gDMkvL8rks06tEAa", "y": "hfVGbQeG4l2orqenn-GATWwTm8tLqHFHuwfJp33CCNOMtYYsgkAEnW60ORzt4YV-" } ] } }, "EnrollmentActivationResponseExample": { "summary": "Enrollment activation response", "value": { "authenticatorEnrollmentIds": [ "fwf5ajzJEWqknX6lk0g4" ], "fulfillmentProvider": "yubico", "userId": "00us2hPODQncCkxef0g3" } }, "EnrollmentInitializationRequestExample": { "summary": "Initialize preregistration enrollment request", "value": { "enrollmentRpIds": [ "myorg.okta.com" ], "fulfillmentProvider": "yubico", "userId": "00us2hPODQncCkxef0g3", "yubicoTransportKeyJWK": { "crv": "P-384", "kid": "APCS-Ttrans-C19881-I009", "kty": "EC", "use": "enc", "x": "r6AzcX3OSiJk1yQaBVYiBOtzFS9gNSpMDPvnVvl0CAX7el1ZyzmPG_BZ7u8sqTmF", "y": "RxPyGH1Xg74E2f5AQGkkddzsvTNY1R3R7mXTEM5wQtr1Y7C4XHlvITNZfU6G" } } }, "EnrollmentInitializationResponseExample": { "summary": "Initialize preregistration enrollment request", "value": { "credRequests": [ { "authenticatorEnrollmentId": "fwf5ajzJEWqknX6lk0g4", "credRequestJwe": "eyJlcGsiOnsia3R5IjoiRUMiLCJ...", "keyId": "h2r91gconqiai1vs0psg" } ], "fulfillmentProvider": "yubico", "pinRequestJwe": "eyJlcGsa3R5IjoiRUMiLA...", "userId": "00us2hPODQncCkxef0g3" } }, "EntitlementValuesResponse": { "summary": "List of bundle entitlement values", "value": { "_links": { "bundle": { "href": "http://your-subdomain.okta.com/api/v1/iam/governance/bundles/0bbfxqCAJWWGELFTYAAA" }, "entitlements": { "href": "http://your-subdomain.okta.com/api/v1/iam/governance/bundles/0bbfxqCAJWWGELFTYAAA/entitlements" }, "self": { "href": "http://your-subdomain.okta.com/api/v1/iam/governance/bundles?limit=2&after=10" } }, "entitlementValues": [ { "_links": { "group": "http://your-subdomain.okta.com/api/v1/groups/00guaxWZ0AOa5NFAj0g3" }, "id": "entfxqCAJWWGELFTYAAA", "name": "Restricted users group", "value": "orn:okta:00o5rb5mt2H3d1TJd0h7:groups:00guaxWZ0AOa5NFAj0g3" } ] } }, "ErrorAccessDenied": { "summary": "Access Denied", "value": { "errorCauses": [], "errorCode": "E0000006", "errorId": "sampleNUSD_8fdkFd8fs8SDBK", "errorLink": "E0000006", "errorSummary": "You do not have permission to perform the requested action" } }, "ErrorAgentTimeOut": { "value": { "errorCauses": [], "errorCode": "E0000237", "errorId": "sampleMlLvGUj_YD5v16vkYWY", "errorLink": "E0000237", "errorSummary": "Timed out waiting for agent" } }, "ErrorAlreadyRegistered": { "summary": "DBSC already registered", "value": { "errorCauses": [], "errorCode": "E0000195", "errorId": "oae123abc", "errorLink": "E0000195", "errorSummary": "DBSC binding already exists for this session" } }, "ErrorApiValidationConflict": { "summary": "Conflict", "value": { "errorCauses": [], "errorCode": "E0000195", "errorId": "sampleMlLvGUj_YD5v15vkYWX", "errorLink": "E0000195", "errorSummary": "Api validation failed due to conflict: {0}" } }, "ErrorApiValidationFailed": { "summary": "API Validation Failed", "value": { "errorCauses": [], "errorCode": "E0000001", "errorId": "sampleiCF-8D5rLW6myqiPItW", "errorLink": "E0000001", "errorSummary": "Api validation failed: {0}" } }, "ErrorAppFeatureAPIValidationFailed": { "summary": "API validation failed", "value": { "errorCauses": [ { "errorSummary": "Provisioning is not enabled for the app instance." } ], "errorCode": "E0000001", "errorId": "oaeZLxeiHUUQomPkM8xOqvu1A", "errorLink": "E0000001", "errorSummary": "Api validation failed: feature" } }, "ErrorAppUserForbiddenAction": { "description": "If the `PUSH_NEW_USERS` or `PUSH_PROFILE_UPDATES` feature is enabled and the request specifies a value for a profile-mapped (Universal Directory) attribute that doesn't match the mapped value, then a 403 error is returned.", "summary": "Forbidden action", "value": { "errorCauses": [], "errorCode": "E0000075", "errorId": "sampleWXiR_K-WwaTKhlgBQ", "errorLink": "E0000075", "errorSummary": "Cannot modify the firstName attribute because it has a field mapping and profile push is enabled." } }, "ErrorAppUserUpdateBadRequest": { "description": "If you attempt to assign a username or password to an app with an incompatible authentication scheme, then a 400 error is returned.", "summary": "Bad request", "value": { "errorCauses": { "errorSummary": "User level credentials should not be provided for this scheme." }, "errorCode": "E0000041", "errorId": "oaeUM77NBynQQu4C_qT5ngjGQ", "errorLink": "E0000041", "errorSummary": "Credentials should not be set on this resource based on the scheme." } }, "ErrorBotProtectionEnforcementTypeRequired": { "summary": "Enforcement type is required when mode is ENFORCED", "value": { "errorCauses": [ { "errorSummary": "enforcementType: Api validation failed: enforcementType must be provided when mode is ENFORCED" } ], "errorCode": "E0000001", "errorId": "sampleiCF-8D5rLW6myqiPItW", "errorLink": "E0000001", "errorSummary": "Api validation failed: enforcementType" } }, "ErrorBotProtectionLevelRequired": { "summary": "Level is required", "value": { "errorCauses": [ { "errorSummary": "level: The field cannot be left blank" } ], "errorCode": "E0000001", "errorId": "sampleiCF-8D5rLW6myqiPItW", "errorLink": "E0000001", "errorSummary": "Api validation failed: level" } }, "ErrorBotProtectionModeRequired": { "summary": "Mode is required", "value": { "errorCauses": [ { "errorSummary": "mode: The field cannot be left blank" } ], "errorCode": "E0000001", "errorId": "sampleiCF-8D5rLW6myqiPItW", "errorLink": "E0000001", "errorSummary": "Api validation failed: mode" } }, "ErrorBotProtectionSupportedFlowsRequired": { "summary": "Supported flows must have at least one flow", "value": { "errorCauses": [ { "errorSummary": "supportedFlows: Api validation failed: supportedFlows must have at least one supported flow" } ], "errorCode": "E0000001", "errorId": "sampleiCF-8D5rLW6myqiPItW", "errorLink": "E0000001", "errorSummary": "Api validation failed: supportedFlows" } }, "ErrorCAPTCHALimitOfOne": { "value": { "errorCauses": [], "errorCode": "E0000165", "errorId": "oaejrB1fWL1S7mc-2KcG-SOtw", "errorLink": "E0000165", "errorSummary": "CAPTCHA count limit reached. At most one CAPTCHA instance is allowed per Org." } }, "ErrorCAPTCHAOrgWideSetting": { "value": { "errorCauses": [], "errorCode": "E0000149", "errorId": "samplezsusshPdiTWiITwqBt8", "errorLink": "E0000149", "errorSummary": "Current CAPTCHA is associated with org-wide settings, cannot be removed." } }, "ErrorCAPTCHAOrgWideSettingNull": { "summary": "captchaId is null, but enabledPages is defined", "value": { "errorCauses": { "errorSummary": "captchaId: Invalid CAPTCHA ID. The value of captchaId cannot be blank when enabledPages is not empty. Please resubmit with an existing CAPTCHA ID or disable CAPTCHA support on all supported pages." }, "errorCode": "E0000001", "errorId": "oae-hk3rssXQmOWDRsaFfxe8A", "errorLink": "E0000001", "errorSummary": "Api validation failed: captchaId" } }, "ErrorChallengeExpired": { "summary": "Refresh challenge not found or expired", "value": { "errorCauses": [], "errorCode": "E0000001", "errorId": "oae123abc", "errorLink": "E0000001", "errorSummary": "DBSC challenge expired or not found" } }, "ErrorChallengeMismatch": { "summary": "Challenge validation failed", "value": { "errorCauses": [], "errorCode": "E0000001", "errorId": "oae123abc", "errorLink": "E0000001", "errorSummary": "DBSC challenge validation failed" } }, "ErrorChallengeNotFound": { "summary": "Registration challenge not found or expired", "value": { "errorCauses": [], "errorCode": "E0000001", "errorId": "oae123abc", "errorLink": "E0000001", "errorSummary": "Registration challenge not found or expired" } }, "ErrorChallengeRequired": { "summary": "Challenge required for refresh", "value": { "errorCauses": [], "errorCode": "E0000031", "errorId": "oae123abc", "errorLink": "E0000031", "errorSummary": "DBSC cookie required" } }, "ErrorClientJsonWebKeyDuplicateKid": { "value": { "errorCauses": [ { "errorSummary": "All keys in the 'jwks' must have a unique `kid`." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorClientJsonWebKeyKidLengthTooShort": { "value": { "errorCauses": [ { "errorSummary": "RSA key length in the 'jwks' is less than '2,048' bits for the given key." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorClientJsonWebKeyNonUniqueKid": { "value": { "errorCauses": [ { "errorSummary": "Each key should have a unique kid when adding multiple keys. Use the Apps API to update the JWKS to add a kid for the existing key, or delete the existing key and re-add the key with a kid using the JWKS APIs." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorClientJsonWebKeyTooManyKids": { "value": { "errorCauses": [ { "errorSummary": "You can't create a new key. You have reached the maximum number of keys allowed (50). To add another key, you must first delete an existing one." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorClientSecretNonAscii": { "summary": "Client secret allows only ASCII error", "value": { "errorCauses": [ { "errorSummary": "client_secret: ''client_secret'' must only contain printable ASCII: [x20-x7E]+" } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: client_secret" } }, "ErrorClientSecretTooLong": { "summary": "Client secret too long error", "value": { "errorCauses": [ { "errorSummary": "client_secret: 'client_secret' can't be more than '100' characters long." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: client_secret" } }, "ErrorClientSecretTooShort": { "summary": "Client secret too short error", "value": { "errorCauses": [ { "errorSummary": "client_secret: 'client_secret' must be at least '14' characters long." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: client_secret" } }, "ErrorClientSecretTooShortWithClientSecretJWT": { "summary": "Client secret is too short for JWT error", "value": { "errorCauses": [ { "errorSummary": "client_secret: 'client_secret' must be at least '32' characters long when 'token_endpoint_auth_method' is 'client_secret_jwt'." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: client_secret" } }, "ErrorClientSecretWithPrivateKeyJWT": { "summary": "Client secret can't be used for private key JWT error", "value": { "errorCauses": [ { "errorSummary": "'client_secret' can't be used when 'token_endpoint_auth_method' is 'private_key_jwt'." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: client_secret" } }, "ErrorCreateBrandExists": { "value": { "errorCauses": [], "errorCode": "E0000202", "errorId": "oaeKABuesTdRvCXeCTpSpXAcQ", "errorLink": "E0000202", "errorSummary": "Brand name already exists." } }, "ErrorCreateUserWithExpiredPasswordWithNullPassword": { "value": { "errorCauses": [ { "errorSummary": "Could not create user. To create a user and expire their password immediately, a password must be specified." } ], "errorCode": "E0000124", "errorId": "oaeXxuZgXBySvqi1FvtkwoYCA", "errorLink": "E0000124", "errorSummary": "Could not create user. To create a user and expire their password immediately, a password must be specified." } }, "ErrorCreateUserWithExpiredPasswordWithoutActivation": { "value": { "errorCauses": [ { "errorSummary": "Could not create user. To create a user and expire their password immediately, `activate` must be true." } ], "errorCode": "E0000125", "errorId": "oaeDd77L9R-TJaD7j_rXsQ31w", "errorLink": "E0000125", "errorSummary": "Could not create user. To create a user and expire their password immediately, `activate` must be true." } }, "ErrorCreateUserWithTooManyManyGroupsResponse": { "value": { "errorCauses": [ { "errorSummary": "The number of group targets is too large" } ], "errorCode": "E0000093", "errorId": "oaePVSLIYnIQsC0B-ptBIllVA", "errorLink": "E0000093", "errorSummary": "Target count limit exceeded" } }, "ErrorDbscFeatureNotEnabled": { "summary": "Feature not enabled for org", "value": { "errorCauses": [], "errorCode": "E0000006", "errorId": "oae123abc", "errorLink": "E0000006", "errorSummary": "Device Bound Session Credentials isn't enabled" } }, "ErrorDbscNotEnabled": { "summary": "DBSC not enabled for session", "value": { "errorCauses": [], "errorCode": "E0000007", "errorId": "oae123abc", "errorLink": "E0000007", "errorSummary": "DBSC not enabled for this session" } }, "ErrorDeactivateActiveKey": { "value": { "errorCauses": [ { "errorSummary": "You cannot deactivate the active key when access token encryption is enabled." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorDeactivateEncryptionKey": { "value": { "errorCauses": [ { "errorSummary": "You can't deactivate the active encryption key." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorDeactivateTheOnlyClientSecret": { "value": { "errorCauses": [ { "errorSummary": "You can't deactivate the only active client secret." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: OAuth2ClientSecretMediated" } }, "ErrorDeactivateTheOnlyKeyWithPrivateKeyJwtAuthMethod": { "value": { "errorCauses": [ { "errorSummary": "Can't deactivate the only active JSON Web Key when the value for `token_endpoint_auth_method` is `private_key_jwt`." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorDeactivateTheOnlyKeyWithRequestObjectSignAlgorithm": { "value": { "errorCauses": [ { "errorSummary": "The `jwks` must contain at least one key with an algorithm matching the `request_object_signature_algorithm`." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorDeleteActiveJsonWebKey": { "value": { "errorCauses": [ { "errorSummary": "You can't delete an active JSON Web Key. Deactivate the key before deleting it." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorDeleteActiveSecret": { "value": { "errorCauses": [ { "errorSummary": "You can't delete an active client secret. Deactivate the secret before deleting it." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: OAuth2ClientSecretMediated" } }, "ErrorDeleteBrandAssociatedWithDomain": { "value": { "errorCauses": [], "errorCode": "E0000201", "errorId": "oaeAdRqprFuTyKokyYPbURJkA", "errorLink": "E0000201", "errorSummary": "A brand associated with a domain cannot be deleted" } }, "ErrorDeleteCustomAsActiveJsonWebKey": { "value": { "errorCauses": [ { "errorSummary": "''ACTIVE'' keys cannot be deleted. Activate another key before deleting this one." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorDeleteDefaultBrand": { "value": { "errorCauses": [], "errorCode": "E0000200", "errorId": "oaeAdRqprFuTyKokyYPbURJkA", "errorLink": "E0000200", "errorSummary": "A default brand cannot be deleted" } }, "ErrorDeviceAssuranceInUse": { "summary": "Can't delete device assurance policy in use by app sign-in policies", "value": { "errorCauses": [], "errorId": "oaenwA1ra80S9W-pvbh4m6haA", "errorSummary": "Device assurance is in use and cannot be deleted." } }, "ErrorDevicePostureCheckInUse": { "summary": "Can't delete device posture check in use by device assurance policies", "value": { "errorCauses": [], "errorId": "oaenwA1ra80S9W-pvbh4m6haA", "errorSummary": "Device posture check is in use and can't be deleted." } }, "ErrorEmailCustomizationCannotClearDefault": { "value": { "errorCauses": [], "errorCode": "E0000185", "errorId": "oaejrB1fWL1S7mc-2KcG-SOtw", "errorLink": "E0000185", "errorSummary": "The isDefault parameter of the default email template customization can't be set to false." } }, "ErrorEmailCustomizationCannotDeleteDefault": { "value": { "errorCauses": [], "errorCode": "E0000184", "errorId": "oaeAdRqprFuTyKokyYPbURJkA", "errorLink": "E0000184", "errorSummary": "A default email template customization can't be deleted." } }, "ErrorEmailCustomizationDefaultAlreadyExists": { "value": { "errorCauses": [], "errorCode": "E0000182", "errorId": "oaeXYwTiMvASsC3O4HCzjFaCA", "errorLink": "E0000182", "errorSummary": "A default email template customization already exists." } }, "ErrorEmailCustomizationLanguageAlreadyExists": { "value": { "errorCauses": [], "errorCode": "E0000183", "errorId": "oaeUcGELffqRay0u1OPdnPypw", "errorLink": "E0000183", "errorSummary": "An email template customization for that language already exists." } }, "ErrorEmailDomainAlreadyExists": { "value": { "errorCauses": [], "errorCode": "E0000197", "errorId": "oaeEdRqprFuTyKokyYPbURJkA", "errorLink": "E0000197", "errorSummary": "Email domain already exists." } }, "ErrorEmailDomainInUse": { "value": { "errorCauses": [], "errorCode": "E0000216", "errorId": "oaeEdRqprFuTyKokyYPbURJkB", "errorLink": "E0000216", "errorSummary": "Email domain can't be deleted due to mail provider restrictions." } }, "ErrorEmailDomainInvalidStatus": { "value": { "errorCauses": [], "errorCode": "E0000217", "errorId": "oaeEdRqprFuTyKokyYPbURJkD", "errorLink": "E0000217", "errorSummary": "Invalid status. Can't validate email domain with current status." } }, "ErrorEmailDomainNotVerified": { "value": { "errorCauses": [], "errorCode": "E0000218", "errorId": "oaeEdRqprFuTyKokyYPbURJkC", "errorLink": "E0000218", "errorSummary": "Email domain couldn't be verified by mail provider." } }, "ErrorEmailSettingsRaceCondition": { "value": { "errorCauses": [], "errorCode": "E0000254", "errorId": "oaeUcGELffqRay0u1OPdnPypw", "errorLink": "E0000254", "errorSummary": "Another request has already been received for the settings for this email template. Please try again later." } }, "ErrorExpiredJwt": { "summary": "JWT has expired", "value": { "errorCauses": [], "errorCode": "E0000001", "errorId": "oae123abc", "errorLink": "E0000001", "errorSummary": "DBSC registration JWT has expired" } }, "ErrorInternalServer": { "summary": "Internal Server Error", "value": { "errorCauses": [], "errorCode": "E0000009", "errorId": "sampleAlJ82XS2SDB_vaNIWgcA", "errorLink": "E0000000", "errorSummary": "Internal Server Error" } }, "ErrorInvalidAudience": { "summary": "Invalid JWT audience", "value": { "errorCauses": [], "errorCode": "E0000001", "errorId": "oae123abc", "errorLink": "E0000001", "errorSummary": "Invalid JWT audience" } }, "ErrorInvalidEmailTemplateRecipients": { "value": { "errorCauses": [], "errorCode": "E0000189", "errorId": "oae8L1-UkcNTeGi5xVQ28_lww", "errorLink": "E0000189", "errorSummary": "This template does not support the recipients value." } }, "ErrorInvalidJwt": { "summary": "Invalid or malformed JWT", "value": { "errorCauses": [], "errorCode": "E0000001", "errorId": "oae123abc", "errorLink": "E0000001", "errorSummary": "Invalid DBSC JWT" } }, "ErrorInvalidLinkedObjectDef": { "summary": "Invalid linked objection definition", "value": { "errorCauses": [ { "domain": "linkedObjects", "errorSummary": "Linked object identifier for primary is already in use.", "locationType": "body", "reason": "UNIQUE_CONSTRAINT" }, { "domain": "linkedObjects", "errorSummary": "Linked object identifier for associated is already in use.", "locationType": "body", "reason": "UNIQUE_CONSTRAINT" } ], "errorCode": "E0000127", "errorId": "oaeh5FICFF2RnqakoNofPadhw", "errorLink": "E0000127", "errorSummary": "Invalid linked objection definition. Linked object identifier is already in use." } }, "ErrorInvalidPublicKey": { "summary": "Invalid public key format", "value": { "errorCauses": [], "errorCode": "E0000001", "errorId": "oae123abc", "errorLink": "E0000001", "errorSummary": "Invalid public key in DBSC JWT" } }, "ErrorInvalidRefreshJwt": { "summary": "Invalid refresh JWT signature", "value": { "errorCauses": [], "errorCode": "E0000001", "errorId": "oae123abc", "errorLink": "E0000001", "errorSummary": "Invalid DBSC refresh JWT signature" } }, "ErrorInvalidSession": { "summary": "Invalid or expired session", "value": { "errorCauses": [], "errorCode": "E0000011", "errorId": "oae123abc", "errorLink": "E0000011", "errorSummary": "Invalid session" } }, "ErrorInvalidTokenProvided": { "summary": "Invalid Token Provided", "value": { "errorCauses": [], "errorCode": "E0000011", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000011", "errorSummary": "Invalid token provided" } }, "ErrorInvalidWellKnownPath": { "summary": "Invalid path", "value": { "errorCauses": [ { "errorSummary": "The specified path is not supported. Valid values: [apple-app-site-association, assetlinks.json, webauthn]." } ], "errorCode": "E0000001", "errorId": "sampleiCF-8D5rLW6myqiPItW", "errorLink": "E0000001", "errorSummary": "Api validation failed: request" } }, "ErrorJsonWebKeyCannotAddActiveKey": { "value": { "errorCauses": [ { "errorSummary": "Keys cannot be created with an ''ACTIVE'' status. Create an ''INACTIVE'' key and then activate it." } ], "errorCode": "E0000001,", "errorId": "sampleQPivGUj_ND5v78vbYWW,", "errorLink": "E0000001,", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorJsonWebKeyKidLengthTooShort": { "value": { "errorCauses": [ { "errorSummary": "RSA key length in the 'jwks' is less than '2,048' bits for the given key." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorJsonWebKeyNonUniqueKid": { "value": { "errorCauses": [ { "errorSummary": "Each key must have a unique ''kid''." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorJsonWebKeyTooManyKids": { "value": { "errorCauses": [ { "errorSummary": "You can't create a new key. You have reached the maximum number of keys allowed (5). To add another key, you must first delete an existing one." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorKeyCredentialCloneDuplicateKey": { "summary": "Duplicate key credential error", "value": { "errorCauses": [ { "errorSummary": "Key already exists in the list of key credentials for the target app." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: cloneKey" } }, "ErrorKeyCredentialInvalidValidity": { "summary": "Key credential invalid year error", "value": { "errorCauses": [ { "errorSummary": "Validity years out of range. It should be 2 - 10 years." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: generateKey" } }, "ErrorMaxNumberOfSecrets": { "summary": "Maximum client secrets reached error", "value": { "errorCauses": [ { "errorSummary": "You've reached the maximum number of client secrets per client." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: OAuth2ClientSecretMediated" } }, "ErrorMissingHeader": { "summary": "Missing Secure-Session-Response header", "value": { "errorCauses": [], "errorCode": "E0000028", "errorId": "oae123abc", "errorLink": "E0000028", "errorSummary": "Missing required header: Secure-Session-Response" } }, "ErrorMissingRequiredParameter": { "summary": "Missing Required Parameter", "value": { "errorCauses": [], "errorCode": "E0000028", "errorId": "sampleiCF-l7mr9XqM1NQ", "errorLink": "E0000028", "errorSummary": "The request is missing a required parameter." } }, "ErrorMissingSessionIdHeader": { "summary": "Missing Sec-Secure-Session-Id header", "value": { "errorCauses": [], "errorCode": "E0000028", "errorId": "oae123abc", "errorLink": "E0000028", "errorSummary": "Missing required header: Sec-Secure-Session-Id" } }, "ErrorNoConnectedAgents": { "value": { "errorCauses": [], "errorCode": "E0000236", "errorId": "sampleMlLvGUj_YD5v16vkYWY", "errorLink": "E0000236", "errorSummary": "There are no connected agents" } }, "ErrorOnlyOneActiveEncryptionKeyAllowed": { "value": { "errorCauses": [ { "errorSummary": "The client can have only one active encryption key in the 'jwks'." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: JsonWebKey" } }, "ErrorPinOrCredRequestsGenerationFailure": { "summary": "PIN or cred requests generation failed", "value": { "errorCauses": { "errorSummary": "There was an unexpected internal error. Please try again." }, "errorCode": "E0000001", "errorId": "oaehk3rssXQmOWDRsaFfxe8A", "errorLink": "E0000001", "errorSummary": "Api validation failed: webAuthnPreregistrationPinRequest|webAuthnPreregistrationCredentialRequest" } }, "ErrorPinOrCredResponsesProcessingFailure": { "summary": "PIN or cred response processing failed", "value": { "errorCauses": { "errorSummary": "There was an unexpected internal error. Please try again." }, "errorCode": "E0000001", "errorId": "oaehk3rssXQmOWDRsaFfxe8B", "errorLink": "E0000001", "errorSummary": "Api validation failed: pinResponseJwe|webAuthnCredResponse" } }, "ErrorPublicKeyMismatch": { "summary": "Public key doesn't match existing binding.", "value": { "errorCauses": [], "errorCode": "E0000001", "errorId": "oae123abc", "errorLink": "E0000001", "errorSummary": "DBSC public key mismatch" } }, "ErrorPublishCSRCertDoesNotMatchCSR": { "summary": "Mismatch certificate and CSR error", "value": { "errorCauses": [ { "errorSummary": "The certificate doesn't match the CSR." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: certificate" } }, "ErrorPublishCSRCertValidityLessThan90Days": { "summary": "Certificate valid for 90 days error", "value": { "errorCauses": [ { "errorSummary": "The certificate must be valid for more than 90 days." } ], "errorCode": "E0000001", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000001", "errorSummary": "Api validation failed: certificate" } }, "ErrorPushProviderUsedByCustomAppAuthenticator": { "value": { "errorCauses": [], "errorCode": "E0000187", "errorId": "oaenwA1ra80S9W-pvbh4m6haA", "errorLink": "E0000187", "errorSummary": "Cannot delete push provider because it is being used by a custom app authenticator." } }, "ErrorResourceNotFound": { "summary": "Resource Not Found", "value": { "errorCauses": [], "errorCode": "E0000007", "errorId": "sampleMlLvGUj_YD5v16vkYWY", "errorLink": "E0000007", "errorSummary": "Not found: {0}" } }, "ErrorTargetAppType": { "value": { "errorCauses": [ { "errorSummary": "The target application must be an OIDC or SAML app." } ], "errorCode": "E0000001", "errorId": "oae7oXKyr41R7yW8Q-gMZsTrA", "errorLink": "E0000001", "errorSummary": "Api validation failed: Interclient Trust Mappings" } }, "ErrorThumbprintFailed": { "summary": "JWK thumbprint computation failed", "value": { "errorCauses": [], "errorCode": "E0000001", "errorId": "oae123abc", "errorLink": "E0000001", "errorSummary": "Failed to compute JWK thumbprint" } }, "ErrorTooManyAllowedApps": { "value": { "errorCauses": [ { "errorSummary": "The target application cannot have more than 5 trusted apps." } ], "errorCode": "E0000001", "errorId": "oae7oXKyr41R7yW8Q-gMZsTrA", "errorLink": "E0000001", "errorSummary": "Api validation failed: Interclient Trust Mappings" } }, "ErrorTooManyRequests": { "summary": "Too Many Requests", "value": { "errorCauses": [], "errorCode": "E0000047", "errorId": "sampleQPivGUj_ND5v78vbYWW", "errorLink": "E0000047", "errorSummary": "API call exceeded rate limit due to too many requests." } }, "ErrorUnsupportedAlgorithm": { "summary": "Unsupported signing algorithm", "value": { "errorCauses": [], "errorCode": "E0000001", "errorId": "oae123abc", "errorLink": "E0000001", "errorSummary": "Unsupported DBSC algorithm. Supported: ES256, RS256" } }, "ExampleOAuth2Scope": { "summary": "Example scope", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/scopes/scp5yu8kLOnDzo7lh0g4" } }, "consent": "REQUIRED", "default": false, "description": "Drive car", "displayName": "Saml Jackson", "id": "scp5yu8kLOnDzo7lh0g4", "metadataPublish": "NO_CLIENTS", "name": "car:drive", "optional": false, "system": false } }, "ExampleOAuth2Scopes": { "summary": "All scopes", "value": [ { "_links": { "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/scopes/scp5yu8kLOnDzo7lh0g4" } }, "consent": "REQUIRED", "default": false, "description": "Drive car", "displayName": "Saml Jackson", "id": "scp5yu8kLOnDzo7lh0g4", "metadataPublish": "NO_CLIENTS", "name": "car:drive", "optional": false, "system": false } ] }, "ExpirePwdResponse": { "value": { "_links": { "changePassword": { "href": "https://{yourOktaDomain}/api/v1/users/00ub0oNGTSWTBKOLGLNR/credentials/change_password" }, "changeRecoveryQuestion": { "href": "https://{yourOktaDomain}/api/v1/users/00ub0oNGTSWTBKOLGLNR/credentials/change_recovery_question" }, "deactivate": { "href": "https://{yourOktaDomain}/api/v1/users/00ub0oNGTSWTBKOLGLNR/lifecycle/deactivate" }, "expirePassword": { "href": "https://{yourOktaDomain}/api/v1/users/00ub0oNGTSWTBKOLGLNR/lifecycle/expire_password" }, "forgotPassword": { "href": "https://{yourOktaDomain}/api/v1/users/00ub0oNGTSWTBKOLGLNR/credentials/forgot_password" }, "resetFactors": { "href": "https://{yourOktaDomain}/api/v1/users/00ub0oNGTSWTBKOLGLNR/lifecycle/reset_factors" }, "resetPassword": { "href": "https://{yourOktaDomain}/api/v1/users/00ub0oNGTSWTBKOLGLNR/lifecycle/reset_password" } }, "activated": "2013-06-24T16:39:19.000Z", "created": "2013-06-24T16:39:18.000Z", "credentials": { "password": {}, "provider": { "name": "OKTA", "type": "OKTA" }, "recovery_question": { "question": "Who's a major player in the cowboy scene?" } }, "id": "00ub0oNGTSWTBKOLGLNR", "lastLogin": "2013-06-24T17:39:19.000Z", "lastUpdated": "2013-06-27T16:35:28.000Z", "passwordChanged": "2013-06-24T16:39:19.000Z", "profile": { "email": "isaac.brock@example.com", "firstName": "Isaac", "lastName": "Brock", "login": "isaac.brock@example.com", "mobilePhone": "555-415-1337" }, "status": "PASSWORD_EXPIRED", "statusChanged": "2013-06-24T16:39:19.000Z" } }, "ExpirePwdWithTempPwdResponse": { "value": { "tempPassword": "F46gy7X4" } }, "ExpiredAuthorizationServerKey": { "summary": "Expired authorization server key", "value": { "_links": { "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/credentials/keys/h5Sr3LXcpQiQlAUVPdhrdLFoIvkhRTAVs_h39bQnxlU" } }, "alg": "RS256", "e": "AQAB", "kid": "h5Sr3LXcpQiQlAUVPdhrdLFoIvkhRTAVs_h39bQnxlU", "kty": "RSA", "n": "lC4ehVB6W0OCtNPnz8udYH9Ao83B6EKnHA5eTcMOap_lQZ-nKtS1lZwBj4wXRVc1XmS0d2OQFA1VMQ-dHLDE3CiGfsGqWbaiZFdW7U GLO1nAwfDdH6xp3xwpKOMewDXbAHJlXdYYAe2ap - CE9c5WLTUBU6JROuWcorHCNJisj1aExyiY5t3JQQVGpBz2oUIHo7NRzQoKimvp dMvMzcYnTlk1dhlG11b1GTkBclprm1BmOP7Ltjd7aEumOJWS67nKcAZzl48Zyg5KtV11V9F9dkGt25qHauqFKL7w3wu - DYhT0hmyFc wn - tXS6e6HQbfHhR_MQxysLtDGOk2ViWv8AQ", "status": "EXPIRED", "use": "sig" } }, "ExpressConfiguration": { "summary": "Express configuration example", "value": { "applicationClientId": "0oa9z8y7x6w5v4u3t2s1", "capabilities": [ "SSO" ], "initiateLoginUriTemplate": "https://example.auth0.com/login/initiate", "loginDomain": "login.example.com", "oinClientId": "0oa1a2b3c4d5e6f7g8h9", "tenantDomain": "example.auth0.com" } }, "ExtendOktaSupportAccessStatus": { "summary": "Extend Okta Support access", "value": { "caseNumber": "1011001", "impersonation": { "expiration": "2024-01-25T11:13:14.000Z", "status": "ENABLED" } } }, "ExtendOktaSupportAccessStatusRequest": { "summary": "Extend Okta Support access", "value": { "impersonation": { "expiration": "2024-01-25T11:13:14.000Z" } } }, "FacebookIdPResponse": { "summary": "Facebook IdP", "value": { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize?idp=0oa62b57p7c8PaGpU0h7&\n client_id={clientId}&response_type={responseType}&response_mode={responseMode}&\n scope={scopes}&redirect_uri={redirectUri}&state={state}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize/callback" } }, "created": "2016-03-24T23:18:27.000Z", "id": "0oa62b57p7c8PaGpU0h7", "lastUpdated": "2016-03-24T23:18:27.000Z", "name": "Facebook", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.userPrincipalName" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://www.facebook.com/dialog/oauth" }, "token": { "binding": "HTTP-POST", "url": "https://graph.facebook.com/v2.5/oauth/access_token" } }, "scopes": [ "public_profile", "email" ], "type": "OAUTH2" }, "status": "ACTIVE", "type": "FACEBOOK" } }, "FactorEmail": { "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00umvfJKwXOQ1mEL50g3/factors/emfnf3gSScB8xXoXK0g3" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00umvfJKwXOQ1mEL50g3" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00umvfJKwXOQ1mEL50g3/factors/emfnf3gSScB8xXoXK0g3/verify" } }, "factorType": "email", "id": "emfnf3gSScB8xXoXK0g3", "profile": { "email": "changed@clouditude.net" }, "provider": "OKTA", "status": "ACTIVE", "vendorName": "OKTA" } }, "FactorPasscodeRequest": { "value": { "passCode": "123456" } }, "FactorResponseSms": { "value": { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/sms2gt8gzgEBPUWBIFHN" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/sms2gt8gzgEBPUWBIFHN/verify" } }, "created": "2014-06-27T20:27:26.000Z", "factorType": "sms", "id": "sms2gt8gzgEBPUWBIFHN", "lastUpdated": "2014-06-27T20:27:26.000Z", "profile": { "phoneNumber": "+1-555-415-1337" }, "provider": "OKTA", "status": "ACTIVE", "vendorName": "OKTA" } }, "ForgotPwdRecoveryQuestionRequest": { "value": { "password": { "value": "uTVM,TPw55" }, "recovery_question": { "answer": "Annie Oakley" } } }, "ForgotPwdRecoveryQuestionResponse": { "value": { "password": {}, "provider": { "name": "OKTA", "type": "OKTA" }, "recovery_question": { "question": "Who's a major player in the cowboy scene?" } } }, "ForgotPwdResponse": { "value": { "resetPasswordUrl": "https://{yourOktaDomain}/signin/reset-password/XE6wE17zmphl3KqAPFxO" } }, "GenerateFulfillmentRequestExample": { "summary": "Generate fulfillment request", "value": { "fulfillmentData": [ { "customizationId": "RXJN83", "inventoryProductId": "106", "productId": "55" } ], "fulfillmentProvider": "yubico", "userId": "00us2hPODQncCkxef0g3" } }, "GenericOidcIdpResponse": { "summary": "Generic OpenID Connect IdP", "value": { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize?idp=0oaulob4BFVa4zQvt0g3&client_id={clientId}&response_type={responseType}&response_mode={responseMode}&scope={scopes}&redirect_uri={redirectUri}&state={state}&nonce={nonce}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize/callback" } }, "created": "2019-02-07T20:07:47.000Z", "id": "0oaulob4BFVa4zQvt0g3", "lastUpdated": "2019-02-07T20:07:47.000Z", "name": "Example OpenID Connect IdP", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": false }, "subject": { "filter": null, "matchAttribute": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.email" } }, "trustClaims": false }, "protocol": { "algorithms": { "request": { "signature": { "algorithm": "HS256", "scope": "REQUEST" } } }, "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret", "pkce_required": "true" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/authorize" }, "jwks": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/keys" }, "slo": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/slo" }, "token": { "binding": "HTTP-POST", "url": "https://idp.example.com/token" }, "userInfo": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/userinfo" } }, "issuer": { "url": "https://idp.example.com" }, "scopes": [ "openid" ], "settings": { "participateSlo": true }, "type": "OIDC" }, "status": "ACTIVE", "type": "OIDC" } }, "Get-User-Classification-Example": { "value": { "lastUpdated": "2022-05-04T19:50:52.000Z", "type": "LITE" } }, "GetApplicationsByGroupResponseEx": { "summary": "Retrieve apps assigned to a group", "value": [ { "_links": { "appLinks": [ { "href": "https://testorgone.okta.com/home/workday/0oa7vicdkRNrz59R80w6/30", "name": "login", "type": "text/html" } ], "deactivate": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicdkRNrz59R80w6/lifecycle/deactivate" }, "groups": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicdkRNrz59R80w6/groups" }, "help": { "href": "https://testorgone-admin.okta.com/app/workday/0oa7vicdkRNrz59R80w6/setup/help/SAML_2_0/external-doc", "type": "text/html" }, "logo": [ { "href": "https://tc2static.oktacdn.com/fs/bcg/4/gfs1wwhrwJR4LpB5X0w6", "name": "medium", "type": "image/png" } ], "metadata": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicdkRNrz59R80w6/sso/saml/metadata", "type": "application/xml" }, "users": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicdkRNrz59R80w6/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2021-05-17T23:10:49.000Z", "credentials": { "signing": { "kid": "wRejFXWxFlK9nnLozx5qKWQa3fg-JRXw7dvdlTjs5Pg" }, "userNameTemplate": { "template": "${source.login}", "type": "BUILT_IN" } }, "features": [], "id": "0oa7vicdkRNrz59R80w6", "label": "hrportal2", "lastUpdated": "2021-05-17T23:10:50.000Z", "name": "workday", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:workday:0oa7vicdkRNrz59R80w6", "settings": { "app": { "siteURL": "https://acme.workday.com" }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } }, "signOn": { "attributeStatements": [], "audienceOverride": null, "defaultRelayState": null, "destinationOverride": null, "recipientOverride": null, "ssoAcsUrlOverride": null } }, "signOnMode": "SAML_2_0", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } }, { "_links": { "appLinks": [ { "href": "https://testorgone.okta.com/home/workday/0oa7vicvor8YSr9Hc0w6/30", "name": "login", "type": "text/html" } ], "deactivate": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicvor8YSr9Hc0w6/lifecycle/deactivate" }, "groups": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicvor8YSr9Hc0w6/groups" }, "help": { "href": "https://testorgone-admin.okta.com/app/workday/0oa7vicvor8YSr9Hc0w6/setup/help/SAML_2_0/external-doc", "type": "text/html" }, "logo": [ { "href": "https://tc2static.oktacdn.com/fs/bcg/4/gfs1wwhrwJR4LpB5X0w6", "name": "medium", "type": "image/png" } ], "metadata": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicvor8YSr9Hc0w6/sso/saml/metadata", "type": "application/xml" }, "users": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicvor8YSr9Hc0w6/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2021-05-17T23:10:22.000Z", "credentials": { "signing": { "kid": "wRejFXWxFlK9nnLozx5qKWQa3fg-JRXw7dvdlTjs5Pg" }, "userNameTemplate": { "template": "${source.login}", "type": "BUILT_IN" } }, "features": [], "id": "0oa7vicvor8YSr9Hc0w6", "label": "hrportal1", "lastUpdated": "2021-05-17T23:10:22.000Z", "name": "workday", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:workday:0oa7vicvor8YSr9Hc0w6", "settings": { "app": { "siteURL": "https://acme.workday.com" }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } }, "signOn": { "attributeStatements": [], "audienceOverride": null, "defaultRelayState": null, "destinationOverride": null, "recipientOverride": null, "ssoAcsUrlOverride": null } }, "signOnMode": "SAML_2_0", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } }, { "_links": { "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS/groups" }, "logo": [ { "href": "https:/example.okta.com/img/logos/logo_1.png", "name": "medium", "type": "image/png" } ], "self": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS/users" } }, "accessibility": { "errorRedirectUrl": null, "selfService": false }, "created": "2013-09-11T17:46:08.000Z", "credentials": { "scheme": "EDIT_USERNAME_AND_PASSWORD", "userNameTemplate": { "template": "${source.login}", "type": "BUILT_IN" } }, "features": [], "id": "0oabkvBLDEKCNXBGYUAS", "label": "Sample Plugin App", "lastUpdated": "2013-09-11T17:58:54.000Z", "name": "template_swa", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:template_swa:0oabkvBLDEKCNXBGYUAS", "settings": { "app": { "buttonField": "btn-login", "passwordField": "txtbox-password", "url": "https://example.com/login.html", "usernameField": "txtbox-username" } }, "signOnMode": "BROWSER_PLUGIN", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } ] }, "GetApplicationsByKeyResponseEx": { "summary": "Retrieve apps using a key", "value": [ { "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2016-08-09T20:12:19.000Z", "credentials": { "signing": {}, "userNameTemplate": { "template": "${fn:substringBefore(source.login, \"@\")}", "type": "BUILT_IN" } }, "features": [], "id": "0oa1gjh63g214q0Hq0g4", "label": "Custom Saml 2.0 App", "lastUpdated": "2016-08-09T20:12:19.000Z", "name": "testorgone_customsaml20app_1", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:testorgone_customsaml20app_1:0oa1gjh63g214q0Hq0g4", "settings": { "app": {}, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } }, "signOn": { "assertionEncryption": { "_embedded": { "_embedded": { "user": { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00ucw2RPGIUNTDQOYPOF" } }, "created": "2014-06-10T15:16:01.000Z", "credentials": { "password": {}, "userName": "user@example.com" }, "externalId": null, "id": "00ucw2RPGIUNTDQOYPOF", "lastSync": null, "lastUpdated": "2014-06-10T15:17:38.000Z", "passwordChanged": "2014-06-10T15:17:38.000Z", "scope": "USER", "status": "ACTIVE", "statusChanged": "2014-06-10T15:16:01.000Z", "syncState": "DISABLED" } }, "_links": { "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS/groups" }, "logo": [ { "href": "https://example.okta.com/img/logos/logo_1.png", "name": "medium", "type": "image/png" } ], "self": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS/users" } }, "accessibility": { "errorRedirectUrl": null, "selfService": false }, "created": "2013-09-11T17:46:08.000Z", "credentials": { "scheme": "EDIT_USERNAME_AND_PASSWORD", "userNameTemplate": { "template": "${source.login}", "type": "BUILT_IN" } }, "features": [], "id": "0oabkvBLDEKCNXBGYUAS", "label": "Sample Plugin App", "lastUpdated": "2013-09-11T17:58:54.000Z", "name": "template_swa", "settings": { "app": { "buttonField": "btn-login", "passwordField": "txtbox-password", "url": "https://example.com/login.html", "usernameField": "txtbox-username" } }, "signOnMode": "BROWSER_PLUGIN", "status": "ACTIVE", "user": { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabizCHPNYALCHDUIOD" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00ucw2RPGIUNTDQOYPOF" } }, "created": "2014-03-21T23:31:35.000Z", "credentials": { "userName": "user@example.com" }, "externalId": null, "id": "00ucw2RPGIUNTDQOYPOF", "lastSync": null, "lastUpdated": "2014-03-21T23:31:35.000Z", "passwordChanged": null, "scope": "USER", "status": "ACTIVE", "statusChanged": "2014-03-21T23:31:35.000Z", "syncState": "DISABLED" }, "visibility": { "appLinks": { "login": true }, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } }, "_links": { "appLinks": [ { "href": "https://testorgone.okta.com/home/testorgone_customsaml20app_1/0oa1gjh63g214q0Hq0g4/aln1gofChJaerOVfY0g4", "name": "testorgone_customsaml20app_1_link", "type": "text/html" } ], "deactivate": { "href": "https://testorgone.okta.com/api/v1/apps/0oa1gjh63g214q0Hq0g4/lifecycle/deactivate" }, "groups": { "href": "https://testorgone.okta.com/api/v1/apps/0oa1gjh63g214q0Hq0g4/groups" }, "help": { "href": "https://testorgone-admin.okta.com/app/testorgone_customsaml20app_1/0oa1gjh63g214q0Hq0g4/setup/help/SAML_2_0/instructions", "type": "text/html" }, "logo": [ { "href": "https://testorgone.okta.com/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "metadata": { "href": "https://testorgone.okta.com/api/v1/apps/0oa1gjh63g214q0Hq0g4/sso/saml/metadata", "type": "application/xml" }, "users": { "href": "https://testorgone.okta.com/api/v1/apps/0oa1gjh63g214q0Hq0g4/users" } }, "acsEndpoints": [], "allowMultipleAcsEndpoints": false, "attributeStatements": [], "enabled": true, "encryptionAlgorithm": "AES256_GCM", "keyTransportAlgorithm": "RSA_15", "requestCompressed": false, "x5c": [ "MIIC6jCCAdKgAwIBAgIGAZKbFN7JMA0GCSqGSIb3DQEBCwUAMDYxNDAyBgNVBAMM\r\n" ] }, "assertionSigned": true, "audience": "https://example.com/tenant/123", "authnContextClassRef": "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport", "defaultRelayState": "", "destination": "https://destination.okta.com", "digestAlgorithm": "SHA256", "honorForceAuthn": true, "idpIssuer": "https://www.okta.com/${org.externalKey}", "participateSlo": { "bindingType": "REDIRECT", "enabled": true, "logoutRequestUrl": "https://testorgone.okta.com/logout/participate", "sessionIndexRequired": true }, "recipient": "https://recipient.okta.com", "responseSigned": true, "signatureAlgorithm": "RSA_SHA256", "slo": { "enabled": true, "logoutUrl": "https://testorgone.okta.com/logout", "spIssuer": "https://testorgone.okta.com" }, "spCertificate": { "x5c": [ "MIIFnDCCA4QCCQDBSLbiON2T1zANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMxDjAMBgNV\r\n" ] }, "ssoAcsUrl": "https://{yourOktaDomain}", "subjectNameIdFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress", "subjectNameIdTemplate": "${user.userName}" } }, "signOnMode": "SAML_2_0", "status": "ACTIVE", "visibility": { "appLinks": { "testorgone_customsaml20app_1_link": true }, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } ] }, "GetApplicationsByNameResponseEx": { "summary": "Retrieve apps by name", "value": [ { "_links": { "appLinks": [ { "href": "https://testorgone.okta.com/home/workday/0oa7vicdkRNrz59R80w6/30", "name": "login", "type": "text/html" } ], "deactivate": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicdkRNrz59R80w6/lifecycle/deactivate" }, "groups": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicdkRNrz59R80w6/groups" }, "help": { "href": "https://testorgone-admin.okta.com/app/workday/0oa7vicdkRNrz59R80w6/setup/help/SAML_2_0/external-doc", "type": "text/html" }, "logo": [ { "href": "https://tc2static.oktacdn.com/fs/bcg/4/gfs1wwhrwJR4LpB5X0w6", "name": "medium", "type": "image/png" } ], "metadata": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicdkRNrz59R80w6/sso/saml/metadata", "type": "application/xml" }, "users": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicdkRNrz59R80w6/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2021-05-17T23:10:49.000Z", "credentials": { "signing": { "kid": "wRejFXWxFlK9nnLozx5qKWQa3fg-JRXw7dvdlTjs5Pg" }, "userNameTemplate": { "template": "${source.login}", "type": "BUILT_IN" } }, "features": [], "id": "0oa7vicdkRNrz59R80w6", "label": "hrportal2", "lastUpdated": "2021-05-17T23:10:50.000Z", "name": "workday", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:workday:0oa7vicdkRNrz59R80w6", "settings": { "app": { "siteURL": "https://acme.workday.com" }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } }, "signOn": { "attributeStatements": [], "audienceOverride": null, "defaultRelayState": null, "destinationOverride": null, "recipientOverride": null, "ssoAcsUrlOverride": null } }, "signOnMode": "SAML_2_0", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } }, { "_links": { "appLinks": [ { "href": "https://testorgone.okta.com/home/workday/0oa7vicvor8YSr9Hc0w6/30", "name": "login", "type": "text/html" } ], "deactivate": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicvor8YSr9Hc0w6/lifecycle/deactivate" }, "groups": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicvor8YSr9Hc0w6/groups" }, "help": { "href": "https://testorgone-admin.okta.com/app/workday/0oa7vicvor8YSr9Hc0w6/setup/help/SAML_2_0/external-doc", "type": "text/html" }, "logo": [ { "href": "https://tc2static.oktacdn.com/fs/bcg/4/gfs1wwhrwJR4LpB5X0w6", "name": "medium", "type": "image/png" } ], "metadata": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicvor8YSr9Hc0w6/sso/saml/metadata", "type": "application/xml" }, "users": { "href": "https://testorgone.okta.com/api/v1/apps/0oa7vicvor8YSr9Hc0w6/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2021-05-17T23:10:22.000Z", "credentials": { "signing": { "kid": "wRejFXWxFlK9nnLozx5qKWQa3fg-JRXw7dvdlTjs5Pg" }, "userNameTemplate": { "template": "${source.login}", "type": "BUILT_IN" } }, "features": [], "id": "0oa7vicvor8YSr9Hc0w6", "label": "hrportal1", "lastUpdated": "2021-05-17T23:10:22.000Z", "name": "workday", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:workday:0oa7vicdkRNrz59R80w6", "settings": { "app": { "siteURL": "https://acme.workday.com" }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } }, "signOn": { "attributeStatements": [], "audienceOverride": null, "defaultRelayState": null, "destinationOverride": null, "recipientOverride": null, "ssoAcsUrlOverride": null } }, "signOnMode": "SAML_2_0", "status": "ACTIVE", "visibility": { "appLinks": { "login": true }, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } ] }, "GetApplicationsByUserResponseEx": { "summary": "Retrieve apps assigned to a user", "value": [ { "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2016-08-09T20:12:19.000Z", "credentials": { "signing": {}, "userNameTemplate": { "template": "${fn:substringBefore(source.login, \"@\")}", "type": "BUILT_IN" } }, "features": [], "id": "0oa1gjh63g214q0Hq0g4", "label": "Custom Saml 2.0 App", "lastUpdated": "2016-08-09T20:12:19.000Z", "name": "testorgone_customsaml20app_1", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:testorgone_customsaml20app_1:0oa1gjh63g214q0Hq0g4", "settings": { "app": {}, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } }, "signOn": { "assertionEncryption": { "_embedded": { "_embedded": { "user": { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00ucw2RPGIUNTDQOYPOF" } }, "created": "2014-06-10T15:16:01.000Z", "credentials": { "password": {}, "userName": "user@example.com" }, "externalId": null, "id": "00ucw2RPGIUNTDQOYPOF", "lastSync": null, "lastUpdated": "2014-06-10T15:17:38.000Z", "passwordChanged": "2014-06-10T15:17:38.000Z", "scope": "USER", "status": "ACTIVE", "statusChanged": "2014-06-10T15:16:01.000Z", "syncState": "DISABLED" } }, "_links": { "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS/groups" }, "logo": [ { "href": "https://example.okta.com/img/logos/logo_1.png", "name": "medium", "type": "image/png" } ], "self": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabkvBLDEKCNXBGYUAS/users" } }, "accessibility": { "errorRedirectUrl": null, "selfService": false }, "created": "2013-09-11T17:46:08.000Z", "credentials": { "scheme": "EDIT_USERNAME_AND_PASSWORD", "userNameTemplate": { "template": "${source.login}", "type": "BUILT_IN" } }, "features": [], "id": "0oabkvBLDEKCNXBGYUAS", "label": "Sample Plugin App", "lastUpdated": "2013-09-11T17:58:54.000Z", "name": "template_swa", "settings": { "app": { "buttonField": "btn-login", "passwordField": "txtbox-password", "url": "https://example.com/login.html", "usernameField": "txtbox-username" } }, "signOnMode": "BROWSER_PLUGIN", "status": "ACTIVE", "user": { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabizCHPNYALCHDUIOD" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00ucw2RPGIUNTDQOYPOF" } }, "created": "2014-03-21T23:31:35.000Z", "credentials": { "userName": "user@example.com" }, "externalId": null, "id": "00ucw2RPGIUNTDQOYPOF", "lastSync": null, "lastUpdated": "2014-03-21T23:31:35.000Z", "passwordChanged": null, "scope": "USER", "status": "ACTIVE", "statusChanged": "2014-03-21T23:31:35.000Z", "syncState": "DISABLED" }, "visibility": { "appLinks": { "login": true }, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } }, "_links": { "appLinks": [ { "href": "https://testorgone.okta.com/home/testorgone_customsaml20app_1/0oa1gjh63g214q0Hq0g4/aln1gofChJaerOVfY0g4", "name": "testorgone_customsaml20app_1_link", "type": "text/html" } ], "deactivate": { "href": "https://testorgone.okta.com/api/v1/apps/0oa1gjh63g214q0Hq0g4/lifecycle/deactivate" }, "groups": { "href": "https://testorgone.okta.com/api/v1/apps/0oa1gjh63g214q0Hq0g4/groups" }, "help": { "href": "https://testorgone-admin.okta.com/app/testorgone_customsaml20app_1/0oa1gjh63g214q0Hq0g4/setup/help/SAML_2_0/instructions", "type": "text/html" }, "logo": [ { "href": "https://testorgone.okta.com/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "metadata": { "href": "https://testorgone.okta.com/api/v1/apps/0oa1gjh63g214q0Hq0g4/sso/saml/metadata", "type": "application/xml" }, "users": { "href": "https://testorgone.okta.com/api/v1/apps/0oa1gjh63g214q0Hq0g4/users" } }, "acsEndpoints": [], "allowMultipleAcsEndpoints": false, "attributeStatements": [], "enabled": false, "requestCompressed": false }, "assertionSigned": true, "audience": "https://example.com/tenant/123", "authnContextClassRef": "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport", "defaultRelayState": "", "destination": "https://destination.okta.com", "digestAlgorithm": "SHA256", "honorForceAuthn": true, "idpIssuer": "https://www.okta.com/${org.externalKey}", "participateSlo": { "bindingType": "REDIRECT", "enabled": true, "logoutRequestUrl": "https://testorgone.okta.com/logout/participate", "sessionIndexRequired": true }, "recipient": "https://recipient.okta.com", "responseSigned": true, "signatureAlgorithm": "RSA_SHA256", "slo": { "enabled": true, "logoutUrl": "https://testorgone.okta.com/logout", "spIssuer": "https://testorgone.okta.com" }, "spCertificate": { "x5c": [ "MIIFnDCCA4QCCQDBSLbiON2T1zANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMxDjAMBgNV\r\n" ] }, "ssoAcsUrl": "https://{yourOktaDomain}", "subjectNameIdFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress", "subjectNameIdTemplate": "${user.userName}" } }, "signOnMode": "SAML_2_0", "status": "ACTIVE", "visibility": { "appLinks": { "testorgone_customsaml20app_1_link": true }, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } ] }, "GetApplicationsResponseEx": { "summary": "Retrieve an app", "value": { "_links": { "appLinks": [ { "href": "https://testorgone.okta.com/home/testorgone_customsaml20app_1/0oa1gjh63g214q0Hq0g4/aln1gofChJaerOVfY0g4", "name": "testorgone_customsaml20app_1_link", "type": "text/html" } ], "deactivate": { "href": "https://testorgone.okta.com/api/v1/apps/0oa1gjh63g214q0Hq0g4/lifecycle/deactivate" }, "groups": { "href": "https://testorgone.okta.com/api/v1/apps/0oa1gjh63g214q0Hq0g4/groups" }, "help": { "href": "https://testorgone-admin.okta.com/app/testorgone_customsaml20app_1/0oa1gjh63g214q0Hq0g4/setup/help/SAML_2_0/instructions", "type": "text/html" }, "logo": [ { "href": "https://testorgone.okta.com/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "metadata": { "href": "https://testorgone.okta.com/api/v1/apps/0oa1gjh63g214q0Hq0g4/sso/saml/metadata", "type": "application/xml" }, "users": { "href": "https://testorgone.okta.com/api/v1/apps/0oa1gjh63g214q0Hq0g4/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2016-08-09T20:12:19.000Z", "credentials": { "signing": {}, "userNameTemplate": { "template": "${fn:substringBefore(source.login, \"@\")}", "type": "BUILT_IN" } }, "expressConfiguration": { "enabledCapabilities": [ "SSO" ], "supportedCapabilities": [ "SSO", "PROVISIONING", "UNIVERSAL_LOGOUT" ] }, "features": [], "id": "0oa1gjh63g214q0Hq0g4", "label": "Custom Saml 2.0 App", "lastUpdated": "2016-08-09T20:12:19.000Z", "name": "testorgone_customsaml20app_1", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:testorgone_customsaml20app_1:0oa1gjh63g214q0Hq0g4", "settings": { "app": {}, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } }, "signOn": { "acsEndpoints": [], "allowMultipleAcsEndpoints": false, "assertionEncryption": { "enabled": true, "encryptionAlgorithm": "AES256_GCM", "keyTransportAlgorithm": "RSA_15", "x5c": [ "MIIC6jCCAdKgAwIBAgIGAZKbFN7JMA0GCSqGSIb3DQEBCwUAMDYxNDAyBgNVBAMM\r\n" ] }, "assertionSigned": true, "attributeStatements": [], "audience": "https://example.com/tenant/123", "authnContextClassRef": "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport", "defaultRelayState": "", "destination": "https://destination.okta.com", "digestAlgorithm": "SHA256", "honorForceAuthn": true, "idpIssuer": "https://www.okta.com/${org.externalKey}", "inlineHooks": [ { "_links": { "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/inlineHooks/cal3ughy17pylLxQB357" } }, "id": "cal3ughy17pylLxQB357" } ], "participateSlo": { "bindingType": "REDIRECT", "enabled": true, "logoutRequestUrl": "https://testorgone.okta.com/logout/participate", "sessionIndexRequired": true }, "recipient": "https://recipient.okta.com", "requestCompressed": false, "responseSigned": true, "signatureAlgorithm": "RSA_SHA256", "slo": { "enabled": true, "logoutUrl": "https://testorgone.okta.com/logout", "spIssuer": "https://testorgone.okta.com" }, "spCertificate": { "x5c": [ "MIIFnDCCA4QCCQDBSLbiON2T1zANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMxDjAMBgNV\r\n" ] }, "ssoAcsUrl": "https://{yourOktaDomain}", "subjectNameIdFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress", "subjectNameIdTemplate": "${user.userName}" } }, "signOnMode": "SAML_2_0", "status": "ACTIVE", "universalLogout": { "identityStack": "NOT_SHARED", "protocol": "GLOBAL_TOKEN_REVOCATION", "status": "ENABLED", "supportType": "FULL" }, "visibility": { "appLinks": { "testorgone_customsaml20app_1_link": true }, "autoSubmitToolbar": false, "hide": { "iOS": false, "web": false } } } }, "GetAssociatedLinkedObjectsResponse": { "summary": "Retrieve all associated linked object values response", "value": [ { "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u5zex6ztMbOZhF50h7" } } }, { "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u1tsf0nQKavLDUh0g5" } } } ] }, "GetBrandResponse": { "value": { "_links": { "emailDomain": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/email-domains/OeD114iNkrcN6aR680g4" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/bnd114iNkrcN6aR680g4" }, "themes": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/bnd114iNkrcN6aR680g4/themes" } }, "agreeToCustomPrivacyPolicy": false, "customPrivacyPolicyUrl": null, "defaultApp": { "appInstanceId": "0oa114iNkrcN6aR680g4", "appLinkName": null, "classicApplicationUri": null }, "emailDomainId": "OeD114iNkrcN6aR680g4", "id": "bnd114iNkrcN6aR680g4", "isDefault": true, "locale": "en", "name": "Okta Default", "removePoweredByOkta": false } }, "GetEmailTemplateResponse": { "value": { "_embedded": { "customizationCount": 0, "settings": { "_links": { "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/settings" }, "template": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation" } }, "recipients": "ALL_USERS" } }, "_links": { "customizations": { "hints": { "allow": [ "GET", "POST", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/customizations" }, "defaultContent": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/default-content" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation" }, "settings": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/settings" }, "test": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/test" } }, "name": "UserActivation" } }, "GetPrimaryLinkedObjectResponse": { "summary": "Retrieve primary linked object value response", "value": [ { "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u5t60iloOHN9pBi0h7" } } } ] }, "GetRealmAssignmentResponse": { "value": { "_links": { "self": { "href": "http://your-subdomain.okta.com/api/v1/realm-assignments/rul2jy7jLUlnO3ng00g4", "method": "GET", "rel": "self" } }, "actions": { "assignUserToRealm": { "realmId": "00g1b7rvh0xPLKXFf0g5" } }, "conditions": { "expression": { "value": "string" }, "profileSourceId": "0oa4enoRyjwSCy5hx0g4" }, "created": "2022-04-04T15:56:05.000Z", "domains": [ "atko.com", "user.com" ], "id": "rul2jy7jLUlnO3ng00g4", "isDefault": false, "lastUpdated": "2022-05-05T18:15:44.000Z", "name": "Realm Assignment 1", "priority": 0, "status": "ACTIVE" } }, "GetRoleAssignmentGovernanceGrantResources": { "value": { "_links": { "next": { "href": "https://{yourOktaDomain}/api/v1/users/00u15r0i2hC4jeTne0g5/roles/KVJUKUS7IFCE2SKO/governance/grai2556vZgWesWf10g4/resources?after=orn:okta:directory:00ozmkUsqWxsUxhGO0g3:groups:00g118990hl1oCC5A0g5" }, "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u15r0i2hC4jeTne0g5/roles/KVJUKUS7IFCE2SKO/governance/grai2556vZgWesWf10g4/resources" } }, "resources": [ { "label": "test-group-1", "resource": "orn:okta:directory:00ozmkUsqWxsUxhGO0g3:groups:00g114290ar1oCC5A0g5" }, { "label": "test-group-2", "resource": "orn:okta:directory:00ozmkUsqWxsUxhGO0g3:groups:00g118990hl1oCC5B0g5" } ] } }, "GetRoleAssignmentGovernanceGrantResponse": { "value": { "_links": { "resources": { "href": "https://{yourOktaDomain}/api/v1/users/00u15r0i2hC4jeTne0g5/roles/KVJUKUS7IFCE2SKO/governance/grai2556vZgWesWf10g4/resources" }, "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u15r0i2hC4jeTne0g5/roles/KVJUKUS7IFCE2SKO/governance/grai2556vZgWesWf10g4" } }, "bundleId": "enbhz2pAwtts9UBes0g4", "expirationDate": "2024-12-09 14:17:22.0", "grantId": "grai2556vZgWesWf10g4", "type": "ENTITLEMENT-BUNDLE" } }, "GetSessionResponse": { "value": { "created": "2022-04-04T15:56:05.000Z", "id": "aps1qqonvr2SZv6o70h8", "identitySourceId": "0oa3l6l6WK6h0R0QW0g4", "importType": "INCREMENTAL", "lastUpdated": "2022-05-05T16:15:44.000Z", "status": "CREATED" } }, "GetThemeResponse": { "value": { "backgroundImage": null, "emailTemplateTouchPointVariant": "OKTA_DEFAULT", "endUserDashboardTouchPointVariant": "OKTA_DEFAULT", "errorPageTouchPointVariant": "OKTA_DEFAULT", "favicon": "https://{yourOktaDomain}/favicon.ico", "id": "thdul904tTZ6kWVhP0g3", "loadingPageTouchPointVariant": "OKTA_DEFAULT", "logo": "https://{yourOktaDomain}/assets/img/logos/okta-logo.47066819ac7db5c13f4c431b2687cef6.png", "primaryColorContrastHex": "#000000", "primaryColorHex": "#1662dd", "secondaryColorContrastHex": "#000000", "secondaryColorHex": "#ebebed", "signInPageTouchPointVariant": "OKTA_DEFAULT" } }, "GetUseRoleGovernanceResponse": { "value": { "_links": { "assignee": { "href": "https://{yourOktaDomain}/api/v1/users/00u15r0i2hC4jeTne0g5\"" }, "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u15r0i2hC4jeTne0g5/roles/KVJUKUS7IFCE2SKO/governance" } }, "grants": [ { "_links": { "resources": { "href": "https://{yourOktaDomain}/api/v1/users/00u15r0i2hC4jeTne0g5/roles/KVJUKUS7IFCE2SKO/governance/grai24zWTjnDazeOI0g4/resources" } }, "grantId": "grai24zWTjnDazeOI0g4", "type": "CUSTOM" }, { "_links": { "resources": { "href": "https://{yourOktaDomain}//api/v1/users/00u15r0i2hC4jeTne0g5/roles/KVJUKUS7IFCE2SKO/governance/grai2556vZgWesWf10g4/resources" } }, "bundleId": "enbhz2pAwtts9UBes0g4", "expirationDate": "2024-12-09 14:17:22.0", "grantId": "grai2556vZgWesWf10g4", "type": "ENTITLEMENT-BUNDLE" } ] } }, "GetUserLinkedObjectResponse": { "summary": "Retrieve user linked object value", "value": [ { "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u5t60iloOHN9pBi0h7" } } } ] }, "GetUserResponse": { "summary": "Retrieve a user type response", "value": { "_links": { "schema": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/oscz9fj2jMiRBC1ZT1d6" }, "self": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/oscz9fj2jMiRBC1ZT1d6" } }, "created": "2021-07-05T20:40:38.000Z", "createdBy": "sprz9fj1ycBcsgopy1d6", "default": false, "description": "A new custom user type", "displayName": "New user type", "id": "otyfnly5cQjJT9PnR0g4", "lastUpdated": "2021-07-05T20:40:38.000Z", "lastUpdatedBy": "sprz9fj1ycBcsgopy1d6", "name": "newUserType" } }, "GetYubikeyOptTokenResponse": { "summary": "Get YubiKey OTP token response", "value": { "_links": { "deactivate": { "hints": { "allow": [ "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00uu0x8sxTr9HcHOo0g3/factors/ykfxduQAhl89YyPrV0g3" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/org/factors/yubikey_token/tokens/ykkxdtCA1fKVxyu6R0g3" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00uu0x8sxTr9HcHOo0g3" } }, "activated": "2020-06-09T23:47:29.000Z", "created": "2020-06-09T23:42:05.000Z", "id": "ykkxdtCA1fKVxyu6R0g3", "lastUpdated": "2020-06-09T23:47:29.000Z", "lastVerified": "2020-06-09T23:47:29.000Z", "profile": { "serial": "000009508427" }, "status": "ACTIVE" } }, "GoogleIdPResponse": { "summary": "Google IdP", "value": { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize?idp=0oa62bfdiumsUndnZ0h7&\n client_id={clientId}&response_type={responseType}&response_mode={responseMode}&\n scope={scopes}&redirect_uri={redirectUri}&state={state}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize/callback" } }, "created": "2016-03-24T23:21:49.000Z", "id": "0oa62bfdiumsUndnZ0h7", "lastUpdated": "2016-03-24T23:21:49.000Z", "name": "Google", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.userPrincipalName" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://accounts.google.com/o/oauth2/auth" }, "token": { "binding": "HTTP-POST", "url": "https://www.googleapis.com/oauth2/v3/token" } }, "scopes": [ "profile", "email", "openid" ], "type": "OIDC" }, "status": "ACTIVE", "type": "GOOGLE" } }, "GovernanceBundle": { "summary": "Governance bundle", "value": { "_links": { "entitlements": "http://your-subdomain.okta.com/api/v1/iam/governance/bundles/0bbfxqCAJWWGELFTYAAA/entitlements", "self": "http://your-subdomain.okta.com/api/v1/iam/governance/bundles/0bbfxqCAJWWGELFTYAAA" }, "description": "Group bundle for administrative access", "id": "0bbfxqCAJWWGELFTYAAA", "name": "Group admin bundle", "orn": "orn:okta:governance:00o5rb5mt2H3d1TJd0h7:bundles:0bbfxqCAJWWGELFTYAAA", "status": "ACTIVE" } }, "GovernanceBundleCreateRequestCustomRole": { "summary": "Create governance bundle with custom role", "value": { "description": "Custom bundle for administrative access", "entitlements": { "resourceSets": [ "iamoJDFKaJxGIr0oamd9g" ], "role": "cr0WxyzJxGIr0ouum0g4" }, "name": "Custom admin bundle" } }, "GovernanceBundleCreateRequestScopedStandardRole": { "summary": "Create governance bundle with scoped standard role", "value": { "description": "Group bundle for administrative access", "entitlements": { "role": "GROUP_MEMBERSHIP_ADMIN", "targets": [ "00guaxWZ0AOa5NFAj0g3" ] }, "name": "Group admin bundle" } }, "GovernanceBundleCreateRequestStandardRole": { "summary": "Create governance bundle with non-scoped standard role", "value": { "description": "Group bundle for administrative access", "entitlements": { "role": "GROUP_MEMBERSHIP_ADMIN" }, "name": "Group admin bundle" } }, "GovernanceBundleUpdateRequestCustomRole": { "summary": "Update governance bundle with custom role", "value": { "description": "Custom bundle for administrative access", "entitlements": { "resourceSets": [ "iamoJDFKaJxGIr0oamd9g" ], "role": "cr0WxyzJxGIr0ouum0g4" }, "name": "Custom admin bundle" } }, "GovernanceBundleUpdateRequestScopedStandardRole": { "summary": "Update governance bundle with scoped standard role", "value": { "description": "Group bundle for administrative access", "entitlements": { "role": "GROUP_MEMBERSHIP_ADMIN", "targets": [ "00guaxWZ0AOa5NFAj0g3" ] }, "name": "Group admin bundle" } }, "GovernanceBundleUpdateRequestStandardRole": { "summary": "Update governance bundle with non-scoped standard role", "value": { "description": "Group bundle for administrative access", "entitlements": { "role": "GROUP_MEMBERSHIP_ADMIN" }, "name": "Group admin bundle" } }, "GovernanceBundlesResponse": { "summary": "List of governance bundles", "value": { "_links": { "next": { "href": "http://your-subdomain.okta.com/api/v1/iam/governance/bundles?after=bundleId12" }, "self": { "href": "http://your-subdomain.okta.com/api/v1/iam/governance/bundles?limit=2&after=10" } }, "bundles": [ { "_links": { "entitlements": "http://your-subdomain.okta.com/api/v1/iam/governance/bundles/0bbfxqCAJWWGELFTYAAA/entitlements" }, "description": "Group bundle for administrative access", "id": "0bbfxqCAJWWGELFTYAAA", "name": "Group admin bundle", "orn": "orn:okta:governance:00o5rb5mt2H3d1TJd0h7:bundles:0bbfxqCAJWWGELFTYAAA", "status": "ACTIVE" } ] } }, "GroupAssignmentExListResponse": { "summary": "Application groups list with embedded metadata", "value": [ { "_embedded": { "metadata": { "credentials": {}, "profile": { "department": { "lastUpdated": null, "source": { "type": "MAPPING", "value": [ { "id": null } ] } }, "division": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "initialStatus": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "locale": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "manager": { "lastUpdated": null, "source": { "type": "MAPPING", "value": [ { "id": null } ] } }, "managerId": { "lastUpdated": null, "source": { "type": "MAPPING", "value": [ { "id": null } ] } }, "organization": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "preferredLanguage": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "securityAnswer": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "securityQuestion": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "timezone": { "lastUpdated": null, "source": { "type": "USER", "value": [ { "id": "00uzojLwDGgUynjJS0g3", "self": { "href": "http://{yourOktaDomain}/api/v1/users/00uzojLwDGgUynjJS0g3" } } ] } }, "userType": { "lastUpdated": null, "source": { "type": "MAPPING", "value": [ { "id": null } ] } } } } }, "_links": { "app": { "href": "http://{yourOktaDomain}/api/v1/apps/0oa15anjcUHSI6hTB0g4" }, "group": { "href": "http://{yourOktaDomain}/api/v1/groups/00g15acRUy0SYb9GT0g4" }, "self": { "href": "http://{yourOktaDomain}/api/v1/apps/0oa15anjcUHSI6hTB0g4/groups/00g15acRUy0SYb9GT0g4" } }, "id": "00g15acRUy0SYb9GT0g4", "lastUpdated": "2024-06-02T13:17:57.000Z", "priority": 0, "profile": { "department": "marketing", "division": "top", "initialStatus": "active_with_pass", "locale": "en_US", "manager": "Donald Glover", "managerId": "ike.ogb@gmail.com", "organization": "wazobia", "preferredLanguage": "English", "securityAnswer": "Ronaldinho", "securityQuestion": "Who is the footballer to have played the game", "timezone": "Canada/Eastern", "userType": null } } ] }, "GroupAssignmentExResponse": { "summary": "Application group response", "value": { "_links": { "app": { "href": "http://{yourOktaDomain}/api/v1/apps/0oa15anjcUHSI6hTB0g4" }, "group": { "href": "http://{yourOktaDomain}/api/v1/groups/00g15acRUy0SYb9GT0g4" }, "self": { "href": "http://{yourOktaDomain}/api/v1/apps/0oa15anjcUHSI6hTB0g4/groups/00g15acRUy0SYb9GT0g4" } }, "id": "00g15acRUy0SYb9GT0g4", "lastUpdated": "2024-06-02T13:17:57.000Z", "priority": 0, "profile": { "department": "marketing", "division": "top", "initialStatus": "active_with_pass", "locale": "en_US", "manager": "Donald Glover", "managerId": "ike.ogb@gmail.com", "organization": "wazobia", "preferredLanguage": "English", "securityAnswer": "Ronaldinho", "securityQuestion": "Who is the footballer to have played the game", "timezone": "Canada/Eastern", "userType": null } } }, "GroupAssignmentPatchRequestExample": { "summary": "Update app group request", "value": [ { "op": "replace", "path": "/profile/manager", "value": "Carlo Ancelotti" } ] }, "GroupAssignmentPatchResponseExample": { "summary": "Update application group response", "value": { "_links": { "app": { "href": "http://{yourOktaDomain}/api/v1/apps/0oa15anjcUHSI6hTB0g4" }, "group": { "href": "http://{yourOktaDomain}/api/v1/groups/00g15acRUy0SYb9GT0g4" }, "self": { "href": "http://{yourOktaDomain}/api/v1/apps/0oa15anjcUHSI6hTB0g4/groups/00g15acRUy0SYb9GT0g4" } }, "id": "00g15acRUy0SYb9GT0g4", "lastUpdated": "2024-06-03T13:42:20.000Z", "priority": 0, "profile": { "department": "Accounting", "division": "top", "initialStatus": "active_with_pass", "locale": "en_US", "manager": "Carlo Ancelotti", "managerId": "ike.ogb@gmail.com", "organization": null, "preferredLanguage": "English", "securityAnswer": "Jay Jay Okocha", "securityQuestion": "Who is the footballer to have played the game", "timezone": "Canada/Eastern", "userType": null } } }, "GroupAssignmentPutRequestExample": { "summary": "Assign application group request", "value": { "id": "00g15acRUy0SYb9GT0g4", "profile": { "department": "Accounting", "division": "top", "initialStatus": "active_with_pass", "locale": "en_US", "manager": "Arsene Wenger", "managerId": "ike.ogb@gmail.com", "organization": null, "preferredLanguage": "English", "securityAnswer": "Jay Jay Okocha", "securityQuestion": "Who is the footballer to have played the game", "timezone": "Canada/Eastern", "userType": null } } }, "GroupAssignmentPutResponseExample": { "summary": "Assign application group response", "value": { "_links": { "app": { "href": "http://{yourOktaDomain}/api/v1/apps/0oa15anjcUHSI6hTB0g4" }, "group": { "href": "http://{yourOktaDomain}/api/v1/groups/00g15acRUy0SYb9GT0g4" }, "self": { "href": "http://{yourOktaDomain}/api/v1/apps/0oa15anjcUHSI6hTB0g4/groups/00g15acRUy0SYb9GT0g4" } }, "id": "00g15acRUy0SYb9GT0g4", "lastUpdated": "2024-06-03T13:52:07.000Z", "priority": 0, "profile": { "department": "Accounting", "division": "top", "initialStatus": "active_with_pass", "locale": "en_US", "manager": "Arsene Wenger", "managerId": "ike.ogb@gmail.com", "organization": null, "preferredLanguage": "English", "securityAnswer": "Jay Jay Okocha", "securityQuestion": "Who is the footballer to have played the game", "timezone": "Canada/Eastern", "userType": null } } }, "GroupMemberships": { "value": { "memberExternalIds": [ "USEREXT123456784C2IFA", "USEREXT123456784C3IFB", "USEREXT123456784C4IFC" ] } }, "GroupSchemaAddRequest": { "value": { "definitions": { "custom": { "id": "#custom", "properties": { "groupContact": { "description": "Group administrative contact", "maxLength": 20, "minLength": 1, "permissions": [ { "action": "READ_WRITE", "principal": "SELF" } ], "required": false, "title": "Group administrative contact", "type": "string" } }, "required": [], "type": "object" } } } }, "GroupSchemaResponse": { "value": { "$schema": "http://json-schema.org/draft-04/schema#", "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/group/default", "method": "GET", "rel": "self" } }, "created": "2021-01-30T00:18:24.000Z", "definitions": { "base": { "id": "#base", "properties": {}, "required": [ "name" ], "type": "object" }, "custom": { "id": "#custom", "properties": { "groupContact": { "description": "Group administrative contact", "master": { "type": "PROFILE_MASTER" }, "mutability": "READ_WRITE", "permissions": [ { "action": "READ_WRITE", "principal": "SELF" } ], "scope": "NONE", "title": "Group administrative contact", "type": "string" } }, "required": [], "type": "object" } }, "description": "Okta group profile template", "id": "https://{yourOktaDomain}/meta/schemas/group/default", "lastUpdated": "2021-02-25T23:05:31.000Z", "name": "group", "properties": { "profile": { "allOf": [ { "$ref": "#/definitions/custom" }, { "$ref": "#/definitions/base" } ] } }, "title": "Okta group", "type": "object" } }, "GroupsPayload": { "value": { "externalId": "GROUPEXT123456784C2IF", "profile": { "description": "All users West of The Rockies", "displayName": "West Coast users" } } }, "GroupsResponse": { "value": { "externalId": "GROUPEXT123456784C2IF", "id": "00gsl4xM9ys8TdnbZ0g4", "profile": { "description": "All users West of The Rockies", "displayName": "West Coast users" } } }, "IAMStandardRoleResponseClient": { "value": { "_links": { "assignee": { "href": "https://{yourOktaDomain}/api/v1/client/0oa5vymVNCe2cPEeZ0g4" }, "member": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/ACCESS_CERTIFICATIONS_IAM_POLICY/bindings/ACCESS_REQUESTS_ADMIN/members/irb4jlomnnDBuBDyJ0g7" }, "permissions": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/ACCESS_REQUESTS_ADMIN/permissions" }, "resource-set": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/ACCESS_CERTIFICATIONS_IAM_POLICY" }, "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/ACCESS_REQUESTS_ADMIN" } }, "assignmentType": "CLIENT", "created": "2023-07-06T21:52:48.000Z", "id": "irb4jlodtdN4yJ88b0g7", "label": "Access Requests Administrator", "lastUpdated": "2023-07-06T21:52:48.000Z", "resource-set": "ACCESS_CERTIFICATIONS_IAM_POLICY", "role": "ACCESS_REQUESTS_ADMIN", "status": "ACTIVE", "type": "ACCESS_REQUESTS_ADMIN" } }, "IAMStandardRoleResponseUser": { "value": { "_links": { "assignee": { "href": "https://{yourOktaDomain}/api/v1/users/00ub0oNGTSWTBKOLGLNR" }, "member": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/ACCESS_CERTIFICATIONS_IAM_POLICY/bindings/ACCESS_REQUESTS_ADMIN/members/irb1q92TFAHzySt3x0g4" }, "permissions": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/ACCESS_REQUESTS_ADMIN/permissions" }, "resource-set": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/ACCESS_CERTIFICATIONS_IAM_POLICY" }, "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/ACCESS_REQUESTS_ADMIN" } }, "assignmentType": "USER", "created": "2019-02-06T16:20:57.000Z", "id": "irb1q92TFAHzySt3x0g4", "label": "Access Requests administrator", "lastUpdated": "2019-02-06T16:20:57.000Z", "resource-set": "ACCESS_CERTIFICATIONS_IAM_POLICY", "role": "ACCESS_REQUESTS_ADMIN", "status": "ACTIVE", "type": "ACCESS_REQUESTS_ADMIN" } }, "IAMStandardRolesListResponse": { "value": [ { "_links": { "assignee": { "href": "https://{yourOktaDomain}/api/v1/users/00ur32Vg0fvpyHZeQ0g3" } }, "assignmentType": "USER", "created": "2019-02-06T16:17:40.000Z", "id": "IFIFAX2BIRGUSTQ", "label": "Application administrator", "lastUpdated": "2019-02-06T16:17:40.000Z", "status": "ACTIVE", "type": "APP_ADMIN" }, { "_links": { "assignee": { "href": "https://{yourOktaDomain}/api/v1/users/00u1gytb3XCr9Dkr18r2" }, "member": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/iamoJDFKaJxGIr0oamd9g/bindings/cr0Yq6IJxGIr0ouum0g3/members/irb1qe6PGuMc7Oh8N0g4" }, "permissions": { "href": "https://{yourOktaDomain}/api/v1/iam/permission-sets/cr0Yq6IJxGIr0ouum0g3/permissions" }, "resource-set": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/iamoJDFKaJxGIr0oamd9g" }, "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3" } }, "assignmentType": "USER", "created": "2019-02-06T16:20:57.000Z", "id": "irb1q92TFAHzySt3x0g4", "label": "UserCreatorRole", "lastUpdated": "2019-02-06T16:20:57.000Z", "resource-set": "iamoJDFKaJxGIr0oamd9g", "role": "cr0Yq6IJxGIr0ouum0g3", "status": "ACTIVE", "type": "CUSTOM" }, { "_links": { "assignee": { "href": "https://{yourOktaDomain}/api/v1/users/00u1gytb3XCr9Dkr18r2" }, "member": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/ACCESS_CERTIFICATIONS_IAM_POLICY/bindings/ACCESS_CERTIFICATIONS_ADMIN/members/irb1qe6PGuMc7Oh8N0g4" }, "permissions": { "href": "https://{yourOktaDomain}/api/v1/iam/permission-sets/OKTA_IAM_TEST_DELIVERED_ROLE/permissions" }, "resource-set": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/ACCESS_CERTIFICATIONS_IAM_POLICY" }, "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/ACCESS_CERTIFICATIONS_ADMIN" } }, "assignmentType": "USER", "created": "2019-02-06T16:20:57.000Z", "id": "irb5e92YgBazyyQ3x1q5", "label": "Access Certifications administrator", "lastUpdated": "2019-02-06T16:20:57.000Z", "resource-set": "ACCESS_CERTIFICATIONS_IAM_POLICY", "role": "ACCESS_CERTIFICATIONS_ADMIN", "status": "ACTIVE", "type": "ACCESS_CERTIFICATIONS_ADMIN" } ] }, "IAMStandardRolesListResponseClient": { "value": [ { "_links": { "assignee": { "href": "https://{yourOktaDomain}/api/v1/clients/0oa4ee9vgbIuqTUvd0g7" }, "member": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/ACCESS_CERTIFICATIONS_IAM_POLICY/bindings/ACCESS_CERTIFICATIONS_ADMIN/members/irb1qe6PGuMc7Oh8N0g4" }, "permissions": { "href": "https://{yourOktaDomain}/api/v1/iam/permission-sets/OKTA_IAM_TEST_DELIVERED_ROLE/permissionsZ" }, "resource-set": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/ACCESS_CERTIFICATIONS_IAM_POLICY" }, "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/ACCESS_CERTIFICATIONS_ADMIN" } }, "assignmentType": "CLIENT", "created": "2019-02-06T16:20:57.000Z", "id": "irb5e92YgBazyyQ3x1q5", "label": "Access Certifications Administrator", "lastUpdated": "2019-02-06T16:20:57.000Z", "resource-set": "ACCESS_CERTIFICATIONS_IAM_POLICY", "role": "ACCESS_CERTIFICATIONS_ADMIN", "status": "ACTIVE", "type": "ACCESS_CERTIFICATIONS_ADMIN" } ] }, "IAMStandardRolesListResponseGroup": { "value": [ { "_links": { "assignee": { "href": "https://{yourOktaDomain}/api/v1/groups/00g1emaKYZTWRYYRRTSK" }, "member": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/ACCESS_CERTIFICATIONS_IAM_POLICY/bindings/ACCESS_CERTIFICATIONS_ADMIN/members/irb1qe6PGuMc7Oh8N0g4" }, "permissions": { "href": "https://{yourOktaDomain}/api/v1/iam/permission-sets/OKTA_IAM_TEST_DELIVERED_ROLE/permissions" }, "resource-set": { "href": "https://{yourOktaDomain}/api/v1/iam/resource-sets/ACCESS_CERTIFICATIONS_IAM_POLICY" }, "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/ACCESS_CERTIFICATIONS_ADMIN" } }, "assignmentType": "GROUP", "created": "2019-02-06T16:20:57.000Z", "id": "irb5e92YgBazyyQ3x1q5", "label": "Access Certifications Administrator", "lastUpdated": "2019-02-06T16:20:57.000Z", "resource-set": "ACCESS_CERTIFICATIONS_IAM_POLICY", "role": "ACCESS_CERTIFICATIONS_ADMIN", "status": "ACTIVE", "type": "ACCESS_CERTIFICATIONS_ADMIN" } ] }, "IdPAppUserResponse": { "summary": "IdP user", "value": { "_links": { "idp": { "href": "https://{yourOktaDomain}/api/v1/idps/0oa62bfdiumsUndnZ0h7" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oa62bfdiumsUndnZ0h7/users/00u5t60iloOHN9pBi0h7" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00u5t60iloOHN9pBi0h7" } }, "created": "2017-12-19T17:30:16.000Z", "externalId": "externalId", "id": "00u5t60iloOHN9pBi0h7", "lastUpdated": "2017-12-19T17:30:16.000Z", "profile": { "displayName": null, "email": null, "firstName": null, "honorificPrefix": null, "honorificSuffix": null, "lastName": null, "middleName": null, "profileUrl": null } } }, "IdPKeyCredentialRequest": { "summary": "IdP key credential", "value": { "e": "65537", "n": "101438407598598116085679865987760095721749307901605456708912786847324207000576780508113360584555007890315805735307890113536927352312915634368993759211767770602174860126854831344273970871509573365292777620005537635317282520456901584213746937262823585533063042033441296629204165064680610660631365266976782082747", "x5c": [ "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" ], "x5t#S256": "wzPVobIrveR1x-PCbjsFGNV-6zn7Rm9KuOWOG4Rk6jE" } }, "IdPKeyCredentialResponse": { "summary": "IdP key credential", "value": { "created": "2016-01-03T18:15:47.000Z", "e": "65537", "kid": "your-key-id", "kty": "RSA", "lastUpdated": "2016-01-03T18:15:47.000Z", "n": "101438407598598116085679865987760095721749307901605456708912786847324207000576780508113360584555007890315805735307890113536927352312915634368993759211767770602174860126854831344273970871509573365292777620005537635317282520456901584213746937262823585533063042033441296629204165064680610660631365266976782082747", "use": "sig", "x5c": [ "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" ], "x5t#S256": "wzPVobIrveR1x-PCbjsFGNV-6zn7Rm9KuOWOG4Rk6jE" } }, "IdPSigningKeyCredentialResponse": { "summary": "IdP signing key credential", "value": { "created": "2015-12-10T18:56:23.000Z", "expiresAt": "2017-12-10T18:56:22.000Z", "kid": "akm5hvbbevE341ovl0h7", "kty": "RSA", "use": "sig", "x5c": [ "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" ], "x5t#S256": "wzPVobIrveR1x-PCbjsFGNV-6zn7Rm9KuOWOG4Rk6jE" } }, "IdvExample": { "summary": "Identity Verification (IDV) configuration example", "value": { "authorizeUrl": "https://auth.example.com/oauth/authorize", "configUrl": "https://example.com/config/url", "issuerUrl": "https://auth.example.com/", "jwksUrl": "https://auth.example.com/.well-known/jwks.json", "parUrl": "https://auth.example.com/oauth/par", "privacyPolicyUrl": "https://example.com/legal/privacy", "termsOfUseUrl": "https://example.com/legal/eula", "tokenUrl": "https://auth.example.com/oauth/token" } }, "IncodeIDVResponse": { "summary": "Incode as IdP", "value": { "_links": { "users": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oaf35tu47hnH9mlZ0w6/users" } }, "created": "2025-01-15T20:54:04.000Z", "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oaf35tu47hnH9mlZ0w6/lifecycle/deactivate" }, "id": "0oaf35tu47hnH9mlZ0w6", "lastUpdated": "2025-01-15T20:54:05.000Z", "name": "Incode IdP", "policy": { "maxClockSkew": 0, "provisioning": { "action": "DISABLED", "groups": null, "profileMaster": false }, "subject": { "filter": null, "matchAttribute": null, "matchType": "USERNAME", "userNameTemplate": { "template": "source.userName" } } }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://auth.incode.com/oauth2/authorize" }, "par": { "binding": "HTTP-POST", "url": "https://auth.incode.com/oauth2/par" }, "token": { "binding": "HTTP-POST", "url": "https://auth.incode.com/oauth2/token" } }, "scopes": [ "openid", "profile", "identity_assurance" ], "type": "ID_PROOFING" }, "status": "ACTIVE", "type": "IDV_INCODE" }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "LIMITED_GA" } }, "InlineHookMgmtCreateHTTPRequest": { "summary": "Create an inline hook with HTTP authentication", "value": { "channel": { "config": { "authScheme": { "key": "Authorization", "type": "HEADER", "value": "my-shared-secret" }, "headers": [ { "key": "x-any-key", "value": "my-header-value" } ], "method": "POST", "uri": "https://example.com/tokenHook" }, "type": "HTTP", "version": "1.0.0" }, "name": "Token hook with HTTP authentication", "type": "com.okta.oauth2.tokens.transform", "version": "1.0.0" } }, "InlineHookMgmtCreateHTTPResponse": { "summary": "Inline hook with HTTP authentication response", "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4/lifecycle/activate" }, "delete": { "hints": { "allow": [ "DELETE" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4" }, "self": { "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4" } }, "channel": { "config": { "authScheme": { "key": "authorization", "type": "header" }, "headers": [], "method": "POST", "uri": "https://example.com/tokenHook" }, "type": "HTTP", "version": "1.0.0" }, "created": "2024-08-22T21:01:09.000Z", "id": "calb7gacafgwgE7hc5e4", "lastUpdated": "2024-09-05T16:06:09.000Z", "name": "Token hook with HTTP authentication", "status": "ACTIVE", "type": "com.okta.oauth2.tokens.transform", "version": "1.0.0" } }, "InlineHookMgmtCreateOAuthClientSecretRequest": { "summary": "Create an inline hook with OAuth 2.0 Client Secret", "value": { "channel": { "config": { "authType": "client_secret_post", "clientId": "0oaj43vkrq7wKxZSI5e6", "clientSecret": "b-iATvTu7sIocvhWx95S9kF.....vfZhM6q6khSaojLBejF21cUn5bPm9abi", "headers": [], "method": "POST", "tokenUrl": "https://example.okta.com/oauth2/default/v1/token", "uri": "https://example.com/tokenHook" }, "type": "OAUTH", "version": "1.0.0" }, "name": "Registration hook with OAuth 2.0 Client Secret Post", "type": "com.okta.oauth2.tokens.transform", "version": "1.0.0" } }, "InlineHookMgmtCreateOAuthClientSecretResponse": { "summary": "Inline hook with OAuth 2.0 Client Secret response", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol5e5/lifecycle/activate" }, "execute": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol5e5/execute" }, "self": { "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol5e5" } }, "channel": { "config": { "authScheme": null, "authType": "client_secret_post", "clientId": "0oaj43vkrq7wKxZSI5e6", "headers": [], "method": "POST", "scope": null, "tokenUrl": "https:/subdomain.okta.com/oauth2/default/v1/token\"", "uri": "https://example.com/registrationHook" }, "type": "OAUTH", "version": "1.0.0" }, "created": "2024-08-22T21:01:09.000Z", "id": "calj4fythrqj5Bxol5e5", "lastUpdated": "2024-09-05T16:06:09.000Z", "name": "Registration hook with OAuth 2.0 Client Secret Post", "status": "ACTIVE", "type": "com.okta.user.pre-registration", "version": "1.0.0" } }, "InlineHookMgmtCreateOAuthPrivateKeyRequest": { "summary": "Create an inline hook with OAuth 2.0 Private Key", "value": { "channel": { "config": { "authType": "private_key_jwt", "clientId": "0oaj43vkrq7wKxZSI5e6", "headers": [ { "key": "x-any-key", "value": "my-header-value" } ], "hookKeyId": "HKYj4ft1a3fjmwZg05e6", "method": "POST", "tokenUrl": "https://example.okta.com/oauth2/default/v1/token", "uri": "https://example.com/tokenHook" }, "type": "OAUTH", "version": "1.0.0" }, "name": "Token hook with OAuth 2.0 Private Key authentication", "type": "com.okta.oauth2.tokens.transform", "version": "1.0.0" } }, "InlineHookMgmtCreateOAuthPrivateKeyResponse": { "summary": "Inline hook with OAuth 2.0 Private Key response", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol4ai6/lifecycle/activate" }, "execute": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol4ai6/execute" }, "self": { "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol4ai6" } }, "channel": { "config": { "authScheme": null, "authType": "private_key_jwt", "clientId": "0oaj43vkrq7wKxZSI5d7", "headers": [], "hookKeyId": "HKYj4ft1a3fjmwZg05d6", "method": "POST", "scope": null, "tokenUrl": "https:/subdomain.okta.com/oauth2/default/v1/token\"", "uri": "https://example.com/tokenHook" }, "created": "2024-08-22T21:01:09.000Z", "type": "OAUTH", "version": "1.0.0" }, "id": "calj4fythrqj5Bxol4ai6", "lastUpdated": "2024-09-05T16:06:09.000Z", "name": "Token Hook with OAuth 2.0 Private Key JWT", "status": "ACTIVE", "type": "com.okta.oauth2.tokens.transform", "version": "1.0.0" } }, "InlineHookMgmtHTTPexample": { "summary": "An inline hook with HTTP authentication", "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4/lifecycle/activate" }, "delete": { "hints": { "allow": [ "DELETE" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4" }, "self": { "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4" } }, "channel": { "config": { "authScheme": { "key": "authorization", "type": "header" }, "headers": [], "method": "POST", "uri": "https://example.com/tokenHook" }, "type": "HTTP", "version": "1.0.0" }, "created": "2024-08-22T21:01:09.000Z", "id": "calb7gacafgwgE7hc5e4", "lastUpdated": "2024-09-05T16:06:09.000Z", "name": "Token hook with HTTP authentication", "status": "ACTIVE", "type": "com.okta.oauth2.tokens.transform", "version": "1.0.0" } }, "InlineHookMgmtHTTPexampleDeactivate": { "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4/lifecycle/activate" }, "delete": { "hints": { "allow": [ "DELETE" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4" }, "self": { "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4" } }, "channel": { "config": { "authScheme": { "key": "authorization", "type": "header" }, "headers": [], "method": "POST", "uri": "https://example.com/tokenHook" }, "type": "HTTP", "version": "1.0.0" }, "created": "2024-08-22T21:01:09.000Z", "id": "calb7gacafgwgE7hc5e4", "lastUpdated": "2024-09-05T16:06:09.000Z", "name": "Token hook with HTTP authentication", "status": "INACTIVE", "type": "com.okta.oauth2.tokens.transform", "version": "1.0.0" } }, "InlineHookMgmtOAuthCSPexample": { "summary": "An inline hook example with OAuth 2.0 Client Secret Post", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol5e5/lifecycle/activate" }, "execute": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol5e5/execute" }, "self": { "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol5e5" } }, "channel": { "config": { "authScheme": null, "authType": "client_secret_post", "clientId": "0oaj43vkrq7wKxZSI5e6", "headers": [], "method": "POST", "scope": null, "tokenUrl": "https:/subdomain.okta.com/oauth2/default/v1/token\"", "uri": "https://example.com/registrationHook" }, "type": "OAUTH", "version": "1.0.0" }, "created": "2024-08-22T21:01:09.000Z", "id": "calj4fythrqj5Bxol5e5", "lastUpdated": "2024-09-05T16:06:09.000Z", "name": "Registration hook with OAuth 2.0 Client Secret Post", "status": "ACTIVE", "type": "com.okta.user.pre-registration", "version": "1.0.0" } }, "InlineHookMgmtOauthPKJexample": { "summary": "An inline hook example with OAuth 2.0 Private Key JWT", "value": { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol4ai6/lifecycle/activate" }, "execute": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol4ai6/execute" }, "self": { "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol4ai6" } }, "channel": { "config": { "authScheme": null, "authType": "private_key_jwt", "clientId": "0oaj43vkrq7wKxZSI5d7", "headers": [], "hookKeyId": "HKYj4ft1a3fjmwZg05d6", "method": "POST", "scope": null, "tokenUrl": "https:/subdomain.okta.com/oauth2/default/v1/token\"", "uri": "https://example.com/tokenHook" }, "created": "2024-08-22T21:01:09.000Z", "type": "OAUTH", "version": "1.0.0" }, "id": "calj4fythrqj5Bxol4ai6", "lastUpdated": "2024-09-05T16:06:09.000Z", "name": "Token Hook with OAuth 2.0 Private Key JWT", "status": "ACTIVE", "type": "com.okta.oauth2.tokens.transform", "version": "1.0.0" } }, "InlineHookMgmtPutHTTPRequest": { "summary": "Update an inline hook name", "value": { "channel": { "config": { "authScheme": { "key": "Authorization", "type": "HEADER", "value": "my-shared-secret" }, "headers": [ { "key": "x-any-key", "value": "my-header-value" } ], "method": "POST", "uri": "https://example.com/tokenHook" }, "type": "HTTP", "version": "1.0.0" }, "name": "New name token hook with HTTP authentication", "version": "1.0.0" } }, "InlineHookMgmtPutResponse": { "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4/lifecycle/activate" }, "delete": { "hints": { "allow": [ "DELETE" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4" }, "self": { "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4" } }, "channel": { "config": { "authScheme": { "key": "authorization", "type": "header" }, "headers": [], "method": "POST", "uri": "https://example.com/tokenHook" }, "type": "HTTP", "version": "1.0.0" }, "created": "2024-08-22T21:01:09.000Z", "description": "Inline hook response with a new name", "id": "calb7gacafgwgE7hc5e4", "lastUpdated": "2024-09-05T16:06:09.000Z", "name": "New name token hook with HTTP authentication", "status": "ACTIVE", "type": "com.okta.oauth2.tokens.transform", "version": "1.0.0" } }, "InlineHookTelephony": { "value": { "_links": { "deactivate": { "hints": { "allow\"": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/inlineHooks/caldpyulr3nbET2du1d7/lifecycle/deactivate" }, "execute": { "hints": { "allow\"": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/inlineHooks/caldpyulr3nbET2du1d7/execute" }, "self": { "href": "https://{yourOktaDomain}/api/v1/inlineHooks/caldpyulr3nbET2du1d7" } }, "channel": { "config": { "authScheme": { "key": "x-telephony-key", "type": "HEADER" }, "headers": [], "method": "POST", "uri": "https://your-external-webservice/sendOtp" }, "type": "HTTP", "version": "1.0.0" }, "created": "2024-03-28T17:30:25.000Z", "id": "caldpyulr3nbET2du1d7", "lastUpdated": "2024-05-07T16:35:18.000Z", "name": "testTelephonyHook", "status": "ACTIVE", "type": "com.okta.telephony.provider", "version": null } }, "InlineHooktMgmtListAllexample": { "summary": "List all inline hooks response", "value": [ { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4/lifecycle/activate" }, "delete": { "hints": { "allow": [ "DELETE" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4" }, "self": { "href": "https://subdomain.okta.com/api/v1/inlineHooks/calb7gacafgwgE7hc5e4" } }, "channel": { "config": { "authScheme": { "key": "authorization", "type": "header" }, "headers": [], "method": "POST", "uri": "https://example.com/tokenHook" }, "type": "HTTP", "version": "1.0.0" }, "created": "2024-08-22T21:01:09.000Z", "id": "calb7gacafgwgE7hc5e4", "lastUpdated": "2024-09-05T16:06:09.000Z", "name": "Token hook with HTTP authentication", "status": "ACTIVE", "type": "com.okta.oauth2.tokens.transform", "version": "1.0.0" }, { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol5e5/lifecycle/activate" }, "execute": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol5e5/execute" }, "self": { "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol5e5" } }, "channel": { "config": { "authScheme": null, "authType": "client_secret_post", "clientId": "0oaj43vkrq7wKxZSI5e6", "headers": [], "method": "POST", "scope": null, "tokenUrl": "https:/subdomain.okta.com/oauth2/default/v1/token\"", "uri": "https://example.com/registrationHook" }, "type": "OAUTH", "version": "1.0.0" }, "created": "2024-08-22T21:01:09.000Z", "id": "calj4fythrqj5Bxol5e5", "lastUpdated": "2024-09-05T16:06:09.000Z", "name": "Registration hook with OAuth 2.0 Client Secret Post", "status": "ACTIVE", "type": "com.okta.user.pre-registration", "version": "1.0.0" }, { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol4ai6/lifecycle/activate" }, "execute": { "hints": { "allow": [ "POST" ] }, "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol4ai6/execute" }, "self": { "href": "https://subdomain.okta.com/api/v1/inlineHooks/calj4fythrqj5Bxol4ai6" } }, "channel": { "config": { "authScheme": null, "authType": "private_key_jwt", "clientId": "0oaj43vkrq7wKxZSI5d7", "headers": [], "hookKeyId": "HKYj4ft1a3fjmwZg05d6", "method": "POST", "scope": null, "tokenUrl": "https:/subdomain.okta.com/oauth2/default/v1/token\"", "uri": "https://example.com/tokenHook" }, "created": "2024-08-22T21:01:09.000Z", "type": "OAUTH", "version": "1.0.0" }, "id": "calj4fythrqj5Bxol4ai6", "lastUpdated": "2024-09-05T16:06:09.000Z", "name": "Token Hook with OAuth 2.0 Private Key JWT", "status": "ACTIVE", "type": "com.okta.oauth2.tokens.transform", "version": "1.0.0" } ] }, "InterclientTrustMappingResponse": { "summary": "Create an interclient target and allowed app mapping response", "value": [ { "appInstanceId": "0oa8ghelqWXs70qD80g5", "created": "2025-11-25T22:44:06.000Z", "id": "itmahqusSr3v8Kk3B0g5", "lastUpdated": "2025-11-25T22:44:06.000Z", "lastUpdatedBy": "00u102rhXmxEGFKiB0g5", "orgId": "00o102n9p4vX126Gp0g5", "trustedAppInstanceId": "0oa5kw6q51dFckBE70g5" } ] }, "InvalidRotateUse": { "summary": "Invalid use", "value": { "errorCauses": [ { "errorSummary": "Invalid value specified for key 'use' parameter" } ], "errorCode": "E0000001", "errorId": "oaeprak9qKHRlaWiclJ4oPJRQ", "errorLink": "E0000001", "errorSummary": "Api validation failed: rotateKeys" } }, "InvalidWellKnownAppleAppSiteRepresentationError": { "summary": "apple-app-site-association representation contains authsrv", "value": { "errorCauses": [ { "errorSummary": "Content must not include any `authsrv` customization." } ], "errorCode": "E0000001", "errorId": "sampleiCF-8D5rLW6myqiPItW", "errorLink": "E0000001", "errorSummary": "Api validation failed: representation" } }, "InvalidWellKnownArrayTypeError": { "summary": "Invalid content type for assetlinks.json", "value": { "errorCauses": [ { "errorSummary": "Content must be a JSON array of objects." } ], "errorCode": "E0000001", "errorId": "sampleiCF-8D5rLW6myqiPItW", "errorLink": "E0000001", "errorSummary": "Api validation failed: representation" } }, "InvalidWellKnownJsonTypeError": { "summary": "Invalid content type for apple-app-site-association and webauthn", "value": { "errorCauses": [ { "errorSummary": "Content must be a JSON object." } ], "errorCode": "E0000001", "errorId": "sampleiCF-8D5rLW6myqiPItW", "errorLink": "E0000001", "errorSummary": "Api validation failed: representation" } }, "InvalidWellKnownWebauthnRepresentationError": { "summary": "webauthn representation doesn't contain origins", "value": { "errorCauses": [ { "errorSummary": "Content must only contain `origins`." } ], "errorCode": "E0000001", "errorId": "sampleiCF-8D5rLW6myqiPItW", "errorLink": "E0000001", "errorSummary": "Api validation failed: representation" } }, "InvalidWellKnownWebauthnRepresentationOriginStringError": { "summary": "webauthn representation - `origins` must be array of strings", "value": { "errorCauses": [ { "errorSummary": "The `origins` must be an array of strings." } ], "errorCode": "E0000001", "errorId": "sampleiCF-8D5rLW6myqiPItW", "errorLink": "E0000001", "errorSummary": "Api validation failed: representation" } }, "KeyCredentialExample": { "summary": "Key credential example", "value": { "created": "2015-12-10T18:56:23.000Z", "e": "AQAB", "expiresAt": "2017-12-10T18:56:22.000Z", "kid": "SIMcCQNY3uwXoW3y0vf6VxiBb5n9pf8L2fK8d-FIbm4", "kty": "RSA", "lastUpdated": "2024-08-13T18:26:57.000Z", "n": "mkC6yAJVvFwUlmM9gKjb2d-YK5qHFt-mXSsbjWKKs4EfNm-BoQeeovBZtSACyaqLc8IYFTPEURFcbDQ9DkAL04uUIRD2gaHYY7uK0jsluEaXGq2RAIsmzAwNTzkiDw4q9pDL_q7n0f_SDt1TsMaMQayB6bU5jWsmqcWJ8MCRJ1aJMjZ16un5UVx51IIeCbe4QRDxEXGAvYNczsBoZxspDt28esSpq5W0dBFxcyGVudyl54Er3FzAguhgfMVjH-bUec9j2Tl40qDTktrYgYfxz9pfjm01Hl4WYP1YQxeETpSL7cQ5Ihz4jGDtHUEOcZ4GfJrPzrGpUrak8Qp5xcwCqQ", "use": "sig", "x5c": [ "MIIDqDCCApCgAwIBAgIGAVGNQFX5MA0GCSqGSIb3DQEBBQUAMIGUMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwET2t0YTEUMBIGA1UECwwLU1NPUHJvdmlkZXIxFTATBgNVBAMMDGJhbGFjb21wdGVzdDEcMBoGCSqGSIb3DQEJARYNaW5mb0Bva3RhLmNvbTAeFw0xNTEyMTAxODU1MjJaFw0xNzEyMTAxODU2MjJaMIGUMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwET2t0YTEUMBIGA1UECwwLU1NPUHJvdmlkZXIxFTATBgNVBAMMDGJhbGFjb21wdGVzdDEcMBoGCSqGSIb3DQEJARYNaW5mb0Bva3RhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJJjrcnI6cXBiXNq9YDgfYrQe2O5qEHG4MXP8Ue0sMeefFkFEHYHnHUeZCq6WTAGqR+1LFgOl+Eq9We5V+qNlGIfkFkQ3iHGBrIALKqLCd0Et76HicDiegz7j9DtN+lo0hG/gfcw5783L5g5xeQ7zVmCQMkFwoUA0uA3bsfUSrmfORHJL+EMNQT8XIXD8NkG4g6u7ylHVRTLgXbe+W/p04m3EP6l41xl+MhIpBaPxDsyUvcKCNwkZN3aZIin1O9Y4YJuDHxrM64/VtLLp0sC05iawAmfsLunF7rdJAkWUpPn+xkviyNQ3UpvwAYuDr+jKLUdh2reRnm1PezxMIXzBVMCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEARnFIjyitrCGbleFr3KeAwdOyeHiRmgeKupX5ZopgXtcseJoToUIinX5DVw2fVZPahqs0Q7/a0wcVnTRpw6946qZCwKd/PvZ1feVuVEA5Ui3+XvHuSH5xLp7NvYG1snNEvlbN3+NDUMlWj2NEbihowUBt9+UxTpQO3+N08q3aZk3hOZ+tHt+1Te7KEEL/4CM28GZ9MY7fSrS7MAgp1+ZXtn+kRlMrXnQ49qBda37brwDRqmSY9PwNMbev3r+9ZHwxr9W5wXW4Ev4C4xngA7RkVoyDbItSUho0I0M0u/LHuppclnXrw97xyO5Z883eIBvPVjfRcxsJxXJ8jx70ATDskw==" ], "x5t#S256\"": "5GOpy9CQVtfvBmu2T8BHvpKE4OGtC3BuS046t7p9pps" } }, "LinkIdPAppUserResponse": { "summary": "Linked IdP user", "value": { "_links": { "idp": { "href": "https://{yourOktaDomain}/api/v1/idps/0oa62b57p7c8PaGpU0h7" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oa62b57p7c8PaGpU0h7/users/00ub0oNGTSWTBKOLGLNR" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00ub0oNGTSWTBKOLGLNR" } }, "created": "2017-03-30T02:19:51.000Z", "externalId": "121749775026145", "id": "00ub0oNGTSWTBKOLGLNR", "lastUpdated": "2017-03-30T02:19:51.000Z" } }, "ListAllAgentPoolUpdatesResponse": { "summary": "List all agent pool updates", "value": [ { "_links": { "self": { "href": "/api/v1/agentPools/poolId1/updates" } }, "agentType": "AD", "agents": { "id": "a533eu8npxdZ60Mvf5s6", "isHidden": false, "isLatestGAedVersion": true, "lastConnection": 1750462090000, "latestGAedVersion": true, "name": "N079-H069", "operationalStatus": "OPERATIONAL", "poolId": "0oa3eu7ekG8tjbD9J5s6", "type": "AD", "updateMessage": "Queued for update.", "updateStatus": "Scheduled", "version": "3.20.0" }, "enabled": true, "id": "poolId1", "name": "testSchedule", "notifyAdmin": true, "schedule": { "cron": "0 1 * * THU", "duration": 420, "timezone": "America/Los_Angeles" }, "status": "Scheduled", "targetVersion": "3.20.0" } ] }, "ListAllAgentPoolsResponse": { "summary": "List all agent pools", "value": [ { "_links": { "self": { "href": "/api/v1/agentPools/poolId1" } }, "agents": { "active": true, "errorState": true, "id": "agentId1", "indicator": "green", "isHidden": false, "isLatestGAedVersion": false, "lastConnection": 1628263766000, "message": "Agent connection is live", "name": "WIN-region1A-dc", "operationalStatus": "OPERATIONAL", "poolId": "poolId1", "state": "ACTIVE", "supportAutoUpdate": true, "updateMessage": "Queued for update.", "upgradeRequired": false, "version": "3.18.0" }, "disruptedAgents": 0, "id": "poolId1", "inactiveAgents": 1, "name": "region1A.dc", "operationalStatus": "OPERATIONAL", "type": "AD" } ] }, "ListAllKeyCredentialsExample": { "summary": "List all key credentials example", "value": [ { "created": "2015-12-10T18:56:23.000Z", "e": "AQAB", "expiresAt": "2017-12-10T18:56:22.000Z", "kid": "SIMcCQNY3uwXoW3y0vf6VxiBb5n9pf8L2fK8d-FIbm4", "kty": "RSA", "lastUpdated": "2024-08-13T18:26:57.000Z", "n": "mkC6yAJVvFwUlmM9gKjb2d-YK5qHFt-mXSsbjWKKs4EfNm-BoQeeovBZtSACyaqLc8IYFTPEURFcbDQ9DkAL04uUIRD2gaHYY7uK0jsluEaXGq2RAIsmzAwNTzkiDw4q9pDL_q7n0f_SDt1TsMaMQayB6bU5jWsmqcWJ8MCRJ1aJMjZ16un5UVx51IIeCbe4QRDxEXGAvYNczsBoZxspDt28esSpq5W0dBFxcyGVudyl54Er3FzAguhgfMVjH-bUec9j2Tl40qDTktrYgYfxz9pfjm01Hl4WYP1YQxeETpSL7cQ5Ihz4jGDtHUEOcZ4GfJrPzrGpUrak8Qp5xcwCqQ", "use": "sig", "x5c": [ "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" ], "x5t#S256\"": "5GOpy9CQVtfvBmu2T8BHvpKE4OGtC3BuS046t7p9pps" }, { "created": "2015-12-10T18:55:35.000Z", "e": "AQAB", "expiresAt": "2045-01-23T02:15:23.000Z", "kid": "mXtzOtml09Dg1ZCeKxTRBo3KrQuBWFkJ5oxhVagjTzo", "kty": "RSA", "lastUpdated": "2024-08-13T18:26:57.000Z", "n": "htbi5H5MN_oYaKcZ8vlWRZn2oTrPY0v8_2Br_VZPJgJ57dCgguq5dDk1Me_ax-B3kjBPdXcW8wEoUFaU30spyVeQjZrdqsSvF0nMW4OzrMOIqrGLwCrAoDBS8tutfk5Y7qc-5xABzxgu4BjgSK5nWXbCt_UR0DzVTknotmMGeT8tAej8F6GAphLa0YhIxWT7Jy-y_pdANsiUPRiZBoLueGI0rrCqgYHIQVjNoj4-si105KCXbQuyYM9_Cd-dyyu5KJ4Ic0cOW61gpx4pnecMgSy8OX57FEd06W2hExBd49ah6jra2KFMeOGe3rkIXirdkofl1mBgeQ77ruKO1wW9Qw", "use": "sig", "x5c": [ "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" ], "x5t#S256\"": "7CCyXWwKzH4P6PoBP91B1S_iIZVzuGffVnUXu-BTYQQ" } ] }, "ListAllKeysResponse": { "summary": "List all keys response example", "value": [ { "created": "2022-08-22T16:34:33.000Z", "id": "HKY1i2htmXF5UNQhL0g4", "isUsed": "true", "keyId": "bb5bed7d-6e4d-488f-9c86-59b93a2bb3fb", "lastUpdated": "2022-08-22T16:34:33.000Z", "name": "My new key" }, { "created": "2022-08-31T18:09:58.000Z", "id": "HKY1p7jWLndGQV9M60g4", "isUsed": "false", "keyId": "7fbc27fd-e3df-4522-86bf-1930110256ad", "lastUpdated": "2022-08-31T18:09:58.000Z", "name": "Test key" } ] }, "ListAppGrantsEx": { "summary": "List all app grants example", "value": [ { "_embedded": { "scope": { "id": "okta.users.read" } }, "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/{appId}", "title": "Application name" }, "client": { "href": "https://{yourOktaDomain}/oauth2/v1/clients/{clientId}", "title": "Client name" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/apps/{appId}/grants/oag91n9ruw3dsaXzP0h6" } }, "clientId": "{clientId}", "created": "2023-02-21T16:54:00.000Z", "createdBy": { "id": "00u6eltha0nrSc47i0h7", "type": "User" }, "id": "oag91n9ruw3dsaXzP0h6", "issuer": "{yourOktaDomain}", "lastUpdated": "2023-02-21T16:54:00.000Z", "scopeId": "okta.users.read", "source": "ADMIN", "status": "ACTIVE" }, { "_embedded": { "scope": { "id": "okta.apps.manage" } }, "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/{appId}", "title": "Application name" }, "client": { "href": "https://{yourOktaDomain}/oauth2/v1/clients/{clientId}", "title": "Client name" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/apps/{appId}/grants/oaghm3sh9ukdkvDmO0h6" } }, "clientId": "{clientId}", "created": "2023-02-03T21:57:49.000Z", "createdBy": { "id": "00u6eltha0nrSc47i0h7", "type": "User" }, "id": "oaghm3sh9ukdkvDmO0h6", "issuer": "{yourOktaDomain}", "lastUpdated": "2023-02-03T21:57:49.000Z", "scopeId": "okta.apps.manage", "source": "ADMIN", "status": "ACTIVE" } ] }, "ListAppLinks": { "value": [ { "appAssignmentId": "0ua3omz7weMMMQJERBKY", "appInstanceId": "0oa3omz2i9XRNSRIHBZO", "appName": "google", "credentialsSetup": false, "hidden": false, "id": "00ub0oNGTSWTBKOLGLNR", "label": "Google Apps Mail", "linkUrl": "https://{yourOktaDomain}/home/google/0oa3omz2i9XRNSRIHBZO/50", "logoUrl": "https://{yourOktaDomain}/img/logos/google-mail.png", "sortOrder": 0 }, { "appAssignmentId": "0ua3omz7weMMMQJERBKY", "appInstanceId": "0oa3omz2i9XRNSRIHBZO", "appName": "google", "credentialsSetup": false, "hidden": false, "id": "00ub0oNGTSWTBKOLGLNR", "label": "Google Apps Calendar", "linkUrl": "https://{yourOktaDomain}/home/google/0oa3omz2i9XRNSRIHBZO/54", "logoUrl": "https://{yourOktaDomain}/img/logos/google-calendar.png", "sortOrder": 1 }, { "appAssignmentId": "0ua3omx46lYEZLPPRWBO", "appInstanceId": "0oa3ompioiQCSTOYXVBK", "appName": "boxnet", "credentialsSetup": false, "hidden": false, "id": "00ub0oNGTSWTBKOLGLNR", "label": "Box", "linkUrl": "https://{yourOktaDomain}/home/boxnet/0oa3ompioiQCSTOYXVBK/72", "logoUrl": "https://{yourOktaDomain}/img/logos/box.png", "sortOrder": 3 }, { "appAssignmentId": "0ua173qgj5VAVOBQMCVB", "appInstanceId": "0oa12ecnxtBQMKOXJSMF", "appName": "salesforce", "credentialsSetup": true, "hidden": false, "id": "00ub0oNGTSWTBKOLGLNR", "label": "Salesforce.com", "linkUrl": "https://{yourOktaDomain}/home/salesforce/0oa12ecnxtBQMKOXJSMF/46", "logoUrl": "https://{yourOktaDomain}/img/logos/salesforce_logo.png", "sortOrder": 2 } ] }, "ListAppServiceAccounts": { "summary": "List app service accounts", "value": [ { "containerGlobalName": "salesforce", "containerInstanceName": "salesforce-1", "containerOrn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:salesforce:0oa1gjh63g214q0Hq0g4", "created": "2024-04-04T15:56:05.000Z", "description": "This is for accessing salesforce Prod-1", "id": "a747a818-a4c4-4446-8a87-704216495a08", "lastUpdated": "2024-04-05T18:15:44.000Z", "name": "salesforce Prod-1 account", "ownerGroupIds": [ "00g57qp78yZT2XBA40g7" ], "ownerUserIds": [ "00u11s48P9zGW8yqm0g5" ], "status": "NO_ISSUES", "statusDetail": "ROTATED", "username": "testuser-salesforce-1@example.com" }, { "containerGlobalName": "salesforce", "containerInstanceName": "salesforce-5", "containerOrn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:salesforce:0oa1gjh63g214q0Hq0g4", "created": "2024-04-04T15:56:05.000Z", "description": "This is for accessing salesforce Prod-5", "id": "a747a818-a4c4-4446-8a87-704216495a09", "lastUpdated": "2024-04-05T18:15:44.000Z", "name": "salesforce Prod-5 account", "ownerGroupIds": [ "00g57qp78yZT2XBA40g7" ], "ownerUserIds": [ "00u11s48P9zGW8yqm0g5" ], "status": "NO_ISSUES", "statusDetail": "ROTATED", "username": "testuser-salesforce-5@example.com" } ] }, "ListAssocAuthServerResponse": { "summary": "List associated authorization servers", "value": [ { "_links": { "self": { "hints": { "allow": [ "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}" } }, "audiences": [ "https://api.resource.com" ], "created": "2023-05-17T22:25:57.000Z", "credentials": { "signing": { "kid": "WYQxoK4XAwGFn5Zw5AzLxFvqEKLP79BbsKmWeuc5TB4", "lastRotated": "2023-05-17T22:25:57.000Z", "nextRotation": "2023-08-15T22:25:57.000Z", "rotationMode": "DYNAMIC", "use": "sig" } }, "description": "Sample Authorization Server description", "id": "{authorizationServerId}", "issuer": "https://{yourOktaDomain}/oauth2/{authorizationServerId}", "issuerMode": "CUSTOM_URL", "lastUpdated": "2023-05-17T22:25:57.000Z", "name": "Sample Authorization Server", "status": "ACTIVE" } ] }, "ListAuthServersResponse": { "summary": "List all custom authorization servers in your org", "value": [ { "_links": { "claims": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/claims" }, "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/lifecycle/deactivate" }, "metadata": [ { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/{authorizationServerId}/.well-known/oauth-authorization-server", "name": "oauth-authorization-server" }, { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/{authorizationServerId}/.well-known/openid-configuration", "name": "openid-configuration" } ], "policies": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/policies" }, "rotateKey": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/credentials/lifecycle/keyRotate" }, "scopes": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/scopes" }, "self": { "hints": { "allow": [ "GET", "DELETE", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}" } }, "audiences": [ "https://api.resource.com" ], "created": "2023-05-17T22:25:57.000Z", "credentials": { "signing": { "kid": "WYQxoK4XAwGFn5Zw5AzLxFvqEKLP79BbsKmWeuc5TB4", "lastRotated": "2023-05-17T22:25:57.000Z", "nextRotation": "2023-08-15T22:25:57.000Z", "rotationMode": "AUTO" } }, "description": "Sample Authorization Server description", "id": "{authorizationServerId}", "issuer": "https://{yourOktaDomain}/oauth2/{authorizationServerId}", "issuerMode": "ORG_URL", "lastUpdated": "2023-05-17T22:25:57.000Z", "name": "Sample Authorization Server", "status": "ACTIVE" } ] }, "ListAuthorizationServerKeys": { "summary": "All credential keys", "value": [ { "_links": { "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/credentials/keys/RQ8DuhdxCczyMvy7GNJb4Ka3lQ99vrSo3oFBUiZjzzc" } }, "alg": "RS256", "e": "AQAB", "kid": "RQ8DuhdxCczyMvy7GNJb4Ka3lQ99vrSo3oFBUiZjzzc", "kty": "RSA", "n": "g0MirhrysJMPm_wK45jvMbbyanfhl-jmTBv0o69GeifPaISaXGv8LKn3-CyJvUJcjjeHE17KtumJWVxUDRzFqtIMZ1ctCZyIAuWO0n LKilg7_EIDXJrS8k14biqkPO1lXGFwtjo3zLHeFSLw6sWf-CEN9zv6Ff3IAXb-RMYpfh-bVrxIgWsWCxjLW-UKI3la-gs0nWHH2PJr5HLJuI JIOL5HLJuIJIOLWahqTnm_r1LSCSYr6N4C-fh--w2_BW8DzTHalBYe76bNr0d7AqtR4tGazmrvrc79Wa2bjyxmhhN1u9jSaZQqq-3VZEod8q3, WHH2PJ5v1LoXniJQ4a2W8nDVqb6h4E8MUKYOpljTfQ", "status": "ACTIVE", "use": "sig" }, { "_links": { "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/credentials/keys/Y3vBOdYT-l-I0j-gRQ26XjutSX00TeWiSguuDhW3ngo" } }, "alg": "RS256", "e": "AQAB", "kid": "Y3vBOdYT-l-I0j-gRQ26XjutSX00TeWiSguuDhW3ngo", "kty": "RSA", "n": "l1hZ_g2sgBE3oHvu34T-5XP18FYJWgtul_nRNg-5xra5ySkaXEOJUDRERUG0HrR42uqf9jYrUTwg9fp-SqqNIdHRaN8EwRSDRsKAwK 3 HIJ2NJfgmrrO2ABkeyUq6rzHxAumiKv1iLFpSawSIiTEBJERtUCDcjbbqyHVFuivIFgH8L37 - XDIDb0XG - R8DOoOHLJPTpsgH - rJe M5w96VIRZInsGC5OGWkFdtgk6OkbvVd7_TXcxLCpWeg1vlbmX - 0 TmG5yjSj7ek05txcpxIqYu - 7 FIGT0KKvXge_BOSEUlJpBhLKU28 OtsOnmc3NLIGXB - GeDiUZiBYQdPR - myB4ZoQ", "status": "NEXT", "use": "sig" }, { "_links": { "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/credentials/keys/h5Sr3LXcpQiQlAUVPdhrdLFoIvkhRTAVs_h39bQnxlU" } }, "alg": "RS256", "e": "AQAB", "kid": "h5Sr3LXcpQiQlAUVPdhrdLFoIvkhRTAVs_h39bQnxlU", "kty": "RSA", "n": "lC4ehVB6W0OCtNPnz8udYH9Ao83B6EKnHA5eTcMOap_lQZ-nKtS1lZwBj4wXRVc1XmS0d2OQFA1VMQ-dHLDE3CiGfsGqWbaiZFdW7U GLO1nAwfDdH6xp3xwpKOMewDXbAHJlXdYYAe2ap - CE9c5WLTUBU6JROuWcorHCNJisj1aExyiY5t3JQQVGpBz2oUIHo7NRzQoKimvp dMvMzcYnTlk1dhlG11b1GTkBclprm1BmOP7Ltjd7aEumOJWS67nKcAZzl48Zyg5KtV11V9F9dkGt25qHauqFKL7w3wu - DYhT0hmyFc wn - tXS6e6HQbfHhR_MQxysLtDGOk2ViWv8AQ", "status": "EXPIRED", "use": "sig" } ] }, "ListAuthorizationServerPolicies": { "summary": "List authorization server policies", "value": [ { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/policies/00palyaappA22DPkj0h7/lifecycle/deactivate" }, "rules": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/policies/00palyaappA22DPkj0h7/rules" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/policies/00palyaappA22DPkj0h7" } }, "conditions": { "clients": { "include": [ "ALL_CLIENTS" ] } }, "created": "2017-05-26T19:43:53.000Z", "description": "Vendor2 policy description", "id": "00palyaappA22DPkj0h7", "lastUpdated": "2017-06-07T15:28:17.000Z", "name": "Vendor2 Policy", "priority": 1, "status": "ACTIVE", "system": false, "type": "OAUTH_AUTHORIZATION_POLICY" } ] }, "ListAuthorizationServerPolicyRules": { "summary": "List authorization server policy rules", "value": [ { "_links": { "self": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/0prbsjfyl01zfSZ9K0h7/lifecycle/deactivate" }, "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/0prbsjfyl01zfSZ9K0h7" } }, "actions": { "token": { "accessTokenLifetimeMinutes": 60, "inlineHook": { "id": "cal4egvp1mbMldrYN0g7" }, "refreshTokenLifetimeMinutes": 0, "refreshTokenWindowMinutes": 10080 } }, "conditions": { "grantTypes": { "include": [ "implicit", "client_credentials", "authorization_code", "password" ] }, "people": { "groups": { "exclude": [], "include": [ "EVERYONE" ] }, "users": { "exclude": [], "include": [] } }, "scopes": { "include": [ "*" ] } }, "created": "2017-08-25T16:57:02.000Z", "id": "0prbsjfyl01zfSZ9K0h7", "lastUpdated": "2017-08-30T14:51:05.000Z", "name": "Default Policy Rule", "priority": 1, "status": "ACTIVE", "system": false, "type": "RESOURCE_ACCESS" } ] }, "ListBasicSMTPServer": { "summary": "List containing basic authentication SMTP server", "value": { "email-servers": [ { "alias": "CustomServer1", "authType": "BASIC_SMTP_AUTH", "enabled": true, "host": "smtp.example.com", "id": "ces7n3u7sSohfoaou0g1", "port": 587, "username": "user@example.com" } ] } }, "ListBrandsResponse": { "value": [ { "_links": { "emailDomain": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/email-domains/OeD114iNkrcN6aR680g4" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/bnd114iNkrcN6aR680g4" }, "themes": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/bnd114iNkrcN6aR680g4/themes" } }, "agreeToCustomPrivacyPolicy": false, "customPrivacyPolicyUrl": null, "defaultApp": { "appInstanceId": "0oa114iNkrcN6aR680g4", "appLinkName": null, "classicApplicationUri": null }, "emailDomainId": "OeD114iNkrcN6aR680g4", "id": "bnd114iNkrcN6aR680g4", "isDefault": true, "locale": "en", "name": "Okta Default", "removePoweredByOkta": false } ] }, "ListClientsResponse": { "summary": "List all client resources for which an authorization server has tokens", "value": [ { "_links": { "client": { "href": "https://{yourOktaDomain}/oauth2/v1/clients/{clientId}", "title": "My Web App" }, "tokens": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/clients/{clientId}/tokens" } }, "client_id": "{clientId}", "client_name": "My Web App", "client_uri": "null,", "logo_uri": "null," } ] }, "ListCustomTokenClaimsResponse": { "summary": "List all custom token claims for an authorization server", "value": [ { "_links": { "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/claims/{claimId}" } }, "alwaysIncludeInToken": true, "apiResourceId": null, "claimType": "RESOURCE", "conditions": { "scopes": [ "profile" ] }, "id": "{claimId}", "name": "sub", "status": "ACTIVE", "system": true, "value": "(appuser != null) ? appuser.userName : app.clientId", "valueType": "EXPRESSION" } ] }, "ListEmailCustomizationResponse": { "value": [ { "_links": { "preview": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/customizations/oel11u6DqUiMbQkpl0g4/preview" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/customizations/oel11u6DqUiMbQkpl0g4" }, "template": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation" }, "test": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/test" } }, "body": "
Hello, ${user.profile.firstName}. Click here to activate your account.", "created": "2021-11-09T20:38:10.000Z", "id": "oel11u6DqUiMbQkpl0g4", "isDefault": true, "language": "en", "lastUpdated": "2021-11-11T20:38:10.000Z", "subject": "Welcome to ${org.name}!" } ] }, "ListEmailTemplateResponse": { "value": [ { "_embedded": { "customizationCount": 0, "settings": { "_links": { "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/settings" }, "template": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation" } }, "recipients": "ALL_USERS" } }, "_links": { "customizations": { "hints": { "allow": [ "GET", "POST", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/customizations" }, "defaultContent": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/default-content" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation" }, "settings": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/settings" }, "test": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/test" } }, "name": "UserActivation" } ] }, "ListFactorsResults": { "summary": "List of enrolled factors for the specified user", "value": [ { "_links": { "questions": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/questions" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ufs2bysphxKODSZKWVCT" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" } }, "created": "2014-04-15T18:10:06.000Z", "factorType": "question", "id": "ufs2bysphxKODSZKWVCT", "lastUpdated": "2014-04-15T18:10:06.000Z", "profile": { "question": "favorite_art_piece", "questionText": "What is your favorite piece of art?" }, "provider": "OKTA", "status": "ACTIVE", "vendorName": "OKTA" }, { "_embedded": { "activation": { "encoding": "base32", "keyLength": 16, "sharedSecret": "HE64TMLL2IUZW2ZLB", "timeStep": 30 } }, "_links": { "next": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ostf2gsyictRQDSGTDZE/lifecycle/activate", "name": "activate" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/ostf2gsyictRQDSGTDZE" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" } }, "created": "2014-06-27T20:27:33.000Z", "factorType": "token:software:totp", "id": "ostf2gsyictRQDSGTDZE", "lastUpdated": "2014-06-27T20:27:33.000Z", "profile": { "credentialId": "dade.murphy@example.com" }, "provider": "OKTA", "status": "PENDING_ACTIVATION" }, { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/sms2gt8gzgEBPUWBIFHN" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL" }, "verify": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00u15s1KDETTQMQYABRL/factors/sms2gt8gzgEBPUWBIFHN/verify" } }, "created": "2014-06-27T20:27:26.000Z", "factorType": "sms", "id": "sms2gt8gzgEBPUWBIFHN", "lastUpdated": "2014-06-27T20:27:26.000Z", "profile": { "phoneNumber": "+1-555-415-1337" }, "provider": "OKTA", "status": "ACTIVE" } ] }, "ListFeatureDependenciesResponse": { "summary": "List all dependencies for a feature", "value": [ { "_links": { "dependencies": { "href": "https://{yourOktaDomain}/api/v1/features/ftrlBDFcGwYP2epXCGYn/dependencies" }, "dependents": { "href": "https://{yourOktaDomain}/api/v1/features/ftrlBDFcGwYP2epXCGYn/dependents" }, "self": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/features/ftrZooGoT8b41iWRiQs7" } }, "description": "Example feature description", "id": "ftrZooGoT8b41iWRiQs7", "name": "Example feature name", "stage": { "state": "OPEN", "value": "EA" }, "status": "ENABLED", "type": "self-service" } ] }, "ListFeatureDependentsResponse": { "summary": "List all feature dependents for the specified feature", "value": [ { "_links": { "dependencies": { "href": "https://{yourOktaDomain}/api/v1/features/ftrlBDFcGwYP2epXCGYn/dependencies" }, "dependents": { "href": "https://{yourOktaDomain}/api/v1/features/ftrlBDFcGwYP2epXCGYn/dependents" }, "self": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/features/ftrZooGoT8b41iWRiQs7" } }, "description": "Example feature description", "id": "ftrZooGoT8b41iWRiQs7", "name": "Example feature name", "stage": { "state": "OPEN", "value": "EA" }, "status": "ENABLED", "type": "self-service" } ] }, "ListFeaturesResponse": { "summary": "List all self-service features for your org", "value": [ { "_links": { "dependencies": { "href": "https://{yourOktaDomain}/api/v1/features/ftrlBDFcGwYP2epXCGYn/dependencies" }, "dependents": { "href": "https://{yourOktaDomain}/api/v1/features/ftrlBDFcGwYP2epXCGYn/dependents" }, "self": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/features/ftrZooGoT8b41iWRiQs7" } }, "description": "Example feature description", "id": "ftrZooGoT8b41iWRiQs7", "name": "Example feature name", "stage": { "state": "CLOSED", "value": "BETA" }, "status": "DISABLED", "type": "self-service" } ] }, "ListGroupPushMappingsResponse_Example": { "value": [ { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oa00000000000000000" }, "sourceGroup": { "href": "https://{yourOktaDomain}/api/v1/groups/00g00000000000000000" }, "targetGroup": { "href": "https://{yourOktaDomain}/api/v1/groups/00g00000000000000001" } }, "created": "2025-01-01T00:00:00Z", "errorSummary": "", "id": "gPm00000000000000000", "lastPush": "2025-01-01T00:00:00Z", "lastUpdated": "2025-01-01T00:00:00Z", "sourceGroupId": "00g00000000000000000", "status": "ACTIVE", "targetGroupId": "00g00000000000000001" }, { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oa00000000000000000" }, "sourceGroup": { "href": "https://{yourOktaDomain}/api/v1/groups/00g00000000000000002" }, "targetGroup": { "href": "https://{yourOktaDomain}/api/v1/groups/00g00000000000000003" } }, "created": "2025-01-02T00:00:00Z", "errorSummary": "", "id": "gPm00000000000000001", "lastPush": "2025-01-02T00:00:00Z", "lastUpdated": "2025-01-02T00:00:00Z", "sourceGroupId": "00g00000000000000002", "status": "INACTIVE", "targetGroupId": "00g00000000000000003" } ] }, "ListGroupPushMappingsResponse_ExampleWithActiveFilter": { "value": [ { "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oa00000000000000000" }, "sourceGroup": { "href": "https://{yourOktaDomain}/api/v1/groups/00g00000000000000000" }, "targetGroup": { "href": "https://{yourOktaDomain}/api/v1/groups/00g00000000000000001" } }, "created": "2025-01-01T00:00:00Z", "errorSummary": "", "id": "gPm00000000000000000", "lastPush": "2025-01-01T00:00:00Z", "lastUpdated": "2025-01-01T00:00:00Z", "sourceGroupId": "00g00000000000000000", "status": "ACTIVE", "targetGroupId": "00g00000000000000001" } ] }, "ListIdPUsersResponse": { "summary": "List of linked IdP users", "value": [ { "_links": { "idp": { "href": "https://{yourOktaDomain}/api/v1/idps/0oa4lb6lbtmH355Hx0h7" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oa4lb6lbtmH355Hx0h7/users/00u5cl9lo7nMjHjPr0h7" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00u5cl9lo7nMjHjPr0h7" } }, "created": "2015-11-03T19:10:11.000Z", "externalId": "109912936038778", "id": "00u5cl9lo7nMjHjPr0h7", "lastUpdated": "2015-11-03T19:11:49.000Z", "profile": { "displayName": "Carol Johnson", "email": "carol_johnson@tfbnw.net", "firstName": "Carol", "lastName": "Johnson", "middleName": "Lee", "profile": "https://www.facebook.com/app_scoped_user_id/109912936038778/" } } ] }, "ListInterclientAllowedAppsResponse": { "summary": "List interclient allowed apps example", "value": [ "0oa1elyw9EAkUNUrW0g5", "0oa5mihmA6vMpXcm50g5", "0oa89ks1irGAcYwXw0g5" ] }, "ListInterclientTargetAppsResponse": { "summary": "List interclient target apps", "value": [ "0oa1elyw9EAkUNUrW0g5", "0oa5mihmA6vMpXcm50g5", "0oa89ks1irGAcYwXw0g5" ] }, "ListLinkedObjects": { "summary": "List all linked object definitions", "value": [ { "_links": { "self": { "href": "http://your-subdomain.okta.com/api/v1/meta/schemas/user/linkedObjects/manager" } }, "associated": { "description": "Subordinate link property", "name": "subordinate", "title": "subordinate", "type": "USER" }, "primary": { "description": "Manager link property", "name": "manager", "title": "manager", "type": "USER" } } ] }, "ListLogs": { "summary": "List all System Log events", "value": [ { "actor": { "alternateId": "john.doe@example.com", "detailEntry": null, "displayName": "John Doe", "id": "00uttidj01jqL21aM1d6", "type": "User" }, "authenticationContext": { "authenticationProvider": null, "authenticationStep": 0, "credentialProvider": null, "credentialType": null, "externalSessionId": "idxBager62CSveUkTxvgRtonA", "interface": null, "issuer": null, "rootSessionId": "idxBager62CSveUkTxvgRtonA" }, "client": { "device": "Computer", "geographicalContext": { "city": "New York", "country": "United States", "geolocation": { "lat": 40.3157, "lon": -74.01 }, "postalCode": 10013, "state": "New York" }, "id": null, "ipAddress": "10.0.0.1", "userAgent": { "browser": "CHROME", "os": "Mac OS X", "rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" }, "zone": null }, "debugContext": { "debugData": { "requestId": "ab609228fe84ce59cdcbfa690bcce016", "requestUri": "/idp/idx/authenticators/poll", "url": "/idp/idx/authenticators/poll" } }, "device": { "device_integrator": null, "disk_encryption_type": "ALL_INTERNAL_VOLUMES", "id": "guofdhyjex1feOgbN1d9", "jailbreak": null, "managed": false, "name": "Mac15,6", "os_platform": "OSX", "os_version": "14.6.0", "registered": true, "screen_lock_type": "BIOMETRIC", "secure_hardware_present": true }, "displayMessage": "User login to Okta", "eventType": "user.session.start", "legacyEventType": "core.user_auth.login_success", "outcome": { "reason": null, "result": "SUCCESS" }, "published": "2024-08-13T15:58:20.353Z", "request": { "ipChain": [ { "geographicalContext": { "city": "New York", "country": "United States", "geolocation": { "lat": 40.3157, "lon": -74.01 }, "postalCode": 10013, "state": "New York" }, "ip": "10.0.0.1", "source": null, "version": "V4" } ] }, "securityContext": { "asNumber": 394089, "asOrg": "ASN 0000", "domain": null, "isProxy": false, "isp": "google" }, "severity": "INFO", "target": [ { "alternateId": "unknown", "detailEntry": null, "displayName": "Okta Verify", "id": "pfdfdhyjf0HMbkP2e1d7", "type": "AuthenticatorEnrollment" }, { "alternateId": "Okta Admin Console", "detailEntry": null, "displayName": "Okta Admin Console", "id": "0oatxlef9sQvvqInq5d6", "type": "AppInstance" } ], "transaction": { "detail": null, "id": "ab609228fe84ce59cdcbfa690bgce016", "type": "WEB" }, "uuid": "dc9fd3c0-598c-11ef-8478-2b7584bf8d5a", "version": 0 } ] }, "ListLogsWithAdditionalSecurityContext": { "summary": "List all System Log events with more security context", "value": { "actor": { "alternateId": "john.doe@example.com", "detailEntry": null, "displayName": "John Doe", "id": "00uttidj01jqL21aM1d6", "type": "User" }, "authenticationContext": { "authenticationProvider": null, "authenticationStep": 0, "credentialProvider": null, "credentialType": null, "externalSessionId": "idxBager62CSveUkTxvgRtonA", "interface": null, "issuer": null, "rootSessionId": "idxBager62CSveUkTxvgRtonA" }, "client": { "device": "Computer", "geographicalContext": { "city": "New York", "country": "United States", "geolocation": { "lat": 40.3157, "lon": -74.01 }, "postalCode": 10013, "state": "New York" }, "id": null, "ipAddress": "10.0.0.1", "userAgent": { "browser": "CHROME", "os": "Mac OS X", "rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" }, "zone": null }, "debugContext": { "debugData": { "requestId": "ab609228fe84ce59cdcbfa690bcce016", "requestUri": "/idp/idx/authenticators/poll", "url": "/idp/idx/authenticators/poll" } }, "device": { "device_integrator": null, "disk_encryption_type": "ALL_INTERNAL_VOLUMES", "id": "guofdhyjex1feOgbN1d9", "jailbreak": null, "managed": false, "name": "Mac15,6", "os_platform": "OSX", "os_version": "14.6.0", "registered": true, "screen_lock_type": "BIOMETRIC", "secure_hardware_present": true }, "displayMessage": "User login to Okta", "eventType": "user.session.start", "legacyEventType": "core.user_auth.login_success", "outcome": { "reason": null, "result": "SUCCESS" }, "published": "2024-08-13T15:58:20.353Z", "request": { "ipChain": [ { "geographicalContext": { "city": "New York", "country": "United States", "geolocation": { "lat": 40.3157, "lon": -74.01 }, "postalCode": 10013, "state": "New York" }, "ip": "10.0.0.1", "ipDetails": { "asNumber": 394089, "asOrg": "ASN 0000", "isp": "google" }, "source": null, "version": "V4" } ] }, "securityContext": { "asNumber": 394089, "asOrg": "ASN 0000", "botProtection": { "level": "LOW" }, "domain": null, "ipDetails": { "asNumber": 394089, "asOrg": "ASN 0000", "isp": "google" }, "isProxy": false, "isp": "google", "risk": { "detectionName": "Suspected Session Hijacking", "level": "HIGH", "reasons": [ "Anomalous Device" ] }, "userBehaviors": [ { "id": "bhv3pcdHYo3rVDL0w0g4", "name": "New Device", "result": "NEGATIVE" }, { "id": "bhvexm4UkQc71MgEw0g4", "name": "New Geo-Location", "result": "POSITIVE" } ] }, "severity": "INFO", "target": [ { "alternateId": "unknown", "detailEntry": null, "displayName": "Okta Verify", "id": "pfdfdhyjf0HMbkP2e1d7", "type": "AuthenticatorEnrollment" }, { "alternateId": "Okta Admin Console", "detailEntry": null, "displayName": "Okta Admin Console", "id": "0oatxlef9sQvvqInq5d6", "type": "AppInstance" } ], "transaction": { "detail": null, "id": "ab609228fe84ce59cdcbfa690bgce016", "type": "WEB" }, "uuid": "dc9fd3c0-598c-11ef-8478-2b7584bf8d5a", "version": 0 }, "x-okta-lifecycle": { "isGenerallyAvailable": true, "lifecycle": "GA" } }, "ListMappingsResponse": { "summary": "List all profile mappings response", "value": [ { "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/mappings/prm1k48weFSOnEUnw0g4" } }, "id": "prm1k47ghydIQOTBW0g4", "source": { "_links": { "schema": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/oscsbePhQ3yqt4cVv0g3" }, "self": { "href": "https://{yourOktaDomain}/api/v1/meta/types/user/otysbePhQ3yqt4cVv0g3" } }, "id": "otysbePhQ3yqt4cVv0g3", "name": "user", "type": "user" }, "target": { "_links": { "schema": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/apps/0oa1qmn4LZQQEH0wZ0g4/default" }, "self": { "href": "https://{yourOktaDomain}/api/v1/apps/0oa1qmn4LZQQEH0wZ0g4" } }, "id": "0oa1qmn4LZQQEH0wZ0g4", "name": "okta_org2org", "type": "appuser" } } ] }, "ListOAuth2ResourceServerJsonWebKeys": { "summary": "All OAuth2 Resource Server JSON Web Keys", "value": [ { "_links": { "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/resourceservercredentials/keys/RQ8DuhdxCczyMvy7GNJb4Ka3lQ99vrSo3oFBUiZjzzc" } }, "created": "2023-04-06T21:32:33.000Z", "e": "AQAB", "id": "apk40n33xfjbPaf6D0g5", "kid": "RQ8DuhdxCczyMvy7GNJb4Ka3lQ99vrSo3oFBUiZjzzc", "kty": "RSA", "lastUpdated": "2023-04-06T21:32:33.000Z", "n": "g0MirhrysJMPm_wK45jvMbbyanfhl-jmTBv0o69GeifPaISaXGv8LKn3-CyJvUJcjjeHE17KtumJWVxUDRzFqtIMZ1ctCZyIAuWO0n LKilg7_EIDXJrS8k14biqkPO1lXGFwtjo3zLHeFSLw6sWf-CEN9zv6Ff3IAXb-RMYpfh-bVrxIgWsWCxjLW-UKI3la-gs0nWHH2PJr5HLJuI JIOL5HLJuIJIOLWahqTnm_r1LSCSYr6N4C-fh--w2_BW8DzTHalBYe76bNr0d7AqtR4tGazmrvrc79Wa2bjyxmhhN1u9jSaZQqq-3VZEod8q3, WHH2PJ5v1LoXniJQ4a2W8nDVqb6h4E8MUKYOpljTfQ", "status": "ACTIVE", "use": "enc" }, { "_links": { "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/resourceservercredentials/keys/Y3vBOdYT-l-I0j-gRQ26XjutSX00TeWiSguuDhW3ngo" } }, "created": "2023-04-06T21:32:33.000Z", "e": "AQAB", "id": "apk33a45xfjbDfg6D0g5", "kid": "Y3vBOdYT-l-I0j-gRQ26XjutSX00TeWiSguuDhW3ngo", "kty": "RSA", "lastUpdated": "2023-04-06T21:32:33.000Z", "n": "l1hZ_g2sgBE3oHvu34T-5XP18FYJWgtul_nRNg-5xra5ySkaXEOJUDRERUG0HrR42uqf9jYrUTwg9fp-SqqNIdHRaN8EwRSDRsKAwK 3 HIJ2NJfgmrrO2ABkeyUq6rzHxAumiKv1iLFpSawSIiTEBJERtUCDcjbbqyHVFuivIFgH8L37 - XDIDb0XG - R8DOoOHLJPTpsgH - rJe M5w96VIRZInsGC5OGWkFdtgk6OkbvVd7_TXcxLCpWeg1vlbmX - 0 TmG5yjSj7ek05txcpxIqYu - 7 FIGT0KKvXge_BOSEUlJpBhLKU28 OtsOnmc3NLIGXB - GeDiUZiBYQdPR - myB4ZoQ", "status": "INACTIVE", "use": "enc" } ] }, "ListOAuthClientCredentialsServer": { "summary": "List containing OAuth 2.0 client credentials SMTP server", "value": { "email-servers": [ { "alias": "OAuthServer1", "authType": "OAUTH2_CLIENT_CREDENTIALS", "clientId": "oauth-client-id", "enabled": true, "host": "smtp.oauth.com", "id": "ces7n3u7sSohfoaou0g2", "port": 587, "scopes": [ "send_email" ], "tokenEndpoint": "https://oauth.example.com/token", "tokenEndpointAuthMethod": "CLIENT_SECRET_BASIC", "username": "user@oauth.com" } ] }, "x-okta-lifecycle": { "SKUs": [ "Okta Identity Engine" ], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "ListOAuthJWTServer": { "summary": "List containing OAuth 2.0 JWT bearer grant SMTP server", "value": { "email-servers": [ { "alias": "OAuthServer2", "audience": "https://smtp.oauth.com", "authType": "OAUTH2_JWT_BEARER_GRANT", "clientId": "oauth-client-id", "enabled": true, "host": "smtp.oauth.com", "id": "ces7n3u7sSohfoaou0g3", "issuer": "https://oauth.example.com", "port": 587, "scopes": [ "org.email.send" ], "signingAlgorithm": "RS256", "subject": "user@oauth.com", "tokenEndpoint": "https://oauth.example.com/token", "username": "user@oauth.com" } ] }, "x-okta-lifecycle": { "SKUs": [ "Okta Identity Engine" ], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "ListOfSecurityEventsProviderInstances": { "summary": "List of security events providers", "value": [ { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://example.okta.com/api/v1/security-events-providers/sse1qg25RpusjUP6m0g5/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://example.okta.com/api/v1/security-events-providers/sse1qg25RpusjUP6m0g5" } }, "id": "sse1qg25RpusjUP6m0g5", "name": "Security events provider with well-known URL", "settings": { "issuer": "Issuer", "jwks_url": "https://example.okta.com/jwks/path", "well_known_url": "https://example.okta.com/.well-known/ssf-configuration" }, "status": "ACTIVE", "type": "okta" }, { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://example.okta.com/api/v1/security-events-providers/sse1qu4fUtsoD12iF0g5/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://example.okta.com/api/v1/security-events-providers/sse1qu4fUtsoD12iF0g5" } }, "id": "sse1qu4fUtsoD12iF0g5", "name": "Security events provider with an issuer and a JWKS URL", "settings": { "issuer": "Issuer", "jwks_url": "https://example.okta.com/jwks/path" }, "status": "ACTIVE", "type": "okta" } ] }, "ListOktaManagedUserAccounts": { "summary": "List Okta managed user accounts", "value": [ { "created": "2023-04-04T15:56:05.000Z", "description": "Shared admin account for managing AD integrations", "email": "shr-ad-admin-01@example.com", "id": "d1b65a78-21ed-429b-8ea3-eec96f2748d6", "lastUpdated": "2023-05-05T18:15:44.000Z", "name": "AD Integrations Admin", "oktaUserId": "00u11s48P9zGW8yqm0g5", "ownerGroupIds": [ "00g57qp78yZT2XBA40g7" ], "ownerUserIds": [ "00u22t59Q0aHbNEXi1h8" ], "status": "NO_ISSUES", "statusDetail": "UNMANAGED", "username": "shr-ad-admin-01@example.com" }, { "created": "2023-06-15T10:30:00.000Z", "description": "Service account for SCIM provisioning", "email": "scim-service@example.com", "id": "e2c76b89-32fe-530c-9fb4-ffd07f3859e7", "lastUpdated": "2023-06-15T10:30:00.000Z", "name": "SCIM Integration Service Account", "oktaUserId": "00u33u60R1bIcOFYj2i9", "ownerGroupIds": [], "ownerUserIds": [ "00u22t59Q0aHbNEXi1h8" ], "status": "UNSECURED", "statusDetail": "STAGED", "username": "scim-service@example.com" } ] }, "ListRealmAssignmentsResponse": { "value": [ { "_links": { "self": { "href": "http://your-subdomain.okta.com/api/v1/realm-assignments/rul2jy7jLUlnO3ng00g4", "method": "GET", "rel": "self" } }, "actions": { "assignUserToRealm": { "realmId": "00g1b7rvh0xPLKXFf0g5" } }, "conditions": { "expression": { "value": "user.profile.role ==\\\"Manager\\\"" }, "profileSourceId": "0oa4enoRyjwSCy5hx0g4" }, "created": "2022-04-04T15:56:05.000Z", "domains": [ "atko.com", "user.com" ], "id": "rul2jy7jLUlnO3ng00g4", "isDefault": false, "lastUpdated": "2022-05-05T18:15:44.000Z", "name": "Realm Assignment 1", "priority": 0, "status": "ACTIVE" }, { "_links": { "self": { "href": "http://your-subdomain.okta.com/api/v1/realm-assignments/rul2jy7jLUlnO5ng00g4", "method": "GET", "rel": "self" } }, "actions": { "assignUserToRealm": { "realmId": "00g1b7rvh0xPLKXFf2g5" } }, "conditions": { "expression": { "value": "string" }, "profileSourceId": "0oa4enoRyjwSCy6hx0g4," }, "created": "2022-04-04T15:56:05.000Z", "domains": [ "atko.com", "user.com" ], "id": "rul2jy7jLUlnO5ng00g4", "isDefault": true, "lastUpdated": "2022-05-05T18:15:44.000Z", "name": "Catch-all", "priority": 499, "status": "ACTIVE" } ] }, "ListRealmAwareUsersResponse": { "summary": "List all users", "value": [ { "_links": { "self": { "href": "http://your-subdomain.okta.com/api/v1/users/00u118oQYT4TBGuay0g4" } }, "activated": null, "created": "2022-04-04T15:56:05.000Z", "credentials": { "password": {}, "provider": { "name": "OKTA", "type": "OKTA" } }, "id": "00u118oQYT4TBGuay0g4", "lastLogin": "2022-05-04T19:50:52.000Z", "lastUpdated": "2022-05-05T18:15:44.000Z", "passwordChanged": "2022-04-04T16:00:22.000Z", "profile": { "email": "alice.smith@example.com", "firstName": "Alice", "lastName": "Smith", "login": "alice.smith@example.com", "mobilePhone": null, "secondEmail": null }, "realmId": "guo1afiNtSnZYILxO0g4", "status": "ACTIVE", "statusChanged": null, "type": { "id": "oty1162QAr8hJjTaq0g4" } } ] }, "ListRealmsResponse": { "value": [ { "_links": { "self": { "href": "http://your-subdomain.okta.com/api/v1/realms/guox9jQ16k9V8IFEL0g3", "method": "GET", "rel": "self" } }, "created": "2022-04-04T15:56:05.000Z", "id": "guox9jQ16k9V8IFEL0g3", "isDefault": false, "lastUpdated": "2022-05-05T18:15:44.000Z", "profile": { "domains": [ "atko.com", "user.com" ], "name": "Car Co", "realmType": "PARTNER" } } ] }, "ListRefreshTokensClientsResponse": { "summary": "List all refresh tokens for a client", "value": [ { "_embedded": { "scopes": [ { "_links": { "scope": { "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/scopes/{scopeId}", "title": "openid" } }, "description": "Signals that a request is an OpenID request", "displayName": "openid", "id": "{scopeId}", "name": "openid" }, { "_links": { "scope": { "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/scopes/{scopeId}", "itle": "Keep you signed in to the app" } }, "description": "This keeps you signed in to the app, even when you aren't using it.", "displayName": "Keep you signed in to the app", "id": "{scopeID}", "name": "offline_access" } ] }, "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/{appId}", "title": "My Web App" }, "authorizationServer": { "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}", "title": "Authorization Server name" }, "client": { "href": "https://{yourOktaDomain}/oauth2/v1/clients/{clientId}", "title": "My Web App" }, "revoke": { "hints": { "allow": [ "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/clients/{clientId}/tokens/{tokenId}" }, "self": { "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/clients/{clientId}/tokens/{tokenId}" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/{userId}", "title": "Joe User" } }, "client_id": "{clientId}", "created": "2023-09-21T19:59:56.000Z", "expiresAt": "2023-09-28T20:00:38.000Z", "id": "{refreshTokenId}", "issuer": "https://{yourOktaDomain}/oauth2/{authorizationServerId}", "lastUpdated": "2023-09-21T20:00:38.000Z", "scopes": [ "offline_access", "openid" ], "status": "ACTIVE", "userId": "{userId}" } ] }, "ListRiskProviderResponse": { "summary": "List risk provider response example", "value": [ { "_links": { "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://{yourOktaDomain}/api/v1/risk/providers/00rp12r4skkjkjgsn" } }, "action": "log_only", "clientId": "00ckjsfgjkdkjdkkljjsd", "created": "2021-01-05 22:18:30", "id": "00rp12r4skkjkjgsn", "lastUpdated": "2021-01-05 22:18:30", "name": "Risk-Partner-X" } ] }, "ListServiceAccounts": { "summary": "List service accounts with mixed account types", "value": [ { "accountType": "APP_ACCOUNT", "created": "2023-04-04T15:56:05.000Z", "description": "This is for accessing AWS Prod-5", "details": { "appGlobalName": "AWS Account Federation", "appInstanceName": "AWS Prod-5", "credentials": { "username": "testuser@example.com" }, "oktaApplicationId": "aln1aqcs055ZRoizW0g8" }, "id": "a747a818-a4c4-4446-8a87-704216495a08", "lastUpdated": "2023-05-05T18:15:44.000Z", "name": "AWS Prod-5 account", "ownerGroupIds": [ "00g57qp78yZT2XBA40g7" ], "ownerUserIds": [ "00u11s48P9zGW8yqm0g5" ], "status": "NO_ISSUES", "statusDetail": "ROTATED" }, { "accountType": "OKTA_USER_ACCOUNT", "created": "2023-04-04T15:56:05.000Z", "description": "Shared admin account for managing AD integrations", "details": { "credentials": { "username": "shr-ad-admin-01@example.com" }, "email": "shr-ad-admin-01@example.com", "oktaUserId": "00u11s48P9zGW8yqm0g5" }, "id": "d1b65a78-21ed-429b-8ea3-eec96f2748d6", "lastUpdated": "2023-05-05T18:15:44.000Z", "name": "AD Integrations Admin", "ownerGroupIds": [ "00g57qp78yZT2XBA40g7" ], "ownerUserIds": [ "00u11s48P9zGW8yqm0g5" ], "status": "NO_ISSUES", "statusDetail": "UNMANAGED" } ] }, "ListSessionsResponseForGetSessions": { "value": [ { "created": "2022-04-04T15:56:05.000Z", "id": "aps1qqonvr2SZv6o70h8", "identitySourceId": "0oa3l6l6WK6h0R0QW0g4", "importType": "INCREMENTAL", "lastUpdated": "2022-05-05T16:15:44.000Z", "status": "CREATED" }, { "created": "2022-04-04T16:56:05.000Z", "id": "aps1quck606ngubVq0h8", "identitySourceId": "0oa3l6l6WK6h0R0QW0g4", "importType": "INCREMENTAL", "lastUpdated": "2022-05-05T17:15:44.000Z", "status": "TRIGGERED" }, { "created": "2022-04-04T17:56:05.000Z", "id": "aps1qzy2acb5jDlUc0h8", "identitySourceId": "0oa3l6l6WK6h0R0QW0g4", "importType": "INCREMENTAL", "lastUpdated": "2022-05-05T18:15:44.000Z", "status": "IN_PROGRESS" }, { "created": "2022-04-04T18:56:05.000Z", "id": "aps1qqne8c1JHkMdF0h8", "identitySourceId": "0oa3l6l6WK6h0R0QW0g4", "importType": "INCREMENTAL", "lastUpdated": "2022-05-05T19:15:44.000Z", "status": "EXPIRED" }, { "created": "2022-04-04T19:56:05.000Z", "id": "aps1qqonvr2SZv6o70h8", "identitySourceId": "0oa3l6l6WK6h0R0QW0g4", "importType": "INCREMENTAL", "lastUpdated": "2022-05-05T20:15:44.000Z", "status": "CLOSED" } ] }, "ListThemesResponse": { "value": [ { "backgroundImage": null, "emailTemplateTouchPointVariant": "OKTA_DEFAULT", "endUserDashboardTouchPointVariant": "OKTA_DEFAULT", "errorPageTouchPointVariant": "OKTA_DEFAULT", "favicon": "https://{yourOktaDomain}/favicon.ico", "id": "thdul904tTZ6kWVhP0g3", "loadingPageTouchPointVariant": "OKTA_DEFAULT", "logo": "https://{yourOktaDomain}/assets/img/logos/okta-logo.47066819ac7db5c13f4c431b2687cef6.png", "primaryColorContrastHex": "#000000", "primaryColorHex": "#1662dd", "secondaryColorContrastHex": "#000000", "secondaryColorHex": "#ebebed", "signInPageTouchPointVariant": "OKTA_DEFAULT" } ] }, "ListUISchemaResponse": { "summary": "Lists all UI schemas response", "value": [ { "_links": { "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://example.com/api/v1/meta/uischemas/uis4a7liocgcRgcxZ0g7" } }, "created": "2022-07-25T12:56:31.000Z", "id": "uis4a7liocgcRgcxZ0g7", "lastUpdated": "2022-07-26T11:53:59.000Z", "uiSchema": { "buttonLabel": "Submit", "elements": [ { "label": "First name", "options": { "format": "text" }, "scope": "#/properties/firstName", "type": "Control" }, { "label": "Last name", "options": { "format": "text" }, "scope": "#/properties/lastName", "type": "Control" }, { "label": "Email", "options": { "format": "text" }, "scope": "#/properties/email", "type": "Control" }, { "label": "Country code", "options": { "format": "select" }, "scope": "#/properties/countryCode", "type": "Control" }, { "label": "bool2", "options": { "format": "checkbox" }, "scope": "#/properties/bool2", "type": "Control" }, { "label": "date", "options": { "format": "text" }, "scope": "#/properties/date", "type": "Control" }, { "label": "enum", "options": { "format": "radio" }, "scope": "#/properties/enum", "type": "Control" } ], "label": "Sign in", "type": "Group" } }, { "_links": { "self": { "hints": { "allow": [ "GET", "PUT", "DELETE" ] }, "href": "https://example.com/api/v1/meta/uischemas/uis4abjqkkKXVPGAU0g7" } }, "created": "2022-07-25T12:56:31.000Z", "id": "uis4abjqkkKXVPGAU0g7", "lastUpdated": "2022-07-26T11:53:59.000Z", "uiSchema": { "buttonLabel": "Submit", "elements": [ { "label": "First name", "options": { "format": "text" }, "scope": "#/properties/firstName", "type": "Control" }, { "label": "Last name", "options": { "format": "text" }, "scope": "#/properties/lastName", "type": "Control" }, { "label": "Email", "options": { "format": "text" }, "scope": "#/properties/email", "type": "Control" }, { "label": "Country code", "options": { "format": "select" }, "scope": "#/properties/countryCode", "type": "Control" }, { "label": "bool2", "options": { "format": "checkbox" }, "scope": "#/properties/bool2", "type": "Control" }, { "label": "date", "scope": "#/properties/date", "type": "Control" }, { "label": "enum", "options": { "format": "radio" }, "scope": "#/properties/enum", "type": "Control" } ], "label": "Sign in 2", "type": "Group" } } ] }, "ListUserBlocksAnyDevicesResponse": { "value": [ { "appliesTo": "ANY_DEVICES", "type": "DEVICE_BASED" } ] }, "ListUserBlocksUnknownDevicesResponse": { "value": [ { "appliesTo": "UNKNOWN_DEVICES", "type": "DEVICE_BASED" } ] }, "ListUserClients": { "value": [ { "_links": { "grants": { "href": "https://{yourOktaDomain}/api/v1/users/00u5t60iloOHN9pBi0h7/clients/0oabskvc6442nkvQO0h7/grants" }, "tokens": { "href": "https://{yourOktaDomain}/api/v1/users/00u5t60iloOHN9pBi0h7/clients/0oabskvc6442nkvQO0h7/tokens" } }, "client_id": "0oabskvc6442nkvQO0h7", "client_name": "My App", "client_uri": null, "logo_uri": null } ] }, "ListUserGroups": { "value": [ { "id": "0gabcd1234", "profile": { "description": "Users can access cloud apps", "name": "Cloud app users" } }, { "id": "0gefgh5678", "profile": { "description": "Users can access internal apps", "name": "Internal app users" } } ] }, "ListUsersFieldsResponse": { "description": "Response for query fields=status,profile:(firstName,city)", "summary": "List all users with API projections", "value": [ { "id": "00u1xke1apZnmHgpB1d7", "profile": { "city": "Chicago", "firstName": "Alice" }, "status": "ACTIVE" }, { "id": "00u269cmneNMFHCH51d7", "profile": { "ListUsersResponse": null, "city": "New York", "firstName": "Bob" }, "status": "ACTIVE" } ] }, "ListUsersFilterResponse": { "description": "Filtered response with filter=status+eq%22LOCKED_OUT%22", "summary": "List all users with a filter", "value": [ { "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u3m5wrdPjJYUFb81d6" } }, "activated": "2020-10-22T15:15:30.000Z", "created": "2020-10-22T15:15:30.000Z", "credentials": { "emails": [ { "status": "VERIFIED", "type": "PRIMARY", "value": "johntest@example.com" } ], "password": {}, "provider": { "name": "IMPORT", "type": "IMPORT" } }, "id": "00u3m5wrdPjJYUFb81d6", "lastLogin": null, "lastUpdated": "2020-10-22T16:09:13.000Z", "passwordChanged": "2020-10-22T15:15:30.000Z", "profile": { "email": "johnrichards@example.com", "firstName": "John", "lastName": "Richards", "login": "johnrichards@example.com", "mobilePhone": null, "secondEmail": null }, "status": "LOCKED_OUT", "statusChanged": "2020-10-22T16:09:13.000Z", "type": { "id": "oty2di92xFgQTiKEJ1d6" } } ] }, "ListUsersQResponse": { "description": "Response for query q=john", "summary": "Find a user (q)", "value": [ { "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u3ojhmm3cCa3a221d7" } }, "activated": "2022-05-13T20:05:41.000Z", "created": "2022-05-13T20:05:39.000Z", "credentials": { "emails": [ { "status": "VERIFIED", "type": "PRIMARY", "value": "tony.johnson@example.com" } ], "password": {}, "provider": { "name": "OKTA", "type": "OKTA" } }, "id": "00u3ojhmm3cCa3a221d7", "lastLogin": null, "lastUpdated": "2022-05-13T20:05:41.000Z", "passwordChanged": "2022-05-13T20:05:41.000Z", "profile": { "email": "tony.johnson@example.com", "firstName": "Tony", "lastName": "Johnson", "login": "tony.johnson@example.com", "mobilePhone": null, "secondEmail": null }, "status": "ACTIVE", "statusChanged": "2022-05-13T20:05:41.000Z", "type": { "id": "oty2di92xFgQTiKEJ1d6" } }, { "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u3m5wrdPjJYUFb81d6" } }, "activated": "2020-10-22T15:15:30.000Z", "created": "2020-10-22T15:15:30.000Z", "credentials": { "emails": [ { "status": "VERIFIED", "type": "PRIMARY", "value": "johnmclean@example.com" } ], "password": {}, "provider": { "name": "IMPORT", "type": "IMPORT" } }, "id": "00u3m5wrdPjJYUFb81d6", "lastLogin": null, "lastUpdated": "2020-10-22T16:09:13.000Z", "passwordChanged": "2020-10-22T15:15:30.000Z", "profile": { "email": "johnmclean@example.com", "firstName": "John", "lastName": "Mclean", "login": "johnmclean@example.com", "mobilePhone": null, "secondEmail": null }, "status": "LOCKED_OUT", "statusChanged": "2020-10-22T16:09:13.000Z", "type": { "id": "oty2di92xFgQTiKEJ1d6" } }, { "_links": { "self": { "href": "https://{yourOktaDomain}/api/v1/users/00u3ojdzgjrAhuYGg1d7" } }, "activated": "2022-05-13T20:06:22.000Z", "created": "2022-05-13T20:06:20.000Z", "credentials": { "emails": [ { "status": "VERIFIED", "type": "PRIMARY", "value": "john.j.phillips@example.com" } ], "password": {}, "provider": { "name": "OKTA", "type": "OKTA" } }, "id": "00u3ojdzgjrAhuYGg1d7", "lastLogin": null, "lastUpdated": "2022-05-13T20:06:22.000Z", "passwordChanged": "2022-05-13T20:06:21.000Z", "profile": { "email": "john.j.phillips@example.com", "firstName": "Jack", "lastName": "Phillips", "login": "john.j.phillips@example.com", "mobilePhone": null, "secondEmail": null }, "status": "ACTIVE", "statusChanged": "2022-05-13T20:06:22.000Z", "type": { "id": "oty2di92xFgQTiKEJ1d6" } } ] }, "ListUsersResponse": { "summary": "List all users", "value": [ { "_links": { "self": { "href": "http://your-subdomain.okta.com/api/v1/users/00u118oQYT4TBGuay0g4" } }, "activated": null, "created": "2022-04-04T15:56:05.000Z", "credentials": { "password": {}, "provider": { "name": "OKTA", "type": "OKTA" } }, "id": "00u118oQYT4TBTemp0g4", "lastLogin": "2022-05-04T19:50:52.000Z", "lastUpdated": "2022-05-05T18:15:44.000Z", "passwordChanged": "2022-04-04T16:00:22.000Z", "profile": { "email": "alice.smith@example.com", "firstName": "Alice", "lastName": "Smith", "login": "alice.smith@example.com", "mobilePhone": null, "secondEmail": null }, "status": "ACTIVE", "statusChanged": null, "type": { "id": "oty1162QAr8hJjTaq0g4" } } ] }, "ListUsersSearchResponse": { "description": "Response for search=profile.department%20eq%20%22Engineering%22", "summary": "List all users with search", "value": [ { "activated": null, "created": "2021-11-17T16:11:16.000Z", "id": "00u1xke1apZnmHgpB1d7", "lastLogin": null, "lastUpdated": "2022-05-24T15:39:09.000Z", "passwordChanged": null, "profile": { "department": "Engineering", "email": "ben.richler@example.com", "firstName": "Ben", "lastName": "Richler", "login": "ben.richler@example.com", "mobilePhone": null, "secondEmail": "" }, "status": "STAGED", "statusChanged": null, "type": { "id": "oty2di92xFgQTiKEJ1d6" } }, { "activated": null, "created": "2021-12-17T15:16:55.000Z", "id": "00u269cmneNMFHCH51d7", "lastLogin": null, "lastUpdated": "2022-05-24T15:38:04.000Z", "passwordChanged": "2021-12-17T15:16:56.000Z", "profile": { "department": "Engineering", "email": "janice.benson@gmail.com", "firstName": "Janice", "lastName": "Benson", "login": "janice.benson@gmail.com", "mobilePhone": null, "secondEmail": null }, "status": "PROVISIONED", "statusChanged": null, "type": { "id": "oty2di92xFgQTiKEJ1d6" } } ] }, "ListYubikeyOptTokensResponse": { "summary": "List YubiKey OTP token response", "value": [ { "_links": { "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/org/factors/yubikey_token/tokens/ykkwcx13nrDq8g4oy0g3" } }, "created": "2020-01-14T21:53:09.000Z", "id": "ykkwcx13nrDq8g4oy0g3", "lastUpdated": "2020-01-14T21:53:09.000Z", "lastVerified": "2020-01-14T21:53:06.000Z", "profile": { "serial": "000003632071" }, "status": "UNASSIGNED" }, { "_links": { "deactivate": { "hints": { "allow": [ "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00uu0x8sxTr9HcHOo0g3/factors/ykfxduQAhl89YyPrV0g3" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/org/factors/yubikey_token/tokens/ykkxdtCA1fKVxyu6R0g3" }, "user": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/users/00uu0x8sxTr9HcHOo0g3" } }, "activated": "2020-06-09T23:47:29.000Z", "created": "2020-06-09T23:42:05.000Z", "id": "ykkxdtCA1fKVxyu6R0g3", "lastUpdated": "2020-06-09T23:47:29.000Z", "lastVerified": "2020-06-09T23:47:29.000Z", "profile": { "serial": "000009508427" }, "status": "ACTIVE" } ] }, "ListsAllUserTypes": { "summary": "Lists all user types", "value": [ { "_links": { "schema": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/oscz9fj2jMiRBC1ZT1d6" }, "self": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/oscz9fj2jMiRBC1ZT1d6" } }, "created": "2021-07-05T20:40:38.000Z", "createdBy": "sprz9fj1ycBcsgopy1d6", "default": false, "description": "A new custom user type", "displayName": "New user type", "id": "otyfnly5cQjJT9PnR0g4", "lastUpdated": "2021-07-05T20:40:38.000Z", "lastUpdatedBy": "sprz9fj1ycBcsgopy1d6", "name": "newUserType" }, { "_links": { "schema": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/oscz9fj2jMiRBC1ZT1d6" }, "self": { "href": "https://{yourOktaDomain}/api/v1/meta/schemas/user/oscz9fj2jMiRBC1ZT1d6" } }, "created": "2021-07-05T20:40:38.000Z", "createdBy": "sprz9fj1ycBcsgopy1d6", "default": true, "description": "Okta user profile template with default permission settings", "displayName": "User", "id": "otyz9fj2jMiRBC1ZT1d6", "lastUpdated": "2021-07-05T20:40:38.000Z", "lastUpdatedBy": "sprz9fj1ycBcsgopy1d6", "name": "user" } ] }, "ListsOwnerOneResponse": { "summary": "Lists a response with one owner", "value": [ { "displayName": "Product & Engineering", "id": "00g1gae1k0znUcLuU0h8", "lastUpdated": "2023-03-29 18:18:37.0", "originId": "null", "originType": "OKTA_DIRECTORY", "resolved": true, "type": "GROUP" } ] }, "ListsOwnersMultipleResponse": { "summary": "Lists a response with multiple owners", "value": [ { "displayName": "Mabel Mora", "id": "00u1cmbqjkkmFXeqb0h8", "lastUpdated": "2023-03-29T18:30:58.000Z", "originId": "null", "originType": "OKTA_DIRECTORY", "resolved": true, "type": "USER" }, { "displayName": "Cinda Canning", "id": "00u1cmc52x5B86cnZ0h8", "lastUpdated": "2023-03-29T18:30:55.000Z", "originId": "null", "originType": "OKTA_DIRECTORY", "resolved": true, "type": "USER" } ] }, "LogStreamActivateResponse": { "summary": "Activate log stream response", "value": { "_links": { "deactivate": { "href": "http://{yourOktaDomain}/api/v1/logStreams/0oa1orqUGCIoCGNxf0g4/lifecycle/deactivate", "method": "POST" }, "self": { "href": "http://{yourOktaDomain}/api/v1/logStreams/0oa1orqUGCIoCGNxf0g4", "method": "GET" } }, "created": "2023-03-24T21:02:43.000Z", "id": "0oa1orqUGCIoCGNxf0g4", "lastUpdated": "2023-03-24T21:22:43.000Z", "name": "Example AWS EventBridge", "settings": { "accountId": "123456789012", "eventSourceName": "your-event-source-name", "region": "us-east-2" }, "status": "ACTIVE", "type": "aws_eventbridge" } }, "LogStreamDeactivateResponse": { "summary": "Deactivate log stream response", "value": { "_links": { "activate": { "href": "http://{yourOktaDomain}/api/v1/logStreams/0oa7agphh5FT7H521d7/lifecycle/activate", "method": "POST" }, "self": { "href": "http://{yourOktaDomain}/api/v1/logStreams/0oa7agphh5FT7H521d7", "method": "GET" } }, "created": "2023-03-24T21:15:13.000Z", "id": "0oa7agphh5FT7H521d7", "lastUpdated": "2023-03-24T21:23:00.000Z", "name": "Splunk Cloud Example", "settings": { "edition": "aws", "host": "okexample.splunkcloud.com" }, "status": "INACTIVE", "type": "splunk_cloud_logstreaming" } }, "LogStreamGetAllResponse": { "summary": "Lists all log streams", "value": [ { "_links": { "deactivate": { "href": "http://{yourOktaDomain}/api/v1/logStreams/0oa1orqUGCIoCGNxf0g4/lifecycle/deactivate", "method": "POST" }, "self": { "href": "http://{yourOktaDomain}/api/v1/logStreams/0oa1orqUGCIoCGNxf0g4", "method": "GET" } }, "created": "2023-03-24T21:02:43.000Z", "id": "0oa1orqUGCIoCGNxf0g4", "lastUpdated": "2023-03-24T21:02:43.000Z", "name": "Example AWS EventBridge", "settings": { "accountId": "123456789012", "eventSourceName": "your-event-source-name", "region": "us-east-2" }, "status": "ACTIVE", "type": "aws_eventbridge" } ] }, "LogStreamPostRequest": { "summary": "Create an AWS EventBridge log stream", "value": { "name": "Example AWS EventBridge", "settings": { "accountId": "123456789012", "eventSourceName": "your-event-source-name", "region": "us-east-2" }, "type": "aws_eventbridge" } }, "LogStreamPostResponse": { "summary": "AWS EventBridge log stream response", "value": { "_links": { "deactivate": { "href": "http://{yourOktaDomain}/api/v1/logStreams/0oa1orqUGCIoCGNxf0g4/lifecycle/deactivate", "method": "POST" }, "self": { "href": "http://{yourOktaDomain}/api/v1/logStreams/0oa1orqUGCIoCGNxf0g4", "method": "GET" } }, "created": "2023-03-24T21:02:43.000Z", "id": "0oa1orqUGCIoCGNxf0g4", "lastUpdated": "2023-03-24T21:02:43.000Z", "name": "Example AWS EventBridge", "settings": { "accountId": "123456789012", "eventSourceName": "your-event-source-name", "region": "us-east-2" }, "status": "ACTIVE", "type": "aws_eventbridge" } }, "LogStreamPutRequest": { "summary": "Replace AWS EventBridge name", "value": { "name": "Updated AWS EventBridge", "settings": { "accountId": "123456789012", "eventSourceName": "your-event-source-name", "region": "us-east-2" }, "type": "aws_eventbridge" } }, "LogStreamPutResponse": { "summary": "Replace AWS EventBridge name response", "value": { "_links": { "deactivate": { "href": "http://{yourOktaDomain}/api/v1/logStreams/0oa1orqUGCIoCGNxf0g4/lifecycle/deactivate", "method": "POST" }, "self": { "href": "http://{yourOktaDomain}/api/v1/logStreams/0oa1orqUGCIoCGNxf0g4", "method": "GET" } }, "created": "2023-03-24T21:02:43.000Z", "id": "0oa1orqUGCIoCGNxf0g4", "lastUpdated": "2023-03-24T21:12:43.000Z", "name": "Updated AWS EventBridge", "settings": { "accountId": "123456789012", "eventSourceName": "your-event-source-name", "region": "us-east-2" }, "status": "ACTIVE", "type": "aws_eventbridge" } }, "LogStreamSchemaAws": { "value": { "$id": "http://{yourOktaDomain}/api/v1/meta/schemas/logStream/aws_eventbridge", "$schema": "https://json-schema.org/draft/2020-12/schema", "errorMessage": { "properties": { "name": "Name can't exceed 100 characters." } }, "properties": { "name": { "description": "A name for this log stream in Okta", "pattern": "^.{1,100}$", "title": "Name", "type": "string", "writeOnce": false }, "settings": { "description": "Configuration properties specific to AWS EventBridge", "errorMessage": { "properties": { "accountId": "Account number must be 12 digits.", "eventSourceName": "Event source name can use numbers, letters, the symbols \".\", \"-\" or \"_\". It must use fewer than 76 characters." } }, "properties": { "accountId": { "description": "Your Amazon AWS Account ID.", "pattern": "^\\d{12}$", "title": "AWS Account ID", "type": "string", "writeOnce": true }, "eventSourceName": { "description": "An alphanumeric name (no spaces) to identify this event source in AWS EventBridge.", "pattern": "^[\\.\\-_A-Za-z0-9]{1,75}$", "title": "AWS Event Source Name", "type": "string", "writeOnce": true }, "region": { "description": "The destination AWS region for your system log events.", "oneOf": [ { "const": "us-east-2", "title": "US East (Ohio)" }, { "const": "us-east-1", "title": "US East (N. Virginia)" }, { "const": "us-west-1", "title": "US West (N. California)" }, { "const": "us-west-2", "title": "US West (Oregon)" }, { "const": "ca-central-1", "title": "Canada (Central)" }, { "const": "eu-central-1", "title": "Europe (Frankfurt)" }, { "const": "eu-west-1", "title": "Europe (Ireland)" }, { "const": "eu-west-2", "title": "Europe (London)" }, { "const": "eu-west-3", "title": "Europe (Paris)" }, { "const": "eu-south-1", "title": "Europe (Milan)" }, { "const": "eu-north-1", "title": "Europe (Stockholm)" } ], "title": "AWS Region", "type": "string", "writeOnce": true } }, "required": [ "eventSourceName", "accountId", "region" ], "type": "object" } }, "required": [ "name", "settings" ], "title": "AWS EventBridge", "type": "object" } }, "LogStreamSchemaList": { "value": [ { "$id": "http://{yourOktaDomain}/api/v1/meta/schemas/logStream/aws_eventbridge", "$schema": "https://json-schema.org/draft/2020-12/schema", "errorMessage": { "properties": { "name": "Name can't exceed 100 characters." } }, "properties": { "name": { "description": "A name for this log stream in Okta", "pattern": "^.{1,100}$", "title": "Name", "type": "string", "writeOnce": false }, "settings": { "description": "Configuration properties specific to AWS EventBridge", "errorMessage": { "properties": { "accountId": "Account number must be 12 digits.", "eventSourceName": "Event source name can use numbers, letters, the symbols \".\", \"-\" or \"_\". It must use fewer than 76 characters." } }, "properties": { "accountId": { "description": "Your Amazon AWS Account ID.", "pattern": "^\\d{12}$", "title": "AWS Account ID", "type": "string", "writeOnce": true }, "eventSourceName": { "description": "An alphanumeric name (no spaces) to identify this event source in AWS EventBridge.", "pattern": "^[\\.\\-_A-Za-z0-9]{1,75}$", "title": "AWS Event Source Name", "type": "string", "writeOnce": true }, "region": { "description": "The destination AWS region for your system log events.", "oneOf": [ { "const": "us-east-2", "title": "US East (Ohio)" }, { "const": "us-east-1", "title": "US East (N. Virginia)" }, { "const": "us-west-1", "title": "US West (N. California)" }, { "const": "us-west-2", "title": "US West (Oregon)" }, { "const": "ca-central-1", "title": "Canada (Central)" }, { "const": "eu-central-1", "title": "Europe (Frankfurt)" }, { "const": "eu-west-1", "title": "Europe (Ireland)" }, { "const": "eu-west-2", "title": "Europe (London)" }, { "const": "eu-west-3", "title": "Europe (Paris)" }, { "const": "eu-south-1", "title": "Europe (Milan)" }, { "const": "eu-north-1", "title": "Europe (Stockholm)" } ], "title": "AWS Region", "type": "string", "writeOnce": true } }, "required": [ "eventSourceName", "accountId", "region" ], "type": "object" } }, "required": [ "name", "settings" ], "title": "AWS EventBridge", "type": "object" }, { "$schema": "https://json-schema.org/draft/2020-12/schema", "errorMessage": { "properties": { "name": "Name can't exceed 100 characters." } }, "id": "http://{yourOktaDomain}/api/v1/meta/schemas/logStream/splunk_cloud_logstreaming", "properties": { "name": { "description": "A name for this log stream in Okta", "pattern": "^.{1,100}$", "title": "Name", "type": "string", "writeOnce": false }, "settings": { "description": "Configuration properties specific to Splunk Cloud", "errorMessage": { "properties": { "host": "Host should be a domain without http or https. For example: acme.splunkcloud.com" } }, "properties": { "host": { "description": "The domain for your Splunk Cloud instance without http or https. For example: acme.splunkcloud.com", "pattern": "^([a-z0-9]+(-[a-z0-9]+)*){1,100}\\.splunkcloud(gc|fed)?\\.com$", "title": "Host", "type": "string", "writeOnce": false }, "token": { "description": "The token from your Splunk Cloud HTTP Event Collector (HEC).", "pattern": "[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}", "title": "HEC Token", "type": "string", "writeOnce": false } }, "required": [ "host", "token" ], "type": "object" } }, "required": [ "name", "settings" ], "title": "Splunk Cloud", "type": "object" } ] }, "LogStreamSchemaSplunk": { "value": { "$schema": "https://json-schema.org/draft/2020-12/schema", "errorMessage": { "properties": { "name": "Name can't exceed 100 characters." } }, "id": "http://{yourOktaDomain}/api/v1/meta/schemas/logStream/splunk_cloud_logstreaming", "properties": { "name": { "description": "A name for this log stream in Okta", "pattern": "^.{1,100}$", "title": "Name", "type": "string", "writeOnce": false }, "settings": { "description": "Configuration properties specific to Splunk Cloud", "errorMessage": { "properties": { "host": "Host should be a domain without http or https. For example: acme.splunkcloud.com" } }, "properties": { "host": { "description": "The domain for your Splunk Cloud instance without http or https. For example: acme.splunkcloud.com", "pattern": "^([a-z0-9]+(-[a-z0-9]+)*){1,100}\\.splunkcloud(gc|fed)?\\.com$", "title": "Host", "type": "string", "writeOnce": false }, "token": { "description": "The token from your Splunk Cloud HTTP Event Collector (HEC).", "pattern": "[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}", "title": "HEC Token", "type": "string", "writeOnce": false } }, "required": [ "host", "token" ], "type": "object" } }, "required": [ "name", "settings" ], "title": "Splunk Cloud", "type": "object" } }, "LogTargetChangeDetails": { "summary": "Example of the `changeDetails` property on the target", "value": { "from": { "vpnLocationOptions": "DISABLED", "vpnSettingsZones": { "exclude": null, "include": null } }, "to": { "message": "You must a use VPN to connect to this application", "vpnLocationOptions": "ZONE", "vpnSettingsZones": { "exclude": null, "include": [ "ALL_ZONES" ] } } } }, "MacOSOSAccountListResponse": { "summary": "List of macOS accounts", "value": [ { "_embedded": { "accountLinkedEnrollments": [ { "_embedded": { "lastAuthenticatedOn": "2026-04-09T17:22:56.000Z" }, "created": "2026-01-19T17:22:30.000Z", "id": "ukp1fxtdiJkUQiX220g5", "lastUpdated": "2026-01-19T17:22:30.000Z", "profile": { "authenticationMethod": "PASSWORD" }, "status": "ACTIVE", "type": "platform_sso" } ], "users": [ { "id": "00u1fxs5JcdX9jsfc0g5", "profile": { "email": "carmel.sonne@okta.com", "firstName": "Carmel", "lastName": "Sonne", "login": "carmel.sonne@okta.com" }, "status": "ACTIVE" } ] }, "_links": { "device": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7JHHhjXrMK0g4" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7JHHhjXrMK0g4/os-accounts/dao3qgkIEKjhNZudR0g4" } }, "created": "2026-01-19T17:22:30.000Z", "deviceId": "guo4a5u7JHHhjXrMK0g4", "id": "dao3qgkIEKjhNZudR0g4", "lastSeenAt": "2026-04-09T17:22:56.000Z", "lastUpdated": "2026-01-19T17:22:30.000Z", "platform": "MACOS", "profile": { "accountUuid": "4ac29c85-d847-4492-96cb-46e337170c33", "fullName": "Carmel Sonne", "type": "MACOS", "username": "carmel.sonne" }, "resourceAlternateId": null, "resourceDisplayName": { "sensitive": false, "value": "Carmel Sonne" }, "resourceId": "dao3qgkIEKjhNZudR0g4", "resourceType": "DOSAccount", "status": "ACTIVE" } ] }, "MacOSOSAccountResponse": { "summary": "macOS account", "value": { "_embedded": { "accountLinkedEnrollments": [ { "_embedded": { "lastAuthenticatedOn": "2026-04-09T17:22:56.000Z" }, "created": "2026-01-19T17:22:30.000Z", "id": "ukp1fxtdiJkUQiX220g5", "lastUpdated": "2026-01-19T17:22:30.000Z", "profile": { "authenticationMethod": "PASSWORD" }, "status": "ACTIVE", "type": "platform_sso" } ], "users": [ { "id": "00u1fxs5JcdX9jsfc0g5", "profile": { "email": "carmel.sonne@okta.com", "firstName": "Carmel", "lastName": "Sonne", "login": "carmel.sonne@okta.com" }, "status": "ACTIVE" } ] }, "_links": { "device": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7JHHhjXrMK0g4" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/devices/guo4a5u7JHHhjXrMK0g4/os-accounts/dao3qgkIEKjhNZudR0g4" } }, "created": "2026-01-19T17:22:30.000Z", "deviceId": "guo4a5u7JHHhjXrMK0g4", "id": "dao3qgkIEKjhNZudR0g4", "lastSeenAt": "2026-04-09T17:22:56.000Z", "lastUpdated": "2026-01-19T17:22:30.000Z", "platform": "MACOS", "profile": { "accountUuid": "4ac29c85-d847-4492-96cb-46e337170c33", "fullName": "Carmel Sonne", "type": "MACOS", "username": "carmel.sonne" }, "resourceAlternateId": null, "resourceDisplayName": { "sensitive": false, "value": "Carmel Sonne" }, "resourceId": "dao3qgkIEKjhNZudR0g4", "resourceType": "DOSAccount", "status": "ACTIVE" } }, "MembershipPayload": { "value": { "memberExternalId": "USEREXT123456784C2IFA" } }, "MicrosoftIdPResponse": { "summary": "Microsoft IdP", "value": { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize?idp=0oajmvdFawBih4gey0g3&\n client_id={clientId}&response_type={responseType}&response_mode={responseMode}&\n scope={scopes}&redirect_uri={redirectUri}&state={state}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize/callback" } }, "created": "2016-03-29T16:47:36.000Z", "id": "0oajmvdFawBih4gey0g3", "lastUpdated": "2016-03-29T16:47:36.000Z", "name": "Microsoft", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.userPrincipalName" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://login.microsoftonline.com/common/oauth2/v2.0/authorize" }, "token": { "binding": "HTTP-POST", "url": "https://login.microsoftonline.com/common/oauth2/v2.0/token" } }, "scopes": [ "openid", "email", "profile", "https://graph.microsoft.com/User.Read" ], "type": "OIDC" }, "status": "ACTIVE", "type": "MICROSOFT" } }, "MultipleIdPCsrsResponse": { "summary": "IdP CSRs", "value": [ { "_links": { "publish": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oad5lTSBOMUBOBVVQSC/credentials/csrs/h9zkutaSe7fZX0SwN1GqDApofgD1OW8g2B5l2azha50/lifecycle/publish" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oad5lTSBOMUBOBVVQSC/credentials/csrs/h9zkutaSe7fZX0SwN1GqDApofgD1OW8g2B5l2azha50" } }, "created": "2017-03-28T01:11:10.000Z", "csr": "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", "id": "h9zkutaSe7fZX0SwN1GqDApofgD1OW8g2B5l2azha50", "kty": "RSA" }, { "_links": { "publish": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oad5lTSBOMUBOBVVQSC/credentials/csrs/-_-BFwAGoUYN-DDvsSKQFdx7OXaPZqrEPpFDO1hu-rg/lifecycle/publish" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oad5lTSBOMUBOBVVQSC/credentials/csrs/-_-BFwAGoUYN-DDvsSKQFdx7OXaPZqrEPpFDO1hu-rg" } }, "created": "2017-03-28T01:21:10.000Z", "csr": "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", "id": "-_-BFwAGoUYN-DDvsSKQFdx7OXaPZqrEPpFDO1hu-rg", "kty": "RSA" } ] }, "MultipleIdPKeyCredentialsResponse": { "summary": "IdP key credentials", "value": [ { "created": "2016-01-03T18:15:47.000Z", "e": "65537", "kid": "your-key-id", "kty": "RSA", "lastUpdated": "2016-01-03T18:15:47.000Z", "n": "101438407598598116085679865987760095721749307901605456708912786847324207000576780508113360584555007890315805735307890113536927352312915634368993759211767770602174860126854831344273970871509573365292777620005537635317282520456901584213746937262823585533063042033441296629204165064680610660631365266976782082747", "use": "sig", "x5c": [ "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" ], "x5t#S256": "wzPVobIrveR1x-PCbjsFGNV-6zn7Rm9KuOWOG4Rk6jE" }, { "alg": "EC", "created": "2020-04-24T20:51:20.000Z", "crv": "P-521", "expiresAt": "2040-03-01T20:22:29.000Z", "kid": "your-kid", "kty": "EC", "lastUpdated": "2020-04-24T20:51:20.000Z", "use": "sig", "x": "Vv5Rh5de5ig7Qg-A-4HDGGDloMlkxp6PDE3nwzgAQPD3XXrLE7G364LhePRpYupQs62WgCoYb4CDXN0erf3WJXg", "x5c": [ "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" ], "x5t#S256": "TUx-AIwypm2pZURHNqafk7ZDxqQP_ypzIyUwDDnPOlw", "y": "ATeVjosChw6gt73EOR6CBc1xK4_l8NzXHlH0YdNeXji8ugk4tIuwxs5dUxcheips8PNNJhTLbhoV2_hbgtnFbpqT" } ] }, "MultipleIdPSigningKeyCredentialsResponse": { "summary": "IdP signing key credentials", "value": [ { "created": "2015-12-10T18:56:23.000Z", "expiresAt": "2017-12-10T18:56:22.000Z", "kid": "akm5hvbbevE341ovl0h7", "kty": "RSA", "use": "sig", "x5c": [ "MIIDqDCCApCgAwIBAgIGAVGNQFX5MA0GCSqGSIb3DQEBBQUAMIGUMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwET2t0YTEUMBIGA1UECwwLU1NPUHJvdmlkZXIxFTATBgNVBAMMDGJhbGFjb21wdGVzdDEcMBoGCSqGSIb3DQEJARYNaW5mb0Bva3RhLmNvbTAeFw0xNTEyMTAxODU1MjJaFw0xNzEyMTAxODU2MjJaMIGUMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwET2t0YTEUMBIGA1UECwwLU1NPUHJvdmlkZXIxFTATBgNVBAMMDGJhbGFjb21wdGVzdDEcMBoGCSqGSIb3DQEJARYNaW5mb0Bva3RhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJJjrcnI6cXBiXNq9YDgfYrQe2O5qEHG4MXP8Ue0sMeefFkFEHYHnHUeZCq6WTAGqR+1LFgOl+Eq9We5V+qNlGIfkFkQ3iHGBrIALKqLCd0Et76HicDiegz7j9DtN+lo0hG/gfcw5783L5g5xeQ7zVmCQMkFwoUA0uA3bsfUSrmfORHJL+EMNQT8XIXD8NkG4g6u7ylHVRTLgXbe+W/p04m3EP6l41xl+MhIpBaPxDsyUvcKCNwkZN3aZIin1O9Y4YJuDHxrM64/VtLLp0sC05iawAmfsLunF7rdJAkWUpPn+xkviyNQ3UpvwAYuDr+jKLUdh2reRnm1PezxMIXzBVMCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEARnFIjyitrCGbleFr3KeAwdOyeHiRmgeKupX5ZopgXtcseJoToUIinX5DVw2fVZPahqs0Q7/a0wcVnTRpw6946qZCwKd/PvZ1feVuVEA5Ui3+XvHuSH5xLp7NvYG1snNEvlbN3+NDUMlWj2NEbihowUBt9+UxTpQO3+N08q3aZk3hOZ+tHt+1Te7KEEL/4CM28GZ9MY7fSrS7MAgp1+ZXtn+kRlMrXnQ49qBda37brwDRqmSY9PwNMbev3r+9ZHwxr9W5wXW4Ev4C4xngA7RkVoyDbItSUho0I0M0u/LHuppclnXrw97xyO5Z883eIBvPVjfRcxsJxXJ8jx70ATDskw==" ], "x5t#S256": "5GOpy9CQVtfvBmu2T8BHvpKE4OGtC3BuS046t7p9pps" }, { "created": "2015-12-10T18:55:35.000Z", "expiresAt": "2045-01-23T02:15:23.000Z", "kid": "akm5hvbn1vojA9Fsa0h7", "kty": "RSA", "use": "sig", "x5c": [ "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" ], "x5t#S256": "7CCyXWwKzH4P6PoBP91B1S_iIZVzuGffVnUXu-BTYQQ" } ] }, "MultipleIdPsResponse": { "summary": "Multiple IdPs", "value": [ { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize?idp=0oa62b57p7c8PaGpU0h7&client_id={clientId}&response_type={responseType}&response_mode={responseMode}&scope={scopes}&redirect_uri={redirectUri}&state={state}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize/callback" } }, "created": "2016-03-24T23:18:27.000Z", "id": "0oa62b57p7c8PaGpU0h7", "lastUpdated": "2016-03-24T23:18:27.000Z", "name": "Facebook", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.userPrincipalName" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://www.facebook.com/dialog/oauth" }, "token": { "binding": "HTTP-POST", "url": "https://graph.facebook.com/v2.5/oauth/access_token" } }, "scopes": [ "public_profile", "email" ], "type": "OAUTH2" }, "status": "ACTIVE", "type": "FACEBOOK" }, { "_links": { "acs": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/sso/saml2/0oa62bc8wppPw0UGr0h7", "type": "application/xml" }, "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oa62bc8wppPw0UGr0h7/lifecycle/deactivate" }, "metadata": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oa62bc8wppPw0UGr0h7/metadata.xml", "type": "application/xml" }, "users": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oa62bc8wppPw0UGr0h7/users" } }, "created": "2016-03-24T23:14:54.000Z", "id": "0oa62bc8wppPw0UGr0h7", "lastUpdated": "2016-03-24T23:14:54.000Z", "name": "Example SAML IdP", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": "(\\S+@example\\.com)", "matchType": "USERNAME", "userNameTemplate": { "template": "saml.subjectNameId" } }, "trustClaims": false }, "protocol": { "algorithms": { "request": { "signature": { "algorithm": "SHA-256", "scope": "REQUEST" } }, "response": { "signature": { "algorithm": "SHA-256", "scope": "ANY" } } }, "credentials": { "trust": { "additionalKids": [ "additional-key-id" ], "audience": "http://www.okta.com/123", "issuer": "https://idp.example.com", "kid": "your-key-id" } }, "endpoints": { "acs": { "binding": "HTTP-POST", "type": "INSTANCE" }, "sso": { "binding": "HTTP-POST", "destination": "https://idp.example.com", "url": "https://idp.example.com" } }, "settings": { "nameFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "type": "SAML2" }, "status": "ACTIVE", "type": "SAML2" }, { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize?idp=0oa62bfdiumsUndnZ0h7&client_id={clientId}&response_type={responseType}&response_mode={responseMode}&scope={scopes}&redirect_uri={redirectUri}&state={state}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize/callback" } }, "created": "2016-03-24T23:21:49.000Z", "id": "0oa62bfdiumsUndnZ0h7", "lastUpdated": "2016-03-24T23:21:49.000Z", "name": "Google", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.userPrincipalName" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://accounts.google.com/o/oauth2/auth" }, "token": { "binding": "HTTP-POST", "url": "https://www.googleapis.com/oauth2/v3/token" } }, "scopes": [ "profile", "email", "openid" ], "type": "OIDC" }, "status": "ACTIVE", "type": "GOOGLE" }, { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize?idp=0oa62bfdjnK55Z5x80h7&client_id={clientId}&response_type={responseType}&response_mode={responseMode}&scope={scopes}&redirect_uri={redirectUri}&state={state}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize/callback" } }, "created": "2016-03-24T23:23:59.000Z", "id": "0oa62bfdjnK55Z5x80h7", "lastUpdated": "2016-03-24T23:23:59.000Z", "name": "LinkedIn", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.userPrincipalName" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://www.linkedin.com/uas/oauth2/authorization" }, "token": { "binding": "HTTP-POST", "url": "https://www.linkedin.com/uas/oauth2/accessToken" } }, "scopes": [ "r_basicprofile", "r_emailaddress" ], "type": "OAUTH2" }, "status": "ACTIVE", "type": "LINKEDIN" }, { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize?idp=0oajmvdFawBih4gey0g3&client_id={clientId}&response_type={responseType}&response_mode={responseMode}&scope={scopes}&redirect_uri={redirectUri}&state={state}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize/callback" } }, "created": "2016-03-29T16:47:36.000Z", "id": "0oajmvdFawBih4gey0g3", "lastUpdated": "2016-03-29T16:47:36.000Z", "name": "Microsoft", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": true }, "subject": { "filter": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.userPrincipalName" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://login.microsoftonline.com/common/oauth2/v2.0/authorize" }, "token": { "binding": "HTTP-POST", "url": "https://login.microsoftonline.com/common/oauth2/v2.0/token" } }, "scopes": [ "openid", "email", "profile", "https://graph.microsoft.com/User.Read" ], "type": "OIDC" }, "status": "ACTIVE", "type": "MICROSOFT" }, { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize?idp=0oaulob4BFVa4zQvt0g3&client_id={clientId}&response_type={responseType}&response_mode={responseMode}&scope={scopes}&redirect_uri={redirectUri}&state={state}&nonce={nonce}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/oauth2/v1/authorize/callback" } }, "created": "2019-02-07T20:07:47.000Z", "id": "0oaulob4BFVa4zQvt0g3", "lastUpdated": "2019-02-07T20:07:47.000Z", "name": "Example OpenID Connect IdP", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": false }, "subject": { "filter": null, "matchAttribute": null, "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.email" } }, "trustClaims": false }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "client_secret": "your-client-secret" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/authorize" }, "jwks": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/keys" }, "token": { "binding": "HTTP-POST", "url": "https://idp.example.com/token" }, "userInfo": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/userinfo" } }, "issuer": { "url": "https://idp.example.com" }, "scopes": [ "openid" ], "type": "OIDC" }, "status": "ACTIVE", "type": "OIDC" }, { "_links": { "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}.okta.com/api/v1/idps/0oa6jxasyhwM2ZHJh0g4/lifecycle/deactivate" }, "keys": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}.okta.com/api/v1/idps/credentials/keys/45dec5ff-8cdc-48c0-85fe-a4869f1753dc" }, "users": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}.okta.com/api/v1/idps/0oa6jxasyhwM2ZHJh0g4/users" } }, "created": "2020-01-07T00:19:27.000Z", "id": "0oa6jxasyhwM2ZHJh0g4", "lastUpdated": "2020-01-07T00:19:27.000Z", "name": "Smart Card IDP Name", "policy": { "mapAMRClaims": false, "maxClockSkew": 0, "provisioning": { "action": "DISABLED", "groups": null, "profileMaster": false }, "subject": { "filter": null, "matchAttribute": null, "matchType": "EMAIL", "userNameTemplate": { "template": "idpuser.subjectAltNameEmail" } }, "trustClaims": false }, "properties": { "additionalAmr": [ "sc", "hwk", "pin", "mfa" ] }, "protocol": { "credentials": { "trust": { "audience": null, "issuer": "CN=Test Smart Card, OU=Test OU, O=Test O, C=US", "kid": "45dec5ff-8cdc-48c0-85fe-a4869f1753dc", "revocation": "CRL", "revocationCacheLifetime": 2880 } }, "endpoints": { "sso": { "url": "https://{yourOktaDomain}.okta.com/login/cert" } }, "type": "MTLS" }, "status": "ACTIVE", "type": "X509" } ] }, "NextAuthorizationServerKey": { "summary": "Next authorization server key", "value": { "_links": { "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/credentials/keys/Y3vBOdYT-l-I0j-gRQ26XjutSX00TeWiSguuDhW3ngo" } }, "alg": "RS256", "e": "AQAB", "kid": "Y3vBOdYT-l-I0j-gRQ26XjutSX00TeWiSguuDhW3ngo", "kty": "RSA", "n": "l1hZ_g2sgBE3oHvu34T-5XP18FYJWgtul_nRNg-5xra5ySkaXEOJUDRERUG0HrR42uqf9jYrUTwg9fp-SqqNIdHRaN8EwRSDRsKAwK 3 HIJ2NJfgmrrO2ABkeyUq6rzHxAumiKv1iLFpSawSIiTEBJERtUCDcjbbqyHVFuivIFgH8L37 - XDIDb0XG - R8DOoOHLJPTpsgH - rJe M5w96VIRZInsGC5OGWkFdtgk6OkbvVd7_TXcxLCpWeg1vlbmX - 0 TmG5yjSj7ek05txcpxIqYu - 7 FIGT0KKvXge_BOSEUlJpBhLKU28 OtsOnmc3NLIGXB - GeDiUZiBYQdPR - myB4ZoQ", "status": "NEXT", "use": "sig" } }, "NumberMatchingChallengeRequest": { "value": { "useNumberMatchingChallenge": true }, "x-okta-lifecycle": { "SKUs": [], "isGenerallyAvailable": false, "lifecycle": "GA" } }, "NzErrorApiValidationFailed": { "summary": "API Validation Failed", "value": { "errorCauses": [], "errorCode": "E0000003", "errorId": "samplewNxQUR9iohr4QYlD0eg", "errorLink": "E0000003", "errorSummary": "The request body was not well-formed." } }, "NzErrorResourceNotFound": { "summary": "Resource Not Found", "value": { "errorCauses": [], "errorCode": "E0000007", "errorId": "samplejCSVaKFDkCMElmKQ", "errorLink": "E0000007", "errorSummary": "Not found: Resource not found: itd (NetworkZone)" } }, "OAuth2AuthSettings": { "summary": "OAuth2 auth settings example", "value": { "authType": "OAUTH2", "oAuth2Settings": { "authorizeEndpoint": "https://example.com/oauth/authorize", "clientId": "client123", "clientSecret": "secret456", "scopes": [ "scope1", "scope2" ], "tokenEndpoint": "https://example.com/oauth/token" } } }, "OAuth2RefreshTokenResponseEx": { "summary": "OAuth 2.0 refresh token example", "value": { "_embedded": { "scopes": [ { "_links": { "scope": { "href": "https://{yourOktaDomain}/api/v1/authorizationServers/ausain6z9zIedDCxB0h7/scopes/scppb56cIl4GvGxy70g3", "title": "offline_access" } }, "description": "Requests a refresh token by default and is used to obtain more access tokens without re-prompting the user for authentication", "id": "scppb56cIl4GvGxy70g3", "name": "offline_access" }, { "_links": { "scope": { "href": "https://{yourOktaDomain}/api/v1/authorizationServers/ausain6z9zIedDCxB0h7/scopes/scp142iq2J8IGRUCS0g4", "title": "Drive car" } }, "description": "Allows the user to drive a car", "displayName": "Drive car", "id": "scp142iq2J8IGRUCS0g4", "name": "car:drive" } ] }, "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabskvc6442nkvQO0h7", "title": "Native" }, "authorizationServer": { "href": "https://{yourOktaDomain}/api/v1/authorizationServers/ausain6z9zIedDCxB0h7", "title": "Example Authorization Server" }, "client": { "href": "https://{yourOktaDomain}/oauth2/v1/clients/0oabskvc6442nkvQO0h7", "title": "Example Client App" }, "revoke": { "hints": { "allow": [ "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/apps/0oabskvc6442nkvQO0h7/tokens/oar579Mcp7OUsNTlo0g3" }, "self": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabskvc6442nkvQO0h7/tokens/oar579Mcp7OUsNTlo0g3" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00upcgi9dyWEOeCwM0g3", "title": "Saml Jackson" } }, "clientId": "0oabskvc6442nkvQO0h7", "created": "2023-03-09T03:18:06.000Z", "expiresAt": "2023-03-16T03:18:06.000Z", "id": "oar579Mcp7OUsNTlo0g3", "issuer": "https://{yourOktaDomain}/oauth2/ausain6z9zIedDCxB0h7", "lastUpdated": "2023-03-09T03:18:06.000Z", "scopes": [ "offline_access", "car:drive" ], "status": "ACTIVE", "userId": "00u5t60iloOHN9pBi0h7" } }, "OAuth2RefreshTokenResponseListEx": { "summary": "App refresh token list example", "value": [ { "_embedded": { "scopes": [ { "_links": { "scope": { "href": "https://{yourOktaDomain}/api/v1/authorizationServers/ausain6z9zIedDCxB0h7/scopes/scppb56cIl4GvGxy70g3", "title": "offline_access" } }, "description": "Requests a refresh token by default and is used to obtain more access tokens without re-prompting the user for authentication", "id": "scppb56cIl4GvGxy70g3", "name": "offline_access" }, { "_links": { "scope": { "href": "https://{yourOktaDomain}/api/v1/authorizationServers/ausain6z9zIedDCxB0h7/scopes/scp142iq2J8IGRUCS0g4", "title": "Drive car" } }, "description": "Allows the user to drive a car", "displayName": "Drive car", "id": "scp142iq2J8IGRUCS0g4", "name": "car:drive" } ] }, "_links": { "app": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabskvc6442nkvQO0h7", "title": "Native" }, "authorizationServer": { "href": "https://{yourOktaDomain}/api/v1/authorizationServers/ausain6z9zIedDCxB0h7", "title": "Example Authorization Server" }, "client": { "href": "https://{yourOktaDomain}/oauth2/v1/clients/0oabskvc6442nkvQO0h7", "title": "Example Client App" }, "revoke": { "hints": { "allow": [ "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/apps/0oabskvc6442nkvQO0h7/tokens/oar579Mcp7OUsNTlo0g3" }, "self": { "href": "https://{yourOktaDomain}/api/v1/apps/0oabskvc6442nkvQO0h7/tokens/oar579Mcp7OUsNTlo0g3" }, "user": { "href": "https://{yourOktaDomain}/api/v1/users/00upcgi9dyWEOeCwM0g3", "title": "Saml Jackson" } }, "clientId": "0oabskvc6442nkvQO0h7", "created": "2023-03-09T03:18:06.000Z", "expiresAt": "2023-03-16T03:18:06.000Z", "id": "oar579Mcp7OUsNTlo0g3", "issuer": "https://{yourOktaDomain}/oauth2/ausain6z9zIedDCxB0h7", "lastUpdated": "2023-03-09T03:18:06.000Z", "scopes": [ "offline_access", "car:drive" ], "status": "ACTIVE", "userId": "00u5t60iloOHN9pBi0h7" } ] }, "OAuth2ResourceServerJsonWebKey": { "summary": "JSON Web Key example", "value": { "_links": { "delete": { "hints": { "allow": [ "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/authorizationServers/{authorizationServerId}/resourceservercredentials/keys/RQ8DuhdxCczyMvy7GNJb4Ka3lQ99vrSo3oFBUiZjzzc/lifecycle/delete" } }, "alg": "RS256", "created": "2023-04-06T21:32:33.000Z", "e": "AQAB", "id": "apk2f4zrZbs8nUa7p0g4", "kid": "ASHJHGasa782333-Sla3x3POBiIxDreBCdZuFs5B", "kty": "RSA", "lastUpdated": "2023-04-06T21:32:33.000Z", "n": "AJncrzOrouIUCSMlRL0HU.....Kuine49_CEVR4GPn=", "status": "INACTIVE", "use": "enc" } }, "OAuthClientCredentialsPatchRequest": { "summary": "Update OAuth 2.0 client credentials server", "value": { "alias": "OAuthServer1 New Alias", "authType": "OAUTH2_CLIENT_CREDENTIALS", "clientSecret": "New client secret" }, "x-okta-lifecycle": { "SKUs": [ "Okta Identity Engine" ], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "OAuthClientCredentialsPatchResponse": { "summary": "OAuth 2.0 client credentials server patch response", "value": { "alias": "OAuthServer1 New Alias", "authType": "OAUTH2_CLIENT_CREDENTIALS", "clientId": "oauth-client-id", "enabled": false, "host": "smtp.oauth.com", "id": "ces7n3u7sSohfoaou0g2", "port": 587, "scopes": [ "send_email" ], "tokenEndpoint": "https://oauth.example.com/token", "tokenEndpointAuthMethod": "CLIENT_SECRET_BASIC", "username": "user@oauth.com" }, "x-okta-lifecycle": { "SKUs": [ "Okta Identity Engine" ], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "OAuthClientCredentialsRequest": { "summary": "Create OAuth client credentials server", "value": { "alias": "OAuthServer1", "authType": "OAUTH2_CLIENT_CREDENTIALS", "clientId": "oauth-client-id", "clientSecret": "oauth-client-secret", "enabled": false, "host": "smtp.oauth.com", "port": 587, "scopes": [ "send_email" ], "tokenEndpoint": "https://oauth.example.com/token", "tokenEndpointAuthMethod": "CLIENT_SECRET_BASIC", "username": "user@oauth.com" }, "x-okta-lifecycle": { "SKUs": [ "Okta Identity Engine" ], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "OAuthClientCredentialsResponse": { "summary": "OAuth 2.0 client credentials server response", "value": { "alias": "OAuthServer1", "authType": "OAUTH2_CLIENT_CREDENTIALS", "clientId": "oauth-client-id", "enabled": false, "host": "smtp.oauth.com", "id": "ces7n3u7sSohfoaou0g2", "port": 587, "scopes": [ "send_email" ], "tokenEndpoint": "https://oauth.example.com/token", "tokenEndpointAuthMethod": "CLIENT_SECRET_BASIC", "username": "user@oauth.com" }, "x-okta-lifecycle": { "SKUs": [ "Okta Identity Engine" ], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "OAuthJWTPatchRequest": { "summary": "Update OAuth 2.0 JWT bearer grant server", "value": { "alias": "OAuthServer2 New Alias", "authType": "OAUTH2_JWT_BEARER_GRANT", "keyId": "New keyId", "privateKey": "-----BEGIN PRIVATE KEY-----\n... New Private Key Contents ...\n-----END PRIVATE KEY-----\n" }, "x-okta-lifecycle": { "SKUs": [ "Okta Identity Engine" ], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "OAuthJWTPatchResponse": { "summary": "OAuth 2.0 JWT bearer grant server patch response", "value": { "alias": "OAuthServer2 New Alias", "audience": "https://smtp.oauth.com", "authType": "OAUTH2_JWT_BEARER_GRANT", "clientId": "oauth-client-id", "enabled": false, "host": "smtp.oauth.com", "id": "ces7n3u7sSohfoaou0g3", "issuer": "https://oauth.example.com", "port": 587, "scopes": [ "org.email.send" ], "signingAlgorithm": "RS256", "subject": "user@oauth.com", "username": "user@oauth.com" }, "x-okta-lifecycle": { "SKUs": [ "Okta Identity Engine" ], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "OAuthJWTRequest": { "summary": "Create OAuth 2.0 JWT bearer grant server", "value": { "alias": "OAuthServer2", "audience": "https://smtp.oauth.com", "authType": "OAUTH2_JWT_BEARER_GRANT", "clientId": "oauth-client-id", "enabled": false, "host": "smtp.oauth.com", "issuer": "https://oauth.example.com", "keyId": "oauth-key-id", "port": 587, "privateKey": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n", "scopes": [ "org.email.send" ], "signingAlgorithm": "RS256", "subject": "user@oauth.com", "tokenEndpoint": "https://oauth.example.com/token", "username": "user@oauth.com" }, "x-okta-lifecycle": { "SKUs": [ "Okta Identity Engine" ], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "OAuthJWTResponse": { "summary": "OAuth 2.0 JWT bearer grant server response", "value": { "alias": "OAuthServer2", "audience": "https://smtp.oauth.com", "authType": "OAUTH2_JWT_BEARER_GRANT", "clientId": "oauth-client-id", "enabled": false, "host": "smtp.oauth.com", "id": "ces7n3u7sSohfoaou0g3", "issuer": "https://oauth.example.com", "port": 587, "scopes": [ "org.email.send" ], "signingAlgorithm": "RS256", "subject": "user@oauth.com", "username": "user@oauth.com" }, "x-okta-lifecycle": { "SKUs": [ "Okta Identity Engine" ], "isGenerallyAvailable": false, "lifecycle": "EA" } }, "OktaIntegrationIdpResponse": { "summary": "Okta Integration IdP", "value": { "_links": { "authorize": { "hints": { "allow": [ "GET" ] }, "href": "https://idp.example.com/oauth2/v1/authorize?idp=0oaulob4BFVa4zQvt0g3&client_id={clientId}&response_type={responseType}&response_mode={responseMode}&scope={scopes}&redirect_uri={redirectUri}&state={state}&nonce={nonce}", "templated": true }, "clientRedirectUri": { "hints": { "allow": [ "POST" ] }, "href": "https://idp.example.com/oauth2/v1/authorize/callback" } }, "created": "2025-02-07T20:07:47.000Z", "id": "0oazzok2vl5aeUH0B0g4", "lastUpdated": "2025-02-07T20:07:47.000Z", "name": "Example Okta Integration IdP", "policy": { "accountLink": { "action": "AUTO", "filter": null }, "maxClockSkew": 0, "provisioning": { "action": "AUTO", "conditions": { "deprovisioned": { "action": "NONE" }, "suspended": { "action": "NONE" } }, "groups": { "action": "NONE" }, "profileMaster": false }, "subject": { "filter": "", "matchAttribute": "", "matchType": "USERNAME", "userNameTemplate": { "template": "idpuser.email" } }, "trustClaims": true }, "protocol": { "credentials": { "client": { "client_id": "your-client-id", "pkce_required": "true", "token_endpoint_auth_method": "private_key_jwt" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/oauth2/v1/authorize" }, "jwks": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/oauth2/v1/keys" }, "token": { "binding": "HTTP-POST", "url": "https://idp.example.com/oauth2/v1/token" }, "userInfo": { "binding": "HTTP-REDIRECT", "url": "https://idp.example.com/oauth2/v1/userinfo" } }, "issuer": { "url": "https://idp.example.com" }, "scopes": [ "openid", "email", "profile" ], "type": "OIDC" }, "status": "ACTIVE", "type": "OKTA_INTEGRATION" } }, "OktaManagedUserAccountResponse": { "summary": "Okta managed user account response", "value": { "created": "2023-04-04T15:56:05.000Z", "description": "Shared admin account for managing AD integrations", "email": "shr-ad-admin-01@example.com", "id": "d1b65a78-21ed-429b-8ea3-eec96f2748d6", "lastUpdated": "2023-05-05T18:15:44.000Z", "name": "AD Integrations Admin", "oktaUserId": "00u11s48P9zGW8yqm0g5", "ownerGroupIds": [ "00g57qp78yZT2XBA40g7" ], "ownerUserIds": [ "00u22t59Q0aHbNEXi1h8" ], "status": "UNSECURED", "statusDetail": "STAGED", "username": "shr-ad-admin-01@example.com" } }, "OktaSupportCase": { "summary": "Org Support case", "value": { "impersonation": { "expiration": "2024-01-24T11:13:14.000Z", "status": "ENABLED" }, "selfAssigned": { "status": "NOT_REQUIRED" } } }, "OktaSupportCases": { "summary": "Org Support cases", "value": [ { "caseNumber": "1000001", "impersonation": { "expiration": "2024-01-24T11:13:14.000Z", "status": "ENABLED" }, "selfAssigned": { "status": "REQUESTED" }, "subject": "Reset admin password" }, { "caseNumber": "1000002", "impersonation": { "expiration": null, "status": "REQUESTED" }, "selfAssigned": { "status": "NOT_REQUIRED" }, "subject": "Review IP restriction configuration" } ] }, "OpenidConnectEx": { "summary": "OPENID_CONNECT", "value": { "credentials": { "oauthClient": { "token_endpoint_auth_method": "client_secret_post" } }, "label": "Sample Client profile", "name": "oidc_client", "profile": { "label": "oauth2 client app 1" }, "settings": { "oauthClient": { "application_type": "native", "client_uri": "http://localhost:8080", "grant_types": [ "authorization_code" ], "logo_uri": "http://developer.okta.com/assets/images/logo-new.png", "participate_slo": false, "redirect_uris": [ "https://example.com/oauth2/callback", "myapp://callback" ], "response_types": [ "token", "id_token", "code" ] } }, "signOnMode": "OPENID_CONNECT" } }, "OpenidConnectPutEx": { "summary": "OPENID_CONNECT", "value": { "label": "Sample Client profile updated", "name": "oidc_client", "signOnMode": "OPENID_CONNECT" } }, "OpenidConnectPutResponseEx": { "summary": "OPENID_CONNECT", "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "credentials": { "oauthClient": { "autoKeyRotation": true, "client_id": "0oahonkqCRR6TSNlg4", "client_secret": "wj9bOsLK0BRNJqy7KMMnaE7m8qrW51bPO2n1-PYvkOmhHRYgcuOecQkEwq9MPYa5", "pkce_required": true, "token_endpoint_auth_method": "client_secret_post" }, "signing": { "kid": "H34mvc6VrfV5yvy5wA8ikMFws6WInx4nvsAs-7EYbVc" }, "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "id": "0oafxqCAJWWGELFTYASJ", "label": "Sample Client profile updated", "lastUpdated": "2023-01-21T14:11:24.000Z", "name": "oidc_client", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:oidc_client:0oafxqCAJWWGELFTYASJ", "settings": { "app": {}, "emOptInStatus": "DISABLED", "implicitAssignment": false, "manualProvisioning": false, "notes": { "admin": null, "enduser": null }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } }, "oauthClient": { "application_type": "native", "client_uri": "http://localhost:8080", "dpop_bound_access_tokens": false, "grant_types": [ "authorization_code" ], "idp_initiated_login": { "default_scope": [], "mode": "DISABLED" }, "issuer_mode": "DYNAMIC", "logo_uri": "http://developer.okta.com/assets/images/logo-new.png", "redirect_uris": [ "https://example.com/oauth2/callback", "myapp://callback" ], "response_types": [ "token", "id_token", "code" ], "wildcard_redirect": "DISABLED" } }, "signOnMode": "OPENID_CONNECT", "status": "ACTIVE", "visibility": { "appLinks": { "oidc_client_link": true }, "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": true, "web": true } } } }, "OpenidConnectResponseEx": { "summary": "OPENID_CONNECT", "value": { "_links": { "appLinks": [ { "href": "http://{yourOktaDomain}/home/{appName}/0oafxqCAJWWGELFTYASJ/aln5vjkW5oUmDGLMX0g4", "name": "customswaapp_link", "type": "text/html" } ], "deactivate": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/lifecycle/deactivate" }, "groups": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/groups" }, "logo": [ { "href": "http://{yourOktaDomain}/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png", "name": "medium", "type": "image/png" } ], "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "http://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/logo" }, "users": { "href": "https://{yourOktaDomain}/api/v1/apps/0oafxqCAJWWGELFTYASJ/users" } }, "accessibility": { "errorRedirectUrl": null, "loginRedirectUrl": null, "selfService": false }, "created": "2023-01-21T14:11:24.000Z", "credentials": { "oauthClient": { "autoKeyRotation": true, "client_id": "0oahonkqCRR6TSNlg4", "client_secret": "wj9bOsLK0BRNJqy7KMMnaE7m8qrW51bPO2n1-PYvkOmhHRYgcuOecQkEwq9MPYa5", "pkce_required": true, "token_endpoint_auth_method": "client_secret_post" }, "signing": { "kid": "H34mvc6VrfV5yvy5wA8ikMFws6WInx4nvsAs-7EYbVc" }, "userNameTemplate": { "template": "${source.email}", "type": "BUILT_IN" } }, "features": [], "id": "0oafxqCAJWWGELFTYASJ", "label": "Sample Client profile", "lastUpdated": "2023-01-21T14:11:24.000Z", "name": "oidc_client", "orn": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:oidc_client:0oafxqCAJWWGELFTYASJ", "profile": { "label": "oauth2 client app 1" }, "settings": { "app": {}, "emOptInStatus": "DISABLED", "implicitAssignment": false, "manualProvisioning": false, "notes": { "admin": null, "enduser": null }, "notifications": { "vpn": { "helpUrl": null, "message": null, "network": { "connection": "DISABLED" } } }, "oauthClient": { "application_type": "native", "client_uri": "http://localhost:8080", "dpop_bound_access_tokens": false, "grant_types": [ "authorization_code" ], "idp_initiated_login": { "default_scope": [], "mode": "DISABLED" }, "issuer_mode": "DYNAMIC", "logo_uri": "http://developer.okta.com/assets/images/logo-new.png", "redirect_uris": [ "https://example.com/oauth2/callback", "myapp://callback" ], "response_types": [ "token", "id_token", "code" ], "wildcard_redirect": "DISABLED" } }, "signOnMode": "OPENID_CONNECT", "status": "ACTIVE", "visibility": { "appLinks": { "oidc_client_link": true }, "autoLaunch": false, "autoSubmitToolbar": false, "hide": { "iOS": true, "web": true } } } }, "OperationCompletedResponse": { "summary": "Operation Completed Response", "value": { "completed": "2023-10-01T12:10:00Z", "created": "2023-10-01T12:00:00Z", "id": "rdj2ccmltchKESW8u0g5", "started": "2023-10-01T12:05:00Z", "status": "COMPLETED", "type": "read:directories" } }, "OperationFailedResponse": { "summary": "Operation Failed Response", "value": { "completed": "2023-10-01T12:10:00Z", "created": "2023-10-01T12:00:00Z", "id": "rdj2ccmltchKESW8u0g5", "started": "2023-10-01T12:05:00Z", "status": "FAILED", "type": "read:directories" } }, "OperationInProgressResponse": { "summary": "Operation In Progress Response", "value": { "created": "2023-10-01T12:00:00Z", "id": "rdj2ccmltchKESW8u0g5", "started": "2023-10-01T12:05:00Z", "status": "IN_PROGRESS", "type": "read:directories" } }, "OperationResponse": { "value": { "_links": { "self": { "href": "http://your-subdomain.okta.com/api/v1/operations/rre4mje4ez6B2a7B60g7", "method": "GET", "rel": "self" } }, "assignmentOperation": { "configuration": { "actions": { "assignUserToRealm": { "realmId": "00g1b7rvh0xPLKXFf0g5" } }, "conditions": { "expression": { "value": "string" }, "profileSourceId": "0oa4enoRyjwSCy5hx0g4" }, "id": "0pr1b7rxZj2ibQzfP0g5", "name": "Realm Assignment 1" } }, "completed": "2023-10-25T21:02:54.000Z", "created": "2023-10-25T21:02:54.000Z", "id": "rre4mje4ez6B2a7B60g7", "numUserMoved": 50, "realmId": "00g1b7rvh0xPLKXFf0g5", "realmName": "Realm Name", "started": "2023-10-25T21:02:54.000Z", "status": "COMPLETED", "type": "realm:assignment" } }, "OptInStatusResponse": { "summary": "Opt in response", "value": { "_links": { "optInStatus": { "href": "http://your-subdomain.okta.com/api/v1/iam/governance/optIn" } }, "optInStatus": "OPTING_IN" } }, "OptOutStatusResponse": { "summary": "Opt out response", "value": { "_links": { "optInStatus": { "href": "http://your-subdomain.okta.com/api/v1/iam/governance/optIn" } }, "optInStatus": "OPTING_OUT" } }, "OrgCAPTCHASettingsConfigured": { "summary": "org-wide Captcha settings are configured", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "POST", "PUT", "DELETE" ] }, "href": "https://your-subdomain.okta.com/api/v1/captchas/abcd4567" } }, "captchaId": "abcd4567", "enabledPages": [ "SSR", "SIGN_IN" ] } }, "OrgCAPTCHASettingsDisable": { "summary": "Disable org-wide Captcha settings", "value": { "captchaId": "null", "enabledPages": "null" } }, "OrgCAPTCHASettingsDisabled": { "summary": "Disabled org-wide Captcha settings", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "PUT" ] }, "href": "https://your-subdomain.okta.com/api/v1/captchas/" } }, "captchaId": "null", "enabledPages": "[]" } }, "OrgCAPTCHASettingsEmpty": { "summary": "Org-wide Captcha settings aren't configured", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "POST", "PUT", "DELETE" ] }, "href": "https://your-subdomain.okta.com/api/v1/captchas" } }, "captchaId": null, "enabledPages": [] } }, "OrgCAPTCHASettingsUpdate": { "summary": "Update org-wide Captcha settings", "value": { "captchaId": "abcd4567", "enabledPages": [ "SSR", "SIGN_IN" ] } }, "OrgCAPTCHASettingsUpdated": { "summary": "Updated org-wide Captcha settings", "value": { "_links": { "self": { "hints": { "allow": [ "GET", "POST", "PUT", "DELETE" ] }, "href": "https://your-subdomain.okta.com/api/v1/captchas/abcd4567" } }, "captchaId": "abcd4567", "enabledPages": [ "SSR", "SIGN_IN" ] } }, "OrgSettingResponse": { "summary": "Org setting response", "value": { "_links": { "contacts": { "href": "https://vantest.oktapreview.com/api/v1/org/contacts" }, "logo": null, "oktaCommunication": { "href": "https://{yourOktaDomain}/api/v1/org/privacy/oktaCommunication" }, "oktaSupport": { "href": "https://{yourOktaDomain}/api/v1/org/privacy/oktaSupport" }, "preferences": { "href": "https://{yourOktaDomain}/v1/org/preferences" }, "uploadLogo": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/org/logo" } }, "address1": "100 1st St", "address2": "6th floor", "city": "San Fransico", "companyName": "okta", "country": "United States", "created": "2024-01-24T14:15:22Z", "endUserSupportHelpURL": "support.okta.com", "expiresAt": "2024-12-24T14:15:22Z", "id": "00o3qqiw0vSCIwu8I0g7", "lastUpdated": "2024-07-21T14:15:22Z", "phoneNumber": "+18887227871", "postalCode": "94105", "state": "California", "status": "ACTIVE", "subdomain": "okta", "supportPhoneNumber": "+18887227871", "website": "www.okta.com" } }, "PasswordImportPayloadExample": { "summary": "An example password import inline hook request body", "value": { "cloudEventVersion": "0.1", "contentType": "application/json", "data": { "action": { "credential": "UNVERIFIED" }, "context": { "credential": { "password": "Okta", "username": "isaac.brock@example.com" }, "request": { "id": "XiIl6wn7005Rr@fjYqeC7CCDBxw", "ipAddress": "66.124.153.138", "method": "POST", "url": { "value": "/idp/idx/challenge/answer" } } } }, "eventId": "3o9jBzq1SmOGmmsDsqyyeQ", "eventTime": "2020-01-17T21:23:56.000Z", "eventType": "com.okta.user.credential.password.import", "eventTypeVersion": "1.0", "source": "https://${yourOktaDomain}/api/v1/inlineHooks/cbl2ad6phv9fsPLcF0g7" } }, "PasswordImportUnVerifiedResponse": { "summary": "An example password hook response for an unverified user password", "value": { "commands": [ { "type": "com.okta.action.update", "value": { "credential": "UNVERIFIED" } } ] } }, "PasswordImportVerifiedResponse": { "summary": "An example password hook response for a verified user password", "value": { "commands": [ { "type": "com.okta.action.update", "value": { "credential": "VERIFIED" } } ] } }, "PerClientRateLimitSettingsEnforceDefault": { "value": { "defaultMode": "ENFORCE" } }, "PerClientRateLimitSettingsEnforceDefaultWithOverrides": { "value": { "defaultMode": "ENFORCE", "useCaseModeOverrides": { "OAUTH2_AUTHORIZE": "PREVIEW", "OIE_APP_INTENT": "DISABLE" } } }, "PerClientRateLimitSettingsPreviewDefaultWithOverrides": { "value": { "defaultMode": "PREVIEW", "useCaseModeOverrides": { "LOGIN_PAGE": "ENFORCE" } } }, "PermissionResponse": { "value": { "_links": { "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3" }, "self": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3/permissions/okta.users.manage" } }, "created": "2021-02-06T16:20:57.000Z", "label": "okta.users.manage", "lastUpdated": "2021-02-06T16:20:57.000Z" } }, "PermissionResponseWithConditions": { "value": { "_links": { "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3" }, "self": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3/permissions/okta.users.read" } }, "conditions": { "include": { "okta:ResourceAttribute/User/Profile": [ "city", "state", "zipCode" ] } }, "created": "2021-02-06T16:20:57.000Z", "label": "okta.users.read", "lastUpdated": "2021-02-06T16:20:57.000Z" } }, "PermissionsResponse": { "value": { "permissions": [ { "_links": { "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3" }, "self": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3/permissions/okta.users.create" } }, "created": "2021-02-06T16:20:57.000Z", "label": "okta.users.create", "lastUpdated": "2021-02-06T16:20:57.000Z" }, { "_links": { "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3" }, "self": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3/permissions/okta.users.read" } }, "conditions": { "include": { "okta:ResourceAttribute/User/Profile": [ "city", "state", "zipCode" ] } }, "created": "2021-02-06T16:20:57.000Z", "label": "okta.users.read", "lastUpdated": "2021-02-06T16:20:57.000Z" }, { "_links": { "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3" }, "self": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3/permissions/okta.groups.read" } }, "created": "2021-02-06T16:20:57.000Z", "label": "okta.groups.read", "lastUpdated": "2021-02-06T16:20:57.000Z" }, { "_links": { "role": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3" }, "self": { "href": "https://{yourOktaDomain}/api/v1/iam/roles/cr0Yq6IJxGIr0ouum0g3/permissions/okta.users.userprofile.manage" } }, "created": "2021-02-06T16:20:57.000Z", "label": "okta.users.userprofile.manage", "lastUpdated": "2021-02-06T16:20:57.000Z" } ] } }, "PersonaIDVResponse": { "summary": "Persona as IdP", "value": { "_links": { "activate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oa62bfdjnK55Z5x80h7/lifecycle/activate" }, "deactivate": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oa62bfdjnK55Z5x80h7/lifecycle/deactivate" }, "self": { "hints": { "allow": [ "GET", "DELETE" ] }, "href": "https://{yourOktaDomain}/api/v1/idps/0oa62bfdjnK55Z5x80h7" } }, "created": "2023-10-01T12:00:00.000Z", "id": "0oa62bfdjnK55Z5x80h7", "lastUpdated": "2023-10-01T12:00:00.000Z", "name": "Persona IDV", "policy": { "maxClockSkew": 0, "provisioning": { "action": "DISABLED", "groups": null, "profileMaster": false }, "subject": { "filter": null, "matchAttribute": null, "matchType": "USERNAME", "userNameTemplate": { "template": "source.userName" } } }, "properties": { "inquiryTemplateId": "itmpl_HSctx8fNvXoHtrQfz2hxUVH8RBjG" }, "protocol": { "credentials": { "bearer": { "apiKey": "your-api-key" } }, "endpoints": { "authorization": { "binding": "HTTP-REDIRECT", "url": "https://withpersona.com/verify" } }, "type": "ID_PROOFING" }, "status": "ACTIVE", "type": "IDV_PERSONA" } }, "PreviewEmailCustomizationResponse": { "value": { "_links": { "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/customizations/oel2kk1zYJBJbeaGo0g4/preview" }, "template": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation" }, "test": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/test" } }, "body": "
Hello, John. Click here to activate your account.", "subject": "Welcome to Okta!" } }, "PreviewEmailTemplateDefaultContentResponse": { "value": { "_links": { "defaultContent": { "hints": { "allow": [ "POST" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/test/default-content" }, "self": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation/default-content/preview" }, "template": { "hints": { "allow": [ "GET" ] }, "href": "https://{yourOktaDomain}/api/v1/brands/{brandId}/templates/email/UserActivation" } }, "body": "
Hello, John. Click here to activate your account.",
"subject": "Welcome to Okta!"
}
},
"PrincipalRateLimitEntityReplaceRequestSSWSToken": {
"summary": "Replace a principal rate limit entity request",
"value": {
"defaultConcurrencyPercentage": 75,
"defaultPercentage": 50,
"principalId": "prlh5hd6act3aHDrr1f5",
"principalType": "SSWS_TOKEN"
}
},
"PrincipalRateLimitEntityReplaceResponseSSWSToken": {
"summary": "Replace a principal rate limit entity response example",
"value": {
"createdBy": "00u7xut94qEWYx5ss1d4",
"createdDate": "2022-05-19T20:05:32.720Z",
"defaultConcurrencyPercentage": 75,
"defaultPercentage": 50,
"id": "0oacamvryxiyMqgiY1e5",
"lastUpdate": "2022-05-20T21:13:07.410Z",
"lastUpdatedBy": "00u7xut94qEWYx5ss1d4",
"orgId": "org1234",
"principalId": "prlh5hd6act3aHDrr1f5",
"principalType": "SSWS_TOKEN"
}
},
"PrincipalRateLimitEntityRequestSSWSToken": {
"summary": "Create a principal rate limit entity request example",
"value": {
"defaultConcurrencyPercentage": 75,
"defaultPercentage": 50,
"principalId": "prlh5hd6act3aHDrr1f5",
"principalType": "SSWS_TOKEN"
}
},
"PrincipalRateLimitEntityResponseSSWSToken": {
"summary": "Create a principal rate limit entity response example",
"value": {
"createdBy": "00u7xut94qEWYx5ss1d4",
"createdDate": "2022-05-19T20:05:32.720Z",
"defaultConcurrencyPercentage": 75,
"defaultPercentage": 50,
"id": "0oacamvryxiyMqgiY1e5",
"lastUpdate": "2022-05-20T21:13:07.410Z",
"lastUpdatedBy": "00u7xut94qEWYx5ss1d4",
"orgId": "org1234",
"principalId": "prlh5hd6act3aHDrr1f5",
"principalType": "SSWS_TOKEN"
}
},
"PrincipalRateLimitsOAuthClientListAllExample": {
"summary": "List all OAuth 2.0 client principal rate limits",
"value": [
{
"createdBy": "00uid52637YwIXkJq1d4",
"createdDate": "2023-05-02T20:37:38.000Z",
"defaultConcurrencyPercentage": 40,
"defaultPercentage": 40,
"id": "prl7yh347wuzN5P1C1e7",
"lastUpdate": "2024-11-29T14:56:06.000Z",
"lastUpdatedBy": "00uid52637YwIXkJq1d4",
"orgId": "00o7xut90ucsjAQ7S1e6",
"principalId": "0oa7yh346zIE1y84p1e7",
"principalType": "OAUTH_CLIENT"
},
{
"createdBy": "00uid52637YwIXkJq1d4",
"createdDate": "2023-12-07T21:58:02.000Z",
"defaultConcurrencyPercentage": 50,
"defaultPercentage": 50,
"id": "prlbqdob5bhM6nff61e7",
"lastUpdate": "2023-12-07T21:58:02.000Z",
"lastUpdatedBy": "00uid52637YwIXkJq1d4",
"orgId": "00o7xut90ucsjAQ7S1e6",
"principalId": "0oabqdob4da0JGuMf1e7",
"principalType": "OAUTH_CLIENT"
},
{
"createdBy": "00uid52637YwIXkJq1d4",
"createdDate": "2024-01-12T20:59:18.000Z",
"defaultConcurrencyPercentage": 50,
"defaultPercentage": 50,
"id": "prlcamvrzvkglWHqR1e7",
"lastUpdate": "2024-01-12T20:59:18.000Z",
"lastUpdatedBy": "00uid52637YwIXkJq1d4",
"orgId": "00o7xut90ucsjAQ7S1d7",
"principalId": "0oacamvryxiyMqgiY1e7",
"principalType": "OAUTH_CLIENT"
}
]
},
"PrincipalRateLimitsSSWSListAllExample": {
"summary": "List all SSWS API token principal rate limits",
"value": [
{
"createdBy": "00u7xut94qEWYx5ss1d4",
"createdDate": "2024-09-12T17:28:56.000Z",
"defaultConcurrencyPercentage": 50,
"defaultPercentage": 50,
"id": "prlh5hd7qct3aHDry1f6",
"lastUpdate": "2024-09-12T17:28:56.000Z",
"lastUpdatedBy": "00uid52637YwIXkJq1d4",
"orgId": "00o7xut90ucsjAQ7S1e6",
"principalId": "00T14q3ns31qMEJUU1d7",
"principalType": "SSWS_TOKEN"
},
{
"createdBy": "00uid52637YwIXkJq1d4",
"createdDate": "2024-11-13T17:07:14.000Z",
"defaultConcurrencyPercentage": 50,
"defaultPercentage": 50,
"id": "prlid6w9ilOWlVbpG1f6",
"lastUpdate": "2024-11-13T17:07:14.000Z",
"lastUpdatedBy": "00uid52637YwIXkJq1d4",
"orgId": "00o7xut90ucsjAQ7S1e6",
"principalId": "00T16ewcxyIrMV6Lb1d7",
"principalType": "SSWS_TOKEN"
}
]
},
"PrivilegedResourceClaimAppAccountResponse": {
"value": {
"containerDetails": {
"_links": {
"login": {
"href": "https://appinstance-admin.oktapreview.com/home/google/0oa103099SBEb3Z2b0g4,"
},
"logo": {
"href": "https://appinstance-admin.oktapreview.com/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png,"
}
},
"appName": "google,",
"containerId": "0oa103099SBEb3Z2b0g4,",
"displayName": "Google App1,",
"globalAppId": "964b82aa-85b4-5645-b790-83312c473480,",
"passwordPushSupported": "true,",
"provisioningEnabled": "true,"
},
"created": "2024-06-10T11:11:01.000Z",
"credentialSyncInfo": {
"errorCode": "",
"errorReason": "",
"secretVersionId": "",
"syncState": "NOT_SYNCED",
"syncTime": ""
},
"credentials": {
"userName": "testuser@example.com"
},
"id": "opa100xTfFs4MasRf0g4",
"lastUpdated": "2024-06-10T11:11:01.000Z",
"resourceType": "APP_ACCOUNT",
"status": "ACTIVE"
}
},
"PrivilegedResourceClaimOktaAccountResponse": {
"value": {
"created": "2024-06-10T11:11:01.000Z",
"credentialSyncInfo": {
"errorCode": "",
"errorReason": "",
"secretVersionId": "",
"syncState": "NOT_SYNCED",
"syncTime": ""
},
"credentials": {
"userName": "username"
},
"id": "opa100xTfFs4MasRf0g4",
"lastUpdated": "2024-06-10T11:11:01.000Z",
"profile": {
"email": "testuser@example.com"
},
"resourceId": "00u100xTfFs4MasRf0g4,",
"resourceType": "OKTA_USER_ACCOUNT",
"status": "ACTIVE"
}
},
"PrivilegedResourceCreateAppAccountRequest": {
"value": {
"containerDetails": {
"containerId": "0oa103099SBEb3Z2b0g4"
},
"credentials": {
"userName": "testuser@example.com"
},
"resourceType": "APP_ACCOUNT"
}
},
"PrivilegedResourceCreateAppAccountResponse": {
"value": {
"containerDetails": {
"_links": {
"login": {
"href": "https://appinstance-admin.oktapreview.com/home/google/0oa103099SBEb3Z2b0g4,"
},
"logo": {
"href": "https://appinstance-admin.oktapreview.com/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png,"
}
},
"appName": "google,",
"containerId": "0oa103099SBEb3Z2b0g4,",
"displayName": "Google App1,",
"globalAppId": "964b82aa-85b4-5645-b790-83312c473480,",
"passwordPushSupported": "true,",
"provisioningEnabled": "true,"
},
"created": "2024-06-10T11:11:01.000Z",
"credentialSyncInfo": {
"errorCode": "",
"errorReason": "",
"secretVersionId": "",
"syncState": "NOT_SYNCED",
"syncTime": ""
},
"credentials": {
"userName": "testuser@example.com"
},
"id": "opa100xTfFs4MasRf0g4",
"lastUpdated": "2024-06-10T11:11:01.000Z",
"resourceType": "APP_ACCOUNT",
"status": "INACTIVE"
}
},
"PrivilegedResourceCreateOktaAccountRequestConvert": {
"value": {
"resourceId": "00u100xTfFs4MasRf0g4",
"resourceType": "OKTA_USER_ACCOUNT"
}
},
"PrivilegedResourceCreateOktaAccountRequestNew": {
"value": {
"credentials": {
"userName": "username"
},
"profile": {
"email": "testuser@example.com"
},
"resourceType": "OKTA_USER_ACCOUNT"
}
},
"PrivilegedResourceCreateOktaAccountResponse": {
"value": {
"created": "2024-06-10T11:11:01.000Z",
"credentialSyncInfo": {
"errorCode": "",
"errorReason": "",
"secretVersionId": "",
"syncState": "NOT_SYNCED",
"syncTime": ""
},
"credentials": {
"userName": "username"
},
"id": "opa100xTfFs4MasRf0g4",
"lastUpdated": "2024-06-10T11:11:01.000Z",
"profile": {
"email": "testuser@example.com"
},
"resourceId": "00u100xTfFs4MasRf0g4,",
"resourceType": "OKTA_USER_ACCOUNT",
"status": "INACTIVE"
}
},
"PrivilegedResourceFilterCreatePayload": {
"summary": "Filters request body",
"value": {
"appGroups": [
{
"externalId": 18070146415,
"name": "domainAdminsGroup1"
},
{
"externalId": 7968626130,
"name": "domainAdminsGroup2"
}
],
"organizationalUnits": [
{
"name": "OU=example1,DN=globo,DN=com"
},
{
"name": "OU=example2,DN=globo,DN=com"
}
]
}
},
"PrivilegedResourceRotatePasswordAppAccountResponse": {
"value": {
"containerDetails": {
"_links": {
"login": {
"href": "https://appinstance-admin.oktapreview.com/home/google/0oa103099SBEb3Z2b0g4,"
},
"logo": {
"href": "https://appinstance-admin.oktapreview.com/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png,"
}
},
"appName": "google,",
"containerId": "0oa103099SBEb3Z2b0g4,",
"displayName": "Google App1,",
"globalAppId": "964b82aa-85b4-5645-b790-83312c473480,",
"passwordPushSupported": "true,",
"provisioningEnabled": "true,"
},
"created": "2024-06-10T11:11:01.000Z",
"credentialSyncInfo": {
"errorCode": "",
"errorReason": "",
"secretVersionId": "9f8400-e29b-41d4-a716-926655440034",
"syncState": "SYNCING",
"syncTime": ""
},
"credentials": {
"userName": "testuser@example.com"
},
"id": "opa100xTfFs4MasRf0g4",
"lastUpdated": "2024-06-10T11:11:01.000Z",
"resourceType": "APP_ACCOUNT",
"status": "ACTIVE"
}
},
"PrivilegedResourceRotatePasswordOktaAccountResponse": {
"value": {
"created": "2024-06-10T11:11:01.000Z",
"credentialSyncInfo": {
"errorCode": "",
"errorReason": "",
"secretVersionId": "9f8400-e29b-41d4-a716-926655440034",
"syncState": "SYNCED",
"syncTime": "2024-06-11T11:11:01.000Z"
},
"credentials": {
"userName": "username"
},
"id": "opa100xTfFs4MasRf0g4",
"lastUpdated": "2024-06-10T11:11:01.000Z",
"profile": {
"email": "testuser@example.com"
},
"resourceId": "00u100xTfFs4MasRf0g4,",
"resourceType": "OKTA_USER_ACCOUNT",
"status": "ACTIVE"
}
},
"PrivilegedResourcesAppAccountUpdateRequest": {
"value": {
"username": "username"
}
},
"PrivilegedResourcesFetchResponse": {
"summary": "List privileged resources",
"value": [
{
"created": "2024-06-10T11:11:01.000Z",
"credentialSyncInfo": {
"errorCode": "",
"errorReason": "",
"secretVersionId": "9f8400-e29b-41d4-a716-926655440034",
"syncState": "SYNCED",
"syncTime": "2024-06-10T11:30:01.000Z"
},
"credentials": {
"userName": "john.adams@ct12-100k.local.domain"
},
"id": "opa100xTfFs4MasRf0g4",
"lastUpdated": "2024-06-10T11:11:01.000Z",
"profile": {
"displayName": "John Adams",
"dn": "CN=John Adams,OU=Sales,DC=ct12-100k,DC=local",
"email": "john.adams@ct12-100k.local.domain",
"firstName": "John",
"lastName": "Adams",
"objectSid": "sid-1234",
"samAccountName": "john-adams"
},
"resourceType": "APP_ACCOUNT",
"status": "ACTIVE"
},
{
"created": "2024-06-10T11:11:01.000Z",
"credentialSyncInfo": {
"errorCode": "",
"errorReason": "",
"secretVersionId": "9f8400-e29b-41d4-a716-926655440034",
"syncState": "SYNCED",
"syncTime": "2024-06-10T11:30:01.000Z"
},
"credentials": {
"userName": "testuser@example.com"
},
"id": "opa100xTfFs4MasRf0g5",
"lastUpdated": "2024-06-10T11:11:01.000Z",
"profile": {
"displayName": "John Doe",
"dn": "CN=John Doe,OU=Sales,DC=ct12-100k,DC=local",
"email": "john.doe@ct12-100k.local.domain",
"firstName": "John",
"lastName": "Doe",
"objectSid": "sid-5678",
"samAccountName": "john-doe"
},
"resourceType": "APP_ACCOUNT",
"status": "ACTIVE"
}
]
},
"PrivilegedResourcesGetAppAccountResponse": {
"value": {
"containerDetails": {
"_links": {
"login": {
"href": "https://appinstance-admin.oktapreview.com/home/google/0oa103099SBEb3Z2b0g4,"
},
"logo": {
"href": "https://appinstance-admin.oktapreview.com/assets/img/logos/default.6770228fb0dab49a1695ef440a5279bb.png,"
}
},
"appName": "google,",
"containerId": "0oa103099SBEb3Z2b0g4,",
"displayName": "Google App1,",
"globalAppId": "964b82aa-85b4-5645-b790-83312c473480,",
"passwordPushSupported": "true,",
"provisioningEnabled": "true,"
},
"created": "2024-06-10T11:11:01.000Z",
"credentialSyncInfo": {
"errorCode": "UNKNOWN_ERROR",
"errorReason": "Password update failed",
"secretVersionId": "9f8400-e29b-41d4-a716-926655440034",
"syncState": "SYNC_FAILED",
"syncTime": "2024-06-10T11:30:01.000Z"
},
"credentials": {
"userName": "testuser@example.com"
},
"id": "opa100xTfFs4MasRf0g4",
"lastUpdated": "2024-06-10T11:11:01.000Z",
"resourceType": "APP_ACCOUNT",
"status": "ACTIVE"
}
},
"PrivilegedResourcesGetOktaAccountResponse": {
"value": {
"created": "2024-06-10T11:11:01.000Z",
"credentialSyncInfo": {
"errorCode": "",
"errorReason": "",
"secretVersionId": "9f8400-e29b-41d4-a716-926655440034",
"syncState": "SYNCED",
"syncTime": "2024-06-10T11:30:01.000Z"
},
"credentials": {
"userName": "testuser@example.com"
},
"id": "opa100xTfFs4MasRf0g4",
"lastUpdated": "2024-06-10T11:11:01.000Z",
"profile": {
"email": "testuser@example.com"
},
"resourceId": "00u100xTfFs4MasRf0g4,",
"resourceType": "OKTA_USER_ACCOUNT",
"status": "ACTIVE"
}
},
"PrivilegedResourcesOktaUserAccountUpdateRequest": {
"value": {
"profile": {
"email": "testuser@example.com"
},
"username": "username"
}
},
"ProfileEnrollmentRequest": {
"summary": "An example registration hook profile enrollment (SSR) inline hook request body",
"value": {
"cloudEventVersion": 0.1,
"contentType": "application/json",
"data": {
"action": "ALLOW",
"context": {
"request": {
"id": "123testId456",
"ipAddress": "127.0.0.1",
"method": "POST",
"url": {
"value": "/idp/idx/enroll/new"
}
}
},
"userProfile": {
"email": "rosario.jones@example.com",
"firstName": "Rosario",
"lastName": "Jones",
"login": "rosario.jones@example.com"
}
},
"eventId": "04Dmt8BcT_aEgM",
"eventTime": "2022-04-25T17:35:27.000Z",
"eventType": "com.okta.user.pre-registration",
"eventTypeVersion": 1,
"requestType": "self.service.registration",
"source": "regt4qeBKU29vSoPz0g3"
}
},
"ProfileEnrollmentResponse": {
"summary": "An example registration hook profile enrollment (SSR) inline hook response",
"value": {
"commands": [
{
"type": "com.action.update",
"value": {
"registration": "ALLOW"
}
}
]
}
},
"ProfileEnrollmentResponseDeny": {
"summary": "An example profile enrollment (SSR) inline hook deny response",
"value": {
"commands": [
{
"type": "com.action.update",
"value": {
"registration": "DENY"
}
}
],
"error": {
"errorCauses": [
{
"domain": "end-user",
"errorSummary": "Only example.com emails can register.",
"location": "data.userProfile.email",
"locationType": "body",
"reason": "INVALID_EMAIL_DOMAIN"
}
],
"errorSummary": "Incorrect email address. Please contact your admin."
}
}
},
"ProgressiveProfileRequest": {
"summary": "An example progressive profile inline hook request",
"value": {
"cloudEventVersion": 0.1,
"contentType": "application/json",
"data": {
"action": "ALLOW",
"context": {
"request": {
"id": "123dummyId456",
"ipAddress": "127.0.0.1",
"method": "POST",
"url": {
"value": "/idp/idx/enroll/update"
}
},
"user": {
"_links": {
"factors": {
"href": "/api/v1/users/00u48gwcu01WxvNol0g7/factors"
},
"groups": {
"href": "/api/v1/users/00u48gwcu01WxvNol0g7/groups"
}
},
"id": "00u48gwcu01WxvNo",
"passwordChanged": "2022-01-01T00:00:00.000Z",
"profile": {
"firstName": "Rosario",
"lastName": "Jones\"",
"locale": "en_US",
"login": "rosario.jones@example.com",
"timeZone": "America/Los_Angeles"
}
}
},
"userProfileUpdate": {
"employeeNumber": 1234
}
},
"eventId": "vzYp_zMwQu2htIWRbNJdfw",
"eventTime": "2022-04-25T04:04:41.000Z",
"eventType": "com.okta.user.pre-registration",
"eventTypeVersion": 1,
"requestType": "progressive.profile",
"source": "regt4qeBKU29vS"
}
},
"ProgressiveProfileResponse": {
"summary": "An example progressive profile inline hook response",
"value": {
"commands": [
{
"type": "com.okta.user.progressive.profile.update'",
"value": "request.body.data.userProfileUpdate['employeeNumber']"
}
]
}
},
"ProgressiveProfileResponseDeny": {
"summary": "An example progressive profile inline hook deny response",
"value": {
"commands": [
{
"type": "com.action.update",
"value": {
"registration": "DENY"
}
}
],
"error": {
"errorCauses": [
{
"domain": "end-user",
"errorSummary": "Only employee numbers with 4 digits can register.",
"location": "data.userProfile.employeeNumber",
"locationType": "body",
"reason": "INVALID_EMPLOYEE_NUMBER"
}
],
"errorSummary": "Incorrect employee number. Enter an employee number with 4 digits."
}
}
},
"ProvisioningConnectionOAuthOrg2OrgWithRotationRequestEx": {
"summary": "Provisioning connection with OAuth 2.0 for Okta Org2Org app with key rotation",
"value": {
"profile": {
"authScheme": "OAUTH",
"clientId": "0oa2h6su6bVFyJzIf1d7",
"signing": {
"rotationMode": "AUTO"
}
}
},
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"ProvisioningConnectionOAuthOrg2OrgWithRotationResponseEx": {
"summary": "Provisioning connection with OAuth 2.0 for Okta Org2Org (okta_org2org) app",
"value": {
"_links": {
"deactivate": {
"hints": {
"allow": [
"POST"
]
},
"href": "https://{yourOktaDomain}/api/v1/apps/${appId}/connections/default/lifecycle/deactivate"
},
"self": {
"hints": {
"allow": [
"GET",
"POST"
]
},
"href": "https://{yourOktaDomain}/api/v1/apps/${appId}/connections/default"
}
},
"authScheme": "OAUTH2",
"profile": {
"authScheme": "OAUTH2",
"clientId": "0oa2wmzEtqh49C1Sr0g4",
"signing": {
"rotationMode": "AUTO"
}
},
"status": "ENABLED"
},
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"ProvisioningConnectionOauthO365RequestEx": {
"summary": "Provisioning connection with OAuth 2.0 for Microsoft Office 365 app",
"value": {
"profile": {
"authScheme": "OAUTH2",
"settings": {
"adminPassword": "office_admin-password",
"adminUsername": "office_admin-username"
}
}
}
},
"ProvisioningConnectionOauthRequestEx": {
"summary": "Provisioning connection with OAuth 2.0",
"value": {
"profile": {
"authScheme": "OAUTH2"
}
}
},
"ProvisioningConnectionOauthResponseEx": {
"summary": "Provisioning connection with OAuth 2.0 for Microsoft Office 365 app",
"value": {
"_links": {
"authorize": {
"guidance": [
"Specifies the URI to invoke in a browser for granting scope consent required to complete the OAuth 2.0 connection."
],
"hints": {
"allow": [
"GET"
]
},
"href": "https://login.microsoftonline.com/myofficetenant.onmicrosoft.com/oauth2/authorize?response_type=code&state=>&client_id=
\nSupported apps:\n * Okta Admin Console (`admin-console`)\n",
"in": "path",
"name": "appName",
"required": true,
"schema": {
"example": "admin-console",
"type": "string"
}
},
"pathGrantId": {
"description": "Grant ID",
"in": "path",
"name": "grantId",
"required": true,
"schema": {
"example": "iJoqkwx50mrgX4T9LcaH",
"type": "string"
}
},
"pathGroupId": {
"description": "The `id` of the group",
"in": "path",
"name": "groupId",
"required": true,
"schema": {
"example": "00g1emaKYZTWRYYRRTSK",
"type": "string"
}
},
"pathGroupPushMappingId": {
"description": "Group push mapping ID",
"in": "path",
"name": "mappingId",
"required": true,
"schema": {
"example": "gPm00000000000000000",
"type": "string"
}
},
"pathGroupRuleId": {
"description": "The `id` of the group rule",
"in": "path",
"name": "groupRuleId",
"required": true,
"schema": {
"example": "0pr3f7zMZZHPgUoWO0g4",
"type": "string"
}
},
"pathHookKeyId": {
"description": "ID of the Hook Key",
"in": "path",
"name": "id",
"required": true,
"schema": {
"example": "XreKU5laGwBkjOTehusG",
"type": "string"
}
},
"pathId": {
"description": "An ID, login, or login shortname (as long as the shortname is unambiguous) of an existing Okta user",
"in": "path",
"name": "id",
"required": true,
"schema": {
"type": "string"
}
},
"pathIdentitySourceExternalId": {
"description": "The external ID of the identity source group",
"example": "GROUPEXT123456784C2IF",
"in": "path",
"name": "externalId",
"required": true,
"schema": {
"type": "string"
}
},
"pathIdentitySourceGroupOrExternalId": {
"description": "The Okta group ID or external ID of the identity source group",
"example": "00gsl4xM9ys8TdnbZ0g4 or GROUPEXT123456784C2IF",
"in": "path",
"name": "groupOrExternalId",
"required": true,
"schema": {
"type": "string"
}
},
"pathIdentitySourceId": {
"description": "The ID of the identity source for which the session is created",
"example": "0oa3l6l6WK6h0R0QW0g4",
"in": "path",
"name": "identitySourceId",
"required": true,
"schema": {
"type": "string"
}
},
"pathIdentitySourceMemberExternalId": {
"description": "The external ID of the identity source user",
"example": "USEREXT123456784C2IFA",
"in": "path",
"name": "memberExternalId",
"required": true,
"schema": {
"type": "string"
}
},
"pathIdentitySourceSessionId": {
"description": "The ID of the identity source session",
"example": "aps1qqonvr2SZv6o70h8",
"in": "path",
"name": "sessionId",
"required": true,
"schema": {
"type": "string"
}
},
"pathIdentitySourceUserId": {
"description": "The ID of the user in the identity source",
"example": "00u7m9p9ZT8k2S2EX1f7",
"in": "path",
"name": "appUserId",
"required": true,
"schema": {
"type": "string"
}
},
"pathIdpCsrId": {
"description": "`id` of the IdP CSR",
"in": "path",
"name": "idpCsrId",
"required": true,
"schema": {
"example": "1uEhyE65oV3H6KM9gYcN",
"type": "string"
}
},
"pathIdpId": {
"description": "`id` of IdP",
"in": "path",
"name": "idpId",
"required": true,
"schema": {
"example": "0oa62bfdjnK55Z5x80h7",
"type": "string"
}
},
"pathInlineHookId": {
"description": "`id` of the inline hook",
"in": "path",
"name": "inlineHookId",
"required": true,
"schema": {
"example": "Y7Rzrd4g4xj6WdKzrBHH",
"type": "string"
}
},
"pathJsonWebKeyId": {
"description": "Unique `id` of the OAuth 2.0 client JSON Web Key",
"example": "pks2f4zrZbs8nUa7p0g4",
"in": "path",
"name": "keyId",
"required": true,
"schema": {
"type": "string"
}
},
"pathKeyId": {
"description": "ID of the Key Credential for the application",
"in": "path",
"name": "keyId",
"required": true,
"schema": {
"example": "sjP9eiETijYz110VkhHN",
"type": "string"
}
},
"pathKid": {
"description": "Unique `id` of the IdP key credential",
"in": "path",
"name": "kid",
"required": true,
"schema": {
"example": "KmMo85SSsU7TZzOShcGb",
"type": "string"
}
},
"pathLifecycle": {
"description": "Whether to `ENABLE` or `DISABLE` the feature",
"in": "path",
"name": "lifecycle",
"required": true,
"schema": {
"$ref": "#/components/schemas/FeatureLifecycle"
}
},
"pathLinkedObjectName": {
"description": "Primary or Associated name",
"in": "path",
"name": "linkedObjectName",
"required": true,
"schema": {
"type": "string"
}
},
"pathLogStreamId": {
"description": "Unique identifier for the log stream",
"in": "path",
"name": "logStreamId",
"required": true,
"schema": {
"example": "0oa1orzg0CHSgPcjZ0g4",
"type": "string"
}
},
"pathLogStreamType": {
"in": "path",
"name": "logStreamType",
"required": true,
"schema": {
"$ref": "#/components/schemas/LogStreamType"
}
},
"pathMappingId": {
"description": "`id` of the Mapping",
"in": "path",
"name": "mappingId",
"required": true,
"schema": {
"example": "cB6u7X8mptebWkffatKA",
"type": "string"
}
},
"pathMemberId": {
"description": "`id` of the member",
"in": "path",
"name": "memberId",
"required": true,
"schema": {
"example": "irb1qe6PGuMc7Oh8N0g4",
"type": "string"
}
},
"pathMethodType": {
"description": "Type of authenticator method",
"in": "path",
"name": "methodType",
"required": true,
"schema": {
"$ref": "#/components/schemas/AuthenticatorMethodType"
}
},
"pathNotificationType": {
"in": "path",
"name": "notificationType",
"required": true,
"schema": {
"$ref": "#/components/schemas/NotificationType"
}
},
"pathOAuthProvisioningAppName": {
"in": "path",
"name": "appName",
"required": true,
"schema": {
"$ref": "#/components/schemas/OAuthProvisioningEnabledApp"
}
},
"pathOperation": {
"in": "path",
"name": "operation",
"required": true,
"schema": {
"type": "string"
}
},
"pathOsAccountId": {
"description": "The unique identifier for the OS account",
"example": "dao3qgkIEKjhNZudR0g4",
"in": "path",
"name": "osAccountId",
"required": true,
"schema": {
"type": "string"
}
},
"pathOwnerId": {
"description": "The `id` of the group owner",
"in": "path",
"name": "ownerId",
"required": true,
"schema": {
"example": "00u1emaK22TWRYd3TtG",
"type": "string"
}
},
"pathPermissionType": {
"description": "An Okta [permission](/openapi/okta-management/guides/permissions)",
"in": "path",
"name": "permissionType",
"required": true,
"schema": {
"example": "okta.users.manage",
"type": "string"
}
},
"pathPolicyId": {
"description": "`id` of the policy",
"in": "path",
"name": "policyId",
"required": true,
"schema": {
"example": "00plrilJ7jZ66Gn0X0g3",
"type": "string"
}
},
"pathPolicyMappingId": {
"description": "`id` of the policy resource Mapping",
"in": "path",
"name": "mappingId",
"required": true,
"schema": {
"example": "maplr2rLjZ6NsGn1P0g3",
"type": "string"
}
},
"pathPoolId": {
"description": "ID of the agent pool for which the settings apply to",
"in": "path",
"name": "poolId",
"required": true,
"schema": {
"type": "string"
}
},
"pathPostureCheckId": {
"description": "ID of the device posture check",
"in": "path",
"name": "postureCheckId",
"required": true,
"schema": {
"type": "string"
}
},
"pathPrimaryRelationshipName": {
"description": "Name of the `primary` relationship being assigned",
"in": "path",
"name": "primaryRelationshipName",
"required": true,
"schema": {
"example": "manager",
"type": "string"
}
},
"pathPrimaryUserId": {
"description": "User ID to be assigned to the `primary` relationship for the `associated` user",
"in": "path",
"name": "primaryUserId",
"required": true,
"schema": {
"type": "string"
}
},
"pathPrincipalRateLimitId": {
"description": "ID of the principal rate limit",
"in": "path",
"name": "principalRateLimitId",
"required": true,
"schema": {
"example": "0oacamvryxiyMqgiY1d7",
"type": "string"
}
},
"pathPublicKeyId": {
"description": "id\" of the Public Key",
"in": "path",
"name": "keyId",
"required": true,
"schema": {
"example": "FcH2P9Eg7wr0o8N2FuV0",
"type": "string"
}
},
"pathPushProviderId": {
"description": "Id of the push provider",
"in": "path",
"name": "pushProviderId",
"required": true,
"schema": {
"type": "string"
}
},
"pathQueryRoleExpand": {
"description": "An optional parameter used to return targets configured for the standard role assignment in the `embedded` property. Supported values: `targets/groups` or `targets/catalog/apps`",
"examples": {
"appTarget": {
"summary": "Return app targets",
"value": "targets/catalog/apps"
},
"groupTarget": {
"summary": "Return group targets",
"value": "targets/groups"
}
},
"in": "query",
"name": "expand",
"required": false,
"schema": {
"type": "string"
}
},
"pathRealmId": {
"description": "ID of the realm",
"in": "path",
"name": "realmId",
"required": true,
"schema": {
"example": "vvrcFogtKCrK9aYq3fgV",
"type": "string"
}
},
"pathRelationshipName": {
"description": "Name of the `primary` or `associated` relationship being queried",
"examples": {
"manager": {
"summary": "Example of a `primary` name",
"value": "manager"
},
"subordinate": {
"summary": "Example of an `associated` name",
"value": "subordinate"
}
},
"in": "path",
"name": "relationshipName",
"required": true,
"schema": {
"type": "string"
}
},
"pathResourceId": {
"description": "`id` of the resource",
"in": "path",
"name": "resourceId",
"required": true,
"schema": {
"example": "ire106sQKoHoXXsAe0g4",
"type": "string"
}
},
"pathResourceSetIdOrLabel": {
"description": "`id` or `label` of the resource set",
"in": "path",
"name": "resourceSetIdOrLabel",
"required": true,
"schema": {
"example": "iamoJDFKaJxGIr0oamd9g",
"type": "string"
}
},
"pathRiskProviderId": {
"description": "`id` of the risk provider object",
"in": "path",
"name": "riskProviderId",
"required": true,
"schema": {
"example": "00rp12r4skkjkjgsn",
"type": "string"
}
},
"pathRoleAssignmentId": {
"description": "The `id` of the role assignment",
"in": "path",
"name": "roleAssignmentId",
"required": true,
"schema": {
"example": "JBCUYUC7IRCVGS27IFCE2SKO",
"type": "string"
}
},
"pathRoleId": {
"description": "`id` of the role",
"in": "path",
"name": "roleId",
"required": true,
"schema": {
"example": "3Vg1Pjp3qzw4qcCK5EdO",
"type": "string"
}
},
"pathRoleIdOrEncodedRoleId": {
"description": "The `id` of the role or Base32 encoded `id` of the role name",
"in": "path",
"name": "roleIdOrEncodedRoleId",
"required": true,
"schema": {
"example": "JBCUYUC7IRCVGS27IFCE2SKO",
"type": "string"
}
},
"pathRoleIdOrLabel": {
"description": "`id` or `label` of the role",
"in": "path",
"name": "roleIdOrLabel",
"required": true,
"schema": {
"example": "cr0Yq6IJxGIr0ouum0g3",
"type": "string"
}
},
"pathRoleRef": {
"description": "A reference to an existing role. Standard roles require a `roleType`, while Custom Roles require a `roleId`. See [Standard roles](/openapi/okta-management/guides/roles/#standard-roles).",
"in": "path",
"name": "roleRef",
"required": true,
"schema": {
"oneOf": [
{
"$ref": "#/components/schemas/RoleType"
},
{
"$ref": "#/components/schemas/RoleId"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
}
},
"pathRuleId": {
"description": "`id` of the policy rule",
"in": "path",
"name": "ruleId",
"required": true,
"schema": {
"example": "ruld3hJ7jZh4fn0st0g3",
"type": "string"
}
},
"pathSchemaId": {
"description": "Schema ID. You can also use `default` to refer to the default user type schema.",
"in": "path",
"name": "schemaId",
"required": true,
"schema": {
"type": "string"
}
},
"pathScopeId": {
"description": "`id` of Scope",
"in": "path",
"name": "scopeId",
"required": true,
"schema": {
"example": "0TMRpCWXRKFjP7HiPFNM",
"type": "string"
}
},
"pathSecretId": {
"description": "`id` of the API Service Integration instance Secret",
"example": "ocs2f4zrZbs8nUa7p0g4",
"in": "path",
"name": "secretId",
"required": true,
"schema": {
"type": "string"
}
},
"pathSection": {
"in": "path",
"name": "section",
"required": true,
"schema": {
"type": "string"
}
},
"pathSecurityEventProviderId": {
"description": "`id` of the security events provider instance",
"in": "path",
"name": "securityEventProviderId",
"required": true,
"schema": {
"example": "sse1qg25RpusjUP6m0g5",
"type": "string"
}
},
"pathSessionId": {
"description": "`id` of the session",
"in": "path",
"name": "sessionId",
"required": true,
"schema": {
"example": "l7FbDVqS8zHSy65uJD85",
"type": "string"
}
},
"pathSubmissionId": {
"description": "OIN integration ID",
"in": "path",
"name": "submissionId",
"required": true,
"schema": {
"example": "acme_submissionapp_1",
"type": "string"
}
},
"pathTargetGroupId": {
"in": "path",
"name": "targetGroupId",
"required": true,
"schema": {
"example": "00g1e9dfjHeLAsdX983d",
"type": "string"
}
},
"pathTemplateId": {
"description": "`id` of the Template",
"in": "path",
"name": "templateId",
"required": true,
"schema": {
"example": "6NQUJ5yR3bpgEiYmq8IC",
"type": "string"
}
},
"pathTemplateName": {
"description": "The name of the email template",
"in": "path",
"name": "templateName",
"required": true,
"schema": {
"type": "string"
}
},
"pathThemeId": {
"description": "The ID of the theme",
"in": "path",
"name": "themeId",
"required": true,
"schema": {
"type": "string"
}
},
"pathTokenId": {
"description": "`id` of Token",
"in": "path",
"name": "tokenId",
"required": true,
"schema": {
"example": "sHHSth53yJAyNSTQKDJZ",
"type": "string"
}
},
"pathTransactionId": {
"description": "ID of an existing factor verification transaction",
"in": "path",
"name": "transactionId",
"required": true,
"schema": {
"example": "gPAQcN3NDjSGOCAeG2Jv",
"type": "string"
}
},
"pathTrustedOriginId": {
"description": "`id` of the trusted origin",
"in": "path",
"name": "trustedOriginId",
"required": true,
"schema": {
"example": "7j2PkU1nyNIDe26ZNufR",
"type": "string"
}
},
"pathTypeId": {
"in": "path",
"name": "typeId",
"required": true,
"schema": {
"description": "The unique key for the user type",
"type": "string"
}
},
"pathUpdateId": {
"description": "ID of the update",
"in": "path",
"name": "updateId",
"required": true,
"schema": {
"type": "string"
}
},
"pathUserId": {
"description": "ID of an existing Okta user",
"in": "path",
"name": "userId",
"required": true,
"schema": {
"example": "00ub0oNGTSWTBKOLGLNR",
"type": "string"
}
},
"pathUserIdOrLogin": {
"description": "If for the `self` link, this is the ID of the user for whom you want to get the primary user ID. If for the `associated` relation, this is the user ID or login value of the user assigned the associated relationship.\n\nThis can be `me` to represent the current session user.",
"examples": {
"manager": {
"summary": "Example ID of `primary`",
"value": "00u5zex6ztMbOZhF50h7"
},
"subordinate": {
"summary": "Example ID of `associated`",
"value": "00u5zex6ztMbOZhF50h7"
}
},
"in": "path",
"name": "userIdOrLogin",
"required": true,
"schema": {
"type": "string"
}
},
"pathWebAuthnMethodType": {
"description": "Type of authenticator method",
"in": "path",
"name": "webAuthnMethodType",
"required": true,
"schema": {
"$ref": "#/components/schemas/AuthenticatorMethodTypeWebAuthn"
}
},
"pathWellKnownUriPath": {
"description": "The path of the well-known URI",
"in": "path",
"name": "path",
"required": true,
"schema": {
"enum": [
"apple-app-site-association",
"assetlinks.json",
"webauthn"
],
"type": "string"
}
},
"pathZoneId": {
"description": "`id` of the Network Zone",
"example": "nzowc1U5Jh5xuAK0o0g3",
"in": "path",
"name": "zoneId",
"required": true,
"schema": {
"type": "string"
}
},
"privQueryAfter": {
"description": "The cursor used for pagination. It represents the last privileged resource ID returned in the previous fetch operation.",
"example": "oprbuthToCeLWOBwh0g4",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
},
"privQueryLastUpdated": {
"description": "Last updated timestamp query parameter",
"example": "2024-11-03T00:00:00.000Z",
"in": "query",
"name": "lastUpdated",
"schema": {
"type": "string"
}
},
"privQueryLimit": {
"description": "Specifies the batch size of the results to be returned",
"in": "query",
"name": "limit",
"schema": {
"default": 200,
"format": "int32",
"maximum": 1000,
"type": "integer"
}
},
"privQueryStatus": {
"description": "The status of the privileged resource to filter on",
"example": "ACTIVE",
"in": "query",
"name": "status",
"schema": {
"type": "string"
}
},
"privilegedResourceId": {
"description": "ID of an existing privileged resource",
"in": "path",
"name": "id",
"required": true,
"schema": {
"type": "string"
}
},
"queryAfter": {
"description": "The cursor to use for pagination. It is an opaque string that specifies your current location in the list and is obtained from the `Link` response header. See [Pagination](https://developer.okta.com/docs/api/#pagination) and [Link header](https://developer.okta.com/docs/api/#link-header).",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
},
"queryAppAfter": {
"description": "Specifies the pagination cursor for the next page of results. Treat this as an opaque value obtained through the next link relationship. See [Pagination](/#pagination).",
"in": "query",
"name": "after",
"schema": {
"example": 16275000448691,
"type": "string"
}
},
"queryAppGrantsExpand": {
"description": "An optional parameter to return scope details in the `_embedded` property. Valid value: `scope`",
"in": "query",
"name": "expand",
"schema": {
"example": "scope",
"type": "string"
}
},
"queryAppLimit": {
"description": "Specifies the number of objects to return per page.\nIf there are multiple pages of results, the Link header contains a `next` link that you need to use as an opaque value (follow it, don't parse it).\nSee [Pagination](/#pagination).\n",
"in": "query",
"name": "limit",
"schema": {
"default": 50,
"format": "int32",
"maximum": 500,
"minimum": 1,
"type": "integer"
}
},
"queryAppUserExpand": {
"description": "An optional query parameter to return the corresponding [User](/openapi/okta-management/management/tags/user) object in the `_embedded` property.\nValid value: `user`",
"in": "query",
"name": "expand",
"schema": {
"example": "user",
"type": "string"
}
},
"queryAppUserQ": {
"description": "Specifies a filter for the list of application users returned based on their profile attributes.\nThe value of `q` is matched against the beginning of the following profile attributes: `userName`, `firstName`, `lastName`, and `email`.\nThis filter only supports the `startsWith` operation that matches the `q` string against the beginning of the attribute values.\n> **Note:** For OIDC apps, user profiles don't contain the `firstName` or `lastName` attributes. Therefore, the query only matches against the `userName` or `email` attributes.\n",
"in": "query",
"name": "q",
"schema": {
"example": "sam",
"type": "string"
}
},
"queryAppsExpand": {
"description": "An optional parameter used for link expansion to embed more resources in the response.\nOnly supports `expand=user/{userId}` and must be used with the `user.id eq \"{userId}\"` filter query for the same user.\nReturns the assigned [application user](/openapi/okta-management/management/tags/applicationusers) in the `_embedded` property.",
"in": "query",
"name": "expand",
"schema": {
"example": "user/0oa1gjh63g214q0Hq0g4",
"type": "string"
}
},
"queryDiscloseIdentifiers": {
"description": "Indicates whether or not the identifier of an authenticator enrollment is disclosed or anonymized. If it's included in the operation query, then the identifier of the authenticator enrollment (the actual phone number, for example) is included in the response.",
"in": "query",
"name": "discloseIdentifiers",
"schema": {
"items": {
"enum": [
"phone"
],
"type": "string"
},
"type": "array"
}
},
"queryExpand": {
"description": "Valid value: `scope`. If specified, scope details are included in the `_embedded` attribute.",
"in": "query",
"name": "expand",
"schema": {
"type": "string"
}
},
"queryExpandBrand": {
"description": "Specifies additional metadata to be included in the response",
"explode": false,
"in": "query",
"name": "expand",
"required": false,
"schema": {
"items": {
"enum": [
"themes",
"domains",
"emailDomain"
],
"type": "string"
},
"type": "array"
},
"style": "form"
},
"queryExpandEmailDomain": {
"description": "Specifies additional metadata to be included in the response",
"explode": false,
"in": "query",
"name": "expand",
"required": false,
"schema": {
"items": {
"enum": [
"brands"
],
"type": "string"
},
"type": "array"
},
"style": "form"
},
"queryExpandEmailTemplate": {
"description": "Specifies additional metadata to be included in the response",
"explode": false,
"in": "query",
"name": "expand",
"required": false,
"schema": {
"items": {
"enum": [
"settings",
"customizationCount"
],
"type": "string"
},
"type": "array"
},
"style": "form"
},
"queryExpandGroupIdToGroupNameMap": {
"description": "If specified, returns the mapping of group IDs to group names in the `_embedded` object.",
"in": "query",
"name": "expand",
"schema": {
"enum": [
"groupIdToGroupNameMap"
],
"type": "string"
},
"x-okta-added-version": "1.3.0"
},
"queryExpandPageRoot": {
"description": "Specifies additional metadata to be included in the response",
"explode": false,
"in": "query",
"name": "expand",
"required": false,
"schema": {
"items": {
"enum": [
"default",
"customized",
"customizedUrl",
"preview",
"previewUrl"
],
"type": "string"
},
"type": "array"
},
"style": "form"
},
"queryExpandWellKnownUri": {
"description": "Specifies additional metadata to include in the response",
"explode": false,
"in": "query",
"name": "expand",
"required": false,
"schema": {
"items": {
"enum": [
"customized"
],
"type": "string"
},
"type": "array"
},
"style": "form"
},
"queryExpandWellKnownUris": {
"description": "Specifies additional metadata to include in the response",
"explode": false,
"in": "query",
"name": "expand",
"required": false,
"schema": {
"items": {
"enum": [
"all",
"apple-app-site-association",
"assetlinks.json",
"webauthn"
],
"type": "string"
},
"type": "array"
},
"style": "form"
},
"queryFilter": {
"description": "Searches the records for matching value",
"in": "query",
"name": "q",
"schema": {
"type": "string"
}
},
"queryGroupAssignmentLimit": {
"description": "Specifies the number of objects to return per page.\nIf there are multiple pages of results, the Link header contains a `next` link that you need to use as an opaque value (follow it, don't parse it).\nSee [Pagination](/#pagination).",
"examples": {
"hundred": {
"summary": "Sample limit value",
"value": 100
},
"max": {
"summary": "Maximum limit value",
"value": 200
},
"min": {
"summary": "Minimum limit value",
"value": 20
}
},
"in": "query",
"name": "limit",
"schema": {
"default": 20,
"format": "int32",
"maximum": 200,
"minimum": 20,
"type": "integer"
}
},
"queryGroupAssignmentWithGroupExpand": {
"description": "An optional query parameter to return the corresponding assigned [group](openapi/okta-management/management/group) or the group assignment metadata details in the `_embedded` property.",
"examples": {
"group": {
"summary": "Embedded assigned group",
"value": "group"
},
"metadata": {
"summary": "Embedded group assignment metadata",
"value": "metadata"
}
},
"in": "query",
"name": "expand",
"schema": {
"example": "group",
"type": "string"
}
},
"queryGroupAssignmentWithMetadataExpand": {
"description": "An optional query parameter to return the corresponding assigned [group](openapi/okta-management/management/group) or the group assignment metadata details in the `_embedded` property.",
"examples": {
"group": {
"summary": "Embedded assigned group",
"value": "group"
},
"metadata": {
"summary": "Embedded group assignment metadata",
"value": "metadata"
}
},
"in": "query",
"name": "expand",
"schema": {
"example": "metadata",
"type": "string"
}
},
"queryLanguage": {
"description": "The language to use for the email. Defaults to the current user's language if unspecified.",
"in": "query",
"name": "language",
"schema": {
"$ref": "#/components/schemas/Language"
}
},
"queryLimit": {
"description": "A limit on the number of objects to return",
"in": "query",
"name": "limit",
"schema": {
"default": 20,
"maximum": 200,
"minimum": 1,
"type": "integer"
}
},
"queryLimitPerPoolType": {
"description": "Maximum number of agent pools returned",
"in": "query",
"name": "limitPerPoolType",
"required": false,
"schema": {
"default": 5,
"type": "integer"
}
},
"queryOsAccountExpand": {
"description": "Comma-separated list of related resources to include in the `_embedded` attribute. Supported values are `users` and `account_linked_enrollments`.",
"explode": false,
"in": "query",
"name": "expand",
"required": false,
"schema": {
"example": [
"users",
"account_linked_enrollments"
],
"items": {
"enum": [
"users",
"account_linked_enrollments"
],
"type": "string"
},
"type": "array"
},
"style": "form"
},
"queryPoolType": {
"description": "Agent type to search for",
"in": "query",
"name": "poolType",
"required": false,
"schema": {
"$ref": "#/components/schemas/AgentType"
}
},
"queryResultId": {
"description": "The unique identifier returned by the initial POST request (`POST /api/v1/directories/{appInstanceId}/groups/{groupId}/query`)",
"in": "path",
"name": "resultId",
"required": true,
"schema": {
"type": "string"
}
},
"queryScheduled": {
"description": "Return only scheduled or ad-hoc updates. If this parameter isn't provided, Okta returns the entire list of updates.",
"in": "query",
"name": "scheduled",
"required": false,
"schema": {
"type": "boolean"
}
},
"querySortOrder": {
"description": "Specifies sort order: `asc` or `desc` (for search queries only). This parameter is ignored if `sortBy` isn't present.",
"in": "query",
"name": "sortOrder",
"schema": {
"default": "asc",
"type": "string"
}
},
"queryUserExpand": {
"description": "An optional parameter to include metadata in the `_embedded` attribute. Valid values: `blocks` or
**Note:** Only the `client_secret_basic` method is supported",
"enum": [
"client_secret_basic"
],
"example": "client_secret_basic",
"type": "string"
},
"scopes": {
"description": "A list of Okta OAuth 2.0 scopes required for the API service app to function",
"items": {
"$ref": "#/components/schemas/Scope"
},
"type": "array"
},
"setupInstructionsUri": {
"description": "The URL for the API service integration configuration document",
"example": "https://example.com/strawberry/help/apiServiceSetup",
"format": "uri",
"type": "string"
}
},
"type": "object"
},
"ApiServiceCapability": {
"description": "API Service capability configuration with embedded protocol details",
"properties": {
"capability": {
"description": "API Service capability identifier",
"enum": [
"API_SERVICE"
],
"type": "string"
},
"supportedProtocols": {
"description": "List of supported protocols",
"items": {
"enum": [
"OAUTH2"
],
"type": "string"
},
"type": "array"
}
},
"required": [
"capability",
"supportedProtocols"
],
"type": "object"
},
"ApiToken": {
"description": "An API token for an Okta User. This token is NOT scoped any further and can be used for any API the user has permissions to call.",
"properties": {
"_link": {
"$ref": "#/components/schemas/LinksSelf"
},
"clientName": {
"readOnly": true,
"type": "string"
},
"created": {
"format": "date-time",
"readOnly": true,
"type": "string"
},
"expiresAt": {
"format": "date-time",
"readOnly": true,
"type": "string"
},
"id": {
"readOnly": true,
"type": "string"
},
"lastUpdated": {
"format": "date-time",
"readOnly": true,
"type": "string"
},
"name": {
"type": "string"
},
"network": {
"description": "The Network Condition of the API Token",
"properties": {
"connection": {
"description": "The connection type of the Network Condition",
"type": "string"
},
"exclude": {
"description": "List of excluded IP network zones",
"items": {
"type": "string"
},
"type": "array"
},
"include": {
"description": "List of included IP network zones",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"tokenWindow": {
"$ref": "#/components/schemas/TimeDuration"
},
"userId": {
"type": "string"
}
},
"required": [
"name"
],
"title": "API Token",
"type": "object"
},
"ApiTokenUpdate": {
"description": "An API Token Update Object for an Okta user. This token is NOT scoped any further and can be used for any API that the user has permissions to call.",
"properties": {
"clientName": {
"description": "The client name associated with the API Token",
"readOnly": true,
"type": "string"
},
"created": {
"description": "The creation date of the API Token",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"name": {
"description": "The name associated with the API Token",
"type": "string"
},
"network": {
"description": "The Network Condition of the API Token",
"properties": {
"connection": {
"description": "The connection type of the Network Condition",
"type": "string"
},
"exclude": {
"description": "List of excluded IP network zones",
"items": {
"type": "string"
},
"type": "array"
},
"include": {
"description": "List of included IP network zones",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"userId": {
"description": "The userId of the user who created the API Token",
"type": "string"
}
},
"title": "API Token Update",
"type": "object"
},
"AppAccountContainerDetails": {
"description": "Container details for resource type APP_ACCOUNT",
"properties": {
"_links": {
"$ref": "#/components/schemas/AppAccountContainerLink"
},
"appName": {
"description": "The application name",
"example": "google",
"readOnly": true,
"type": "string"
},
"containerId": {
"description": "The app ID associated with the privileged resource",
"example": "0oa103099SBEb3Z2b0g4",
"type": "string"
},
"displayName": {
"description": "Human-readable name of the container that owns the privileged resource",
"example": "Google App1",
"readOnly": true,
"type": "string"
},
"globalAppId": {
"description": "The application global ID",
"example": "964b82aa-85b4-5645-b790-83312c473480",
"readOnly": true,
"type": "string"
},
"passwordPushSupported": {
"description": "Indicates if the application supports password push",
"example": true,
"readOnly": true,
"type": "boolean"
},
"provisioningEnabled": {
"description": "Indicates if provisioning is enabled for this application",
"example": true,
"readOnly": true,
"type": "boolean"
},
"status": {
"$ref": "#/components/schemas/AppInstanceContainerStatus"
}
},
"required": [
"containerId"
],
"type": "object"
},
"AppAccountContainerLink": {
"properties": {
"login": {
"$ref": "#/components/schemas/HrefObjectAppLink"
},
"logo": {
"$ref": "#/components/schemas/HrefObjectLogoLink"
}
},
"readOnly": true,
"type": "object"
},
"AppAndInstanceConditionEvaluatorAppOrInstance": {
"properties": {
"id": {
"description": "ID of the app",
"readOnly": false,
"type": "string"
},
"name": {
"description": "Name of the app type",
"type": "string"
},
"type": {
"$ref": "#/components/schemas/AppAndInstanceType"
}
},
"type": "object"
},
"AppAndInstancePolicyRuleCondition": {
"description": "Specifies apps to include or exclude. If `include` is empty, then the condition is met for all apps.",
"properties": {
"exclude": {
"description": "The list of apps or app instances to exclude",
"items": {
"$ref": "#/components/schemas/AppAndInstanceConditionEvaluatorAppOrInstance"
},
"type": "array"
},
"include": {
"description": "The list of apps or app instances to match on",
"items": {
"$ref": "#/components/schemas/AppAndInstanceConditionEvaluatorAppOrInstance"
},
"type": "array"
}
},
"type": "object"
},
"AppAndInstanceType": {
"description": "Type of app",
"enum": [
"APP",
"APP_TYPE"
],
"type": "string"
},
"AppConfig": {
"description": "Additional app configuration for group push mappings. Currently only required for Active Directory.",
"discriminator": {
"mapping": {
"ACTIVE_DIRECTORY": "#/components/schemas/AppConfigActiveDirectory"
},
"propertyName": "type"
},
"properties": {
"type": {
"$ref": "#/components/schemas/AppConfigType",
"type": "string"
}
},
"type": "object"
},
"AppConfigActiveDirectory": {
"allOf": [
{
"$ref": "#/components/schemas/AppConfig"
}
],
"properties": {
"distinguishedName": {
"description": "The distinguished name of the group in Active Directory",
"type": "string"
},
"groupScope": {
"$ref": "#/components/schemas/ActiveDirectoryGroupScope"
},
"groupType": {
"$ref": "#/components/schemas/ActiveDirectoryGroupType"
},
"samAccountName": {
"description": "The SAM account name of the group in Active Directory",
"type": "string"
}
},
"required": [
"distinguishedName",
"groupScope",
"groupType",
"samAccountName"
],
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"AppConfigType": {
"description": "The type of the app configuration",
"enum": [
"ACTIVE_DIRECTORY"
],
"type": "string"
},
"AppConnectionUserProvisionJWKList": {
"properties": {
"keys": {
"items": {
"$ref": "#/components/schemas/JsonWebKey"
},
"type": "array"
}
},
"required": [
"keys"
]
},
"AppConnectionUserProvisionJWKResponse": {
"properties": {
"jwks": {
"$ref": "#/components/schemas/AppConnectionUserProvisionJWKList"
}
},
"required": [
"jwks"
]
},
"AppCsrPkcs10": {
"description": "Base64URL-encoded CSR in DER format",
"format": "base64",
"type": "string"
},
"AppCustomHrefObject": {
"properties": {
"hints": {
"description": "Describes allowed HTTP verbs for the `href`",
"properties": {
"allow": {
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"href": {
"description": "Link URI",
"type": "string"
},
"title": {
"description": "Link name",
"type": "string"
},
"type": {
"description": "The media type of the link. If omitted, it is implicitly `application/json`.",
"type": "string"
}
},
"readOnly": true,
"required": [
"href"
],
"type": "object"
},
"AppGroup": {
"properties": {
"externalId": {
"description": "The external ID of the app group whose members might be privileged app users",
"example": 18070146415,
"maxLength": 255,
"type": "string"
},
"name": {
"description": "The name of the app group whose members might be privileged app users",
"example": "domainAdminsGroup",
"maxLength": 255,
"type": "string"
}
},
"required": [
"name",
"externalId"
],
"type": "object"
},
"AppInstanceContainerStatus": {
"description": "Current status of the application instance",
"enum": [
"ACTIVE",
"DELETED",
"INACTIVE"
],
"readOnly": true,
"type": "string"
},
"AppInstancePolicyRuleCondition": {
"properties": {
"exclude": {
"items": {
"type": "string"
},
"type": "array"
},
"include": {
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"AppInstanceProperty": {
"properties": {
"label": {
"type": "string"
},
"name": {
"type": "string"
}
},
"required": [
"name",
"label"
],
"type": "object"
},
"AppProperties": {
"additionalProperties": {
"properties": {
"name": {
"description": "Name of the property",
"example": "baseUrl",
"type": "string"
},
"value": {
"description": "Value of the property",
"example": "https://example.com",
"type": "string"
}
},
"type": "object"
},
"description": "App instance properties",
"type": "object",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"AppResourceHrefObject": {
"properties": {
"href": {
"description": "Link URI",
"example": "https://{yourOktaDomain}/api/v1/apps/0oabskvc6442nkvQO0h7",
"type": "string"
},
"title": {
"description": "Link name",
"example": "My App",
"type": "string"
}
},
"type": "object"
},
"AppServiceAccount": {
"properties": {
"containerGlobalName": {
"description": "The key name of the app in the Okta Integration Network (OIN)",
"example": "salesforce",
"readOnly": true,
"type": "string"
},
"containerInstanceName": {
"description": "The app instance label",
"example": "salesforce Prod 5",
"readOnly": true,
"type": "string"
},
"containerOrn": {
"description": "The [ORN](/openapi/okta-management/guides/roles/#okta-resource-name-orn) of the relevant resource.\n\nUse the specific app ORN format (`orn:{partition}:idp:{yourOrgId}:apps:{appType}:{appId}`) to identify an Okta app instance in your org.",
"example": "orn:okta:idp:00o1n8sbwArJ7OQRw406:apps:salesforce:0oa1gjh63g214q0Hq0g4",
"type": "string"
},
"created": {
"description": "Timestamp when the app service account was created",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"description": {
"description": "The description of the app service account",
"example": "This is for accessing salesforce Prod-5",
"format": "regex",
"maxLength": 255,
"minLength": 0,
"type": "string"
},
"id": {
"description": "The UUID of the app service account",
"example": "a747a818-a4c4-4446-8a87-704216495a08",
"format": "regex",
"pattern": "(?i)^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$",
"readOnly": true,
"type": "string"
},
"lastUpdated": {
"description": "Timestamp when the app service account was last updated",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"name": {
"description": "The user-defined name for the app service account",
"example": "salesforce Prod-5 account",
"format": "regex",
"maxLength": 50,
"minLength": 1,
"pattern": "^[\\w\\-_. ]+$",
"type": "string"
},
"ownerGroupIds": {
"description": "A list of IDs of the Okta groups who own the app service account",
"example": [
"00g57qp78yZT2XBA40g7"
],
"items": {
"type": "string"
},
"maxItems": 10,
"minItems": 0,
"type": "array"
},
"ownerUserIds": {
"description": "A list of IDs of the Okta users who own the app service account",
"example": [
"00u11s48P9zGW8yqm0g5"
],
"items": {
"type": "string"
},
"maxItems": 10,
"minItems": 0,
"type": "array"
},
"password": {
"description": "The app service account password",
"format": "password",
"maxLength": 255,
"minLength": 1,
"type": "string",
"writeOnly": true
},
"status": {
"$ref": "#/components/schemas/ServiceAccountStatus"
},
"statusDetail": {
"$ref": "#/components/schemas/ServiceAccountStatusDetail"
},
"username": {
"description": "The username that serves as the direct link to your managed app account. Ensure that this value precisely matches the identifier of the target app account.",
"example": "testuser-salesforce-5@example.com",
"maxLength": 100,
"minLength": 1,
"type": "string"
}
},
"required": [
"name",
"containerOrn",
"username",
"password"
],
"type": "object"
},
"AppServiceAccountCredentials": {
"description": "Credentials for a SaaS app account",
"properties": {
"password": {
"description": "The password associated with the service account",
"format": "password",
"type": "string",
"writeOnly": true
},
"username": {
"description": "The username associated with the service account",
"example": "testuser@example.com",
"maxLength": 100,
"minLength": 1,
"type": "string"
}
},
"required": [
"username"
],
"type": "object"
},
"AppServiceAccountForUpdate": {
"properties": {
"description": {
"description": "The description of the app service account",
"example": "This is for accessing salesforce Prod-5",
"format": "regex",
"maxLength": 255,
"minLength": 0,
"type": "string"
},
"name": {
"description": "The user-defined name for the app service account",
"example": "salesforce Prod-5 account",
"format": "regex",
"maxLength": 50,
"minLength": 1,
"pattern": "^[\\w\\-_. ]+$",
"type": "string"
},
"ownerGroupIds": {
"description": "A list of IDs of the Okta groups who own the app service account",
"example": [
"00g57qp78yZT2XBA40g7"
],
"items": {
"type": "string"
},
"maxItems": 10,
"minItems": 0,
"type": "array"
},
"ownerUserIds": {
"description": "A list of IDs of the Okta users who own the app service account",
"example": [
"00u11s48P9zGW8yqm0g5"
],
"items": {
"type": "string"
},
"maxItems": 10,
"minItems": 0,
"type": "array"
}
},
"type": "object"
},
"AppUser": {
"description": "The app user object defines a user's app-specific profile and credentials for an app",
"properties": {
"_embedded": {
"additionalProperties": {
"properties": {},
"type": "object"
},
"description": "Embedded resources related to the application user using the [JSON Hypertext Application Language](https://datatracker.ietf.org/doc/html/draft-kelly-json-hal-06) specification",
"readOnly": true,
"type": "object"
},
"_links": {
"$ref": "#/components/schemas/LinksAppAndUser"
},
"created": {
"allOf": [
{
"$ref": "#/components/schemas/createdProperty"
},
{
"example": "2014-06-24T15:27:59.000Z"
}
]
},
"credentials": {
"$ref": "#/components/schemas/AppUserCredentials"
},
"externalId": {
"description": "The ID of the user in the target app that's linked to the Okta application user object.\nThis value is the native app-specific identifier or primary key for the user in the target app.\n\nThe `externalId` is set during import when the user is confirmed (reconciled) or during provisioning when the user is created in the target app.\nThis value isn't populated for SSO app assignments (for example, SAML or SWA) because it isn't synchronized with a target app.",
"example": "70c14cc17d3745e8a9f98d599a68329c",
"readOnly": true,
"type": "string"
},
"id": {
"description": "Unique identifier for the Okta user",
"example": "00u11z6WHMYCGPCHCRFK",
"type": "string"
},
"lastSync": {
"description": "Timestamp of the last synchronization operation. This value is only updated for apps with the `IMPORT_PROFILE_UPDATES` or `PUSH PROFILE_UPDATES` feature.",
"example": "2014-06-24T15:27:59.000Z",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"lastUpdated": {
"allOf": [
{
"$ref": "#/components/schemas/lastUpdatedProperty"
},
{
"example": "2014-06-24T15:28:14.000Z"
}
]
},
"passwordChanged": {
"description": "Timestamp when the application user password was last changed",
"example": "2014-06-24T15:27:59.000Z",
"format": "date-time",
"nullable": true,
"readOnly": true,
"type": "string"
},
"profile": {
"$ref": "#/components/schemas/AppUserProfile"
},
"scope": {
"description": "Indicates if the assignment is direct (`USER`) or by group membership (`GROUP`). If not specified, Okta tries to determine the scope based on the assignment type.",
"enum": [
"USER",
"GROUP"
],
"example": "USER",
"type": "string"
},
"status": {
"$ref": "#/components/schemas/AppUserStatus"
},
"statusChanged": {
"description": "Timestamp when the application user status was last changed",
"example": "2014-06-24T15:28:14.000Z",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"syncState": {
"$ref": "#/components/schemas/AppUserSyncState"
}
},
"title": "Application User",
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"AppUserAssignRequest": {
"allOf": [
{
"$ref": "#/components/schemas/AppUser"
},
{
"required": [
"id"
]
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"AppUserCredentials": {
"description": "Specifies a user's credentials for the app.\nThis parameter can be omitted for apps with [sign-on mode](/openapi/okta-management/management/application/getapplication#application/getapplication/t=response&c=200&path=&d=0/signonmode) (`signOnMode`) or [authentication schemes](/openapi/okta-management/management/application/getapplication#application/getapplication/t=response&c=200&path=&d=0/credentials/scheme) (`credentials.scheme`) that don't require credentials.\n",
"properties": {
"password": {
"$ref": "#/components/schemas/AppUserPasswordCredential"
},
"userName": {
"description": "The user's username in the app\n\n> **Note:** The [userNameTemplate](/openapi/okta-management/management/tags/application/other/createapplication#application/createapplication/t=response&c=200&path=&d=0/credentials/usernametemplate) in the application object defines the default username generated when a user is assigned to that app.\n> If you attempt to assign a username or password to an app with an incompatible [authentication scheme](/openapi/okta-management/management/tags/application/other/createapplication#application/createapplication/t=response&c=200&path=&d=0/credentials/scheme), the following error is returned:\n> \"Credentials should not be set on this resource based on the scheme.\"",
"example": "testuser@example.com",
"maxLength": 100,
"minLength": 1,
"type": "string"
}
},
"type": "object"
},
"AppUserCredentialsRequestPayload": {
"description": "Updates the assigned user credentials",
"properties": {
"credentials": {
"$ref": "#/components/schemas/AppUserCredentials"
}
},
"title": "Credentials",
"type": "object"
},
"AppUserPasswordCredential": {
"description": "The user's password. This is a write-only property. An empty `password` object is returned to indicate that a password value exists.",
"properties": {
"value": {
"description": "Password value",
"format": "password",
"type": "string",
"writeOnly": true
}
},
"type": "object"
},
"AppUserProfile": {
"additionalProperties": true,
"description": "Specifies the default and custom profile properties for a user.\nProperties that are visible in the Admin Console for an app assignment can also be assigned through the API.\nSome properties are reference properties that are imported from the target app and can't be configured.\nSee [profile](/openapi/okta-management/management/user/getuser#user/getuser/t=response&c=200&path=profile).\n",
"type": "object"
},
"AppUserProfileRequestPayload": {
"description": "Updates the assigned user profile\n> **Note:** The Okta API currently doesn't support entity tags for conditional updates. As long as you're the only user updating the the user profile, Okta recommends you fetch the most recent profile with [Retrieve an Application User](/openapi/okta-management/management/applicationusers#tag/ApplicationUsers/operation/getApplicationUser), apply your profile update, and then `POST` back the updated profile.",
"properties": {
"profile": {
"$ref": "#/components/schemas/AppUserProfile"
}
},
"title": "Profile",
"type": "object"
},
"AppUserStatus": {
"description": "Status of an application user",
"enum": [
"ACTIVE",
"APPROVED",
"DEPROVISIONED",
"IMPLICIT",
"IMPORTED",
"INACTIVE",
"MATCHED",
"PENDING",
"PROVISIONED",
"REVOKED",
"STAGED",
"SUSPENDED",
"UNASSIGNED"
],
"example": "ACTIVE",
"readOnly": true,
"type": "string",
"x-enumDescriptions": {
"ACTIVE": "The application user is provisioned and is enabled to use the app. This status also occurs if the app has the `IMPORT_PROFILE_UPDATES` feature enabled and user import is confirmed, or if the app doesn't have provisioning enabled.",
"APPROVED": "The application user was created but not provisioned. This status can occur when manual provisioning acknowledgment is required.",
"DEPROVISIONED": "The user was removed by the provisioning operation and the `externalId` property is unassigned.",
"IMPLICIT": "The application user is now migrated to use implicit app assignment.",
"IMPORTED": "The application user is created based on imported data.",
"INACTIVE": "The application user is provisioned, but isn't enabled to use the app. Application users in this status can be reactivated with a password reset or permanently deleted.",
"MATCHED": "The imported user is matched with an existing Application User.",
"PENDING": "The application user is provisioned, but in a pending state and can't use the app. The status moves to `ACTIVE` when the application user is activated.",
"PROVISIONED": "The background provisioning operation completed and the application user was assigned an `externalId` successfully.",
"REVOKED": "The application user is disabled and waiting for deprovisioning acknowledgment. The application user can be deleted after deprovisioning acknowledgment.",
"STAGED": "The application user doesn't have `externalId` set and the background provisioning operation is queued. This applies to apps with the `PUSH_NEW_USERS` feature enabled.",
"SUSPENDED": "The application user is provisioned, but isn't enabled to use the app. Application users in this status can be reactivated without a password reset.",
"UNASSIGNED": "The application user was imported, but the user-matching operation was skipped."
}
},
"AppUserSyncState": {
"description": "The synchronization state for the application user.\nThe application user's `syncState` depends on whether the `PROFILE_MASTERING` feature is enabled for the app.\n\n> **Note:** User provisioning currently must be configured through the Admin Console.",
"enum": [
"DISABLED",
"ERROR",
"OUT_OF_SYNC",
"SYNCHRONIZED",
"SYNCING"
],
"example": "SYNCHRONIZED",
"readOnly": true,
"type": "string",
"x-enumDescriptions": {
"DISABLED": "The provisioning feature is disabled for the app (`PROFILE_MASTERING` feature is disabled).",
"ERROR": "A background provisioning operation failed to update the user's profile in the target app. You must resolve the provisioning task in the Admin Console before you retry the operation.",
"OUT_OF_SYNC": "The Application User has changes that haven't been pushed to the target app.",
"SYNCHRONIZED": "All changes to the application user profile have successfully been synchronized with the target app.",
"SYNCING": "A background provisioning operation is running to update the user's profile in the target app."
}
},
"AppUserUpdateRequest": {
"oneOf": [
{
"$ref": "#/components/schemas/AppUserCredentialsRequestPayload"
},
{
"$ref": "#/components/schemas/AppUserProfileRequestPayload"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"AppleClientSigning": {
"description": "Information used to generate the secret JSON Web Token for the token requests to Apple IdP\n> **Note:** The `privateKey` property is required for a CREATE request. For an UPDATE request, it can be null and keeps the existing value if it's null. The `privateKey` property isn't returned for LIST and GET requests or UPDATE requests if it's null.",
"properties": {
"kid": {
"description": "The key ID that you obtained from Apple when you created the private key for the client",
"example": "test key id",
"maxLength": 1024,
"type": "string"
},
"privateKey": {
"description": "The PKCS \\#8 encoded private key that you created for the client and downloaded from Apple",
"example": "MIGTAgEAMBM........Cb9PnybCnzDv+3cWSGWqpAIsQQZ",
"maxLength": 1024,
"type": "string"
},
"teamId": {
"description": "The Team ID associated with your Apple developer account",
"example": "test team id",
"maxLength": 1024,
"type": "string"
}
},
"type": "object"
},
"Application": {
"discriminator": {
"mapping": {
"AUTO_LOGIN": "#/components/schemas/AutoLoginApplication",
"BASIC_AUTH": "#/components/schemas/BasicAuthApplication",
"BOOKMARK": "#/components/schemas/BookmarkApplication",
"BROWSER_PLUGIN": "#/components/schemas/BrowserPluginApplication",
"OPENID_CONNECT": "#/components/schemas/OpenIdConnectApplication",
"SAML_1_1": "#/components/schemas/Saml11Application",
"SAML_2_0": "#/components/schemas/SamlApplication",
"SECURE_PASSWORD_STORE": "#/components/schemas/SecurePasswordStoreApplication",
"WS_FEDERATION": "#/components/schemas/WsFederationApplication"
},
"propertyName": "signOnMode"
},
"properties": {
"_embedded": {
"description": "Embedded resources related to the app using the [JSON Hypertext Application Language](https://datatracker.ietf.org/doc/html/draft-kelly-json-hal-06) specification. If the `expand=user/{userId}` query parameter is specified, then the assigned [Application User](/openapi/okta-management/management/tags/applicationusers) is embedded.",
"properties": {
"user": {
"additionalProperties": {
"properties": {},
"type": "object"
},
"description": "The specified [Application User](/openapi/okta-management/management/tags/applicationusers) assigned to the app",
"type": "object"
}
},
"readOnly": true,
"type": "object"
},
"_links": {
"$ref": "#/components/schemas/ApplicationLinks"
},
"accessibility": {
"$ref": "#/components/schemas/ApplicationAccessibility"
},
"created": {
"description": "Timestamp when the application object was created",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"expressConfiguration": {
"$ref": "#/components/schemas/ApplicationExpressConfiguration"
},
"features": {
"description": "Enabled app features\n> **Note:** See [Application Features](/openapi/okta-management/management/tags/applicationfeatures/) for app provisioning features.\n",
"items": {
"enum": [
"GROUP_PUSH",
"IMPORT_NEW_USERS",
"IMPORT_PROFILE_UPDATES",
"IMPORT_USER_SCHEMA",
"PROFILE_MASTERING",
"PUSH_NEW_USERS",
"PUSH_PASSWORD_UPDATES",
"PUSH_PROFILE_UPDATES",
"PUSH_USER_DEACTIVATION",
"REACTIVATE_USERS",
"OUTBOUND_DEL_AUTH",
"DESKTOP_SSO",
"FEDERATED_PROFILE",
"SUPPRESS_ACTIVATION_EMAIL",
"PUSH_PENDING_USERS",
"MFA",
"UPDATE_EXISTING_USERNAME",
"EXCLUDE_USERNAME_UPDATE_ON_PROFILE_PUSH",
"EXCHANGE_ACTIVE_SYNC",
"IMPORT_SYNC",
"IMPORT_SYNC_CONTACTS",
"DEVICE_COMPLIANCE",
"VPN_CONFIG",
"IMPORT_SCHEMA_ENUM_VALUES",
"SCIM_PROVISIONING",
"DEVICE_FILTER_IN_SIGN_ON_RULES",
"PROFILE_TEMPLATE_UPGRADE",
"DEFAULT_PUSH_STATUS_TO_PUSH",
"REAL_TIME_SYNC",
"SSO",
"AUTHN_CONTEXT",
"JIT_PROVISIONING",
"GROUP_SYNC",
"OPP_SCIM_INCREMENTAL_IMPORTS",
"IN_MEMORY_APP_USER",
"LOG_STREAMING",
"OAUTH_INTEGRATION",
"IDP",
"PUSH_NEW_USERS_WITHOUT_PASSWORD",
"SKYHOOK_SERVICE",
"ENTITLEMENT_MANAGEMENT",
"PUSH_NEW_USERS_WITH_HASHED_PASSWORD"
],
"type": "string",
"x-enumDescriptions": {
"AUTHN_CONTEXT": "Apps support establishing an authentication context based on claims from an IdP",
"DEFAULT_PUSH_STATUS_TO_PUSH": "App defaults Push status to `PUSH`. This feature is for apps, such as SharePoint, that want to receive App User profile updates even though they didn't implement traditional PUSH_PROFILE_UPDATES in the client API.",
"DESKTOP_SSO": "Okta user authentication requests are handled by desktop SSO negotiation (if possible)",
"DEVICE_COMPLIANCE": "Apps support device compliance rules",
"DEVICE_FILTER_IN_SIGN_ON_RULES": "App supports filtering by client type in app sign-on rules",
"ENTITLEMENT_MANAGEMENT": "Marker to showcase which OIN apps are entitlement enabled",
"EXCHANGE_ACTIVE_SYNC": "App supports synchronizing credentials with OMM enrolled devices",
"EXCLUDE_USERNAME_UPDATE_ON_PROFILE_PUSH": "Exclude username update during profile push",
"FEDERATED_PROFILE": "App user profiles are synchronized at sign-in and profile-view instances instead of during bulk imports",
"GROUP_PUSH": "Creates or links a group in the app when a mapping is defined for a group in Okta. Okta is the source for group memberships and all group members in Okta who are also assigned to the app are synced as group members to the app.",
"GROUP_SYNC": "Apps support syncing group information based on claims from an IdP",
"IDP": "Apps support IdP functionalities",
"IMPORT_NEW_USERS": "Creates or links a user in Okta to a user from the app",
"IMPORT_PROFILE_UPDATES": "Updates a linked user's app profile during manual or scheduled imports",
"IMPORT_SCHEMA_ENUM_VALUES": "App supports downloading schema enum values. You can download custom objects and integrating them with UD without being tied to the type metadata system.",
"IMPORT_SYNC": "Synchronize import events",
"IMPORT_SYNC_CONTACTS": "Synchronize contacts",
"IMPORT_USER_SCHEMA": "Discovers the profile schema for a user from the app automatically",
"IN_MEMORY_APP_USER": "Apps support in-memory app users. This feature is used as an alternative to Implicit App Assignment for a non-persisted app user.",
"JIT_PROVISIONING": "Apps support provisioning a user based on claims from an IdP",
"LOG_STREAMING": "Apps support log streaming",
"MFA": "App can verify credentials as a second factor",
"OAUTH_INTEGRATION": "App is an OAuth 2.0 integration",
"OPP_SCIM_INCREMENTAL_IMPORTS": "Apps support incremental imports. Used for SCIM app instances",
"OUTBOUND_DEL_AUTH": "Okta user authentication requests are delegated to a third-party app",
"PROFILE_MASTERING": "Designates the app as the identity lifecycle and profile attribute authority for linked users. The user's profile in Okta is read-only.",
"PROFILE_TEMPLATE_UPGRADE": "App supports profile template upgrades. This is primarily to help roll out the profile template upgrade feature for individual apps",
"PUSH_NEW_USERS": "Creates or links a user account in the app when assigning the app to a user in Okta",
"PUSH_NEW_USERS_WITHOUT_PASSWORD": "Don't send generated password for new users",
"PUSH_NEW_USERS_WITH_HASHED_PASSWORD": "Send hashed password for new users. This feature is only used for CIS to CIC migration.",
"PUSH_PASSWORD_UPDATES": "Updates the user's app password when their password changes in Okta",
"PUSH_PENDING_USERS": "Users are in PENDING state in Okta and are created but not active in the sourced app user",
"PUSH_PROFILE_UPDATES": "Updates a user's profile in the app when the user's profile changes in Okta (the profile source)",
"PUSH_USER_DEACTIVATION": "Deactivates a user's account in the app when unassigned from the app in Okta or deactivated",
"REACTIVATE_USERS": "Reactivates an existing inactive user when provisioning a user to the app",
"REAL_TIME_SYNC": "Apps support real-time synchronization",
"SCIM_PROVISIONING": "App supports generic SCIM client provisioning and can leverage SCIM standard for provisioning and push custom attributes to a third-party app",
"SKYHOOK_SERVICE": "Use the Skyhook microservice for LCM operations",
"SSO": "Apps support establishing a subject based on claims from an IdP",
"SUPPRESS_ACTIVATION_EMAIL": "Activation emails aren't sent to users sourced by AD and orgs with DelAuth enabled",
"UPDATE_EXISTING_USERNAME": "App can update the user name for existing users",
"VPN_CONFIG": "App supports pushing VPN configuration to OMM enrolled devices"
}
},
"readOnly": true,
"type": "array"
},
"id": {
"description": "Unique ID for the app instance",
"readOnly": true,
"type": "string"
},
"label": {
"$ref": "#/components/schemas/ApplicationLabel"
},
"lastUpdated": {
"description": "Timestamp when the application object was last updated",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"licensing": {
"$ref": "#/components/schemas/ApplicationLicensing"
},
"orn": {
"description": "The Okta resource name (ORN) for the current app instance",
"readOnly": true,
"type": "string"
},
"profile": {
"additionalProperties": true,
"description": "Contains any valid JSON schema for specifying properties that can be referenced from a request (only available to OAuth 2.0 client apps).\nFor example, add an app manager contact email address or define an allowlist of groups that you can then reference using the Okta Expression Language `getFilteredGroups` function.\n\n> **Notes:**\n> * `profile` isn't encrypted, so don't store sensitive data in it.\n> * `profile` doesn't limit the level of nesting in the JSON schema you created, but there is a practical size limit. Okta recommends a JSON schema size of 1 MB or less for best performance.",
"type": "object"
},
"signOnMode": {
"$ref": "#/components/schemas/ApplicationSignOnMode"
},
"status": {
"$ref": "#/components/schemas/ApplicationLifecycleStatus"
},
"universalLogout": {
"$ref": "#/components/schemas/ApplicationUniversalLogout"
},
"visibility": {
"$ref": "#/components/schemas/ApplicationVisibility"
}
},
"required": [
"signOnMode",
"label"
],
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"ApplicationAccessibility": {
"description": "Specifies access settings for the app",
"properties": {
"errorRedirectUrl": {
"description": "Custom error page URL for the app",
"type": "string"
},
"loginRedirectUrl": {
"description": "Custom login page URL for the app\n> **Note:** The `loginRedirectUrl` property is deprecated in Identity Engine. This property is used with the custom app login feature. Orgs that actively use this feature can continue to do so. See [Okta-hosted sign-in (redirect authentication)](https://developer.okta.com/docs/guides/redirect-authentication/) or [configure IdP routing rules](https://help.okta.com/okta_help.htm?type=oie&id=ext-cfg-routing-rules) to redirect users to the appropriate sign-in app for orgs that don't use the custom app login feature.",
"type": "string"
},
"selfService": {
"description": "Represents whether the app can be self-assignable by users",
"type": "boolean"
}
},
"type": "object"
},
"ApplicationCapability": {
"description": "Capabilities supported by the app",
"enum": [
"PROVISIONING",
"SSO",
"UNIVERSAL_LOGOUT"
],
"type": "string"
},
"ApplicationCredentials": {
"description": "Credentials for the specified `signOnMode`",
"properties": {
"signing": {
"$ref": "#/components/schemas/ApplicationCredentialsSigning"
},
"userNameTemplate": {
"$ref": "#/components/schemas/ApplicationCredentialsUsernameTemplate"
}
},
"type": "object"
},
"ApplicationCredentialsOAuthClient": {
"properties": {
"autoKeyRotation": {
"default": true,
"description": "Requested key rotation mode",
"type": "boolean"
},
"client_id": {
"description": "Unique identifier for the OAuth 2.0 client app\n\n> **Notes:**\n> * If you don't specify the `client_id`, this immutable property is populated with the [Application instance ID](/openapi/okta-management/management/application/replaceapplication#application/replaceapplication/t=response&c=200&path=&d=0/id).\n> * The `client_id` must consist of alphanumeric characters or the following special characters: `$-_.+!*'(),`.\n> * You can't use the reserved word `ALL_CLIENTS`.",
"maxLength": 100,
"minLength": 6,
"type": "string"
},
"client_secret": {
"description": "OAuth 2.0 client secret string (used for confidential clients)\n\n> **Notes:** If a `client_secret` isn't provided on creation, and the `token_endpoint_auth_method` requires one, Okta generates a random `client_secret` for the client app.\n> The `client_secret` is only shown when an OAuth 2.0 client app is created or updated (and only if the `token_endpoint_auth_method` requires a client secret).",
"maxLength": 100,
"minLength": 14,
"type": "string"
},
"pkce_required": {
"default": true,
"description": "Requires Proof Key for Code Exchange (PKCE) for additional verification. If `token_endpoint_auth_method` is `none`, then `pkce_required` must be `true`. The default is `true` for browser and native app types.",
"type": "boolean"
},
"token_endpoint_auth_method": {
"$ref": "#/components/schemas/OAuthEndpointAuthenticationMethod"
}
},
"type": "object"
},
"ApplicationCredentialsScheme": {
"description": "Apps with `BASIC_AUTH`, `BROWSER_PLUGIN`, or `SECURE_PASSWORD_STORE` sign-on modes have credentials vaulted by Okta and can be configured with the following schemes.\n",
"enum": [
"ADMIN_SETS_CREDENTIALS",
"EDIT_PASSWORD_ONLY",
"EDIT_USERNAME_AND_PASSWORD",
"EXTERNAL_PASSWORD_SYNC",
"SHARED_USERNAME_AND_PASSWORD"
],
"type": "string",
"x-enumDescriptions": {
"ADMIN_SETS_CREDENTIALS": "Admin sets username and password",
"EDIT_PASSWORD_ONLY": "Admin sets username, user sets password",
"EDIT_USERNAME_AND_PASSWORD": "User sets username and password",
"EXTERNAL_PASSWORD_SYNC": "Admin sets username, password is the same as user's Okta password",
"SHARED_USERNAME_AND_PASSWORD": "Users share a single username and password set by the admin"
}
},
"ApplicationCredentialsSigning": {
"description": "App signing key properties\n> **Note:** Only apps with SAML_2_0, SAML_1_1, WS_FEDERATION, or OPENID_CONNECT `signOnMode` support the key rotation feature.\n",
"properties": {
"kid": {
"description": "Key identifier used for signing assertions\n> **Note:** Currently, only the X.509 JWK format is supported for apps with SAML_2_0 `signOnMode`.",
"type": "string"
},
"lastRotated": {
"description": "Timestamp when the signing key was last rotated",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"nextRotation": {
"description": "The scheduled time for the next signing key rotation",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"rotationMode": {
"description": "The mode of key rotation",
"type": "string"
},
"use": {
"$ref": "#/components/schemas/ApplicationCredentialsSigningUse"
}
},
"type": "object"
},
"ApplicationCredentialsSigningUse": {
"description": "Specifies the intended use of the key",
"enum": [
"sig"
],
"type": "string"
},
"ApplicationCredentialsUsernameTemplate": {
"description": "The template used to generate the username when the app is assigned through a group or directly to a user",
"properties": {
"pushStatus": {
"description": "Determines if the username is pushed to the app on updates for CUSTOM `type`",
"enum": [
"PUSH",
"DONT_PUSH",
"NOT_CONFIGURED"
],
"type": "string"
},
"template": {
"default": "${source.login}",
"description": "Mapping expression used to generate usernames.\n\nThe following are supported mapping expressions that are used with the `BUILT_IN` template type:\n\n| Name | Template Expression |\n| ------------------------------- | ---------------------------------------------- |\n| AD Employee ID | `${source.employeeID}` |\n| AD SAM Account Name | `${source.samAccountName}` |\n| AD SAM Account Name (lowercase) | `${fn:toLowerCase(source.samAccountName)}` |\n| AD User Principal Name | `${source.userName}` |\n| AD User Principal Name prefix | `${fn:substringBefore(source.userName, \"@\")}` |\n| Email | `${source.email}` |\n| Email (lowercase) | `${fn:toLowerCase(source.email)}` |\n| Email prefix | `${fn:substringBefore(source.email, \"@\")}` |\n| LDAP UID + custom suffix | `${source.userName}${instance.userSuffix}` |\n| Okta username | `${source.login}` |\n| Okta username prefix | `${fn:substringBefore(source.login, \"@\")}` |",
"type": "string"
},
"type": {
"default": "BUILT_IN",
"description": "Type of mapping expression. Empty string is allowed.",
"enum": [
"NONE",
"BUILT_IN",
"CUSTOM"
],
"type": "string"
},
"userSuffix": {
"description": "An optional suffix appended to usernames for `BUILT_IN` mapping expressions",
"type": "string"
}
},
"type": "object"
},
"ApplicationExpressConfiguration": {
"description": "
\nA `NEXT` Key is the next Key that the authorization server uses to sign tokens when Keys are rotated. The `NEXT` Key might not be listed if it hasn't been generated.\nAn `EXPIRED` Key is the previous Key that the authorization server used to sign tokens. The `EXPIRED` Key might not be listed if no Key has expired or the expired Key was deleted.",
"type": "string"
},
"use": {
"description": "Acceptable use of the key. Valid value: `sig`",
"readOnly": true,
"type": "string"
}
},
"type": "object"
},
"AuthorizationServerPolicy": {
"allOf": [
{
"properties": {
"_links": {
"allOf": [
{
"$ref": "#/components/schemas/LinksSelfAndLifecycle"
},
{
"properties": {
"rules": {
"allOf": [
{
"description": "Link to the authorization server policy's rules"
},
{
"$ref": "#/components/schemas/HrefObject"
}
]
}
},
"type": "object"
}
]
},
"conditions": {
"$ref": "#/components/schemas/AuthorizationServerPolicyConditions"
},
"created": {
"description": "Timestamp when the Policy was created",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"description": {
"description": "Description of the Policy",
"maxLength": 255,
"minLength": 1,
"type": "string"
},
"id": {
"description": "ID of the Policy",
"type": "string"
},
"lastUpdated": {
"description": "Timestamp when the Policy was last updated",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"name": {
"description": "Name of the Policy",
"maxLength": 100,
"minLength": 1,
"type": "string"
},
"priority": {
"description": "Specifies the order in which this Policy is evaluated in relation to the other Policies in a custom authorization server",
"type": "integer"
},
"status": {
"description": "Specifies whether requests have access to this Policy",
"enum": [
"ACTIVE",
"INACTIVE"
],
"type": "string"
},
"system": {
"description": "Specifies whether Okta created this Policy",
"type": "boolean"
},
"type": {
"description": "Indicates that the Policy is an authorization server Policy",
"enum": [
"OAUTH_AUTHORIZATION_POLICY"
],
"type": "string"
}
},
"type": "object"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"AuthorizationServerPolicyConditions": {
"properties": {
"clients": {
"$ref": "#/components/schemas/ClientPolicyCondition"
}
},
"type": "object"
},
"AuthorizationServerPolicyPeopleCondition": {
"description": "Identifies Users and Groups that are used together",
"properties": {
"groups": {
"$ref": "#/components/schemas/AuthorizationServerPolicyRuleGroupCondition"
},
"users": {
"$ref": "#/components/schemas/AuthorizationServerPolicyRuleUserCondition"
}
},
"type": "object"
},
"AuthorizationServerPolicyRule": {
"properties": {
"_links": {
"allOf": [
{
"$ref": "#/components/schemas/LinksSelfAndLifecycle"
}
]
},
"actions": {
"$ref": "#/components/schemas/AuthorizationServerPolicyRuleActions"
},
"conditions": {
"$ref": "#/components/schemas/AuthorizationServerPolicyRuleConditions"
},
"created": {
"description": "Timestamp when the rule was created",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"id": {
"description": "Identifier of the rule",
"readOnly": true,
"type": "string"
},
"lastUpdated": {
"description": "Timestamp when the rule was last modified",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"name": {
"description": "Name of the rule",
"type": "string"
},
"priority": {
"description": "Priority of the rule",
"type": "integer"
},
"status": {
"description": "Status of the rule",
"enum": [
"ACTIVE",
"INACTIVE"
],
"type": "string"
},
"system": {
"description": "Set to `true` for system rules. You can't delete system rules.",
"type": "boolean"
},
"type": {
"description": "Rule type",
"enum": [
"RESOURCE_ACCESS"
],
"type": "string"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"AuthorizationServerPolicyRuleActions": {
"allOf": [
{
"$ref": "#/components/schemas/PolicyRuleActions"
},
{
"properties": {
"token": {
"$ref": "#/components/schemas/TokenAuthorizationServerPolicyRuleAction"
}
},
"type": "object"
}
]
},
"AuthorizationServerPolicyRuleConditions": {
"properties": {
"grantTypes": {
"$ref": "#/components/schemas/GrantTypePolicyRuleCondition"
},
"people": {
"$ref": "#/components/schemas/AuthorizationServerPolicyPeopleCondition"
},
"scopes": {
"$ref": "#/components/schemas/OAuth2ScopesMediationPolicyRuleCondition"
}
},
"type": "object"
},
"AuthorizationServerPolicyRuleGroupCondition": {
"description": "Specifies a set of Groups whose Users are to be included",
"properties": {
"include": {
"description": "Groups to be included",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"AuthorizationServerPolicyRuleRequest": {
"allOf": [
{
"$ref": "#/components/schemas/AuthorizationServerPolicyRule"
},
{
"required": [
"name",
"conditions",
"type"
],
"type": "object"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"AuthorizationServerPolicyRuleUserCondition": {
"description": "Specifies a set of Users to be included",
"properties": {
"include": {
"description": "Users to be included",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"AuthorizationServerResourceHrefObject": {
"properties": {
"href": {
"description": "Link URI",
"example": "https://{yourOktaDomain}/api/v1/authorizationServers/ausain6z9zIedDCxB0h7",
"type": "string"
},
"title": {
"description": "Link name",
"example": "Example Authorization Server",
"type": "string"
}
},
"type": "object"
},
"AutoAssignAdminAppSetting": {
"description": "The org setting that automatically assigns the Okta Admin Console when an admin role is assigned",
"properties": {
"autoAssignAdminAppSetting": {
"description": "Automatically assigns the Okta Admin Console to the user when an admin role is assigned",
"type": "boolean"
}
},
"type": "object"
},
"AutoLoginApplication": {
"allOf": [
{
"$ref": "#/components/schemas/Application"
},
{
"properties": {
"credentials": {
"$ref": "#/components/schemas/SchemeApplicationCredentials"
},
"name": {
"description": "A unique key is generated for the custom SWA app instance when you use AUTO_LOGIN `signOnMode`.",
"readOnly": true,
"type": "string"
},
"settings": {
"$ref": "#/components/schemas/AutoLoginApplicationSettings"
}
},
"type": "object"
}
]
},
"AutoLoginApplicationSettings": {
"allOf": [
{
"$ref": "#/components/schemas/ApplicationSettings"
},
{
"properties": {
"signOn": {
"$ref": "#/components/schemas/AutoLoginApplicationSettingsSignOn"
}
},
"type": "object"
}
]
},
"AutoLoginApplicationSettingsSignOn": {
"properties": {
"loginUrl": {
"description": "Primary URL of the sign-in page for this app",
"type": "string"
},
"redirectUrl": {
"description": "Secondary URL of the sign-in page for this app",
"type": "string"
}
},
"required": [
"loginUrl"
],
"type": "object"
},
"AutoUpdateSchedule": {
"description": "The schedule of auto-update configured by the admin",
"properties": {
"cron": {
"description": "The schedule of the update in cron format. The cron settings are limited to only the day of the month or the nth-day-of-the-week configurations. For example, `0 8 ? * 6#3` indicates every third Saturday at 8:00 AM.",
"example": "0 8 ? * 6#3",
"type": "string"
},
"delay": {
"description": "Delay in days",
"type": "integer"
},
"duration": {
"description": "Duration in minutes",
"example": 120,
"type": "integer"
},
"lastUpdated": {
"description": "Timestamp when the update finished (only for a successful or failed update, not for a cancelled update). Null is returned if the job hasn't finished once yet.",
"format": "date-time",
"type": "string"
},
"timezone": {
"description": "Timezone of where the scheduled job takes place",
"example": "America/New_York",
"type": "string"
}
},
"type": "object"
},
"AvailableAction": {
"properties": {
"id": {
"description": "Action identifier",
"example": "okta:action1",
"type": "string"
},
"provider": {
"$ref": "#/components/schemas/WorkflowAvailableActionProvider"
}
},
"required": [
"id",
"provider"
],
"type": "object"
},
"AvailableActionProvider": {
"discriminator": {
"mapping": {
"WORKFLOWS": "#/components/schemas/WorkflowAvailableActionProvider"
},
"propertyName": "type"
},
"properties": {
"actionName": {
"description": "The name of the action flow",
"type": "string"
},
"externalId": {
"description": "The unique identifier of the action flow in the provider system",
"type": "string"
},
"link": {
"description": "The URL to the action flow interface in Workflows platform",
"format": "uri",
"type": "string"
},
"type": {
"$ref": "#/components/schemas/ActionProviderPayloadType"
}
},
"required": [
"actionName",
"link",
"externalId",
"type"
],
"type": "object"
},
"AvailableActions": {
"properties": {
"actions": {
"items": {
"$ref": "#/components/schemas/AvailableAction"
},
"type": "array"
}
},
"type": "object"
},
"AwsAccountId": {
"description": "Your AWS account ID",
"example": 123456789012,
"maxLength": 12,
"minLength": 12,
"type": "string"
},
"AwsEventSourceName": {
"description": "An alphanumeric name (no spaces) to identify this event source in AWS EventBridge",
"example": "your-event-source-name",
"maxLength": 75,
"minLength": 1,
"pattern": "^[a-zA-Z0-9.\\-_]$",
"type": "string"
},
"AwsRegion": {
"description": "The destination AWS region where your event source is located",
"enum": [
"ap-northeast-1",
"ap-northeast-2",
"ap-northeast-3",
"ap-south-1",
"ap-southeast-1",
"ap-southeast-2",
"ca-central-1",
"eu-central-1",
"eu-north-1",
"eu-west-1",
"eu-west-2",
"eu-west-3",
"sa-east-1",
"us-east-1",
"us-east-2",
"us-west-1",
"us-west-2"
],
"type": "string"
},
"BASIC_SMTP_AUTH": {
"allOf": [
{
"$ref": "#/components/schemas/BaseEmailServer"
},
{
"properties": {
"password": {
"description": "The password of the user account that's used to sign in to your SMTP server",
"type": "string"
}
},
"type": "object"
}
],
"title": "BASIC_SMTP_AUTH"
},
"BASIC_SMTP_AUTH_CREATE": {
"allOf": [
{
"$ref": "#/components/schemas/BaseEmailServerCreate"
},
{
"properties": {
"password": {
"description": "The password of the user account that's used to sign in to your SMTP server",
"type": "string"
}
},
"required": [
"password"
],
"type": "object"
}
],
"title": "BASIC_SMTP_AUTH"
},
"BaseContext": {
"description": "This object contains a number of sub-objects, each of which provide some type of contextual information.",
"properties": {
"request": {
"$ref": "#/components/schemas/InlineHookRequestObject"
},
"session": {
"description": "Details of the user session",
"properties": {
"amr": {
"description": "The authentication method reference",
"items": {
"example": [
"PASSWORD"
],
"type": "string"
},
"type": "array"
},
"createdAt": {
"description": "Timestamp of when the session was created",
"example": "2019-03-28T16:45:55.000Z",
"format": "date-time",
"type": "string"
},
"expiresAt": {
"description": "Timestamp of when the session expires",
"example": "2019-03-28T21:15:23.000Z",
"format": "date-time",
"type": "string"
},
"id": {
"description": "The unique identifier for the user's session",
"example": "102LN9Bnuc4S_ewfc9BYwageA",
"type": "string"
},
"idp": {
"$ref": "#/components/schemas/SessionIdentityProvider"
},
"lastPasswordVerification": {
"description": "Timestamp of when the user was last authenticated",
"example": "2019-03-28T16:45:55.000Z",
"format": "date-time",
"type": "string"
},
"login": {
"description": "The username used to identify the user. This is often the user's email address.",
"example": "user@example.com",
"type": "string"
},
"mfaActive": {
"description": "Describes whether multifactor authentication was enabled",
"example": false,
"type": "boolean"
},
"status": {
"description": "Represents the current status of the user's session",
"example": "ACTIVE",
"type": "string"
},
"userId": {
"description": "The unique identifier for the user",
"example": "00uq8tMo3zV0OfJON0g3",
"type": "string"
}
},
"type": "object"
},
"user": {
"description": "Identifies the Okta user that the token was generated to authenticate and provides details of their Okta user profile",
"properties": {
"_links": {
"description": "Specifies link relations (see [Web Linking](https://www.rfc-editor.org/rfc/rfc8288)) available for the current status of the user. These links are used to discover what groups the user is a part of and what factors they have enrolled.",
"properties": {
"factors": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
}
],
"description": "URL to retrieve individual user's factor enrollments"
},
"groups": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
}
],
"description": "URL to retrieve the individual user's group memberships"
}
},
"type": "object"
},
"id": {
"description": "The unique identifier for the user",
"example": "00uq8tMo3zV0OfJON0g3",
"type": "string"
},
"passwordChanged": {
"description": "The timestamp when the user's password was last updated",
"example": "2018-09-11T23:19:12.000Z",
"format": "date-time",
"type": "string"
},
"profile": {
"properties": {
"firstName": {
"description": "The first name of the user",
"example": "John",
"type": "string"
},
"lastName": {
"description": "The last name of the user",
"example": "Smith",
"type": "string"
},
"locale": {
"description": "The user's default location for purposes of localizing items such as currency, date time format, numerical representations, and so on.\nA locale value is a concatenation of the [ISO 639-1](https://en.wikipedia.org/wiki/List_of_ISO_639_language_codes) two-letter language code, an underscore, and the [ISO 3166-1](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2) two-letter country code. For example, `en_US` specifies the language English and country US. This value is `en_US` by default.",
"example": "en_US",
"type": "string"
},
"login": {
"description": "The username used to identify the user. This is often the user's email address.",
"example": "user@example.com",
"type": "string"
},
"timeZone": {
"description": "The user's timezone",
"example": "America/Los_Angeles",
"type": "string"
}
},
"type": "object"
}
},
"type": "object"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"BaseEmailDomain": {
"properties": {
"displayName": {
"type": "string"
},
"userName": {
"type": "string"
}
},
"required": [
"displayName",
"userName"
],
"type": "object"
},
"BaseEmailServer": {
"discriminator": {
"mapping": {
"BASIC_SMTP_AUTH": "#/components/schemas/BASIC_SMTP_AUTH",
"OAUTH2_CLIENT_CREDENTIALS": "#/components/schemas/OAUTH2_CLIENT_CREDENTIALS",
"OAUTH2_JWT_BEARER_GRANT": "#/components/schemas/OAUTH2_JWT_BEARER_GRANT"
},
"propertyName": "authType"
},
"properties": {
"alias": {
"description": "Human-readable name for your SMTP server",
"example": "CustomServer1",
"type": "string"
},
"authType": {
"$ref": "#/components/schemas/SmtpAuthType"
},
"enabled": {
"description": "If `true`, all email traffic is routed through your SMTP server",
"type": "boolean"
},
"host": {
"description": "Hostname or IP address of your SMTP server",
"example": "192.168.160.1",
"type": "string"
},
"id": {
"description": "ID of your SMTP server",
"readOnly": true,
"type": "string"
},
"port": {
"description": "Port number of your SMTP server",
"example": 587,
"type": "integer"
},
"username": {
"description": "Username that's used to access your SMTP server",
"example": "some_user@domain.com",
"type": "string"
}
},
"required": [
"authType"
],
"type": "object"
},
"BaseEmailServerCreate": {
"discriminator": {
"mapping": {
"BASIC_SMTP_AUTH": "#/components/schemas/BASIC_SMTP_AUTH_CREATE",
"OAUTH2_CLIENT_CREDENTIALS": "#/components/schemas/OAUTH2_CLIENT_CREDENTIALS_CREATE",
"OAUTH2_JWT_BEARER_GRANT": "#/components/schemas/OAUTH2_JWT_BEARER_GRANT_CREATE"
},
"propertyName": "authType"
},
"properties": {
"alias": {
"description": "Human-readable name for your SMTP server",
"example": "CustomServer1",
"type": "string"
},
"authType": {
"$ref": "#/components/schemas/SmtpAuthType"
},
"enabled": {
"description": "If `true`, all email traffic is routed through your SMTP server",
"type": "boolean"
},
"host": {
"description": "Hostname or IP address of your SMTP server",
"example": "192.168.160.1",
"type": "string"
},
"id": {
"description": "ID of your SMTP server",
"readOnly": true,
"type": "string"
},
"port": {
"description": "Port number of your SMTP server",
"example": 587,
"type": "integer"
},
"username": {
"description": "Username that's used to access your SMTP server",
"example": "some_user@domain.com",
"type": "string"
}
},
"required": [
"alias",
"enabled",
"host",
"port",
"username",
"authType"
],
"type": "object"
},
"BaseToken": {
"properties": {
"claims": {
"description": "Claims included in the token. Consists of name-value pairs for each included claim. For descriptions of the claims that you can include, see the Okta [OpenID Connect and OAuth 2.0 API reference](/openapi/okta-oauth/guides/overview/#claims).",
"type": "object"
},
"token": {
"description": "The token",
"properties": {
"lifetime": {
"description": "Lifetime of the token",
"properties": {
"expiration": {
"description": "Time in seconds until the token expires",
"type": "integer"
}
},
"type": "object"
}
},
"type": "object"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"BasicApplicationSettings": {
"allOf": [
{
"$ref": "#/components/schemas/ApplicationSettings"
},
{
"properties": {
"app": {
"$ref": "#/components/schemas/BasicApplicationSettingsApplication"
}
},
"type": "object"
}
]
},
"BasicApplicationSettingsApplication": {
"properties": {
"authURL": {
"description": "The URL of the authenticating site for this app",
"type": "string"
},
"url": {
"description": "The URL of the sign-in page for this app",
"type": "string"
}
},
"required": [
"authURL",
"url"
],
"type": "object"
},
"BasicAuthApplication": {
"allOf": [
{
"$ref": "#/components/schemas/Application"
},
{
"properties": {
"credentials": {
"$ref": "#/components/schemas/SchemeApplicationCredentials"
},
"name": {
"description": "`template_basic_auth` is the key name for a Basic Authentication scheme app instance",
"enum": [
"template_basic_auth"
],
"type": "string"
},
"settings": {
"$ref": "#/components/schemas/BasicApplicationSettings"
}
},
"required": [
"name",
"settings"
],
"type": "object"
}
],
"x-okta-defined-as": {
"name": "template_basic_auth"
}
},
"BeforeScheduledActionPolicyRuleCondition": {
"properties": {
"duration": {
"$ref": "#/components/schemas/Duration"
},
"lifecycleAction": {
"$ref": "#/components/schemas/ScheduledUserLifecycleAction"
}
},
"type": "object"
},
"BehaviorRule": {
"discriminator": {
"mapping": {
"ANOMALOUS_ASN": "#/components/schemas/BehaviorRuleASN",
"ANOMALOUS_DEVICE": "#/components/schemas/BehaviorRuleAnomalousDevice",
"ANOMALOUS_IP": "#/components/schemas/BehaviorRuleAnomalousIP",
"ANOMALOUS_LOCATION": "#/components/schemas/BehaviorRuleAnomalousLocation",
"VELOCITY": "#/components/schemas/BehaviorRuleVelocity"
},
"propertyName": "type"
},
"properties": {
"_link": {
"$ref": "#/components/schemas/LinksSelf"
},
"created": {
"description": "Timestamp when the Behavior Detection Rule was created",
"readOnly": true,
"type": "string"
},
"id": {
"description": "ID of the Behavior Detection Rule",
"readOnly": true,
"type": "string"
},
"lastUpdated": {
"description": "Timestamp when the Behavior Detection Rule was last modified",
"readOnly": true,
"type": "string"
},
"name": {
"description": "Name of the Behavior Detection Rule",
"maxLength": 128,
"type": "string"
},
"status": {
"$ref": "#/components/schemas/LifecycleStatus"
},
"type": {
"$ref": "#/components/schemas/BehaviorRuleType"
}
},
"required": [
"name",
"type"
],
"title": "Behavior Detection Rule",
"type": "object"
},
"BehaviorRuleASN": {
"allOf": [
{
"$ref": "#/components/schemas/BehaviorRule"
},
{
"properties": {
"settings": {
"$ref": "#/components/schemas/BehaviorRuleSettingsAnomalousASN"
}
},
"type": "object"
}
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"BehaviorRuleAnomalousDevice": {
"allOf": [
{
"$ref": "#/components/schemas/BehaviorRule"
},
{
"properties": {
"settings": {
"$ref": "#/components/schemas/BehaviorRuleSettingsAnomalousDevice"
}
},
"type": "object"
}
]
},
"BehaviorRuleAnomalousIP": {
"allOf": [
{
"$ref": "#/components/schemas/BehaviorRule"
},
{
"properties": {
"settings": {
"$ref": "#/components/schemas/BehaviorRuleSettingsAnomalousIP"
}
},
"type": "object"
}
]
},
"BehaviorRuleAnomalousLocation": {
"allOf": [
{
"$ref": "#/components/schemas/BehaviorRule"
},
{
"properties": {
"settings": {
"$ref": "#/components/schemas/BehaviorRuleSettingsAnomalousLocation"
}
},
"type": "object"
}
]
},
"BehaviorRuleSettings": {
"title": "Behavior Detection Rule Settings",
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"BehaviorRuleSettingsAnomalousASN": {
"allOf": [
{
"$ref": "#/components/schemas/BehaviorRuleSettingsHistoryBased"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"BehaviorRuleSettingsAnomalousDevice": {
"allOf": [
{
"$ref": "#/components/schemas/BehaviorRuleSettingsHistoryBased"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"BehaviorRuleSettingsAnomalousIP": {
"allOf": [
{
"$ref": "#/components/schemas/BehaviorRuleSettingsHistoryBased"
},
{
"properties": {
"maxEventsUsedForEvaluation": {
"default": 50,
"maximum": 100,
"minimum": 0,
"type": "integer"
}
},
"type": "object"
}
]
},
"BehaviorRuleSettingsAnomalousLocation": {
"allOf": [
{
"$ref": "#/components/schemas/BehaviorRuleSettingsHistoryBased"
},
{
"properties": {
"granularity": {
"$ref": "#/components/schemas/LocationGranularity"
},
"radiusKilometers": {
"description": "Required when `granularity` is `LAT_LONG`. Radius from the provided coordinates in kilometers.",
"type": "integer"
}
},
"required": [
"granularity"
],
"type": "object"
}
]
},
"BehaviorRuleSettingsHistoryBased": {
"allOf": [
{
"$ref": "#/components/schemas/BehaviorRuleSettings"
},
{
"properties": {
"maxEventsUsedForEvaluation": {
"default": 20,
"maximum": 100,
"minimum": 1,
"type": "integer"
},
"minEventsNeededForEvaluation": {
"default": 0,
"maximum": 10,
"minimum": 0,
"type": "integer"
}
},
"title": "Behavior Detection Rule Settings based on Event History",
"type": "object"
}
]
},
"BehaviorRuleSettingsVelocity": {
"allOf": [
{
"$ref": "#/components/schemas/BehaviorRuleSettings"
},
{
"properties": {
"velocityKph": {
"default": 805,
"minimum": 1,
"type": "integer"
}
},
"required": [
"velocityKph"
],
"title": "Behavior Detection Rule Settings based on device velocity in kilometers per hour.",
"type": "object"
}
]
},
"BehaviorRuleType": {
"enum": [
"ANOMALOUS_DEVICE",
"ANOMALOUS_IP",
"ANOMALOUS_LOCATION",
"VELOCITY",
"ANOMALOUS_ASN"
],
"type": "string"
},
"BehaviorRuleVelocity": {
"allOf": [
{
"$ref": "#/components/schemas/BehaviorRule"
},
{
"properties": {
"settings": {
"$ref": "#/components/schemas/BehaviorRuleSettingsVelocity"
}
},
"type": "object"
}
]
},
"BindingMethod": {
"description": "The method used to bind the out-of-band channel with the primary channel.",
"enum": [
"none",
"prompt",
"transfer"
],
"type": "string"
},
"BookmarkApplication": {
"allOf": [
{
"$ref": "#/components/schemas/Application"
},
{
"properties": {
"credentials": {
"$ref": "#/components/schemas/ApplicationCredentials"
},
"name": {
"description": "`bookmark` is the key name for a Bookmark app",
"enum": [
"bookmark"
],
"type": "string"
},
"settings": {
"$ref": "#/components/schemas/BookmarkApplicationSettings"
}
},
"required": [
"name",
"settings"
],
"type": "object"
}
],
"x-okta-defined-as": {
"name": "bookmark"
}
},
"BookmarkApplicationSettings": {
"allOf": [
{
"$ref": "#/components/schemas/ApplicationSettings"
},
{
"properties": {
"app": {
"$ref": "#/components/schemas/BookmarkApplicationSettingsApplication"
}
},
"type": "object"
}
]
},
"BookmarkApplicationSettingsApplication": {
"properties": {
"requestIntegration": {
"default": false,
"description": "Would you like Okta to add an integration for this app?",
"type": "boolean"
},
"url": {
"description": "The URL of the launch page for this app",
"type": "string"
}
},
"required": [
"url"
],
"type": "object"
},
"BotProtectionConfiguration": {
"description": "Bot protection configuration for the org",
"properties": {
"_links": {
"$ref": "#/components/schemas/LinksSelf"
},
"enforcementType": {
"$ref": "#/components/schemas/BotProtectionEnforcementType"
},
"level": {
"$ref": "#/components/schemas/BotProtectionLevel"
},
"mode": {
"$ref": "#/components/schemas/BotProtectionMode"
},
"supportedFlows": {
"description": "An array of authentication flows that have bot protection enabled",
"items": {
"$ref": "#/components/schemas/BotProtectionSupportedFlow"
},
"type": "array"
}
},
"required": [
"level",
"mode"
],
"title": "BotProtectionConfiguration",
"type": "object"
},
"BotProtectionEnforcementType": {
"description": "The type of enforcement to trigger when a bot is detected",
"enum": [
"OKTA_CHALLENGE"
],
"type": "string",
"x-enumDescriptions": {
"OKTA_CHALLENGE": "The Okta built-in challenge mechanism"
}
},
"BotProtectionLevel": {
"description": "The sensitivity level of bot detection",
"enum": [
"ANY",
"HIGH",
"LOW",
"MEDIUM"
],
"type": "string",
"x-enumDescriptions": {
"ANY": "Always flag all requests to trigger enforcement settings, regardless of bot likeliness confidence level.",
"HIGH": "High - Flags only high-confidence bot requests. Prioritizes a frictionless user experience.",
"LOW": "Low and above - Flags low-confidence bot requests. Prioritizes a rigorous security.",
"MEDIUM": "Medium and above - Flags moderate and high-confidence bot requests. Provides a balanced experience and security."
}
},
"BotProtectionMode": {
"description": "The enforcement mode for bot protection",
"enum": [
"DISABLED",
"ENFORCED",
"LOG_ONLY"
],
"type": "string",
"x-enumDescriptions": {
"DISABLED": "Bot protection is disabled",
"ENFORCED": "Enforcement is applied to events where bots are detected",
"LOG_ONLY": "Bot detection events are logged but not enforced"
}
},
"BotProtectionSupportedFlow": {
"description": "Authentication flows that support bot protection",
"enum": [
"SIGN_IN",
"SSPR",
"SSR"
],
"type": "string",
"x-enumDescriptions": {
"SIGN_IN": "User sign-in page",
"SSPR": "Self-Service Password Recovery page",
"SSR": "Self-Service Registration page"
}
},
"BouncesRemoveListError": {
"properties": {
"emailAddress": {
"description": "An email address with a validation error",
"type": "string"
},
"reason": {
"description": "Validation error reason",
"type": "string"
}
},
"type": "object"
},
"BouncesRemoveListObj": {
"properties": {
"emailAddresses": {
"description": "A list of email addresses to remove from the email-service bounce list",
"items": {
"description": "Email address",
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"BouncesRemoveListResult": {
"properties": {
"errors": {
"description": "A list of emails that wasn't added to the email-bounced remove list and the error reason",
"items": {
"$ref": "#/components/schemas/BouncesRemoveListError"
},
"type": "array"
}
},
"type": "object"
},
"Brand": {
"properties": {
"agreeToCustomPrivacyPolicy": {
"description": "Consent for updating the custom privacy URL. Not required when resetting the URL.",
"type": "boolean"
},
"customPrivacyPolicyUrl": {
"default": null,
"description": "Custom privacy policy URL",
"type": "string"
},
"defaultApp": {
"$ref": "#/components/schemas/DefaultApp"
},
"emailDomainId": {
"description": "The ID of the email domain",
"type": "string"
},
"id": {
"description": "The Brand ID",
"readOnly": true,
"type": "string"
},
"isDefault": {
"description": "If `true`, the Brand is used for the Okta subdomain",
"readOnly": true,
"type": "boolean"
},
"locale": {
"$ref": "#/components/schemas/Language"
},
"name": {
"description": "The name of the Brand",
"type": "string"
},
"removePoweredByOkta": {
"default": false,
"description": "Removes \"Powered by Okta\" from the sign-in page in redirect authentication deployments, and \"\u00a9 [current year] Okta, Inc.\" from the Okta End-User Dashboard",
"type": "boolean"
}
},
"type": "object"
},
"BrandDomains": {
"description": "Defines a list of domains with a subset of the properties for each domain",
"properties": {
"domains": {
"description": "Each element of the array defines an individual domain",
"items": {
"$ref": "#/components/schemas/DomainResponse"
},
"type": "array"
}
},
"type": "object"
},
"BrandRequest": {
"properties": {
"agreeToCustomPrivacyPolicy": {
"description": "Consent for updating the custom privacy URL. Not required when resetting the URL.",
"type": "boolean"
},
"customPrivacyPolicyUrl": {
"description": "Custom privacy policy URL",
"type": "string"
},
"defaultApp": {
"$ref": "#/components/schemas/DefaultApp"
},
"emailDomainId": {
"description": "The ID of the email domain",
"type": "string"
},
"locale": {
"$ref": "#/components/schemas/Language"
},
"name": {
"description": "The name of the brand\n\n> **Note:** You can't use the reserved `DRAPP_DOMAIN_BRAND` name.",
"type": "string"
},
"removePoweredByOkta": {
"default": false,
"description": "Removes \"Powered by Okta\" from the sign-in page in redirect authentication deployments, and \"\u00a9 [current year] Okta, Inc.\" from the Okta End-User Dashboard",
"type": "boolean"
}
},
"required": [
"name"
],
"type": "object"
},
"BrandWithEmbedded": {
"allOf": [
{
"$ref": "#/components/schemas/Brand"
}
],
"properties": {
"_embedded": {
"properties": {
"domains": {
"items": {
"$ref": "#/components/schemas/DomainResponse"
},
"type": "array"
},
"emailDomain": {
"$ref": "#/components/schemas/EmailDomainResponse"
},
"themes": {
"items": {
"$ref": "#/components/schemas/ThemeResponse"
},
"type": "array"
}
},
"readOnly": true,
"type": "object"
},
"_links": {
"allOf": [
{
"$ref": "#/components/schemas/LinksSelf"
},
{
"properties": {
"themes": {
"$ref": "#/components/schemas/HrefObject"
}
}
}
]
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"BrowserPluginApplication": {
"allOf": [
{
"$ref": "#/components/schemas/Application"
},
{
"properties": {
"credentials": {
"$ref": "#/components/schemas/SchemeApplicationCredentials"
},
"name": {
"description": "The key name for the app definition",
"enum": [
"template_swa",
"template_swa3field"
],
"type": "string",
"x-enumDescriptions": {
"template_swa": "The key name for a SWA app instance that requires a browser plugin",
"template_swa3field": "The key name for a SWA app instance that requires a browser plugin and supports three CSS selectors"
}
},
"settings": {
"$ref": "#/components/schemas/SwaApplicationSettings"
}
},
"required": [
"name",
"settings"
],
"type": "object"
}
]
},
"BulkDeleteRequestBody": {
"properties": {
"entityType": {
"description": "The type of data to bulk delete in a session. Currently, only `USERS` is supported.",
"enum": [
"USERS"
],
"type": "string"
},
"profiles": {
"description": "Array of profiles to be deleted",
"items": {
"$ref": "#/components/schemas/IdentitySourceUserProfileForDelete"
},
"type": "array"
}
},
"type": "object"
},
"BulkGroupDeleteRequestBody": {
"properties": {
"externalIds": {
"description": "Array of external IDs of groups that need to be deleted in Okta",
"items": {
"maxLength": 255,
"type": "string"
},
"maxItems": 200,
"minItems": 1,
"type": "array"
}
},
"type": "object"
},
"BulkGroupMembershipsDeleteRequestBody": {
"properties": {
"memberships": {
"$ref": "#/components/schemas/IdentitySourceGroupMembershipsDeleteProfile"
}
},
"type": "object"
},
"BulkGroupMembershipsUpsertRequestBody": {
"properties": {
"memberships": {
"$ref": "#/components/schemas/IdentitySourceGroupMembershipsUpsertProfile"
}
},
"type": "object"
},
"BulkGroupUpsertRequestBody": {
"properties": {
"profiles": {
"description": "Array of group profiles that needs to be inserted or updated in Okta",
"items": {
"properties": {
"externalId": {
"description": "The external ID of the group that needs to be created or updated in Okta",
"maxLength": 255,
"type": "string"
},
"profile": {
"$ref": "#/components/schemas/IdentitySourceGroupProfileForUpsert"
}
},
"type": "object"
},
"maxItems": 200,
"minItems": 1,
"type": "array"
}
},
"type": "object"
},
"BulkUpsertRequestBody": {
"properties": {
"entityType": {
"description": "The type of data to upsert into the session. Currently, only `USERS` is supported.",
"enum": [
"USERS"
],
"type": "string"
},
"profiles": {
"description": "Array of user profiles to be uploaded",
"items": {
"properties": {
"externalId": {
"description": "The external ID of the entity that needs to be created or updated in Okta",
"maxLength": 512,
"type": "string"
},
"profile": {
"$ref": "#/components/schemas/IdentitySourceUserProfileForUpsert"
}
},
"type": "object"
},
"type": "array"
}
},
"type": "object"
},
"BundleEntitlement": {
"description": "An entitlement in a governance bundle",
"properties": {
"_links": {
"description": "Link relations available",
"properties": {
"values": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the entitlement values resource"
}
]
}
},
"type": "object"
},
"description": {
"description": "The description of the role",
"type": "string"
},
"id": {
"description": "Entitlement ID",
"type": "string"
},
"name": {
"description": "The name of the role",
"type": "string"
},
"role": {
"description": "The role key",
"type": "string"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"BundleEntitlementsResponse": {
"description": "Entitlement list for a governance bundle",
"properties": {
"_links": {
"allOf": [
{
"$ref": "#/components/schemas/LinksSelf"
},
{
"readOnly": true
},
{
"properties": {
"bundle": {
"$ref": "#/components/schemas/BundleLink"
},
"next": {
"$ref": "#/components/schemas/HrefObjectNextLink"
}
}
}
]
},
"entitlements": {
"description": "List of bundle entitlements",
"items": {
"$ref": "#/components/schemas/BundleEntitlement"
},
"type": "array"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"BundleLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the bundle resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"ByDateTimeAuthenticatorGracePeriodExpiry": {
"allOf": [
{
"$ref": "#/components/schemas/EnrollmentPolicyAuthenticatorGracePeriod"
},
{
"properties": {
"expiry": {
"description": "The expiry date for a `BY_DATE_TIME` grace period type. Valid format: `yyyy-MM-dd'T'HH:mm:ss.SSS'Z'`\n\nFor example, `2025-01-01T18:30:45.000Z`",
"type": "string"
}
},
"type": "object"
}
]
},
"BySkipCountAuthenticatorGracePeriod": {
"allOf": [
{
"$ref": "#/components/schemas/EnrollmentPolicyAuthenticatorGracePeriod"
},
{
"properties": {
"skipCount": {
"description": "The number of times the user can skip enrolling the corresponding authenticator before it becomes mandatory",
"maximum": 10,
"minimum": 1,
"type": "integer"
}
},
"type": "object"
}
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"CAPTCHAInstance": {
"description": "",
"properties": {
"_links": {
"$ref": "#/components/schemas/LinksSelf"
},
"id": {
"description": "The unique key for the CAPTCHA instance",
"readOnly": true,
"type": "string"
},
"name": {
"description": "The name of the CAPTCHA instance",
"type": "string"
},
"secretKey": {
"description": "The secret key issued from the CAPTCHA provider to perform server-side validation for a CAPTCHA token",
"type": "string",
"writeOnly": true
},
"siteKey": {
"description": "The site key issued from the CAPTCHA provider to render a CAPTCHA on a page",
"type": "string"
},
"type": {
"$ref": "#/components/schemas/CAPTCHAType"
}
},
"title": "CAPTCHAInstance",
"type": "object"
},
"CAPTCHAType": {
"description": "The type of CAPTCHA provider",
"enum": [
"HCAPTCHA",
"RECAPTCHA_V2"
],
"type": "string"
},
"CSRLinks": {
"description": "Specifies link relations (see [Web Linking](https://www.rfc-editor.org/rfc/rfc8288)) available for the current status of a CSR object using the [JSON Hypertext Application Language](https://datatracker.ietf.org/doc/html/draft-kelly-json-hal-06) specification. This object is used for dynamic discovery of related resources and lifecycle operations.",
"properties": {
"publish": {
"$ref": "#/components/schemas/HrefCsrPublishLink"
},
"self": {
"$ref": "#/components/schemas/HrefCsrSelfLink"
}
},
"readOnly": true
},
"CaepCredentialChangeEvent": {
"description": "The credential was created, changed, revoked or deleted",
"properties": {
"change_type": {
"description": "The type of action done towards the credential",
"enum": [
"create",
"revoke",
"update",
"delete"
],
"type": "string"
},
"credential_type": {
"description": "The credential type of the changed credential. It's one of the supported enum values or any other credential type supported mutually by the transmitter and the receiver.",
"enum": [
"password",
"pin",
"x509",
"fido2-platform",
"fido2-roaming",
"fido-u2f",
"verifiable-credential",
"phone-voice",
"phone-sms",
"app",
"SECURITY_QUESTION",
"SOFT_TOKEN",
"OKTA_SOFT_TOKEN",
"VIP_FACTOR",
"EMAIL_FACTOR",
"SECUREID_FACTOR",
"DUO_SECURITY",
"OKTA_VERIFY_PUSH",
"YUBIKEY_OTP_FACTOR",
"FIDO_WEBAUTHN",
"CUSTOM_APP_PUSH",
"CLAIMS_AS_FACTOR",
"HOTP_FACTOR",
"SIGNED_NONCE",
"ALL_FACTORS",
"TOTP"
],
"type": "string"
},
"event_timestamp": {
"description": "The time of the event (UNIX timestamp)",
"example": 1702448550,
"format": "int64",
"type": "integer"
},
"fido2_aaguid": {
"description": "FIDO2 Authenticator Attestation GUID",
"example": "accced6a-63f5-490a-9eea-e59bc1896cfc",
"type": "string"
},
"friendly_name": {
"description": "Credential friendly name",
"example": "John's FIDO authenticator",
"type": "string"
},
"initiating_entity": {
"description": "The entity that initiated the event",
"enum": [
"admin",
"user",
"policy",
"system"
],
"type": "string"
},
"reason_admin": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized administrative message intended for logging and auditing",
"type": "object"
}
]
},
"reason_user": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized message intended for the end user",
"type": "object"
}
]
},
"subject": {
"$ref": "#/components/schemas/SsfTransmitterSecurityEventSubject"
}
},
"required": [
"credential_type",
"change_type"
],
"type": "object"
},
"CaepDeviceComplianceChangeEvent": {
"description": "The subject's device compliance was revoked",
"properties": {
"current_status": {
"description": "Current device compliance status",
"enum": [
"compliant",
"not-compliant"
],
"example": "non-compliant",
"type": "string"
},
"event_timestamp": {
"description": "The time of the event (UNIX timestamp)",
"example": 1702448550,
"format": "int64",
"type": "integer"
},
"initiating_entity": {
"description": "The entity that initiated the event",
"enum": [
"admin",
"user",
"policy",
"system"
],
"type": "string"
},
"previous_status": {
"description": "Previous device compliance status",
"enum": [
"compliant",
"not-compliant"
],
"type": "string"
},
"reason_admin": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized administrative message intended for logging and auditing.
Either `reason_admin` or `reason_user` is required.",
"type": "object"
}
]
},
"reason_user": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized message intended for the end user.
Either `reason_admin` or `reason_user` is required.",
"type": "object"
}
]
},
"subject": {
"$ref": "#/components/schemas/SecurityEventSubject"
}
},
"required": [
"event_timestamp",
"subject",
"current_status",
"previous_status"
],
"type": "object"
},
"CaepEvent": {
"properties": {
"event_timestamp": {
"description": "The time of the event (UNIX timestamp)",
"example": 1702448550,
"format": "int64",
"type": "integer"
},
"reason_admin": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized administrative message intended for logging and auditing",
"type": "object"
}
]
},
"reason_user": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized message intended for the end user",
"type": "object"
}
]
},
"subject": {
"$ref": "#/components/schemas/SsfTransmitterSecurityEventSubject"
}
},
"type": "object"
},
"CaepSecurityEvent": {
"properties": {
"event_timestamp": {
"description": "The time of the event (UNIX timestamp)",
"example": 1702448550,
"format": "int64",
"type": "integer"
},
"initiating_entity": {
"description": "The entity that initiated the event",
"enum": [
"admin",
"user",
"policy",
"system"
],
"type": "string"
},
"reason_admin": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized administrative message intended for logging and auditing.
Either `reason_admin` or `reason_user` is required.",
"type": "object"
}
]
},
"reason_user": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized message intended for the end user.
Either `reason_admin` or `reason_user` is required.",
"type": "object"
}
]
},
"subject": {
"$ref": "#/components/schemas/SecurityEventSubject"
}
},
"required": [
"event_timestamp",
"subject"
],
"type": "object"
},
"CaepSessionRevokedEvent": {
"description": "The session of the subject was revoked",
"properties": {
"current_ip": {
"description": "Current IP of the session",
"example": "123.4.5.6",
"type": "string"
},
"current_user_agent": {
"description": "Current user agent of the session",
"example": "CurrentUserAgent",
"type": "string"
},
"event_timestamp": {
"description": "The time of the event (UNIX timestamp)",
"example": 1702448550,
"format": "int64",
"type": "integer"
},
"initiating_entity": {
"description": "The entity that initiated the event",
"enum": [
"admin",
"user",
"policy",
"system"
],
"type": "string"
},
"last_known_ip": {
"description": "Last known IP of the session",
"example": "123.4.5.6",
"type": "string"
},
"last_known_user_agent": {
"description": "Last known user agent of the session",
"example": "LastUserAgent",
"type": "string"
},
"reason_admin": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized administrative message intended for logging and auditing.
Either `reason_admin` or `reason_user` is required.",
"type": "object"
}
]
},
"reason_user": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized message intended for the end user.
Either `reason_admin` or `reason_user` is required.",
"type": "object"
}
]
},
"subject": {
"$ref": "#/components/schemas/SecurityEventSubject"
}
},
"required": [
"event_timestamp",
"subject"
],
"type": "object"
},
"CallerContext": {
"properties": {
"managedApp": {
"description": "Indicates whether the calling application is managed. This condition can only be applied to ANDROID device assurance policies and requires its parent rule to include both the `registered` and `managed` conditions.",
"enum": [
true
],
"type": "boolean"
}
},
"type": "object",
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "EA"
}
},
"CapabilitiesCreateObject": {
"description": "Determines whether Okta assigns a new app account to each user managed by Okta.\n\nOkta doesn't create a new account if it detects that the username specified in Okta already exists in the app.\nThe user's Okta username is assigned by default.\n",
"properties": {
"lifecycleCreate": {
"$ref": "#/components/schemas/LifecycleCreateSettingObject"
}
},
"type": "object"
},
"CapabilitiesImportRulesObject": {
"description": "Defines user import rules",
"properties": {
"userCreateAndMatch": {
"$ref": "#/components/schemas/CapabilitiesImportRulesUserCreateAndMatchObject"
}
},
"type": "object"
},
"CapabilitiesImportRulesUserCreateAndMatchObject": {
"description": "Rules for matching and creating users",
"properties": {
"allowPartialMatch": {
"description": "Allows user import upon partial matching. Partial matching occurs when the first and last names of an imported user match those of an existing Okta user, even if the username or email attributes don't match.",
"type": "boolean"
},
"autoActivateNewUsers": {
"description": "If set to `true`, imported new users are automatically activated.",
"type": "boolean"
},
"autoConfirmExactMatch": {
"description": "If set to `true`, exact-matched users are automatically confirmed on activation. If set to `false`, exact-matched users need to be confirmed manually.",
"type": "boolean"
},
"autoConfirmNewUsers": {
"description": "If set to `true`, imported new users are automatically confirmed on activation. This doesn't apply to imported users that already exist in Okta.",
"type": "boolean"
},
"autoConfirmPartialMatch": {
"description": "If set to `true`, partially matched users are automatically confirmed on activation. If set to `false`, partially matched users need to be confirmed manually.",
"type": "boolean"
},
"exactMatchCriteria": {
"description": "Determines the attribute to match users",
"enum": [
"EMAIL",
"USERNAME"
],
"type": "string"
}
},
"type": "object"
},
"CapabilitiesImportSettingsObject": {
"description": "Defines import settings",
"properties": {
"schedule": {
"$ref": "#/components/schemas/ImportScheduleObject"
},
"username": {
"$ref": "#/components/schemas/ImportUsernameObject"
}
},
"type": "object"
},
"CapabilitiesInboundProvisioningObject": {
"description": "Defines the configuration for the INBOUND_PROVISIONING feature",
"properties": {
"importRules": {
"$ref": "#/components/schemas/CapabilitiesImportRulesObject"
},
"importSettings": {
"$ref": "#/components/schemas/CapabilitiesImportSettingsObject"
}
},
"required": [
"importSettings",
"importRules"
],
"title": "INBOUND_PROVISIONING",
"type": "object",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"CapabilitiesObject": {
"description": "Defines the configurations for the USER_PROVISIONING feature",
"properties": {
"create": {
"$ref": "#/components/schemas/CapabilitiesCreateObject"
},
"update": {
"$ref": "#/components/schemas/CapabilitiesUpdateObject"
}
},
"title": "USER_PROVISIONING",
"type": "object"
},
"CapabilitiesUpdateObject": {
"description": "Determines whether updates to a user's profile are pushed to the app",
"properties": {
"lifecycleDeactivate": {
"$ref": "#/components/schemas/LifecycleDeactivateSettingObject"
},
"password": {
"$ref": "#/components/schemas/PasswordSettingObject"
},
"profile": {
"$ref": "#/components/schemas/ProfileSettingObject"
}
},
"type": "object"
},
"Capability": {
"enum": [
"API_SERVICE",
"ENTITLEMENTS",
"IDV",
"PROVISIONING",
"SSO",
"UNIVERSAL_LOGOUT"
],
"type": "string"
},
"CatalogApplication": {
"description": "An app in the OIN catalog",
"properties": {
"_links": {
"description": "Specifies link relations (see [Web Linking](https://www.rfc-editor.org/rfc/rfc8288)) available using the [JSON Hypertext Application Language](https://datatracker.ietf.org/doc/html/draft-kelly-json-hal-06) specification",
"properties": {
"logo": {
"description": "List of app logo resources",
"items": {
"$ref": "#/components/schemas/HrefObjectLogoLink"
},
"type": "array"
},
"self": {
"$ref": "#/components/schemas/HrefObjectSelfLink"
}
},
"readOnly": true,
"type": "object"
},
"category": {
"description": "Category for the app in the OIN catalog",
"example": "SOCIAL",
"readOnly": true,
"type": "string"
},
"description": {
"description": "Description of the app in the OIN catalog",
"readOnly": true,
"type": "string"
},
"displayName": {
"description": "OIN catalog app display name",
"readOnly": true,
"type": "string"
},
"features": {
"description": "Features supported by the app. See app [features](/openapi/okta-management/management/application/listapplications#application/listapplications/t=response&c=200&path=&d=0/features).",
"items": {
"type": "string"
},
"readOnly": true,
"type": "array"
},
"id": {
"description": "ID of the app instance. Okta returns this property only for apps not in the OIN catalog.",
"readOnly": true,
"type": "string"
},
"lastUpdated": {
"description": "Timestamp when the object was last updated",
"example": "2024-09-19T23:37:37.000Z",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"name": {
"description": "App key name. For OIN catalog apps, this is a unique key for the app definition.",
"type": "string"
},
"signOnModes": {
"description": "Authentication mode for the app. See app [signOnMode](/openapi/okta-management/management/application/listapplications#application/listapplications/t=response&c=200&path=&d=0/signonmode).",
"items": {
"type": "string"
},
"type": "array"
},
"status": {
"$ref": "#/components/schemas/CatalogApplicationStatus"
},
"verificationStatus": {
"description": "OIN verification status of the catalog app",
"example": "OKTA_VERIFIED",
"type": "string"
},
"website": {
"description": "Website of the OIN catalog app",
"type": "string"
}
},
"type": "object"
},
"CatalogApplicationStatus": {
"description": "App status",
"enum": [
"ACTIVE",
"INACTIVE"
],
"type": "string"
},
"ChallengeType": {
"enum": [
"http://auth0.com/oauth/grant-type/mfa-oob",
"http://auth0.com/oauth/grant-type/mfa-otp"
],
"type": "string"
},
"ChangeEnum": {
"default": "KEEP_EXISTING",
"description": "Determines whether a change in a user's password also updates the user's password in the app",
"enum": [
"CHANGE",
"KEEP_EXISTING"
],
"example": "CHANGE",
"type": "string"
},
"ChangePasswordRequest": {
"properties": {
"newPassword": {
"$ref": "#/components/schemas/PasswordCredential"
},
"oldPassword": {
"$ref": "#/components/schemas/PasswordCredential"
},
"revokeSessions": {
"default": false,
"description": "When set to `true`, revokes all user sessions, except for the current session",
"type": "boolean"
}
},
"type": "object"
},
"Channel": {
"description": "The out-of-band channel for use with authentication. Required for all `/oob-authenticate` requests and any `/challenge` request with an out-of-band authenticator.",
"enum": [
"push",
"sms",
"voice"
],
"type": "string"
},
"ChannelBinding": {
"properties": {
"required": {
"$ref": "#/components/schemas/RequiredEnum"
},
"style": {
"enum": [
"NUMBER_CHALLENGE"
],
"type": "string"
}
},
"type": "object"
},
"ChildOrg": {
"properties": {
"_links": {
"additionalProperties": true,
"description": "Specifies available link relations (see [Web Linking](https://www.rfc-editor.org/rfc/rfc8288)) using the [JSON Hypertext Application Language](https://datatracker.ietf.org/doc/html/draft-kelly-json-hal-06) specification",
"readOnly": true,
"type": "object"
},
"admin": {
"$ref": "#/components/schemas/OrgCreationAdmin"
},
"created": {
"description": "Timestamp when the org was created",
"example": "2022-08-25T00:05:00.000Z",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"edition": {
"description": "Edition for the org. `SKU` is the only supported value.",
"enum": [
"SKU"
],
"example": "SKU",
"type": "string"
},
"id": {
"description": "Org ID",
"example": "00o1n8sbwArJ7OQRw406",
"readOnly": true,
"type": "string"
},
"lastUpdated": {
"description": "Timestamp when the org was last updated",
"example": "2022-08-25T00:05:00.000Z",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"name": {
"description": "Unique name of the org.\nThis name appears in the HTML `
**Note:** Currently, only the `SIGNED_JWT` method is supported",
"enum": [
"SIGNED_JWT"
],
"type": "string"
},
"endpoint": {
"description": "URL of the authorization server's global token revocation endpoint",
"format": "uri",
"type": "string"
},
"partialLogout": {
"default": false,
"description": "Allow partial support for Universal Logout",
"type": "boolean"
},
"subjectFormat": {
"description": "The format of the subject",
"enum": [
"EMAIL",
"ISS_SUB"
],
"type": "string"
}
},
"required": [
"endpoint",
"subjectFormat",
"authMethod"
],
"type": "object"
},
"GoogleApplication": {
"allOf": [
{
"$ref": "#/components/schemas/OINApplication"
},
{
"type": "object"
},
{
"properties": {
"name": {
"enum": [
"google"
],
"example": "google",
"type": "string"
},
"settings": {
"$ref": "#/components/schemas/GoogleApplicationSettings"
},
"signOnMode": {
"enum": [
"BROWSER_PLUGIN",
"SAML_2_0"
],
"example": "BROWSER_PLUGIN",
"type": "string"
}
},
"required": [
"name",
"label",
"settings"
]
}
],
"description": "Schema for the Google Workspace app (key name: `google`)\n\nTo create a Google Workspace app, use the [Create an Application](https://developer.okta.com/docs/api/openapi/okta-management/management/tags/application/other/createapplication) request with the following parameters in the request body.\n> **Note:** The Google Workspace app only supports `BROWSER_PLUGIN` and `SAML_2_0` sign-on modes.\n",
"example": {
"label": "Sample Google App",
"name": "google",
"settings": {
"app": {
"domain": "my-company-domain"
}
},
"signOnMode": "SAML_2_0"
},
"title": "Google Workspace",
"x-okta-defined-as": {
"name": "google"
},
"x-okta-ignore-redocly-rules-for-sdk": true,
"x-tags": [
"Application"
]
},
"GoogleApplicationSettings": {
"allOf": [
{
"$ref": "#/components/schemas/ApplicationSettings"
},
{
"type": "object"
},
{
"properties": {
"app": {
"$ref": "#/components/schemas/GoogleApplicationSettingsApplication"
},
"signOn": {
"$ref": "#/components/schemas/OINSaml20ApplicationSettingsSignOn"
}
},
"required": [
"app"
]
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"GoogleApplicationSettingsApplication": {
"description": "Google app instance properties",
"properties": {
"domain": {
"description": "Your Google company domain",
"type": "string"
},
"rpId": {
"description": "RPID",
"type": "string"
}
},
"required": [
"domain"
],
"type": "object"
},
"GovernanceBundle": {
"properties": {
"_links": {
"description": "Link relations available",
"properties": {
"entitlements": {
"$ref": "#/components/schemas/EntitlementsLink"
},
"self": {
"$ref": "#/components/schemas/HrefObjectSelfLink"
}
},
"type": "object"
},
"description": {
"description": "Description of the governance bundle",
"type": "string"
},
"id": {
"description": "Governance bundle ID",
"type": "string"
},
"name": {
"description": "Name of the governance bundle",
"type": "string"
},
"orn": {
"description": "The governance bundle resource, in [ORN format](https://developer.okta.com/docs/api/openapi/okta-management/guides/roles/#okta-resource-name-orn)",
"type": "string"
},
"status": {
"description": "Status of the governance bundle",
"type": "string"
}
},
"type": "object"
},
"GovernanceBundleCreateRequest": {
"description": "Request to create a governance bundle",
"properties": {
"description": {
"description": "Description of the governance bundle",
"type": "string"
},
"entitlements": {
"description": "List of entitlements to include in the governance bundle",
"items": {
"$ref": "#/components/schemas/IAMBundleEntitlement"
},
"type": "array"
},
"name": {
"description": "Name of the governance bundle",
"type": "string"
}
},
"type": "object"
},
"GovernanceBundleUpdateRequest": {
"description": "Request to update a governance bundle",
"properties": {
"description": {
"description": "Description of the governance bundle",
"type": "string"
},
"entitlements": {
"description": "List of entitlements to include in the governance bundle",
"items": {
"$ref": "#/components/schemas/IAMBundleEntitlement"
},
"type": "array"
},
"name": {
"description": "Name of the governance bundle",
"type": "string"
}
},
"type": "object"
},
"GovernanceBundlesResponse": {
"properties": {
"_links": {
"allOf": [
{
"$ref": "#/components/schemas/LinksSelf"
},
{
"readOnly": true
},
{
"properties": {
"next": {
"$ref": "#/components/schemas/HrefObjectNextLink"
}
},
"type": "object"
}
]
},
"bundles": {
"description": "List of governance bundles",
"items": {
"$ref": "#/components/schemas/GovernanceBundle"
},
"type": "array"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"GovernanceSourceType": {
"description": "The grant type",
"enum": [
"CUSTOM",
"ENTITLEMENT-BUNDLE"
],
"type": "string"
},
"GracePeriod": {
"description": "Represents the Grace Period configuration for the device assurance policy",
"properties": {
"expiry": {
"oneOf": [
{
"$ref": "#/components/schemas/DateTime"
},
{
"$ref": "#/components/schemas/TimeDuration"
}
]
},
"type": {
"description": "Represents the type of Grace Period configured for the device assurance policy",
"enum": [
"BY_DATE_TIME",
"BY_DURATION"
],
"example": "BY_DATE_TIME",
"type": "string",
"x-enumDescriptions": {
"BY_DATE_TIME": "The Grace Period configured for this device assurance policy expires at a specified date and time",
"BY_DURATION": "The Grace Period configured for this device assurance policy expires after a specified duration"
}
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true,
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"GracePeriodRequiredSoon": {
"description": "
\nEach schema has the following format:\n\n```\n{\n \"const\": \"enumValue\",\n \"title\": \"display name\"\n}\n```\n\nWhen `enum` is used in conjunction with `oneOf`, you must keep the set of enumerated values and their order.
\nFor example:\n\n```\n\"enum\": [\"S\",\"M\",\"L\",\"XL\"],\n\"oneOf\": [\n {\"const\": \"S\", \"title\": \"Small\"},\n {\"const\": \"M\", \"title\": \"Medium\"},\n {\"const\": \"L\", \"title\": \"Large\"},\n {\"const\": \"XL\", \"title\": \"Extra Large\"}\n ]\n```",
"items": {
"$ref": "#/components/schemas/UserSchemaAttributeEnum"
},
"nullable": true,
"type": "array"
},
"permissions": {
"description": "Access control permissions for the property",
"items": {
"$ref": "#/components/schemas/UserSchemaAttributePermission"
},
"nullable": true,
"type": "array"
},
"required": {
"description": "Determines whether the property is required",
"nullable": true,
"type": "boolean"
},
"scope": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttributeScope"
}
],
"description": "Determines whether a group attribute can be set at the individual or group level"
},
"title": {
"description": "User-defined display name for the property",
"minLength": 1,
"type": "string"
},
"type": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttributeType"
}
],
"description": "Type of property"
},
"unique": {
"description": "Determines whether property values must be unique",
"nullable": true,
"type": "boolean"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"GroupSchemaBase": {
"properties": {
"id": {
"description": "The subschema name",
"readOnly": true,
"type": "string"
},
"properties": {
"allOf": [
{
"$ref": "#/components/schemas/GroupSchemaBaseProperties"
}
],
"description": "The `#base` object properties"
},
"required": {
"description": "A collection indicating required property names",
"items": {
"type": "string"
},
"readOnly": true,
"type": "array"
},
"type": {
"description": "The object type",
"readOnly": true,
"type": "string"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"GroupSchemaBaseProperties": {
"description": "All Okta-defined profile properties are defined in a profile subschema with the resolution scope `#base`. These properties can't be removed or edited, regardless of any attempt to do so.",
"properties": {
"description": {
"allOf": [
{
"$ref": "#/components/schemas/GroupSchemaAttribute"
}
],
"description": "Human readable description of the group"
},
"name": {
"allOf": [
{
"$ref": "#/components/schemas/GroupSchemaAttribute"
}
],
"description": "Unique identifier for the group"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"GroupSchemaCustom": {
"description": "All custom profile properties are defined in a profile subschema with the resolution scope `#custom`",
"properties": {
"id": {
"description": "The subschema name",
"readOnly": true,
"type": "string"
},
"properties": {
"additionalProperties": {
"$ref": "#/components/schemas/GroupSchemaAttribute"
},
"description": "The `#custom` object properties",
"type": "object"
},
"required": {
"description": "A collection indicating required property names",
"items": {
"type": "string"
},
"readOnly": true,
"type": "array"
},
"type": {
"description": "The object type",
"readOnly": true,
"type": "string"
}
},
"type": "object"
},
"GroupSchemaDefinitions": {
"properties": {
"base": {
"$ref": "#/components/schemas/GroupSchemaBase"
},
"custom": {
"$ref": "#/components/schemas/GroupSchemaCustom"
}
},
"type": "object"
},
"GroupType": {
"description": "Determines how a group's profile and memberships are managed",
"enum": [
"APP_GROUP",
"BUILT_IN",
"OKTA_GROUP"
],
"type": "string",
"x-enumDescriptions": {
"APP_GROUP": "Group profile and memberships are imported and must be managed within the app (such as Active Directory or LDAP) that imported the group",
"BUILT_IN": "Group profile and memberships are managed by Okta and can't be modified",
"OKTA_GROUP": "Group profile and memberships are directly managed in Okta via static assignments or indirectly through group rules"
}
},
"GroupsLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the [Application Groups](/openapi/okta-management/management/tags/applicationgroups/other/listapplicationgroupassignments) resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"GroupsRequestSchema": {
"properties": {
"externalId": {
"description": "The external ID of the identity source group to be created",
"maxLength": 255,
"type": "string"
},
"profile": {
"$ref": "#/components/schemas/IdentitySourceGroupProfileForUpsert"
}
},
"type": "object"
},
"GroupsResponseSchema": {
"properties": {
"externalId": {
"description": "The external ID of the identity source group",
"maxLength": 255,
"type": "string"
},
"id": {
"description": "The Okta group ID of the identity source group",
"readOnly": true,
"type": "string"
},
"profile": {
"description": "The profile information of the group",
"properties": {
"profile": {
"$ref": "#/components/schemas/IdentitySourceGroupProfileForUpsert"
}
},
"type": "object"
}
},
"type": "object"
},
"HelpLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the app help resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HookKey": {
"description": "The `id` property in the response as `id` serves as the unique ID for the key, which you can specify when invoking other CRUD operations. \n\nThe `keyId` provided in the response is the alias of the public key that you can use to get details of the public key data in a separate call.",
"properties": {
"created": {
"description": "Timestamp when the key was created",
"format": "date-time",
"nullable": true,
"readOnly": true,
"type": "string"
},
"id": {
"description": "The unique identifier for the key",
"nullable": false,
"readOnly": true,
"type": "string"
},
"isUsed": {
"description": "Whether this key is currently in use by other applications",
"format": "boolean",
"nullable": false,
"readOnly": true,
"type": "string"
},
"keyId": {
"description": "The alias of the public key",
"nullable": false,
"readOnly": true,
"type": "string"
},
"lastUpdated": {
"description": "Timestamp when the key was updated",
"format": "date-time",
"nullable": true,
"readOnly": true,
"type": "string"
},
"name": {
"description": "Display name of the key",
"maxLength": 255,
"minLength": 1,
"nullable": false,
"readOnly": false,
"type": "string"
}
},
"title": "HookKeyInstance",
"type": "object"
},
"HostedPage": {
"properties": {
"type": {
"$ref": "#/components/schemas/HostedPageType"
},
"url": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
},
"HostedPageType": {
"enum": [
"EXTERNALLY_HOSTED",
"OKTA_DEFAULT"
],
"type": "string"
},
"HrefCsrPublishLink": {
"description": "Link to publish CSR",
"properties": {
"hints": {
"$ref": "#/components/schemas/CsrPublishHrefHints"
},
"href": {
"description": "Link URI",
"example": "https://{yourOktaDomain}/api/v1/apps/0oad5lTSBOMUBOBVVQSC/credentials/csrs/h9zkutaSe7fZX0SwN1GqDApofgD1OW8g2B5l2azha50/lifecycle/publish",
"type": "string"
}
},
"readOnly": true,
"required": [
"href"
],
"title": "Link Object",
"type": "object"
},
"HrefCsrSelfLink": {
"description": "Link to the resource (self)",
"properties": {
"hints": {
"$ref": "#/components/schemas/CsrSelfHrefHints"
},
"href": {
"description": "Link URI",
"example": "https://{yourOktaDomain}/api/v1/apps/0oad5lTSBOMUBOBVVQSC/credentials/csrs/h9zkutaSe7fZX0SwN1GqDApofgD1OW8g2B5l2azha50",
"type": "string"
}
},
"readOnly": true,
"required": [
"href"
],
"title": "Link Object",
"type": "object"
},
"HrefHints": {
"description": "Describes allowed HTTP verbs for the `href`",
"properties": {
"allow": {
"items": {
"$ref": "#/components/schemas/HttpMethod"
},
"type": "array"
}
},
"type": "object"
},
"HrefHintsGuidanceObject": {
"allOf": [
{
"$ref": "#/components/schemas/HrefHints"
},
{
"description": "Describes allowed HTTP verbs and guidance for the `href`"
},
{
"properties": {
"guidance": {
"description": "Specifies the URI to invoke for granting scope consent required to complete the OAuth 2.0 connection\n",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObject": {
"additionalProperties": true,
"properties": {
"hints": {
"$ref": "#/components/schemas/HrefHints",
"readOnly": true
},
"href": {
"description": "Link URI",
"type": "string"
},
"name": {
"description": "Link name",
"readOnly": true,
"type": "string"
},
"templated": {
"description": "Indicates whether the link object's `href` property is a URI template.",
"readOnly": true,
"type": "boolean"
},
"type": {
"description": "The media type of the link. If omitted, it is implicitly `application/json`.",
"readOnly": true,
"type": "string"
}
},
"required": [
"href"
],
"title": "Link Object",
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectActivateLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to activate the resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectAppLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the app resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectAssigneeLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the assignee resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectAuthorizeLink": {
"description": "Link to authorize scopes",
"properties": {
"hints": {
"$ref": "#/components/schemas/HrefHintsGuidanceObject"
},
"href": {
"description": "Link URI",
"type": "string"
}
},
"readOnly": true,
"required": [
"href"
],
"type": "object",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"HrefObjectBindingLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the binding resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectBindingsLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the bindings resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectClientLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the client resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectDeactivateLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to deactivate the resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectDeleteLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to delete the resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectGovernanceResourcesLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the resources"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectGrantAerialConsent": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to grant Okta Aerial access to your Org"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectGroupLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the group resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectLogoLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the logo resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectMappingsLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the mappings resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectMemberLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the member resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectMembersLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the members resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectNextLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the next resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectPermissionsLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the permissions resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectResourceSetLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the resource set resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectResourceSetResourcesLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to resource set resources"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectRetrieveAerialConsent": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to retrieve Okta Aerial consent for your Org"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectRevokeAerialConsent": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to revoke Okta Aerial consent for your Org"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectRoleLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the role resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectRulesLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the rules resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectSelfLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the resource (self)"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectSuspendLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to suspend the resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectUnsuspendLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to unsuspend the resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectUserLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the user resource"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HrefObjectWebLink": {
"allOf": [
{
"$ref": "#/components/schemas/HrefObject"
},
{
"description": "Link to the resource in the Okta Admin Console"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"HttpMethod": {
"enum": [
"DELETE",
"GET",
"POST",
"PUT"
],
"type": "string"
},
"IAMBundleEntitlement": {
"description": "An entitlement in a governance bundle",
"properties": {
"resourceSets": {
"description": "List of resource set IDs for the custom role",
"items": {
"description": "Resource set ID",
"type": "string"
},
"type": "array"
},
"role": {
"description": "The role",
"type": "string"
},
"targets": {
"description": "List of target resource IDs to scope the entitlement with the role",
"items": {
"description": "Target resource (app or group ID)",
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"IDVAuthorizationEndpoint": {
"description": "IDV authorization endpoint",
"properties": {
"binding": {
"enum": [
"HTTP-REDIRECT"
],
"type": "string"
},
"url": {
"description": "URL of the `authorization` endpoint of the IDV vendor",
"type": "string"
}
},
"type": "object"
},
"IDVCredentials": {
"description": "Credentials for verifying requests to the IDV vendor",
"properties": {
"bearer": {
"description": "Client credential for `IDV_PERSONA` IdP type",
"properties": {
"apiKey": {
"description": "The API key that you generate in your Persona dashboard",
"type": "string"
}
},
"required": [
"apiKey"
],
"type": "object"
},
"client": {
"description": "
For example: `US`",
"maxLength": 2,
"minLength": 2,
"type": "string"
},
"region": {
"description": "(Optional) The ISO 3166-2 region code appended to the country code (`countryCode-regionCode`), or `null` if empty.\nDon't use continent codes since they are treated as generic codes for undesignated regions.\n
For example: `CA` (for `US-CA` country and region code)",
"type": "string"
}
},
"type": "object"
},
"NetworkZoneLocationArray": {
"items": {
"$ref": "#/components/schemas/NetworkZoneLocation"
},
"maximum": 75,
"nullable": true,
"type": "array"
},
"NetworkZoneStatus": {
"description": "Network Zone status",
"enum": [
"ACTIVE",
"INACTIVE"
],
"type": "string"
},
"NetworkZoneType": {
"description": "The type of Network Zone",
"enum": [
"DYNAMIC",
"IP",
"DYNAMIC_V2"
],
"type": "string"
},
"NetworkZoneUsage": {
"description": "The usage of the Network Zone",
"enum": [
"BLOCKLIST",
"POLICY"
],
"type": "string"
},
"NotificationType": {
"description": "The type of notification",
"enum": [
"AD_AGENT",
"AGENT_AUTO_UPDATE_NOTIFICATION",
"AGENT_AUTO_UPDATE_NOTIFICATION_LDAP",
"APP_IMPORT",
"CONNECTOR_AGENT",
"IWA_AGENT",
"LDAP_AGENT",
"OKTA_ANNOUNCEMENT",
"OKTA_UPDATE",
"RATELIMIT_NOTIFICATION",
"REPORT_SUSPICIOUS_ACTIVITY",
"USER_DEPROVISION",
"USER_LOCKED_OUT"
],
"type": "string",
"x-enumDescriptions": {
"AD_AGENT": "System notification sent when an AD agent disconnects or reconnects",
"AGENT_AUTO_UPDATE_NOTIFICATION": "System notification sent when an agent automatically updates",
"APP_IMPORT": "System notification sent with the status of an app user import",
"CONNECTOR_AGENT": "System notification sent when an on-premises provisioning or Okta on-prem MFA agent disconnects or reconnects",
"IWA_AGENT": "System notification sent when an IGA agent disconnects or reconnects",
"LDAP_AGENT": "System notification sent when an LDAP agent disconnects or reconnects",
"OKTA_ANNOUNCEMENT": "Okta communication sent for announcements and release notes",
"OKTA_UPDATE": "Okta communication sent for scheduled system updates",
"RATELIMIT_NOTIFICATION": "System notification sent when an org reaches rate limit warning or violation thresholds",
"REPORT_SUSPICIOUS_ACTIVITY": "System notification sent when a user reports suspicious activity",
"USER_DEPROVISION": "System notification sent when a user is deprovisioned from apps",
"USER_LOCKED_OUT": "System notification sent when a user is locked out from logging in to Okta"
}
},
"NumberFactorChallengeEmbeddedLinks": {
"description": "Contains the `challenge` and `correctAnswer` objects for `push` factors that use a number matching challenge",
"properties": {
"challenge": {
"description": "Number matching challenge for a `push` factor",
"nullable": true,
"properties": {
"correctAnswer": {
"description": "The correct answer for a `push` factor that uses a number matching challenge",
"example": 72,
"type": "integer"
}
},
"type": "object"
}
},
"type": "object",
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"OAUTH2_CLIENT_CREDENTIALS": {
"allOf": [
{
"$ref": "#/components/schemas/BaseEmailServer"
},
{
"properties": {
"clientId": {
"description": "The client ID that's used to access your SMTP server. This client ID is obtained when you create an OAuth 2.0 app with your email provider.",
"type": "string"
},
"clientSecret": {
"description": "The client secret that's used to access your SMTP server. This client secret is obtained when you create an OAuth 2.0 app with your email provider.",
"type": "string"
},
"scopes": {
"description": "List of OAuth 2.0 scopes for your SMTP server. You must provide a scope that allows your email server to send emails.",
"items": {
"type": "string"
},
"type": "array"
},
"tokenEndpoint": {
"description": "The email provider's specific URL where the OAuth 2.0 app sends its credentials (or signed JWT) to exchange them for an access token",
"type": "string"
},
"tokenEndpointAuthMethod": {
"description": "This method determines how your OAuth 2.0 app sends its credentials (`client_id` and `client_secret`) to the provider's server when requesting an access token",
"enum": [
"CLIENT_SECRET_BASIC",
"CLIENT_SECRET_POST"
],
"type": "string",
"x-enumDescriptions": {
"CLIENT_SECRET_BASIC": "The `client_id` and `client_secret` are combined into a single string (separated by a colon), Base64 encoded, and sent in the `Authorization` header",
"CLIENT_SECRET_POST": "The `client_id` and `client_secret` are sent as standard form parameters in the payload of the POST request"
}
}
},
"required": [
"authType"
],
"type": "object"
}
],
"title": "OAUTH2_CLIENT_CREDENTIALS"
},
"OAUTH2_CLIENT_CREDENTIALS_CREATE": {
"allOf": [
{
"$ref": "#/components/schemas/BaseEmailServerCreate"
},
{
"properties": {
"clientId": {
"description": "The client ID that's used to access your SMTP server. This client ID is obtained when you create an OAuth 2.0 app with your email provider.",
"type": "string"
},
"clientSecret": {
"description": "The client secret that's used to access your SMTP server. This client secret is obtained when you create an OAuth 2.0 app with your email provider.",
"type": "string"
},
"scopes": {
"description": "List of OAuth 2.0 scopes for your SMTP server. You must provide a scope that allows your email server to send emails.",
"items": {
"type": "string"
},
"type": "array"
},
"tokenEndpoint": {
"description": "The email provider's specific URL where the OAuth 2.0 app sends its credentials (or signed JWT) to exchange them for an access token",
"type": "string"
},
"tokenEndpointAuthMethod": {
"description": "This method determines how your OAuth 2.0 app sends its credentials (`client_id` and `client_secret`) to the provider's server when requesting an access token.",
"enum": [
"CLIENT_SECRET_BASIC",
"CLIENT_SECRET_POST"
],
"type": "string",
"x-enumDescriptions": {
"CLIENT_SECRET_BASIC": "The `client_id` and `client_secret` are combined into a single string (separated by a colon), Base64 encoded, and sent in the `Authorization` header",
"CLIENT_SECRET_POST": "The `client_id` and `client_secret` are sent as standard form parameters in the payload of the POST request."
}
}
},
"required": [
"clientId",
"clientSecret",
"tokenEndpoint",
"tokenEndpointAuthMethod",
"scopes"
],
"type": "object"
}
],
"title": "OAUTH2_CLIENT_CREDENTIALS"
},
"OAUTH2_JWT_BEARER_GRANT": {
"allOf": [
{
"$ref": "#/components/schemas/BaseEmailServer"
},
{
"properties": {
"audience": {
"description": "The URI of the authorization server that verifies the token. This is typically the token URI of your JWT.",
"type": "string"
},
"clientId": {
"description": "The client ID that's used to access your SMTP server. This client ID is obtained when you create an OAuth 2.0 app with your email provider.",
"type": "string"
},
"issuer": {
"description": "The unique ID of the entity that creates the JWT. This can sometimes be the email address of the user who creates the JWT. Check with your email provider for the correct value.",
"type": "string"
},
"keyId": {
"description": "The ID of the private key that's used to sign the JWT",
"type": "string"
},
"privateKey": {
"description": "The secret RSA key that's used to cryptographically sign the JWT",
"type": "string"
},
"scopes": {
"description": "List of OAuth 2.0 scopes for your SMTP server. You must provide a scope that allows your email server to send emails.",
"items": {
"type": "string"
},
"type": "array"
},
"signingAlgorithm": {
"description": "The signing algorithm that's used to sign the JWT",
"enum": [
"RS256"
],
"type": "string"
},
"subject": {
"description": "The email address of the user account that the OAuth 2.0 app impersonates to send emails",
"type": "string"
},
"tokenEndpoint": {
"description": "The email provider's specific URL where the OAuth 2.0 app sends its credentials (or signed JWT) to exchange them for an access token",
"type": "string"
}
},
"required": [
"authType"
],
"type": "object"
}
],
"title": "OAUTH2_JWT_BEARER_GRANT"
},
"OAUTH2_JWT_BEARER_GRANT_CREATE": {
"allOf": [
{
"$ref": "#/components/schemas/BaseEmailServerCreate"
},
{
"properties": {
"audience": {
"description": "The URI of the authorization server that verifies the token. This is typically the token URI of your JWT.",
"type": "string"
},
"clientId": {
"description": "The client ID that's used to access your SMTP server. This client ID is obtained when you create an OAuth 2.0 app with your email provider.",
"type": "string"
},
"issuer": {
"description": "The unique ID of the entity that creates the JWT. This can sometimes be the email address of the user who creates the JWT. Check with your email provider for the correct value.",
"type": "string"
},
"keyId": {
"description": "The ID of the private key that's used to sign the JWT",
"type": "string"
},
"privateKey": {
"description": "The secret RSA key that's used to cryptographically sign the JWT",
"type": "string"
},
"scopes": {
"description": "List of OAuth 2.0 scopes for your SMTP server. You must provide a scope that allows your email server to send emails.",
"items": {
"type": "string"
},
"type": "array"
},
"signingAlgorithm": {
"description": "The signing algorithm that's used to sign the JWT",
"enum": [
"RS256"
],
"type": "string"
},
"subject": {
"description": "The email address of the user account that the OAuth 2.0 app impersonates to send emails",
"type": "string"
},
"tokenEndpoint": {
"description": "The email provider's specific URL where the OAuth 2.0 app sends its credentials (or signed JWT) to exchange them for an access token",
"type": "string"
}
},
"required": [
"tokenEndpoint",
"clientId",
"signingAlgorithm",
"keyId",
"issuer",
"subject",
"audience",
"scopes",
"privateKey"
],
"type": "object"
}
],
"title": "OAUTH2_JWT_BEARER_GRANT"
},
"OAuth2Actor": {
"description": "User that created the object",
"properties": {
"id": {
"description": "User ID",
"example": "00u5t60iloOHN9pBi0h7",
"readOnly": true,
"type": "string"
},
"type": {
"description": "Type of user",
"example": "User",
"type": "string"
}
},
"readOnly": true,
"type": "object"
},
"OAuth2Claim": {
"properties": {
"_links": {
"$ref": "#/components/schemas/LinksSelf"
},
"alwaysIncludeInToken": {
"description": "Specifies whether to include Claims in the token. The value is always `TRUE` for access token Claims. If the value is set to `FALSE` for an ID token claim, the Claim isn't included in the ID token when the token is requested with the access token or with the `authorization_code`. The client instead uses the access token to get Claims from the `/userinfo` endpoint.",
"type": "boolean"
},
"claimType": {
"$ref": "#/components/schemas/OAuth2ClaimType"
},
"conditions": {
"$ref": "#/components/schemas/OAuth2ClaimConditions"
},
"group_filter_type": {
"$ref": "#/components/schemas/OAuth2ClaimGroupFilterType"
},
"id": {
"description": "ID of the Claim",
"readOnly": true,
"type": "string"
},
"name": {
"description": "Name of the Claim",
"type": "string"
},
"status": {
"$ref": "#/components/schemas/LifecycleStatus"
},
"system": {
"description": "When `true`, indicates that Okta created the Claim",
"type": "boolean"
},
"value": {
"description": "Specifies the value of the Claim. This value must be a string literal if `valueType` is `GROUPS`, and the string literal is matched with the selected `group_filter_type`. The value must be an Okta EL expression if `valueType` is `EXPRESSION`.",
"type": "string"
},
"valueType": {
"$ref": "#/components/schemas/OAuth2ClaimValueType"
}
},
"type": "object"
},
"OAuth2ClaimConditions": {
"description": "Specifies the scopes for the Claim",
"properties": {
"scopes": {
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"OAuth2ClaimGroupFilterType": {
"description": "Specifies the type of group filter if `valueType` is `GROUPS`\n\nIf `valueType` is `GROUPS`, then the groups returned are filtered according to the value of `group_filter_type`.\n\nIf you have complex filters for Groups, you can [create a Groups allowlist](https://developer.okta.com/docs/guides/customize-tokens-groups-claim/main/) to put them all in a Claim.",
"enum": [
"CONTAINS",
"EQUALS",
"REGEX",
"STARTS_WITH"
],
"type": "string",
"x-enumDescriptions": {
"CONTAINS": "Group names contain `value` (not case-sensitive). For example, if `value` is `group1`, then `MyGroup123` and `group1` are included.",
"EQUALS": "Group name is the same as `value` (not case-sensitive). For example, if `value` is `group1`, then `group1` and `Group1` are included, but `group123` isn't.",
"REGEX": "Group names match the regular expression in `value` (case-sensitive). For example if `value` is `/^[a-z0-9_-]{3,16}$/`, then any Group name that has at least three letters, no more than 16, and contains lowercase letters, a hyphen, or numbers is a match.",
"STARTS_WITH": "Group names start with `value` (not case-sensitive). For example, if `value` is `group1`, then `group123` and `Group123` are included."
}
},
"OAuth2ClaimType": {
"description": "Specifies whether the Claim is for an access token (`RESOURCE`) or an ID token (`IDENTITY`)",
"enum": [
"IDENTITY",
"RESOURCE"
],
"type": "string"
},
"OAuth2ClaimValueType": {
"description": "Specifies whether the Claim is an Okta Expression Language (EL) expression (`EXPRESSION`), a set of groups (`GROUPS`), or a system claim (`SYSTEM`)",
"enum": [
"EXPRESSION",
"GROUPS",
"SYSTEM"
],
"type": "string"
},
"OAuth2Client": {
"properties": {
"_links": {
"allOf": [
{
"$ref": "#/components/schemas/LinksSelf"
},
{
"properties": {
"grants": {
"allOf": [
{
"$ref": "#/components/schemas/GrantResourcesHrefObject"
}
],
"description": "Link to the grant resources"
},
"tokens": {
"allOf": [
{
"$ref": "#/components/schemas/TokenResourcesHrefObject"
}
],
"description": "Link to the token resources"
}
},
"type": "object"
}
]
},
"client_id": {
"description": "Unique key for the client application. The `client_id` is immutable.",
"example": "0oabskvc6442nkvQO0h7",
"readOnly": true,
"type": "string"
},
"client_name": {
"description": "Human-readable string name of the client application",
"example": "My App",
"readOnly": true,
"type": "string"
},
"client_uri": {
"example": "https://www.example.com",
"readOnly": true,
"type": "string"
},
"logo_uri": {
"description": "URL string that references a logo for the client consent dialog (not the sign-in dialog)",
"example": "https://www.example.com/logo.png",
"readOnly": true,
"type": "string"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OAuth2ClientJsonEncryptionKeyRequest": {
"allOf": [
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyRequestBase"
}
],
"description": "A [JSON Web Key (JWK)](https://tools.ietf.org/html/rfc7517) is a JSON representation of a cryptographic key. Okta uses an encryption key to encrypt an ID token JWT minted by the org authorization server or custom authorization server. Okta supports only RSA keys for encrypting tokens.",
"properties": {
"alg": {
"description": "Algorithm used in the key",
"example": "RSA-OAEP",
"nullable": false,
"type": "string"
},
"e": {
"description": "RSA key value (exponent) for key binding",
"example": "AQAB",
"nullable": false,
"type": "string"
},
"kty": {
"description": "Cryptographic algorithm family for the certificate's key pair",
"enum": [
"RSA"
],
"example": "RSA",
"nullable": false,
"type": "string"
},
"n": {
"description": "RSA key value (modulus) for key binding",
"example": "mkC6yAJVvFwUlmM9gKjb2d-YK5qHFt-mXSsbjWKKs4EfNm-BoQeeovBZtSACyaqLc8IYFTPEURFcbDQ9DkAL04uUIRD2gaHYY7uK0jsluEaXGq2RAIsmzAwNTzkiDw4q9pDL_q7n0f_SDt1TsMaMQayB6bU5jWsmqcWJ8MCRJ1aJMjZ16un5UVx51IIeCbe4QRDxEXGAvYNczsBoZxspDt28esSpq5W0dBFxcyGVudyl54Er3FzAguhgfMVjH-bUec9j2Tl40qDTktrYgYfxz9pfjm01Hl4WYP1YQxeETpSL7cQ5Ihz4jGDtHUEOcZ4GfJrPzrGpUrak8Qp5xcwCqQ",
"nullable": false,
"type": "string"
},
"use": {
"description": "Acceptable use of the JSON Web Key",
"enum": [
"enc"
],
"example": "enc",
"nullable": false,
"type": "string"
}
},
"title": "Encryption key",
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true,
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"OAuth2ClientJsonEncryptionKeyResponse": {
"allOf": [
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyRequestBase"
},
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyResponseBase"
}
],
"description": "A [JSON Web Key (JWK)](https://tools.ietf.org/html/rfc7517) is a JSON representation of a cryptographic key. Okta uses an encryption key to encrypt an ID token JWT minted by the org authorization server or custom authorization server. Okta supports only RSA keys for encrypting tokens.",
"properties": {
"e": {
"description": "RSA key value (exponent) for key binding",
"example": "AQAB",
"nullable": false,
"type": "string"
},
"kty": {
"description": "Cryptographic algorithm family for the certificate's key pair",
"enum": [
"RSA"
],
"example": "RSA",
"nullable": false,
"type": "string"
},
"n": {
"description": "RSA key value (modulus) for key binding",
"example": "mkC6yAJVvFwUlmM9gKjb2d-YK5qHFt-mXSsbjWKKs4EfNm-BoQeeovBZtSACyaqLc8IYFTPEURFcbDQ9DkAL04uUIRD2gaHYY7uK0jsluEaXGq2RAIsmzAwNTzkiDw4q9pDL_q7n0f_SDt1TsMaMQayB6bU5jWsmqcWJ8MCRJ1aJMjZ16un5UVx51IIeCbe4QRDxEXGAvYNczsBoZxspDt28esSpq5W0dBFxcyGVudyl54Er3FzAguhgfMVjH-bUec9j2Tl40qDTktrYgYfxz9pfjm01Hl4WYP1YQxeETpSL7cQ5Ihz4jGDtHUEOcZ4GfJrPzrGpUrak8Qp5xcwCqQ",
"nullable": false,
"type": "string"
},
"use": {
"description": "Acceptable use of the JSON Web Key",
"enum": [
"enc"
],
"example": "enc",
"nullable": false,
"type": "string"
}
},
"title": "Encryption Key",
"type": "object",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"OAuth2ClientJsonSigningKeyRequest": {
"description": "A [JSON Web Key (JWK)](https://tools.ietf.org/html/rfc7517) is a JSON representation of a cryptographic key. Okta uses signing keys to verify the signature of a JWT when provided for the `private_key_jwt` client authentication method or for a signed authorize request object. Okta supports both RSA and Elliptic Curve (EC) keys for signing tokens.",
"discriminator": {
"mapping": {
"EC": "#/components/schemas/OAuth2ClientJsonWebKeyECRequest",
"RSA": "#/components/schemas/OAuth2ClientJsonWebKeyRsaRequest"
},
"propertyName": "kty"
},
"oneOf": [
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyRsaRequest"
},
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyECRequest"
}
],
"properties": {
"alg": {
"description": "Algorithm used in the key",
"example": "RS256",
"nullable": false,
"type": "string"
},
"use": {
"description": "Acceptable use of the JSON Web Key",
"enum": [
"sig"
],
"example": "sig",
"nullable": false,
"type": "string"
}
},
"title": "Signing Key",
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OAuth2ClientJsonSigningKeyResponse": {
"description": "A [JSON Web Key (JWK)](https://tools.ietf.org/html/rfc7517) is a JSON representation of a cryptographic key. Okta uses signing keys to verify the signature of a JWT when provided for the `private_key_jwt` client authentication method or for a signed authorize request object. Okta supports both RSA and Elliptic Curve (EC) keys for signing tokens.",
"discriminator": {
"mapping": {
"EC": "#/components/schemas/OAuth2ClientJsonWebKeyECResponse",
"RSA": "#/components/schemas/OAuth2ClientJsonWebKeyRsaResponse"
},
"propertyName": "kty"
},
"oneOf": [
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyRsaResponse"
},
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyECResponse"
}
],
"title": "Signing Key",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OAuth2ClientJsonWebKeyECRequest": {
"allOf": [
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyRequestBase"
}
],
"description": "An EC signing key",
"properties": {
"kty": {
"description": "Cryptographic algorithm family for the certificate's key pair",
"enum": [
"EC"
],
"example": "RSA",
"nullable": false,
"type": "string"
},
"x": {
"description": "The public x coordinate for the elliptic curve point",
"type": "string"
},
"y": {
"description": "The public y coordinate for the elliptic curve point",
"type": "string"
}
},
"title": "EC signing Key",
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OAuth2ClientJsonWebKeyECResponse": {
"allOf": [
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyRequestBase"
},
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyResponseBase"
}
],
"description": "An EC signing key",
"properties": {
"kty": {
"description": "Cryptographic algorithm family for the certificate's key pair",
"enum": [
"EC"
],
"example": "EC",
"nullable": false,
"type": "string"
},
"x": {
"description": "The public x coordinate for the elliptic curve point",
"type": "string"
},
"y": {
"description": "The public y coordinate for the elliptic curve point",
"type": "string"
}
},
"title": "EC signing key",
"type": "object"
},
"OAuth2ClientJsonWebKeyRequestBase": {
"properties": {
"kid": {
"description": "Unique identifier of the JSON Web Key in the OAUth 2.0 client's JWKS",
"example": "SIMcCQNY3uwXoW3y0vf6VxiBb5n9pf8L2fK8d-FIbm4",
"nullable": true,
"type": "string"
},
"status": {
"default": "ACTIVE",
"description": "Status of the OAuth 2.0 client JSON Web Key",
"enum": [
"ACTIVE",
"INACTIVE"
],
"example": "ACTIVE",
"nullable": false,
"type": "string"
}
},
"type": "object"
},
"OAuth2ClientJsonWebKeyRequestBody": {
"properties": {
"alg": {
"description": "Algorithm used in the key",
"example": "RS256",
"nullable": false,
"type": "string"
},
"e": {
"description": "RSA key value (exponent) for key binding",
"example": "AQAB",
"nullable": false,
"type": "string"
},
"kid": {
"description": "Unique identifier of the JSON Web Key in the OAuth 2.0 client's JWKS",
"example": "SIMcCQNY3uwXoW3y0vf6VxiBb5n9pf8L2fK8d-FIbm4",
"nullable": true,
"type": "string"
},
"kty": {
"description": "Cryptographic algorithm family for the certificate's key pair",
"example": "RSA",
"nullable": false,
"type": "string"
},
"n": {
"description": "RSA key value (modulus) for key binding",
"example": "mkC6yAJVvFwUlmM9gKjb2d-YK5qHFt-mXSsbjWKKs4EfNm-BoQeeovBZtSACyaqLc8IYFTPEURFcbDQ9DkAL04uUIRD2gaHYY7uK0jsluEaXGq2RAIsmzAwNTzkiDw4q9pDL_q7n0f_SDt1TsMaMQayB6bU5jWsmqcWJ8MCRJ1aJMjZ16un5UVx51IIeCbe4QRDxEXGAvYNczsBoZxspDt28esSpq5W0dBFxcyGVudyl54Er3FzAguhgfMVjH-bUec9j2Tl40qDTktrYgYfxz9pfjm01Hl4WYP1YQxeETpSL7cQ5Ihz4jGDtHUEOcZ4GfJrPzrGpUrak8Qp5xcwCqQ",
"nullable": false,
"type": "string"
},
"status": {
"description": "Status of the OAuth 2.0 client JSON Web Key",
"enum": [
"ACTIVE",
"INACTIVE"
],
"example": "ACTIVE",
"type": "string"
},
"use": {
"description": "Acceptable use of the JSON Web Key",
"example": "sig",
"nullable": false,
"type": "string"
}
},
"type": "object"
},
"OAuth2ClientJsonWebKeyResponseBase": {
"properties": {
"_links": {
"$ref": "#/components/schemas/OAuthClientSecretLinks",
"nullable": false,
"readOnly": true
},
"created": {
"description": "Timestamp when the OAuth 2.0 client JSON Web Key was created",
"example": "2023-02-21T20:08:24.000Z",
"nullable": false,
"readOnly": true,
"type": "string"
},
"id": {
"description": "The unique ID of the OAuth client JSON Web Key",
"example": "pks2f4zrZbs8nUa7p0g4",
"nullable": false,
"readOnly": true,
"type": "string"
},
"lastUpdated": {
"description": "Timestamp when the OAuth 2.0 client JSON Web Key was updated",
"example": "2023-02-21T20:08:24.000Z",
"nullable": false,
"readOnly": true,
"type": "string"
}
},
"type": "object"
},
"OAuth2ClientJsonWebKeyRsaRequest": {
"allOf": [
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyRequestBase"
}
],
"description": "An RSA signing key",
"properties": {
"e": {
"description": "RSA key value (exponent) for key binding",
"example": "AQAB",
"nullable": false,
"type": "string"
},
"kty": {
"description": "Cryptographic algorithm family for the certificate's key pair",
"enum": [
"RSA"
],
"example": "RSA",
"nullable": false,
"type": "string"
},
"n": {
"description": "RSA key value (modulus) for key binding",
"example": "mkC6yAJVvFwUlmM9gKjb2d-YK5qHFt-mXSsbjWKKs4EfNm-BoQeeovBZtSACyaqLc8IYFTPEURFcbDQ9DkAL04uUIRD2gaHYY7uK0jsluEaXGq2RAIsmzAwNTzkiDw4q9pDL_q7n0f_SDt1TsMaMQayB6bU5jWsmqcWJ8MCRJ1aJMjZ16un5UVx51IIeCbe4QRDxEXGAvYNczsBoZxspDt28esSpq5W0dBFxcyGVudyl54Er3FzAguhgfMVjH-bUec9j2Tl40qDTktrYgYfxz9pfjm01Hl4WYP1YQxeETpSL7cQ5Ihz4jGDtHUEOcZ4GfJrPzrGpUrak8Qp5xcwCqQ",
"nullable": false,
"type": "string"
}
},
"title": "RSA signing key",
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OAuth2ClientJsonWebKeyRsaResponse": {
"allOf": [
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyRequestBase"
},
{
"$ref": "#/components/schemas/OAuth2ClientJsonWebKeyResponseBase"
}
],
"description": "An RSA signing key",
"properties": {
"e": {
"description": "RSA key value (exponent) for key binding",
"example": "AQAB",
"nullable": false,
"type": "string"
},
"kty": {
"description": "Cryptographic algorithm family for the certificate's key pair",
"enum": [
"RSA"
],
"example": "RSA",
"nullable": false,
"type": "string"
},
"n": {
"description": "RSA key value (modulus) for key binding",
"example": "mkC6yAJVvFwUlmM9gKjb2d-YK5qHFt-mXSsbjWKKs4EfNm-BoQeeovBZtSACyaqLc8IYFTPEURFcbDQ9DkAL04uUIRD2gaHYY7uK0jsluEaXGq2RAIsmzAwNTzkiDw4q9pDL_q7n0f_SDt1TsMaMQayB6bU5jWsmqcWJ8MCRJ1aJMjZ16un5UVx51IIeCbe4QRDxEXGAvYNczsBoZxspDt28esSpq5W0dBFxcyGVudyl54Er3FzAguhgfMVjH-bUec9j2Tl40qDTktrYgYfxz9pfjm01Hl4WYP1YQxeETpSL7cQ5Ihz4jGDtHUEOcZ4GfJrPzrGpUrak8Qp5xcwCqQ",
"nullable": false,
"type": "string"
}
},
"title": "RSA signing key",
"type": "object"
},
"OAuth2ClientSecret": {
"properties": {
"_links": {
"$ref": "#/components/schemas/OAuthClientSecretLinks",
"nullable": false,
"readOnly": true
},
"client_secret": {
"description": "The OAuth 2.0 client secret string",
"example": "DRUFXGF9XbLn......a3x3POBiIxDreBCdZuFs5B",
"nullable": false,
"readOnly": true,
"type": "string"
},
"created": {
"description": "Timestamp when the OAuth 2.0 client secret was created",
"example": "2023-02-21T20:08:24.000Z",
"nullable": false,
"readOnly": true,
"type": "string"
},
"id": {
"description": "The unique ID of the OAuth 2.0 client secret",
"example": "ocs2f4zrZbs8nUa7p0g4",
"nullable": false,
"readOnly": true,
"type": "string"
},
"lastUpdated": {
"description": "Timestamp when the OAuth 2.0 client secret was updated",
"example": "2023-02-21T20:08:24.000Z",
"nullable": false,
"readOnly": true,
"type": "string"
},
"secret_hash": {
"description": "OAuth 2.0 client secret string hash",
"example": "yk4SVx4sUWVJVbHt6M-UPA",
"nullable": false,
"readOnly": true,
"type": "string"
},
"status": {
"default": "ACTIVE",
"description": "Status of the OAuth 2.0 client secret",
"enum": [
"ACTIVE",
"INACTIVE"
],
"example": "ACTIVE",
"nullable": false,
"type": "string"
}
},
"type": "object"
},
"OAuth2ClientSecretRequestBody": {
"properties": {
"client_secret": {
"description": "The OAuth 2.0 client secret string",
"example": "DRUFXGF9XbLn......a3x3POBiIxDreBCdZuFs5B",
"type": "string"
},
"status": {
"description": "Status of the OAuth 2.0 client secret",
"enum": [
"ACTIVE",
"INACTIVE"
],
"example": "ACTIVE",
"type": "string"
}
},
"type": "object"
},
"OAuth2RefreshToken": {
"properties": {
"_embedded": {
"description": "The embedded resources related to the object if the `expand` query parameter is specified",
"properties": {
"scopes": {
"description": "The scope objects attached to the Token",
"items": {
"$ref": "#/components/schemas/OAuth2RefreshTokenScope"
},
"type": "array"
}
},
"readOnly": true,
"type": "object"
},
"_links": {
"allOf": [
{
"$ref": "#/components/schemas/LinksSelf"
},
{
"properties": {
"app": {
"allOf": [
{
"$ref": "#/components/schemas/AppResourceHrefObject"
}
],
"description": "Link to the app resource"
},
"authorizationServer": {
"allOf": [
{
"$ref": "#/components/schemas/AuthorizationServerResourceHrefObject"
}
],
"description": "Link to the Token authorization server resource"
},
"client": {
"allOf": [
{
"$ref": "#/components/schemas/AppResourceHrefObject"
}
],
"description": "Link to the client resource"
},
"revoke": {
"allOf": [
{
"$ref": "#/components/schemas/RevokeRefreshTokenHrefObject"
},
{
"properties": {
"hints": {
"properties": {
"allow": {
"items": {
"default": "DELETE",
"enum": [
"DELETE"
]
}
}
}
}
}
}
],
"description": "Link to revoke the refresh Token"
},
"user": {
"allOf": [
{
"$ref": "#/components/schemas/UserResourceHrefObject"
}
],
"description": "Link to the user resource"
}
},
"type": "object"
}
]
},
"clientId": {
"description": "Client ID",
"type": "string"
},
"created": {
"$ref": "#/components/schemas/createdProperty"
},
"expiresAt": {
"description": "Expiration time of the OAuth 2.0 Token",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"id": {
"description": "ID of the Token object",
"example": "oar579Mcp7OUsNTlo0g3",
"readOnly": true,
"type": "string"
},
"issuer": {
"description": "The complete URL of the authorization server that issued the Token",
"example": "https://{yourOktaDomain}/oauth2/ausain6z9zIedDCxB0h7",
"type": "string"
},
"lastUpdated": {
"$ref": "#/components/schemas/lastUpdatedProperty"
},
"scopes": {
"description": "The scope names attached to the Token",
"items": {
"example": "offline_access",
"type": "string"
},
"type": "array"
},
"status": {
"$ref": "#/components/schemas/GrantOrTokenStatus"
},
"userId": {
"description": "The ID of the user associated with the Token",
"example": "00u5t60iloOHN9pBi0h7",
"type": "string"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OAuth2RefreshTokenScope": {
"properties": {
"_links": {
"description": "Specifies link relations (see [Web Linking](https://www.rfc-editor.org/rfc/rfc8288)) available for the current status of an application using the [JSON Hypertext Application Language](https://datatracker.ietf.org/doc/html/draft-kelly-json-hal-06) specification. This object is used for dynamic discovery of related resources and lifecycle operations.",
"properties": {
"scope": {
"allOf": [
{
"$ref": "#/components/schemas/OfflineAccessScopeResourceHrefObject"
}
],
"description": "Link to Scope resource"
}
},
"type": "object"
},
"description": {
"description": "Description of the Scope",
"example": "Requests a refresh token by default, used to obtain more access tokens without re-prompting the user for authentication",
"type": "string"
},
"displayName": {
"description": "Name of the end user displayed in a consent dialog",
"type": "string"
},
"id": {
"description": "Scope object ID",
"example": "scppb56cIl4GvGxy70g3",
"readOnly": true,
"type": "string"
},
"name": {
"description": "Scope name",
"example": "offline_access",
"type": "string"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OAuth2ResourceServerJsonWebKey": {
"properties": {
"_links": {
"$ref": "#/components/schemas/OAuthResourceServerKeyLinks",
"nullable": false,
"readOnly": true
},
"created": {
"description": "Timestamp when the JSON Web Key was created",
"example": "2023-02-21T20:08:24.000Z",
"nullable": false,
"readOnly": true,
"type": "string"
},
"e": {
"description": "RSA key value (exponent) for key binding",
"example": "AQAB",
"nullable": false,
"type": "string"
},
"id": {
"description": "The unique ID of the JSON Web Key",
"example": "apk2f4zrZbs8nUa7p0g4",
"nullable": false,
"readOnly": true,
"type": "string"
},
"kid": {
"description": "Unique identifier of the JSON Web Key in the Custom Authorization Server's Public JWKS",
"example": "SIMcCQNY3uwXoW3y0vf6VxiBb5n9pf8L2fK8d-FIbm4",
"nullable": true,
"type": "string"
},
"kty": {
"description": "Cryptographic algorithm family for the certificate's key pair",
"example": "RSA",
"nullable": false,
"type": "string"
},
"lastUpdated": {
"description": "Timestamp when the JSON Web Key was updated",
"example": "2023-02-21T20:08:24.000Z",
"nullable": false,
"readOnly": true,
"type": "string"
},
"n": {
"description": "RSA key value (modulus) for key binding",
"example": "mkC6yAJVvFwUlmM9gKjb2d-YK5qHFt-mXSsbjWKKs4EfNm-BoQeeovBZtSACyaqLc8IYFTPEURFcbDQ9DkAL04uUIRD2gaHYY7uK0jsluEaXGq2RAIsmzAwNTzkiDw4q9pDL_q7n0f_SDt1TsMaMQayB6bU5jWsmqcWJ8MCRJ1aJMjZ16un5UVx51IIeCbe4QRDxEXGAvYNczsBoZxspDt28esSpq5W0dBFxcyGVudyl54Er3FzAguhgfMVjH-bUec9j2Tl40qDTktrYgYfxz9pfjm01Hl4WYP1YQxeETpSL7cQ5Ihz4jGDtHUEOcZ4GfJrPzrGpUrak8Qp5xcwCqQ",
"nullable": false,
"type": "string"
},
"status": {
"default": "ACTIVE",
"description": "The status of the encryption key. You can use only an `ACTIVE` key to encrypt tokens issued by the authorization server.",
"enum": [
"ACTIVE",
"INACTIVE"
],
"example": "ACTIVE",
"nullable": false,
"type": "string"
},
"use": {
"description": "Acceptable use of the JSON Web Key",
"example": "enc",
"nullable": false,
"type": "string"
}
},
"type": "object"
},
"OAuth2ResourceServerJsonWebKeyRequestBody": {
"properties": {
"e": {
"description": "RSA key value (exponent) for key binding",
"example": "AQAB",
"nullable": false,
"type": "string"
},
"kid": {
"description": "Unique identifier of the JSON web key in the custom authorization server's public JWKS",
"example": "SIMcCQNY3uwXoW3y0vf6VxiBb5n9pf8L2fK8d-FIbm4",
"nullable": true,
"type": "string"
},
"kty": {
"description": "Cryptographic algorithm family for the certificate's key pair",
"example": "RSA",
"nullable": false,
"type": "string"
},
"n": {
"description": "RSA key value (modulus) for key binding",
"example": "mkC6yAJVvFwUlmM9gKjb2d-YK5qHFt-mXSsbjWKKs4EfNm-BoQeeovBZtSACyaqLc8IYFTPEURFcbDQ9DkAL04uUIRD2gaHYY7uK0jsluEaXGq2RAIsmzAwNTzkiDw4q9pDL_q7n0f_SDt1TsMaMQayB6bU5jWsmqcWJ8MCRJ1aJMjZ16un5UVx51IIeCbe4QRDxEXGAvYNczsBoZxspDt28esSpq5W0dBFxcyGVudyl54Er3FzAguhgfMVjH-bUec9j2Tl40qDTktrYgYfxz9pfjm01Hl4WYP1YQxeETpSL7cQ5Ihz4jGDtHUEOcZ4GfJrPzrGpUrak8Qp5xcwCqQ",
"nullable": false,
"type": "string"
},
"status": {
"description": "Status of the JSON Web Key",
"enum": [
"ACTIVE",
"INACTIVE"
],
"example": "ACTIVE",
"type": "string"
},
"use": {
"description": "Acceptable use of the JSON Web Key",
"example": "enc",
"nullable": false,
"type": "string"
}
},
"type": "object"
},
"OAuth2Scope": {
"properties": {
"_links": {
"$ref": "#/components/schemas/LinksSelf"
},
"consent": {
"$ref": "#/components/schemas/OAuth2ScopeConsentType"
},
"default": {
"default": false,
"description": "Indicates if this Scope is a default scope",
"type": "boolean"
},
"description": {
"description": "Description of the Scope",
"type": "string"
},
"displayName": {
"description": "Name of the end user displayed in a consent dialog",
"type": "string"
},
"id": {
"description": "Scope object ID",
"readOnly": true,
"type": "string"
},
"metadataPublish": {
"$ref": "#/components/schemas/OAuth2ScopeMetadataPublish"
},
"name": {
"description": "Scope name",
"type": "string"
},
"optional": {
"default": false,
"description": "Indicates whether the Scope is optional. When set to `true`, the user can skip consent for the scope.",
"type": "boolean"
},
"system": {
"default": false,
"description": "Indicates if Okta created the Scope",
"type": "boolean"
}
},
"required": [
"name"
],
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OAuth2ScopeConsentGrant": {
"description": "Grant object that represents an app consent scope grant",
"properties": {
"_embedded": {
"description": "Embedded resources related to the Grant",
"properties": {
"scope": {
"properties": {
"id": {
"description": "The name of the Okta scope for which consent is granted",
"example": "okta.users.read",
"type": "string"
}
},
"type": "object"
}
},
"readOnly": true,
"type": "object"
},
"_links": {
"allOf": [
{
"$ref": "#/components/schemas/LinksSelf"
},
{
"properties": {
"app": {
"allOf": [
{
"$ref": "#/components/schemas/AppResourceHrefObject"
}
],
"description": "Link to the app resource"
},
"authorizationServer": {
"allOf": [
{
"$ref": "#/components/schemas/AuthorizationServerResourceHrefObject"
}
],
"description": "Link to the authorization server resource"
},
"client": {
"allOf": [
{
"$ref": "#/components/schemas/AppResourceHrefObject"
}
],
"description": "Link to the client resource"
},
"scope": {
"allOf": [
{
"$ref": "#/components/schemas/ScopeResourceHrefObject"
}
],
"description": "Link to the scope resource"
},
"user": {
"allOf": [
{
"$ref": "#/components/schemas/UserResourceHrefObject"
}
],
"description": "Link to the user resource"
}
},
"type": "object"
},
{
"readOnly": true
}
]
},
"clientId": {
"description": "Client ID of the app integration",
"example": "oag3ih1zrm1cBFOiq0h6",
"readOnly": true,
"type": "string"
},
"created": {
"$ref": "#/components/schemas/createdProperty"
},
"createdBy": {
"$ref": "#/components/schemas/OAuth2Actor"
},
"id": {
"description": "ID of the Grant object",
"example": "oag3ih1zrm1cBFOiq0h6",
"readOnly": true,
"type": "string"
},
"issuer": {
"description": "The issuer of your org authorization server. This is typically your Okta domain.",
"example": "https://my_test_okta_org.oktapreview.com",
"type": "string"
},
"lastUpdated": {
"$ref": "#/components/schemas/lastUpdatedProperty"
},
"scopeId": {
"description": "The name of the [Okta scope](https://developer.okta.com/docs/api/oauth2/#oauth-20-scopes) for which consent is granted",
"example": "okta.users.read",
"type": "string"
},
"source": {
"$ref": "#/components/schemas/OAuth2ScopeConsentGrantSource"
},
"status": {
"$ref": "#/components/schemas/GrantOrTokenStatus"
},
"userId": {
"description": "User ID that granted consent (if `source` is `END_USER`)",
"example": "00u5t60iloOHN9pBi0h7",
"readOnly": true,
"type": "string"
}
},
"required": [
"issuer",
"scopeId"
],
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OAuth2ScopeConsentGrantSource": {
"description": "User type source that granted consent",
"enum": [
"ADMIN",
"END_USER"
],
"example": "ADMIN",
"readOnly": true,
"type": "string"
},
"OAuth2ScopeConsentType": {
"default": "IMPLICIT",
"description": "Indicates whether a consent dialog is needed for the Scope",
"enum": [
"FLEXIBLE",
"IMPLICIT",
"REQUIRED"
],
"type": "string"
},
"OAuth2ScopeMetadataPublish": {
"default": "NO_CLIENTS",
"description": "Indicates whether the Scope is included in the metadata",
"enum": [
"ALL_CLIENTS",
"NO_CLIENTS"
],
"type": "string"
},
"OAuth2ScopesMediationPolicyRuleCondition": {
"description": "Array of scopes that the condition includes",
"properties": {
"include": {
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
},
"OAuth2Settings": {
"description": "OAuth 2.0 configuration used for authType `OAUTH2`",
"properties": {
"authorizeEndpoint": {
"description": "The URL to the authorization server's authorization endpoint",
"format": "uri",
"type": "string"
},
"clientId": {
"description": "The OAuth 2.0 client identifier",
"type": "string"
},
"clientSecret": {
"description": "The OAuth 2.0 client secret",
"type": "string"
},
"publicKey": {
"additionalProperties": true,
"description": "The public key in JWK format. Returned when the OAuth authentication method is `PRIVATE_KEY_JWT`.",
"properties": {
"e": {
"description": "RSA public exponent",
"type": "string"
},
"kid": {
"description": "Key ID",
"type": "string"
},
"kty": {
"description": "Key type (e.g., `RSA`, `EC`)",
"type": "string"
},
"n": {
"description": "RSA modulus",
"type": "string"
}
},
"readOnly": true,
"type": "object"
},
"scopes": {
"description": "List of OAuth 2.0 scopes",
"items": {
"type": "string"
},
"type": "array"
},
"tokenEndpoint": {
"description": "The URL to the authorization server's token endpoint",
"format": "uri",
"type": "string"
}
},
"required": [
"authorizeEndpoint",
"tokenEndpoint",
"clientId",
"clientSecret"
],
"type": "object"
},
"OAuth2Token": {
"properties": {
"_embedded": {
"additionalProperties": {
"properties": {},
"type": "object"
},
"description": "Embedded resources related to the object if the `expand` query parameter is specified",
"readOnly": true,
"type": "object"
},
"_links": {
"$ref": "#/components/schemas/LinksSelf"
},
"clientId": {
"description": "Client ID",
"example": "0oabskvc6442nkvQO0h7",
"readOnly": true,
"type": "string"
},
"created": {
"$ref": "#/components/schemas/createdProperty"
},
"expiresAt": {
"description": "Expiration time of the OAuth 2.0 Token",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"id": {
"description": "ID of the Token object",
"readOnly": true,
"type": "string"
},
"issuer": {
"description": "The complete URL of the authorization server that issued the Token",
"type": "string"
},
"lastUpdated": {
"$ref": "#/components/schemas/lastUpdatedProperty"
},
"scopes": {
"description": "Name of scopes attached to the Token",
"items": {
"type": "string"
},
"type": "array"
},
"status": {
"$ref": "#/components/schemas/GrantOrTokenStatus"
},
"userId": {
"type": "string"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OAuthApplicationCredentials": {
"allOf": [
{
"$ref": "#/components/schemas/ApplicationCredentials"
},
{
"properties": {
"oauthClient": {
"$ref": "#/components/schemas/ApplicationCredentialsOAuthClient"
}
},
"type": "object"
}
]
},
"OAuthAuthorizationEndpoint": {
"description": "Endpoint for an [OAuth 2.0 Authorization Server (AS)](https://tools.ietf.org/html/rfc6749#page-18)",
"properties": {
"binding": {
"$ref": "#/components/schemas/ProtocolEndpointBinding"
},
"url": {
"description": "URL of the IdP Authorization Server (AS) authorization endpoint",
"example": "https://idp.example.com/authorize",
"type": "string"
}
},
"type": "object"
},
"OAuthClientSecretLinks": {
"description": "Specifies link relations (see [Web Linking](https://www.rfc-editor.org/rfc/rfc8288)) available for the current status of an app using the [JSON Hypertext Application Language](https://datatracker.ietf.org/doc/html/draft-kelly-json-hal-06) specification. This object is used for dynamic discovery of related resources and lifecycle operations.",
"properties": {
"activate": {
"$ref": "#/components/schemas/HrefObjectActivateLink"
},
"deactivate": {
"$ref": "#/components/schemas/HrefObjectDeactivateLink"
},
"delete": {
"$ref": "#/components/schemas/HrefObjectDeleteLink"
}
},
"readOnly": true
},
"OAuthCredentials": {
"description": "Client authentication credentials for an [OAuth 2.0 Authorization Server](https://tools.ietf.org/html/rfc6749#section-2.3)",
"properties": {
"client": {
"$ref": "#/components/schemas/OAuthCredentialsClient"
},
"signing": {
"$ref": "#/components/schemas/AppleClientSigning"
}
},
"type": "object"
},
"OAuthCredentialsClient": {
"description": "OAuth 2.0 and OpenID Connect Client object\n> **Note:** You must complete client registration with the IdP Authorization Server for your Okta IdP instance to obtain client credentials.",
"properties": {
"client_id": {
"description": "The [Unique identifier](https://tools.ietf.org/html/rfc6749#section-2.2) issued by the AS for the Okta IdP instance",
"example": "your-client-id",
"maxLength": 1024,
"type": "string"
},
"client_secret": {
"description": "The [Client secret](https://tools.ietf.org/html/rfc6749#section-2.3.1) issued by the AS for the Okta IdP instance",
"example": "your-client-secret",
"maxLength": 1024,
"type": "string"
},
"pkce_required": {
"description": "Require Proof Key for Code Exchange (PKCE) for additional verification",
"type": "boolean"
},
"token_endpoint_auth_method": {
"description": "Client authentication methods supported by the token endpoint",
"enum": [
"private_key_jwt"
],
"type": "string"
}
},
"type": "object"
},
"OAuthEndpointAuthenticationMethod": {
"default": "client_secret_basic",
"description": "Requested authentication method for the token endpoint",
"enum": [
"client_secret_basic",
"client_secret_jwt",
"client_secret_post",
"none",
"private_key_jwt"
],
"type": "string"
},
"OAuthEndpoints": {
"description": "The `OAUTH2` and `OIDC` protocols support the `authorization` and `token` endpoints. Also, the `OIDC` protocol supports the `userInfo` and `jwks` endpoints.\n\nThe IdP Authorization Server (AS) endpoints are currently defined as part of the [IdP provider]((https://developer.okta.com/docs/api/openapi/okta-management/management/tag/IdentityProvider/#tag/IdentityProvider/operation/createIdentityProvider!path=type&t=request)) and are read-only.",
"properties": {
"authorization": {
"$ref": "#/components/schemas/OAuthAuthorizationEndpoint"
},
"jwks": {
"$ref": "#/components/schemas/OidcJwksEndpoint"
},
"slo": {
"$ref": "#/components/schemas/OidcSloEndpoint"
},
"token": {
"$ref": "#/components/schemas/OAuthTokenEndpoint"
},
"userInfo": {
"$ref": "#/components/schemas/OidcUserInfoEndpoint"
}
},
"type": "object"
},
"OAuthMetadata": {
"properties": {
"authorization_endpoint": {
"description": "URL of the authorization server's authorization endpoint.",
"type": "string"
},
"backchannel_authentication_request_signing_alg_values_supported": {
"description": "
Either `reason_admin` or `reason_user` is required.",
"type": "object"
}
]
},
"reason_user": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized message intended for the end user.
Either `reason_admin` or `reason_user` is required.",
"type": "object"
}
]
},
"subject": {
"$ref": "#/components/schemas/SecurityEventSubject"
}
},
"required": [
"event_timestamp",
"subject",
"current_level",
"previous_level"
],
"type": "object"
},
"OktaIpChangeEvent": {
"description": "IP changed for the subject's session",
"properties": {
"current_ip_address": {
"description": "Current IP address of the subject",
"example": "123.4.5.6",
"type": "string"
},
"event_timestamp": {
"description": "The time of the event (UNIX timestamp)",
"example": 1702448550,
"format": "int64",
"type": "integer"
},
"initiating_entity": {
"description": "The entity that initiated the event",
"enum": [
"admin",
"user",
"policy",
"system"
],
"type": "string"
},
"previous_ip_address": {
"description": "Previous IP address of the subject",
"example": "123.45.67.8",
"type": "string"
},
"reason_admin": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized administrative message intended for logging and auditing.
Either `reason_admin` or `reason_user` is required.",
"type": "object"
}
]
},
"reason_user": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized message intended for the end user.
Either `reason_admin` or `reason_user` is required.",
"type": "object"
}
]
},
"subject": {
"$ref": "#/components/schemas/SecurityEventSubject"
}
},
"required": [
"event_timestamp",
"subject",
"current_ip_address",
"previous_ip_address"
],
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OktaManagedUserAccountForUpdate": {
"description": "Request body for updating an Okta managed user account",
"properties": {
"description": {
"description": "The description of the Okta managed user account",
"example": "Updated description for AD integrations admin account",
"format": "regex",
"maxLength": 255,
"minLength": 0,
"type": "string"
},
"name": {
"description": "The user-defined name for the Okta managed user account",
"example": "AD Integrations Admin - Updated",
"format": "regex",
"maxLength": 50,
"minLength": 1,
"pattern": "^[\\w\\-_. ]+$",
"type": "string"
},
"ownerGroupIds": {
"description": "A list of IDs of the Okta groups who own the Okta managed user account",
"example": [
"00g57qp78yZT2XBA40g7"
],
"items": {
"type": "string"
},
"maxItems": 10,
"minItems": 0,
"type": "array"
},
"ownerUserIds": {
"description": "A list of IDs of the Okta users who own the Okta managed user account",
"example": [
"00u11s48P9zGW8yqm0g5"
],
"items": {
"type": "string"
},
"maxItems": 10,
"minItems": 0,
"type": "array"
}
},
"type": "object"
},
"OktaManagedUserAccountRequest": {
"description": "Request body for creating an Okta managed user account",
"properties": {
"description": {
"description": "The description of the Okta managed user account",
"example": "Shared admin account for managing AD integrations",
"format": "regex",
"maxLength": 255,
"minLength": 0,
"type": "string"
},
"name": {
"description": "The user-defined name for the Okta managed user account",
"example": "AD Integrations Admin",
"format": "regex",
"maxLength": 50,
"minLength": 1,
"pattern": "^[\\w\\-_. ]+$",
"type": "string"
},
"oktaUserId": {
"description": "The ID of the Okta user to manage as a service account. \nThis must be an existing user in your Okta org.",
"example": "00u11s48P9zGW8yqm0g5",
"maxLength": 20,
"minLength": 20,
"pattern": "^[a-zA-Z0-9]+$",
"type": "string"
},
"ownerGroupIds": {
"description": "A list of IDs of the Okta groups who own the Okta managed user account",
"example": [
"00g57qp78yZT2XBA40g7"
],
"items": {
"maxLength": 20,
"minLength": 20,
"type": "string"
},
"maxItems": 10,
"minItems": 0,
"type": "array"
},
"ownerUserIds": {
"description": "A list of IDs of the Okta users who own the Okta managed user account",
"example": [
"00u11s48P9zGW8yqm0g5"
],
"items": {
"maxLength": 20,
"minLength": 20,
"type": "string"
},
"maxItems": 10,
"minItems": 0,
"type": "array"
}
},
"required": [
"name",
"oktaUserId"
],
"type": "object"
},
"OktaManagedUserAccountResponse": {
"description": "An Okta managed user account representing a Universal Directory user managed as a service account",
"properties": {
"created": {
"description": "Timestamp when the Okta managed user account was created",
"example": "2023-04-04T15:56:05.000Z",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"description": {
"description": "The description of the Okta managed user account",
"example": "Shared admin account for managing AD integrations",
"format": "regex",
"maxLength": 255,
"minLength": 0,
"type": "string"
},
"email": {
"description": "The email address associated with the Okta user. This parameter is read-only, and it is derived from the Okta user profile.",
"example": "foo@bar.com",
"readOnly": true,
"type": "string"
},
"id": {
"description": "The UUID of the Okta managed user account",
"example": "d1b65a78-21ed-429b-8ea3-eec96f2748d6",
"format": "regex",
"pattern": "(?i)^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$",
"readOnly": true,
"type": "string"
},
"lastUpdated": {
"description": "Timestamp when the Okta managed user account was last updated",
"example": "2023-05-05T18:15:44.000Z",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"name": {
"description": "The user-defined name for the Okta managed user account",
"example": "AD Integrations Admin",
"format": "regex",
"maxLength": 50,
"minLength": 1,
"pattern": "^[\\w\\-_. ]+$",
"type": "string"
},
"oktaUserId": {
"description": "The ID of the Okta user being managed as a service account",
"example": "00u11s48P9zGW8yqm0g5",
"maxLength": 20,
"minLength": 20,
"type": "string"
},
"ownerGroupIds": {
"description": "A list of IDs of the Okta groups who own the Okta managed user account",
"example": [
"00g57qp78yZT2XBA40g7"
],
"items": {
"type": "string"
},
"maxItems": 10,
"minItems": 0,
"type": "array"
},
"ownerUserIds": {
"description": "A list of IDs of the Okta users who own the Okta managed user account",
"example": [
"00u11s48P9zGW8yqm0g5"
],
"items": {
"type": "string"
},
"maxItems": 10,
"minItems": 0,
"type": "array"
},
"status": {
"$ref": "#/components/schemas/ServiceAccountStatus"
},
"statusDetail": {
"$ref": "#/components/schemas/ServiceAccountStatusDetail"
},
"username": {
"description": "The username associated with the Okta user. This parameter is read-only, and it is derived from the Okta user profile.",
"example": "shr-ad-admin-01@example.com",
"readOnly": true,
"type": "string"
}
},
"required": [
"id",
"name",
"oktaUserId",
"username",
"email"
],
"type": "object"
},
"OktaPersonalAdminFeatureSettings": {
"description": "Defines a list of Okta Personal settings that can be enabled or disabled for the org",
"properties": {
"enableEnduserEntryPoints": {
"description": "Allow entry points for an Okta Personal account in a Workforce org",
"type": "boolean"
},
"enableExportApps": {
"description": "Allow users to migrate apps from a Workforce account to an Okta Personal account",
"type": "boolean"
}
},
"type": "object"
},
"OktaSignOnPolicy": {
"allOf": [
{
"$ref": "#/components/schemas/Policy"
},
{
"properties": {
"conditions": {
"$ref": "#/components/schemas/OktaSignOnPolicyConditions"
}
},
"type": "object"
}
]
},
"OktaSignOnPolicyConditions": {
"allOf": [
{
"type": "object"
},
{
"description": "Specifies the conditions that must be met during policy evaluation to apply the policy",
"properties": {
"people": {
"description": "Identifies users and groups that are used together",
"properties": {
"groups": {
"description": "Specifies a set of groups whose users are to be included or excluded",
"properties": {
"include": {
"description": "Groups to be included",
"items": {
"type": "string"
},
"type": "array"
}
},
"type": "object"
}
},
"type": "object"
}
}
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OktaSignOnPolicyFactorPromptMode": {
"description": "Indicates if the user is challenged for a second factor (MFA) based on the device used, a factor session lifetime expiration, or on every sign-in attempt.\n\nIf the [Behavior](https://help.okta.com/okta_help.htm?type=oie&id=behavior-detection-type) of the global session policy includes the **New Device** behavior type, then `requireFactor` must be `false` or `factorPromptMode` must be `ALWAYS`.\n\n> **Note:** Required only if `requireFactor` is set to `true`.\n",
"enum": [
"ALWAYS",
"DEVICE",
"SESSION"
],
"type": "string"
},
"OktaSignOnPolicyRule": {
"allOf": [
{
"$ref": "#/components/schemas/PolicyRule"
},
{
"properties": {
"actions": {
"$ref": "#/components/schemas/OktaSignOnPolicyRuleActions"
},
"conditions": {
"$ref": "#/components/schemas/OktaSignOnPolicyRuleConditions"
}
},
"type": "object"
}
]
},
"OktaSignOnPolicyRuleActions": {
"allOf": [
{
"$ref": "#/components/schemas/PolicyRuleActions"
},
{
"type": "object"
},
{
"description": "Specifies how users are allowed to sign in to Okta",
"properties": {
"signon": {
"$ref": "#/components/schemas/OktaSignOnPolicyRuleSignonActions"
}
}
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OktaSignOnPolicyRuleConditions": {
"allOf": [
{
"type": "object"
},
{
"description": "Specifies conditions that must be met during policy evaluation to apply the rule. All policy conditions and conditions for at least one rule must be met to apply the settings specified in the policy and the associated rule.",
"properties": {
"authContext": {
"$ref": "#/components/schemas/PolicyRuleAuthContextCondition"
},
"identityProvider": {
"$ref": "#/components/schemas/IdentityProviderPolicyRuleCondition"
},
"network": {
"$ref": "#/components/schemas/PolicyNetworkCondition"
},
"people": {
"$ref": "#/components/schemas/PolicyPeopleCondition"
}
}
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
},
"OktaSignOnPolicyRuleSignonActions": {
"description": "Specifies settings for the policy rule",
"properties": {
"access": {
"description": "Indicates if a user is allowed to sign in",
"enum": [
"ALLOW",
"DENY"
],
"type": "string"
},
"factorLifetime": {
"description": "Interval of time that must elapse before the user is challenged for MFA, if the factor prompt mode is set to `SESSION`\n\n> **Note:** Required only if `requireFactor` is `true`.\n",
"type": "integer"
},
"factorPromptMode": {
"$ref": "#/components/schemas/OktaSignOnPolicyFactorPromptMode"
},
"primaryFactor": {
"$ref": "#/components/schemas/OktaSignOnPolicyRuleSignonPrimaryFactor"
},
"rememberDeviceByDefault": {
"default": false,
"description": "Indicates if Okta should automatically remember the device",
"type": "boolean"
},
"requireFactor": {
"default": false,
"description": "Indicates if multifactor authentication is required",
"type": "boolean"
},
"session": {
"$ref": "#/components/schemas/OktaSignOnPolicyRuleSignonSessionActions"
}
},
"type": "object"
},
"OktaSignOnPolicyRuleSignonPrimaryFactor": {
"description": "
Either `reason_admin` or `reason_user` is required.",
"type": "object"
}
]
},
"reason_user": {
"allOf": [
{
"$ref": "#/components/schemas/SecurityEventReason"
},
{
"description": "A localized message intended for the end user.
Either `reason_admin` or `reason_user` is required.",
"type": "object"
}
]
},
"subject": {
"$ref": "#/components/schemas/SecurityEventSubject"
}
},
"required": [
"event_timestamp",
"subject",
"current_level",
"previous_level"
],
"type": "object"
},
"OktaUserServiceAccountCredentials": {
"description": "Credentials for an Okta user",
"properties": {
"username": {
"description": "The username associated with the service account",
"example": "testuser@example.com",
"maxLength": 100,
"minLength": 1,
"readOnly": true,
"type": "string"
}
},
"readOnly": true,
"type": "object"
},
"OktaVerifyPayload": {
"description": "Payload data for the OktaVerify provider",
"properties": {
"clientVersion": {
"description": "The version of the Okta Verify client",
"example": "7.0",
"type": "string"
}
},
"type": "object"
},
"OpenIdConnectApplication": {
"allOf": [
{
"$ref": "#/components/schemas/Application"
},
{
"properties": {
"credentials": {
"$ref": "#/components/schemas/OAuthApplicationCredentials"
},
"name": {
"description": "`oidc_client` is the key name for an OAuth 2.0 client app instance",
"enum": [
"oidc_client"
],
"type": "string"
},
"settings": {
"$ref": "#/components/schemas/OpenIdConnectApplicationSettings"
}
},
"required": [
"name",
"settings",
"credentials"
],
"type": "object"
}
],
"x-okta-defined-as": {
"name": "oidc_client"
}
},
"OpenIdConnectApplicationConsentMethod": {
"default": "TRUSTED",
"description": "Indicates whether user consent is required or implicit.\nA consent dialog appears for the end user depending on the values of three elements:\n\n* [prompt](/openapi/okta-oauth/oauth/orgas/authorize#orgas/authorize/t=request&in=query&path=prompt): A query parameter that is used in requests to `/authorize`\n* `consent_method` (this property)\n* [consent](/openapi/okta-management/management/authorizationserverscopes/createoauth2scope#authorizationserverscopes/createoauth2scope/t=request&path=consent): A [Scope](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/AuthorizationServerScopes/) property that allows you to enable or disable user consent for an individual scope\n\n| `prompt` | `consent_method` | `consent` | Result\n| ---------- | ----------- | ---------- | ----------- |\n| CONSENT | TRUSTED or REQUIRED | REQUIRED | Prompted |\n| CONSENT | TRUSTED or REQUIRED | FLEXIBLE | Prompted |\n| CONSENT | TRUSTED | IMPLICIT | Not prompted |\n| NONE | TRUSTED | FLEXIBLE, IMPLICIT, or REQUIRED | Not prompted |\n| NONE | REQUIRED | FLEXIBLE or REQUIRED | Prompted |\n| NONE | REQUIRED | IMPLICIT | Not prompted |\n\n> **Notes:**\n> * If you request a scope that requires consent while using the `client_credentials` flow, an error is returned because the flow doesn't support user consent.\n> * If the `prompt` value is set to `NONE`, but the `consent_method` and the consent values are set to `REQUIRED`, then an error occurs.\n> * When a scope is requested during a Client Credentials grant flow and `consent` is set to `FLEXIBLE`, the scope is granted in the access token with no consent prompt. This occurs because there is no user involved in a two-legged OAuth 2.0 [Client Credentials](https://developer.okta.com/docs/guides/implement-grant-type/clientcreds/main/) grant flow.\n",
"enum": [
"REQUIRED",
"TRUSTED"
],
"type": "string",
"x-enumDescriptions": {
"REQUIRED": "The client requires consent (for example, a third-party app). The default consent method for app instances created with a [Create a Client Application](/openapi/okta-oauth/oauth/client/createclient) request",
"TRUSTED": "The client is fully trusted (for example, a first-party app). The default consent method for app instances created with a [Create an Application](/openapi/okta-management/management/tags/application/other/createapplication) request"
}
},
"OpenIdConnectApplicationIdpInitiatedLogin": {
"description": "The type of IdP-initiated sign-in flow that the client supports",
"properties": {
"default_scope": {
"description": "The scopes to use for the request when `mode` is `OKTA`",
"items": {
"type": "string"
},
"type": "array"
},
"mode": {
"description": "The mode to use for the IdP-initiated sign-in flow. For `OKTA` or `SPEC` modes, the client must have an `initiate_login_uri` registered.\n> **Note:** For web and SPA apps, if the mode is `SPEC` or `OKTA`, you must set `grant_types` to `authorization_code`, `implicit`, or `interaction_code`.\n",
"enum": [
"DISABLED",
"SPEC",
"OKTA"
],
"type": "string",
"x-enumDescriptions": {
"DISABLED": "The client doesn't support the IdP-initiated sign-in flow.",
"OKTA": "Tokens are directly sent to the Relying Party. This corresponds to the **Okta Simplified** option in the Admin Console.",
"SPEC": "The client is redirected to the Relying Party's `initiate_login_uri`."
}
}
},
"required": [
"mode"
],
"type": "object"
},
"OpenIdConnectApplicationIssuerMode": {
"description": "Indicates whether the Okta authorization server uses the original Okta org domain URL or a custom domain URL as the issuer of the ID token for this client",
"enum": [
"CUSTOM_URL",
"DYNAMIC",
"ORG_URL"
],
"type": "string",
"x-enumDescriptions": {
"CUSTOM_URL": "The issuer is returned in the appropriate OIDC token response. This is the default `issuer_mode` when you configured a custom domain for your org.",
"DYNAMIC": "A request for the ID token made from the custom domain has the custom URL as the issuer. A request for the ID token made from an Okta org has the Org URL as the issuer. You can only set `issuer_mode` as DYNAMIC if the Dynamic Issuer Mode feature is enabled. Contact Okta Support to enable this feature.",
"ORG_URL": "The issuer is returned based on the URL of your Okta organization. This is useful when you are using Okta\u2019s default domain and do not have a custom domain configured."
}
},
"OpenIdConnectApplicationNetwork": {
"description": "The network restrictions of the client",
"properties": {
"connection": {
"description": "The connection type of the network. Can be `ANYWHERE` or `ZONE`.\n",
"enum": [
"ANYWHERE",
"ZONE"
],
"type": "string",
"x-enumDescriptions": {
"ANYWHERE": "There is no restrictions on network zones.",
"ZONE": "There are network restrictions on network zones. Zones are specified in the `include` or `exclude` array."
}
},
"exclude": {
"description": "If `ZONE` is specified as a connection, then specify the excluded IP network zones here. Value can be \"ALL_IP_ZONES\" or an array of zone IDs.",
"items": {
"type": "string"
},
"type": "array"
},
"include": {
"description": "If `ZONE` is specified as a connection, then specify the included IP network zones here. Value can be \"ALL_IP_ZONES\" or an array of zone IDs.",
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"connection"
],
"type": "object",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"OpenIdConnectApplicationSettings": {
"allOf": [
{
"$ref": "#/components/schemas/ApplicationSettings"
},
{
"properties": {
"oauthClient": {
"$ref": "#/components/schemas/OpenIdConnectApplicationSettingsClient"
}
},
"type": "object"
}
]
},
"OpenIdConnectApplicationSettingsClient": {
"properties": {
"application_type": {
"$ref": "#/components/schemas/OpenIdConnectApplicationType"
},
"backchannel_authentication_request_signing_alg": {
"description": "The signing algorithm for Client-Initiated Backchannel Authentication (CIBA) signed requests using JWT. If this value isn't set and a JWT-signed request is sent, the request fails.\n> **Note:** This property appears for clients with `urn:openid:params:grant-type:ciba` defined as one of the `grant_types`.\n",
"enum": [
"HS256",
"HS384",
"HS512",
"RS256",
"RS384",
"RS512",
"ES256",
"ES384",
"ES512"
],
"type": "string"
},
"backchannel_custom_authenticator_id": {
"description": "The ID of the custom authenticator that authenticates the user\n> **Note:** This property appears for clients with `urn:openid:params:grant-type:ciba` defined as one of the `grant_types`.\n",
"maxLength": 20,
"minLength": 20,
"type": "string"
},
"backchannel_token_delivery_mode": {
"description": "The delivery mode for Client-Initiated Backchannel Authentication (CIBA). Currently, only `poll` is supported.\n> **Note:** This property appears for clients with `urn:openid:params:grant-type:ciba` defined as one of the `grant_types`.\n",
"enum": [
"poll",
"ping",
"push"
],
"type": "string"
},
"client_uri": {
"description": "URL string of a web page providing information about the client",
"maxLength": 1024,
"type": "string"
},
"consent_method": {
"$ref": "#/components/schemas/OpenIdConnectApplicationConsentMethod"
},
"dpop_bound_access_tokens": {
"default": false,
"description": "Indicates that the client application uses Demonstrating Proof-of-Possession (DPoP) for token requests. If `true`, the authorization server rejects token requests from this client that don't contain the DPoP header.\n> **Note:** If `dpop_bound_access_tokens` is true, then `client_credentials` and `implicit` aren't allowed in `grant_types`.\n",
"type": "boolean",
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "TOMBSTONE"
}
},
"frontchannel_logout_session_required": {
"description": "
**Note:** Use the `/integrations/api/v1/internal/authModes` endpoint to create the auth mode object. |",
"example": "header",
"type": "string"
},
"baseUri": {
"description": "The base URL that Okta uses to send outbound calls to your SCIM server.\nOnly the HTTPS protocol is supported.\nYou can use the app-level variables defined in the `config` array for the base URL.\nFor example, if you have a `subdomain` variable defined in the `config` array and the URL to retrieve SCIM users for your integration is `https://${subdomain}.example.com/scim/v2/Users`,\nthen specify the following base URL: `'https://' + app.subdomain + '.example.com/scim/v2'`.",
"format": "uri",
"type": "string"
},
"entitlementTypes": {
"$ref": "#/components/schemas/entitlementTypes"
},
"scimServerConfig": {
"description": "SCIM server schema configuration",
"properties": {
"changePassword": {
"description": "Password change options",
"properties": {
"supported": {
"default": false,
"description": "Specifies if password change is supported",
"type": "boolean"
}
},
"type": "object"
},
"patch": {
"description": "PATCH operation options",
"properties": {
"supported": {
"default": false,
"description": "Specifies if the PATCH operation is supported",
"type": "boolean"
}
},
"type": "object"
}
},
"type": "object"
},
"setupInstructionsUri": {
"description": "The URL to your customer-facing instructions for configuring your SCIM integration. See [Customer configuration document guidelines](https://developer.okta.com/docs/guides/submit-app-prereq/main/#customer-configuration-document-guidelines).",
"format": "uri",
"type": "string"
}
},
"required": [
"baseUri",
"authMode",
"setupInstructionsUri",
"scimServerConfig"
],
"type": "object"
},
"Scope": {
"type": "string"
},
"ScopeResourceHrefObject": {
"properties": {
"href": {
"description": "Link URI",
"example": "https://{yourOktaDomain}/api/v1/authorizationServers/ausain6z9zIedDCxB0h7/scopes/scpCmCCV1DpxVkCaye2X",
"type": "string"
},
"title": {
"description": "Link name",
"example": "My phone",
"type": "string"
}
},
"type": "object"
},
"ScreenLockComplexity": {
"description": "Indicates whether a device has a screen lock set, and the type or complexity of the screen lock\n\n**Note:** This option requires a `screenLockType.include` value.\n",
"enum": [
"HIGH",
"LOW",
"MEDIUM"
],
"type": "string",
"x-enumDescriptions": {
"HIGH": "A complex 8-digit PIN, or 6-character alphabetic or alphanumeric screen lock is set",
"LOW": "A pattern or PIN is set",
"MEDIUM": "A complex PIN, or alphabetic or alphanumeric screen lock with at least 4 digits is set"
}
},
"ScreenLockType": {
"enum": [
"BIOMETRIC",
"NONE",
"PASSCODE"
],
"type": "string"
},
"SecurePasswordStoreApplication": {
"allOf": [
{
"$ref": "#/components/schemas/Application"
},
{
"properties": {
"credentials": {
"$ref": "#/components/schemas/SchemeApplicationCredentials"
},
"name": {
"description": "`template_sps` is the key name for a SWA app instance that uses HTTP POST and doesn't require a browser plugin",
"enum": [
"template_sps"
],
"type": "string"
},
"settings": {
"$ref": "#/components/schemas/SecurePasswordStoreApplicationSettings"
}
},
"required": [
"name",
"settings"
],
"type": "object"
}
],
"x-okta-defined-as": {
"name": "template_sps"
}
},
"SecurePasswordStoreApplicationSettings": {
"allOf": [
{
"$ref": "#/components/schemas/ApplicationSettings"
},
{
"properties": {
"app": {
"$ref": "#/components/schemas/SecurePasswordStoreApplicationSettingsApplication"
}
},
"type": "object"
}
]
},
"SecurePasswordStoreApplicationSettingsApplication": {
"properties": {
"optionalField1": {
"description": "Name of the optional parameter in the sign-in form",
"type": "string"
},
"optionalField1Value": {
"description": "Name of the optional value in the sign-in form",
"type": "string"
},
"optionalField2": {
"description": "Name of the optional parameter in the sign-in form",
"type": "string"
},
"optionalField2Value": {
"description": "Name of the optional value in the sign-in form",
"type": "string"
},
"optionalField3": {
"description": "Name of the optional parameter in the sign-in form",
"type": "string"
},
"optionalField3Value": {
"description": "Name of the optional value in the sign-in form",
"type": "string"
},
"passwordField": {
"description": "CSS selector for the **Password** field in the sign-in form",
"type": "string"
},
"url": {
"description": "The URL of the sign-in page for this app",
"type": "string"
},
"usernameField": {
"description": "CSS selector for the **Username** field in the sign-in form",
"type": "string"
}
},
"required": [
"passwordField",
"url",
"usernameField"
],
"type": "object"
},
"SecurityEvent": {
"properties": {
"event_timestamp": {
"description": "The time of the event (UNIX timestamp)",
"example": 1702448550,
"format": "int64",
"type": "integer"
},
"subject": {
"$ref": "#/components/schemas/SecurityEventSubject"
}
},
"required": [
"event_timestamp",
"subject"
],
"type": "object"
},
"SecurityEventReason": {
"properties": {
"en": {
"description": "The event reason in English",
"example": "Event message example",
"type": "string"
}
},
"required": [
"en"
],
"type": "object"
},
"SecurityEventSubject": {
"description": "The event subjects",
"properties": {
"device": {
"description": "The device involved with the event",
"example": {
"format": "opaque",
"id": "device-identifier-001"
},
"type": "object"
},
"user": {
"description": "The user involved with the event",
"example": {
"email": "john@doe.net",
"format": "email"
},
"type": "object"
}
},
"x-okta-ignore-redocly-rules-for-sdk": true
},
"SecurityEventTokenError": {
"description": "Error object thrown when parsing the security event token",
"properties": {
"description": {
"description": "Describes the error\n> **Note:** SET claim fields with underscores (snake case) are presented in camelcase. For example, `previous_status` appears as `previousStatus`.\n",
"example": "Failed claim validation in security event token. 'events.mediationDeviceComplianceChangeEvent.previousStatus': The field cannot be left blank",
"type": "string"
},
"err": {
"description": "A code that describes the category of the error",
"enum": [
"authentication_failed",
"invalid_audience",
"invalid_issuer",
"invalid_key",
"invalid_request"
],
"example": "invalid_request",
"type": "string"
}
},
"title": "Security event token error",
"type": "object"
},
"SecurityEventTokenJwtBody": {
"description": "JSON web token body payload for a security event token sent by the SSF transmitter. For examples and more information, see [SSF Transmitter SET payload structures](https://developer.okta.com/docs/reference/ssf-transmitter-sets).",
"properties": {
"aud": {
"description": "Audience",
"example": "https://receiverexample.com/",
"type": "string"
},
"events": {
"$ref": "#/components/schemas/SecurityEventTokenJwtEvents"
},
"iat": {
"description": "Token issue time (UNIX timestamp)",
"example": 1702448550,
"format": "int64",
"type": "integer"
},
"iss": {
"description": "Token issuer",
"example": "https://transmitter.okta.com",
"type": "string"
},
"jti": {
"description": "Token ID",
"example": "set-24c63fb56f ... a9fa24",
"type": "string"
}
},
"required": [
"iss",
"aud",
"jti",
"iat",
"events"
],
"title": "Security event token JWT body payload",
"type": "object",
"x-tags": [
"SSFTransmitter"
]
},
"SecurityEventTokenJwtEvents": {
"description": "A non-empty set of events. Expected size is 1 for each SET",
"properties": {
"https://schemas.openid.net/secevent/caep/event-type/credential-change": {
"$ref": "#/components/schemas/CaepCredentialChangeEvent"
},
"https://schemas.openid.net/secevent/caep/event-type/session-revoked": {
"$ref": "#/components/schemas/SsfTransmitterCaepSessionRevokedEvent"
}
},
"type": "object"
},
"SecurityEventTokenJwtHeader": {
"description": "JSON web token header for a security event token sent by the SSF transmitter",
"properties": {
"alg": {
"description": "Algorithm used to sign or encrypt the JWT",
"example": "RS256",
"type": "string"
},
"kid": {
"description": "Key ID used to sign or encrypt the JWT",
"type": "string"
},
"typ": {
"description": "The type of content being signed or encrypted",
"example": "secevent+jwt",
"type": "string"
}
},
"required": [
"kid",
"typ",
"alg"
],
"title": "Security event token JWT header",
"type": "object",
"x-tags": [
"SSFTransmitter"
]
},
"SecurityEventTokenRequestJwtBody": {
"description": "JSON web token body payload for a security event token",
"properties": {
"aud": {
"description": "Audience",
"example": "https://receiverexample.okta.com/",
"type": "string"
},
"events": {
"$ref": "#/components/schemas/SecurityEventTokenRequestJwtEvents"
},
"iat": {
"description": "Token issue time (UNIX timestamp)",
"example": 1702448550,
"format": "int64",
"type": "integer"
},
"iss": {
"description": "Token issuer",
"example": "https://transmitter.example.com",
"type": "string"
},
"jti": {
"description": "Token ID",
"example": "24c63fb56f ... a9fa24",
"type": "string"
}
},
"required": [
"iss",
"aud",
"jti",
"iat",
"events"
],
"title": "Security event token JWT body payload",
"type": "object",
"x-tags": [
"SSFSecurityEventToken"
]
},
"SecurityEventTokenRequestJwtEvents": {
"description": "A non-empty collection of events",
"properties": {
"https://schemas.okta.com/secevent/okta/event-type/device-risk-change": {
"$ref": "#/components/schemas/OktaDeviceRiskChangeEvent"
},
"https://schemas.okta.com/secevent/okta/event-type/ip-change": {
"$ref": "#/components/schemas/OktaIpChangeEvent"
},
"https://schemas.okta.com/secevent/okta/event-type/user-risk-change": {
"$ref": "#/components/schemas/OktaUserRiskChangeEvent"
},
"https://schemas.openid.net/secevent/caep/event-type/device-compliance-change": {
"$ref": "#/components/schemas/CaepDeviceComplianceChangeEvent"
},
"https://schemas.openid.net/secevent/caep/event-type/session-revoked": {
"$ref": "#/components/schemas/CaepSessionRevokedEvent"
},
"https://schemas.openid.net/secevent/risc/event-type/identifier-changed": {
"$ref": "#/components/schemas/RiscIdentifierChangedEvent"
}
},
"type": "object"
},
"SecurityEventTokenRequestJwtHeader": {
"description": "JSON web token header for a security event token",
"properties": {
"alg": {
"description": "Algorithm used to sign or encrypt the JWT",
"example": "RS256",
"type": "string"
},
"kid": {
"description": "Key ID used to sign or encrypt the JWT",
"type": "string"
},
"typ": {
"description": "The type of content being signed or encrypted",
"example": "secevent+jwt",
"type": "string"
}
},
"required": [
"kid",
"typ",
"alg"
],
"title": "Security event token JWT header",
"type": "object",
"x-tags": [
"SSFSecurityEventToken"
]
},
"SecurityEventsProviderRequest": {
"description": "The request schema for creating or updating a security events provider. The `settings` must match one of the schemas.",
"properties": {
"name": {
"description": "The name of the security events provider instance",
"example": "Target SSF Provider",
"maxLength": 100,
"type": "string"
},
"settings": {
"description": "Information about the security events provider for signal ingestion",
"oneOf": [
{
"$ref": "#/components/schemas/SecurityEventsProviderSettingsSSFCompliant"
},
{
"$ref": "#/components/schemas/SecurityEventsProviderSettingsNonSSFCompliant"
}
],
"type": "object"
},
"type": {
"description": "The app type of the security events provider",
"example": "okta",
"maxLength": 255,
"type": "string"
}
},
"required": [
"name",
"settings",
"type"
],
"title": "Security events provider request",
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"SecurityEventsProviderResponse": {
"description": "The security events provider response",
"properties": {
"_links": {
"$ref": "#/components/schemas/LinksSelfAndLifecycle"
},
"id": {
"description": "The unique identifier of this instance",
"example": "sse1qg25RpusjUP6m0g5",
"readOnly": true,
"type": "string"
},
"name": {
"description": "The name of the security events provider instance",
"example": "Target SSF Provider",
"maxLength": 100,
"type": "string"
},
"settings": {
"$ref": "#/components/schemas/SecurityEventsProviderSettingsResponse",
"description": "Information about the security events provider for signal ingestion"
},
"status": {
"description": "Indicates whether the security events provider is active or not",
"enum": [
"ACTIVE",
"INACTIVE"
],
"readOnly": true,
"type": "string"
},
"type": {
"description": "The app type of the security events provider",
"example": "okta",
"maxLength": 255,
"type": "string"
}
},
"title": "Security events provider response",
"type": "object"
},
"SecurityEventsProviderSettingsNonSSFCompliant": {
"description": "Security events provider with issuer and JWKS settings for signal ingestion",
"properties": {
"issuer": {
"description": "Issuer URL",
"example": "example.okta.com",
"maxLength": 700,
"type": "string"
},
"jwks_url": {
"description": "The public URL where the JWKS public key is uploaded",
"example": "https://example.okta.com/oauth2/v1/keys",
"format": "url",
"maxLength": 1000,
"type": "string"
}
},
"required": [
"jwks_url",
"issuer"
],
"title": "Provider with issuer and JWKS settings",
"type": "object"
},
"SecurityEventsProviderSettingsResponse": {
"description": "Security events provider settings",
"properties": {
"issuer": {
"description": "Issuer URL",
"example": "example.okta.com",
"maxLength": 700,
"type": "string"
},
"jwks_url": {
"description": "The public URL where the JWKS public key is uploaded",
"example": "https://example.okta.com/oauth2/v1/keys",
"format": "url",
"maxLength": 1000,
"type": "string"
},
"well_known_url": {
"description": "The well-known URL of the security events provider (the SSF transmitter)",
"example": "https://example.okta.com/.well-known/ssf-configuration",
"format": "url",
"maxLength": 1000,
"nullable": true,
"type": "string"
}
},
"title": "Security events provider settings",
"type": "object"
},
"SecurityEventsProviderSettingsSSFCompliant": {
"description": "Security events provider with well-known URL setting",
"properties": {
"well_known_url": {
"description": "The published well-known URL of the security events provider (the SSF transmitter)",
"example": "https://example.okta.com/.well-known/ssf-configuration",
"format": "url",
"maxLength": 1000,
"type": "string"
}
},
"required": [
"well_known_url"
],
"title": "Provider with well-known URL setting",
"type": "object"
},
"SeedEnum": {
"default": "RANDOM",
"description": "Determines whether the generated password is the user's Okta password or a randomly generated password",
"enum": [
"OKTA",
"RANDOM"
],
"example": "OKTA",
"type": "string"
},
"SelfAssignedStatus": {
"description": "Okta Support access approval status for self-assigned cases",
"enum": [
"APPROVED",
"NOT_REQUIRED",
"REQUESTED"
],
"type": "string",
"x-enumDescriptions": {
"APPROVED": "Okta Support access is approved by the customer for the self-assigned case",
"NOT_REQUIRED": "Approval isn't required because the case wasn't self-created and self-assigned by an Okta Support user",
"REQUESTED": "Customer approval for self-assigned case requested"
}
},
"SelfServicePasswordResetAction": {
"description": "Enables or disables users to reset their own password and defines the authenticators and constraints needed to complete the reset",
"properties": {
"access": {
"$ref": "#/components/schemas/PolicyAccess"
},
"requirement": {
"$ref": "#/components/schemas/SsprRequirement"
},
"settings": {
"$ref": "#/components/schemas/SsprSettings"
},
"type": {
"description": "
Indicates if your integration supports IdP-initiated sign-in flows. If [`sso.oidc.initiateLoginUri`](/openapi/okta-management/management/tag/YourOinIntegrations/#tag/YourOinIntegrations/operation/createSubmission!path=sso/oidc/initiateLoginUri&t=request) is specified, this property is set to `true`. If [`sso.oidc.initiateLoginUri`](/openapi/okta-management/management/tag/YourOinIntegrations/#tag/YourOinIntegrations/operation/createSubmission!path=sso/oidc/initiateLoginUri&t=request) isn't set for the integration submission, this property is set to `false`",
"readOnly": true,
"type": "boolean"
},
"jit": {
"description": "Indicates if your integration supports Just-In-Time (JIT) provisioning",
"type": "boolean"
},
"sp": {
"description": "Read only.
Indicates if your integration supports SP-initiated sign-in flows and is always set to `true` for OIDC SSO",
"readOnly": true,
"type": "boolean"
},
"spInitiateUrl": {
"description": "URL for SP-initiated sign-in flows (required if `sp = true`)",
"example": "https://test.example.com/strawberry/oidc/sp-init",
"format": "uri",
"maxLength": 512,
"type": "string"
}
},
"required": [
"spInitiateUrl"
],
"type": "object"
},
"samlTestConfiguration": {
"description": "SAML test details",
"properties": {
"idp": {
"description": "Indicates if your integration supports IdP-initiated sign-in",
"type": "boolean"
},
"jit": {
"description": "Indicates if your integration supports Just-In-Time (JIT) provisioning",
"type": "boolean"
},
"sp": {
"description": "Indicates if your integration supports SP-initiated sign-in",
"type": "boolean"
},
"spInitiateDescription": {
"description": "Instructions on how to sign in to your app using the SP-initiated flow (required if `sp = true`)",
"example": "Go to the app URL from a browser and enter your username",
"maxLength": 2048,
"type": "string"
},
"spInitiateUrl": {
"description": "URL for SP-initiated sign-in flows (required if `sp = true`)",
"example": "https://test.example.com/strawberry/saml/sp-init",
"format": "uri",
"maxLength": 512,
"type": "string"
}
},
"required": [
"spInitiateUrl"
],
"type": "object"
},
"scimTestConfiguration": {
"description": "SCIM test details",
"properties": {
"crudTestResults": {
"description": "The Runscope URL to your Okta SCIM CRUD test results. See [Test your Okta SCIM integration](https://developer.okta.com/docs/guides/scim-provisioning-integration-test/main/).",
"example": "https://www.runscope.com/radar/radfebnsefbd/msdfsvx2-3456-7r8s-9012-t34567uvw890/history/123ef4gh-i567-89j0-1k2l-cdgj455hw45u",
"format": "uri",
"maxLength": 512,
"type": "string"
},
"entitlementsTestResults": {
"description": "The Runscope URL to your entitlements test results",
"example": "https://www.runscope.com/radar/fgdffghfghfg/m01nopq2-3456-7r8s-9012-t34567uvw890/history/123ef4gh-i567-89j0-1k2l-r434565g5451",
"format": "uri",
"maxLength": 512,
"type": "string"
},
"specTestResults": {
"description": "The Runscope URL to your SCIM server specification test results. See [Test your SCIM API](https://developer.okta.com/docs/guides/build-provisioning-integration/test-scim-api/).",
"example": "https://www.runscope.com/radar/abcdefghijkl/m01nopq2-3456-7r8s-9012-t34567uvw890/history/123ef4gh-i567-89j0-1k2l-3m4n5o678901",
"format": "uri",
"maxLength": 512,
"type": "string"
}
},
"required": [
"specTestResults",
"crudTestResults"
],
"type": "object"
},
"testAccount": {
"description": "An account on a test instance of your app with admin privileges. A test admin account is required by Okta for integration testing. During OIN QA testing, an Okta analyst uses this admin account to configure your app for the various test case flows.",
"properties": {
"instructions": {
"description": "Additional instructions to test the app integration, including instructions for obtaining test accounts",
"example": "Go to your app URL from a browser and enter your credentials",
"maxLength": 2048,
"type": "string"
},
"password": {
"description": "The password for your app admin account",
"example": "sUperP@ssw0rd",
"maxLength": 255,
"type": "string"
},
"url": {
"description": "The sign-in URL to a test instance of your app",
"example": "https://example.com/strawberry/login",
"format": "uri",
"maxLength": 512,
"type": "string"
},
"username": {
"description": "The username for your app admin account",
"example": "test@example.com",
"maxLength": 255,
"type": "string"
}
},
"required": [
"url",
"username",
"password"
],
"type": "object"
}
},
"type": "object"
},
"ThemeResponse": {
"properties": {
"_links": {
"$ref": "#/components/schemas/LinksSelf"
},
"backgroundImage": {
"readOnly": true,
"type": "string"
},
"emailTemplateTouchPointVariant": {
"$ref": "#/components/schemas/EmailTemplateTouchPointVariant"
},
"endUserDashboardTouchPointVariant": {
"$ref": "#/components/schemas/EndUserDashboardTouchPointVariant"
},
"errorPageTouchPointVariant": {
"$ref": "#/components/schemas/ErrorPageTouchPointVariant"
},
"favicon": {
"readOnly": true,
"type": "string"
},
"id": {
"readOnly": true,
"type": "string"
},
"loadingPageTouchPointVariant": {
"$ref": "#/components/schemas/LoadingPageTouchPointVariant"
},
"logo": {
"readOnly": true,
"type": "string"
},
"primaryColorContrastHex": {
"description": "Primary color contrast hex code",
"type": "string"
},
"primaryColorHex": {
"description": "Primary color hex code",
"type": "string"
},
"secondaryColorContrastHex": {
"description": "Secondary color contrast hex code",
"type": "string"
},
"secondaryColorHex": {
"description": "Secondary color hex code",
"type": "string"
},
"signInPageTouchPointVariant": {
"$ref": "#/components/schemas/SignInPageTouchPointVariant"
}
},
"type": "object"
},
"ThirdPartyAdminSetting": {
"description": "The third-party admin setting",
"properties": {
"thirdPartyAdmin": {
"description": "Indicates if the third-party admin functionality is enabled",
"example": false,
"type": "boolean"
}
},
"type": "object"
},
"ThreatInsightConfiguration": {
"properties": {
"_links": {
"$ref": "#/components/schemas/LinksSelf"
},
"action": {
"description": "Specifies how Okta responds to authentication requests from suspicious IP addresses",
"enum": [
"none",
"audit",
"block"
],
"example": "none",
"type": "string",
"x-enumDescriptions": {
"audit": "Indicates that Okta logs suspicious requests to the System Log",
"block": "Indicates that Okta logs suspicious requests to the System Log and blocks the requests",
"none": "Indicates that ThreatInsight is disabled"
}
},
"created": {
"description": "Timestamp when the ThreatInsight Configuration object was created",
"example": "2020-08-05T22:18:30.629Z",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"excludeZones": {
"description": "Accepts a list of [Network Zone](/openapi/okta-management/management/networkzone/) IDs.\nIPs in the excluded network zones aren't logged or blocked.\nThis ensures that traffic from known, trusted IPs isn't accidentally logged or blocked.",
"example": [],
"items": {
"type": "string"
},
"type": "array"
},
"lastUpdated": {
"description": "Timestamp when the ThreatInsight Configuration object was last updated",
"example": "2020-09-08T20:53:20.882Z",
"format": "date-time",
"readOnly": true,
"type": "string"
}
},
"required": [
"action"
],
"type": "object"
},
"TimeDuration": {
"description": "A time duration specified as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).",
"pattern": "^P(?:$)(\\d+Y)?(\\d+M)?(\\d+W)?(\\d+D)?(T(?:\\d)(\\d+H)?(\\d+M)?(\\d+S)?)?$",
"type": "string"
},
"TokenAuthorizationServerPolicyRuleAction": {
"properties": {
"accessTokenLifetimeMinutes": {
"description": "Lifetime of the access token in minutes. The minimum is five minutes. The maximum is one day.",
"type": "integer"
},
"inlineHook": {
"$ref": "#/components/schemas/TokenAuthorizationServerPolicyRuleActionInlineHook"
},
"refreshTokenLifetimeMinutes": {
"description": "Lifetime of the refresh token is the minimum access token lifetime.",
"type": "integer"
},
"refreshTokenWindowMinutes": {
"description": "Timeframe when the refresh token is valid. The minimum is 10 minutes. The maximum is five years (2,628,000 minutes).",
"type": "integer"
}
},
"type": "object"
},
"TokenAuthorizationServerPolicyRuleActionInlineHook": {
"properties": {
"id": {
"readOnly": false,
"type": "string"
}
},
"type": "object"
},
"TokenDeliveryMode": {
"enum": [
"poll"
],
"type": "string"
},
"TokenHookResponse": {
"description": "For the token inline hook, the `commands` and `error` objects that you can return in the JSON payload of your response are defined in the following sections.\n> **Note:** The size of your response payload must be less than 256 KB.",
"properties": {
"commands": {
"description": "You can use the `commands` object to provide commands to Okta. It's where you can tell Okta to add more claims to the token.\nThe `commands` object is an array, allowing you to send multiple commands. In each array element, there needs to be a `type` property and `value` property. The `type` property is where you specify which of the supported commands you want to execute, and `value` is where you supply an operand for that command.\nIn the case of the token hook type, the `value` property is itself a nested object in which you specify a particular operation, a path to act on, and a value.",
"items": {
"properties": {
"type": {
"description": "One of the supported commands:\n `com.okta.identity.patch`: Modify an ID token\n `com.okta.access.patch`: Modify an access token\n> **Note:** The `commands` array should only contain commands that can be applied to the requested tokens. For example, if only an ID token is requested, the `commands` array shouldn't contain commands of the type `com.okta.access.patch`.",
"type": "string"
},
"value": {
"description": "The `value` object is where you specify the operation to perform. It's an array, which allows you to request more than one operation.",
"items": {
"properties": {
"op": {
"description": "The name of one of the supported ops: `add`: Add a claim. `replace`: Modify an existing claim and update the token lifetime. `remove`: Remove an existing claim.\n#### `op: add` notes\n\nAdd a claim
\n\n Add a claim\n\n **Existing JSON**\n\n ```\n {\n \"employeeId\": \"00u12345678\"\n }\n ```\n\n **Operation**\n\n ```\n {\n \"commands\": [\n {\n \"type\": \"com.okta.assertion.patch\",\n \"value\": [\n {\n \"op\": \"add\",\n \"path\": \"/claims/extPatientId\",\n \"value\": \"1234\"\n }\n ]\n },\n {\n \"type\": \"com.okta.assertion.patch\",\n \"value\": [\n {\n \"op\": \"add\",\n \"path\": \"/claims/external_guid\",\n \"value\": \"F0384685-F87D-474B-848D-2058AC5655A7\"\n }\n ]\n }\n ]\n }\n ```\n\n **Updated JSON**\n\n ```\n {\n \"employeeId\": \"00u12345678\",\n \"extPatientId\": 1234,\n \"external_guid\": \"F0384685-F87D-474B-848D-2058AC5655A7\"\n }\n ```\n\n > **Note:** If you use the `add` operation and include an existing claim in your response with a different value, that value is replaced. Use the `replace` operation instead. If you attempt to remove a system-specific claim or use an invalid operation, the entire PATCH fails and errors are logged in the token hooks events. See `op: replace` notes.\nAdd new members to existing JSON objects
\n\n If you have a JSON object in a claim called `employee_profile`, and you want to add the `department_id` member to the claim, the existing JSON is updated by specifying the claim in the path, followed by the name of the object member.\n\n **Existing JSON**\n\n ```\n {\n \"employee_profile\": {\n \"employee_id\": \"1234\",\n \"name\": \"Anna\"\n }\n }\n ```\n\n **Operation**\n\n ```\n {\n \"commands\": [\n {\n \"type\": \"com.okta.identity.patch\",\n \"value\": [\n {\n \"op\": \"add\",\n \"path\": \"/claims/employee_profile/department_id\",\n \"value\": \"4947\"\n }\n ]\n }\n ]\n }\n ```\n\n **Updated JSON**\n\n ```\n {\n \"employee_profile\": {\n \"employee_id\": \"1234\",\n \"name\": \"Anna\",\n \"department_id\": \"4947\"\n }\n }\n ```\n\n > **Note:** If you attempt to add a member within a JSON object that doesn't exist or using an invalid operation, the entire PATCH fails and errors are logged in the token hooks events.\nAdd new elements to existing arrays
\n\n Append an element to an array by specifying the name of the array, followed by the index where you want to insert the element in the path. Alternatively, you can specify the array name followed by a hyphen (-) in the path to append an element at the end of the array. For example, you have an array that contains the user's preferred airports, and you want to add a new airport to the array. The existing target JSON object is updated by specifying the claim in the path, followed by the index of where to insert the claim.\n\n **Existing JSON**\n\n ```\n {\n \"preferred_airports\":[\n \"sjc\",\n \"sfo\",\n \"oak\"\n ]\n }\n ```\n\n **Operation**\n\n ```\n {\n \"commands\": [\n {\n \"type\": \"com.okta.identity.patch\",\n \"value\": [\n {\n \"op\": \"add\",\n \"path\": \"/claims/preferred_airports/3\",\n \"value\": \"lax\"\n }\n ]\n }\n ]\n }\n ```\n\n **Updated JSON**\n\n ```\n {\n \"preferred_airports\":[\n \"sjc\",\n \"sfo\",\n \"oak\",\n \"lax\"\n ]\n }\n ```\n\n > **Note:** If you attempt to add an element within an array that doesn't exist or specify an invalid index, the entire PATCH fails and errors are logged in the token hooks events.\nModify an existing claim
\n\n You can modify (`replace`) existing custom claims or OIDC standard profile claims, such as `birthdate` and `locale`. You can't, however, modify any system-specific claims, such as `iss` or `ver`. Also, you can't modify a claim that isn't currently part of the token in the request payload. Attempting to modify a system-specific claim or using an invalid operation results in the entire PATCH failing and errors logged in the token hooks events.\n\n See [Access Tokens Scopes and Claims](/openapi/okta-oauth/guides/overview/#access-token-scopes-and-claims) for the list of access token-reserved claims that you can't modify.\n\n > **Note:** Although the `aud` and `sub` claims are listed as reserved claims, you can modify those claims in access tokens. You can't modify these claims in ID tokens.\n\n See [ID Token Claims](/openapi/okta-oauth/guides/overview/#id-token-claims) for a list of ID token-reserved claims that you can't modify.\n\n **Existing target JSON object**\n\n ```\n {\n \"employeeId\": \"00u12345678\",\n \"extPatientId\": 1234,\n \"external_guid\": \"F0384685-F87D-474B-848D-2058AC5655A7\"\n }\n ```\n\n **Operation**\n\n ```\n {\n \"commands\": [\n {\n \"type\": \"com.okta.identity.patch\",\n \"value\": [\n {\n \"op\": \"replace\",\n \"path\": \"/claims/extPatientId\",\n \"value\": \"12345\"\n },\n {\n \"op\": \"replace\",\n \"path\": \"/claims/external_guid\",\n \"value\": \"D1495796-G98E-585C-959E-1269CD6766B8\"\n }\n ]\n }\n ]\n }\n ```\n\n **Updated JSON***\n\n ```\n {\n \"employeeId\": \"00u12345678\",\n \"extPatientId\": 12345,\n \"external_guid\": \"D1495796-G98E-585C-959E-1269CD6766B8\"\n }\n ```\n\nModify members within existing JSON objects and arrays
\n\n Use the `replace` operation to modify members within JSON objects and elements within arrays. For example, you have a JSON object in a claim called `employee_profile`, and you want to update the email address of the employee. The existing target JSON object is updated by specifying the claim in the path, followed by the name of the object member that you want to modify.\n\n **Existing target JSON object**\n\n ```\n {\n \"employee_profile\": {\n \"employee_id\":\"1234\",\n \"name\":\"Anna\",\n \"email\":\"anna.v@company.com\"\n }\n }\n ```\n\n **Operation**\n\n ```\n {\n \"commands\": [\n {\n \"type\": \"com.okta.identity.patch\",\n \"value\": [\n {\n \"op\": \"replace\",\n \"path\": \"/claims/employee_profile/email\",\n \"value\": \"anna@company.com\"\n }\n ]\n }\n ]\n }\n ```\n\n **Updated JSON**\n\n ```\n {\n \"employee_profile\": {\n \"employee_id\":\"1234\",\n \"name\":\"Anna\",\n \"email\":\"anna@company.com\"\n }\n }\n ```\n\n > **Note:** If you attempt to modify a member within a JSON object that doesn't exist or use an invalid operation, the entire PATCH fails and errors are logged in the token hooks events.\n\n Similarly, you can replace elements in an array by specifying the array name and the valid index of the element that you want to replace in the path.\nModify token lifetimes
\n You can modify how long the access and ID tokens are valid by specifying the `lifetime` in seconds. The `lifetime` value must be a minimum of five minutes (300 seconds) and a maximum of 24 hours (86,400 seconds).\n\n **Operation**\n\n ```\n {\n \"commands\": [\n {\n \"type\": \"com.okta.identity.patch\",\n \"value\": [\n {\n \"op\": \"replace\",\n \"path\": \"/token/lifetime/expiration\",\n \"value\": 36000\n }\n ]\n },\n {\n \"type\": \"com.okta.access.patch\",\n \"value\": [\n {\n \"op\": \"replace\",\n \"path\": \"/token/lifetime/expiration\",\n \"value\": 36000\n }\n ]\n }\n ]\n }\n ```\n\nRemove a claim
\n\n You can remove existing custom claims or OIDC standard profile claims, such as `birthdate` or `locale`. You can't, however, remove any system-specific claims, such as `iss` or `ver`. You also can't remove a claim that isn't currently part of the token in the request payload. If you attempt to remove a system-specific claim or use an invalid operation, the entire PATCH fails and errors are logged in the token hooks events.\n\n See [Access Tokens Scopes and Claims](/openapi/okta-oauth/guides/overview/#access-token-scopes-and-claims) for the list of access token-reserved claims that you can't modify.\n\n See [ID Token Claims](/openapi/okta-oauth/guides/overview/#id-token-claims) for a list of ID token-reserved claims that you can't modify.\n\n **Operation**\n\n ```\n {\n \"commands\": [\n {\n \"type\": \"com.okta.identity.patch\",\n \"value\": [\n {\n \"op\": \"remove\",\n \"path\": \"/claims/birthdate\",\n \"value\": null\n }\n ]\n },\n {\n \"type\": \"com.okta.access.patch\",\n \"value\": [\n {\n \"op\": \"remove\",\n \"path\": \"/claims/external_guid\"\n }\n ]\n }\n ]\n }\n ```\n\n > **Note:** The `value` property for the `remove` operation isn't required. If you provide it in the response, it should be set to `null`. Providing any other value fails the entire PATCH response.\n\nRemove members from existing arrays
\n\n Use the `remove` operation to remove members from existing arrays. For example, you have an array that contains the user's preferred airports, and you want to remove an airport from the array. The existing target JSON object is updated by specifying the array name followed by the index of the element that you want to remove. You don't need to specify a value for the remove operation, but you can specify `null` as the value if you want.\n\n **Existing target JSON object**\n\n ```\n {\n \"preferred_airports\": [\n \"sjc\",\n \"lax\",\n \"sfo\",\n \"oak\"\n ]\n }\n ```\n\n **Operation**\n\n ```\n {\n \"commands\": [\n {\n \"type\": \"com.okta.identity.patch\",\n \"value\": [\n {\n \"op\": \"remove\",\n \"path\": \"/claims/preferred_airports/1\"\n }\n ]\n }\n ]\n }\n ```\n\n **Updated JSON**\n\n ```\n {\n \"preferred_airports\": [\n \"sjc\",\n \"sfo\",\n \"oak\"\n ]\n }\n ```\n\nRemove members from existing JSON objects
\n\n Use the `remove` operation to remove members from existing JSON objects. Do this by specifying the JSON object in the path, followed by the claim member that you would like to remove. For example, you have an `employee_profile` claim, and you want to remove `email` from it.\n\n**Existing target JSON object**\n\n```\n{\n \"employee_profile\": {\n \"employee_id\":\"1234\",\n \"name\":\"Anna\",\n \"email\":\"anna.v@company.com\"\n }\n}\n```\n\n**Operation**\n\n```\n{\n \"commands\": [\n {\n \"type\": \"com.okta.identity.patch\",\n \"value\": [\n {\n \"op\": \"remove\",\n \"path\": \"/claims/employee_profile/email\"\n }\n ]\n }\n ]\n}\n```\n\n**Updated JSON**\n```\n{\n \"employee_profile\": {\n \"employee_id\":\"1234\",\n \"name\":\"Anna\",\n }\n}\n```\n\n
\nEach schema has the following format:\n\n```\n{\n \"const\": \"enumValue\",\n \"title\": \"display name\"\n}\n```\n\nWhen `enum` is used in conjunction with `oneOf`, you must keep the set of enumerated values and their order.
\nFor example:\n\n```\n\"enum\": [\"S\",\"M\",\"L\",\"XL\"],\n\"oneOf\": [\n {\"const\": \"S\", \"title\": \"Small\"},\n {\"const\": \"M\", \"title\": \"Medium\"},\n {\"const\": \"L\", \"title\": \"Large\"},\n {\"const\": \"XL\", \"title\": \"Extra Large\"}\n ]\n```",
"items": {
"$ref": "#/components/schemas/UserSchemaAttributeEnum"
},
"nullable": true,
"type": "array"
},
"pattern": {
"description": "For `string` property types, specifies the regular expression used to validate the property",
"type": "string"
},
"permissions": {
"description": "Access control permissions for the property",
"items": {
"$ref": "#/components/schemas/UserSchemaAttributePermission"
},
"nullable": true,
"type": "array"
},
"required": {
"description": "Determines whether the property is required",
"nullable": true,
"type": "boolean"
},
"scope": {
"$ref": "#/components/schemas/UserSchemaAttributeScope"
},
"title": {
"description": "User-defined display name for the property",
"minLength": 1,
"type": "string"
},
"type": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttributeType"
}
],
"description": "Type of property"
},
"unique": {
"description": "Determines whether property values must be unique",
"nullable": true,
"type": "boolean"
}
},
"type": "object",
"x-okta-allow-null-property-value-for-updates": true,
"x-okta-ignore-redocly-rules-for-sdk": true
},
"UserSchemaAttributeEnum": {
"properties": {
"const": {
"description": "The enumerated value",
"type": "string"
},
"title": {
"description": "The display label for the enumerated value",
"type": "string"
}
},
"type": "object"
},
"UserSchemaAttributeFormat": {
"enum": [
"country-code",
"date-time",
"email",
"encrypted",
"hashed",
"language-code",
"locale",
"ref-id",
"timezone",
"uri"
],
"type": "string"
},
"UserSchemaAttributeItems": {
"properties": {
"enum": {
"items": {
"type": "string"
},
"type": "array"
},
"oneOf": {
"items": {
"$ref": "#/components/schemas/UserSchemaAttributeEnum"
},
"type": "array"
},
"type": {
"type": "string"
}
},
"type": "object"
},
"UserSchemaAttributeMaster": {
"nullable": true,
"properties": {
"priority": {
"items": {
"$ref": "#/components/schemas/UserSchemaAttributeMasterPriority"
},
"type": "array"
},
"type": {
"$ref": "#/components/schemas/UserSchemaAttributeMasterType"
}
},
"type": "object"
},
"UserSchemaAttributeMasterPriority": {
"properties": {
"type": {
"type": "string"
},
"value": {
"type": "string"
}
},
"type": "object"
},
"UserSchemaAttributeMasterType": {
"enum": [
"OKTA",
"OVERRIDE",
"PROFILE_MASTER"
],
"type": "string"
},
"UserSchemaAttributeMutabilityString": {
"enum": [
"IMMUTABLE",
"READ_ONLY",
"READ_WRITE",
"WRITE_ONLY"
],
"type": "string"
},
"UserSchemaAttributePermission": {
"properties": {
"action": {
"description": "Determines whether the principal can view or modify the property",
"type": "string"
},
"principal": {
"description": "Security principal",
"type": "string"
}
},
"type": "object"
},
"UserSchemaAttributeScope": {
"enum": [
"NONE",
"SELF"
],
"type": "string"
},
"UserSchemaAttributeType": {
"enum": [
"array",
"boolean",
"integer",
"number",
"string"
],
"type": "string"
},
"UserSchemaBase": {
"description": "All Okta-defined profile properties are defined in a profile subschema with the resolution scope `#base`. You can't modify these properties, except to update permissions, to change the nullability of `firstName` and `lastName`, or to specify a pattern for `login`. They can't be removed.\n\nThe base user profile is based on the [System for Cross-domain Identity Management: Core Schema](https://tools.ietf.org/html/draft-ietf-scim-core-schema-22#section-4.1.1) and has the standard properties detailed below.",
"properties": {
"id": {
"description": "The subschema name",
"readOnly": true,
"type": "string"
},
"properties": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaBaseProperties"
}
],
"description": "The `#base` object properties"
},
"required": {
"description": "A collection indicating required property names",
"items": {
"type": "string"
},
"readOnly": true,
"type": "array"
},
"type": {
"description": "The object type",
"readOnly": true,
"type": "string"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"UserSchemaBaseProperties": {
"properties": {
"city": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "City or locality component of the user's address (`locality`)"
},
"costCenter": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Name of a cost center assigned to the user"
},
"countryCode": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Country name component of the user's address (`country`.) This property uses [ISO 3166-1 alpha 2 \"short\" code format](https://tools.ietf.org/html/draft-ietf-scim-core-schema-22#ref-ISO3166)."
},
"department": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Name of the user's department"
},
"displayName": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Name of the user, suitable for display to end users"
},
"division": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Name of the user's division"
},
"email": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Primary email address of the user. This property is formatted according to [RFC 5322 Section 3.2.3](https://datatracker.ietf.org/doc/html/rfc5322#section-3.2.3)."
},
"employeeNumber": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Organization or company assigned unique identifier for the user"
},
"firstName": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Given name of the user (`givenName`)"
},
"honorificPrefix": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Honorific prefix(es) of the user or title in most Western languages"
},
"honorificSuffix": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Honorific suffix(es) of the user"
},
"lastName": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Family name of the user (`familyName`)"
},
"locale": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "User's default location for purposes of localizing items such as currency, date time format, numerical representations, and so on.\n\nA locale value is a concatenation of the ISO 639-1 two-letter language code, an underscore, and the ISO 3166-1 two-letter country code. For example: `en_US` specifies the language English and country US. This value is `en_US` by default."
},
"login": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Unique identifier for the user (`userName`)\n\nThe login property is validated according to its pattern attribute, which is a string. By default, the attribute is null. When the attribute is null, the username is required to be formatted as an email address as defined by [RFC 6531 Section 3.3](http://tools.ietf.org/html/rfc6531#section-3.3). The pattern can be set through the API to one of the following forms. (The Admin Console provides access to the same forms.)\n * A login pattern of `\".+\"` indicates that there is no restriction on usernames. Any non-empty, unique value is permitted, and the minimum length of five isn't enforced. In this case, usernames don't need to include the `@` character. If a name does include `@`, the portion ahead of the `@` can be used for logging in, provided it identifies a unique user within the org.\n * A login pattern of the form `\"[...]+\"` indicates that usernames must only contain characters from the set given between the brackets. The enclosing brackets and final `+` are required for this form. Character ranges can be indicated using hyphens. To include the hyphen itself in the allowed set, the hyphen must appear first. Any characters in the set except the hyphen, a-z, A-Z, and 0-9 must be preceded by a backslash (`\\`). For example, `\"[a-z13579\\.]+\"` would restrict usernames to lowercase letters, odd digits, and periods, while `\"[-a-zA-Z0-9]+\"` would allow basic alphanumeric characters and hyphens."
},
"manager": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "The `displayName` of the user's manager"
},
"managerId": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "The `id` of the user's manager"
},
"middleName": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Middle name(s) of the user"
},
"mobilePhone": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Mobile phone number of the user"
},
"nickName": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Casual way to address the user in real life"
},
"organization": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Name of the user's organization"
},
"postalAddress": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Mailing address component of the user's address"
},
"preferredLanguage": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "User's preferred written or spoken languages. This property is formatted according to [RFC 7231 Section 5.3.5](https://tools.ietf.org/html/rfc7231#section-5.3.5)."
},
"primaryPhone": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Primary phone number of the user, such as home number"
},
"profileUrl": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "URL of the user's online profile (for example, a web page.) This property is formatted according to the [Relative Uniform Resource Locators specification](https://tools.ietf.org/html/draft-ietf-scim-core-schema-22#ref-ISO3166)."
},
"secondEmail": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Secondary email address of the user typically used for account recovery. This property is formatted according to [RFC 5322 Section 3.2.3](https://datatracker.ietf.org/doc/html/rfc5322#section-3.2.3)."
},
"state": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "State or region component of the user's address (`region`)"
},
"streetAddress": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Full street address component of the user's address"
},
"timezone": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "User's time zone. This property is formatted according to the [IANA Time Zone database format](https://tools.ietf.org/html/rfc6557)."
},
"title": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "User's title, such as \"Vice President\""
},
"userType": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "Used to describe the organization to the user relationship such as \"Employee\" or \"Contractor\".\n\n**Note:** The `userType` field is an arbitrary string value and isn't related to the newer [User Types](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserType/) feature."
},
"zipCode": {
"allOf": [
{
"$ref": "#/components/schemas/UserSchemaAttribute"
}
],
"description": "ZIP code or postal code component of the user's address (`postalCode`)"
}
},
"type": "object",
"x-okta-ignore-redocly-rules-for-sdk": true
},
"UserSchemaDefinitions": {
"properties": {
"base": {
"$ref": "#/components/schemas/UserSchemaBase"
},
"custom": {
"$ref": "#/components/schemas/UserSchemaPublic"
}
},
"type": "object"
},
"UserSchemaProperties": {
"properties": {
"profile": {
"$ref": "#/components/schemas/UserSchemaPropertiesProfile"
}
},
"type": "object"
},
"UserSchemaPropertiesProfile": {
"properties": {
"allOf": {
"items": {
"$ref": "#/components/schemas/UserSchemaPropertiesProfileItem"
},
"type": "array"
}
},
"type": "object"
},
"UserSchemaPropertiesProfileItem": {
"properties": {
"$ref": {
"type": "string"
}
},
"type": "object"
},
"UserSchemaPublic": {
"description": "All custom profile properties are defined in a profile subschema with the resolution scope `#custom`.\n\n> **Notes:** \n> * When you refer to custom profile attributes that differ only by case, name collisions occur. This includes naming custom profile attributes the same as base profile attributes, for example, `firstName` and `FirstName`.\n> * Certain attributes are reserved and can't be used for custom user profiles. See [Review reserved attributes](https://help.okta.com/okta_help.htm?type=oie&id=reserved-attributes).",
"properties": {
"id": {
"description": "The subschema name",
"readOnly": true,
"type": "string"
},
"properties": {
"additionalProperties": {
"$ref": "#/components/schemas/UserSchemaAttribute"
},
"description": "The `#custom` object properties",
"type": "object"
},
"required": {
"description": "A collection indicating required property names",
"items": {
"type": "string"
},
"readOnly": true,
"type": "array"
},
"type": {
"description": "The object type",
"readOnly": true,
"type": "string"
}
},
"type": "object"
},
"UserStatus": {
"description": "The current status of the user.\n\nThe status of a user changes in response to explicit events, such as admin-driven lifecycle changes, user login, or self-service password recovery. Okta doesn't asynchronously sweep through users and update their password expiry state, for example. Instead, Okta evaluates password policy at login time, notices the password has expired, and moves the user to the expired state. When running reports, remember that the data is valid as of the last login or lifecycle event for that user.\n\n> **Note:** The `ACTIVATING` status is a transitional status that occurs when a user is being activated but hasn't completed the activation process. This status isn't directly settable through the API, nor should you use it for any of your user management workflows.",
"enum": [
"ACTIVE",
"DEPROVISIONED",
"LOCKED_OUT",
"PASSWORD_EXPIRED",
"PROVISIONED",
"RECOVERY",
"STAGED",
"SUSPENDED"
],
"readOnly": true,
"type": "string"
},
"UserStatusPolicyRuleCondition": {
"properties": {
"value": {
"$ref": "#/components/schemas/PolicyUserStatus"
}
},
"type": "object"
},
"UserType": {
"properties": {
"_links": {
"$ref": "#/components/schemas/UserTypeLinks"
},
"created": {
"description": "A timestamp from when the user type was created",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"createdBy": {
"description": "The user ID of the account that created the user type",
"readOnly": true,
"type": "string"
},
"default": {
"description": "A boolean value to indicate if this is the default user type",
"readOnly": true,
"type": "boolean"
},
"description": {
"description": "The human-readable description of the user type",
"type": "string"
},
"displayName": {
"description": "The human-readable name of the user type",
"type": "string"
},
"id": {
"description": "The unique key for the user type",
"readOnly": true,
"type": "string"
},
"lastUpdated": {
"description": "A timestamp from when the user type was most recently updated",
"format": "date-time",
"readOnly": true,
"type": "string"
},
"lastUpdatedBy": {
"description": "The user ID of the most recent account to edit the user type",
"readOnly": true,
"type": "string"
},
"name": {
"description": "The name of the user type. The name must start with A-Z or a-z and contain only A-Z, a-z, 0-9, or underscore (_) characters. This value becomes read-only after creation and can't be updated.",
"type": "string"
}
},
"required": [
"name",
"displayName"
],
"type": "object"
},
"UserTypeCondition": {
"description": "
\n Assignments to SSO apps typically don't include a user profile.\n However, if your SSO app requires a profile but doesn't have provisioning enabled, you can add profile attributes in the request body.\n\n * SSO and provisioning
\n Assignments to SSO and provisioning apps typically include credentials and an app-specific profile.\n Profile mappings defined for the app are applied first before applying any profile properties that are specified in the request body.\n > **Notes:**\n > * When Universal Directory is enabled, you can only specify profile properties that aren't defined in profile mappings.\n > * Omit mapped properties during assignment to minimize assignment errors.",
"operationId": "assignUserToApplication",
"requestBody": {
"content": {
"application/json": {
"examples": {
"AppUserProvEx": {
"$ref": "#/components/examples/AppUserAssignProvRequest"
},
"AppUserSSOEx": {
"$ref": "#/components/examples/AppUserAssignSSORequest"
}
},
"schema": {
"$ref": "#/components/schemas/AppUserAssignRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"AppUserProvEx": {
"$ref": "#/components/examples/AppUserProvResponse"
},
"AppUserSSOEx": {
"$ref": "#/components/examples/AppUserSSOResponse"
}
},
"schema": {
"$ref": "#/components/schemas/AppUser"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAppUserForbidden403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.apps.manage"
]
}
],
"summary": "Assign an application user",
"tags": [
"ApplicationUsers"
],
"x-codegen-request-body-name": "appUser"
}
},
"/api/v1/apps/{appId}/users/{userId}": {
"delete": {
"description": "Unassigns a user from an app\n\nFor directories like Active Directory and LDAP, they act as the owner of the user's credential with Okta delegating authentication (DelAuth) to that directory.\nIf this request is successful for a user when DelAuth is enabled, then the user is in a state with no password. You can then reset the user's password.\n\n> **Important:** This is a destructive operation. You can't recover the user's app profile. If the app is enabled for provisioning and configured to deactivate users, the user is also deactivated in the target app.",
"operationId": "unassignUserFromApplication",
"parameters": [
{
"description": "Sends a deactivation email to the administrator if `true`",
"in": "query",
"name": "sendEmail",
"schema": {
"default": false,
"type": "boolean"
},
"x-okta-added-version": "1.5.0"
}
],
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.apps.manage"
]
}
],
"summary": "Unassign an application user",
"tags": [
"ApplicationUsers"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a specific user assignment for a specific app",
"operationId": "getApplicationUser",
"parameters": [
{
"$ref": "#/components/parameters/queryAppUserExpand"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GetAppUserExample": {
"$ref": "#/components/examples/AppUserProvExpandResponse"
}
},
"schema": {
"$ref": "#/components/schemas/AppUser"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.apps.read"
]
}
],
"summary": "Retrieve an application user",
"tags": [
"ApplicationUsers"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAppId"
},
{
"$ref": "#/components/parameters/pathAppUserId"
}
],
"post": {
"description": "Updates the profile or credentials of a user assigned to an app",
"operationId": "updateApplicationUser",
"requestBody": {
"content": {
"application/json": {
"examples": {
"AppUserUpdateCredEx": {
"$ref": "#/components/examples/AppUserUpdateCredRequest"
},
"AppUserUpdateProfileEx": {
"$ref": "#/components/examples/AppUserUpdateProfileRequest"
}
},
"schema": {
"$ref": "#/components/schemas/AppUserUpdateRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"AppUserUpdateCredEx": {
"$ref": "#/components/examples/AppUserCredUpdateResponse"
},
"AppUserUpdateProfileEx": {
"$ref": "#/components/examples/AppUserProfUpdateResponse"
}
},
"schema": {
"$ref": "#/components/schemas/AppUser"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorAppUserUpdateBadRequest400"
},
"403": {
"$ref": "#/components/responses/ErrorAppUserForbidden403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.apps.manage"
]
}
],
"summary": "Update an application user",
"tags": [
"ApplicationUsers"
],
"x-codegen-request-body-name": "appUser",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/apps/{appName}/{appId}/oauth2/callback": {
"parameters": [
{
"$ref": "#/components/parameters/pathOAuthProvisioningAppName"
},
{
"$ref": "#/components/parameters/pathAppId"
}
],
"post": {
"description": "Verifies the OAuth 2.0-based connection as part of the OAuth 2.0 consent flow. The validation of the consent flow is the last step of the provisioning setup for an OAuth 2.0-based connection.\nCurrently, this operation only supports `office365`,`google`, `zoomus`, and `slack` apps.\n",
"operationId": "verifyProvisioningConnectionForApplication",
"parameters": [
{
"in": "query",
"name": "code",
"schema": {
"description": "Unique string associated with each authentication request",
"type": "string"
}
},
{
"in": "query",
"name": "state",
"schema": {
"description": "A temporary code string that the client exchanges for an access token",
"type": "string"
}
}
],
"responses": {
"204": {
"description": "No content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.apps.manage"
]
}
],
"summary": "Verify the provisioning connection",
"tags": [
"ApplicationConnections"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/authenticators": {
"get": {
"description": "Lists all authenticators",
"operationId": "listAuthenticators",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"OrgAuthenticatorsEx": {
"$ref": "#/components/examples/AuthenticatorsResponse"
},
"OrgAuthenticatorsExWithWebAuthnNameAndDescription": {
"$ref": "#/components/examples/AuthenticatorsResponseWithWebAuthnNameAndDescription"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/AuthenticatorBase"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.read"
]
}
],
"summary": "List all authenticators",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"post": {
"description": "Creates an authenticator",
"operationId": "createAuthenticator",
"parameters": [
{
"description": "Whether to execute the activation lifecycle operation when Okta creates the authenticator",
"in": "query",
"name": "activate",
"schema": {
"default": true,
"type": "boolean"
}
}
],
"requestBody": {
"$ref": "#/components/requestBodies/AuthenticatorRequestBody"
},
"responses": {
"200": {
"$ref": "#/components/responses/AuthenticatorResponse"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.manage"
]
}
],
"summary": "Create an authenticator",
"tags": [
"Authenticator"
],
"x-codegen-request-body-name": "authenticator",
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/authenticators/{authenticatorId}": {
"get": {
"description": "Retrieves an authenticator from your Okta organization by `authenticatorId`",
"operationId": "getAuthenticator",
"responses": {
"200": {
"$ref": "#/components/responses/AuthenticatorResponse"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.read"
]
}
],
"summary": "Retrieve an authenticator",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthenticatorId"
}
],
"put": {
"description": "Replaces the properties for an authenticator identified by `authenticatorId`",
"operationId": "replaceAuthenticator",
"requestBody": {
"$ref": "#/components/requestBodies/AuthenticatorRequestBody"
},
"responses": {
"200": {
"$ref": "#/components/responses/AuthenticatorResponse"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.manage"
]
}
],
"summary": "Replace an authenticator",
"tags": [
"Authenticator"
],
"x-codegen-request-body-name": "authenticator",
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/authenticators/{authenticatorId}/aaguids": {
"get": {
"description": "Lists all custom Authenticator Attestation Global Unique Identifiers (AAGUIDs) in the org\n\nOnly custom AAGUIDs that an admin has created are returned.",
"operationId": "listAllCustomAAGUIDs",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"default": {
"$ref": "#/components/examples/AllCustomAAGUIDResponse"
}
},
"schema": {
"$ref": "#/components/schemas/AllCustomAAGUIDResponseObject"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.read"
]
}
],
"summary": "List all custom AAGUIDs",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthenticatorId"
}
],
"post": {
"description": "Creates a custom AAGUID for the Passkey (FIDO2 WebAuthn) authenticator",
"operationId": "createCustomAAGUID",
"requestBody": {
"content": {
"application/json": {
"examples": {
"default": {
"$ref": "#/components/examples/CustomAAGUIDRequest"
}
},
"schema": {
"$ref": "#/components/schemas/CustomAAGUIDCreateRequestObject"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"default": {
"$ref": "#/components/examples/CustomAAGUIDResponse"
}
},
"schema": {
"$ref": "#/components/schemas/CustomAAGUIDResponseObject"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.manage"
]
}
],
"summary": "Create a custom AAGUID",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authenticators/{authenticatorId}/aaguids/{aaguid}": {
"delete": {
"description": "Deletes a custom AAGUID\n\nYou can only delete custom AAGUIDs that an admin has created.",
"operationId": "deleteCustomAAGUID",
"responses": {
"204": {
"description": "Deleted"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.manage"
]
}
],
"summary": "Delete a custom AAGUID",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a custom AAGUID",
"operationId": "getCustomAAGUID",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"default": {
"$ref": "#/components/examples/CustomAAGUIDResponse"
}
},
"schema": {
"$ref": "#/components/schemas/CustomAAGUIDResponseObject"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.read"
]
}
],
"summary": "Retrieve a custom AAGUID",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthenticatorId"
},
{
"$ref": "#/components/parameters/pathAAGUID"
}
],
"patch": {
"description": "Updates the properties of a custom AAGUID by the `authenticatorId` and `aaguid` ID",
"operationId": "updateCustomAAGUID",
"requestBody": {
"content": {
"application/merge-patch+json": {
"examples": {
"default": {
"$ref": "#/components/examples/CustomAAGUIDUpdateRequest"
}
},
"schema": {
"$ref": "#/components/schemas/CustomAAGUIDUpdateRequestObject"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"default": {
"$ref": "#/components/examples/CustomAAGUIDResponse"
}
},
"schema": {
"$ref": "#/components/schemas/CustomAAGUIDResponseObject"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.manage"
]
}
],
"summary": "Update a custom AAGUID",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"put": {
"description": "Replaces a custom AAGUID for the specified Passkey (FIDO2 WebAuthn) authenticator",
"operationId": "replaceCustomAAGUID",
"requestBody": {
"content": {
"application/json": {
"examples": {
"default": {
"$ref": "#/components/examples/CustomAAGUIDUpdateRequest"
}
},
"schema": {
"$ref": "#/components/schemas/CustomAAGUIDUpdateRequestObject"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"default": {
"$ref": "#/components/examples/CustomAAGUIDResponse"
}
},
"schema": {
"$ref": "#/components/schemas/CustomAAGUIDResponseObject"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.manage"
]
}
],
"summary": "Replace a custom AAGUID",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authenticators/{authenticatorId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthenticatorId"
}
],
"post": {
"description": "Activates an authenticator by `authenticatorId`",
"operationId": "activateAuthenticator",
"responses": {
"200": {
"$ref": "#/components/responses/AuthenticatorResponse"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.manage"
]
}
],
"summary": "Activate an authenticator",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/authenticators/{authenticatorId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthenticatorId"
}
],
"post": {
"description": "Deactivates an authenticator by `authenticatorId`",
"operationId": "deactivateAuthenticator",
"responses": {
"200": {
"$ref": "#/components/responses/AuthenticatorResponseInactiveWebAuthn"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.manage"
]
}
],
"summary": "Deactivate an authenticator",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/authenticators/{authenticatorId}/methods": {
"get": {
"description": "Lists all methods of an authenticator identified by `authenticatorId`",
"operationId": "listAuthenticatorMethods",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Phone": {
"$ref": "#/components/examples/AuthenticatorMethodPhone"
},
"TAC": {
"$ref": "#/components/examples/AuthenticatorMethodTac"
},
"WebAuthn": {
"$ref": "#/components/examples/AuthenticatorMethodWebAuthn"
},
"WebAuthnWithRebrandSettings": {
"$ref": "#/components/examples/AuthenticatorMethodWebAuthnWithRebrandSettings"
},
"WebAuthnWithRpId": {
"$ref": "#/components/examples/AuthenticatorMethodWebAuthnWithRpId"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/AuthenticatorMethodBase"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.read"
]
}
],
"summary": "List all methods of an authenticator",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthenticatorId"
}
]
},
"/api/v1/authenticators/{authenticatorId}/methods/{methodType}": {
"get": {
"description": "Retrieves a method identified by `methodType` of an authenticator identified by `authenticatorId`",
"operationId": "getAuthenticatorMethod",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"WebAuthnWithRebrandSettings": {
"$ref": "#/components/examples/AuthenticatorMethodWebAuthnWithRebrandSettings"
},
"sms": {
"$ref": "#/components/examples/AuthenticatorMethodSms"
},
"tac": {
"$ref": "#/components/examples/AuthenticatorMethodTac"
},
"voice": {
"$ref": "#/components/examples/AuthenticatorMethodInactiveVoice"
},
"webauthn": {
"$ref": "#/components/examples/AuthenticatorMethodWebAuthn"
},
"webauthnWithRpId": {
"$ref": "#/components/examples/AuthenticatorMethodWebAuthnWithRpId"
}
},
"schema": {
"$ref": "#/components/schemas/AuthenticatorMethodBase"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.read"
]
}
],
"summary": "Retrieve an authenticator method",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthenticatorId"
},
{
"$ref": "#/components/parameters/pathMethodType"
}
],
"put": {
"description": "Replaces a method of `methodType` for an authenticator identified by `authenticatorId`",
"operationId": "replaceAuthenticatorMethod",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/AuthenticatorMethodBase"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"sms": {
"$ref": "#/components/examples/AuthenticatorMethodSms"
},
"tac": {
"$ref": "#/components/examples/AuthenticatorMethodTac"
},
"voice": {
"$ref": "#/components/examples/AuthenticatorMethodInactiveVoice"
},
"webauthn": {
"$ref": "#/components/examples/AuthenticatorMethodWebAuthn"
},
"webauthnWithRebrandSettings": {
"$ref": "#/components/examples/AuthenticatorMethodWebAuthnWithRebrandSettings"
},
"webauthnWithRpId": {
"$ref": "#/components/examples/AuthenticatorMethodWebAuthnWithRpId"
}
},
"schema": {
"$ref": "#/components/schemas/AuthenticatorMethodBase"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.manage"
]
}
],
"summary": "Replace an authenticator method",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/authenticators/{authenticatorId}/methods/{methodType}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthenticatorId"
},
{
"$ref": "#/components/parameters/pathMethodType"
}
],
"post": {
"description": "Activates a method for an authenticator identified by `authenticatorId` and `methodType`",
"operationId": "activateAuthenticatorMethod",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"sms": {
"$ref": "#/components/examples/AuthenticatorMethodSms"
},
"tac": {
"$ref": "#/components/examples/AuthenticatorMethodTac"
},
"webauthn": {
"$ref": "#/components/examples/AuthenticatorMethodWebAuthn"
},
"webauthnWithRpId": {
"$ref": "#/components/examples/AuthenticatorMethodWebAuthnWithRpId"
}
},
"schema": {
"$ref": "#/components/schemas/AuthenticatorMethodBase"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.manage"
]
}
],
"summary": "Activate an authenticator method",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/authenticators/{authenticatorId}/methods/{methodType}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthenticatorId"
},
{
"$ref": "#/components/parameters/pathMethodType"
}
],
"post": {
"description": "Deactivates a method for an authenticator identified by `authenticatorId` and `methodType`",
"operationId": "deactivateAuthenticatorMethod",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"voice": {
"$ref": "#/components/examples/AuthenticatorMethodInactiveVoice"
}
},
"schema": {
"$ref": "#/components/schemas/AuthenticatorMethodBase"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.manage"
]
}
],
"summary": "Deactivate an authenticator method",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/authenticators/{authenticatorId}/methods/{webAuthnMethodType}/verify-rp-id-domain": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthenticatorId"
},
{
"$ref": "#/components/parameters/pathWebAuthnMethodType"
}
],
"post": {
"description": "Verifies the [Relying Party identifier (RP ID)](https://www.w3.org/TR/webauthn/#relying-party-identifier) domain for the specified Passkey (FIDO2 WebAuthn) authenticator and the specific `webauthn` authenticator method",
"operationId": "verifyRpIdDomain",
"responses": {
"204": {
"description": "No Content"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authenticators.manage"
]
}
],
"summary": "Verify a Relying Party ID domain",
"tags": [
"Authenticator"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/authorizationServers": {
"get": {
"description": "Lists all custom authorization servers in the org",
"operationId": "listAuthorizationServers",
"parameters": [
{
"description": "Searches the `name` and `audiences` of authorization servers for matching values",
"example": "customasone",
"in": "query",
"name": "q",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the number of authorization server results on a page. Maximum value: 200",
"in": "query",
"name": "limit",
"schema": {
"default": 200,
"format": "int32",
"type": "integer"
}
},
{
"description": "Specifies the pagination cursor for the next page of authorization servers. Treat as an opaque value and obtain through the next link relationship.",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListAuthServers": {
"$ref": "#/components/examples/ListAuthServersResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/AuthorizationServer"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "List all authorization servers",
"tags": [
"AuthorizationServer"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates an authorization server",
"operationId": "createAuthorizationServer",
"requestBody": {
"content": {
"application/json": {
"examples": {
"CreateAuthServer": {
"$ref": "#/components/examples/CreateAuthServerBody"
},
"CreateAuthServerWithAccessTokenEncryption": {
"$ref": "#/components/examples/CreateAuthServerWithAccessTokenEncryptionBody"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServer"
}
}
},
"required": true
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"CreateAuthServer": {
"$ref": "#/components/examples/CreateAuthServerResponse"
},
"CreateAuthServerWithAccessTokenEncryption": {
"$ref": "#/components/examples/CreateAuthServerWithAccessTokenEncryptionResponse"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServer"
}
}
},
"description": "Created"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Create an authorization server",
"tags": [
"AuthorizationServer"
],
"x-codegen-request-body-name": "authorizationServer",
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}": {
"delete": {
"description": "Deletes an authorization server",
"operationId": "deleteAuthorizationServer",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Delete an authorization server",
"tags": [
"AuthorizationServer"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves an authorization server",
"operationId": "getAuthorizationServer",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"RetrieveAuthServer": {
"$ref": "#/components/examples/RetrieveAuthServerResponse"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServer"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "Retrieve an authorization server",
"tags": [
"AuthorizationServer"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
}
],
"put": {
"description": "Replaces an authorization server",
"operationId": "replaceAuthorizationServer",
"requestBody": {
"content": {
"application/json": {
"examples": {
"ReplaceAuthServer": {
"$ref": "#/components/examples/ReplaceAuthServerBody"
},
"ReplaceAuthServerEnableTokenEncryption": {
"$ref": "#/components/examples/ReplaceAuthServerEnableTokenEncryptionBody"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServer"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ReplaceAuthServer": {
"$ref": "#/components/examples/ReplaceAuthServerResponse"
},
"ReplaceAuthServerEnableTokenEncryption": {
"$ref": "#/components/examples/ReplaceAuthServerEnableTokenEncryptionResponse"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServer"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Replace an authorization server",
"tags": [
"AuthorizationServer"
],
"x-codegen-request-body-name": "authorizationServer",
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/associatedServers": {
"get": {
"description": "Lists all associated Authorization Servers by trusted type for the given `authServerId`",
"operationId": "listAssociatedServersByTrustedType",
"parameters": [
{
"description": "Searches trusted authorization servers when `true` or searches untrusted authorization servers when `false`",
"in": "query",
"name": "trusted",
"schema": {
"type": "boolean"
}
},
{
"description": "Searches for the name or audience of the associated authorization servers",
"example": "customasone",
"in": "query",
"name": "q",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the number of results for a page",
"in": "query",
"name": "limit",
"schema": {
"default": 200,
"format": "int32",
"type": "integer"
}
},
{
"description": "Specifies the pagination cursor for the next page of the associated authorization servers",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListAssocAuthServer": {
"$ref": "#/components/examples/ListAssocAuthServerResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/AuthorizationServer"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "List all associated authorization servers",
"tags": [
"AuthorizationServerAssoc"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
}
],
"post": {
"description": "Creates trusted relationships between the given authorization server and other authorization servers",
"operationId": "createAssociatedServers",
"requestBody": {
"content": {
"application/json": {
"examples": {
"CreateAssocAuthServer": {
"$ref": "#/components/examples/CreateAssocAuthServerBody"
}
},
"schema": {
"$ref": "#/components/schemas/AssociatedServerMediated"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"CreateAssocAuthServer": {
"$ref": "#/components/examples/CreateAssocAuthServerResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/AuthorizationServer"
},
"type": "array"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Create an associated authorization server",
"tags": [
"AuthorizationServerAssoc"
],
"x-codegen-request-body-name": "associatedServerMediated",
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/associatedServers/{associatedServerId}": {
"delete": {
"description": "Deletes an associated Authorization Server",
"operationId": "deleteAssociatedServer",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Delete an associated authorization server",
"tags": [
"AuthorizationServerAssoc"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathAssociatedServerId"
}
]
},
"/api/v1/authorizationServers/{authServerId}/claims": {
"get": {
"description": "Lists all custom token Claims defined for a specified custom authorization server",
"operationId": "listOAuth2Claims",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListCustomTokenClaims": {
"$ref": "#/components/examples/ListCustomTokenClaimsResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/OAuth2Claim"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "List all custom token claims",
"tags": [
"AuthorizationServerClaims"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
}
],
"post": {
"description": "Creates a custom token Claim for a custom authorization server",
"operationId": "createOAuth2Claim",
"requestBody": {
"content": {
"application/json": {
"examples": {
"CreateCustomTokenClaim": {
"$ref": "#/components/examples/CreateCustomTokenClaimBody"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2Claim"
}
}
},
"required": true
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"CreateCustomTokenClaim": {
"$ref": "#/components/examples/CreateCustomTokenClaimResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2Claim"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Create a custom token claim",
"tags": [
"AuthorizationServerClaims"
],
"x-codegen-request-body-name": "oAuth2Claim",
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/claims/{claimId}": {
"delete": {
"description": "Deletes a custom token Claim specified by the `claimId`",
"operationId": "deleteOAuth2Claim",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Delete a custom token claim",
"tags": [
"AuthorizationServerClaims"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a custom token Claim by the specified `claimId`",
"operationId": "getOAuth2Claim",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"RetrieveCustomTokenClaim": {
"$ref": "#/components/examples/RetrieveCustomTokenClaimResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2Claim"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "Retrieve a custom token claim",
"tags": [
"AuthorizationServerClaims"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathClaimId"
}
],
"put": {
"description": "Replaces a custom token Claim specified by the `claimId`",
"operationId": "replaceOAuth2Claim",
"requestBody": {
"content": {
"application/json": {
"examples": {
"ReplaceCustomTokenClaim": {
"$ref": "#/components/examples/ReplaceCustomTokenClaimBody"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2Claim"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ReplaceCustomTokenClaim": {
"$ref": "#/components/examples/ReplaceCustomTokenClaimResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2Claim"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Replace a custom token claim",
"tags": [
"AuthorizationServerClaims"
],
"x-codegen-request-body-name": "oAuth2Claim",
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/clients": {
"get": {
"description": "Lists all client resources for which the specified authorization server has tokens.\n\n> **Note:** To list a specific user's client resources for which they have tokens or grants, use the [List all clients endpoint in the User Resources API](/openapi/okta-management/management/userresources/listuserclients).",
"operationId": "listOAuth2ClientsForAuthorizationServer",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListClients": {
"$ref": "#/components/examples/ListClientsResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/OAuth2Client"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "List all client resources for an authorization server",
"tags": [
"AuthorizationServerClients"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
}
]
},
"/api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens": {
"delete": {
"description": "Revokes all refresh tokens for a Client",
"operationId": "revokeRefreshTokensForAuthorizationServerAndClient",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Revoke all refresh tokens for a client",
"tags": [
"AuthorizationServerClients"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Lists all refresh tokens issued by an authorization server for a specific Client",
"operationId": "listRefreshTokensForAuthorizationServerAndClient",
"parameters": [
{
"description": "Valid value: `scope`. If specified, scope details are included in the `_embedded` attribute.",
"in": "query",
"name": "expand",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the pagination cursor for the next page of tokens",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
},
{
"description": "The maximum number of tokens to return (maximum 200)",
"in": "query",
"name": "limit",
"schema": {
"default": -1,
"format": "int32",
"type": "integer"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListRefreshTokenClients": {
"$ref": "#/components/examples/ListRefreshTokensClientsResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/OAuth2RefreshToken"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "List all refresh tokens for a client",
"tags": [
"AuthorizationServerClients"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathClientId"
}
]
},
"/api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens/{tokenId}": {
"delete": {
"description": "Revokes a refresh token for a Client",
"operationId": "revokeRefreshTokenForAuthorizationServerAndClient",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Revoke a refresh token for a client",
"tags": [
"AuthorizationServerClients"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a refresh token for a Client",
"operationId": "getRefreshTokenForAuthorizationServerAndClient",
"parameters": [
{
"description": "Valid value: `scope`. If specified, scope details are included in the `_embedded` attribute.",
"in": "query",
"name": "expand",
"schema": {
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"RetrieveRefreshTokenClient": {
"$ref": "#/components/examples/RetrieveRefreshTokenClientResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2RefreshToken"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "Retrieve a refresh token for a client",
"tags": [
"AuthorizationServerClients"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathClientId"
},
{
"$ref": "#/components/parameters/pathTokenId"
}
]
},
"/api/v1/authorizationServers/{authServerId}/credentials/keys": {
"get": {
"description": "Lists all of the current, future, and expired Keys used by the Custom Authorization Server",
"operationId": "listAuthorizationServerKeys",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListAuthorizationServerKeys": {
"$ref": "#/components/examples/ListAuthorizationServerKeys"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/AuthorizationServerJsonWebKey"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "List all credential keys",
"tags": [
"AuthorizationServerKeys"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
}
]
},
"/api/v1/authorizationServers/{authServerId}/credentials/keys/{keyId}": {
"get": {
"description": "Retrieves an Authorization Server Key specified by the `keyId`",
"operationId": "getAuthorizationServerKey",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ActiveAuthorizationServerKey": {
"$ref": "#/components/examples/ActiveAuthorizationServerKey"
},
"ExpiredAuthorizationServerKey": {
"$ref": "#/components/examples/ExpiredAuthorizationServerKey"
},
"NextAuthorizationServerKey": {
"$ref": "#/components/examples/NextAuthorizationServerKey"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServerJsonWebKey"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "Retrieve an authorization server key",
"tags": [
"AuthorizationServerKeys"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathCredentialKeyId"
}
]
},
"/api/v1/authorizationServers/{authServerId}/credentials/lifecycle/keyRotate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
}
],
"post": {
"description": "Rotates the current Keys for a Custom Authorization Server. If you rotate Keys,\nthe `ACTIVE` Key becomes the `EXPIRED` Key, the `NEXT` Key becomes the `ACTIVE` Key,\nand the Custom Authorization Server immediately begins using the new active\nKey to sign tokens.\n\n> **Note:** Okta rotates your Keys automatically in `AUTO` mode. You can rotate Keys\nyourself in either mode. If Keys are rotated manually, you should invalidate any intermediate cache.\nand fetch the Keys again using the Keys endpoint.",
"operationId": "rotateAuthorizationServerKeys",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/JwkUse"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"RotateAuthorizationServerKeys": {
"$ref": "#/components/examples/ListAuthorizationServerKeys"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/AuthorizationServerJsonWebKey"
},
"type": "array"
}
}
},
"description": "Success"
},
"400": {
"content": {
"application/json": {
"examples": {
"InvalidRotateUse": {
"$ref": "#/components/examples/InvalidRotateUse"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Bad Request"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Rotate all credential keys",
"tags": [
"AuthorizationServerKeys"
],
"x-codegen-request-body-name": "use",
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
}
],
"post": {
"description": "Activates an authorization server",
"operationId": "activateAuthorizationServer",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Activate an authorization server",
"tags": [
"AuthorizationServer"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
}
],
"post": {
"description": "Deactivates an authorization server",
"operationId": "deactivateAuthorizationServer",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Deactivate an authorization server",
"tags": [
"AuthorizationServer"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/policies": {
"get": {
"description": "Lists all policies",
"operationId": "listAuthorizationServerPolicies",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListAuthorizationServerPolicies": {
"$ref": "#/components/examples/ListAuthorizationServerPolicies"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/AuthorizationServerPolicy"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "List all policies",
"tags": [
"AuthorizationServerPolicies"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
}
],
"post": {
"description": "Creates a policy",
"operationId": "createAuthorizationServerPolicy",
"requestBody": {
"content": {
"application/json": {
"examples": {
"CreateAuthorizationServerPolicyRule": {
"$ref": "#/components/examples/CreateAuthorizationServerPolicyRequest"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServerPolicy"
}
}
},
"required": true
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"AuthorizationServerPolicy": {
"$ref": "#/components/examples/AuthorizationServerPolicy"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServerPolicy"
}
}
},
"description": "Created"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Create a policy",
"tags": [
"AuthorizationServerPolicies"
],
"x-codegen-request-body-name": "policy",
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/policies/{policyId}": {
"delete": {
"description": "Deletes a policy",
"operationId": "deleteAuthorizationServerPolicy",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Delete a policy",
"tags": [
"AuthorizationServerPolicies"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a policy",
"operationId": "getAuthorizationServerPolicy",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"AuthorizationServerPolicy": {
"$ref": "#/components/examples/AuthorizationServerPolicy"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServerPolicy"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "Retrieve a policy",
"tags": [
"AuthorizationServerPolicies"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathPolicyId"
}
],
"put": {
"description": "Replaces a policy",
"operationId": "replaceAuthorizationServerPolicy",
"requestBody": {
"content": {
"application/json": {
"examples": {
"UpdateAuthorizationServerPolicyRule": {
"$ref": "#/components/examples/UpdateAuthorizationServerPolicyRequest"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServerPolicy"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"AuthorizationServerPolicy": {
"$ref": "#/components/examples/AuthorizationServerPolicy"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServerPolicy"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Replace a policy",
"tags": [
"AuthorizationServerPolicies"
],
"x-codegen-request-body-name": "policy",
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/policies/{policyId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathPolicyId"
}
],
"post": {
"description": "Activates an authorization server policy",
"operationId": "activateAuthorizationServerPolicy",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Activate a policy",
"tags": [
"AuthorizationServerPolicies"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/policies/{policyId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathPolicyId"
}
],
"post": {
"description": "Deactivates an authorization server policy",
"operationId": "deactivateAuthorizationServerPolicy",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Deactivate a policy",
"tags": [
"AuthorizationServerPolicies"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules": {
"get": {
"description": "Lists all policy rules for the specified Custom Authorization Server and Policy",
"operationId": "listAuthorizationServerPolicyRules",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListAuthorizationServerPolicyRules": {
"$ref": "#/components/examples/ListAuthorizationServerPolicyRules"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/AuthorizationServerPolicyRule"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "List all policy rules",
"tags": [
"AuthorizationServerRules"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathPolicyId"
}
],
"post": {
"description": "Creates a policy rule for the specified Custom Authorization Server and Policy",
"operationId": "createAuthorizationServerPolicyRule",
"requestBody": {
"content": {
"application/json": {
"examples": {
"CreateAuthorizationServerPolicyRule": {
"$ref": "#/components/examples/CreateAuthorizationServerPolicyRuleRequest"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServerPolicyRuleRequest"
}
}
},
"required": true
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"AuthorizationServerPolicyRule": {
"$ref": "#/components/examples/AuthorizationServerPolicyRule"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServerPolicyRule"
}
}
},
"description": "Created"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Create a policy rule",
"tags": [
"AuthorizationServerRules"
],
"x-codegen-request-body-name": "policyRule",
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}": {
"delete": {
"description": "Deletes a Policy Rule defined in the specified Custom Authorization Server and Policy",
"operationId": "deleteAuthorizationServerPolicyRule",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Delete a policy rule",
"tags": [
"AuthorizationServerRules"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a policy rule by `ruleId`",
"operationId": "getAuthorizationServerPolicyRule",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"AuthorizationServerPolicyRule": {
"$ref": "#/components/examples/AuthorizationServerPolicyRule"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServerPolicyRule"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "Retrieve a policy rule",
"tags": [
"AuthorizationServerRules"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathPolicyId"
},
{
"$ref": "#/components/parameters/pathRuleId"
}
],
"put": {
"description": "Replaces the configuration of the Policy Rule defined in the specified Custom Authorization Server and Policy",
"operationId": "replaceAuthorizationServerPolicyRule",
"requestBody": {
"content": {
"application/json": {
"examples": {
"UpdateAuthorizationServerPolicyRule": {
"$ref": "#/components/examples/UpdateAuthorizationServerPolicyRuleRequest"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServerPolicyRuleRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"AuthorizationServerPolicyRule": {
"$ref": "#/components/examples/AuthorizationServerPolicyRule"
}
},
"schema": {
"$ref": "#/components/schemas/AuthorizationServerPolicyRule"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Replace a policy rule",
"tags": [
"AuthorizationServerRules"
],
"x-codegen-request-body-name": "policyRule",
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathPolicyId"
},
{
"$ref": "#/components/parameters/pathRuleId"
}
],
"post": {
"description": "Activates an authorization server policy rule",
"operationId": "activateAuthorizationServerPolicyRule",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Activate a policy rule",
"tags": [
"AuthorizationServerRules"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathPolicyId"
},
{
"$ref": "#/components/parameters/pathRuleId"
}
],
"post": {
"description": "Deactivates an authorization server policy rule",
"operationId": "deactivateAuthorizationServerPolicyRule",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Deactivate a policy rule",
"tags": [
"AuthorizationServerRules"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys": {
"get": {
"description": "Lists all the public keys used by the custom authorization server",
"operationId": "listOAuth2ResourceServerJsonWebKeys",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListOAuth2ResourceServerJsonWebKeys": {
"$ref": "#/components/examples/ListOAuth2ResourceServerJsonWebKeys"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/OAuth2ResourceServerJsonWebKey"
},
"type": "array"
}
}
},
"description": "Success"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "List all Custom Authorization Server Public JSON Web Keys",
"tags": [
"OAuth2ResourceServerCredentialsKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
}
],
"post": {
"description": "Adds a new JSON Web Key to the custom authorization server`s JSON web keys.\n> **Note:** This API doesn't allow you to add a key if the existing key doesn't have a `kid`. Use the [Replace an Authorization Server](/openapi/okta-management/management/authorizationserver/replaceauthorizationserver) operation to update the JWKS or [Delete a Custom Authorization Server Public JSON Web Key](/openapi/okta-management/management/oauth2resourceservercredentialskeys/deleteoauth2resourceserverjsonwebkey) and re-add the key with a `kid`.\n> **Note:** This API doesn't allow you to add a key with an ACTIVE status. You need to add an INACTIVE key first, and then ACTIVATE the key.",
"operationId": "addOAuth2ResourceServerJsonWebKey",
"requestBody": {
"content": {
"application/json": {
"examples": {
"addOAuth2ResourceServerJsonWebKeyRequestBody": {
"$ref": "#/components/examples/AddOAuth2ResourceServerJsonWebKeyRequest"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2ResourceServerJsonWebKeyRequestBody"
}
}
},
"required": true
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"getOAuth2ResourceServerKey": {
"$ref": "#/components/examples/OAuth2ResourceServerJsonWebKey"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2ResourceServerJsonWebKey"
}
}
},
"description": "Created"
},
"400": {
"content": {
"application/json": {
"examples": {
"ErrorJsonWebKeyCannotAddActiveKey": {
"$ref": "#/components/examples/ErrorJsonWebKeyCannotAddActiveKey"
},
"ErrorJsonWebKeyKidLengthTooShort": {
"$ref": "#/components/examples/ErrorJsonWebKeyKidLengthTooShort"
},
"ErrorJsonWebKeyNonUniqueKid": {
"$ref": "#/components/examples/ErrorJsonWebKeyNonUniqueKid"
},
"ErrorJsonWebKeyTooManyKids": {
"$ref": "#/components/examples/ErrorJsonWebKeyTooManyKids"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Bad Request"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Add a JSON Web Key",
"tags": [
"OAuth2ResourceServerCredentialsKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}": {
"delete": {
"description": "Deletes a custom authorization server public JSON web key by key `id`. You can only delete an inactive key.",
"operationId": "deleteOAuth2ResourceServerJsonWebKey",
"responses": {
"204": {
"description": "No Content"
},
"400": {
"content": {
"application/json": {
"examples": {
"ErrorDeleteCustomAsActiveJsonWebKey": {
"$ref": "#/components/examples/ErrorDeleteCustomAsActiveJsonWebKey"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Bad Request"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Delete a Custom Authorization Server Public JSON Web Key",
"tags": [
"OAuth2ResourceServerCredentialsKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a custom authorization server public JSON web key by key `id`",
"operationId": "getOAuth2ResourceServerJsonWebKey",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"OAuthResourceServerJsonWebKeyResponseExample": {
"$ref": "#/components/examples/OAuth2ResourceServerJsonWebKey"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2ResourceServerJsonWebKey",
"type": "object"
}
}
},
"description": "OK"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "Retrieve a Custom Authorization Server Public JSON Web Key",
"tags": [
"OAuth2ResourceServerCredentialsKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/CustomAsPathJsonWebKeyId"
}
]
},
"/api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/CustomAsPathJsonWebKeyId"
}
],
"post": {
"description": "Activates a custom authorization server public JSON web key by key `id`.\n> **Note:** You can have only one active key at any given time for the authorization server. When you activate an inactive key, Okta automatically deactivates the current active key.",
"operationId": "activateOAuth2ResourceServerJsonWebKey",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"activateOAuth2ResourceServerJsonWebKeyResponse": {
"$ref": "#/components/examples/OAuth2ResourceServerJsonWebKey"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2ResourceServerJsonWebKey"
}
}
},
"description": "OK"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Activate a Custom Authorization Server Public JSON Web Key",
"tags": [
"OAuth2ResourceServerCredentialsKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/CustomAsPathJsonWebKeyId"
}
],
"post": {
"description": "Deactivates a custom authorization server public JSON web key by key `id`.\n> **Note:** Deactivating the active key isn't allowed if the authorization server has access token encryption enabled. You can activate another key, which makes the current key inactive.",
"operationId": "deactivateOAuth2ResourceServerJsonWebKey",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"deactivateOAuth2ResourceServerJsonWebKeyResponse": {
"$ref": "#/components/examples/OAuth2ResourceServerJsonWebKey"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2ResourceServerJsonWebKey"
}
}
},
"description": "OK"
},
"400": {
"content": {
"application/json": {
"examples": {
"ErrorDeactivateActiveKey": {
"$ref": "#/components/examples/ErrorDeactivateActiveKey"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Bad Request"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Deactivate a Custom Authorization Server Public JSON Web Key",
"tags": [
"OAuth2ResourceServerCredentialsKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/scopes": {
"get": {
"description": "Lists all custom token scopes",
"operationId": "listOAuth2Scopes",
"parameters": [
{
"description": "Searches the `name` of Custom Token Scopes for matching values",
"in": "query",
"name": "q",
"schema": {
"type": "string"
}
},
{
"description": "Filter expression for Custom Token Scopes",
"in": "query",
"name": "filter",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the pagination cursor for the next page of scopes.\nTreat the after cursor as an opaque value and obtain it through the next link relationship. See [Pagination](https://developer.okta.com/docs/api/#pagination).",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the number of objects to return per page.\nIf there are multiple pages of results, the Link header contains a `next` link that you need to use as an opaque value (follow it, don't parse it). See [Pagination](https://developer.okta.com/docs/api/#pagination).",
"in": "query",
"name": "limit",
"schema": {
"maximum": 200,
"type": "integer"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ExampleScopes": {
"$ref": "#/components/examples/ExampleOAuth2Scopes"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/OAuth2Scope"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "List all custom token scopes",
"tags": [
"AuthorizationServerScopes"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
}
],
"post": {
"description": "Creates a custom token scope",
"operationId": "createOAuth2Scope",
"requestBody": {
"content": {
"application/json": {
"examples": {
"CreateOAuth2ScopeRequest": {
"$ref": "#/components/examples/CreateOAuth2ScopeRequest"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2Scope"
}
}
},
"required": true
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"ExampleOAuth2Scope": {
"$ref": "#/components/examples/ExampleOAuth2Scope"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2Scope"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Create a custom token scope",
"tags": [
"AuthorizationServerScopes"
],
"x-codegen-request-body-name": "oAuth2Scope",
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/authorizationServers/{authServerId}/scopes/{scopeId}": {
"delete": {
"description": "Deletes a custom token scope",
"operationId": "deleteOAuth2Scope",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Delete a custom token scope",
"tags": [
"AuthorizationServerScopes"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a custom token scope",
"operationId": "getOAuth2Scope",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ExampleOAuth2Scope": {
"$ref": "#/components/examples/ExampleOAuth2Scope"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2Scope"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.read"
]
}
],
"summary": "Retrieve a custom token scope",
"tags": [
"AuthorizationServerScopes"
],
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAuthServerId"
},
{
"$ref": "#/components/parameters/pathScopeId"
}
],
"put": {
"description": "Replaces a custom token scope",
"operationId": "replaceOAuth2Scope",
"requestBody": {
"content": {
"application/json": {
"examples": {
"UpdateOAuth2Scope": {
"$ref": "#/components/examples/UpdateOAuth2ScopeRequest"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2Scope"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"UpdatedOAuth2Scope": {
"$ref": "#/components/examples/UpdatedOAuth2ScopeResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OAuth2Scope"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.authorizationServers.manage"
]
}
],
"summary": "Replace a custom token scope",
"tags": [
"AuthorizationServerScopes"
],
"x-codegen-request-body-name": "oAuth2Scope",
"x-okta-lifecycle": {
"SKUs": [
"API Access Management"
],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/behaviors": {
"get": {
"description": "Lists all behavior detection rules with pagination support",
"operationId": "listBehaviorDetectionRules",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"items": {
"$ref": "#/components/schemas/BehaviorRule"
},
"type": "array"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.behaviors.read"
]
}
],
"summary": "List all behavior detection rules",
"tags": [
"Behavior"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a new behavior detection rule",
"operationId": "createBehaviorDetectionRule",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Behavior Rule Request": {
"$ref": "#/components/examples/BehaviorRuleRequest"
}
},
"schema": {
"$ref": "#/components/schemas/BehaviorRule"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Behavior Rule Response": {
"$ref": "#/components/examples/BehaviorRuleResponse"
}
},
"schema": {
"$ref": "#/components/schemas/BehaviorRule"
}
}
},
"description": "Created"
},
"400": {
"content": {
"application/json": {
"examples": {
"API Validation Failed": {
"$ref": "#/components/examples/ErrorApiValidationFailed"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Bad Request"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.behaviors.manage"
]
}
],
"summary": "Create a behavior detection rule",
"tags": [
"Behavior"
],
"x-codegen-request-body-name": "rule",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/behaviors/{behaviorId}": {
"delete": {
"description": "Deletes a Behavior Detection Rule by `behaviorId`",
"operationId": "deleteBehaviorDetectionRule",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"content": {
"application/json": {
"examples": {
"Resource Not Found": {
"$ref": "#/components/examples/ErrorResourceNotFound"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Not Found"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.behaviors.manage"
]
}
],
"summary": "Delete a behavior detection rule",
"tags": [
"Behavior"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a Behavior Detection Rule by `behaviorId`",
"operationId": "getBehaviorDetectionRule",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Behavior Rule Response": {
"$ref": "#/components/examples/BehaviorRuleResponse"
}
},
"schema": {
"$ref": "#/components/schemas/BehaviorRule"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"content": {
"application/json": {
"examples": {
"Resource Not Found": {
"$ref": "#/components/examples/ErrorResourceNotFound"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Not Found"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.behaviors.read"
]
}
],
"summary": "Retrieve a behavior detection rule",
"tags": [
"Behavior"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBehaviorId"
}
],
"put": {
"description": "Replaces a Behavior Detection Rule by `behaviorId`",
"operationId": "replaceBehaviorDetectionRule",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Behavior Rule Request": {
"$ref": "#/components/examples/BehaviorRuleRequest"
}
},
"schema": {
"$ref": "#/components/schemas/BehaviorRule"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Behavior Rule Response": {
"$ref": "#/components/examples/BehaviorRuleResponse"
}
},
"schema": {
"$ref": "#/components/schemas/BehaviorRule"
}
}
},
"description": "Created"
},
"400": {
"content": {
"application/json": {
"examples": {
"API Validation Failed": {
"$ref": "#/components/examples/ErrorApiValidationFailed"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Bad Request"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"content": {
"application/json": {
"examples": {
"Resource Not Found": {
"$ref": "#/components/examples/ErrorResourceNotFound"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Not Found"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.behaviors.manage"
]
}
],
"summary": "Replace a behavior detection rule",
"tags": [
"Behavior"
],
"x-codegen-request-body-name": "rule",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/behaviors/{behaviorId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathBehaviorId"
}
],
"post": {
"description": "Activates a behavior detection rule",
"operationId": "activateBehaviorDetectionRule",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Behavior Rule Response": {
"$ref": "#/components/examples/BehaviorRuleResponse"
}
},
"schema": {
"$ref": "#/components/schemas/BehaviorRule"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.behaviors.manage"
]
}
],
"summary": "Activate a behavior detection rule",
"tags": [
"Behavior"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/behaviors/{behaviorId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathBehaviorId"
}
],
"post": {
"description": "Deactivates a behavior detection rule",
"operationId": "deactivateBehaviorDetectionRule",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Behavior Rule Response": {
"$ref": "#/components/examples/BehaviorRuleResponse"
}
},
"schema": {
"$ref": "#/components/schemas/BehaviorRule"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.behaviors.manage"
]
}
],
"summary": "Deactivate a behavior detection rule",
"tags": [
"Behavior"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/bot-protection/configuration": {
"get": {
"description": "Retrieves the bot protection configuration for your org",
"operationId": "getBotProtectionConfiguration",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Default": {
"$ref": "#/components/examples/BotProtectionConfigurationDefault"
},
"Enforced": {
"$ref": "#/components/examples/BotProtectionConfigurationEnforced"
}
},
"schema": {
"$ref": "#/components/schemas/BotProtectionConfiguration"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.botProtection.read"
]
}
],
"summary": "Retrieve the bot protection configuration",
"tags": [
"BotProtection"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"post": {
"description": "Updates the bot protection configuration for your org",
"operationId": "updateBotProtectionConfiguration",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Enforced": {
"$ref": "#/components/examples/BotProtectionConfigurationRequestEnforced"
},
"LogOnly": {
"$ref": "#/components/examples/BotProtectionConfigurationRequestLogOnly"
}
},
"schema": {
"$ref": "#/components/schemas/BotProtectionConfiguration"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Enforced": {
"$ref": "#/components/examples/BotProtectionConfigurationEnforced"
},
"LogOnly": {
"$ref": "#/components/examples/BotProtectionConfigurationDefault"
}
},
"schema": {
"$ref": "#/components/schemas/BotProtectionConfiguration"
}
}
},
"description": "OK"
},
"400": {
"content": {
"application/json": {
"examples": {
"ApiValidationFailed": {
"$ref": "#/components/examples/ErrorApiValidationFailed"
},
"EnforcementTypeRequired": {
"$ref": "#/components/examples/ErrorBotProtectionEnforcementTypeRequired"
},
"LevelRequired": {
"$ref": "#/components/examples/ErrorBotProtectionLevelRequired"
},
"ModeRequired": {
"$ref": "#/components/examples/ErrorBotProtectionModeRequired"
},
"SupportedFlowsRequired": {
"$ref": "#/components/examples/ErrorBotProtectionSupportedFlowsRequired"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Bad Request"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.botProtection.manage"
]
}
],
"summary": "Update the bot protection configuration",
"tags": [
"BotProtection"
],
"x-codegen-request-body-name": "botProtectionConfiguration",
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/brands": {
"get": {
"description": "Lists all the brands in your org",
"operationId": "listBrands",
"parameters": [
{
"$ref": "#/components/parameters/queryExpandBrand"
},
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
},
{
"$ref": "#/components/parameters/queryFilter"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Get brands response": {
"$ref": "#/components/examples/ListBrandsResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/BrandWithEmbedded"
},
"type": "array"
}
}
},
"description": "Successfully returned the list of brands"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "List all brands",
"tags": [
"Brands"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a new brand in your org",
"operationId": "createBrand",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Create brand request": {
"$ref": "#/components/examples/CreateBrandRequest"
}
},
"schema": {
"$ref": "#/components/schemas/CreateBrandRequest"
}
}
}
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"Create brand response": {
"$ref": "#/components/examples/CreateBrandResponse"
}
},
"schema": {
"$ref": "#/components/schemas/Brand"
}
}
},
"description": "Successfully created the brand"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"409": {
"content": {
"application/json": {
"examples": {
"Cannot create brand with the same name": {
"$ref": "#/components/examples/ErrorCreateBrandExists"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Could not create the new brand because same name already exist."
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.manage"
]
}
],
"summary": "Create a brand",
"tags": [
"Brands"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/brands/{brandId}": {
"delete": {
"description": "Deletes a brand by `brandId`",
"operationId": "deleteBrand",
"responses": {
"204": {
"description": "Successfully deleted the brand."
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"409": {
"content": {
"application/json": {
"examples": {
"Cannot delete brand associated with a domain": {
"$ref": "#/components/examples/ErrorDeleteBrandAssociatedWithDomain"
},
"Cannot delete default brand": {
"$ref": "#/components/examples/ErrorDeleteDefaultBrand"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Conflict"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.manage"
]
}
],
"summary": "Delete a brand",
"tags": [
"Brands"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a brand by `brandId`",
"operationId": "getBrand",
"parameters": [
{
"$ref": "#/components/parameters/queryExpandBrand"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Get brand response": {
"$ref": "#/components/examples/GetBrandResponse"
}
},
"schema": {
"$ref": "#/components/schemas/BrandWithEmbedded"
}
}
},
"description": "Successfully retrieved the brand"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "Retrieve a brand",
"tags": [
"Brands"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
}
],
"put": {
"description": "Replaces a brand by `brandId`\n\nPassing an invalid `brandId` returns a `404 Not Found` status code with the error code `E0000007`.\n\nNot providing `agreeToCustomPrivacyPolicy` with `customPrivacyPolicyUrl` returns a `400 Bad Request` status code with the error code `E0000001`.\n\n",
"operationId": "replaceBrand",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Update brand request": {
"$ref": "#/components/examples/UpdateBrandRequest"
}
},
"schema": {
"$ref": "#/components/schemas/BrandRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Update brand response": {
"$ref": "#/components/examples/UpdateBrandResponse"
}
},
"schema": {
"$ref": "#/components/schemas/Brand"
}
}
},
"description": "Successfully replaced the brand"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.manage"
]
}
],
"summary": "Replace a brand",
"tags": [
"Brands"
],
"x-codegen-request-body-name": "brand",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/brands/{brandId}/domains": {
"get": {
"description": "Lists all domains associated with a brand by `brandId`",
"operationId": "listBrandDomains",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/BrandDomains"
}
}
},
"description": "Successfully returned the list of domains for the brand"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "List all domains associated with a brand",
"tags": [
"Brands"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
}
]
},
"/api/v1/brands/{brandId}/pages/error": {
"get": {
"description": "Retrieves the error page sub-resources. The `expand` query parameter specifies which sub-resources to include in the response.",
"operationId": "getErrorPage",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/PageRoot"
}
}
},
"description": "Successfully retrieved the error page."
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "Retrieve the error page sub-resources",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
},
{
"$ref": "#/components/parameters/queryExpandPageRoot"
}
]
},
"/api/v1/brands/{brandId}/pages/error/customized": {
"delete": {
"description": "Deletes the customized error page. As a result, the default error page appears in your live environment.",
"operationId": "deleteCustomizedErrorPage",
"responses": {
"204": {
"content": {},
"description": "Successfully deleted the customized error page."
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.manage"
]
}
],
"summary": "Delete the customized error page",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves the customized error page. The customized error page appears in your live environment.",
"operationId": "getCustomizedErrorPage",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ErrorPage"
}
}
},
"description": "Successfully retrieved the customized error page.",
"headers": {
"Location": {
"schema": {
"format": "uri",
"type": "string"
}
}
}
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "Retrieve the customized error page",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
}
],
"put": {
"description": "Replaces the customized error page. The customized error page appears in your live environment.",
"operationId": "replaceCustomizedErrorPage",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ErrorPage"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ErrorPage"
}
}
},
"description": "Successfully replaced the customized error page.",
"headers": {
"Location": {
"schema": {
"format": "uri",
"type": "string"
}
}
}
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.manage"
]
}
],
"summary": "Replace the customized error page",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/brands/{brandId}/pages/error/default": {
"get": {
"description": "Retrieves the default error page. The default error page appears when no customized error page exists.",
"operationId": "getDefaultErrorPage",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ErrorPage"
}
}
},
"description": "Successfully retrieved the default error page."
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "Retrieve the default error page",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
}
]
},
"/api/v1/brands/{brandId}/pages/error/preview": {
"delete": {
"description": "Deletes the preview error page. The preview error page contains unpublished changes and isn't shown in your live environment. Preview it at `${yourOktaDomain}/error/preview`.",
"operationId": "deletePreviewErrorPage",
"responses": {
"204": {
"content": {},
"description": "Successfully deleted the preview error page."
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.manage"
]
}
],
"summary": "Delete the preview error page",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves the preview error page. The preview error page contains unpublished changes and isn't shown in your live environment. Preview it at `${yourOktaDomain}/error/preview`.",
"operationId": "getPreviewErrorPage",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ErrorPage"
}
}
},
"description": "Successfully retrieved the preview error page.",
"headers": {
"Location": {
"schema": {
"format": "uri",
"type": "string"
}
}
}
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "Retrieve the preview error page preview",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
}
],
"put": {
"description": "Replaces the preview error page. The preview error page contains unpublished changes and isn't shown in your live environment. Preview it at `${yourOktaDomain}/error/preview`.",
"operationId": "replacePreviewErrorPage",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ErrorPage"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ErrorPage"
}
}
},
"description": "Successfully replaced the preview error page.",
"headers": {
"Location": {
"schema": {
"format": "uri",
"type": "string"
}
}
}
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.manage"
]
}
],
"summary": "Replace the preview error page",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/brands/{brandId}/pages/sign-in": {
"get": {
"description": "Retrieves the sign-in page sub-resources. The `expand` query parameter specifies which sub-resources to include in the response.",
"operationId": "getSignInPage",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/PageRoot"
}
}
},
"description": "Successfully retrieved the sign-in page."
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "Retrieve the sign-in page sub-resources",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
},
{
"$ref": "#/components/parameters/queryExpandPageRoot"
}
]
},
"/api/v1/brands/{brandId}/pages/sign-in/customized": {
"delete": {
"description": "Deletes the customized sign-in page. As a result, the default sign-in page appears in your live environment.",
"operationId": "deleteCustomizedSignInPage",
"responses": {
"204": {
"content": {},
"description": "Successfully deleted the sign-in page."
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.manage"
]
}
],
"summary": "Delete the customized sign-in page",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves the customized sign-in page. The customized sign-in page appears in your live environment.",
"operationId": "getCustomizedSignInPage",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/SignInPage"
}
}
},
"description": "Successfully retrieved the customized sign-in page.",
"headers": {
"Location": {
"schema": {
"format": "uri",
"type": "string"
}
}
}
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "Retrieve the customized sign-in page",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
}
],
"put": {
"description": "Replaces the customized sign-in page. The customized sign-in page appears in your live environment.",
"operationId": "replaceCustomizedSignInPage",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/SignInPage"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/SignInPage"
}
}
},
"description": "Successfully replaced the customized sign-in page.",
"headers": {
"Location": {
"schema": {
"format": "uri",
"type": "string"
}
}
}
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.manage"
]
}
],
"summary": "Replace the customized sign-in page",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/brands/{brandId}/pages/sign-in/default": {
"get": {
"description": "Retrieves the default sign-in page. The default sign-in page appears when no customized sign-in page exists.",
"operationId": "getDefaultSignInPage",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/SignInPage"
}
}
},
"description": "Successfully retrieved the default sign-in page."
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "Retrieve the default sign-in page",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
}
]
},
"/api/v1/brands/{brandId}/pages/sign-in/preview": {
"delete": {
"description": "Deletes the preview sign-in page. The preview sign-in page contains unpublished changes and isn't shown in your live environment. Preview it at `${yourOktaDomain}/login/preview`.",
"operationId": "deletePreviewSignInPage",
"responses": {
"204": {
"content": {},
"description": "Successfully deleted the preview sign-in page."
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.manage"
]
}
],
"summary": "Delete the preview sign-in page",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves the preview sign-in page. The preview sign-in page contains unpublished changes and isn't shown in your live environment. Preview it at `${yourOktaDomain}/login/preview`.",
"operationId": "getPreviewSignInPage",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/SignInPage"
}
}
},
"description": "Successfully retrieved the preview sign-in page.",
"headers": {
"Location": {
"schema": {
"format": "uri",
"type": "string"
}
}
}
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "Retrieve the preview sign-in page preview",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
}
],
"put": {
"description": "Replaces the preview sign-in page. The preview sign-in page contains unpublished changes and isn't shown in your live environment. Preview it at `${yourOktaDomain}/login/preview`.",
"operationId": "replacePreviewSignInPage",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/SignInPage"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/SignInPage"
}
}
},
"description": "Successfully replaced the preview sign-in page.",
"headers": {
"Location": {
"schema": {
"format": "uri",
"type": "string"
}
}
}
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.manage"
]
}
],
"summary": "Replace the preview sign-in page",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/brands/{brandId}/pages/sign-in/widget-versions": {
"get": {
"description": "Lists all sign-in widget versions supported by the current org",
"operationId": "listAllSignInWidgetVersions",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"items": {
"pattern": "^\\d+\\.\\d+$",
"type": "string"
},
"type": "array"
}
}
},
"description": "Successfully listed the sign-in widget versions."
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "List all Sign-In Widget versions",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
}
]
},
"/api/v1/brands/{brandId}/pages/sign-out/customized": {
"get": {
"description": "Retrieves the sign-out page settings",
"operationId": "getSignOutPageSettings",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/HostedPage"
}
}
},
"description": "Successfully retrieved the sign-out page settings."
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.read"
]
}
],
"summary": "Retrieve the sign-out page settings",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
}
],
"put": {
"description": "Replaces the sign-out page settings",
"operationId": "replaceSignOutPageSettings",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/HostedPage"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/HostedPage"
}
}
},
"description": "Successfully replaced the sign-out page settings."
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.brands.manage"
]
}
],
"summary": "Replace the sign-out page settings",
"tags": [
"CustomPages"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/brands/{brandId}/templates/email": {
"get": {
"description": "Lists all supported email templates",
"operationId": "listEmailTemplates",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
},
{
"$ref": "#/components/parameters/queryExpandEmailTemplate"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"List email templates response": {
"$ref": "#/components/examples/ListEmailTemplateResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/EmailTemplateResponse"
},
"type": "array"
}
}
},
"description": "Successfully returned the list of email templates.",
"headers": {
"Link": {
"description": "The pagination header containing links to the current and next page of results. See [Pagination](/#pagination) for more information.",
"schema": {
"type": "string"
}
}
}
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.templates.read"
]
}
],
"summary": "List all email templates",
"tags": [
"CustomTemplates"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
}
]
},
"/api/v1/brands/{brandId}/templates/email/{templateName}": {
"get": {
"description": "Retrieves the details of an email template by name",
"operationId": "getEmailTemplate",
"parameters": [
{
"$ref": "#/components/parameters/queryExpandEmailTemplate"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Get email template response": {
"$ref": "#/components/examples/GetEmailTemplateResponse"
}
},
"schema": {
"$ref": "#/components/schemas/EmailTemplateResponse"
}
}
},
"description": "Successfully retrieved the email template."
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.templates.read"
]
}
],
"summary": "Retrieve an email template",
"tags": [
"CustomTemplates"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathBrandId"
},
{
"$ref": "#/components/parameters/pathTemplateName"
}
]
},
"/api/v1/brands/{brandId}/templates/email/{templateName}/customizations": {
"delete": {
"description": "Deletes all customizations for an email template\n\n
",
"operationId": "updateFeatureLifecycle",
"parameters": [
{
"description": "Indicates if you want to force enable or disable a feature. Supported value is `force`.",
"in": "query",
"name": "mode",
"schema": {
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"FeaturesUpdate": {
"$ref": "#/components/examples/UpdateFeatureLifecycleResponse",
"summary": "Update the feature lifecycle status"
}
},
"schema": {
"$ref": "#/components/schemas/Feature"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.features.manage"
]
}
],
"summary": "Update a feature lifecycle",
"tags": [
"Feature"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/first-party-app-settings/{appName}": {
"get": {
"description": "Retrieves the settings for an Okta app (also known as an Okta first-party app)",
"operationId": "getFirstPartyAppSettings",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"exampleSettings": {
"$ref": "#/components/examples/AdminConsoleSettingsExample"
}
},
"schema": {
"$ref": "#/components/schemas/AdminConsoleSettings"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.apps.read"
]
}
],
"summary": "Retrieve the Okta application settings",
"tags": [
"OktaApplicationSettings"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathFirstPartyAppName"
}
],
"put": {
"description": "Replaces the settings for an Okta app (also known as an Okta first-party app)",
"operationId": "replaceFirstPartyAppSettings",
"requestBody": {
"content": {
"application/json": {
"examples": {
"exampleSettings": {
"$ref": "#/components/examples/AdminConsoleSettingsExample"
}
},
"schema": {
"$ref": "#/components/schemas/AdminConsoleSettings"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"exampleSettings": {
"$ref": "#/components/examples/AdminConsoleSettingsExample"
}
},
"schema": {
"$ref": "#/components/schemas/AdminConsoleSettings"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.apps.manage"
]
}
],
"summary": "Replace the Okta application settings",
"tags": [
"OktaApplicationSettings"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups": {
"get": {
"description": "Lists all groups with pagination support.\n\n> **Note:** To list all groups belonging to a member, use the [List all groups endpoint in the User Resources API](/openapi/okta-management/management/tags/userresources/other/listusergroups).\n\nThe number of groups returned depends on the specified [`limit`](/openapi/okta-management/management/group/listgroups#group/listgroups/t=request&in=query&path=limit), if you have a search, filter, and/or query parameter set, and if that parameter is not null. We recommend using a limit less than or equal to 200.\n\nA subset of groups can be returned that match a supported filter expression, query, or search criteria.\n\n> **Note:** The `search` parameter results are sourced from an eventually consistent datasource and may not reflect the latest information.",
"operationId": "listGroups",
"parameters": [
{
"description": "Searches for groups with a supported [filtering](https://developer.okta.com/docs/api/#filter) expression for all properties except for `_embedded`, `_links`, and `objectClass`. Okta recommends this query parameter because it provides the largest range of search options and optimal performance.\n\nThis operation supports [pagination](https://developer.okta.com/docs/api/#pagination).\n\nThe `search` string requires [URL encoding](https://developer.mozilla.org/en-US/docs/Glossary/Percent-encoding). For example, `search=type eq \"OKTA_GROUP\"` is encoded as `search=type+eq+%22OKTA_GROUP%22`.\n\nThis operation searches many properties:\n\n* Any group profile attribute, including imported app group profile attributes.\n* The top-level properties: `id`, `created`, `lastMembershipUpdated`, `lastUpdated`, and `type`.\n* The [source](/openapi/okta-management/management/group/listgroups#group/listgroups/t=response&c=200&path=_links/source) of groups with type of `APP_GROUP`, accessed as `source.id`.\n\nYou can also use the `sortBy` and `sortOrder` parameters.\n\nSearches for groups can be filtered by the following operators: `sw`, `eq`, and `co`. You can only use `co` with these select profile attributes: `profile.name` and `profile.description`. See [Operators](https://developer.okta.com/docs/api/#operators).",
"examples": {
"searchById": {
"description": "Search for groups with the specified ID (00gak46y5hydV6NdM0g4)",
"summary": "Search by ID",
"value": "id eq \"00gak46y5hydV6NdM0g4\""
},
"searchByIdTypeAndCreationDate": {
"description": "List groups of type APP_GROUP that were created before 01/01/2014 and whose source app has the ID 0oa2v0el0gP90aqjJ0g7",
"summary": "Search with multiple criteria",
"value": "type eq \"APP_GROUP\" and (created lt \"2014-01-01T00:00:00.000Z\" and source.id eq \"0oa2v0el0gP90aqjJ0g7\")"
},
"searchByLastMembershipUpdatedAfterDate": {
"description": "Search for groups whose memberships were last updated after 01/01/2024",
"summary": "Search by last updated membership timestamp",
"value": "lastMembershipUpdated gt \"2024-01-01T00:00:00.000Z\""
},
"searchByProfileName": {
"description": "Search for groups that have a group profile name of West Coast users",
"summary": "Search by name",
"value": "profile.name eq \"West Coast users\""
},
"searchBySamAccountName": {
"description": "Search for groups whose samAccountName profile attribute starts with \"West Coast\"",
"summary": "Search using an operator",
"value": "profile.samAccountName sw \"West Coast\""
},
"searchBySourceId": {
"description": "Search for groups that have the source app with the specified source ID (0oa2v0el0gP90aqjJ0g7)",
"summary": "Search by source ID",
"value": "source.id eq \"0oa2v0el0gP90aqjJ0g7\""
},
"searchByType": {
"description": "Search for groups that have a type of APP_GROUP",
"summary": "Search by type",
"value": "type eq \"APP_GROUP\""
}
},
"in": "query",
"name": "search",
"schema": {
"type": "string"
}
},
{
"description": "Filter expression for groups. See [Filter](https://developer.okta.com/docs/api/#filter).\n\nFiltering supports the following limited number of properties: `id`, `type`, `lastUpdated`, and `lastMembershipUpdated`.\n\n> **Note:** All filters must be [URL encoded](https://developer.mozilla.org/en-US/docs/Glossary/Percent-encoding). For example, `filter=lastUpdated gt \"2013-06-01T00:00:00.000Z\"` is encoded as `filter=lastUpdated%20gt%20%222013-06-01T00:00:00.000Z%22`. See [Special characters](https://developer.okta.com/docs/api/#special-characters).",
"examples": {
"filterById": {
"description": "Filter group with a specific ID (00g1emaKYZTWRYYRRTSK)",
"summary": "Filter by ID",
"value": "id eq \"00g1emaKYZTWRYYRRTSK\""
},
"filterByType": {
"description": "Filter groups that are of the type OKTA_GROUP",
"summary": "Filter by type",
"value": "type eq \"OKTA_GROUP\""
},
"filterByTypeAndProfileLastUpdatedAfterDate": {
"description": "Filter groups that are OKTA_GROUP type with profile updated after 11/11/2016",
"summary": "Filter by type and last updated date",
"value": "type eq \"OKTA_GROUP\" and lastUpdated gt \"2016-11-11T00:00:00.000Z\""
},
"filterByTypeAndProfileOrMembershipUpdatedBeforeDate": {
"description": "Filter groups that are OKTA_GROUP type, with profiles or memberships updated before 11/11/2015",
"summary": "Filter by multiple criteria",
"value": "type eq \"OKTA_GROUP\" and (lastUpdated lt \"2015-11-11T00:00:00.000Z\" or lastMembershipUpdated lt \"2015-11-11T00:00:00.000Z\")"
}
},
"in": "query",
"name": "filter",
"schema": {
"type": "string"
}
},
{
"description": "Finds a group that matches the `name` property.\n> **Note:** Paging and searching are currently mutually exclusive. You can't page a query. The default limit for a query is 300 results. Query is intended for an auto-complete picker use case where users refine their search string to constrain the results.",
"in": "query",
"name": "q",
"schema": {
"example": "West&limit=10",
"type": "string"
}
},
{
"description": "Specifies the pagination cursor for the next page of groups. The `after` cursor should be treated as an opaque value and obtained through the next link relation. See [Pagination](https://developer.okta.com/docs/api/#pagination).",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the number of group results in a page.\n\nOkta recommends using a specific value other than the default or maximum. If your request times out, retry your request with a smaller `limit` and [page the results](https://developer.okta.com/docs/api/#pagination).\n\nThe Okta default `Everyone` group isn't returned for users with a group admin role.",
"in": "query",
"name": "limit",
"schema": {
"format": "int32",
"maximum": 10000,
"type": "integer"
}
},
{
"description": "If specified, additional metadata is included in the response. Possible values are `stats` and `app`. This additional metadata is listed in the [`_embedded`](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/Group/#tag/Group/operation/addGroup!c=200&path=_embedded&t=response) property of the response.\n\n> **Note:** You can use the `stats` value to return the number of users within a group. This is listed as the `_embedded.stats.usersCount` value in the response. See this [Knowledge Base article](https://support.okta.com/help/s/article/Is-there-an-API-that-returns-the-number-of-users-in-a-group?language=en_US) for more information and an example.",
"in": "query",
"name": "expand",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the field to sort by (for search queries only). `sortBy` can be any single property, for example `sortBy=profile.name`. Groups with the same value for the `sortBy` property are ordered by `id`'. Use with `sortOrder` to control the order of results.",
"in": "query",
"name": "sortBy",
"schema": {
"example": "lastUpdated",
"type": "string"
}
},
{
"$ref": "#/components/parameters/querySortOrder"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListGroupsExample": {
"$ref": "#/components/examples/list-groups-examples"
},
"ListGroupsFilterExample": {
"$ref": "#/components/examples/list-groups-filter"
},
"ListGroupsSearchExample": {
"$ref": "#/components/examples/list-groups-search"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/Group"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.read"
]
}
],
"summary": "List all groups",
"tags": [
"Group"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Adds a new group with the `OKTA_GROUP` type to your org.\n> **Note:** App import operations are responsible for syncing groups with `APP_GROUP` type such as Active Directory groups. See\n[About groups](https://help.okta.com/okta_help.htm?id=Directory_Groups) in the help documentation.",
"operationId": "addGroup",
"requestBody": {
"content": {
"application/json": {
"schema": {
"properties": {
"profile": {
"$ref": "#/components/schemas/OktaUserGroupProfile"
}
}
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GroupExample": {
"$ref": "#/components/examples/group-example"
}
},
"schema": {
"$ref": "#/components/schemas/Group"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.manage"
]
}
],
"summary": "Add a group",
"tags": [
"Group"
],
"x-codegen-request-body-name": "group",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups/rules": {
"get": {
"description": "Lists all group rules for your org",
"operationId": "listGroupRules",
"parameters": [
{
"description": "Specifies the number of rule results in a page",
"in": "query",
"name": "limit",
"schema": {
"default": 50,
"format": "int32",
"maximum": 200,
"minimum": 1,
"type": "integer"
}
},
{
"description": "Specifies the pagination cursor for the next page of rules",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the keyword to search rules for",
"in": "query",
"name": "search",
"schema": {
"type": "string"
}
},
{
"$ref": "#/components/parameters/queryExpandGroupIdToGroupNameMap"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListGroupRulesExample": {
"$ref": "#/components/examples/list-group-rules-example"
},
"ListGroupRulesExampleWithExpand": {
"$ref": "#/components/examples/list-group-rules-with-expand-parameter"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/GroupRule"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.read"
]
}
],
"summary": "List all group rules",
"tags": [
"GroupRule"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a group rule to dynamically add users to the specified group if they match the condition.\n> **Note:** Group rules are created with the status set to `'INACTIVE'`.",
"operationId": "createGroupRule",
"requestBody": {
"content": {
"application/json": {
"examples": {
"GroupRuleExample": {
"$ref": "#/components/examples/create-group-rule-request-example"
}
},
"schema": {
"$ref": "#/components/schemas/CreateGroupRuleRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GroupRuleExample": {
"$ref": "#/components/examples/group-rule-example"
}
},
"schema": {
"$ref": "#/components/schemas/GroupRule"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.manage"
]
}
],
"summary": "Create a group rule",
"tags": [
"GroupRule"
],
"x-codegen-request-body-name": "groupRule",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups/rules/{groupRuleId}": {
"delete": {
"description": "Deletes a specific group rule by `groupRuleId`",
"operationId": "deleteGroupRule",
"parameters": [
{
"description": "If set to `true`, removes users from groups assigned by this rule",
"in": "query",
"name": "removeUsers",
"schema": {
"default": false,
"type": "boolean"
}
}
],
"responses": {
"202": {
"content": {},
"description": "Accepted"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.manage"
]
}
],
"summary": "Delete a group rule",
"tags": [
"GroupRule"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a specific group rule by ID from your org",
"operationId": "getGroupRule",
"parameters": [
{
"$ref": "#/components/parameters/queryExpandGroupIdToGroupNameMap"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GroupRuleExample": {
"$ref": "#/components/examples/group-rule-example"
}
},
"schema": {
"$ref": "#/components/schemas/GroupRule"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.read"
]
}
],
"summary": "Retrieve a group rule",
"tags": [
"GroupRule"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupRuleId"
}
],
"put": {
"description": "Replaces a group rule\n> **Notes:** You can only update rules with a group whose status is set to `INACTIVE`.\n>\n> You currently can't update the `actions` section.",
"operationId": "replaceGroupRule",
"requestBody": {
"content": {
"application/json": {
"examples": {
"GroupRuleExample": {
"$ref": "#/components/examples/group-rule-example"
}
},
"schema": {
"$ref": "#/components/schemas/GroupRule"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/GroupRule"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.manage"
]
}
],
"summary": "Replace a group rule",
"tags": [
"GroupRule"
],
"x-codegen-request-body-name": "groupRule",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups/rules/{groupRuleId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathGroupRuleId"
}
],
"post": {
"description": "Activates a specific group rule by ID from your org",
"operationId": "activateGroupRule",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.manage"
]
}
],
"summary": "Activate a group rule",
"tags": [
"GroupRule"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups/rules/{groupRuleId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathGroupRuleId"
}
],
"post": {
"description": "Deactivates a specific group rule by ID from your org",
"operationId": "deactivateGroupRule",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.manage"
]
}
],
"summary": "Deactivate a group rule",
"tags": [
"GroupRule"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups/{groupId}": {
"delete": {
"description": "Deletes a group of the `OKTA_GROUP` or `APP_GROUP` type from your org.\n> **Note:** You can't remove groups of type `APP_GROUP` if they are used in a group push mapping.",
"operationId": "deleteGroup",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.manage"
]
}
],
"summary": "Delete a group",
"tags": [
"Group"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a specific group by `id` from your org",
"operationId": "getGroup",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GroupExample": {
"$ref": "#/components/examples/group-example"
}
},
"schema": {
"$ref": "#/components/schemas/Group"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.read"
]
}
],
"summary": "Retrieve a group",
"tags": [
"Group"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
}
],
"put": {
"description": "Replaces the profile for a group of `OKTA_GROUP` type from your org.\n> **Note :** You only can modify profiles for groups of the `OKTA_GROUP` type.\n>\n> App imports are responsible for updating profiles for groups of the `APP_GROUP` type, such as Active Directory groups.",
"operationId": "replaceGroup",
"requestBody": {
"content": {
"application/json": {
"schema": {
"properties": {
"profile": {
"$ref": "#/components/schemas/OktaUserGroupProfile"
}
}
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GroupExample": {
"$ref": "#/components/examples/group-example"
}
},
"schema": {
"$ref": "#/components/schemas/Group"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.manage"
]
}
],
"summary": "Replace a group",
"tags": [
"Group"
],
"x-codegen-request-body-name": "group",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups/{groupId}/apps": {
"get": {
"description": "Lists all apps that are assigned to a group. See [Application Groups API](/openapi/okta-management/management/tags/applicationgroups/).",
"operationId": "listAssignedApplicationsForGroup",
"parameters": [
{
"description": "Specifies the pagination cursor for the next page of apps",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the number of app results for a page",
"in": "query",
"name": "limit",
"schema": {
"default": 20,
"format": "int32",
"type": "integer"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListAppsExample": {
"$ref": "#/components/examples/list-apps-example"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/Application"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.read"
]
}
],
"summary": "List all assigned apps",
"tags": [
"Group"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
}
]
},
"/api/v1/groups/{groupId}/owners": {
"get": {
"description": "Lists all owners for a specific group",
"operationId": "listGroupOwners",
"parameters": [
{
"description": "SCIM filter expression for group owners. Allows you to filter owners by type.",
"in": "query",
"name": "search",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the pagination cursor for the next page of owners",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the number of owner results in a page",
"in": "query",
"name": "limit",
"schema": {
"default": 1000,
"format": "int32",
"type": "integer"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListsMultipleOwnersOfaGroup": {
"$ref": "#/components/examples/ListsOwnersMultipleResponse"
},
"ListsOneOwnerOfaGroup": {
"$ref": "#/components/examples/ListsOwnerOneResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/GroupOwner"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.read"
]
}
],
"summary": "List all group owners",
"tags": [
"GroupOwner"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
}
],
"post": {
"description": "Assigns a group owner",
"operationId": "assignGroupOwner",
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
}
],
"requestBody": {
"content": {
"application/json": {
"examples": {
"AssignAGroupOwner": {
"$ref": "#/components/examples/AssignGroupOwnerRequest"
}
},
"schema": {
"$ref": "#/components/schemas/AssignGroupOwnerRequestBody"
}
}
},
"required": true
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"AssignAGroupOwner": {
"$ref": "#/components/examples/AssignGroupOwnerResponse"
}
},
"schema": {
"$ref": "#/components/schemas/GroupOwner"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.manage"
]
}
],
"summary": "Assign a group owner",
"tags": [
"GroupOwner"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups/{groupId}/owners/{ownerId}": {
"delete": {
"description": "Deletes a group owner from a specific group",
"operationId": "deleteGroupOwner",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.manage"
]
}
],
"summary": "Delete a group owner",
"tags": [
"GroupOwner"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
},
{
"$ref": "#/components/parameters/pathOwnerId"
}
]
},
"/api/v1/groups/{groupId}/roles": {
"get": {
"description": "Lists all assigned roles of a group by `groupId`",
"operationId": "listGroupAssignedRoles",
"parameters": [
{
"$ref": "#/components/parameters/pathQueryRoleExpand"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Custom roles": {
"$ref": "#/components/examples/CustomRolesListResponseGroup"
},
"IAM-Based standard roles": {
"$ref": "#/components/examples/IAMStandardRolesListResponseGroup"
},
"Standard roles": {
"$ref": "#/components/examples/StandardRolesListResponseGroup"
}
},
"schema": {
"description": "List of role assignments",
"items": {
"discriminator": {
"mapping": {
"ACCESS_CERTIFICATIONS_ADMIN": "#/components/schemas/CustomRole",
"ACCESS_REQUESTS_ADMIN": "#/components/schemas/CustomRole",
"API_ACCESS_MANAGEMENT_ADMIN": "#/components/schemas/StandardRole",
"APP_ADMIN": "#/components/schemas/StandardRole",
"CUSTOM": "#/components/schemas/CustomRole",
"GROUP_MEMBERSHIP_ADMIN": "#/components/schemas/StandardRole",
"HELP_DESK_ADMIN": "#/components/schemas/StandardRole",
"MOBILE_ADMIN": "#/components/schemas/StandardRole",
"ORG_ADMIN": "#/components/schemas/StandardRole",
"READ_ONLY_ADMIN": "#/components/schemas/StandardRole",
"REPORT_ADMIN": "#/components/schemas/StandardRole",
"SUPER_ADMIN": "#/components/schemas/StandardRole",
"USER_ADMIN": "#/components/schemas/StandardRole",
"WORKFLOWS_ADMIN": "#/components/schemas/CustomRole"
},
"propertyName": "type"
},
"oneOf": [
{
"$ref": "#/components/schemas/StandardRole"
},
{
"$ref": "#/components/schemas/CustomRole"
}
]
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all group role assignments",
"tags": [
"RoleAssignmentBGroup"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
}
],
"post": {
"description": "Assigns a [standard role](/openapi/okta-management/guides/roles/#standard-roles) to a group.\n\nYou can also assign a custom role to a group, but the preferred method to assign a custom role to a group is to create a binding between the custom role, the resource set, and the group. See [Create a role resource set binding](/openapi/okta-management/management/roledresourcesetbinding/createresourcesetbinding).\n\n> **Notes:**\n> * The request payload is different for standard and custom role assignments.\n> * For IAM-based standard role assignments, use the request payload for standard roles. However, the response payload for IAM-based role assignments is similar to the custom role's assignment response.",
"operationId": "assignRoleToGroup",
"parameters": [
{
"description": "Grants the group third-party admin status when set to `true`",
"in": "query",
"name": "disableNotifications",
"schema": {
"default": false,
"type": "boolean"
}
}
],
"requestBody": {
"content": {
"application/json": {
"schema": {
"discriminator": {
"mapping": {
"ACCESS_CERTIFICATIONS_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"ACCESS_REQUESTS_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"API_ACCESS_MANAGEMENT_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"APP_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"CUSTOM": "#/components/schemas/CustomRoleAssignmentSchema",
"GROUP_MEMBERSHIP_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"HELP_DESK_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"ORG_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"READ_ONLY_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"REPORT_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"SUPER_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"USER_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"WORKFLOWS_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema"
},
"propertyName": "type"
},
"oneOf": [
{
"$ref": "#/components/schemas/StandardRoleAssignmentSchema"
},
{
"$ref": "#/components/schemas/CustomRoleAssignmentSchema"
}
]
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Custom roles": {
"$ref": "#/components/examples/CreateCustomRoleResponseGroup"
},
"IAM-based standard roles": {
"$ref": "#/components/examples/CreateIAMStandardRoleResponseGroup"
},
"Standard roles": {
"$ref": "#/components/examples/CreateStandardRoleAssignmentResponseGroup"
}
},
"schema": {
"discriminator": {
"mapping": {
"ACCESS_CERTIFICATIONS_ADMIN": "#/components/schemas/CustomRole",
"ACCESS_REQUESTS_ADMIN": "#/components/schemas/CustomRole",
"API_ACCESS_MANAGEMENT_ADMIN": "#/components/schemas/StandardRole",
"APP_ADMIN": "#/components/schemas/StandardRole",
"CUSTOM": "#/components/schemas/CustomRole",
"GROUP_MEMBERSHIP_ADMIN": "#/components/schemas/StandardRole",
"HELP_DESK_ADMIN": "#/components/schemas/StandardRole",
"ORG_ADMIN": "#/components/schemas/StandardRole",
"READ_ONLY_ADMIN": "#/components/schemas/StandardRole",
"REPORT_ADMIN": "#/components/schemas/StandardRole",
"SUPER_ADMIN": "#/components/schemas/StandardRole",
"USER_ADMIN": "#/components/schemas/StandardRole",
"WORKFLOWS_ADMIN": "#/components/schemas/CustomRole"
},
"propertyName": "type"
},
"oneOf": [
{
"$ref": "#/components/schemas/StandardRole"
},
{
"$ref": "#/components/schemas/CustomRole"
}
]
}
}
},
"description": "Success"
},
"201": {
"content": {},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Assign a role to a group",
"tags": [
"RoleAssignmentBGroup"
],
"x-codegen-request-body-name": "assignRoleRequest",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups/{groupId}/roles/{roleAssignmentId}": {
"delete": {
"description": "Unassigns a role assignment (identified by `roleAssignmentId`) from a group (identified by the `groupId`)",
"operationId": "unassignRoleFromGroup",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Unassign a group role",
"tags": [
"RoleAssignmentBGroup"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a role assigned to a group (identified by the `groupId`). The `roleAssignmentId` is the unique identifier for either a standard role group assignment object or a custom role resource set binding object.",
"operationId": "getGroupAssignedRole",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Custom roles": {
"$ref": "#/components/examples/CreateCustomRoleResponseGroup"
},
"IAM-based standard roles": {
"$ref": "#/components/examples/CreateIAMStandardRoleResponseGroup"
},
"Standard roles": {
"$ref": "#/components/examples/CreateStandardRoleAssignmentResponseGroup"
}
},
"schema": {
"discriminator": {
"mapping": {
"ACCESS_CERTIFICATIONS_ADMIN": "#/components/schemas/CustomRole",
"ACCESS_REQUESTS_ADMIN": "#/components/schemas/CustomRole",
"API_ACCESS_MANAGEMENT_ADMIN": "#/components/schemas/StandardRole",
"APP_ADMIN": "#/components/schemas/StandardRole",
"CUSTOM": "#/components/schemas/CustomRole",
"GROUP_MEMBERSHIP_ADMIN": "#/components/schemas/StandardRole",
"HELP_DESK_ADMIN": "#/components/schemas/StandardRole",
"ORG_ADMIN": "#/components/schemas/StandardRole",
"READ_ONLY_ADMIN": "#/components/schemas/StandardRole",
"REPORT_ADMIN": "#/components/schemas/StandardRole",
"SUPER_ADMIN": "#/components/schemas/StandardRole",
"USER_ADMIN": "#/components/schemas/StandardRole",
"WORKFLOWS_ADMIN": "#/components/schemas/CustomRole"
},
"propertyName": "type"
},
"oneOf": [
{
"$ref": "#/components/schemas/StandardRole"
},
{
"$ref": "#/components/schemas/CustomRole"
}
]
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "Retrieve a group role assignment",
"tags": [
"RoleAssignmentBGroup"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
},
{
"$ref": "#/components/parameters/pathRoleAssignmentId"
}
]
},
"/api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps": {
"get": {
"description": "Lists all app targets for an `APP_ADMIN` role assignment to a group. The response includes a list of OIN-cataloged apps or app instances. The response payload for an app instance contains the `id` property, but an OIN-cataloged app doesn't.",
"operationId": "listApplicationTargetsForApplicationAdministratorRoleForGroup",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"items": {
"$ref": "#/components/schemas/CatalogApplication"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all group role app targets",
"tags": [
"RoleBTargetBGroup"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
},
{
"$ref": "#/components/parameters/pathRoleAssignmentId"
}
]
},
"/api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps/{appName}": {
"delete": {
"description": "Unassigns an OIN app target from an `APP_ADMIN` role assignment to a group\n\n> **Note:** You can't remove the last app target from a role assignment.\n> If you need a role assignment that applies to all apps, delete the `APP_ADMIN` role assignment with the target and create another one. See [Unassign a group role](/openapi/okta-management/management/roleassignmentbgroup/unassignrolefromgroup).\n",
"operationId": "unassignAppTargetToAdminRoleForGroup",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Unassign a group role app target",
"tags": [
"RoleBTargetBGroup"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
},
{
"$ref": "#/components/parameters/pathRoleAssignmentId"
},
{
"$ref": "#/components/parameters/pathAppName"
}
],
"put": {
"description": "Assigns an OIN app target to an `APP_ADMIN` role assignment to a group. When you assign the first OIN app target, you reduce the scope of the role assignment. The role no longer applies to all app targets, but applies only to the specified target. An OIN app target that's assigned to the role overrides any existing instance targets of the OIN app. For example, if a user is assigned to administer a specific Facebook instance, a successful request to add an OIN app with `facebook` for `appName` makes that user the administrator for all Facebook instances.",
"operationId": "assignAppTargetToAdminRoleForGroup",
"responses": {
"200": {
"content": {},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Assign a group role app target",
"tags": [
"RoleBTargetBGroup"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps/{appName}/{appId}": {
"delete": {
"description": "Unassigns an app instance target from an `APP_ADMIN` role assignment to a group\n\n> **Note:** You can't remove the last app instance target from a role assignment.\n> If you need a role assignment that applies to all apps, delete the `APP_ADMIN` role assignment with the target and create another one. See [Unassign a group role](/openapi/okta-management/management/roleassignmentbgroup/unassignrolefromgroup).",
"operationId": "unassignAppInstanceTargetToAppAdminRoleForGroup",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Unassign a group role app instance target",
"tags": [
"RoleBTargetBGroup"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
},
{
"$ref": "#/components/parameters/pathRoleAssignmentId"
},
{
"$ref": "#/components/parameters/pathAppName"
},
{
"$ref": "#/components/parameters/pathAppId"
}
],
"put": {
"description": "Assigns an app instance target to an `APP_ADMIN` role assignment to a group. When you assign the first OIN app or app instance target, you reduce the scope of the role assignment.\nThe role no longer applies to all app targets, but applies only to the specified target.\n\n> **Note:** You can target a mixture of both OIN app and app instance targets, but you can't assign permissions to manage all instances of an OIN app and then assign a subset of permissions to the same app.\n> For example, you can't specify that an admin has access to manage all instances of the Salesforce app and then also manage specific configurations of the Salesforce app.",
"operationId": "assignAppInstanceTargetToAppAdminRoleForGroup",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Assign a group role app instance target",
"tags": [
"RoleBTargetBGroup"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/groups": {
"get": {
"description": "Lists all group targets for a [`USER_ADMIN`](/openapi/okta-management/guides/roles/#standard-roles), `HELP_DESK_ADMIN`, or `GROUP_MEMBERSHIP_ADMIN` role assignment to a group.\nIf the role isn't scoped to specific group targets, Okta returns an empty array `[]`.",
"operationId": "listGroupTargetsForGroupRole",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"items": {
"$ref": "#/components/schemas/Group"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all group role group targets",
"tags": [
"RoleBTargetBGroup"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
},
{
"$ref": "#/components/parameters/pathRoleAssignmentId"
}
]
},
"/api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/groups/{targetGroupId}": {
"delete": {
"description": "Unassigns a group target from a [`USER_ADMIN`](/openapi/okta-management/guides/roles/#standard-roles), `HELP_DESK_ADMIN`, or `GROUP_MEMBERSHIP_ADMIN` role assignment to a group.",
"operationId": "unassignGroupTargetFromGroupAdminRole",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Unassign a group role group target",
"tags": [
"RoleBTargetBGroup"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
},
{
"$ref": "#/components/parameters/pathRoleAssignmentId"
},
{
"$ref": "#/components/parameters/pathTargetGroupId"
}
],
"put": {
"description": "Assigns a group target to a [`USER_ADMIN`](/openapi/okta-management/guides/roles/#standard-roles), `HELP_DESK_ADMIN`, or `GROUP_MEMBERSHIP_ADMIN` role assignment to a group.\nWhen you assign the first group target, you reduce the scope of the role assignment. The role no longer applies to all targets but applies only to the specified target.",
"operationId": "assignGroupTargetToGroupAdminRole",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Assign a group role group target",
"tags": [
"RoleBTargetBGroup"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups/{groupId}/users": {
"get": {
"description": "Lists all users that are a member of a group.\nThe default user limit is set to a very high number due to historical reasons that are no longer valid for most orgs. This will change in a future version of this API. The recommended page limit is now `limit=200`.",
"operationId": "listGroupUsers",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
},
{
"description": "Specifies the number of user results in a page",
"in": "query",
"name": "limit",
"schema": {
"default": 1000,
"format": "int32",
"type": "integer"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListMemberUserResponse": {
"$ref": "#/components/examples/ListUsersResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/User"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.read"
]
}
],
"summary": "List all member users",
"tags": [
"Group"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
}
]
},
"/api/v1/groups/{groupId}/users/{userId}": {
"delete": {
"description": "Unassigns a user from a group with the `OKTA_GROUP` type.\n> **Note:** You only can modify memberships for groups of the `OKTA_GROUP` type.\n>\n> App imports are responsible for managing group memberships for groups of the `APP_GROUP` type, such as Active Directory groups.",
"operationId": "unassignUserFromGroup",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.manage"
]
}
],
"summary": "Unassign a user from a group",
"tags": [
"Group"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
},
{
"$ref": "#/components/parameters/pathUserId"
}
],
"put": {
"description": "Assigns a user to a group with the `OKTA_GROUP` type.\n> **Note:** You only can modify memberships for groups of the `OKTA_GROUP` type. App imports are responsible for managing group memberships for groups of the `APP_GROUP` type, such as Active Directory groups.",
"operationId": "assignUserToGroup",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.groups.manage"
]
}
],
"summary": "Assign a user to a group",
"tags": [
"Group"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/groups/{groupId}/users/{userId}/group-rules": {
"parameters": [
{
"$ref": "#/components/parameters/pathGroupId"
},
{
"$ref": "#/components/parameters/pathUserId"
}
]
},
"/api/v1/hook-keys": {
"get": {
"description": "Lists all keys",
"operationId": "listHookKeys",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ResponseExample": {
"$ref": "#/components/examples/ListAllKeysResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/HookKey"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.read"
]
}
],
"summary": "List all keys",
"tags": [
"HookKey"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a key for use with other parts of the application, such as inline hooks\n\n> **Note:** Use the key name to access this key for inline hook operations.\n\nThe total number of keys that you can create in an Okta org is limited to 50.\n\n The response is a [Key object](https://developer.okta.com/docs/reference/api/hook-keys/#key-object) that represents the\n key that you create. The `id` property in the response serves as the unique ID for the key, which you can specify when\n invoking other CRUD operations. The `keyId` provided in the response is the alias of the public key that you can use to get\n details of the public key data in a separate call.\n\n> **Note:** The keyId is the alias of the public key that you can use to retrieve the public key.",
"operationId": "createHookKey",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/KeyRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ResponseExample": {
"$ref": "#/components/examples/CreateHookKeyResponse"
}
},
"schema": {
"$ref": "#/components/schemas/DetailedHookKeyInstance"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.manage"
]
}
],
"summary": "Create a key",
"tags": [
"HookKey"
],
"x-codegen-request-body-name": "keyRequest",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/hook-keys/public/{keyId}": {
"get": {
"description": "Retrieves a public key by `keyId`\n\n>**Note:** keyId is the alias of the public key.",
"operationId": "getPublicKey",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ResponseExample": {
"$ref": "#/components/examples/RetrievePublicKeyResponse"
}
},
"schema": {
"$ref": "#/components/schemas/_embedded"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.read"
]
}
],
"summary": "Retrieve a public key",
"tags": [
"HookKey"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathPublicKeyId"
}
]
},
"/api/v1/hook-keys/{id}": {
"delete": {
"description": "Deletes a key by `id`. After being deleted, the key is unrecoverable.\n\nAs a safety precaution, only keys that aren't being used are eligible for deletion.\n",
"operationId": "deleteHookKey",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.manage"
]
}
],
"summary": "Delete a key",
"tags": [
"HookKey"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves the public portion of the Key object using the `id` parameter\n\n>**Note:** The `?expand=publickey` query parameter optionally returns the full object including the details of the public key in the response body's `_embedded` property.",
"operationId": "getHookKey",
"parameters": [
{
"description": "A valid key ID",
"in": "path",
"name": "id",
"schema": {
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ResponseExample": {
"$ref": "#/components/examples/RetrieveKeyResponse"
}
},
"schema": {
"$ref": "#/components/schemas/HookKey"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.read"
]
}
],
"summary": "Retrieve a key by ID",
"tags": [
"HookKey"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathHookKeyId"
}
],
"put": {
"description": "Replaces a key by `id`\n\nThis request replaces existing properties after passing validation.\n\n> **Note:** The only parameter that you can update is the name of the key, which must be unique at all times.",
"operationId": "replaceHookKey",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/KeyRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ResponseExample": {
"$ref": "#/components/examples/ReplaceKeyResponse"
}
},
"schema": {
"$ref": "#/components/schemas/DetailedHookKeyInstance"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.manage"
]
}
],
"summary": "Replace a key",
"tags": [
"HookKey"
],
"x-codegen-request-body-name": "keyRequest",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/iam/assignees/users": {
"get": {
"description": "Lists all users with role assignments",
"operationId": "listUsersWithRoleAssignments",
"parameters": [
{
"description": "Specifies the pagination cursor for the next page of targets",
"in": "query",
"name": "after",
"required": false,
"schema": {
"type": "string"
}
},
{
"description": "Specifies the number of results returned. Defaults to `100`.",
"in": "query",
"name": "limit",
"required": false,
"schema": {
"default": 100,
"format": "int32",
"type": "integer"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"User List": {
"$ref": "#/components/examples/RoleAssignedUsersResponseExample"
}
},
"schema": {
"$ref": "#/components/schemas/RoleAssignedUsers"
}
}
},
"description": "Success"
},
"403": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all users with role assignments",
"tags": [
"RoleAssignmentAUser"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/iam/governance/bundles": {
"get": {
"description": "Lists all governance bundles for the Admin Console in your org",
"operationId": "listGovernanceBundles",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GovernanceBundlesResponse": {
"$ref": "#/components/examples/GovernanceBundlesResponse"
}
},
"schema": {
"$ref": "#/components/schemas/GovernanceBundlesResponse"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all governance bundles",
"tags": [
"GovernanceBundle"
]
},
"post": {
"description": "Creates a governance bundle of entitlements for the Admin Console",
"operationId": "createGovernanceBundle",
"requestBody": {
"content": {
"application/json": {
"examples": {
"GovernanceBundleCreateRequestCustomRole": {
"$ref": "#/components/examples/GovernanceBundleCreateRequestCustomRole"
},
"GovernanceBundleCreateRequestScopedStandardRole": {
"$ref": "#/components/examples/GovernanceBundleCreateRequestScopedStandardRole"
},
"GovernanceBundleCreateRequestStandardRole": {
"$ref": "#/components/examples/GovernanceBundleCreateRequestStandardRole"
}
},
"schema": {
"$ref": "#/components/schemas/GovernanceBundleCreateRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GovernanceBundleCreateRequestStandardRole": {
"$ref": "#/components/examples/GovernanceBundle"
}
},
"schema": {
"$ref": "#/components/schemas/GovernanceBundle"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Create a governance bundle",
"tags": [
"GovernanceBundle"
]
},
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"/api/v1/iam/governance/bundles/{bundleId}": {
"delete": {
"description": "Deletes an Admin Console governance bundle",
"operationId": "deleteGovernanceBundle",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Delete a governance bundle",
"tags": [
"GovernanceBundle"
]
},
"get": {
"description": "Retrieves a governance bundle for the Admin Console",
"operationId": "getGovernanceBundle",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GovernanceBundle": {
"$ref": "#/components/examples/GovernanceBundle"
}
},
"schema": {
"$ref": "#/components/schemas/GovernanceBundle"
}
}
},
"description": "OK"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "Retrieve a governance bundle",
"tags": [
"GovernanceBundle"
]
},
"parameters": [
{
"$ref": "#/components/parameters/pathBundleId"
}
],
"put": {
"description": "Replaces the properties of a governance bundle for the Admin Console",
"operationId": "replaceGovernanceBundle",
"requestBody": {
"content": {
"application/json": {
"examples": {
"GovernanceBundleUpdateRequestCustomRole": {
"$ref": "#/components/examples/GovernanceBundleUpdateRequestCustomRole"
},
"GovernanceBundleUpdateRequestScopedStandardRole": {
"$ref": "#/components/examples/GovernanceBundleUpdateRequestScopedStandardRole"
},
"GovernanceBundleUpdateRequestStandardRole": {
"$ref": "#/components/examples/GovernanceBundleUpdateRequestStandardRole"
}
},
"schema": {
"$ref": "#/components/schemas/GovernanceBundleUpdateRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GovernanceBundle": {
"$ref": "#/components/examples/GovernanceBundle"
}
},
"schema": {
"$ref": "#/components/schemas/GovernanceBundle"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Replace a governance bundle",
"tags": [
"GovernanceBundle"
]
},
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"/api/v1/iam/governance/bundles/{bundleId}/entitlements": {
"get": {
"description": "Lists all entitlements specific to a governance bundle",
"operationId": "listBundleEntitlements",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"BundleEntitlementsResponse": {
"$ref": "#/components/examples/BundleEntitlementsResponse"
}
},
"schema": {
"$ref": "#/components/schemas/BundleEntitlementsResponse"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all entitlements for a governance bundle",
"tags": [
"GovernanceBundle"
]
},
"parameters": [
{
"$ref": "#/components/parameters/pathBundleId"
}
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"/api/v1/iam/governance/bundles/{bundleId}/entitlements/{entitlementId}/values": {
"get": {
"description": "Lists all entitlement values that are specific to a governance bundle entitlement",
"operationId": "listBundleEntitlementValues",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"EntitlementValuesResponse": {
"$ref": "#/components/examples/EntitlementValuesResponse"
}
},
"schema": {
"$ref": "#/components/schemas/EntitlementValuesResponse"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all values for a governance bundle entitlement",
"tags": [
"GovernanceBundle"
]
},
"parameters": [
{
"$ref": "#/components/parameters/pathBundleId"
},
{
"$ref": "#/components/parameters/pathEntitlementId"
}
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"/api/v1/iam/governance/optIn": {
"get": {
"description": "Retrieves the entitlement management opt-in status for the Admin Console",
"operationId": "getOptInStatus",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"OptInStatusResponse": {
"$ref": "#/components/examples/OptInStatusResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OptInStatusResponse"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "Retrieve the Admin Console opt-in status",
"tags": [
"GovernanceBundle"
]
},
"post": {
"description": "Opts in the Admin Console to entitlement management",
"operationId": "optIn",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"OptInStatusResponse": {
"$ref": "#/components/examples/OptInStatusResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OptInStatusResponse"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Opt in the Admin Console to entitlement management",
"tags": [
"GovernanceBundle"
]
},
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"/api/v1/iam/governance/optOut": {
"post": {
"description": "Opts out the Admin Console from entitlement management",
"operationId": "optOut",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"OptOutStatusResponse": {
"$ref": "#/components/examples/OptOutStatusResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OptInStatusResponse"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Opt out the Admin Console from entitlement management",
"tags": [
"GovernanceBundle"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/iam/resource-sets": {
"get": {
"description": "Lists all resource sets with pagination support",
"operationId": "listResourceSets",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetsResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSets"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all resource sets",
"tags": [
"RoleCResourceSet"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a new resource set. See [Supported resources](/openapi/okta-management/guides/roles/#supported-resources).\n\n> **Note:** The maximum number of `resources` allowed in a resource set object is 1000. Resources are identified by either an Okta Resource Name (ORN) or by a REST URL format. See [Okta Resource Name](/openapi/okta-management/guides/roles/#okta-resource-name-orn).",
"operationId": "createResourceSet",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Example Request": {
"$ref": "#/components/examples/ResourceSetRequest"
}
},
"schema": {
"$ref": "#/components/schemas/CreateResourceSetRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSet"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Create a resource set",
"tags": [
"RoleCResourceSet"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/iam/resource-sets/{resourceSetIdOrLabel}": {
"delete": {
"description": "Deletes a resource set by `resourceSetIdOrLabel`",
"operationId": "deleteResourceSet",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden",
"headers": {}
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Delete a resource set",
"tags": [
"RoleCResourceSet"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a resource set by `resourceSetIdOrLabel`",
"operationId": "getResourceSet",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSet"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "Retrieve a resource set",
"tags": [
"RoleCResourceSet"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathResourceSetIdOrLabel"
}
],
"put": {
"description": "Replaces the label and description of a resource set. See [Supported resources](/openapi/okta-management/guides/roles/#supported-resources).",
"operationId": "replaceResourceSet",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Example Request": {
"$ref": "#/components/examples/ReplaceResourceSetRequest"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSet"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSet"
}
}
},
"description": "OK"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Replace a resource set",
"tags": [
"RoleCResourceSet"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings": {
"get": {
"description": "Lists all bindings for a resource set with pagination support.\n\nThe returned `roles` array contains the roles for each binding associated with the specified resource set. If there are more than 100 bindings for the specified resource set, `links.next` provides the resource with pagination for the next list of bindings.",
"operationId": "listBindings",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetBindingsResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetBindings"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all role resource set bindings",
"tags": [
"RoleDResourceSetBinding"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathResourceSetIdOrLabel"
}
],
"post": {
"description": "Creates a binding for the resource set, custom role, and members (users or groups)\n\n> **Note:** If you use a custom role with permissions that don't apply to the resources in the resource set, it doesn't affect the admin role. For example,\n the `okta.users.userprofile.manage` permission gives the admin no privileges if it's granted to a resource set that only includes `https://{yourOktaDomain}/api/v1/groups/{targetGroupId}`\n resources. If you want the admin to be able to manage the users within the group, the resource set must include the corresponding `https://{yourOktaDomain}/api/v1/groups/{targetGroupId}/users` resource.",
"operationId": "createResourceSetBinding",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Example Request": {
"$ref": "#/components/examples/ResourceSetBindingCreateRequestExample"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetBindingCreateRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetBindingResponseExample"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetBindingEditResponse"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Create a role resource set binding",
"tags": [
"RoleDResourceSetBinding"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}": {
"delete": {
"description": "Deletes a binding of a role (identified by `roleIdOrLabel`) and a resource set (identified by `resourceSetIdOrLabel`)",
"operationId": "deleteBinding",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden",
"headers": {}
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Delete a role resource set binding",
"tags": [
"RoleDResourceSetBinding"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves the binding of a role (identified by `roleIdOrLabel`) for a resource set (identified by `resourceSetIdOrLabel`)",
"operationId": "getBinding",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetBindingResponseWithIdExample"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetBindingResponse"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "Retrieve a role resource set binding",
"tags": [
"RoleDResourceSetBinding"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathResourceSetIdOrLabel"
},
{
"$ref": "#/components/parameters/pathRoleIdOrLabel"
}
]
},
"/api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members": {
"get": {
"description": "Lists all members of a role resource set binding with pagination support",
"operationId": "listMembersOfBinding",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetBindingMembersResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetBindingMembers"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all role resource set binding members",
"tags": [
"RoleDResourceSetBindingMember"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathResourceSetIdOrLabel"
},
{
"$ref": "#/components/parameters/pathRoleIdOrLabel"
}
],
"patch": {
"description": "Adds more members to a role resource set binding",
"operationId": "addMembersToBinding",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Example Request": {
"$ref": "#/components/examples/ResourceSetBindingAddMembersRequestExample"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetBindingAddMembersRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetBindingResponseExample"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetBindingEditResponse"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Add more role resource set binding members",
"tags": [
"RoleDResourceSetBindingMember"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members/{memberId}": {
"delete": {
"description": "Unassigns a member (identified by `memberId`) from a role resource set binding",
"operationId": "unassignMemberFromBinding",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden",
"headers": {}
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Unassign a role resource set binding member",
"tags": [
"RoleDResourceSetBindingMember"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a member (identified by `memberId`) that belongs to a role resource set binding",
"operationId": "getMemberOfBinding",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetBindingMemberResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetBindingMember"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "Retrieve a role resource set binding member",
"tags": [
"RoleDResourceSetBindingMember"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathResourceSetIdOrLabel"
},
{
"$ref": "#/components/parameters/pathRoleIdOrLabel"
},
{
"$ref": "#/components/parameters/pathMemberId"
}
]
},
"/api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources": {
"get": {
"description": "Lists all resources for the resource set",
"operationId": "listResourceSetResources",
"parameters": [
{
"description": "Specifies the pagination cursor for the next page of targets",
"in": "query",
"name": "after",
"required": false,
"schema": {
"type": "string"
}
},
{
"description": "Specifies the number of results returned. Defaults to `100`.",
"in": "query",
"name": "limit",
"required": false,
"schema": {
"default": 100,
"format": "int32",
"type": "integer"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetResourcesResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetResources"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all resource set resources",
"tags": [
"RoleCResourceSetResource"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathResourceSetIdOrLabel"
}
],
"patch": {
"description": "Adds more resources to a resource set",
"operationId": "addResourceSetResources",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Example Request": {
"$ref": "#/components/examples/ResourceSetResourcePatchRequestExample"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetResourcePatchRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSet"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Add more resources to a resource set",
"tags": [
"RoleCResourceSetResource"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Adds a resource with conditions for a resource set",
"operationId": "addResourceSetResource",
"requestBody": {
"content": {
"application/json": {
"examples": {
"ConditionExample": {
"$ref": "#/components/examples/ResourceSetResourcePostRequestExample"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetResourcePostRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ConditionExample": {
"$ref": "#/components/examples/ResourceSetResourceResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetResource"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Add a resource set resource with conditions",
"tags": [
"RoleCResourceSetResource"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources/{resourceId}": {
"delete": {
"description": "Deletes a resource (identified by `resourceId`) from a resource set",
"operationId": "deleteResourceSetResource",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden",
"headers": {}
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Delete a resource set resource",
"tags": [
"RoleCResourceSetResource"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a resource identified by `resourceId` in a resource set",
"operationId": "getResourceSetResource",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetResourceResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetResource"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "Retrieve a resource set resource",
"tags": [
"RoleCResourceSetResource"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathResourceSetIdOrLabel"
},
{
"$ref": "#/components/parameters/pathResourceId"
}
],
"put": {
"description": "Replaces the conditions of a resource identified by `resourceId` in a resource set",
"operationId": "replaceResourceSetResource",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Example Request": {
"$ref": "#/components/examples/ResourceSetResourcePutRequestExample"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetResourcePutRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/ResourceSetResourceResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResourceSetResource"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Replace the resource set resource conditions",
"tags": [
"RoleCResourceSetResource"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/iam/roles": {
"get": {
"description": "Lists all custom roles with pagination support",
"operationId": "listRoles",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/RolesResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IamRoles"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all custom roles",
"tags": [
"RoleECustom"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a custom role",
"operationId": "createRole",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Example Request": {
"$ref": "#/components/examples/RoleRequest"
}
},
"schema": {
"$ref": "#/components/schemas/CreateIamRoleRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/RoleResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IamRole"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Create a custom role",
"tags": [
"RoleECustom"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/iam/roles/{roleIdOrLabel}": {
"delete": {
"description": "Deletes a custom role by `roleIdOrLabel`",
"operationId": "deleteRole",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden",
"headers": {}
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Delete a custom role",
"tags": [
"RoleECustom"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a role by `roleIdOrLabel`",
"operationId": "getRole",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/RoleResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IamRole"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "Retrieve a role",
"tags": [
"RoleECustom"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathRoleIdOrLabel"
}
],
"put": {
"description": "Replaces the label and description for a custom role by `roleIdOrLabel`",
"operationId": "replaceRole",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Example Request": {
"$ref": "#/components/examples/ReplaceRoleRequest"
}
},
"schema": {
"$ref": "#/components/schemas/UpdateIamRoleRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/RoleResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IamRole"
}
}
},
"description": "OK"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Replace a custom role",
"tags": [
"RoleECustom"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/iam/roles/{roleIdOrLabel}/permissions": {
"get": {
"description": "Lists all permissions for a custom role by `roleIdOrLabel`",
"operationId": "listRolePermissions",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/PermissionsResponse"
}
},
"schema": {
"$ref": "#/components/schemas/Permissions"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all custom role permissions",
"tags": [
"RoleECustomPermission"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathRoleIdOrLabel"
}
]
},
"/api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType}": {
"delete": {
"description": "Deletes a permission (identified by `permissionType`) from a custom role",
"operationId": "deleteRolePermission",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden",
"headers": {}
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Delete a custom role permission",
"tags": [
"RoleECustomPermission"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a permission (identified by `permissionType`) for a custom role",
"operationId": "getRolePermission",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response with conditions": {
"$ref": "#/components/examples/PermissionResponseWithConditions"
},
"Example Response without conditions": {
"$ref": "#/components/examples/PermissionResponse"
}
},
"schema": {
"$ref": "#/components/schemas/Permission"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "Retrieve a custom role permission",
"tags": [
"RoleECustomPermission"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathRoleIdOrLabel"
},
{
"$ref": "#/components/parameters/pathPermissionType"
}
],
"post": {
"description": "Creates a permission (specified by `permissionType`) for a custom role",
"operationId": "createRolePermission",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Example Request with exclude": {
"$ref": "#/components/examples/CreateUpdateIamRolePermissionRequestExampleWithExclude"
},
"Example Request with include": {
"$ref": "#/components/examples/CreateUpdateIamRolePermissionRequestExampleWithInclude"
}
},
"schema": {
"$ref": "#/components/schemas/CreateUpdateIamRolePermissionRequest"
}
}
},
"required": false,
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"responses": {
"204": {
"description": "No Content"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Create a custom role permission",
"tags": [
"RoleECustomPermission"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"put": {
"description": "Replaces a permission (specified by `permissionType`) for a custom role",
"operationId": "replaceRolePermission",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Example Request with exclude": {
"$ref": "#/components/examples/CreateUpdateIamRolePermissionRequestExampleWithExclude"
},
"Example Request with include": {
"$ref": "#/components/examples/CreateUpdateIamRolePermissionRequestExampleWithInclude"
}
},
"schema": {
"$ref": "#/components/schemas/CreateUpdateIamRolePermissionRequest"
}
}
},
"required": false
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Example Response": {
"$ref": "#/components/examples/PermissionResponseWithConditions"
}
},
"schema": {
"$ref": "#/components/schemas/Permission"
}
}
},
"description": "OK"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Replace a custom role permission",
"tags": [
"RoleECustomPermission"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/groups": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
}
],
"post": {
"description": "Creates a group in an identity source for the given identity source instance",
"operationId": "createIdentitySourceGroups",
"requestBody": {
"content": {
"application/json": {
"examples": {
"createGroupsPayload": {
"$ref": "#/components/examples/GroupsPayload"
}
},
"schema": {
"$ref": "#/components/schemas/GroupsRequestSchema"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"group": {
"$ref": "#/components/examples/GroupsResponse"
}
},
"schema": {
"$ref": "#/components/schemas/GroupsResponseSchema"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Create an identity source group",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/groups/{groupOrExternalId}": {
"delete": {
"description": "Deletes a group in an identity source for a given identity source ID and group ID",
"operationId": "deleteIdentitySourceGroup",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Delete an identity source group",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a group from an identity source for a given identity source ID and group ID or external ID",
"operationId": "getIdentitySourceGroup",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"group": {
"$ref": "#/components/examples/GroupsResponse"
}
},
"schema": {
"$ref": "#/components/schemas/GroupsResponseSchema"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.read"
]
}
],
"summary": "Retrieve an identity source group",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
},
{
"$ref": "#/components/parameters/pathIdentitySourceGroupOrExternalId"
}
],
"post": {
"description": "Updates a group to an identity source for the given identity source instance and group ID",
"operationId": "updateIdentitySourceGroups",
"requestBody": {
"content": {
"application/json": {
"examples": {
"createGroupsPayload": {
"$ref": "#/components/examples/GroupsPayload"
}
},
"schema": {
"$ref": "#/components/schemas/GroupsRequestSchema"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"group": {
"$ref": "#/components/examples/GroupsResponse"
}
},
"schema": {
"$ref": "#/components/schemas/GroupsResponseSchema"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Update an identity source group",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/groups/{groupOrExternalId}/membership": {
"get": {
"description": "Retrieves the group memberships for the given identity source group in the given identity source instance",
"operationId": "getIdentitySourceGroupMemberships",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
},
{
"description": "Specifies the number of group membership results in a page. Okta recommends using a specific value other than the default or maximum.\nIf your request times out, retry your request with a smaller `limit` and [page the results](https://developer.okta.com/docs/api/#pagination).",
"in": "query",
"name": "limit",
"schema": {
"format": "int32",
"maximum": 1000,
"type": "integer"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"groupMembershipsResponse": {
"$ref": "#/components/examples/GroupMemberships"
}
},
"schema": {
"$ref": "#/components/schemas/GroupMembershipsResponseSchema"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.read"
]
}
],
"summary": "Retrieve the memberships for the given identity source group",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
},
{
"$ref": "#/components/parameters/pathIdentitySourceGroupOrExternalId"
}
],
"post": {
"description": "Creates the group memberships for the given identity source group",
"operationId": "createIdentitySourceGroupsMemberships",
"requestBody": {
"content": {
"application/json": {
"examples": {
"createGroupsPayload": {
"$ref": "#/components/examples/MembershipPayload"
}
},
"schema": {
"$ref": "#/components/schemas/MembershipRequestSchema"
}
}
}
},
"responses": {
"204": {
"description": "No Content"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Create the memberships for the given identity source group",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/groups/{groupOrExternalId}/membership/{memberExternalId}": {
"delete": {
"description": "Deletes group memberships for the specified identity source group using member external IDs",
"operationId": "deleteIdentitySourceGroupMemberships",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Delete the memberships for the specified identity source group",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
},
{
"$ref": "#/components/parameters/pathIdentitySourceGroupOrExternalId"
},
{
"$ref": "#/components/parameters/pathIdentitySourceMemberExternalId"
}
]
},
"/api/v1/identity-sources/{identitySourceId}/sessions": {
"get": {
"description": "Lists all identity source sessions for the given identity source instance",
"operationId": "listIdentitySourceSessions",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"sessionsList": {
"$ref": "#/components/examples/ListSessionsResponseForGetSessions"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/IdentitySourceSession"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.read"
]
}
],
"summary": "List all identity source sessions",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
}
],
"post": {
"description": "Creates an identity source session for the given identity source instance",
"operationId": "createIdentitySourceSession",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"session": {
"$ref": "#/components/examples/GetSessionResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdentitySourceSession"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Create an identity source session",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}": {
"delete": {
"description": "Deletes an identity source session for a given identity source ID and session Id",
"operationId": "deleteIdentitySourceSession",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Delete an identity source session",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves an identity source session for a given identity source ID and session ID",
"operationId": "getIdentitySourceSession",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"session": {
"$ref": "#/components/examples/GetSessionResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdentitySourceSession"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.read"
]
}
],
"summary": "Retrieve an identity source session",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
},
{
"$ref": "#/components/parameters/pathIdentitySourceSessionId"
}
]
},
"/api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-delete": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
},
{
"$ref": "#/components/parameters/pathIdentitySourceSessionId"
}
],
"post": {
"description": "Uploads external IDs of entities that need to be deleted in Okta from the identity source for the given session",
"operationId": "uploadIdentitySourceDataForDelete",
"requestBody": {
"content": {
"application/json": {
"examples": {
"bulkDeletePayload": {
"$ref": "#/components/examples/bulkDeletePayload"
}
},
"schema": {
"$ref": "#/components/schemas/BulkDeleteRequestBody"
}
}
}
},
"responses": {
"202": {
"description": "Accepted"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Upload the data to be deleted in Okta",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-group-memberships-delete": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
},
{
"$ref": "#/components/parameters/pathIdentitySourceSessionId"
}
],
"post": {
"description": "Uploads the group memberships that need to be deleted in Okta from the identity source for the given session",
"operationId": "uploadIdentitySourceGroupMembershipsForDelete",
"requestBody": {
"content": {
"application/json": {
"examples": {
"bulkGroupMembershipsDeletePayload": {
"$ref": "#/components/examples/bulkGroupMembershipsDeletePayload"
}
},
"schema": {
"$ref": "#/components/schemas/BulkGroupMembershipsDeleteRequestBody"
}
}
}
},
"responses": {
"202": {
"description": "Accepted"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Upload the group memberships to be deleted in Okta",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-group-memberships-upsert": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
},
{
"$ref": "#/components/parameters/pathIdentitySourceSessionId"
}
],
"post": {
"description": "Uploads the group memberships that need to be inserted or updated in Okta from the identity source for the given session",
"operationId": "uploadIdentitySourceGroupMembershipsForUpsert",
"requestBody": {
"content": {
"application/json": {
"examples": {
"bulkGroupMembershipsUpsertPayload": {
"$ref": "#/components/examples/bulkGroupMembershipsUpsertPayload"
}
},
"schema": {
"$ref": "#/components/schemas/BulkGroupMembershipsUpsertRequestBody"
}
}
}
},
"responses": {
"202": {
"description": "Accepted"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Upload the group memberships to be upserted in Okta",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-groups-delete": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
},
{
"$ref": "#/components/parameters/pathIdentitySourceSessionId"
}
],
"post": {
"description": "Uploads external IDs of groups that need to be deleted in Okta from the identity source for the given session",
"operationId": "uploadIdentitySourceGroupsDataForDelete",
"requestBody": {
"content": {
"application/json": {
"examples": {
"bulkGroupDeletePayload": {
"$ref": "#/components/examples/bulkGroupDeletePayload"
}
},
"schema": {
"$ref": "#/components/schemas/BulkGroupDeleteRequestBody"
}
}
}
},
"responses": {
"202": {
"description": "Accepted"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Upload the group external IDs to be deleted in Okta",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-groups-upsert": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
},
{
"$ref": "#/components/parameters/pathIdentitySourceSessionId"
}
],
"post": {
"description": "Uploads the group profiles without memberships that need to be inserted or updated in Okta from the identity source for the given session",
"operationId": "uploadIdentitySourceGroupsForUpsert",
"requestBody": {
"content": {
"application/json": {
"examples": {
"bulkGroupUpsertPayload": {
"$ref": "#/components/examples/bulkGroupUpsertPayload"
}
},
"schema": {
"$ref": "#/components/schemas/BulkGroupUpsertRequestBody"
}
}
}
},
"responses": {
"202": {
"description": "Accepted"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Upload the group profiles without memberships to be upserted in Okta",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-upsert": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
},
{
"$ref": "#/components/parameters/pathIdentitySourceSessionId"
}
],
"post": {
"description": "Uploads entities that need to be inserted or updated in Okta from the identity source for the given session",
"operationId": "uploadIdentitySourceDataForUpsert",
"requestBody": {
"content": {
"application/json": {
"examples": {
"bulkUpsertPayload": {
"$ref": "#/components/examples/bulkUpsertPayload"
}
},
"schema": {
"$ref": "#/components/schemas/BulkUpsertRequestBody"
}
}
}
},
"responses": {
"202": {
"description": "Accepted"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Upload the data to be upserted in Okta",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/start-import": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
},
{
"$ref": "#/components/parameters/pathIdentitySourceSessionId"
}
],
"post": {
"description": "Starts the import from the identity source described by the uploaded bulk operations",
"operationId": "startImportFromIdentitySource",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"triggeredSession": {
"$ref": "#/components/examples/TriggerSessionResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdentitySourceSession"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Start the import from the identity source",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/users": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
}
],
"post": {
"description": "Creates a user in an identity source for the given identity source instance",
"operationId": "createIdentitySourceUser",
"requestBody": {
"content": {
"application/json": {
"examples": {
"userCreatePayload": {
"$ref": "#/components/examples/UserPayload"
}
},
"schema": {
"$ref": "#/components/schemas/UserRequestSchema"
}
}
}
},
"responses": {
"200": {
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Create an identity source user",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/identity-sources/{identitySourceId}/users/{externalId}": {
"delete": {
"description": "Deletes a user in an identity source for the given identity source instance and external ID",
"operationId": "deleteIdentitySourceUser",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Delete an identity source user",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a user by external ID in an identity source for the given identity source instance",
"operationId": "getIdentitySourceUser",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"userResponse": {
"$ref": "#/components/examples/UserResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserResponseSchema"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.read"
]
}
],
"summary": "Retrieve an identity source user",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdentitySourceId"
},
{
"$ref": "#/components/parameters/pathExternalUserId"
}
],
"patch": {
"description": "Updates a user to an identity source for the given identity source instance and external ID",
"operationId": "updateIdentitySourceUsers",
"requestBody": {
"content": {
"application/json": {
"examples": {
"userCreatePayload": {
"$ref": "#/components/examples/UserUpdatePayload"
}
},
"schema": {
"$ref": "#/components/schemas/UsersUpdateRequestSchema"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"userResponse": {
"$ref": "#/components/examples/UserUpdateResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserResponseSchema"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Update an identity source user",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"put": {
"description": "Replaces an existing user for the given identity source instance and external ID",
"operationId": "replaceExistingIdentitySourceUser",
"requestBody": {
"content": {
"application/json": {
"examples": {
"userReplacePayload": {
"$ref": "#/components/examples/UserReplacePayload"
}
},
"schema": {
"$ref": "#/components/schemas/UserRequestSchema"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"userResponse": {
"$ref": "#/components/examples/UserReplaceResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserResponseSchema"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.identitySources.manage"
]
}
],
"summary": "Replace an existing identity source user",
"tags": [
"IdentitySource"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/idps": {
"get": {
"description": "Lists all identity provider (IdP) integrations with pagination. A subset of IdPs can be returned that match a supported filter expression or query.",
"operationId": "listIdentityProviders",
"parameters": [
{
"description": "Searches the `name` property of IdPs for matching value",
"example": "Example SAML",
"in": "query",
"name": "q",
"schema": {
"type": "string"
}
},
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
},
{
"description": "Filters IdPs by `type`",
"in": "query",
"name": "type",
"schema": {
"$ref": "#/components/schemas/IdentityProviderType"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"MultipleIdPsResponse": {
"$ref": "#/components/examples/MultipleIdPsResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/IdentityProvider"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.read"
]
}
],
"summary": "List all IdPs",
"tags": [
"IdentityProvider"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a new identity provider (IdP) integration.\n\n#### SAML 2.0 IdP\n\nYou must first add the IdP's signature certificate to the IdP key store before you can add a SAML 2.0 IdP with a `kid` credential reference.\n\nDon't use `fromURI` to automatically redirect a user to a particular app after successfully authenticating with a third-party IdP. Instead, use SAML deep links. Using `fromURI` isn't tested or supported. For more information about using deep links when signing users in using an SP-initiated flow, see [Understanding SP-Initiated Login flow](https://developer.okta.com/docs/concepts/saml/#understanding-sp-initiated-login-flow).\n\nUse SAML deep links to automatically redirect the user to an app after successfully authenticating with a third-party IdP. To use deep links, assemble these three parts into a URL:\n\n* SP ACS URL
\nFor example: `https://${yourOktaDomain}/sso/saml2/:idpId`\n* The app to which the user is automatically redirected after successfully authenticating with the IdP
\nFor example: `/app/:app-location/:appId/sso/saml`\n* Optionally, if the app is an outbound SAML app, you can specify the `relayState` passed to it.
\nFor example: `?RelayState=:anyUrlEncodedValue`\n\nThe deep link for the above three parts is:
\n`https://${yourOktaDomain}/sso/saml2/:idpId/app/:app-location/:appId/sso/saml?RelayState=:anyUrlEncodedValue`\n\n#### Smart Card X509 IdP\n\nYou must first add the IdP's server certificate to the IdP key store before you can add a Smart Card `X509` IdP with a `kid` credential reference.\nYou need to upload the whole trust chain as a single key using the [Key Store API](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/IdentityProviderKeys/#tag/IdentityProviderKeys/operation/createIdentityProviderKey).\nDepending on the information stored in the smart card, select the proper [template](https://developer.okta.com/docs/reference/okta-expression-language/#idp-user-profile) `idpuser.subjectAltNameEmail` or `idpuser.subjectAltNameUpn`.\n\n#### Identity verification vendors as identity providers\n\nIdentity verification (IDV) vendors work like IdPs, with a few key differences. IDV vendors verify your user's identities by requiring them to submit a proof of identity. There are many ways to verify user identities. For example, a proof of identity can be a selfie to determine liveliness or it can be requiring users to submit a photo of their driver's license and matching that information with a database.\n\nThere are three IDV vendors (Persona, CLEAR Verified, and Incode) with specific configuration settings and another IDV vendor type (Custom IDV) that lets you create a custom IDV vendor, using a [standardized IDV process](https://developer.okta.com/docs/guides/idv-integration/main/). You can configure each of the IDV vendors as IdPs in your org by creating an account with the vendor, and then creating an IdP integration. Control how the IDVs verify your users by using [Okta account management policy rules](https://developer.okta.com/docs/guides/okta-account-management-policy/main/).\n\n* [Persona](https://withpersona.com/)\n\n* [CLEAR Verified](https://www.clearme.com/)\n\n* [Incode](https://incode.com/)\n\n* [Custom IDV](https://help.okta.com/okta_help.htm?type=oie&id=idp-add-custom-idv-vendor)",
"operationId": "createIdentityProvider",
"requestBody": {
"content": {
"application/json": {
"examples": {
"CreateAppleIdPRequest": {
"$ref": "#/components/examples/CreateAppleIdPRequest"
},
"CreateCLEARIDVRequest": {
"$ref": "#/components/examples/CreateCLEARIDVRequest"
},
"CreateCustomIDVRequest": {
"$ref": "#/components/examples/CreateCustomIDVRequest"
},
"CreateFacebookIdPRequest": {
"$ref": "#/components/examples/CreateFacebookIdPRequest"
},
"CreateGenericOidcIdPRequest": {
"$ref": "#/components/examples/CreateGenericOidcIdPRequest"
},
"CreateGoogleIdPRequest": {
"$ref": "#/components/examples/CreateGoogleIdPRequest"
},
"CreateIncodeIDVRequest": {
"$ref": "#/components/examples/CreateIncodeIDVRequest"
},
"CreateMicrosoftIdPRequest": {
"$ref": "#/components/examples/CreateMicrosoftIdPRequest"
},
"CreateOktaIntegrationIdPRequest": {
"$ref": "#/components/examples/CreateOktaIntegrationIdPRequest"
},
"CreatePersonaIDVRequest": {
"$ref": "#/components/examples/CreatePersonaIDVRequest"
},
"CreateSamlIdPRequest": {
"$ref": "#/components/examples/CreateSamlIdPRequest"
},
"CreateSmartCardIdPRequest": {
"$ref": "#/components/examples/CreateSmartCardIdPRequest"
}
},
"schema": {
"$ref": "#/components/schemas/IdentityProvider"
}
}
},
"description": "IdP settings",
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"CreateAppleIdPResponse": {
"$ref": "#/components/examples/AppleIdPResponse"
},
"CreateCLEARIDVResponse": {
"$ref": "#/components/examples/CLEARIDVResponse"
},
"CreateCustomIDVResponse": {
"$ref": "#/components/examples/CustomIDVResponse"
},
"CreateFacebookIdPResponse": {
"$ref": "#/components/examples/FacebookIdPResponse"
},
"CreateGenericOidcIdpResponse": {
"$ref": "#/components/examples/GenericOidcIdpResponse"
},
"CreateGoogleIdPResponse": {
"$ref": "#/components/examples/GoogleIdPResponse"
},
"CreateIncodeIDVResponse": {
"$ref": "#/components/examples/IncodeIDVResponse"
},
"CreateMicrosoftIdPResponse": {
"$ref": "#/components/examples/MicrosoftIdPResponse"
},
"CreatePersonaIDVResponse": {
"$ref": "#/components/examples/PersonaIDVResponse"
},
"CreateSamlIdPResponse": {
"$ref": "#/components/examples/SamlIdPResponse"
},
"CreateSmartCardIdPResponse": {
"$ref": "#/components/examples/SmartCardIdPResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdentityProvider"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Create an IdP",
"tags": [
"IdentityProvider"
],
"x-codegen-request-body-name": "identityProvider",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/idps/credentials/keys": {
"get": {
"description": "Lists all identity provider (IdP) key credentials",
"operationId": "listIdentityProviderKeys",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListIdPKeyCredentialsResponse": {
"$ref": "#/components/examples/MultipleIdPKeyCredentialsResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/IdPKeyCredential"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.read"
]
}
],
"summary": "List all IdP key credentials",
"tags": [
"IdentityProviderKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a new X.509 certificate credential in the identity provider (IdP) key store\n> **Note:** RSA-based certificates are supported for all IdP types. Okta currently supports EC-based certificates only for the `X509` IdP type. For EC-based certificates we support only P-256, P-384, and P-521 curves.",
"operationId": "createIdentityProviderKey",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/IdPCertificateCredential"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"IdPKeyCredentialResponse": {
"$ref": "#/components/examples/IdPKeyCredentialResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdPKeyCredential"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Create an IdP key credential",
"tags": [
"IdentityProviderKeys"
],
"x-codegen-request-body-name": "jsonWebKey",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/idps/credentials/keys/{kid}": {
"delete": {
"description": "Deletes a specific identity provider (IdP) key credential by `kid` if it isn't currently being used by an active or inactive IdP",
"operationId": "deleteIdentityProviderKey",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Delete an IdP key credential",
"tags": [
"IdentityProviderKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a specific identity provider (IdP) key credential by `kid`",
"operationId": "getIdentityProviderKey",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"IdPKeyCredentialResponse": {
"$ref": "#/components/examples/IdPKeyCredentialResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdPKeyCredential"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.read"
]
}
],
"summary": "Retrieve an IdP key credential",
"tags": [
"IdentityProviderKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathKid"
}
],
"put": {
"description": "Replaces an identity provider (IdP) key credential by `kid`",
"operationId": "replaceIdentityProviderKey",
"requestBody": {
"content": {
"application/json": {
"examples": {
"IdPKeyCredentialRequest": {
"$ref": "#/components/examples/IdPKeyCredentialRequest"
}
},
"schema": {
"$ref": "#/components/schemas/IdPKeyCredential"
}
}
},
"description": "Updated IdP key credential",
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"IdPKeyCredentialResponse": {
"$ref": "#/components/examples/IdPKeyCredentialResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdPKeyCredential"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Replace an IdP key credential",
"tags": [
"IdentityProviderKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/idps/{idpId}": {
"delete": {
"description": "Deletes an identity provider (IdP) integration by `idpId`\n* All existing IdP users are unlinked with the highest order profile source taking precedence for each IdP user.\n* Unlinked users keep their existing authentication provider such as `FEDERATION` or `SOCIAL`.",
"operationId": "deleteIdentityProvider",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Delete an IdP",
"tags": [
"IdentityProvider"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves an identity provider (IdP) integration by `idpId`",
"operationId": "getIdentityProvider",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GenericOidcIdpResponse": {
"$ref": "#/components/examples/GenericOidcIdpResponse"
},
"SamlIdPResponse": {
"$ref": "#/components/examples/SamlIdPResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdentityProvider"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.read"
]
}
],
"summary": "Retrieve an IdP",
"tags": [
"IdentityProvider"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
}
],
"put": {
"description": "Replaces an identity provider (IdP) integration by `idpId`",
"operationId": "replaceIdentityProvider",
"requestBody": {
"content": {
"application/json": {
"examples": {
"ReplaceIdPRequest": {
"$ref": "#/components/examples/ReplaceIdPRequestResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdentityProvider"
}
}
},
"description": "Updated configuration for the IdP",
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ReplaceIdPResponse": {
"$ref": "#/components/examples/ReplaceIdPRequestResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdentityProvider"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Replace an IdP",
"tags": [
"IdentityProvider"
],
"x-codegen-request-body-name": "identityProvider",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/idps/{idpId}/credentials/csrs": {
"get": {
"description": "Lists all certificate signing requests (CSRs) for an identity provider (IdP)",
"operationId": "listCsrsForIdentityProvider",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"MultipleIdPCsrsResponse": {
"$ref": "#/components/examples/MultipleIdPCsrsResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/IdPCsr"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.read"
]
}
],
"summary": "List all certificate signing requests",
"tags": [
"IdentityProviderSigningKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
}
],
"post": {
"description": "Generates a new key pair and returns a certificate signing request (CSR) for it\n> **Note:** The private key isn't listed in the [signing key credentials for the identity provider (IdP)](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/IdentityProviderSigningKeys/#tag/IdentityProviderSigningKeys/operation/listIdentityProviderSigningKeys) until it's published.",
"operationId": "generateCsrForIdentityProvider",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/CsrMetadata"
}
}
},
"required": true
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"CsrJsonResponse": {
"$ref": "#/components/examples/CsrJsonResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdPCsr"
}
},
"application/pkcs10": {
"examples": {
"CsrPkcs10Response": {
"$ref": "#/components/examples/CsrPkcs10Response"
}
},
"schema": {
"$ref": "#/components/schemas/IdPCsrPkcs10"
}
}
},
"description": "Created"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Generate a certificate signing request",
"tags": [
"IdentityProviderSigningKeys"
],
"x-codegen-request-body-name": "metadata",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/idps/{idpId}/credentials/csrs/{idpCsrId}": {
"delete": {
"description": "Revokes a certificate signing request (CSR) and deletes the key pair from the identity provider (IdP)",
"operationId": "revokeCsrForIdentityProvider",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Revoke a certificate signing request",
"tags": [
"IdentityProviderSigningKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a specific certificate signing request (CSR) by `id`",
"operationId": "getCsrForIdentityProvider",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"CsrJsonResponse": {
"$ref": "#/components/examples/CsrJsonResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdPCsr"
}
},
"application/pkcs10": {
"examples": {
"CsrPkcs10Response": {
"$ref": "#/components/examples/CsrPkcs10Response"
}
},
"schema": {
"$ref": "#/components/schemas/IdPCsrPkcs10"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.read"
]
}
],
"summary": "Retrieve a certificate signing request",
"tags": [
"IdentityProviderSigningKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
},
{
"$ref": "#/components/parameters/pathIdpCsrId"
}
]
},
"/api/v1/idps/{idpId}/credentials/csrs/{idpCsrId}/lifecycle/publish": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
},
{
"$ref": "#/components/parameters/pathIdpCsrId"
}
],
"post": {
"description": "Publishes the certificate signing request (CSR) with a signed X.509 certificate and adds it into the signing key credentials for the identity provider (IdP)\n> **Notes:**\n> * Publishing a certificate completes the lifecycle of the CSR, and it's no longer accessible.\n> * If the validity period of the certificate is less than 90 days, a 400 error response is returned.",
"operationId": "publishCsrForIdentityProvider",
"requestBody": {
"content": {
"application/pkix-cert": {
"schema": {
"description": "X.509 certificate in `DER` format.\nThe client can either post in binary or Base64URL-encoded. If the post is Base64URL-encoded, set the `Content-Transfer-Encoding` header to `base64`.",
"example": "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",
"format": "binary",
"type": "string",
"x-okta-operationId": "publishBinaryDerCertForIdentityProvider"
}
},
"application/x-pem-file": {
"schema": {
"description": "X.509 certificate in `PEM` format",
"example": "@certificate.pem",
"format": "binary",
"type": "string",
"x-okta-operationId": "publishBinaryPemCertForIdentityProvider"
}
},
"application/x-x509-ca-cert": {
"schema": {
"description": "X.509 certificate in `CER` format.\nThe client can either post in binary or Base64URL-encoded. If the post is Base64URL-encoded, set the `Content-Transfer-Encoding` header to `base64`.",
"example": "@certificate.cer",
"format": "binary",
"type": "string",
"x-okta-operationId": "publishBinaryCerCertForIdentityProvider"
}
}
},
"required": true
},
"responses": {
"201": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/IdPKeyCredential"
}
}
},
"description": "Created"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Publish a certificate signing request",
"tags": [
"IdentityProviderSigningKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/idps/{idpId}/credentials/keys": {
"get": {
"description": "Lists all signing key credentials for an identity provider (IdP)",
"operationId": "listIdentityProviderSigningKeys",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"MultipleIdPSigningKeyCredentialsResponse": {
"$ref": "#/components/examples/MultipleIdPSigningKeyCredentialsResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/IdPKeyCredential"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.read"
]
}
],
"summary": "List all signing key credentials for IdP",
"tags": [
"IdentityProviderSigningKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
}
]
},
"/api/v1/idps/{idpId}/credentials/keys/active": {
"get": {
"description": "Lists the active signing key credential for an identity provider (IdP)",
"operationId": "listActiveIdentityProviderSigningKey",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ActiveIdPSigningKeyCredentialResponse": {
"$ref": "#/components/examples/ActiveIdPSigningKeyCredentialResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/IdPKeyCredential"
},
"type": "array"
}
}
},
"description": "Success"
},
"204": {
"content": {},
"description": "No Content"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.read"
]
}
],
"summary": "List the active signing key credential for IdP",
"tags": [
"IdentityProviderSigningKeys"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
}
]
},
"/api/v1/idps/{idpId}/credentials/keys/generate": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
}
],
"post": {
"description": "Generates a new X.509 certificate for an identity provider (IdP) signing key credential to be used for signing assertions sent to the IdP. IdP signing keys are read-only.\n> **Note:** To update an IdP with the newly generated key credential, [update your IdP](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/IdentityProvider/#tag/IdentityProvider/operation/replaceIdentityProvider) using the returned key's `kid` in the [signing credential](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/IdentityProvider/#tag/IdentityProvider/operation/replaceIdentityProvider!path=protocol/0/credentials/signing/kid&t=request).",
"operationId": "generateIdentityProviderSigningKey",
"parameters": [
{
"description": "expiry of the IdP key credential",
"in": "query",
"name": "validityYears",
"required": true,
"schema": {
"format": "int32",
"maximum": 10,
"minimum": 2,
"type": "integer"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"IdPSigningKeyCredentialResponse": {
"$ref": "#/components/examples/IdPSigningKeyCredentialResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdPKeyCredential"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Generate a new signing key credential for IdP",
"tags": [
"IdentityProviderSigningKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/idps/{idpId}/credentials/keys/{kid}": {
"get": {
"description": "Retrieves a specific identity provider (IdP) key credential by `kid`",
"operationId": "getIdentityProviderSigningKey",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"IdPSigningKeyCredentialResponse": {
"$ref": "#/components/examples/IdPSigningKeyCredentialResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdPKeyCredential"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.read"
]
}
],
"summary": "Retrieve a signing key credential for IdP",
"tags": [
"IdentityProviderSigningKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
},
{
"$ref": "#/components/parameters/pathKid"
}
]
},
"/api/v1/idps/{idpId}/credentials/keys/{kid}/clone": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
},
{
"$ref": "#/components/parameters/pathKid"
}
],
"post": {
"description": "Clones an X.509 certificate for an identity provider (IdP) signing key credential from a source IdP to target IdP\n> **Caution:** Sharing certificates isn't a recommended security practice.\n\n> **Note:** If the key is already present in the list of key credentials for the target IdP, you receive a 400 error response.",
"operationId": "cloneIdentityProviderKey",
"parameters": [
{
"description": "`id` of the target IdP",
"in": "query",
"name": "targetIdpId",
"required": true,
"schema": {
"type": "string"
}
}
],
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"IdPSigningKeyCredentialResponse": {
"$ref": "#/components/examples/IdPSigningKeyCredentialResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdPKeyCredential"
}
}
},
"description": "Created"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Clone a signing key credential for IdP",
"tags": [
"IdentityProviderSigningKeys"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/idps/{idpId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
}
],
"post": {
"description": "Activates an inactive identity provider (IdP)",
"operationId": "activateIdentityProvider",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ActivateIdPResponse": {
"$ref": "#/components/examples/ActivateIdPResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdentityProvider"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Activate an IdP",
"tags": [
"IdentityProvider"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/idps/{idpId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
}
],
"post": {
"description": "Deactivates an active identity provider (IdP)",
"operationId": "deactivateIdentityProvider",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"DeactivateIdPResponse": {
"$ref": "#/components/examples/DeactivateIdPResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdentityProvider"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Deactivate an IdP",
"tags": [
"IdentityProvider"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/idps/{idpId}/users": {
"get": {
"description": "Lists all the users linked to an identity provider (IdP)",
"operationId": "listIdentityProviderApplicationUsers",
"parameters": [
{
"$ref": "#/components/parameters/queryFilter"
},
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
},
{
"description": "Expand user data",
"in": "query",
"name": "expand",
"schema": {
"example": "user",
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListIdPUsersResponse": {
"$ref": "#/components/examples/ListIdPUsersResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/IdentityProviderApplicationUser"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.read"
]
}
],
"summary": "List all users for IdP",
"tags": [
"IdentityProviderUsers"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
}
]
},
"/api/v1/idps/{idpId}/users/{userId}": {
"delete": {
"description": "Unlinks the Okta user and the identity provider (IdP) user. The next time the user federates into Okta through this IdP, they have to re-link their account according to the account link policy.",
"operationId": "unlinkUserFromIdentityProvider",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.manage"
]
}
],
"summary": "Unlink a user from IdP",
"tags": [
"IdentityProviderUsers"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a linked identity provider (IdP) user by ID",
"operationId": "getIdentityProviderApplicationUser",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"IdPAppUserResponse": {
"$ref": "#/components/examples/IdPAppUserResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdentityProviderApplicationUser"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.read"
]
}
],
"summary": "Retrieve a user for IdP",
"tags": [
"IdentityProviderUsers"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
},
{
"$ref": "#/components/parameters/pathUserId"
}
],
"post": {
"description": "Links an Okta user to an existing SAML or social identity provider (IdP).\n\nThe SAML IdP must have `honorPersistentNameId` set to `true` to use this API.\nThe [Name Identifier Format](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/IdentityProvider/#tag/IdentityProvider/operation/replaceIdentityProvider!path=protocol/0/settings&t=request) of the incoming assertion must be `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent`.",
"operationId": "linkUserToIdentityProvider",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/UserIdentityProviderLinkRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"LinkIdPAppUserResponse": {
"$ref": "#/components/examples/LinkIdPAppUserResponse"
}
},
"schema": {
"$ref": "#/components/schemas/IdentityProviderApplicationUser"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Link a user to IdP",
"tags": [
"IdentityProviderUsers"
],
"x-codegen-request-body-name": "userIdentityProviderLinkRequest",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/idps/{idpId}/users/{userId}/credentials/tokens": {
"get": {
"description": "Lists the tokens minted by the social authentication provider when the user authenticates with Okta via Social Auth.\n\nOkta doesn't import all the user information from a social provider. If the app needs information that isn't imported, it can get the user token from this endpoint. Then the app can make an API call to the social provider with the token to request the additional information.",
"operationId": "listSocialAuthTokens",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"SocialAuthTokensResponse": {
"$ref": "#/components/examples/SocialAuthTokensResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/SocialAuthToken"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.idps.read"
]
}
],
"summary": "List all tokens from OIDC IdP",
"tags": [
"IdentityProviderUsers"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathIdpId"
},
{
"$ref": "#/components/parameters/pathUserId"
}
]
},
"/api/v1/inlineHooks": {
"get": {
"description": "Lists all inline hooks or all inline hooks of a specific type.\n\nWhen listing a specific inline hook, you need to specify its type. The following types are currently supported:\n | Type Value | Name |\n |------------------------------------|----------------------------------------------------------------|\n | `com.okta.import.transform` | [User import inline hook](/openapi/okta-management/management/management/inlinehook/createuserimportinlinehook) |\n | `com.okta.oauth2.tokens.transform` | [Token inline hook](/openapi/okta-management/management/management/inlinehook/createtokeninlinehook) |\n | `com.okta.saml.tokens.transform` | [SAML assertion inline hook](/openapi/okta-management/management/management/inlinehook/createsamlassertioninlinehook) |\n | `com.okta.telephony.provider` | [Telephony inline hook](/openapi/okta-management/management/management/inlinehook/createtelephonyinlinehook) |\n | `com.okta.user.credential.password.import` | [Password import inline hook](openapi/okta-management/management/management/inlinehook/createpasswordimportinlinehook)|\n | `com.okta.user.pre-registration` | [Registration inline hook](/openapi/okta-management/management/management/inlinehook/create-registration-hook) |",
"operationId": "listInlineHooks",
"parameters": [
{
"$ref": "#/components/parameters/inlineHookType"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"InlineHooktMgmtListAllexample": {
"$ref": "#/components/examples/InlineHooktMgmtListAllexample"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/InlineHook"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.read"
]
}
],
"summary": "List all inline hooks",
"tags": [
"InlineHook"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates an inline hook\n\nThis endpoint creates an inline hook for your org in an `ACTIVE` status. You need to pass an inline hooks object in the JSON payload of your request.\nThat object represents the set of required information about the inline hook that you're registering, including:\n\n* The URI of your external service endpoint\n* The type of inline hook you're registering\n* The type of authentication you're registering\n\nThere are two authentication options that you can configure for your inline hook: HTTP headers and OAuth 2.0 tokens.\n\nHTTP headers let you specify a secret API key that you want Okta to pass to your external service endpoint (so that your external service can check for its presence as a security measure).\n\n>**Note:** The API key that you set here is unrelated to the Okta API token you must supply when making calls to Okta APIs.\n\nYou can also optionally specify extra headers that you want Okta to pass to your external service with each call.\n\nTo configure HTTP header authentication, see parameters for the `config` object.\n\nOAuth 2.0 tokens provide enhanced security between Okta and your external service. You can configure these tokens for the following types—client secret and private key.\n\n>**Note:** Your external service's endpoint needs to be a valid HTTPS endpoint. The URI you specify should always begin with `https://`.\n\nThe total number of inline hooks that you can create in an Okta org is limited to 50, which is a combined total for any combination of inline hook types.",
"operationId": "createInlineHook",
"requestBody": {
"content": {
"application/json": {
"examples": {
"CreateInlineHookHTTP": {
"$ref": "#/components/examples/InlineHookMgmtCreateHTTPRequest"
},
"CreateInlineHookOAuthClientSecret": {
"$ref": "#/components/examples/InlineHookMgmtCreateOAuthClientSecretRequest"
},
"CreateInlineHookOAuthPrivateKey": {
"$ref": "#/components/examples/InlineHookMgmtCreateOAuthPrivateKeyRequest"
}
},
"schema": {
"$ref": "#/components/schemas/InlineHookCreate"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"CreateInlineHookHTTP": {
"$ref": "#/components/examples/InlineHookMgmtCreateHTTPResponse"
},
"CreateInlineHookOAuthClientSecret": {
"$ref": "#/components/examples/InlineHookMgmtCreateOAuthClientSecretResponse"
},
"CreateInlineHookOAuthPrivateKey": {
"$ref": "#/components/examples/InlineHookMgmtCreateOAuthPrivateKeyResponse"
}
},
"schema": {
"$ref": "#/components/schemas/InlineHookCreateResponse"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.manage"
]
}
],
"summary": "Create an inline hook",
"tags": [
"InlineHook"
],
"x-codegen-request-body-name": "inlineHookCreate",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/inlineHooks/{inlineHookId}": {
"delete": {
"description": "Deletes an inline hook by `inlineHookId`. After it's deleted, the inline hook is unrecoverable. As a safety precaution, only inline hooks with a status of `INACTIVE` are eligible for deletion.",
"operationId": "deleteInlineHook",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.manage"
]
}
],
"summary": "Delete an inline hook",
"tags": [
"InlineHook"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves an inline hook by `inlineHookId`",
"operationId": "getInlineHook",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"InlineHookHTTP": {
"$ref": "#/components/examples/InlineHookMgmtHTTPexample"
},
"InlineHookOAuthClientSecret": {
"$ref": "#/components/examples/InlineHookMgmtOAuthCSPexample"
},
"InlineHookOAuthPrivateKey": {
"$ref": "#/components/examples/InlineHookMgmtOauthPKJexample"
}
},
"schema": {
"$ref": "#/components/schemas/InlineHook"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.read"
]
}
],
"summary": "Retrieve an inline hook",
"tags": [
"InlineHook"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathInlineHookId"
}
],
"post": {
"description": "Updates an inline hook by `inlineHookId`",
"operationId": "updateInlineHook",
"requestBody": {
"content": {
"application/json": {
"examples": {
"UpdateInlineHookHTTP": {
"$ref": "#/components/examples/InlineHookMgmtPutHTTPRequest"
}
},
"schema": {
"$ref": "#/components/schemas/InlineHookReplace"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"UpdateInlineHookHTTP": {
"$ref": "#/components/examples/InlineHookMgmtPutResponse"
}
},
"schema": {
"$ref": "#/components/schemas/InlineHook"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.manage"
]
}
],
"summary": "Update an inline hook",
"tags": [
"InlineHook"
],
"x-codegen-request-body-name": "inlineHook",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"put": {
"description": "Replaces an inline hook by `inlineHookId`. The submitted inline hook properties replace the existing properties after passing validation.\n\n>**Note:** Some properties are immutable and can't be updated.",
"operationId": "replaceInlineHook",
"requestBody": {
"content": {
"application/json": {
"examples": {
"UpdateInlineHookHTTP": {
"$ref": "#/components/examples/InlineHookMgmtPutHTTPRequest"
}
},
"schema": {
"$ref": "#/components/schemas/InlineHookReplace"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"UpdateInlineHookHTTP": {
"$ref": "#/components/examples/InlineHookMgmtPutResponse"
}
},
"schema": {
"$ref": "#/components/schemas/InlineHook"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.manage"
]
}
],
"summary": "Replace an inline hook",
"tags": [
"InlineHook"
],
"x-codegen-request-body-name": "inlineHook",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/inlineHooks/{inlineHookId}/execute": {
"parameters": [
{
"$ref": "#/components/parameters/pathInlineHookId"
}
],
"post": {
"description": "Executes the inline hook that matches the provided `inlineHookId` by using the request body as the input. This inline hook sends the provided\ndata through the `channel` object and returns a response if it matches the correct data contract. Otherwise it returns an error. You need to\nconstruct a JSON payload that matches the payloads that Okta would send to your external service for this inline hook type.\n\nA timeout of three seconds is enforced on all outbound requests, with one retry in the event of a timeout or an error response from the remote system.\nIf a successful response isn't received after the request, a 400 error is returned with more information about what failed.\n\n>**Note:** This execution endpoint isn't tied to any other functionality in Okta, and you should only use it for testing purposes.",
"operationId": "executeInlineHook",
"requestBody": {
"content": {
"application/json": {
"examples": {
"PasswordImportPayloadExample": {
"$ref": "#/components/examples/PasswordImportPayloadExample"
},
"ProfileEnrollmentRequest": {
"$ref": "#/components/examples/ProfileEnrollmentRequest"
},
"SAMLPayloadExample": {
"$ref": "#/components/examples/SAMLPayLoadExample"
},
"TelephonyPayloadExample": {
"$ref": "#/components/examples/TelephonyPayloadExample"
},
"TokenPayLoadExample": {
"$ref": "#/components/examples/TokenPayLoadExample"
},
"UserImportPayloadExample": {
"$ref": "#/components/examples/UserImportPayloadExample"
}
},
"schema": {
"oneOf": [
{
"$ref": "#/components/schemas/PasswordImportRequestExecute"
},
{
"$ref": "#/components/schemas/TelephonyRequestExecute"
},
{
"$ref": "#/components/schemas/RegistrationInlineHookRequest"
},
{
"$ref": "#/components/schemas/TokenRequest"
},
{
"$ref": "#/components/schemas/SAMLPayloadExecute"
},
{
"$ref": "#/components/schemas/UserImportRequestExecute"
}
]
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"PasswordImportPayloadExample": {
"$ref": "#/components/examples/PasswordImportVerifiedResponse"
},
"ProfileEnrollmentRequest": {
"$ref": "#/components/examples/ProfileEnrollmentResponse"
},
"SAMLPayloadExample": {
"$ref": "#/components/examples/SAMLHookResponseExample"
},
"TelephonyPayloadExample": {
"$ref": "#/components/examples/TelephonySuccessResponse"
},
"TokenPayLoadExample": {
"$ref": "#/components/examples/TokenHookResponse"
},
"UserImportPayloadExample": {
"$ref": "#/components/examples/UserImportChangeAppUserProfileExample"
}
},
"schema": {
"oneOf": [
{
"$ref": "#/components/schemas/PasswordImportResponse"
},
{
"$ref": "#/components/schemas/TelephonyResponse"
},
{
"$ref": "#/components/schemas/RegistrationInlineHookResponse"
},
{
"$ref": "#/components/schemas/TokenHookResponse"
},
{
"$ref": "#/components/schemas/SAMLHookResponse"
},
{
"$ref": "#/components/schemas/UserImportResponse"
}
],
"x-okta-ignore-redocly-rules-for-sdk": true
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.manage"
]
}
],
"summary": "Execute an inline hook",
"tags": [
"InlineHook"
],
"x-codegen-request-body-name": "payloadData",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/inlineHooks/{inlineHookId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathInlineHookId"
}
],
"post": {
"description": "Activates the inline hook by `inlineHookId`",
"operationId": "activateInlineHook",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ActivateAnInlineHook": {
"$ref": "#/components/examples/InlineHookMgmtOAuthCSPexample"
}
},
"schema": {
"$ref": "#/components/schemas/InlineHook"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.manage"
]
}
],
"summary": "Activate an inline hook",
"tags": [
"InlineHook"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/inlineHooks/{inlineHookId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathInlineHookId"
}
],
"post": {
"description": "Deactivates the inline hook by `inlineHookId`",
"operationId": "deactivateInlineHook",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"DeactivateAnInlineHook": {
"$ref": "#/components/examples/InlineHookMgmtHTTPexampleDeactivate"
}
},
"schema": {
"$ref": "#/components/schemas/InlineHook"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.inlineHooks.manage"
]
}
],
"summary": "Deactivate an inline hook",
"tags": [
"InlineHook"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/logStreams": {
"get": {
"description": "Lists all log stream objects in your org. You can request a paginated list or a subset of log streams that match a supported filter expression.",
"operationId": "listLogStreams",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
},
{
"description": "An expression that [filters](/#filter) the returned objects. You can only use the `eq` operator on either the `status` or `type` properties in the filter expression.",
"in": "query",
"name": "filter",
"schema": {
"example": "type eq \"aws_eventbridge\"",
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ExampleGetAllResponse": {
"$ref": "#/components/examples/LogStreamGetAllResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/LogStream"
},
"type": "array"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.logStreams.read"
]
}
],
"summary": "List all log streams",
"tags": [
"LogStream"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a new log stream object",
"operationId": "createLogStream",
"requestBody": {
"content": {
"application/json": {
"examples": {
"LogStreamPostRequestExample": {
"$ref": "#/components/examples/LogStreamPostRequest"
}
},
"schema": {
"$ref": "#/components/schemas/LogStream"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"LogStreamPostResponseExample": {
"$ref": "#/components/examples/LogStreamPostResponse"
}
},
"schema": {
"$ref": "#/components/schemas/LogStream"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.logStreams.manage"
]
}
],
"summary": "Create a log stream",
"tags": [
"LogStream"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/logStreams/{logStreamId}": {
"delete": {
"description": "Deletes a log stream object from your org by ID",
"operationId": "deleteLogStream",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden",
"headers": {}
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.logStreams.manage"
]
}
],
"summary": "Delete a log stream",
"tags": [
"LogStream"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a log stream object by ID",
"operationId": "getLogStream",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"LogStreamGetRequestExample": {
"$ref": "#/components/examples/LogStreamPostResponse"
}
},
"schema": {
"$ref": "#/components/schemas/LogStream"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.logStreams.read"
]
}
],
"summary": "Retrieve a log stream",
"tags": [
"LogStream"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathLogStreamId"
}
],
"put": {
"description": "Replaces the log stream object properties for a given ID.\n\nThis operation is typically used to update the configuration of a log stream.\nDepending on the type of log stream you want to update, certain properties can't be modified after the log stream is initially created.\nUse the [Retrieve the log stream schema for the schema type](/openapi/okta-management/management/schema/getlogstreamschema) request to determine which properties you can update for the specific log stream type.\nLog stream properties with the `\"writeOnce\" : true` attribute can't be updated after creation.\nYou must still specify these `writeOnce` properties in the request body with the original values in the PUT request.\n\n> **Note:** You don't have to specify properties that have both the `\"writeOnce\": true` and the `\"writeOnly\": true` attributes in the PUT request body. These property values are ignored even if you add them in the PUT request body.",
"operationId": "replaceLogStream",
"requestBody": {
"content": {
"application/json": {
"examples": {
"LogStreamPutRequestExample": {
"$ref": "#/components/examples/LogStreamPutRequest"
}
},
"schema": {
"$ref": "#/components/schemas/LogStreamPutSchema"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"LogStreamPostResponseExample": {
"$ref": "#/components/examples/LogStreamPutResponse"
}
},
"schema": {
"$ref": "#/components/schemas/LogStream"
}
}
},
"description": "OK"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.logStreams.manage"
]
}
],
"summary": "Replace a log stream",
"tags": [
"LogStream"
],
"x-codegen-request-body-name": "instance",
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/logStreams/{logStreamId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathLogStreamId"
}
],
"post": {
"description": "Activates a log stream by `logStreamId`",
"operationId": "activateLogStream",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"LogStreamActivateResponseExample": {
"$ref": "#/components/examples/LogStreamActivateResponse"
}
},
"schema": {
"$ref": "#/components/schemas/LogStream"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.logStreams.manage"
]
}
],
"summary": "Activate a log stream",
"tags": [
"LogStream"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/logStreams/{logStreamId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathLogStreamId"
}
],
"post": {
"description": "Deactivates a log stream by `logStreamId`",
"operationId": "deactivateLogStream",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"LogStreamDeactivateResponseExample": {
"$ref": "#/components/examples/LogStreamDeactivateResponse"
}
},
"schema": {
"$ref": "#/components/schemas/LogStream"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.logStreams.manage"
]
}
],
"summary": "Deactivate a log stream",
"tags": [
"LogStream"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/logs": {
"get": {
"description": "Lists all System Log events\n\nSee [System Log query](https://developer.okta.com/docs/reference/system-log-query/) for further details and examples, and [System Log filters and search](https://help.okta.com/okta_help.htm?type=oie&id=csh-syslog-filters) for common use cases.\n\nBy default, 100 System Log events are returned. If there are more events, see the [header link](https://developer.okta.com/docs/api/#link-header) for the `next` link,\nor increase the number of returned objects using the `limit` parameter.\n\n>**Note:** The value of the `clientSecret` property in the System Log is secured by a hashing function, and isn't the value used during authentication.",
"operationId": "listLogEvents",
"parameters": [
{
"description": "Filters the lower time bound of the log events `published` property for bounded queries or persistence time for polling queries",
"in": "query",
"name": "since",
"schema": {
"default": "7 days prior to until",
"format": "ISO 8601 compliant timestamp",
"type": "string"
}
},
{
"description": "Filters the upper time bound of the log events `published` property for bounded queries or persistence time for polling queries.",
"in": "query",
"name": "until",
"schema": {
"default": "current time",
"format": "ISO 8601 compliant timestamp",
"type": "string"
}
},
{
"description": "Retrieves the next page of results. Okta returns a link in the HTTP Header (`rel=next`) that includes the after query parameter",
"in": "query",
"name": "after",
"schema": {
"format": "Opaque token",
"type": "string"
}
},
{
"description": "Filter expression that filters the results. All operators except [ ] are supported. See [Filter](https://developer.okta.com/docs/api/#filter) and [Operators](https://developer.okta.com/docs/api/#operators).",
"in": "query",
"name": "filter",
"schema": {
"format": "SCIM Filter expression",
"type": "string"
}
},
{
"description": "Filters log events results by one or more case insensitive keywords.",
"in": "query",
"name": "q",
"schema": {
"format": "URL encoded string. Max length is 40 characters per keyword, with a maximum of 10 keyword filters per query (before encoding)",
"type": "string"
}
},
{
"description": "Sets the number of results that are returned in the response",
"in": "query",
"name": "limit",
"schema": {
"default": 100,
"format": "Integer between 0 and 1000",
"type": "integer"
}
},
{
"description": "The order of the returned events that are sorted by the `published` property",
"in": "query",
"name": "sortOrder",
"schema": {
"default": "ASCENDING",
"enum": [
"ASCENDING",
"DESCENDING"
],
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListLogs": {
"$ref": "#/components/examples/ListLogs"
},
"ListLogsWithAdditionalSecurityContext": {
"$ref": "#/components/examples/ListLogsWithAdditionalSecurityContext"
},
"LogTargetChangeDetails": {
"$ref": "#/components/examples/LogTargetChangeDetails"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/LogEvent"
},
"type": "array"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.logs.read"
]
}
],
"summary": "List all System Log events",
"tags": [
"SystemLog"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/mappings": {
"get": {
"description": "Lists all profile mappings in your org with [pagination](https://developer.okta.com/docs/api/#pagination). You can return a subset of profile mappings that match a supported `sourceId` and/or `targetId`.\n\nThe results are [paginated](/#pagination) according to the `limit` parameter. If there are multiple pages of results, the Link header contains a `next` link that you should treat as an opaque value (follow it, don't parse it). See [Link Header](https://developer.okta.com/docs/api/#link-header).\n\nThe response is a collection of profile mappings that include a subset of the profile mapping object's parameters. The profile mapping object describes\nthe properties mapping between an Okta user and an app user profile using [JSON Schema Draft 4](https://datatracker.ietf.org/doc/html/draft-zyp-json-schema-04).",
"operationId": "listProfileMappings",
"parameters": [
{
"description": "Mapping `id` that specifies the pagination cursor for the next page of mappings",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the number of results per page\n> **Note:** If you encounter timeout errors with larger values, reduce the limit (for example, `50`) and use pagination with the `after` parameter to retrieve the results.",
"in": "query",
"name": "limit",
"schema": {
"default": 20,
"format": "int32",
"maximum": 200,
"type": "integer"
}
},
{
"description": "The user type or app instance ID that acts as the source of expressions in a mapping. If this parameter is included, all returned mappings have this as their `source.id`.",
"in": "query",
"name": "sourceId",
"schema": {
"type": "string"
}
},
{
"description": "The user type or app instance ID that acts as the target of expressions in a mapping. If this parameter is included, all returned mappings have this as their `target.id`.",
"in": "query",
"name": "targetId",
"schema": {
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"MappingList": {
"$ref": "#/components/examples/ListMappingsResponse",
"summary": "List all profile mappings response"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/ListProfileMappings"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.profileMappings.read"
]
}
],
"summary": "List all profile mappings",
"tags": [
"ProfileMapping"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/mappings/{mappingId}": {
"get": {
"description": "Retrieves a single profile mapping referenced by its ID",
"operationId": "getProfileMapping",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"MappingRetrieve": {
"$ref": "#/components/examples/RetrieveMappingsResponse",
"summary": "Retrieve a single profile mapping"
}
},
"schema": {
"$ref": "#/components/schemas/ProfileMapping"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.profileMappings.read"
]
}
],
"summary": "Retrieve a profile mapping",
"tags": [
"ProfileMapping"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathMappingId"
}
],
"post": {
"description": "Updates an existing profile mapping by adding, updating, or removing one or many property mappings",
"operationId": "updateProfileMapping",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Addpropertymapping": {
"$ref": "#/components/examples/AddMappingBody"
},
"Removepropertymapping": {
"$ref": "#/components/examples/RemoveMappingBody"
},
"Updatepropertymapping": {
"$ref": "#/components/examples/UpdateMappingBody"
}
},
"schema": {
"$ref": "#/components/schemas/ProfileMappingRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Addpropertymapping": {
"$ref": "#/components/examples/AddMappingResponse",
"summary": "Update an existing profile mapping by adding one or more properties"
},
"Removepropertymapping": {
"$ref": "#/components/examples/RemoveMappingResponse",
"summary": "Update an existing profile mapping by removing one or more properties"
},
"Updatepropertymapping": {
"$ref": "#/components/examples/UpdateMappingResponse",
"summary": "Update an existing profile mapping by updating one or more properties"
}
},
"schema": {
"$ref": "#/components/schemas/ProfileMapping"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.profileMappings.manage"
]
}
],
"summary": "Update a profile mapping",
"tags": [
"ProfileMapping"
],
"x-codegen-request-body-name": "profileMapping",
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/meta/layouts/apps/{appName}": {
"parameters": [
{
"$ref": "#/components/parameters/pathAppName"
}
]
},
"/api/v1/meta/layouts/apps/{appName}/sections/{section}/{operation}": {
"parameters": [
{
"$ref": "#/components/parameters/pathAppName"
},
{
"$ref": "#/components/parameters/pathSection"
},
{
"$ref": "#/components/parameters/pathOperation"
}
]
},
"/api/v1/meta/schemas/apps/{appId}/default": {
"get": {
"description": "Retrieves the default schema for an app user.\n\nThe [User Types](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserType/) feature does not extend to apps. All users assigned to a given app use the same app user schema. Therefore, unlike the user schema operations, the app user schema operations all specify `default` and don't accept a schema ID.",
"operationId": "getApplicationUserSchema",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Response with a subset of properties for brevity": {
"$ref": "#/components/examples/DefaultAppUserSchemaResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserSchema"
}
}
},
"description": "successful operation"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.schemas.read"
]
}
],
"summary": "Retrieve the default app user schema for an app",
"tags": [
"Schema"
],
"x-okta-iam-admin-roles": [
"API_ACCESS_MANAGEMENT_ADMIN",
"READ_ONLY_ADMIN",
"MOBILE_ADMIN",
"ORG_ADMIN",
"APP_ADMIN"
],
"x-okta-iam-permissions": [
"okta.apps.read",
"okta.apps.manage"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathAppId"
}
],
"post": {
"description": "Updates the app user schema. This updates, adds, or removes one or more custom profile properties or the nullability of a base property in the app user schema for an app. Changing a base property's nullability (for example, the value of its `required` field) is allowed only if it is nullable in the default predefined schema for the app.\n\n> **Note:** You must set properties explicitly to `null` to remove them from the schema; otherwise, `POST` is interpreted as a partial update.\n\nThe [User Types](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserType/) feature does not extend to apps. All users assigned to a given app use the same app user schema. Therefore, unlike the user schema operations, the app user schema operations all specify `default` and don't accept a schema ID.",
"operationId": "updateApplicationUserProfile",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Add a custom property to the app user schema": {
"$ref": "#/components/examples/AppUserSchemaAddRequest"
}
},
"schema": {
"$ref": "#/components/schemas/UserSchema"
}
}
},
"required": false
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Response with a subset of properties for brevity": {
"$ref": "#/components/examples/AppUserSchemaResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserSchema"
}
}
},
"description": "successful operation"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.schemas.manage"
]
}
],
"summary": "Update the app user profile schema for an app",
"tags": [
"Schema"
],
"x-codegen-request-body-name": "body",
"x-okta-iam-admin-roles": [
"API_ACCESS_MANAGEMENT_ADMIN",
"APP_ADMIN"
],
"x-okta-iam-permissions": [
"okta.apps.manage"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/meta/schemas/group/default": {
"get": {
"description": "Retrieves the group schema\n\nThe [User Types](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserType/) feature does not extend to groups. All groups use the same group schema. Unlike user schema operations, group schema operations all specify `default` and don't accept a schema ID.",
"operationId": "getGroupSchema",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Response with a subset of properties for brevity": {
"$ref": "#/components/examples/GroupSchemaResponse"
}
},
"schema": {
"$ref": "#/components/schemas/GroupSchema"
}
}
},
"description": "successful operation"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.schemas.read"
]
}
],
"summary": "Retrieve the default group schema",
"tags": [
"Schema"
],
"x-okta-iam-admin-roles": [
"API_ACCESS_MANAGEMENT_ADMIN",
"APP_ADMIN",
"ORG_ADMIN"
],
"x-okta-iam-permissions": [
"okta.apps.manage"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Updates the group profile schema. This updates, adds, or removes one or more custom profile properties in a group schema. Currently Okta does not support changing base group profile properties.\n\n> **Note:** You must set properties explicitly to `null` to remove them from the schema; otherwise, `POST` is interpreted as a partial update.\n\nThe [User Types](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserType/) feature does not extend to groups. All groups use the same group schema. Unlike user schema operations, group schema operations all specify `default` and don't accept a schema ID.",
"operationId": "updateGroupSchema",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Add a custom property to the group schema": {
"$ref": "#/components/examples/GroupSchemaAddRequest"
}
},
"schema": {
"$ref": "#/components/schemas/GroupSchema"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"example": {
"Response with a subset of properties for brevity": {
"$ref": "#/components/examples/GroupSchemaResponse"
}
},
"schema": {
"$ref": "#/components/schemas/GroupSchema"
}
}
},
"description": "successful operation"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.schemas.manage"
]
}
],
"summary": "Update the group profile schema",
"tags": [
"Schema"
],
"x-okta-iam-admin-roles": [
"API_ACCESS_MANAGEMENT_ADMIN",
"APP_ADMIN",
"ORG_ADMIN"
],
"x-okta-iam-permissions": [
"okta.apps.manage"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/meta/schemas/logStream": {
"get": {
"description": "Lists the schema for all log stream types visible for this org",
"operationId": "listLogStreamSchemas",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"All log stream schemas for your org": {
"$ref": "#/components/examples/LogStreamSchemaList"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/LogStreamSchema"
},
"type": "array"
}
}
},
"description": "successful operation"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.logStreams.read"
]
}
],
"summary": "List the log stream schemas",
"tags": [
"Schema"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/api/v1/meta/schemas/logStream/{logStreamType}": {
"get": {
"description": "Retrieves the schema for a log stream type. The `logStreamType` element in the URL specifies the log stream type, which is either `aws_eventbridge` or `splunk_cloud_logstreaming`. Use the `aws_eventbridge` literal to retrieve the AWS EventBridge type schema, and use the `splunk_cloud_logstreaming` literal retrieve the Splunk Cloud type schema.",
"operationId": "getLogStreamSchema",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Schema for type `aws_eventbridge`": {
"$ref": "#/components/examples/LogStreamSchemaAws"
},
"Schema for type `splunk_cloud_logstreaming`": {
"$ref": "#/components/examples/LogStreamSchemaSplunk"
}
},
"schema": {
"$ref": "#/components/schemas/LogStreamSchema"
}
}
},
"description": "successful operation"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.logStreams.read"
]
}
],
"summary": "Retrieve the log stream schema for the schema type",
"tags": [
"Schema"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathLogStreamType"
}
]
},
"/api/v1/meta/schemas/user/linkedObjects": {
"get": {
"description": "Lists all Linked Object definitions",
"operationId": "listLinkedObjectDefinitions",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListLinkedObjectsEx": {
"$ref": "#/components/examples/ListLinkedObjects"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/LinkedObject"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.linkedObjects.read"
]
}
],
"summary": "List all linked object definitions",
"tags": [
"LinkedObject"
],
"x-okta-iam-admin-roles": [
"API_ACCESS_MANAGEMENT_ADMIN",
"APP_ADMIN",
"ORG_ADMIN"
],
"x-okta-iam-permissions": [
"okta.apps.manage"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a Linked Object definition",
"operationId": "createLinkedObjectDefinition",
"requestBody": {
"content": {
"application/json": {
"examples": {
"CreateLinkedObjectRequestEx": {
"$ref": "#/components/examples/CreateLinkedObjectRequest"
}
},
"schema": {
"$ref": "#/components/schemas/LinkedObject"
}
}
},
"required": true
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"CreateLinkedObjectResponseEx": {
"$ref": "#/components/examples/CreateLinkedObjectResponse"
}
},
"schema": {
"$ref": "#/components/schemas/LinkedObject"
}
}
},
"description": "Created"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"409": {
"content": {
"application/json": {
"examples": {
"ErrorInvalidLinkedObjectDefEx": {
"$ref": "#/components/examples/ErrorInvalidLinkedObjectDef"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Conflict"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.linkedObjects.manage"
]
}
],
"summary": "Create a linked object definition",
"tags": [
"LinkedObject"
],
"x-codegen-request-body-name": "linkedObject",
"x-okta-iam-admin-roles": [
"API_ACCESS_MANAGEMENT_ADMIN",
"APP_ADMIN",
"ORG_ADMIN"
],
"x-okta-iam-permissions": [
"okta.apps.manage"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/meta/schemas/user/linkedObjects/{linkedObjectName}": {
"delete": {
"description": "Deletes the Linked Object definition specified by either the `primary` or `associated` name. The entire definition is removed, regardless of which name that you specify.",
"operationId": "deleteLinkedObjectDefinition",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.linkedObjects.manage"
]
}
],
"summary": "Delete a linked object definition",
"tags": [
"LinkedObject"
],
"x-okta-iam-admin-roles": [
"API_ACCESS_MANAGEMENT_ADMIN",
"APP_ADMIN",
"ORG_ADMIN"
],
"x-okta-iam-permissions": [
"okta.apps.manage"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a Linked Object definition",
"operationId": "getLinkedObjectDefinition",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"CreateLinkedObjectResponseEx": {
"$ref": "#/components/examples/CreateLinkedObjectResponse"
}
},
"schema": {
"$ref": "#/components/schemas/LinkedObject"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.linkedObjects.read"
]
}
],
"summary": "Retrieve a linked object definition",
"tags": [
"LinkedObject"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathLinkedObjectName"
}
]
},
"/api/v1/meta/schemas/user/{schemaId}": {
"get": {
"description": "Retrieves the schema for a user type",
"operationId": "getUserSchema",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Response using default with a subset of properties for brevity": {
"$ref": "#/components/examples/UserSchemaDefaultResponse"
},
"Response with a subset of properties for brevity": {
"$ref": "#/components/examples/UserSchemaResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserSchema"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.schemas.read"
]
}
],
"summary": "Retrieve a user schema",
"tags": [
"Schema"
],
"x-okta-iam-admin-roles": [
"API_ACCESS_MANAGEMENT_ADMIN",
"APP_ADMIN",
"ORG_ADMIN"
],
"x-okta-iam-permissions": [
"okta.apps.manage"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathSchemaId"
}
],
"post": {
"description": "Updates a user schema. Use this request to update, add, or remove one or more profile properties in a user schema. If you specify `default` for the `schemaId`, updates will apply to the default user type.\n\nUnlike custom user profile properties, limited changes are allowed to base user profile properties (permissions, nullability of the `firstName` and `lastName` properties, or pattern for `login`).\nYou can't remove a property from the default schema if it's being referenced as a [`matchAttribute`](/openapi/okta-management/management/tags/identityprovider/other/createidentityprovider#other/createidentityprovider/t=request&path=policy/subject/matchattribute) in `SAML2` IdPs.\nCurrently, all validation of SAML assertions are only performed against the default user type.\n\n> **Note:** You must set properties explicitly to `null` to remove them from the schema; otherwise, `POST` is interpreted as a partial update.",
"operationId": "updateUserProfile",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Add a custom property to the user schema": {
"$ref": "#/components/examples/UserSchemaAddRequest"
}
},
"schema": {
"$ref": "#/components/schemas/UserSchema"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Response with a subset of properties for brevity": {
"$ref": "#/components/examples/UserSchemaResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserSchema"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.schemas.manage"
]
}
],
"summary": "Update a user schema",
"tags": [
"Schema"
],
"x-codegen-request-body-name": "userSchema",
"x-okta-iam-admin-roles": [
"API_ACCESS_MANAGEMENT_ADMIN",
"ORG_ADMIN",
"APP_ADMIN"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/meta/types/user": {
"get": {
"description": "Lists all user types in your org",
"operationId": "listUserTypes",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListsAllUserTypes": {
"$ref": "#/components/examples/ListsAllUserTypes"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/UserType"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.userTypes.read"
]
}
],
"summary": "List all user types",
"tags": [
"UserType"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a new user type. Okta automatically creates a `default` user type for your org. You may add up to nine additional user types.\n> **Note**: New user types are based on the current default schema template. Modifications to this schema do not automatically propagate to previously created user types.",
"operationId": "createUserType",
"requestBody": {
"content": {
"application/json": {
"examples": {
"CreateUserRequest": {
"$ref": "#/components/examples/CreateUserRequest"
}
},
"schema": {
"$ref": "#/components/schemas/UserType"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"CreateUserResponse": {
"$ref": "#/components/examples/CreateUserResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserType"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.userTypes.manage"
]
}
],
"summary": "Create a user type",
"tags": [
"UserType"
],
"x-codegen-request-body-name": "userType",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/meta/types/user/{typeId}": {
"delete": {
"description": "Deletes a user type permanently.\n> **Note**: You can't delete the default user type or a user type that is currently assigned to users.",
"operationId": "deleteUserType",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.userTypes.manage"
]
}
],
"summary": "Delete a user type",
"tags": [
"UserType"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a user type by ID. Use `default` to fetch the default user type.",
"operationId": "getUserType",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GetUserResponse": {
"$ref": "#/components/examples/GetUserResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserType"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.userTypes.read"
]
}
],
"summary": "Retrieve a user type",
"tags": [
"UserType"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathTypeId"
}
],
"post": {
"description": "Updates an existing user type. This operation is a partial update.\n> **Note**: You can only update the `displayName` and `description` elements. The `name` of an existing user type can't be changed.",
"operationId": "updateUserType",
"requestBody": {
"content": {
"application/json": {
"examples": {
"UpdateUserTypePostRequest": {
"$ref": "#/components/examples/UpdateUserTypePostRequest"
}
},
"schema": {
"$ref": "#/components/schemas/UserTypePostRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"UpdateUserTypePutRequest": {
"$ref": "#/components/examples/UpdateUserTypePostResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserType"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.userTypes.manage"
]
}
],
"summary": "Update a user type",
"tags": [
"UserType"
],
"x-codegen-request-body-name": "userType",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"put": {
"description": "Replaces an existing user type. This operation is a full update.\n> **Note**: The `name` of an existing user type can't be changed, but must be part of the request body. You can only replace the `displayName` and `description` elements.",
"operationId": "replaceUserType",
"requestBody": {
"content": {
"application/json": {
"examples": {
"ReplaceUserTypePutRequest": {
"$ref": "#/components/examples/ReplaceUserTypePutRequest"
}
},
"schema": {
"$ref": "#/components/schemas/UserTypePutRequest"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ReplaceUserTypePutResponse": {
"$ref": "#/components/examples/ReplaceUserTypePutResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserType"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.userTypes.manage"
]
}
],
"summary": "Replace a user type",
"tags": [
"UserType"
],
"x-codegen-request-body-name": "userType",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/meta/uischemas": {
"get": {
"description": "Lists all UI Schemas in your org",
"operationId": "listUISchemas",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"UIISchemaList": {
"$ref": "#/components/examples/ListUISchemaResponse",
"summary": "Lists all UI schemas response"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/UISchemasResponseObject"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.uischemas.read"
]
}
],
"summary": "List all UI schemas",
"tags": [
"UISchema"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"post": {
"description": "Creates an input for an enrollment form",
"operationId": "createUISchema",
"requestBody": {
"content": {
"application/json": {
"examples": {
"UISchemaCreate": {
"$ref": "#/components/examples/CreateUISchemaBody"
}
},
"schema": {
"$ref": "#/components/schemas/CreateUISchema"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"UISchemaCreate": {
"$ref": "#/components/examples/CreateUISchemaResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UISchemasResponseObject"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.uischemas.manage"
]
}
],
"summary": "Create a UI schema",
"tags": [
"UISchema"
],
"x-codegen-request-body-name": "uischemabody",
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/meta/uischemas/{id}": {
"delete": {
"description": "Deletes a UI Schema by `id`",
"operationId": "deleteUISchemas",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.uischemas.manage"
]
}
],
"summary": "Delete a UI schema",
"tags": [
"UISchema"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"get": {
"description": "Retrieves a UI Schema by `id`",
"operationId": "getUISchema",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"UISchemaRetrieve": {
"$ref": "#/components/examples/RetrieveUISchemaResponse",
"summary": "Retrieves a UI schema response"
}
},
"schema": {
"$ref": "#/components/schemas/UISchemasResponseObject"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.uischemas.read"
]
}
],
"summary": "Retrieve a UI schema",
"tags": [
"UISchema"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/UISchemaId"
}
],
"put": {
"description": "Replaces a UI Schema by `id`",
"operationId": "replaceUISchemas",
"requestBody": {
"content": {
"application/json": {
"examples": {
"UISchemaPUT": {
"$ref": "#/components/examples/CreateUISchemaBody"
}
},
"schema": {
"$ref": "#/components/schemas/UpdateUISchema"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"UISchemaUpdate": {
"$ref": "#/components/examples/CreateUISchemaResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UISchemasResponseObject"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.uischemas.manage"
]
}
],
"summary": "Replace a UI schema",
"tags": [
"UISchema"
],
"x-codegen-request-body-name": "updateUISchemaBody",
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/org": {
"get": {
"description": "Retrieves the Org General Settings",
"operationId": "getOrgSettings",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"example-1": {
"$ref": "#/components/examples/OrgSettingResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OrgSetting"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.read"
]
}
],
"summary": "Retrieve the Org general settings",
"tags": [
"OrgSettingGeneral"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Updates partial Org General Settings",
"operationId": "updateOrgSettings",
"requestBody": {
"content": {
"application/json": {
"examples": {
"example-1": {
"$ref": "#/components/examples/UpdateOrgSettingEx"
}
},
"schema": {
"$ref": "#/components/schemas/OrgSetting"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"example-1": {
"$ref": "#/components/examples/OrgSettingResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OrgSetting"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Update the Org general settings",
"tags": [
"OrgSettingGeneral"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"put": {
"description": "Replaces the Org General Settings for your Okta org",
"operationId": "replaceOrgSettings",
"requestBody": {
"content": {
"application/json": {
"examples": {
"example-1": {
"$ref": "#/components/examples/UpdateOrgSettingEx"
}
},
"schema": {
"$ref": "#/components/schemas/OrgSetting"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"example-1": {
"$ref": "#/components/examples/OrgSettingResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OrgSetting"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Replace the Org general settings",
"tags": [
"OrgSettingGeneral"
],
"x-codegen-request-body-name": "orgSetting",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/captcha": {
"delete": {
"description": "Deletes the CAPTCHA settings object for your organization",
"operationId": "deleteOrgCaptchaSettings",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.captchas.manage"
]
}
],
"summary": "Delete the org-wide CAPTCHA settings",
"tags": [
"CAPTCHA"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"get": {
"description": "Retrieves the CAPTCHA settings object for your organization\n> **Note**: If the current organization hasn't configured CAPTCHA Settings, the request returns an empty object.",
"operationId": "getOrgCaptchaSettings",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"configured": {
"$ref": "#/components/examples/OrgCAPTCHASettingsConfigured"
},
"empty": {
"$ref": "#/components/examples/OrgCAPTCHASettingsEmpty"
}
},
"schema": {
"$ref": "#/components/schemas/OrgCAPTCHASettings"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.captchas.read"
]
}
],
"summary": "Retrieve the org-wide CAPTCHA settings",
"tags": [
"CAPTCHA"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"put": {
"description": "Replaces the CAPTCHA settings object for your organization\n> **Note**: You can disable CAPTCHA for your organization by setting `captchaId` and `enabledPages` to `null`.",
"operationId": "replacesOrgCaptchaSettings",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Disable": {
"$ref": "#/components/examples/OrgCAPTCHASettingsDisable"
},
"Update": {
"$ref": "#/components/examples/OrgCAPTCHASettingsUpdate"
}
},
"schema": {
"$ref": "#/components/schemas/OrgCAPTCHASettings"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Disable": {
"$ref": "#/components/examples/OrgCAPTCHASettingsDisabled"
},
"Update": {
"$ref": "#/components/examples/OrgCAPTCHASettingsUpdated"
}
},
"schema": {
"$ref": "#/components/schemas/OrgCAPTCHASettings"
}
}
},
"description": "Success"
},
"400": {
"content": {
"application/json": {
"examples": {
"NoDisable": {
"$ref": "#/components/examples/ErrorCAPTCHAOrgWideSettingNull"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Bad Request",
"headers": {}
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.captchas.manage"
]
}
],
"summary": "Replace the org-wide CAPTCHA settings",
"tags": [
"CAPTCHA"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/org/contacts": {
"get": {
"description": "Lists all org contact types for your Okta org",
"operationId": "listOrgContactTypes",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"orgContactTypeEx": {
"$ref": "#/components/examples/orgContactTypeResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/OrgContactTypeObj"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.read"
]
}
],
"summary": "List all org contact types",
"tags": [
"OrgSettingContact"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/contacts/{contactType}": {
"get": {
"description": "Retrieves the ID and the user resource associated with the specified contact type",
"operationId": "getOrgContactUser",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"contactTypeUserEx": {
"$ref": "#/components/examples/orgContactUserResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OrgContactUser"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.read"
]
}
],
"summary": "Retrieve the contact type user",
"tags": [
"OrgSettingContact"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathContactType"
}
],
"put": {
"description": "Replaces the user associated with the specified contact type",
"operationId": "replaceOrgContactUser",
"requestBody": {
"content": {
"application/json": {
"examples": {
"contactTypeUserEx": {
"summary": "Contact user",
"value": {
"userId": "00ux3u0ujW1r5AfZC1d7"
}
}
},
"schema": {
"$ref": "#/components/schemas/OrgContactUser"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"contactTypeUserEx": {
"$ref": "#/components/examples/orgContactUserResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OrgContactUser"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Replace the contact type user",
"tags": [
"OrgSettingContact"
],
"x-codegen-request-body-name": "orgContactUser",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/email/bounces/remove-list": {
"post": {
"description": "Removes emails from an email service bounce list.\n\nThe emails submitted in this operation are removed from the bounce list by an asynchronous job.\nAny email address that passes validation is accepted for the removal process, even if there are other email addresses in the request that failed validation.\n\n> **Note:** If there are validation errors for all email addresses, a `200 OK` HTTP status is still returned.\n",
"operationId": "bulkRemoveEmailAddressBounces",
"requestBody": {
"content": {
"application/json": {
"examples": {
"example-1": {
"summary": "Request example",
"value": {
"emailAddresses": [
"name@company.com",
"unknown.email@okta.com",
"name@okta@com"
]
}
}
},
"schema": {
"$ref": "#/components/schemas/BouncesRemoveListObj"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"example-1": {
"summary": "Response example",
"value": {
"errors": [
{
"emailAddress": "unknown.email@okta.com",
"reason": "This email address does not belong to any user in your organization."
},
{
"emailAddress": "name@okta@com",
"reason": "Invalid email address. The provided email address failed validation against RFC 3696."
}
]
}
}
},
"schema": {
"$ref": "#/components/schemas/BouncesRemoveListResult"
}
}
},
"description": "OK"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Remove bounced emails",
"tags": [
"EmailCustomization"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/factors/yubikey_token/tokens": {
"get": {
"description": "Lists all YubiKey OTP tokens",
"operationId": "listYubikeyOtpTokens",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListYubikeyOptTokensResponse": {
"$ref": "#/components/examples/ListYubikeyOptTokensResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/UserFactorYubikeyOtpToken"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List all YubiKey OTP tokens",
"tags": [
"UserFactor"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"description": "Specifies the pagination cursor for the next page of tokens",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
},
{
"description": "Embeds the [user](/openapi/okta-management/management/tags/user) resource if the YubiKey token is assigned to a user and `expand` is set to `user`",
"in": "query",
"name": "expand",
"schema": {
"type": "string"
}
},
{
"description": "The expression used to filter tokens",
"in": "query",
"name": "filter",
"schema": {
"enum": [
"profile.email",
"profile.serial",
"activated",
"user.id",
"created",
"status",
"lastVerified"
],
"type": "string"
}
},
{
"description": "Returns tokens in a CSV to download instead of in the response. When you use this query parameter, the `limit` default changes to 1000.",
"in": "query",
"name": "forDownload",
"schema": {
"default": false,
"type": "boolean"
}
},
{
"description": "Specifies the number of results per page",
"in": "query",
"name": "limit",
"schema": {
"default": 20,
"maximum": 200,
"type": "integer"
}
},
{
"description": "The value of how the tokens are sorted",
"in": "query",
"name": "sortBy",
"schema": {
"enum": [
"profile.email",
"profile.serial",
"activated",
"user.id",
"created",
"status",
"lastVerified"
],
"type": "string"
}
},
{
"description": "Specifies the sort order, either `ASC` or `DESC`",
"in": "query",
"name": "sortOrder",
"schema": {
"enum": [
"ASC",
"DESC"
],
"type": "string"
}
}
],
"post": {
"description": "Uploads a seed for a user to enroll a YubiKey OTP",
"operationId": "uploadYubikeyOtpTokenSeed",
"requestBody": {
"content": {
"application/json": {
"examples": {
"uploadYubikeyOtpSeedRequest": {
"$ref": "#/components/examples/UploadYubikeyTokenSeedRequest"
}
},
"schema": {
"properties": {
"aesKey": {
"description": "The cryptographic key used in the AES (Advanced Encryption Standard) algorithm to encrypt and decrypt the YubiKey OTP",
"type": "string"
},
"privateId": {
"description": "The YubiKey's private ID",
"type": "string"
},
"publicId": {
"description": "The YubiKey's public ID",
"type": "string"
},
"serialNumber": {
"description": "The unique identifier assigned to each YubiKey device",
"type": "string"
}
},
"type": "object"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"yubikeyToken": {
"$ref": "#/components/examples/UploadYubikeyTokenSeedResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserFactorYubikeyOtpToken"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Upload a YubiKey OTP seed",
"tags": [
"UserFactor"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/factors/yubikey_token/tokens/{tokenId}": {
"get": {
"description": "Retrieves the specified YubiKey OTP token by `id`",
"operationId": "getYubikeyOtpTokenById",
"parameters": [
{
"description": "The YubiKey OTP token ID",
"in": "path",
"name": "tokenId",
"required": true,
"schema": {
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Token": {
"$ref": "#/components/examples/GetYubikeyOptTokenResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserFactorYubikeyOtpToken"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "Retrieve a YubiKey OTP token",
"tags": [
"UserFactor"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/yubikeyTokenId"
}
]
},
"/api/v1/org/orgSettings/thirdPartyAdminSetting": {
"get": {
"description": "Retrieves the third-party admin setting. See [Configure third-party administrators](https://help.okta.com/okta_help.htm?type=oie&id=csh_admin-third) in the Okta product documentation.",
"operationId": "getThirdPartyAdminSetting",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ThirdPartyAdminSetting"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.read"
]
}
],
"summary": "Retrieve the org third-party admin setting",
"tags": [
"OrgSettingAdmin"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Updates the third-party admin setting.\nThis setting allows third-party admins to perform administrative actions in the Admin Console, but they can't do any of the following:\n * Receive Okta admin email notifications\n * Contact Okta support\n * Sign in to the Okta Help Center\n\nSee [Configure third-party administrators](https://help.okta.com/okta_help.htm?type=oie&id=csh_admin-third) in the Okta product documentation.\n",
"operationId": "updateThirdPartyAdminSetting",
"parameters": [],
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ThirdPartyAdminSetting"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ThirdPartyAdminSetting"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Update the org third-party admin setting",
"tags": [
"OrgSettingAdmin"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/preferences": {
"get": {
"description": "Retrieves preferences of your Okta org",
"operationId": "getOrgPreferences",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"retrieveOrgPrefEx": {
"$ref": "#/components/examples/orgShowFooterPrefResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OrgPreferences"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.read"
]
}
],
"summary": "Retrieve the org preferences",
"tags": [
"OrgSettingCustomization"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/preferences/hideEndUserFooter": {
"post": {
"description": "Sets the preference to hide the Okta End-User Dashboard footer for all end users of your org",
"operationId": "setOrgHideOktaUIFooter",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"hideOrgPrefEx": {
"$ref": "#/components/examples/orgHideFooterPrefResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OrgPreferences"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Set the hide dashboard footer preference",
"tags": [
"OrgSettingCustomization"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/preferences/showEndUserFooter": {
"post": {
"description": "Sets the preference to show the Okta UI footer for all end users of your org",
"operationId": "setOrgShowOktaUIFooter",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"showOrgPrefEx": {
"$ref": "#/components/examples/orgShowFooterPrefResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OrgPreferences"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Set the show dashboard footer preference",
"tags": [
"OrgSettingCustomization"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/privacy/aerial": {
"get": {
"description": "Retrieves the Okta Aerial consent grant details for your Org. Returns a 404 Not Found error if no consent has been granted.",
"operationId": "getAerialConsent",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"example-read-grant-response": {
"$ref": "#/components/examples/AerialConsentDetails"
}
},
"schema": {
"$ref": "#/components/schemas/OrgAerialConsentDetails"
}
}
},
"description": "Success"
},
"400": {
"content": {
"application/json": {
"examples": {
"example-no-already-present-response": {
"$ref": "#/components/examples/AerialGrantAlreadyPresentErrorResponse"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Can't complete request due to errors"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"content": {
"application/json": {
"examples": {
"example-no-grant-found-response": {
"$ref": "#/components/examples/AerialGrantNotFoundResponse"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Consent hasn't been given and there are no grants to any Aerial Accounts"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Retrieve Okta Aerial consent for your org",
"tags": [
"OrgSettingSupport"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/privacy/aerial/grant": {
"post": {
"description": "Grants an Okta Aerial account consent to manage your org. If the org is a child org, consent is taken from the parent org. Grant calls directly to the child are not allowed.",
"operationId": "grantAerialConsent",
"parameters": [],
"requestBody": {
"content": {
"application/json": {
"examples": {
"example-grant-call": {
"description": "Request body to grant an Okta Aerial account access to your Org",
"value": {
"accountId": "0200bs0617vvhv2v675mch1cukp"
}
}
},
"schema": {
"$ref": "#/components/schemas/OrgAerialConsent"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"example-grant-success-response": {
"$ref": "#/components/examples/AerialConsentDetails"
}
},
"schema": {
"$ref": "#/components/schemas/OrgAerialConsentDetails"
}
}
},
"description": "Success"
},
"400": {
"content": {
"application/json": {
"examples": {
"example-invalid-account-id": {
"$ref": "#/components/examples/AerialConsentInvalidAccountIdResponse"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Can't complete request due to errors"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Grant Okta Aerial access to your org",
"tags": [
"OrgSettingSupport"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/privacy/aerial/revoke": {
"post": {
"description": "Revokes access of an Okta Aerial account to your Org. The revoke operation will fail if the org has already been added to an Aerial account.",
"operationId": "revokeAerialConsent",
"parameters": [],
"requestBody": {
"content": {
"application/json": {
"examples": {
"example-revoke-request": {
"description": "Request body for revoking an Okta Aerial account",
"value": {
"accountId": "0200bs0617vvhv2v675mch1cukp"
}
}
},
"schema": {
"$ref": "#/components/schemas/OrgAerialConsent"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/OrgAerialConsentRevoked"
}
}
},
"description": "Success"
},
"400": {
"content": {
"application/json": {
"examples": {
"example-org-is-linked": {
"$ref": "#/components/examples/AerialConsentOrgAlreadyLinkedResponse"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Can't complete request due to errors"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Revoke Okta Aerial access to your org",
"tags": [
"OrgSettingSupport"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/privacy/oktaCommunication": {
"get": {
"description": "Retrieves Okta Communication Settings of your org",
"operationId": "getOktaCommunicationSettings",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"retrieveOktaCommSettingsEx": {
"$ref": "#/components/examples/orgCommunicationOptOutResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OrgOktaCommunicationSetting"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.read"
]
}
],
"summary": "Retrieve the Okta communication settings",
"tags": [
"OrgSettingCommunication"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/privacy/oktaCommunication/optIn": {
"post": {
"description": "Opts in all users of this org to Okta communication emails",
"operationId": "optInUsersToOktaCommunicationEmails",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"optInOktaCommSettingsEx": {
"$ref": "#/components/examples/orgCommunicationOptInResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OrgOktaCommunicationSetting"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Opt in to Okta user communication emails",
"tags": [
"OrgSettingCommunication"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/privacy/oktaCommunication/optOut": {
"post": {
"description": "Opts out all users of this org from Okta communication emails",
"operationId": "optOutUsersFromOktaCommunicationEmails",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"optOutOktaCommSettingsEx": {
"$ref": "#/components/examples/orgCommunicationOptOutResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OrgOktaCommunicationSetting"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Opt out of Okta user communication emails",
"tags": [
"OrgSettingCommunication"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/privacy/oktaSupport": {
"get": {
"description": "Retrieves Okta Support Settings for your org",
"operationId": "getOrgOktaSupportSettings",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"OktaSupportWithCaseNumberEx": {
"$ref": "#/components/examples/orgSupportSettingsWithCaseNumberResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OrgOktaSupportSettingsObj"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.read"
]
}
],
"summary": "Retrieve the Okta Support settings",
"tags": [
"OrgSettingSupport"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/privacy/oktaSupport/cases": {
"get": {
"description": "Lists all Okta Support cases that the requesting principal has permission to view",
"operationId": "listOktaSupportCases",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"OktaSupportCasesEx": {
"$ref": "#/components/examples/OktaSupportCases"
}
},
"schema": {
"$ref": "#/components/schemas/OktaSupportCases"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.read"
]
}
],
"summary": "List all Okta Support cases",
"tags": [
"OrgSettingSupport"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/privacy/oktaSupport/cases/{caseNumber}": {
"parameters": [
{
"$ref": "#/components/parameters/caseNumber"
}
],
"patch": {
"description": "Updates access to the org for an Okta Support case:\n\n* You can enable, disable, or extend access to your org for an Okta Support case.\n\n* You can approve Okta Support access to your org for self-assigned cases. A self-assigned case is created and assigned by the same Okta Support user.",
"operationId": "updateOktaSupportCase",
"requestBody": {
"content": {
"application/json": {
"examples": {
"AllowOktaSupportAccessStatus": {
"$ref": "#/components/examples/AllowOktaSupportAccessStatusRequest"
},
"AllowSelfAssigned": {
"$ref": "#/components/examples/AllowSelfAssignedRequest"
},
"ExtendOktaSupportAccessStatus": {
"$ref": "#/components/examples/ExtendOktaSupportAccessStatusRequest"
},
"RevokeOktaSupportAccessStatus": {
"$ref": "#/components/examples/RevokeOktaSupportAccessStatusRequest"
}
},
"schema": {
"$ref": "#/components/schemas/OktaSupportCase"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"AllowOktaSupportAccessStatus": {
"$ref": "#/components/examples/AllowOktaSupportAccessStatus"
},
"AllowSelfAssigned": {
"$ref": "#/components/examples/AllowSelfAssigned"
},
"ExtendOktaSupportAccessStatus": {
"$ref": "#/components/examples/ExtendOktaSupportAccessStatus"
},
"RevokeOktaSupportAccessStatus": {
"$ref": "#/components/examples/RevokeOktaSupportAccessStatus"
}
},
"schema": {
"$ref": "#/components/schemas/OktaSupportCase"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Update an Okta Support case",
"tags": [
"OrgSettingSupport"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-iam-permissions": [
"okta.support.cases.manage"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/privacy/oktaSupport/extend": {
"post": {
"deprecated": true,
"description": "Extends the length of time that Okta Support can access your org by 24 hours. This means that 24 hours are added to the remaining access time.\n\n> **Note:** This resource is deprecated. Use the [Update an Okta Support case](/openapi/okta-management/management/tags/orgsettingsupport/other/updateoktasupportcase) resource to extend Okta Support access for a support case.\n> For the corresponding Okta Admin Console feature, see [Give access to Okta Support](https://help.okta.com/okta_help.htm?type=oie&id=settings-support-access).",
"operationId": "extendOktaSupport",
"parameters": [],
"responses": {
"301": {
"description": "Moved Permanently"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Extend Okta Support access",
"tags": [
"OrgSettingSupport"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/privacy/oktaSupport/grant": {
"post": {
"deprecated": true,
"description": "Grants Okta Support temporary access to your org as an administrator for eight hours\n\n> **Note:** This resource is deprecated. Use the [Update an Okta Support case](/openapi/okta-management/management/tags/orgsettingsupport/other/updateoktasupportcase) resource to grant Okta Support access for a support case.\n> For the corresponding Okta Admin Console feature, see [Give access to Okta Support](https://help.okta.com/okta_help.htm?type=oie&id=settings-support-access).",
"operationId": "grantOktaSupport",
"parameters": [],
"responses": {
"301": {
"description": "Moved Permanently"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Grant Okta Support access",
"tags": [
"OrgSettingSupport"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/privacy/oktaSupport/revoke": {
"post": {
"deprecated": true,
"description": "Revokes Okta Support access to your org\n\n> **Note:** This resource is deprecated. Use the [Update an Okta Support case](/openapi/okta-management/management/tags/orgsettingsupport/other/updateoktasupportcase) resource to revoke Okta Support access for a support case.\n> For the corresponding Okta Admin Console feature, see [Give access to Okta Support](https://help.okta.com/okta_help.htm?type=oie&id=settings-support-access).",
"operationId": "revokeOktaSupport",
"parameters": [],
"responses": {
"301": {
"description": "Moved Permanently"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Revoke Okta Support access",
"tags": [
"OrgSettingSupport"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/settings/autoAssignAdminAppSetting": {
"get": {
"description": "Retrieves the org setting to automatically assign the Okta Admin Console when an admin role is assigned",
"operationId": "getAutoAssignAdminAppSetting",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/AutoAssignAdminAppSetting"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.read"
]
}
],
"summary": "Retrieve the Okta Admin Console assignment setting",
"tags": [
"OrgSettingAdmin"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Updates the org setting to automatically assign the Okta Admin Console when an admin role is assigned\n\n> **Note:** This setting doesn't apply to the `SUPER_ADMIN` role.\n> When you assign the `SUPER_ADMIN` role to a user, the Admin Console is always assigned to the user regardless of the `autoAssignAdminAppSetting` setting.",
"operationId": "updateAutoAssignAdminAppSetting",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/AutoAssignAdminAppSetting"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/AutoAssignAdminAppSetting"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Update the Okta Admin Console assignment setting",
"tags": [
"OrgSettingAdmin"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/org/settings/clientPrivilegesSetting": {
"get": {
"description": "Retrieves the org setting to assign the [Super Admin role](https://help.okta.com/okta_help.htm?type=oie&id=ext_superadmin) to new public client apps",
"operationId": "getClientPrivilegesSetting",
"parameters": [],
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ClientPrivilegesSetting"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.read"
]
}
],
"summary": "Retrieve the default public client app role setting",
"tags": [
"OrgSettingAdmin"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"put": {
"description": "Assigns the [Super Admin role](https://help.okta.com/okta_help.htm?type=oie&id=ext_superadmin) as the default role for new public client apps",
"operationId": "assignClientPrivilegesSetting",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ClientPrivilegesSetting"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ClientPrivilegesSetting"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Assign the default public client app role setting",
"tags": [
"OrgSettingAdmin"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/orgs": {
"post": {
"description": "Creates an org (child org) that has the same features as the current requesting org (parent org).\nA child org inherits any new features added to the parent org, but new features added to the child org aren't propagated back to the parent org.\n> **Notes:**\n> * Some features associated with products, such as Atspoke, Workflows, and Okta Identity Governance, aren't propagated to the child org.\n> * Wait at least 30 seconds after a 201-Created response before you make API requests to the new child org.\n> * For rate limits, see [Org creation rate limits](https://developer.okta.com/docs/reference/rl-additional-limits/#org-creation-rate-limits).",
"operationId": "createChildOrg",
"requestBody": {
"content": {
"application/json": {
"examples": {
"CreateChildOrg": {
"$ref": "#/components/examples/CreateChildOrgRequestEx"
}
},
"schema": {
"$ref": "#/components/schemas/ChildOrg"
}
}
}
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"CreateChildOrg": {
"$ref": "#/components/examples/CreateChildOrgResponseEx"
}
},
"schema": {
"$ref": "#/components/schemas/ChildOrg"
}
}
},
"description": "Created"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
},
"500": {
"$ref": "#/components/responses/ErrorInternalServer500"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Create an org",
"tags": [
"OrgCreator"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/policies": {
"get": {
"description": "Lists all policies with the specified type",
"operationId": "listPolicies",
"parameters": [
{
"description": "Specifies the type of policy to return",
"in": "query",
"name": "type",
"required": true,
"schema": {
"$ref": "#/components/schemas/PolicyType"
}
},
{
"description": "Refines the query by the `status` of the policy - `ACTIVE` or `INACTIVE`",
"in": "query",
"name": "status",
"schema": {
"type": "string"
}
},
{
"description": "Refines the query by policy name prefix (startWith method) passed in as `q=string`",
"in": "query",
"name": "q",
"schema": {
"type": "string"
}
},
{
"in": "query",
"name": "expand",
"schema": {
"default": "",
"type": "string"
}
},
{
"description": "Refines the query by sorting on the policy `name` in ascending order",
"in": "query",
"name": "sortBy",
"schema": {
"type": "string"
}
},
{
"description": "Defines the number of policies returned, see [Pagination](https://developer.okta.com/docs/api/#pagination)",
"in": "query",
"name": "limit",
"schema": {
"type": "string"
}
},
{
"description": "Reference to the associated authorization server",
"in": "query",
"name": "resourceId",
"schema": {
"type": "string"
}
},
{
"description": "End page cursor for pagination, see [Pagination](https://developer.okta.com/docs/api/#pagination)",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"access-policy": {
"$ref": "#/components/examples/list-access-policy-response"
},
"device-signal-collection-policy": {
"$ref": "#/components/examples/list-device-signal-collection-policy-response"
},
"entity-risk-policy": {
"$ref": "#/components/examples/list-entity-risk-policy-response"
},
"identity-claim-sourcing-policy": {
"$ref": "#/components/examples/list-identity-claim-sourcing-policy-response"
},
"idp-discovery": {
"$ref": "#/components/examples/list-idp-discovery-policy-response"
},
"mfa-enroll": {
"$ref": "#/components/examples/list-mfa-enroll-policy-response"
},
"mfa-enroll-auto-enroll-disabled": {
"$ref": "#/components/examples/list-mfa-enroll-policy-auto-enroll-disabled-response"
},
"mfa-enroll-grace-period": {
"$ref": "#/components/examples/list-mfa-enroll-policy-with-grace-period-response"
},
"okta-sign-on-policy": {
"$ref": "#/components/examples/list-okta-sign-on-policy-response"
},
"password": {
"$ref": "#/components/examples/list-password-policy-response"
},
"passwordWithBreachedProtection": {
"$ref": "#/components/examples/list-password-policy-with-breached-protection-response"
},
"post-auth-session-policy": {
"$ref": "#/components/examples/list-post-auth-session-policy-response"
},
"profile-enrollment": {
"$ref": "#/components/examples/list-profile-enrollment-policy-response"
},
"session-violation-detection-policy": {
"$ref": "#/components/examples/list-session-violation-detection-policy-response"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/Policy"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.read"
]
}
],
"summary": "List all policies",
"tags": [
"Policy"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a policy. There are many types of policies that you can create. See [Policies](https://developer.okta.com/docs/concepts/policies/) for an overview of the types of policies available and links to more indepth information.",
"operationId": "createPolicy",
"parameters": [
{
"description": "This query parameter is only valid for Classic Engine orgs.",
"in": "query",
"name": "activate",
"schema": {
"default": true,
"type": "boolean"
}
}
],
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/CreateOrUpdatePolicy"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"access-policy": {
"$ref": "#/components/examples/create-access-policy-response"
},
"device-signal-collection-policy": {
"$ref": "#/components/examples/device-signal-collection-policy-response"
},
"idp-discovery": {
"$ref": "#/components/examples/idp-discovery-policy-response"
},
"mfa-enroll": {
"$ref": "#/components/examples/mfa-enroll-policy-with-grace-period-response"
},
"mfa-enroll-auto-enroll-disabled": {
"$ref": "#/components/examples/mfa-enroll-policy-auto-enroll-disabled-response"
},
"okta-sign-on-policy": {
"$ref": "#/components/examples/create-okta-sign-on-policy-response"
},
"password": {
"$ref": "#/components/examples/password-policy-response"
},
"passwordWithBreachedProtection": {
"$ref": "#/components/examples/password-policy-with-breached-protection-response"
},
"profile-enrollment": {
"$ref": "#/components/examples/profile-enrollment-policy-response"
}
},
"schema": {
"$ref": "#/components/schemas/CreateOrUpdatePolicy"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.manage"
]
}
],
"summary": "Create a policy",
"tags": [
"Policy"
],
"x-codegen-request-body-name": "policy",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/policies/simulate": {
"parameters": [
{
"$ref": "#/components/parameters/simulateParameter"
}
],
"post": {
"description": "Creates a policy or policy rule simulation. The access simulation evaluates policy and policy rules based on the existing policy rule configuration.\nThe evaluation result simulates what the real-world authentication flow is and what policy rules have been applied or matched to the authentication flow.",
"operationId": "createPolicySimulation",
"requestBody": {
"content": {
"application/json": {
"examples": {
"SimulatePolicy": {
"$ref": "#/components/examples/SimulatePolicyBody"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/SimulatePolicyBody"
},
"type": "array"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"SimulatePolicy": {
"$ref": "#/components/examples/SimulatePolicyResponse"
}
},
"schema": {
"$ref": "#/components/schemas/SimulatePolicyResponse"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.read"
]
}
],
"summary": "Create a policy simulation",
"tags": [
"Policy"
],
"x-codegen-request-body-name": "simulatePolicy",
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/policies/{policyId}": {
"delete": {
"description": "Deletes a policy",
"operationId": "deletePolicy",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.manage"
]
}
],
"summary": "Delete a policy",
"tags": [
"Policy"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a policy",
"operationId": "getPolicy",
"parameters": [
{
"in": "query",
"name": "expand",
"schema": {
"default": "",
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"access-policy": {
"$ref": "#/components/examples/create-access-policy-response"
},
"device-signal-collection-policy": {
"$ref": "#/components/examples/device-signal-collection-policy-response"
},
"entity-risk-policy": {
"$ref": "#/components/examples/get-entity-risk-policy-response"
},
"identity-claim-sourcing-policy": {
"$ref": "#/components/examples/get-identity-claim-sourcing-policy-response"
},
"idp-discovery": {
"$ref": "#/components/examples/idp-discovery-policy-response"
},
"mfa-enroll": {
"$ref": "#/components/examples/mfa-enroll-policy-response"
},
"mfa-enroll-auto-enroll-disabled": {
"$ref": "#/components/examples/mfa-enroll-policy-auto-enroll-disabled-response"
},
"mfa-enroll-grace-period": {
"$ref": "#/components/examples/mfa-enroll-policy-with-grace-period-response"
},
"okta-sign-on-policy": {
"$ref": "#/components/examples/create-okta-sign-on-policy-response"
},
"password": {
"$ref": "#/components/examples/password-policy-response"
},
"passwordWithBreachedProtection": {
"$ref": "#/components/examples/password-policy-with-breached-protection-response"
},
"post-auth-session-policy": {
"$ref": "#/components/examples/get-post-auth-session-policy-response"
},
"profile-enrollment": {
"$ref": "#/components/examples/profile-enrollment-policy-response"
},
"session-violation-detection-policy": {
"$ref": "#/components/examples/get-session-violation-detection-policy-response"
}
},
"schema": {
"$ref": "#/components/schemas/Policy"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.read"
]
}
],
"summary": "Retrieve a policy",
"tags": [
"Policy"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathPolicyId"
}
],
"put": {
"description": "Replaces the properties of a policy identified by `policyId`",
"operationId": "replacePolicy",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/CreateOrUpdatePolicy"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"access-policy": {
"$ref": "#/components/examples/create-access-policy-response"
},
"device-signal-collection-policy": {
"$ref": "#/components/examples/device-signal-collection-policy-response"
},
"idp-discovery": {
"$ref": "#/components/examples/idp-discovery-policy-response"
},
"mfa-enroll": {
"$ref": "#/components/examples/mfa-enroll-policy-response"
},
"mfa-enroll-auto-enroll-disabled": {
"$ref": "#/components/examples/mfa-enroll-policy-auto-enroll-disabled-response"
},
"mfa-enroll-with-grace-period": {
"$ref": "#/components/examples/mfa-enroll-policy-with-grace-period-response"
},
"okta-sign-on-policy": {
"$ref": "#/components/examples/create-okta-sign-on-policy-response"
},
"password": {
"$ref": "#/components/examples/password-policy-response"
},
"passwordWithBreachedProtection": {
"$ref": "#/components/examples/password-policy-with-breached-protection-response"
},
"profile-enrollment": {
"$ref": "#/components/examples/profile-enrollment-policy-response"
}
},
"schema": {
"$ref": "#/components/schemas/Policy"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.manage"
]
}
],
"summary": "Replace a policy",
"tags": [
"Policy"
],
"x-codegen-request-body-name": "policy",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/policies/{policyId}/app": {
"get": {
"deprecated": true,
"description": "Lists all applications mapped to a policy identified by `policyId`\n\n> **Note:** Use [List all resources mapped to a policy](https://developer.okta.com/docs/api/openapi/okta-management/management/tags/policy/#tag/Policy/operation/listPolicyMappings) to list all applications mapped to a policy.",
"operationId": "listPolicyApps",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"items": {
"$ref": "#/components/schemas/Application"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.read"
]
}
],
"summary": "List all apps mapped to a policy",
"tags": [
"Policy"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathPolicyId"
}
]
},
"/api/v1/policies/{policyId}/clone": {
"parameters": [
{
"$ref": "#/components/parameters/pathPolicyId"
}
],
"post": {
"description": "Clones an existing policy",
"operationId": "clonePolicy",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"access-policy": {
"$ref": "#/components/examples/create-access-policy-response"
},
"idp-discovery": {
"$ref": "#/components/examples/idp-discovery-policy-response"
},
"mfa-enroll": {
"$ref": "#/components/examples/mfa-enroll-policy-response"
},
"mfa-enroll-auto-enroll-disabled": {
"$ref": "#/components/examples/mfa-enroll-policy-auto-enroll-disabled-response"
},
"mfa-enroll-with-grace-period": {
"$ref": "#/components/examples/mfa-enroll-policy-with-grace-period-response"
},
"okta-sign-on-policy": {
"$ref": "#/components/examples/create-okta-sign-on-policy-response"
},
"password": {
"$ref": "#/components/examples/password-policy-response"
},
"passwordWithBreachedProtection": {
"$ref": "#/components/examples/password-policy-with-breached-protection-response"
},
"profile-enrollment": {
"$ref": "#/components/examples/profile-enrollment-policy-response"
}
},
"schema": {
"$ref": "#/components/schemas/Policy"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.manage"
]
}
],
"summary": "Clone an existing policy",
"tags": [
"Policy"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/policies/{policyId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathPolicyId"
}
],
"post": {
"description": "Activates a policy",
"operationId": "activatePolicy",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.manage"
]
}
],
"summary": "Activate a policy",
"tags": [
"Policy"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/policies/{policyId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathPolicyId"
}
],
"post": {
"description": "Deactivates a policy",
"operationId": "deactivatePolicy",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.manage"
]
}
],
"summary": "Deactivate a policy",
"tags": [
"Policy"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/policies/{policyId}/mappings": {
"get": {
"description": "Lists all resources mapped to a policy identified by `policyId`",
"operationId": "listPolicyMappings",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"policy-mapping-response": {
"$ref": "#/components/examples/policy-mapping-list-response"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/PolicyMapping"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.read"
]
}
],
"summary": "List all resources mapped to a policy",
"tags": [
"Policy"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathPolicyId"
}
],
"post": {
"description": "Maps a resource to a policy identified by `policyId`\n\n> **Note:** Use the [Assign an app sign-in policy](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/ApplicationPolicies/#tag/ApplicationPolicies/operation/assignApplicationPolicy) endpoint to assign an app sign-in policy to an app.",
"operationId": "mapResourceToPolicy",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/PolicyMappingRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"policy-mapping-response": {
"$ref": "#/components/examples/policy-mapping-response"
}
},
"schema": {
"$ref": "#/components/schemas/PolicyMapping"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.manage"
]
}
],
"summary": "Map a resource to a policy",
"tags": [
"Policy"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/policies/{policyId}/mappings/{mappingId}": {
"delete": {
"description": "Deletes the resource mapping for a policy identified by `policyId` and `mappingId`",
"operationId": "deletePolicyResourceMapping",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.manage"
]
}
],
"summary": "Delete a policy resource mapping",
"tags": [
"Policy"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a resource mapping for a policy identified by `policyId` and `mappingId`",
"operationId": "getPolicyMapping",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"policy-mapping-response": {
"$ref": "#/components/examples/policy-mapping-response"
}
},
"schema": {
"$ref": "#/components/schemas/PolicyMapping"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.read"
]
}
],
"summary": "Retrieve a policy resource mapping",
"tags": [
"Policy"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathPolicyId"
},
{
"$ref": "#/components/parameters/pathPolicyMappingId"
}
]
},
"/api/v1/policies/{policyId}/rules": {
"get": {
"description": "Lists all policy rules",
"operationId": "listPolicyRules",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"access": {
"$ref": "#/components/examples/list-all-access-policy-rule-response"
},
"device-signal-collection": {
"$ref": "#/components/examples/list-all-device-signal-collection-rule-response"
},
"entity-risk": {
"$ref": "#/components/examples/list-all-entity-risk-policy-rule-response"
},
"identity-claim-sourcing": {
"$ref": "#/components/examples/list-all-identity-claim-sourcing-policy-rule-response"
},
"idp-discovery": {
"$ref": "#/components/examples/list-all-idp-discovery-policy-rule-response"
},
"mfa-enroll": {
"$ref": "#/components/examples/list-all-mfa-enroll-policy-rule-response"
},
"okta-sign-on": {
"$ref": "#/components/examples/list-all-sign-on-policy-rule-response"
},
"password": {
"$ref": "#/components/examples/list-all-password-policy-rule-response"
},
"post-auth-session": {
"$ref": "#/components/examples/list-all-post-auth-session-policy-rule-response"
},
"profile-enrollment": {
"$ref": "#/components/examples/list-all-profile-enrollment-policy-rule-response"
},
"session-violation-detection": {
"$ref": "#/components/examples/list-all-session-violation-detection-policy-rule-response"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/PolicyRule"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.policies.read"
]
}
],
"summary": "List all policy rules",
"tags": [
"Policy"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathPolicyId"
},
{
"$ref": "#/components/parameters/limitParameter"
}
],
"post": {
"description": "Creates a policy rule\n\n> **Note:** You can't create additional rules for the `PROFILE_ENROLLMENT`, `POST_AUTH_SESSION`, `CLIENT_UPDATE`, or
\n> **Legal Disclaimer**\n>\n> After a user is added to the Okta directory, they receive an activation email. As part of signing up for this service,\n> you agreed not to use Okta's service/product to spam and/or send unsolicited messages.\n> Please refrain from adding unrelated accounts to the directory as Okta is not responsible for, and disclaims any and all\n> liability associated with, the activation email's content. You, and you alone, bear responsibility for the emails sent to any recipients.\n\nAll responses return the created user. Activation of a user is an asynchronous operation. The system performs group reconciliation during activation and assigns the user to all apps via direct or indirect relationships (group memberships).\n* The user's `transitioningToStatus` property is `ACTIVE` during activation to indicate that the user hasn't completed the asynchronous operation.\n* The user's `status` is `ACTIVE` when the activation process is complete.\n\nThe user is emailed a one-time activation token if activated without a password.\n\n> **Note:** If the user is assigned to an app that is configured for provisioning, the activation process triggers downstream provisioning to the app. It is possible for a user to sign in before these apps have been successfully provisioned for the user.\n\n> **Important:** Do not generate or send a one-time activation token when activating users with an assigned password. Users should sign in with their assigned password.\n\nFor more information about the various scenarios of creating a user listed in the examples, see the [User creation scenarios](/openapi/okta-management/management/tags/user/section/user-status#section/User-creation-scenarios) section.",
"operationId": "createUser",
"parameters": [
{
"description": "Executes an [activation lifecycle](https://developer.okta.com/docs/api/openapi/okta-management/management/userlifecycle/activateuser) operation when creating the user",
"in": "query",
"name": "activate",
"schema": {
"default": true,
"type": "boolean"
}
},
{
"description": "Indicates whether to create a user with a specified authentication provider.",
"in": "query",
"name": "provider",
"schema": {
"default": false,
"type": "boolean"
}
},
{
"description": "With `activate=true`, if `nextLogin=changePassword`, a user is created, activated, and the password is set to `EXPIRED`. The user must change it the next time they sign in.",
"in": "query",
"name": "nextLogin",
"schema": {
"$ref": "#/components/schemas/UserNextLogin"
},
"x-okta-added-version": "0.14.0"
}
],
"requestBody": {
"content": {
"application/json": {
"examples": {
"Create user in group": {
"$ref": "#/components/examples/create-user-in-group-request"
},
"Create user with authentication provider": {
"$ref": "#/components/examples/create-user-with-authentication-provider-request"
},
"Create user with imported hashed password": {
"$ref": "#/components/examples/create-user-with-imported-hashed-password-request"
},
"Create user with non-default user type": {
"$ref": "#/components/examples/create-user-with-non-default-user-type-request"
},
"Create user with password": {
"$ref": "#/components/examples/create-user-with-password-request"
},
"Create user with password and recovery question": {
"$ref": "#/components/examples/create-user-with-password-and-recovery-question-request"
},
"Create user with password import inline hook": {
"$ref": "#/components/examples/create-user-with-password-import-inline-hook-request"
},
"Create user with recovery question": {
"$ref": "#/components/examples/create-user-with-recovery-question-request"
},
"Create user without credentials": {
"$ref": "#/components/examples/create-user-without-credentials-request"
}
},
"schema": {
"$ref": "#/components/schemas/CreateUserRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Create user in group": {
"$ref": "#/components/examples/create-user-in-group-response"
},
"Create user with authentication provider": {
"$ref": "#/components/examples/create-user-with-authentication-provider-response"
},
"Create user with imported hashed password": {
"$ref": "#/components/examples/create-user-with-imported-hashed-password-response"
},
"Create user with non-default user type": {
"$ref": "#/components/examples/create-user-with-non-default-user-type-response"
},
"Create user with password": {
"$ref": "#/components/examples/create-user-with-password-response"
},
"Create user with password and recovery question": {
"$ref": "#/components/examples/create-user-with-password-and-recovery-question-response"
},
"Create user with password import inline hook": {
"$ref": "#/components/examples/create-user-with-password-import-inline-hook-response"
},
"Create user with recovery question": {
"$ref": "#/components/examples/create-user-with-recovery-question-response"
},
"Create user without credentials": {
"$ref": "#/components/examples/create-user-without-credentials-response"
}
},
"schema": {
"$ref": "#/components/schemas/User"
}
}
},
"description": "Success"
},
"400": {
"content": {
"application/json": {
"examples": {
"Create user with expired password and `null` password": {
"$ref": "#/components/examples/ErrorCreateUserWithExpiredPasswordWithNullPassword"
},
"Create user with expired password and activate set to `false`": {
"$ref": "#/components/examples/ErrorCreateUserWithExpiredPasswordWithoutActivation"
},
"Create user with too many groups specified": {
"$ref": "#/components/examples/ErrorCreateUserWithTooManyManyGroupsResponse"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Bad Request"
},
"403": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Create a user",
"tags": [
"User"
],
"x-codegen-request-body-name": "body",
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{id}": {
"delete": {
"description": "Deletes a user permanently. This operation can only be performed on users that have a `DEPROVISIONED` status.\n\n> **Warning:** This action can't be recovered!\n\nThis operation on a user that hasn't been deactivated causes that user to be deactivated. A second delete operation is required to delete the user.\n\n> **Note:** You can also perform user deletion asynchronously. To invoke asynchronous user deletion, pass an HTTP header `Prefer: respond-async` with the request.\n\nThis header is also supported by user deactivation, which is performed if the delete endpoint is invoked on a user that hasn't been deactivated.",
"operationId": "deleteUser",
"parameters": [
{
"description": "Sends a deactivation email to the admin if `true`",
"in": "query",
"name": "sendEmail",
"schema": {
"default": false,
"type": "boolean"
},
"x-okta-added-version": "1.5.0"
},
{
"in": "header",
"name": "Prefer",
"required": false,
"schema": {
"enum": [
"respond-async"
],
"type": "string"
}
}
],
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"400": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Bad Request"
},
"403": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"404": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Not Found"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Delete a user",
"tags": [
"User"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a user from your Okta org.\n\nYou can substitute `me` for the `id` to fetch the current user linked to an API token or session cookie.\n * The request returns the user linked to the API token that is specified in the Authorization header, not the user linked to the active session. Details of the admin user who granted the API token is returned.\n * When the end user has an active Okta session, it is typically a CORS request from the browser. Therefore, it's possible to retrieve the current user without the Authorization header.\n\nWhen fetching a user by `login` or `login shortname`, [URL encode](https://developer.mozilla.org/en-US/docs/Glossary/Percent-encoding) the request parameter to ensure that special characters are escaped properly. Logins with a `/` character can only be fetched by `id` due to URL issues with escaping the `/` character. If you don't know a user's ID, you can use the [List all users](/openapi/okta-management/management/user/listusers) endpoint to find it.\n\n> **Note:** Some browsers block third-party cookies by default, which disrupts Okta functionality in certain flows. See [Mitigate the impact of third-party cookie deprecation](https://help.okta.com/okta_help.htm?type=oie&id=ext-third-party-cookies).",
"operationId": "getUser",
"parameters": [
{
"$ref": "#/components/parameters/OktaResponse"
},
{
"$ref": "#/components/parameters/queryUserExpand"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GetUserExample": {
"$ref": "#/components/examples/user-example"
}
},
"schema": {
"$ref": "#/components/schemas/UserGetSingleton"
}
}
},
"description": "Success",
"headers": {
"Etag": {
"description": "An HTTP entity tag (`ETag`) is an identifier for a specific version of a resource. See [Conditional Requests and Entity Tags](/#conditional-requests-and-entity-tags).",
"example": "W/\"1234567890abcdef\"",
"schema": {
"type": "string"
}
}
}
},
"403": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"404": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Not Found"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "Retrieve a user",
"tags": [
"User"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
],
"post": {
"description": "Updates a user's profile or credentials with partial update semantics.\n\n> **Important:** Use the `POST` method for partial updates. Unspecified properties are set to null with `PUT`.\n\n`profile` and `credentials` can be updated independently or together with a single request.\n\n> **Notes:**\n> * Currently, the user type of a user can only be changed using a full replacement `PUT` operation. If the request parameters of a partial update include the `type` element from the user object,\nthe value must match the existing type of the user. Only admins are permitted to change the user type of a user; end users are not allowed to change their own user type.\n>\n> * To update a current user's profile with partial semantics, you can use the `/api/v1/users/me` endpoint. But, a user can only update profile properties that they have write access for. Within the profile, if the user tries to update the primary or the secondary email IDs, verification emails are sent to those email IDs, and the fields are updated only upon verification.\n>\n> * You can update user profiles of users in the `DEPROVISIONED` status if you have the **Edit Deactivated User Profile Updates** option turned on in the Admin Console. See [deactivated user profiles](https://help.okta.com/okta_help.htm?type=oie&id=edit-deactivated-users).\n\nIf you are using this endpoint to set a password, it sets a password without validating existing user credentials. This is an administrative operation. For operations that validate credentials, refer to the [Reset password](https://developer.okta.com/docs/api/openapi/okta-management/management/usercred/resetpassword), [Start forgot password flow](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserCred/#tag/UserCred/operation/forgotPassword), and [Update password](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserCred/#tag/UserCred/operation/changePassword) endpoints.",
"operationId": "updateUser",
"parameters": [
{
"description": "If true, validates against minimum age and history password policy",
"in": "query",
"name": "strict",
"schema": {
"type": "boolean"
}
},
{
"description": "The ETag value of the user's expected current state. This becomes a conditional request used for concurrency control. See [Conditional Requests and Entity Tags](/#conditional-requests-and-entity-tags).",
"example": "W/\"1234567890abcdef\"",
"in": "header",
"name": "If-Match",
"required": false,
"schema": {
"type": "string"
}
}
],
"requestBody": {
"content": {
"application/json": {
"examples": {
"Set recovery question and answer": {
"$ref": "#/components/examples/update-user-set-recovery-question-and-answer"
},
"Update user Profile": {
"$ref": "#/components/examples/update-user-profile-request"
},
"Update user password": {
"$ref": "#/components/examples/update-user-set-password-request"
}
},
"schema": {
"$ref": "#/components/schemas/UpdateUserRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Update user Response": {
"$ref": "#/components/examples/user-example"
}
},
"schema": {
"$ref": "#/components/schemas/User"
}
}
},
"description": "Success"
},
"400": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Bad Request"
},
"403": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"404": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Not Found"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Update a user",
"tags": [
"User"
],
"x-codegen-request-body-name": "user",
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"put": {
"description": "Replaces a user's profile, credentials, or both using strict-update semantics.\n\nAll profile properties must be specified when updating a user's profile with a `PUT` method. Any property not specified in the request is deleted.\n> **Important:** Don't use a `PUT` method for partial updates.",
"operationId": "replaceUser",
"parameters": [
{
"description": "If `true`, validates against minimum age and history password policy",
"in": "query",
"name": "strict",
"schema": {
"type": "boolean"
},
"x-okta-added-version": "1.10.0"
},
{
"description": "The ETag value of the user's expected current state. This becomes a conditional request used for concurrency control. See [Conditional Requests and Entity Tags](/#conditional-requests-and-entity-tags).",
"example": "W/\"1234567890abcdef\"",
"in": "header",
"name": "If-Match",
"required": false,
"schema": {
"type": "string"
}
}
],
"requestBody": {
"content": {
"application/json": {
"examples": {
"Replace user Request": {
"$ref": "#/components/examples/replace-user-request"
}
},
"schema": {
"$ref": "#/components/schemas/UpdateUserRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Replace user Response": {
"$ref": "#/components/examples/user-example"
}
},
"schema": {
"$ref": "#/components/schemas/User"
}
}
},
"description": "Success"
},
"400": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Bad Request"
},
"403": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"404": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Not Found"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Replace a user",
"tags": [
"User"
],
"x-codegen-request-body-name": "user",
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{id}/appLinks": {
"get": {
"description": "Lists all app links for all direct or indirect (through group membership) assigned apps\n\n> **Note:** To list all apps in an org, use the [List all applications endpoint in the Applications API](/openapi/okta-management/management/tags/application/other/listapplications).",
"operationId": "listAppLinks",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"List App Links": {
"$ref": "#/components/examples/ListAppLinks"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/AssignedAppLink"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List all assigned app links",
"tags": [
"UserResources"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
]
},
"/api/v1/users/{id}/blocks": {
"get": {
"description": "Lists information about how the user is blocked from accessing their account",
"operationId": "listUserBlocks",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"BlocksAnyDevices": {
"$ref": "#/components/examples/ListUserBlocksAnyDevicesResponse"
},
"BlocksUnknownDevices": {
"$ref": "#/components/examples/ListUserBlocksUnknownDevicesResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/UserBlock"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List all user blocks",
"tags": [
"User"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
]
},
"/api/v1/users/{id}/groups": {
"get": {
"description": "Lists all groups of which the user is a member\n> **Note:** To list all groups in your org, use the [List all groups endpoints in the Groups API](/openapi/okta-management/management/group/listgroups).",
"operationId": "listUserGroups",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"List user groups": {
"$ref": "#/components/examples/ListUserGroups"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/Group"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List all groups",
"tags": [
"UserResources"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
]
},
"/api/v1/users/{id}/idps": {
"get": {
"description": "Lists the identity providers (IdPs) associated with the user",
"operationId": "listUserIdentityProviders",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"MultipleIdPsResponse": {
"$ref": "#/components/examples/MultipleIdPsResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/IdentityProvider"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List all IdPs for user",
"tags": [
"IdentityProviderUsers"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
]
},
"/api/v1/users/{id}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
],
"post": {
"description": "Activates a user.\n\nPerform this operation only on users with a `STAGED` or `DEPROVISIONED` status. Activation of a user is an asynchronous operation.\n* The user has the `transitioningToStatus` property with an `ACTIVE` value during activation. This indicates that the user hasn't completed the asynchronous operation.\n* The user has an `ACTIVE` status when the activation process completes.\n\nUsers who don't have a password must complete the welcome flow by visiting the activation link to complete the transition to `ACTIVE` status.\n\n> **Note:** If you want to send a branded user activation email, change the subdomain of your request to the custom domain that's associated with the brand.\n> For example, change `subdomain.okta.com` to `custom.domain.one`. See [Multibrand and custom domains](https://developer.okta.com/docs/concepts/brands/#multibrand-and-custom-domains).\n\n> **Note:** If you have optional password enabled, visiting the activation link is optional for users who aren't required to enroll a password.\n> See [Create user with optional password](/openapi/okta-management/management/user/create-user-with-optional-password#user/Create-user-with-optional-password).\n\n> **Legal disclaimer**\n> After a user is added to the Okta directory, they receive an activation email. As part of signing up for this service,\n> you agreed not to use Okta's service/product to spam and/or send unsolicited messages.\n> Please refrain from adding unrelated accounts to the directory as Okta is not responsible for, and disclaims any and all\n> liability associated with, the activation email's content. You, and you alone, bear responsibility for the emails sent to any recipients.",
"operationId": "activateUser",
"parameters": [
{
"description": "Sends an activation email to the user if `true`",
"in": "query",
"name": "sendEmail",
"required": false,
"schema": {
"default": true,
"type": "boolean"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/UserActivationToken"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Activate a user",
"tags": [
"UserLifecycle"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{id}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
],
"post": {
"description": "Deactivates a user.\n\nPerform this operation only on users that do not have a `DEPROVISIONED` status.\n* The user's `transitioningToStatus` property is `DEPROVISIONED` during deactivation to indicate that the user hasn't completed the asynchronous operation.\n* The user's status is `DEPROVISIONED` when the deactivation process is complete.\n\n> **Important:** Deactivating a user is a **destructive** operation. The user is deprovisioned from all assigned apps, which might destroy their data such as email or files.\n**This action cannot be recovered!**\n\nYou can also perform user deactivation asynchronously. To invoke asynchronous user deactivation, pass an HTTP header `Prefer: respond-async` with the request.\n\n> **Note:** Users with the `DEPROVISIONED` status won't have their profiles updated when running the [Update a user](/openapi/okta-management/management/user/updateuser) endpoint unless you have the **Edit Deactived User Profile Updates** option turned on in the Admin Console. See [Edit deactivated user profiles](https://help.okta.com/okta_help.htm?type=oie&id=edit-deactivated-users).",
"operationId": "deactivateUser",
"parameters": [
{
"description": "Sends a deactivation email to the admin if `true`",
"in": "query",
"name": "sendEmail",
"schema": {
"default": false,
"type": "boolean"
},
"x-okta-added-version": "1.5.0"
},
{
"description": "Request asynchronous processing",
"in": "header",
"name": "Prefer",
"required": false,
"schema": {
"enum": [
"respond-async"
],
"type": "string"
}
}
],
"responses": {
"200": {
"content": {},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Deactivate a user",
"tags": [
"UserLifecycle"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{id}/lifecycle/expire_password": {
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
],
"post": {
"description": "Expires the password. This operation transitions the user status to `PASSWORD_EXPIRED` so that the user must change their password the next time that they sign in.\n
\nIf you have integrated Okta with your on-premises Active Directory (AD), then setting a user's password as expired in Okta also expires the password in AD.\nWhen the user tries to sign in to Okta, delegated authentication finds the password-expired status in AD,\nand the user is presented with the password-expired page where they can change their password.\n\n> **Note:** The Okta account management policy doesn't support the `/users/{id}/lifecycle/expire_password` endpoint. See [Configure an Okta account management policy](https://developer.okta.com/docs/guides/okta-account-management-policy/main/).",
"operationId": "expirePassword",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Expire password response": {
"$ref": "#/components/examples/ExpirePwdResponse"
}
},
"schema": {
"$ref": "#/components/schemas/User"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Expire the password",
"tags": [
"UserCred"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{id}/lifecycle/expire_password_with_temp_password": {
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
],
"post": {
"description": "Expires the password and resets the user's password to a temporary password. This operation transitions the user status to `PASSWORD_EXPIRED` so that the user must change their password the next time that they sign in.\nThe user's password is reset to a temporary password that's returned, and then the user's password is expired.\nIf `revokeSessions` is included in the request with a value of `true`, the user's current outstanding sessions are revoked and require re-authentication.\n\nIf you have integrated Okta with your on-premises Active Directory (AD), then setting a user's password as expired in Okta also expires the password in AD.\nWhen the user tries to sign in to Okta, delegated authentication finds the password-expired status in AD, and the user is presented with the password-expired page where they can change their password.",
"operationId": "expirePasswordWithTempPassword",
"parameters": [
{
"description": "Revokes the user's existing sessions if `true`",
"in": "query",
"name": "revokeSessions",
"required": false,
"schema": {
"default": false,
"type": "boolean"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Expire password with temp password response": {
"$ref": "#/components/examples/ExpirePwdWithTempPwdResponse"
}
},
"schema": {
"$ref": "#/components/schemas/tempPassword"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Expire the password with a temporary password",
"tags": [
"UserCred"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{id}/lifecycle/reactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
],
"post": {
"description": "Reactivates a user.\n\nPerform this operation only on users with a `PROVISIONED` or `RECOVERY` [status](/openapi/okta-management/management/user/listusers#user/listusers/t=response&c=200&path=status).\nThis operation restarts the activation workflow if for some reason the user activation wasn't completed when using the `activationToken` from [Activate User](/openapi/okta-management/management/userlifecycle/activateuser).\n\nUsers that don't have a password must complete the flow by completing the [Reset password](/openapi/okta-management/management/usercred/resetpassword) flow and MFA enrollment steps to transition the user to `ACTIVE` status.\n\nIf `sendEmail` is `false`, returns an activation link for the user to set up their account. The activation token can be used to create a custom activation link.",
"operationId": "reactivateUser",
"parameters": [
{
"description": "Sends an activation email to the user if `true`",
"in": "query",
"name": "sendEmail",
"schema": {
"default": false,
"type": "boolean"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/UserActivationToken"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Reactivate a user",
"tags": [
"UserLifecycle"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{id}/lifecycle/reset_factors": {
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
],
"post": {
"description": "Resets all factors for the specified user. All MFA factor enrollments return to the unenrolled state. The user's status remains `ACTIVE`. This link is present only if the user is currently enrolled in one or more MFA factors.",
"operationId": "resetFactors",
"responses": {
"200": {
"content": {},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Reset the factors",
"tags": [
"UserLifecycle"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{id}/lifecycle/reset_password": {
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
],
"post": {
"description": "Resets a password. Generates a one-time token (OTT) that you can use to reset a user's password. You can automatically email the OTT link to the user or return the OTT to the API caller and distribute using a custom flow.\n\nThis operation transitions the user to the `RECOVERY` status. The user is then not able to sign in or initiate a forgot password flow until they complete the reset flow.\n\nThis operation provides an option to delete all the user's sessions. However, if the request is made in the context of a session owned by the specified user, that session isn't cleared.\n> **Note:** You can also use this API to convert a user with the Okta credential provider to use a federated provider. After this conversion, the user can't directly sign in with a password.\n> To convert a federated user back to an Okta user, use the default API call.\n\nIf an email address is associated with multiple users, keep in mind the following to ensure a successful password recovery lookup:\n * Okta no longer includes deactivated users in the lookup.\n * The lookup searches sign-in IDs first, then primary email addresses, and then secondary email addresses.\n If `sendEmail` is `false`, returns a link for the user to reset their password.",
"operationId": "resetPassword",
"parameters": [
{
"in": "query",
"name": "sendEmail",
"required": true,
"schema": {
"type": "boolean"
}
},
{
"description": "Revokes all user sessions, except for the current session, if set to `true`",
"in": "query",
"name": "revokeSessions",
"required": false,
"schema": {
"default": false,
"type": "boolean"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Reset password without sending email response": {
"$ref": "#/components/examples/ResetPwdWithoutSendingEmailResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ResetPasswordToken"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Reset a password",
"tags": [
"UserCred"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{id}/lifecycle/suspend": {
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
],
"post": {
"description": "Suspends a user. Perform this operation only on users with an `ACTIVE` status. The user has a `SUSPENDED` status when the process completes.\n\nSuspended users can't sign in to Okta. They can only be unsuspended or deactivated. Their group and app assignments are retained.",
"operationId": "suspendUser",
"responses": {
"200": {
"content": {},
"description": "OK"
},
"400": {
"$ref": "#/components/responses/ErrorMissingRequiredParameter400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Suspend a user",
"tags": [
"UserLifecycle"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{id}/lifecycle/unlock": {
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
],
"post": {
"description": "Unlocks a user with a `LOCKED_OUT` status or unlocks a user with an `ACTIVE` status that's blocked from unknown devices. Unlocked users have an `ACTIVE` status and can sign in with their current password.\n> **Note:** This operation works with Okta-sourced users. It doesn't support directory-sourced accounts such as Active Directory.",
"operationId": "unlockUser",
"responses": {
"200": {
"content": {},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Unlock a user",
"tags": [
"UserLifecycle"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{id}/lifecycle/unsuspend": {
"parameters": [
{
"$ref": "#/components/parameters/pathId"
}
],
"post": {
"description": "Unsuspends a user and returns them to the `ACTIVE` state. This operation can only be performed on users that have a `SUSPENDED` status.",
"operationId": "unsuspendUser",
"responses": {
"200": {
"content": {},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorMissingRequiredParameter400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Unsuspend a user",
"tags": [
"UserLifecycle"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{userIdOrLogin}/linkedObjects/{primaryRelationshipName}/{primaryUserId}": {
"parameters": [
{
"$ref": "#/components/parameters/pathUserIdOrLogin"
},
{
"$ref": "#/components/parameters/pathPrimaryRelationshipName"
},
{
"$ref": "#/components/parameters/pathPrimaryUserId"
}
],
"put": {
"description": "Assigns the first user as the `associated` and the second user as the `primary` for the specified relationship.\n\nIf the first user is already associated with a different `primary` for this relationship, the previous link is removed. A linked object relationship can specify only one primary user for an associated user.",
"operationId": "assignLinkedObjectValueForPrimary",
"responses": {
"204": {
"content": {},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Assign a linked object value for primary",
"tags": [
"UserLinkedObject"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{userIdOrLogin}/linkedObjects/{relationshipName}": {
"delete": {
"description": "Deletes any existing relationship between the `associated` and `primary` user. For the `associated` user, this is specified by the ID. The `primary` name specifies the relationship.\n\nThe operation is successful if the relationship is deleted. The operation is also successful if the specified user isn't in the `associated` relationship for any instance of the specified `primary` and thus, no relationship is found.",
"operationId": "deleteLinkedObjectForUser",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Delete a linked object value",
"tags": [
"UserLinkedObject"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Lists either the `self` link for the primary user or all associated users in the relationship specified by `relationshipName`. If the specified user isn't associated in any relationship, an empty array is returned.\n\nUse `me` instead of `id` to specify the current session user.",
"operationId": "listLinkedObjectsForUser",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"GetAssociatedLinkedObjectResponse": {
"$ref": "#/components/examples/GetAssociatedLinkedObjectsResponse"
},
"GetPrimaryLinkedObjectResponse": {
"$ref": "#/components/examples/GetPrimaryLinkedObjectResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/ResponseLinks"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List the primary or all of the associated linked object values",
"tags": [
"UserLinkedObject"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathUserIdOrLogin"
},
{
"$ref": "#/components/parameters/pathRelationshipName"
}
]
},
"/api/v1/users/{userId}/authenticator-enrollments": {
"get": {
"description": "Lists all authenticator enrollments of the specified user",
"operationId": "listAuthenticatorEnrollments",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"AuthenticatorEnrollmentsListAllEx": {
"$ref": "#/components/examples/AuthenticatorEnrollmentResponseListAll"
}
},
"schema": {
"$ref": "#/components/schemas/AuthenticatorEnrollment"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List all authenticator enrollments",
"tags": [
"UserAuthenticatorEnrollments"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
},
{
"$ref": "#/components/parameters/queryDiscloseIdentifiers"
}
]
},
"/api/v1/users/{userId}/authenticator-enrollments/phone": {
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
],
"post": {
"description": "Creates a Phone authenticator enrollment that's automatically activated",
"operationId": "createAuthenticatorEnrollment",
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
],
"requestBody": {
"$ref": "#/components/requestBodies/PhoneAuthenticatorEnrollmentRequestBody"
},
"responses": {
"200": {
"$ref": "#/components/responses/PhoneAuthenticatorCreateEnrollmentResponse"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Create an auto-activated Phone authenticator enrollment",
"tags": [
"UserAuthenticatorEnrollments"
],
"x-codegen-request-body-name": "authenticator",
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/users/{userId}/authenticator-enrollments/tac": {
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
],
"post": {
"description": "Creates an auto-activated Temporary access code (TAC) authenticator enrollment",
"operationId": "createTacAuthenticatorEnrollment",
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
],
"requestBody": {
"$ref": "#/components/requestBodies/TacAuthenticatorEnrollmentRequestBody"
},
"responses": {
"200": {
"$ref": "#/components/responses/TacAuthenticatorCreateEnrollmentResponse"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Create an auto-activated TAC authenticator enrollment",
"tags": [
"UserAuthenticatorEnrollments"
],
"x-codegen-request-body-name": "authenticator",
"x-okta-iam-permissions": [
"okta.users.credentials.manageTemporaryAccessCode"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/api/v1/users/{userId}/authenticator-enrollments/{enrollmentId}": {
"delete": {
"description": "Deletes an existing enrollment for the specified user. The user can enroll the authenticator again.",
"operationId": "deleteAuthenticatorEnrollment",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Delete an authenticator enrollment",
"tags": [
"UserAuthenticatorEnrollments"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"get": {
"description": "Retrieves a user's authenticator enrollment by `enrollmentId`",
"operationId": "getAuthenticatorEnrollment",
"parameters": [
{
"$ref": "#/components/parameters/queryDiscloseIdentifiers"
}
],
"responses": {
"200": {
"$ref": "#/components/responses/AuthenticatorEnrollmentResponse"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "Retrieve an authenticator enrollment",
"tags": [
"UserAuthenticatorEnrollments"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
},
{
"$ref": "#/components/parameters/pathEnrollmentId"
}
]
},
"/api/v1/users/{userId}/classification": {
"get": {
"description": "Retrieves a user's classification",
"operationId": "getUserClassification",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Get classification of user": {
"$ref": "#/components/examples/Get-User-Classification-Example"
}
},
"schema": {
"$ref": "#/components/schemas/UserClassification"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "Retrieve a user's classification",
"tags": [
"UserClassification"
],
"x-okta-lifecycle": {
"SKUs": [],
"isCorsEnabled": true,
"isGenerallyAvailable": false,
"lifecycle": "EA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
],
"put": {
"description": "Replaces the user's classification",
"operationId": "replaceUserClassification",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Set user to LITE": {
"$ref": "#/components/examples/Set-User-Classification-Example"
}
},
"schema": {
"$ref": "#/components/schemas/ReplaceUserClassification"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Get classification of user": {
"$ref": "#/components/examples/Get-User-Classification-Example"
}
},
"schema": {
"$ref": "#/components/schemas/UserClassification"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Replace the user's classification",
"tags": [
"UserClassification"
],
"x-okta-lifecycle": {
"SKUs": [],
"isCorsEnabled": true,
"isGenerallyAvailable": false,
"lifecycle": "EA"
}
}
},
"/api/v1/users/{userId}/clients": {
"get": {
"description": "Lists all client resources for which the specified user has grants or tokens\n\n> **Note:** To list all client resources for which a specified authorization server has tokens, use the [List all client resources for an authorization server in the Authorization Servers API](/openapi/okta-management/management/authorizationserverclients/listoauth2clientsforauthorizationserver).",
"operationId": "listUserClients",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"List user clients": {
"$ref": "#/components/examples/ListUserClients"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/OAuth2Client"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List all clients",
"tags": [
"UserResources"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
]
},
"/api/v1/users/{userId}/clients/{clientId}/grants": {
"delete": {
"description": "Revokes all grants for the specified user and client",
"operationId": "revokeGrantsForUserAndClient",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Revoke all grants for a client",
"tags": [
"UserGrant"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Lists all grants for a specified user and client",
"operationId": "listGrantsForUserAndClient",
"parameters": [
{
"description": "Valid value: `scope`. If specified, scope details are included in the `_embedded` attribute.",
"in": "query",
"name": "expand",
"schema": {
"type": "string"
}
},
{
"description": "The cursor to use for pagination. It is an opaque string that specifies your current location in the list and is obtained from the `Link` response header. See [Pagination](https://developer.okta.com/docs/api/#pagination).",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the number of tokens to return",
"in": "query",
"name": "limit",
"schema": {
"default": 20,
"format": "int32",
"maximum": 200,
"minimum": 1,
"type": "integer"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"items": {
"$ref": "#/components/schemas/OAuth2ScopeConsentGrant"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List all grants for a client",
"tags": [
"UserGrant"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
},
{
"$ref": "#/components/parameters/pathClientId"
}
]
},
"/api/v1/users/{userId}/clients/{clientId}/tokens": {
"delete": {
"description": "Revokes all refresh tokens issued for the specified user and client",
"operationId": "revokeTokensForUserAndClient",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Revoke all refresh tokens for a client",
"tags": [
"UserOAuth"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Lists all refresh tokens issued for the specified user and client",
"operationId": "listRefreshTokensForUserAndClient",
"parameters": [
{
"description": "Valid value: `scope`. If specified, scope details are included in the `_embedded` attribute.",
"in": "query",
"name": "expand",
"schema": {
"example": "scope",
"type": "string"
}
},
{
"description": "The cursor to use for pagination. It is an opaque string that specifies your current location in the list and is obtained from the `Link` response header. See [Pagination](https://developer.okta.com/docs/api/#pagination).",
"in": "query",
"name": "after",
"schema": {
"type": "string"
}
},
{
"description": "Specifies the number of tokens to return",
"in": "query",
"name": "limit",
"schema": {
"default": 20,
"format": "int32",
"maximum": 200,
"minimum": 1,
"type": "integer"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"items": {
"$ref": "#/components/schemas/OAuth2RefreshToken"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List all refresh tokens for a client",
"tags": [
"UserOAuth"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
},
{
"$ref": "#/components/parameters/pathClientId"
}
]
},
"/api/v1/users/{userId}/clients/{clientId}/tokens/{tokenId}": {
"delete": {
"description": "Revokes the specified refresh and access tokens",
"operationId": "revokeTokenForUserAndClient",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Revoke a token for a client",
"tags": [
"UserOAuth"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a refresh token issued for the specified user and client",
"operationId": "getRefreshTokenForUserAndClient",
"parameters": [
{
"description": "Valid value: `scope`. If specified, scope details are included in the `_embedded` attribute.",
"in": "query",
"name": "expand",
"schema": {
"example": "scope",
"type": "string"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/OAuth2RefreshToken"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "Retrieve a refresh token for a client",
"tags": [
"UserOAuth"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
},
{
"$ref": "#/components/parameters/pathClientId"
},
{
"$ref": "#/components/parameters/pathTokenId"
}
]
},
"/api/v1/users/{userId}/credentials/change_password": {
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
],
"post": {
"description": "Updates a user's password by validating the user's current password.\n\nThis operation provides an option to delete all the sessions of the specified user. However, if the request is made in the context of a session owned by the specified user, that session isn't cleared.\n\nYou can only perform this operation on users in `STAGED`, `ACTIVE`, `PASSWORD_EXPIRED`, or `RECOVERY` status that have a valid [password credential](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/User/#tag/User/operation/createUser!path=credentials/password&t=request).\n\nThe user transitions to `ACTIVE` status when successfully invoked in `RECOVERY` status.\n\n> **Note:** The Okta account management policy doesn't support the `/users/{userId}/credentials/change_password` endpoint. See [Configure an Okta account management policy](https://developer.okta.com/docs/guides/okta-account-management-policy/main/).",
"operationId": "changePassword",
"parameters": [
{
"description": "If true, validates against the password minimum age policy",
"in": "query",
"name": "strict",
"schema": {
"default": false,
"type": "boolean"
},
"x-okta-added-version": "1.10.0"
}
],
"requestBody": {
"content": {
"application/json": {
"examples": {
"Change password request": {
"$ref": "#/components/examples/ChangePwdRequest"
}
},
"schema": {
"$ref": "#/components/schemas/ChangePasswordRequest"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Change password response": {
"$ref": "#/components/examples/ChangePwdResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserCredentials"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Update password",
"tags": [
"UserCred"
],
"x-codegen-request-body-name": "changePasswordRequest",
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{userId}/credentials/change_recovery_question": {
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
],
"post": {
"description": "Updates a user's recovery question and answer credential by validating the user's current password.\nYou can only perform this operation on users in `STAGED`, `ACTIVE`, or `RECOVERY` status that have a valid [password credential](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/User/#tag/User/operation/createUser!path=credentials/password&t=request).",
"operationId": "changeRecoveryQuestion",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Update recovery question request": {
"$ref": "#/components/examples/UpdateRecQuestionRequest"
}
},
"schema": {
"$ref": "#/components/schemas/UserCredentials"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Update recovery question response": {
"$ref": "#/components/examples/UpdateRecQuestionResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserCredentials"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Update recovery question",
"tags": [
"UserCred"
],
"x-codegen-request-body-name": "userCredentials",
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{userId}/credentials/forgot_password": {
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
],
"post": {
"description": "Starts the forgot password flow.\n\nGenerates a one-time token (OTT) that you can use to reset a user's password.\n\nThe user must validate their security question's answer when visiting the reset link. Perform this operation only on users with an `ACTIVE` status and\na valid [recovery question credential](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/User/#tag/User/operation/createUser!path=credentials/recovery_question&t=request).\n\n> **Note:** If you have migrated to Identity Engine, you can allow users to recover passwords with any enrolled MFA authenticator. See [Self-service account recovery](https://help.okta.com/oie/en-us/content/topics/identity-engine/authenticators/configure-sspr.htm?cshid=ext-config-sspr).\n\nIf an email address is associated with multiple users, keep in mind the following to ensure a successful password recovery lookup:\n * Okta no longer includes deactivated users in the lookup.\n * The lookup searches sign-in IDs first, then primary email addresses, and then secondary email addresses.\n\nIf `sendEmail` is `false`, returns a link for the user to reset their password. This operation doesn't affect the status of the user.",
"operationId": "forgotPassword",
"parameters": [
{
"description": "Sends a forgot password email to the user if `true`",
"in": "query",
"name": "sendEmail",
"required": false,
"schema": {
"default": true,
"type": "boolean"
}
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Forgot password response": {
"$ref": "#/components/examples/ForgotPwdResponse"
}
},
"schema": {
"$ref": "#/components/schemas/ForgotPasswordResponse"
}
}
},
"description": "Reset URL"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Start forgot password flow",
"tags": [
"UserCred"
],
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{userId}/credentials/forgot_password_recovery_question": {
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
],
"post": {
"description": "Resets the user's password to the specified password if the provided answer to the recovery question is correct.\nYou must include the recovery question answer with the submission.",
"operationId": "forgotPasswordSetNewPassword",
"parameters": [
{
"in": "query",
"name": "sendEmail",
"required": false,
"schema": {
"default": true,
"type": "boolean"
}
}
],
"requestBody": {
"content": {
"application/json": {
"examples": {
"Forgot password recovery question request": {
"$ref": "#/components/examples/ForgotPwdRecoveryQuestionRequest"
}
},
"schema": {
"$ref": "#/components/schemas/UserCredentials"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Forgot password recovery question response": {
"$ref": "#/components/examples/ForgotPwdRecoveryQuestionResponse"
}
},
"schema": {
"$ref": "#/components/schemas/UserCredentials"
}
}
},
"description": "Credentials"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Reset password with recovery question",
"tags": [
"UserCred"
],
"x-codegen-request-body-name": "userCredentials",
"x-okta-lifecycle": {
"isCorsEnabled": true,
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/users/{userId}/devices": {
"get": {
"description": "Lists all devices enrolled by a user\n\n> **Note:** To list all devices registered to an org, use the [List all devices endpoint in the Devices API](/openapi/okta-management/management/tags/device/other/listdevices).",
"operationId": "listUserDevices",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"APIUsersListDevicesResponseExample": {
"$ref": "#/components/examples/APIUserListDevicesResponse",
"summary": "List all devices for a specific user"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/UserDevice"
},
"type": "array"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List all devices for an enrolled user",
"tags": [
"UserResources"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
]
},
"/api/v1/users/{userId}/factors": {
"get": {
"description": "Lists all enrolled factors for the specified user that are included in the highest priority [authenticator enrollment policy](https://developer.okta.com/docs/api/openapi/okta-management/management/tags/policy/) that applies to the user.\n\nOnly enrolled factors that are `REQUIRED` or `OPTIONAL` in the highest priority authenticator enrollment policy can be returned.\n\n> **Note:** When admins use this endpoint for other users, the authenticator enrollment policy that's evaluated can vary depending on how client-specific conditions are configured in the rules of an authenticator enrollment policy. The client-specific conditions of the admin's client are used during policy evaluation instead of the client-specific conditions of the user. This can affect which authenticator enrollment policy is evaluated and which factors are returned.\n>\n> For example, an admin in Europe lists all enrolled factors for a user in North America. The network zone of the admin's client (in Europe) is used during policy evaluation instead of the network zone of the user (in North America).",
"operationId": "listFactors",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListFactorsResponse": {
"$ref": "#/components/examples/ListFactorsResults"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/UserFactor"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List all enrolled factors",
"tags": [
"UserFactor"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
],
"post": {
"description": "Enrolls a supported factor for the specified user\n\n> **Notes:**\n> * All responses return the enrolled factor with a status of either `PENDING_ACTIVATION` or `ACTIVE`.\n> * You can't use the Factors API to enroll Okta FastPass (`signed_nonce`) for a user. See [Configure Okta FastPass](https://help.okta.com/okta_help.htm?type=oie&id=ext-fp-configure).\n\n#### Additional SMS/Call factor information\n\n* **Rate limits**: Okta may return a `429 Too Many Requests` status code if you attempt to resend an SMS or a voice call challenge (OTP) within the same time window. The current [rate limit](https://developer.okta.com/docs/reference/rate-limits/) is one SMS/CALL challenge per phone number every 30 seconds.\n\n* **Existing phone numbers**: Okta may return a `400 Bad Request` status code if a user attempts to enroll with a different phone number when the user has an existing mobile phone or has an existing phone with voice call capability. A user can enroll only one mobile phone for `sms` and enroll only one voice call capable phone for `call` factor.\n\n#### Additional WebAuthn factor information\n\n* For detailed information on the WebAuthn standard, including an up-to-date list of supported browsers, see [webauthn.me](https://a0.to/webauthnme-okta-docs).\n\n* When you enroll a WebAuthn factor, the `activation` object in `_embedded` contains properties used to help the client to create a new WebAuthn credential for use with Okta. See the [WebAuthn spec for PublicKeyCredentialCreationOptions](https://www.w3.org/TR/webauthn/#dictionary-makecredentialoptions).\n\n* As of the `2026.04.0` release, the FIDO2 (WebAuthn) authenticator is now called Passkey (FIDO2 WebAuthn) and there are new settings and updates to the authenticator page layout. There have been no changes to any existing parameter names, values, or endpoint paths. For example, the `factorType` for the Passkey (FIDO2 WebAuthn) authenticator is still `webauthn`. See [Passkeys and WebAuthn](https://developer.okta.com/docs/guides/authenticators-web-authn/aspnet/main/#passkeys-and-webauthn).\n\n\n#### Additional Custom TOTP factor information\n\n* The enrollment process involves passing both the `factorProfileId` and `sharedSecret` properties for a token.\n\n* A factor profile represents a particular configuration of the Custom TOTP factor. It includes certain properties that match the hardware token that end users possess, such as the HMAC algorithm, passcode length, and time interval. There can be multiple Custom TOTP factor profiles per org, but users can only enroll in one Custom TOTP factor. Admins can [create Custom TOTP factor profiles](https://help.okta.com/okta_help.htm?id=ext-mfa-totp) in the Admin Console. Then, copy the `factorProfileId` from the Admin Console into the API request.\n\n*
\nIf you have the IP exempt zone feature enabled, you can allow traffic from specific gateway IPs irrespective of Okta ThreatInsight configurations, blocked network zones, or IP change events within Identity Threat Protection with Okta AI.
\n
\nWhen you enable this feature, Okta creates a zone called `DefaultExemptIpZone`. Gateway IPs that you add to this zone always have access to Okta resources. See [IP exempt zone](https://help.okta.com/okta_help.htm?type=oie&id=csh-about-ip-exempt-zone).\n\n> **Note:** You can't add trusted proxy IPs to this zone, delete the zone, or create additional exempt IP zones.",
"operationId": "replaceNetworkZone",
"requestBody": {
"content": {
"application/json": {
"examples": {
"ReplaceNetworkZone": {
"$ref": "#/components/examples/ReplaceNetworkZone"
},
"UpdateDefaultExemptIpZone": {
"$ref": "#/components/examples/UpdateDefaultExemptIpZone"
}
},
"schema": {
"$ref": "#/components/schemas/NetworkZone"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ReplaceNetworkZone": {
"$ref": "#/components/examples/ReplaceNetworkZoneResponse"
},
"UpdateDefaultExemptIpZoneResponse": {
"$ref": "#/components/examples/UpdateDefaultExemptIpZoneResponse"
}
},
"schema": {
"$ref": "#/components/schemas/NetworkZone"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/NzErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/NzErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.networkZones.manage"
]
}
],
"summary": "Replace a network zone",
"tags": [
"NetworkZone"
],
"x-codegen-request-body-name": "zone",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/zones/{zoneId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathZoneId"
}
],
"post": {
"description": "Activates a Network Zone by `zoneId`",
"operationId": "activateNetworkZone",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ActivateNetworkZone": {
"$ref": "#/components/examples/ActivateNetworkZone"
}
},
"schema": {
"$ref": "#/components/schemas/NetworkZone"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/NzErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.networkZones.manage"
]
}
],
"summary": "Activate a network zone",
"tags": [
"NetworkZone"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/api/v1/zones/{zoneId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathZoneId"
}
],
"post": {
"description": "Deactivates a Network Zone by `zoneId`",
"operationId": "deactivateNetworkZone",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"DeactivateNetworkZone": {
"$ref": "#/components/examples/DeactivateNetworkZone"
}
},
"schema": {
"$ref": "#/components/schemas/NetworkZone"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/NzErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.networkZones.manage"
]
}
],
"summary": "Deactivate a network zone",
"tags": [
"NetworkZone"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/attack-protection/api/v1/authenticator-settings": {
"get": {
"description": "Retrieves the Authenticator Settings for an org",
"operationId": "getAuthenticatorSettings",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/AttackProtectionAuthenticatorSettings"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.read"
]
}
],
"summary": "Retrieve the authenticator settings",
"tags": [
"AttackProtection"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"put": {
"description": "Replaces the Authenticator Settings for an org",
"operationId": "replaceAuthenticatorSettings",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/AttackProtectionAuthenticatorSettings"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/AttackProtectionAuthenticatorSettings"
}
}
},
"description": "OK"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Replace the authenticator settings",
"tags": [
"AttackProtection"
],
"x-codegen-request-body-name": "authenticatorSettings",
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/attack-protection/api/v1/user-lockout-settings": {
"get": {
"description": "Retrieves the User Lockout Settings for an org",
"operationId": "getUserLockoutSettings",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/UserLockoutSettings"
}
}
},
"description": "OK"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.read"
]
}
],
"summary": "Retrieve the user lockout settings",
"tags": [
"AttackProtection"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"put": {
"description": "Replaces the User Lockout Settings for an org",
"operationId": "replaceUserLockoutSettings",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/UserLockoutSettings"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/UserLockoutSettings"
}
}
},
"description": "OK"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"content": {
"application/json": {
"examples": {
"Access Denied": {
"$ref": "#/components/examples/ErrorAccessDenied"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "Forbidden"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.orgs.manage"
]
}
],
"summary": "Replace the user lockout settings",
"tags": [
"AttackProtection"
],
"x-codegen-request-body-name": "lockoutSettings",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/integrations/api/v1/api-services": {
"get": {
"description": "Lists all API Service Integration instances with a pagination option",
"operationId": "listApiServiceIntegrationInstances",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"APIServiceIntegrationResponseExample": {
"$ref": "#/components/examples/APIServiceIntegrationListResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/APIServiceIntegrationInstance"
},
"type": "array"
}
}
},
"description": "OK"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.oauthIntegrations.read"
]
}
],
"summary": "List all API service integration instances",
"tags": [
"ApiServiceIntegrations"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates and authorizes an API Service Integration instance",
"operationId": "createApiServiceIntegrationInstance",
"requestBody": {
"content": {
"application/json": {
"examples": {
"postAPIServiceIntegrationRequestExample": {
"$ref": "#/components/examples/postAPIServiceIntegrationRequest"
},
"postAPIServiceWithPropertiesIntegrationRequestExample": {
"$ref": "#/components/examples/postAPIServiceWithPropertiesIntegrationRequest"
}
},
"schema": {
"$ref": "#/components/schemas/postAPIServiceIntegrationInstanceRequest"
}
}
},
"required": true
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"APIServiceIntegrationResponseExample": {
"$ref": "#/components/examples/postAPIServiceIntegrationResponse"
},
"APIServiceWithPropertiesIntegrationResponseExample": {
"$ref": "#/components/examples/postAPIServiceWithPropertiesIntegrationResponse"
}
},
"schema": {
"$ref": "#/components/schemas/postAPIServiceIntegrationInstance"
}
}
},
"description": "Created"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.oauthIntegrations.manage"
]
}
],
"summary": "Create an API service integration instance",
"tags": [
"ApiServiceIntegrations"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/integrations/api/v1/api-services/{apiServiceId}": {
"delete": {
"description": "Deletes an API Service Integration instance by `id`. This operation also revokes access to scopes that were previously granted to this API Service Integration instance.",
"operationId": "deleteApiServiceIntegrationInstance",
"responses": {
"204": {
"description": "No Content"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.oauthIntegrations.manage"
]
}
],
"summary": "Delete an API service integration instance",
"tags": [
"ApiServiceIntegrations"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves an API Service Integration instance by `id`",
"operationId": "getApiServiceIntegrationInstance",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"APIServiceIntegrationResponseExample": {
"$ref": "#/components/examples/APIServiceIntegrationResponse"
},
"APIServiceWithPropertiesIntegrationResponseExample": {
"$ref": "#/components/examples/APIServiceWithPropertiesIntegrationResponse"
}
},
"schema": {
"$ref": "#/components/schemas/APIServiceIntegrationInstance"
}
}
},
"description": "OK"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.oauthIntegrations.read"
]
}
],
"summary": "Retrieve an API service integration instance",
"tags": [
"ApiServiceIntegrations"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathApiServiceId"
}
]
},
"/integrations/api/v1/api-services/{apiServiceId}/credentials/secrets": {
"get": {
"description": "Lists all client secrets for an API Service Integration instance by `apiServiceId`",
"operationId": "listApiServiceIntegrationInstanceSecrets",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"APIServiceIntegrationResponseExample": {
"$ref": "#/components/examples/APIServiceIntegrationInstanceSecretListResponse"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/APIServiceIntegrationInstanceSecret"
},
"type": "array"
}
}
},
"description": "OK"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.oauthIntegrations.read"
]
}
],
"summary": "List all API service integration instance secrets",
"tags": [
"ApiServiceIntegrations"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathApiServiceId"
}
],
"post": {
"description": "Creates an API Service Integration instance Secret object with a new active client secret. You can create up to two Secret objects. An error is returned if you attempt to create more than two Secret objects.",
"operationId": "createApiServiceIntegrationInstanceSecret",
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"newAPIServiceIntegrationInstanceSecretResponse": {
"$ref": "#/components/examples/newAPIServiceIntegrationInstanceSecretResponse"
}
},
"schema": {
"$ref": "#/components/schemas/APIServiceIntegrationInstanceSecret"
}
}
},
"description": "Created"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.oauthIntegrations.manage"
]
}
],
"summary": "Create an API service integration instance secret",
"tags": [
"ApiServiceIntegrations"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/integrations/api/v1/api-services/{apiServiceId}/credentials/secrets/{secretId}": {
"delete": {
"description": "Deletes an API Service Integration instance Secret by `secretId`. You can only delete an inactive Secret.",
"operationId": "deleteApiServiceIntegrationInstanceSecret",
"responses": {
"204": {
"description": "No Content"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.oauthIntegrations.manage"
]
}
],
"summary": "Delete an API service integration instance secret",
"tags": [
"ApiServiceIntegrations"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathApiServiceId"
},
{
"$ref": "#/components/parameters/pathSecretId"
}
]
},
"/integrations/api/v1/api-services/{apiServiceId}/credentials/secrets/{secretId}/lifecycle/activate": {
"parameters": [
{
"$ref": "#/components/parameters/pathApiServiceId"
},
{
"$ref": "#/components/parameters/pathSecretId"
}
],
"post": {
"description": "Activates an API Service Integration instance Secret by `secretId`",
"operationId": "activateApiServiceIntegrationInstanceSecret",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"activeAPIServiceIntegrationInstanceSecretResponse": {
"$ref": "#/components/examples/activeAPIServiceIntegrationInstanceSecretResponse"
}
},
"schema": {
"$ref": "#/components/schemas/APIServiceIntegrationInstanceSecret"
}
}
},
"description": "OK"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.oauthIntegrations.manage"
]
}
],
"summary": "Activate an API service integration instance secret",
"tags": [
"ApiServiceIntegrations"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/integrations/api/v1/api-services/{apiServiceId}/credentials/secrets/{secretId}/lifecycle/deactivate": {
"parameters": [
{
"$ref": "#/components/parameters/pathApiServiceId"
},
{
"$ref": "#/components/parameters/pathSecretId"
}
],
"post": {
"description": "Deactivates an API Service Integration instance Secret by `secretId`",
"operationId": "deactivateApiServiceIntegrationInstanceSecret",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"inactiveAPIServiceIntegrationInstanceSecretResponse": {
"$ref": "#/components/examples/inactiveAPIServiceIntegrationInstanceSecretResponse"
}
},
"schema": {
"$ref": "#/components/schemas/APIServiceIntegrationInstanceSecret"
}
}
},
"description": "OK"
},
"401": {
"$ref": "#/components/responses/ErrorInvalidToken401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.oauthIntegrations.manage"
]
}
],
"summary": "Deactivate an API service integration instance secret",
"tags": [
"ApiServiceIntegrations"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/integrations/api/v1/submissions": {},
"/integrations/api/v1/submissions/integration-capabilities/{status}": {
"parameters": [
{
"$ref": "#/components/parameters/IntegrationCapabilityStatus"
}
]
},
"/integrations/api/v1/submissions/logo": {},
"/integrations/api/v1/submissions/logo/default": {},
"/integrations/api/v1/submissions/{submissionId}": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
}
]
},
"/integrations/api/v1/submissions/{submissionId}/auth-settings/default": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
}
]
},
"/integrations/api/v1/submissions/{submissionId}/capabilities": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
}
]
},
"/integrations/api/v1/submissions/{submissionId}/capabilities/api-service/protocols/oauth2": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
}
]
},
"/integrations/api/v1/submissions/{submissionId}/capabilities/idv/protocols/id-proofing": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
}
]
},
"/integrations/api/v1/submissions/{submissionId}/capabilities/{capability}/auth-settings/default": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
},
{
"$ref": "#/components/parameters/pathCapability"
}
]
},
"/integrations/api/v1/submissions/{submissionId}/capabilities/{capability}/protocols/actions": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
},
{
"$ref": "#/components/parameters/pathCapability"
}
]
},
"/integrations/api/v1/submissions/{submissionId}/capabilities/{capability}/protocols/actions/actions-provider/{actionsProviderType}/available-actions": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
},
{
"$ref": "#/components/parameters/pathCapability"
},
{
"$ref": "#/components/parameters/pathActionsProviderType"
}
]
},
"/integrations/api/v1/submissions/{submissionId}/capabilities/{capability}/protocols/actions/actions-provider/{actionsProviderType}/validate-actions": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
},
{
"$ref": "#/components/parameters/pathCapability"
},
{
"$ref": "#/components/parameters/pathActionsProviderType"
}
]
},
"/integrations/api/v1/submissions/{submissionId}/express-configuration": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
}
]
},
"/integrations/api/v1/submissions/{submissionId}/submit": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
}
]
},
"/integrations/api/v1/submissions/{submissionId}/tenant-settings": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
}
]
},
"/integrations/api/v1/submissions/{submissionId}/testing": {
"parameters": [
{
"$ref": "#/components/parameters/pathSubmissionId"
}
]
},
"/oauth2/v1/clients/{clientId}/roles": {
"get": {
"description": "Lists all roles assigned to a client app identified by `clientId`",
"operationId": "listRolesForClient",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Custom roles": {
"$ref": "#/components/examples/CustomRolesListResponseClient"
},
"IAM-based standard roles": {
"$ref": "#/components/examples/IAMStandardRolesListResponseClient"
},
"Standard roles": {
"$ref": "#/components/examples/StandardRolesListResponseClient"
}
},
"schema": {
"items": {
"discriminator": {
"mapping": {
"ACCESS_CERTIFICATIONS_ADMIN": "#/components/schemas/CustomRole",
"ACCESS_REQUESTS_ADMIN": "#/components/schemas/CustomRole",
"API_ACCESS_MANAGEMENT_ADMIN": "#/components/schemas/StandardRole",
"APP_ADMIN": "#/components/schemas/StandardRole",
"CUSTOM": "#/components/schemas/CustomRole",
"GROUP_MEMBERSHIP_ADMIN": "#/components/schemas/StandardRole",
"HELP_DESK_ADMIN": "#/components/schemas/StandardRole",
"ORG_ADMIN": "#/components/schemas/StandardRole",
"READ_ONLY_ADMIN": "#/components/schemas/StandardRole",
"REPORT_ADMIN": "#/components/schemas/StandardRole",
"SUPER_ADMIN": "#/components/schemas/StandardRole",
"USER_ADMIN": "#/components/schemas/StandardRole",
"WORKFLOWS_ADMIN": "#/components/schemas/CustomRole"
},
"propertyName": "type"
},
"oneOf": [
{
"$ref": "#/components/schemas/StandardRole"
},
{
"$ref": "#/components/schemas/CustomRole"
}
]
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all client role assignments",
"tags": [
"RoleAssignmentClient"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathClientId"
}
],
"post": {
"description": "Assigns a [standard role](/openapi/okta-management/guides/roles/#standard-roles) to a client app.\n\nYou can also assign a custom role to a client app, but the preferred method to assign a custom role to a client is to create a binding between the custom role, the resource set, and the client app. See [Create a role resource set binding](/openapi/okta-management/management/roledresourcesetbinding/createresourcesetbinding).\n\n> **Notes:**\n> * The request payload is different for standard and custom role assignments.\n> * For IAM-based standard role assignments, use the request payload for standard roles. However, the response payload for IAM-based role assignments is similar to the custom role's assignment response.",
"operationId": "assignRoleToClient",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Custom role assignment": {
"$ref": "#/components/examples/CustomRoleAssignmentRequest"
},
"Standard role": {
"$ref": "#/components/examples/StandardRoleAssignmentRequest"
}
},
"schema": {
"discriminator": {
"mapping": {
"ACCESS_CERTIFICATIONS_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"ACCESS_REQUESTS_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"API_ACCESS_MANAGEMENT_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"APP_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"CUSTOM": "#/components/schemas/CustomRoleAssignmentSchema",
"GROUP_MEMBERSHIP_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"HELP_DESK_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"ORG_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"READ_ONLY_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"REPORT_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"SUPER_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"USER_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema",
"WORKFLOWS_ADMIN": "#/components/schemas/StandardRoleAssignmentSchema"
},
"propertyName": "type"
},
"oneOf": [
{
"$ref": "#/components/schemas/StandardRoleAssignmentSchema"
},
{
"$ref": "#/components/schemas/CustomRoleAssignmentSchema"
}
]
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Custom role assignment": {
"$ref": "#/components/examples/CustomRoleResponseClient"
},
"IAM-based role assignment": {
"$ref": "#/components/examples/IAMStandardRolesListResponseClient"
},
"Standard role": {
"$ref": "#/components/examples/StandardRoleResponseClient"
}
},
"schema": {
"discriminator": {
"mapping": {
"ACCESS_CERTIFICATIONS_ADMIN": "#/components/schemas/CustomRole",
"ACCESS_REQUESTS_ADMIN": "#/components/schemas/CustomRole",
"API_ACCESS_MANAGEMENT_ADMIN": "#/components/schemas/StandardRole",
"APP_ADMIN": "#/components/schemas/StandardRole",
"CUSTOM": "#/components/schemas/CustomRole",
"GROUP_MEMBERSHIP_ADMIN": "#/components/schemas/StandardRole",
"HELP_DESK_ADMIN": "#/components/schemas/StandardRole",
"ORG_ADMIN": "#/components/schemas/StandardRole",
"READ_ONLY_ADMIN": "#/components/schemas/StandardRole",
"REPORT_ADMIN": "#/components/schemas/StandardRole",
"SUPER_ADMIN": "#/components/schemas/StandardRole",
"USER_ADMIN": "#/components/schemas/StandardRole",
"WORKFLOWS_ADMIN": "#/components/schemas/CustomRole"
},
"propertyName": "type"
},
"oneOf": [
{
"$ref": "#/components/schemas/StandardRole"
},
{
"$ref": "#/components/schemas/CustomRole"
}
]
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Assign a client role",
"tags": [
"RoleAssignmentClient"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/oauth2/v1/clients/{clientId}/roles/{roleAssignmentId}": {
"delete": {
"description": "Unassigns a role assignment (identified by `roleAssignmentId`) from a client app (identified by `clientId`)",
"operationId": "deleteRoleFromClient",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Unassign a client role",
"tags": [
"RoleAssignmentClient"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves a role assignment (identified by `roleAssignmentId`) for a client app (identified by `clientId`)",
"operationId": "retrieveClientRole",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Custom role assignment": {
"$ref": "#/components/examples/CustomRoleResponseClient"
},
"IAM-based standard role assignment": {
"$ref": "#/components/examples/IAMStandardRoleResponseClient"
},
"Standard role": {
"$ref": "#/components/examples/StandardRoleResponseClient"
}
},
"schema": {
"discriminator": {
"mapping": {
"ACCESS_CERTIFICATIONS_ADMIN": "#/components/schemas/CustomRole",
"ACCESS_REQUESTS_ADMIN": "#/components/schemas/CustomRole",
"API_ACCESS_MANAGEMENT_ADMIN": "#/components/schemas/StandardRole",
"APP_ADMIN": "#/components/schemas/StandardRole",
"CUSTOM": "#/components/schemas/CustomRole",
"GROUP_MEMBERSHIP_ADMIN": "#/components/schemas/StandardRole",
"HELP_DESK_ADMIN": "#/components/schemas/StandardRole",
"ORG_ADMIN": "#/components/schemas/StandardRole",
"READ_ONLY_ADMIN": "#/components/schemas/StandardRole",
"REPORT_ADMIN": "#/components/schemas/StandardRole",
"SUPER_ADMIN": "#/components/schemas/StandardRole",
"USER_ADMIN": "#/components/schemas/StandardRole",
"WORKFLOWS_ADMIN": "#/components/schemas/CustomRole"
},
"propertyName": "type"
},
"oneOf": [
{
"$ref": "#/components/schemas/StandardRole"
},
{
"$ref": "#/components/schemas/CustomRole"
}
]
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "Retrieve a client role",
"tags": [
"RoleAssignmentClient"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathClientId"
},
{
"$ref": "#/components/parameters/pathRoleAssignmentId"
}
]
},
"/oauth2/v1/clients/{clientId}/roles/{roleAssignmentId}/targets/catalog/apps": {
"get": {
"description": "Lists all OIN app targets for an `APP_ADMIN` role that's assigned to a client (by `clientId`).",
"operationId": "listAppTargetRoleToClient",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ClientRoleTargetExample": {
"$ref": "#/components/examples/ClientRoleTargetResponseFacebookEx"
},
"ClientRoleTargetNonOINExample": {
"$ref": "#/components/examples/ClientRoleTargetResponseInstanceEx"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/CatalogApplication"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all client role app targets",
"tags": [
"RoleBTargetClient"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathClientId"
},
{
"$ref": "#/components/parameters/pathRoleAssignmentId"
}
]
},
"/oauth2/v1/clients/{clientId}/roles/{roleAssignmentId}/targets/catalog/apps/{appName}": {
"delete": {
"description": "Unassigns an OIN app target for a role assignment to a client app\n\n> **Note:** You can't remove the last OIN app target from a role assignment.\n> If you need a role assignment that applies to all apps, delete the role assignment with the target and create another one. See [Unassign a client role](/openapi/okta-management/management/tags/roleassignmentclient/other/deleterolefromclient).",
"operationId": "removeAppTargetRoleFromClient",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Unassign a client role app target",
"tags": [
"RoleBTargetClient"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathClientId"
},
{
"$ref": "#/components/parameters/pathRoleAssignmentId"
},
{
"$ref": "#/components/parameters/pathAppName"
}
],
"put": {
"description": "Assigns an OIN app target for an `APP_ADMIN` role assignment to a client. When you assign an app target from the OIN catalog, you reduce the scope of the role assignment.\nThe role assignment applies to only app instances that are included in the specified OIN app target.\n\nAn assigned OIN app target overrides any existing app instance targets.\nFor example, if a user is assigned to administer a specific Facebook instance, a successful request to add an OIN app target with `facebook` for `appName` makes that user the administrator for all Facebook instances.",
"operationId": "assignAppTargetRoleToClient",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Assign a client role app target",
"tags": [
"RoleBTargetClient"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/oauth2/v1/clients/{clientId}/roles/{roleAssignmentId}/targets/catalog/apps/{appName}/{appId}": {
"delete": {
"description": "Unassigns an app instance target from a role assignment to a client app\n\n> **Note:** You can't remove the last app instance target from a role assignment.\n> If you need a role assignment that applies to all the apps, delete the role assignment with the instance target and create another one. See [Unassign a client role](/openapi/okta-management/management/tags/roleassignmentclient/other/deleterolefromclient).",
"operationId": "removeAppTargetInstanceRoleForClient",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Unassign a client role app instance target",
"tags": [
"RoleBTargetClient"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathClientId"
},
{
"$ref": "#/components/parameters/pathRoleAssignmentId"
},
{
"$ref": "#/components/parameters/pathAppName"
},
{
"$ref": "#/components/parameters/pathAppId"
}
],
"put": {
"description": "Assigns an app instance target to an `APP_ADMIN` role assignment to a client. When you assign the first OIN app or app instance target, you reduce the scope of the role assignment.\nThe role no longer applies to all app targets, but applies only to the specified target.\n\n> **Note:** You can target a mixture of both OIN app and app instance targets, but you can't assign permissions to manage all instances of an OIN app and then assign a subset of permissions to the same app.\nFor example, you can't specify that an admin has access to manage all instances of the Salesforce app and then also manage only specific configurations of the Salesforce app.",
"operationId": "assignAppTargetInstanceRoleForClient",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Assign a client role app instance target",
"tags": [
"RoleBTargetClient"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/oauth2/v1/clients/{clientId}/roles/{roleAssignmentId}/targets/groups": {
"get": {
"description": "Lists all group targets for a [`USER_ADMIN`](/openapi/okta-management/guides/roles/#standard-roles), `HELP_DESK_ADMIN`, or `GROUP_MEMBERSHIP_ADMIN` role assignment to a client. If the role isn't scoped to specific group targets, Okta returns an empty array `[]`.",
"operationId": "listGroupTargetRoleForClient",
"parameters": [
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/queryLimit"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"items": {
"$ref": "#/components/schemas/Group"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.read"
]
}
],
"summary": "List all client role group targets",
"tags": [
"RoleBTargetClient"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathClientId"
},
{
"$ref": "#/components/parameters/pathRoleAssignmentId"
}
]
},
"/oauth2/v1/clients/{clientId}/roles/{roleAssignmentId}/targets/groups/{groupId}": {
"delete": {
"description": "Unassigns a Group target from a `USER_ADMIN`, `HELP_DESK_ADMIN`, or `GROUP_MEMBERSHIP_ADMIN` role assignment to a client app.\n\n> **Note:** You can't remove the last group target from a role assignment. If you need a role assignment that applies to all groups, delete the role assignment with the target and create another one. See [Unassign a client role](/openapi/okta-management/management/tags/roleassignmentclient/other/deleterolefromclient).",
"operationId": "removeGroupTargetRoleFromClient",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Unassign a client role group target",
"tags": [
"RoleBTargetClient"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathClientId"
},
{
"$ref": "#/components/parameters/pathRoleAssignmentId"
},
{
"$ref": "#/components/parameters/pathGroupId"
}
],
"put": {
"description": "Assigns a group target to a [`USER_ADMIN`](/openapi/okta-management/guides/roles/#standard-roles), `HELP_DESK_ADMIN`, or `GROUP_MEMBERSHIP_ADMIN` role assignment to a client app. When you assign the first group target, you reduce the scope of the role assignment. The role no longer applies to all targets, but applies only to the specified target.",
"operationId": "assignGroupTargetRoleForClient",
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.roles.manage"
]
}
],
"summary": "Assign a client role group target",
"tags": [
"RoleBTargetClient"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/okta-personal-settings/api/v1/edit-feature": {
"put": {
"description": "Replaces Okta Personal admin settings in a Workforce org",
"operationId": "replaceOktaPersonalAdminSettings",
"requestBody": {
"content": {
"application/json": {
"examples": {
"exampleSettings": {
"$ref": "#/components/examples/editFeatureExample"
}
},
"schema": {
"$ref": "#/components/schemas/OktaPersonalAdminFeatureSettings"
}
}
},
"required": true
},
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"401": {
"$ref": "#/components/responses/Error-FF-NotEnabled-Response-401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.personal.adminSettings.manage"
]
}
],
"summary": "Replace the Okta Personal admin settings",
"tags": [
"OktaPersonalSettings"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/okta-personal-settings/api/v1/export-blocklists": {
"get": {
"description": "Lists all blocked email domains which are excluded from app migration",
"operationId": "listPersonalAppsExportBlockList",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"exampleSettings": {
"$ref": "#/components/examples/getBlockListExample"
}
},
"schema": {
"$ref": "#/components/schemas/PersonalAppsBlockList"
}
}
},
"description": "OK"
},
"401": {
"$ref": "#/components/responses/Error-FF-NotEnabled-Response-401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.personal.adminSettings.read"
]
}
],
"summary": "List all blocked email domains",
"tags": [
"OktaPersonalSettings"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
"put": {
"description": "Replaces the list of blocked email domains which are excluded from app migration",
"operationId": "replaceBlockedEmailDomains",
"requestBody": {
"content": {
"application/json": {
"examples": {
"exampleSettings": {
"$ref": "#/components/examples/getBlockListExample"
}
},
"schema": {
"$ref": "#/components/schemas/PersonalAppsBlockList"
}
}
},
"required": true
},
"responses": {
"204": {
"content": {},
"description": "No Content"
},
"401": {
"$ref": "#/components/responses/Error-FF-NotEnabled-Response-401"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.personal.adminSettings.manage"
]
}
],
"summary": "Replace the blocked email domains",
"tags": [
"OktaPersonalSettings"
],
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
}
},
"/privileged-access/api/v1/containers/{containerId}/prepare-resources": {
"parameters": [
{
"$ref": "#/components/parameters/containerId"
},
{
"$ref": "#/components/parameters/privQueryLastUpdated"
}
]
},
"/privileged-access/api/v1/containers/{containerId}/resource-filter-criteria": {
"parameters": [
{
"$ref": "#/components/parameters/containerId"
}
]
},
"/privileged-access/api/v1/containers/{containerId}/resources": {
"parameters": [
{
"$ref": "#/components/parameters/containerId"
},
{
"$ref": "#/components/parameters/privQueryLastUpdated"
},
{
"$ref": "#/components/parameters/privQueryStatus"
},
{
"$ref": "#/components/parameters/privQueryLimit"
},
{
"$ref": "#/components/parameters/privQueryAfter"
}
]
},
"/privileged-access/api/v1/okta-service-accounts": {
"get": {
"description": "Lists all Okta managed user accounts in your org.\n\nUse the `match` parameter to search for accounts where the account name (`name`) or username (`username`) contains the specified value.",
"operationId": "listOktaManagedUserAccounts",
"parameters": [
{
"$ref": "#/components/parameters/queryLimit"
},
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/oktaManagedUserMatchQueryFilter"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListOktaManagedUserAccounts": {
"$ref": "#/components/examples/ListOktaManagedUserAccounts"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/OktaManagedUserAccountResponse"
},
"type": "array"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.serviceAccounts.okta.read"
]
}
],
"summary": "List all Okta managed user accounts",
"tags": [
"OktaManagedUserAccount"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a new Okta managed user account for managing a Universal Directory user as a service account.\n\nYou must specify an existing Okta user in your org with the `oktaUserId` request parameter.",
"operationId": "createOktaManagedUserAccount",
"requestBody": {
"content": {
"application/json": {
"examples": {
"CreateOktaManagedUserAccount": {
"$ref": "#/components/examples/CreateOktaManagedUserAccountRequest"
}
},
"schema": {
"$ref": "#/components/schemas/OktaManagedUserAccountRequest"
}
}
},
"required": true
},
"responses": {
"201": {
"content": {
"application/json": {
"examples": {
"OktaManagedUserAccountResponse": {
"$ref": "#/components/examples/OktaManagedUserAccountResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OktaManagedUserAccountResponse"
}
}
},
"description": "Created"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.serviceAccounts.okta.manage"
]
}
],
"summary": "Create an Okta managed user account",
"tags": [
"OktaManagedUserAccount"
],
"x-codegen-request-body-name": "body",
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/privileged-access/api/v1/okta-service-accounts/{id}": {
"delete": {
"description": "Deletes an Okta managed user account specified by ID.\n\nThis operation removes the service account management for the Okta user, suspends the underlying Okta user account,\nbut doesn't delete the user from Universal Directory.",
"operationId": "deleteOktaManagedUserAccount",
"responses": {
"204": {
"description": "No Content"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.serviceAccounts.okta.manage"
]
}
],
"summary": "Delete an Okta managed user account",
"tags": [
"OktaManagedUserAccount"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves an Okta managed user account specified by ID",
"operationId": "getOktaManagedUserAccount",
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"OktaManagedUserAccountResponse": {
"$ref": "#/components/examples/OktaManagedUserAccountResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OktaManagedUserAccountResponse"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.serviceAccounts.okta.read"
]
}
],
"summary": "Retrieve an Okta managed user account",
"tags": [
"OktaManagedUserAccount"
],
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/oktaManagedUserAccountId"
}
],
"patch": {
"description": "Updates an existing Okta managed user account specified by ID.\n\nYou can only update the `name`, `description`, `ownerUserIds`, and `ownerGroupIds` properties.",
"operationId": "updateOktaManagedUserAccount",
"requestBody": {
"content": {
"application/json": {
"examples": {
"UpdateOktaManagedUserAccount": {
"$ref": "#/components/examples/UpdateOktaManagedUserAccountRequest"
}
},
"schema": {
"$ref": "#/components/schemas/OktaManagedUserAccountForUpdate"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"OktaManagedUserAccountResponse": {
"$ref": "#/components/examples/OktaManagedUserAccountResponse"
}
},
"schema": {
"$ref": "#/components/schemas/OktaManagedUserAccountResponse"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.serviceAccounts.okta.manage"
]
}
],
"summary": "Update an Okta managed user account",
"tags": [
"OktaManagedUserAccount"
],
"x-codegen-request-body-name": "body",
"x-okta-iam-admin-roles": [
"SUPER_ADMIN"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/privileged-access/api/v1/resources": {},
"/privileged-access/api/v1/resources/{id}": {
"parameters": [
{
"$ref": "#/components/parameters/privilegedResourceId"
}
]
},
"/privileged-access/api/v1/resources/{id}/claim": {
"parameters": [
{
"$ref": "#/components/parameters/privilegedResourceId"
}
]
},
"/privileged-access/api/v1/resources/{id}/rotate-password": {
"parameters": [
{
"$ref": "#/components/parameters/privilegedResourceId"
}
]
},
"/privileged-access/api/v1/service-accounts": {
"get": {
"description": "Lists all app service accounts",
"operationId": "listAppServiceAccounts",
"parameters": [
{
"$ref": "#/components/parameters/queryLimit"
},
{
"$ref": "#/components/parameters/queryAfter"
},
{
"$ref": "#/components/parameters/matchQueryFilter"
}
],
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"ListAppServiceAccounts": {
"$ref": "#/components/examples/ListAppServiceAccounts"
}
},
"schema": {
"items": {
"$ref": "#/components/schemas/AppServiceAccount"
},
"type": "array"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.serviceAccounts.read"
]
}
],
"summary": "List all app service accounts",
"tags": [
"ServiceAccount"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"post": {
"description": "Creates a new app service account for managing an app account",
"operationId": "createAppServiceAccount",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/AppServiceAccount"
}
}
},
"required": true
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/AppServiceAccount"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.serviceAccounts.manage"
]
}
],
"summary": "Create an app service account",
"tags": [
"ServiceAccount"
],
"x-codegen-request-body-name": "body",
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/privileged-access/api/v1/service-accounts/{id}": {
"delete": {
"description": "Deletes an app service account specified by ID",
"operationId": "deleteAppServiceAccount",
"responses": {
"204": {
"description": "No Content"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.serviceAccounts.manage"
]
}
],
"summary": "Delete an app service account",
"tags": [
"ServiceAccount"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"get": {
"description": "Retrieves an app service account specified by ID",
"operationId": "getAppServiceAccount",
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/AppServiceAccount"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.serviceAccounts.read"
]
}
],
"summary": "Retrieve an app service account",
"tags": [
"ServiceAccount"
],
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/serviceAccountId"
}
],
"patch": {
"description": "Updates an existing app service account specified by ID",
"operationId": "updateAppServiceAccount",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/AppServiceAccountForUpdate"
}
}
}
},
"responses": {
"200": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/AppServiceAccount"
}
}
},
"description": "Success"
},
"400": {
"$ref": "#/components/responses/ErrorApiValidationFailed400"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.serviceAccounts.manage"
]
}
],
"summary": "Update an existing app service account",
"tags": [
"ServiceAccount"
],
"x-codegen-request-body-name": "body",
"x-okta-lifecycle": {
"SKUs": [],
"isGenerallyAvailable": false,
"lifecycle": "GA"
}
}
},
"/security/api/v1/security-events": {
"post": {
"description": "Publishes a security event token (SET) sent by a security events provider. After the token is verified, Okta ingests the event and performs any appropriate action.",
"operationId": "publishSecurityEventTokens",
"requestBody": {
"content": {
"application/secevent+jwt": {
"examples": {
"SET": {
"value": "eyJraWQiOiJzYW1wbGVfa2lkIiwidHlwIjoic2ZXZlbnQra ... mrtmw"
}
},
"schema": {
"type": "string"
}
}
},
"description": "The request body is a signed [SET](https://datatracker.ietf.org/doc/html/rfc8417), which is a type of JSON Web Token (JWT).\n\nFor SET JWT header and body descriptions, see [SET JWT header](/openapi/okta-management/management/ssfsecurityeventtoken/securityeventtokenrequestjwtheader) and [SET JWT body payload](/openapi/okta-management/management/ssfsecurityeventtoken/securityeventtokenrequestjwtbody).\n",
"required": true
},
"responses": {
"202": {
"description": "Accepted"
},
"400": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/SecurityEventTokenError"
}
}
},
"description": "Bad Request"
}
},
"security": [],
"summary": "Publish a security event token",
"tags": [
"SSFSecurityEventToken"
],
"x-codegen-request-body-name": "Security Event Token",
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/webauthn-registration/api/v1/activate": {
"post": {
"description": "Activates a preregistered WebAuthn factor. As part of this operation, Okta first decrypts and verifies the factor PIN and enrollment data sent by the fulfillment provider.",
"operationId": "activatePreregistrationEnrollment",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Activate Preregistration Enrollment Request": {
"$ref": "#/components/examples/EnrollmentActivationRequestExample"
}
},
"schema": {
"$ref": "#/components/schemas/EnrollmentActivationRequest"
}
}
},
"description": "Enrollment activation request"
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Activate Preregistration Enrollment Response": {
"$ref": "#/components/examples/EnrollmentActivationResponseExample"
}
},
"schema": {
"$ref": "#/components/schemas/EnrollmentActivationResponse"
}
}
},
"description": "Success"
},
"400": {
"content": {
"application/json": {
"examples": {
"NoDisable": {
"$ref": "#/components/examples/ErrorPinOrCredResponsesProcessingFailure"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "PIN or cred requests generation failed"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Activate a preregistered WebAuthn factor",
"tags": [
"WebAuthnPreregistration"
],
"x-codegen-request-body-name": "body",
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/webauthn-registration/api/v1/enroll": {
"post": {
"description": "Enrolls a preregistered WebAuthn factor. This WebAuthn factor has a longer challenge timeout period to accommodate the fulfillment request process. As part of this operation, Okta generates elliptic curve (EC) key-pairs used to encrypt the factor PIN and enrollment data sent by the fulfillment provider.",
"operationId": "enrollPreregistrationEnrollment",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Initialize Preregistration Enrollment Request": {
"$ref": "#/components/examples/EnrollmentInitializationRequestExample"
}
},
"schema": {
"$ref": "#/components/schemas/EnrollmentInitializationRequest"
}
}
},
"description": "Enrollment initialization request"
},
"responses": {
"200": {
"content": {
"application/json": {
"examples": {
"Initialize Preregistration Enrollment Response": {
"$ref": "#/components/examples/EnrollmentInitializationResponseExample"
}
},
"schema": {
"$ref": "#/components/schemas/EnrollmentInitializationResponse"
}
}
},
"description": "Success"
},
"400": {
"content": {
"application/json": {
"examples": {
"NoDisable": {
"$ref": "#/components/examples/ErrorPinOrCredRequestsGenerationFailure"
}
},
"schema": {
"$ref": "#/components/schemas/Error"
}
}
},
"description": "PIN or cred requests generation failed"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Enroll a preregistered WebAuthn factor",
"tags": [
"WebAuthnPreregistration"
],
"x-codegen-request-body-name": "body",
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/webauthn-registration/api/v1/initiate-fulfillment-request": {
"post": {
"description": "Generates a fulfillment request by sending a WebAuthn preregistration event to start the flow. The WebAuthn preregistration integration for Okta Workflows uses a preregistration event to populate the fulfillment request.",
"operationId": "generateFulfillmentRequest",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Generate Fulfillment Request": {
"$ref": "#/components/examples/GenerateFulfillmentRequestExample"
}
},
"schema": {
"$ref": "#/components/schemas/FulfillmentRequest"
}
}
},
"description": "Fulfillment request"
},
"responses": {
"204": {
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Generate a fulfillment request",
"tags": [
"WebAuthnPreregistration"
],
"x-codegen-request-body-name": "body",
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/webauthn-registration/api/v1/send-pin": {
"post": {
"description": "Sends the decoded PIN for the specified WebAuthn preregistration enrollment. PINs are sent to the user's email. To resend the PIN, call this operation again.",
"operationId": "sendPin",
"requestBody": {
"content": {
"application/json": {
"examples": {
"Send PIN Request": {
"$ref": "#/components/examples/SendPinRequestExample"
}
},
"schema": {
"$ref": "#/components/schemas/PinRequest"
}
}
},
"description": "Send PIN request"
},
"responses": {
"204": {
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Send a PIN to user",
"tags": [
"WebAuthnPreregistration"
],
"x-codegen-request-body-name": "body",
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
},
"/webauthn-registration/api/v1/users/{userId}/enrollments": {
"get": {
"description": "Lists all WebAuthn preregistration factors for the specified user",
"operationId": "listWebAuthnPreregistrationFactors",
"responses": {
"200": {
"content": {
"application/json": {
"example": [
{
"_links": {
"self": {
"hints": {
"allow": [
"DELETE"
]
},
"href": "https://example.okta.com/webauthn-registration/api/v1/users/00u15s1KDETTQMQYABRL/enrollments/fwf23789dfs9asdf782"
}
},
"created": "2018-05-24T20:43:19.000Z",
"factorType": "webauthn",
"fulfillmentProvider": "yubico",
"id": "fwf23789dfs9asdf782",
"lastUpdated": "2018-05-24T21:43:32.000Z",
"profile": {
"authenticatorName": "YubiKey 5C",
"credentialId": "l3Br0n-7H3g047NqESqJynFtIgf3Ix9OfaRoNwLoloso99Xl2zS_O7EXUkmPeAIzTVtEL4dYjicJWBz7NpqhGA",
"presetPinAvailable": true
},
"provider": "FIDO",
"status": "ACTIVE",
"vendorName": "FIDO"
}
],
"schema": {
"items": {
"$ref": "#/components/schemas/WebAuthnPreregistrationFactor"
},
"type": "array"
}
}
},
"description": "Success"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.read"
]
}
],
"summary": "List all WebAuthn preregistration factors",
"tags": [
"WebAuthnPreregistration"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
}
]
},
"/webauthn-registration/api/v1/users/{userId}/enrollments/{authenticatorEnrollmentId}": {
"delete": {
"description": "Deletes a specific WebAuthn preregistration factor for a user",
"operationId": "deleteWebAuthnPreregistrationFactor",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Delete a WebAuthn preregistration factor",
"tags": [
"WebAuthnPreregistration"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
},
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
},
{
"$ref": "#/components/parameters/authenticatorEnrollmentId"
}
]
},
"/webauthn-registration/api/v1/users/{userId}/enrollments/{authenticatorEnrollmentId}/mark-error": {
"parameters": [
{
"$ref": "#/components/parameters/pathUserId"
},
{
"$ref": "#/components/parameters/authenticatorEnrollmentId"
}
],
"post": {
"description": "Assigns the fulfillment error status to a WebAuthn preregistration factor for a user. The `/mark-error` path indicates that the specific `FULFILLMENT_ERRORED` AuthFactor status is set on the enrollment.",
"operationId": "assignFulfillmentErrorWebAuthnPreregistrationFactor",
"responses": {
"204": {
"description": "No Content"
},
"403": {
"$ref": "#/components/responses/ErrorAccessDenied403"
},
"404": {
"$ref": "#/components/responses/ErrorResourceNotFound404"
},
"429": {
"$ref": "#/components/responses/ErrorTooManyRequests429"
}
},
"security": [
{
"apiToken": []
},
{
"oauth2": [
"okta.users.manage"
]
}
],
"summary": "Assign the fulfillment error status to a WebAuthn preregistration factor",
"tags": [
"WebAuthnPreregistration"
],
"x-okta-lifecycle": {
"SKUs": [
"Okta Identity Engine"
],
"isGenerallyAvailable": false,
"lifecycle": "LIMITED_GA"
}
}
}
},
"servers": [
{
"url": "https://{yourOktaDomain}",
"variables": {
"yourOktaDomain": {
"default": "subdomain.okta.com",
"description": "The domain of your organization. This can be a provided subdomain of an official okta domain (okta.com, oktapreview.com, etc) or one of your configured custom domains."
}
}
}
],
"tags": [
{
"description": "The Agent Pools API provides operations to manage the update settings of the directory agents for your org.",
"name": "AgentPools",
"x-displayName": "Directory Agent Pools"
},
{
"description": "This API provides operations to manage API service integration instances in your org.\n\nFor a current list of available API service integrations, see the [Okta Integration Network catalog](https://www.okta.com/integrations/?capability=api).\n\nSee [Add an API Service Integration](https://help.okta.com/okta_help.htm?type=oie&id=ext-add-api-service-integration) for corresponding admin instructions using the Admin Console.\nIf you want to build an API service integration, see [API service integrations in the OIN](https://developer.okta.com/docs/guides/oin-api-service-overview/).\n",
"name": "ApiServiceIntegrations",
"x-displayName": "API Service Integrations"
},
{
"description": "The API Tokens API provides operations to manage SSWS API tokens for your org.",
"name": "ApiToken",
"x-displayName": "API Tokens"
},
{
"description": "The Applications API provides operations to manage apps in your org.\n\nTo create a custom app integration instance, use the [Create an Application](https://developer.okta.com/docs/api/openapi/okta-management/management/tags/application/other/createapplication) operation with the schema provided in the request payload.\n\nTo create an app instance from the Okta Integration Network (OIN), use the [Create an Application](https://developer.okta.com/docs/api/openapi/okta-management/management/tags/application/other/createapplication)\noperation with the corresponding OIN app schema in the request body.",
"name": "Application",
"x-displayName": "Applications"
},
{
"description": "The Application Connections API provides operations for configuring connections to an app.\n\nOkta supports token-based and OAuth 2.0-based provisioning connections for supported apps.\nThe following available provisioning connections are supported by the indicated apps:\n\n |
|\n | OAuth 2.0 | The provisioning API connection is based on OAuth 2.0 authentication. |
|\n\n > **Note:** The Okta Org2Org (`okta_org2org`) app isn't available in Okta Integrator Free Plan orgs. If you need to test this feature in your Integrator Free Plan org, contact your Okta account team.\n",
"name": "ApplicationConnections",
"x-displayName": "Application Connections"
},
{
"description": "The Application Cross App Access Connections API provides operations to configure and manage Cross App Access connections between a requesting app and a resource app.\n\nTo establish the Cross App Access connection, both the requesting app and the resource app must support the `Connect with Okta` App Feature.\n",
"name": "ApplicationCrossAppAccessConnections",
"x-displayName": "Application Cross App Access Connections"
},
{
"description": "The Application Features API supports operations to configure app provisioning feature settings.\n\nYou must have app provisioning enabled to configure provisioning features. See [Update the default Provisioning Connection](https://developer.okta.com/docs/api/openapi/okta-management/management/applicationconnections/updatedefaultprovisioningconnectionforapplication).\n\nThe following available provisioning features are supported by the indicated apps:\n\n|
|\n| `INBOUND_PROVISIONING` | Similar to the app **Provisioning** > **To Okta** provisioning setting in the Admin Console, user profiles are imported from the third-party app into Okta. You can schedule user import and configure rules for user creation and matching. |
|\n\n> **Note:** The Okta Org2Org (`okta_org2org`) app isn't available in Okta Integrator Free Plan orgs. If you need to test this feature in your Integrator Free Plan org, contact your Okta account team.\n",
"name": "ApplicationFeatures",
"x-displayName": "Application Features"
},
{
"description": "The Application Grants API provides a set of operations to manage scope consent grants for an app.\n\nA scope consent grant represents an app's permission to include specific Okta scopes in OAuth 2.0 Bearer tokens.\nIf the app doesn't have permission to grant consent for a particular Okta scope, token requests that contain the scope are denied.\n",
"name": "ApplicationGrants",
"x-displayName": "Application Grants"
},
{
"description": "The Application Groups API provides a set of operations to manage group assignment for an app.",
"name": "ApplicationGroups",
"x-displayName": "Application Groups"
},
{
"description": "
\n> **Note:** Enhanced Disaster Recovery is a [self-service Early Access (EA)](/docs/concepts/feature-lifecycle-management/#self-service-features) feature. See [Manage Early Access and Beta features](https://help.okta.com/okta_help.htm?id=ext_secur_manage_ea_bata) to enable the feature.\n\nThe Enhanced Disaster Recovery API provides operations to perform disaster recovery for your org. It ensures service continuity during total regional infrastructure outages, allowing users to remain signed in. The self-service failover and failback processes complete in under five minutes.\n\nThe API supports the following operations:\n\n* Failover\n* Failback\n* Status of your org domains\n\nWhen you use the Enhanced Disaster Recovery APIs:\n\n* The base URL for the Disaster Recovery APIs is `https://drapp.{yourOrgSubDomain}.okta.com/`. Replace `{yourOrgSubDomain}` with your Okta org subdomain. For example, if your Okta domain is `https://example.okta.com`, use `https://drapp.example.okta.com/` as the base URL.\n\n* Disaster Recovery operations are idempotent, which means that if you attempt multiple failovers or failbacks on the same domain(s) the outcome remains the same.\n\nThe Disaster Recovery API supports the following authorization scheme:\n* Bearer - [OAuth2.0 and OpenID Connect](https://developer.okta.com/docs/concepts/oauth-openid/)\n\nSee also:\n* [Manage org recovery with Okta Enhanced Disaster Recovery](https://developer.okta.com/docs/guides/manage-orgs-okta-edr/main/)\n* [Enhanced Disaster Recovery](https://help.okta.com/okta_help.htm?type=oie&id=enhanced-disaster-recovery)",
"name": "DisasterRecovery",
"x-displayName": "Enhanced Disaster Recovery"
},
{
"description": "The Org Email Settings API provides operations to modify the email bounce list for your Okta org.",
"name": "EmailCustomization",
"x-displayName": "Org Email Settings"
},
{
"description": "The Email Domains API provides operations to manage email domains for your organization.",
"name": "EmailDomain",
"x-displayName": "Email Domains"
},
{
"description": "The Email Servers API allows you to configure a custom external email provider to send email notifications. By default, notifications such as the welcome email or an account recovery email are sent through an Okta-managed SMTP server. Adding a custom email provider gives you more control over your email delivery.\n\nWhen you configure a custom email provider with an OAuth 2.0 authentication method, review [Custom email providers with OAuth 2.0](https://developer.okta.com/docs/guides/custom-smtp/main/).",
"name": "EmailServer",
"x-displayName": "Email Servers"
},
{
"description": "The Event Hooks API provides operations to manage event hooks for your organization.\n\nFor general information on event hooks and how to create and use them, see [Event hooks](https://developer.okta.com/docs/concepts/event-hooks/). The following documentation is only for the management API, which provides a CRUD interface for registering event hooks.\n\nFor a step-by-step guide on implementing an example event hook, see the [Event hook](https://developer.okta.com/docs/guides/event-hook-implementation/) guide.\n\nWhen you create an event hook, you need to specify which events you want to subscribe to. To see the list of event types currently eligible for use in event hooks, use the [Event Types](https://developer.okta.com/docs/reference/api/event-types/#catalog) catalog and search with the parameter `event-hook-eligible`.",
"name": "EventHook",
"x-displayName": "Event Hooks"
},
{
"description": "The Okta Features API provides operations to manage self-service Early Access (EA) and Beta features in your org.\n\n> **Note:** Important background information for this API is available on the [Feature Lifecycle Management](https://developer.okta.com/docs/concepts/feature-lifecycle-management/) page.",
"name": "Feature",
"x-displayName": "Features"
},
{
"description": "The IAM Governance Bundle API provides operations for managing governance entitlement bundles, including roles and resources associated with the bundles, for the Admin Console.\nFor details on governance bundles for the Admin Console, see [Govern Okta admin roles](https://help.okta.com/okta_help.htm?type=oie&id=csh-governance-admin-roles) and [Entitlement Management](https://help.okta.com/okta_help.htm?type=oie&id=ext-entitlement-mgt).",
"name": "GovernanceBundle",
"x-displayName": "IAM Governance Bundles"
},
{
"description": "The Groups API provides operations to manage Okta groups and their user members in your org.",
"name": "Group",
"x-displayName": "Groups"
},
{
"description": "The Group Owners API provides operations to manage owners of Okta groups in your org.\n\n> **Note**: This API is only available if you're subscribed to Okta Identity Governance. Contact Okta Support for more information.",
"name": "GroupOwner",
"x-displayName": "Group Owners"
},
{
"description": "The Group Push Mappings API provides operations to manage group push mappings for your org. You must have provisioning enabled in the target app to use group push mappings. See [Manage Group Push](https://help.okta.com/okta_help.htm?type=oie&id=ext-manage-group-push).",
"name": "GroupPushMapping",
"x-displayName": "Group Push Mappings"
},
{
"description": "The Group Rules API provides operations to manage rules for Okta groups in your org.",
"name": "GroupRule",
"x-displayName": "Group Rules"
},
{
"description": "The Okta Key Management API provides a CRUD interface for JSON Web Keys (JWK) used with other parts of the application, such as inline hooks. For information on how to create inline hooks, see [inline hooks](https://developer.okta.com/docs/api/openapi/okta-management/management/tags/inlinehook/).\n\n> **Note:** Some of the curl code examples on this page include SSWS API token authentication. However, Okta recommends using scoped OAuth 2.0 and OIDC access tokens to authenticate with Okta management APIs. OAuth 2.0 and OIDC access tokens provide fine-grain control over the bearer's actions on specific endpoints. See [Okta API authentication methods](https://developer.okta.com/docs/api/openapi/okta-oauth/guides/overview/).",
"name": "HookKey",
"x-displayName": "Hook Keys"
},
{
"description": "The Identity Providers API provides operations to manage federations with external identity providers (IdPs). For example, your app can support signing in with credentials from Apple, Facebook, Google, LinkedIn, Microsoft, an enterprise IdP using SAML 2.0, or an IdP using the OpenID Connect (`OIDC`) protocol.",
"name": "IdentityProvider",
"x-displayName": "Identity Providers"
},
{
"description": "The Identity Provider Keys API provides operations to manage key credentials for identity providers (IdPs).",
"name": "IdentityProviderKeys",
"x-displayName": "Identity Provider Keys"
},
{
"description": "The Identity Provider Signing Keys API provides operations to manage signing key credentials and certificate signing requests (CSRs) for identity providers (IdPs).\n> **Note:** Okta currently uses the same key for both request signing and the decryption of SAML assertions that the IdP encrypts. Changing your signing key also changes your decryption key.",
"name": "IdentityProviderSigningKeys",
"x-displayName": "Identity Provider Signing Keys"
},
{
"description": "The Identity Provider Users API provides operations to manage identity provider (IdP) users.",
"name": "IdentityProviderUsers",
"x-displayName": "Identity Provider Users"
},
{
"description": "The Okta Identity Source API provides a mechanism to synchronize an HR source (the custom identity source) with Okta user profiles in an org. See [Build an Anything-as-a-Source custom client integration](https://developer.okta.com/docs/guides/anything-as-a-source/).",
"name": "IdentitySource",
"x-displayName": "Identity Sources"
},
{
"description": "The Inline Hooks API provides operations to manage inline hooks for your organization.\n\nFor general information on inline hooks and how to create and use them, see [inline hooks](https://developer.okta.com/docs/concepts/inline-hooks/). The following documentation is only for the management API, which provides a CRUD interface for registering inline hooks.",
"name": "InlineHook",
"x-displayName": "Inline Hooks"
},
{
"description": "Users have relationships to each other, like manager and subordinate or customer and sales representative. You can create users with relationships by using the Linked Objects API to represent the relationship.\n\n1. Create a linked object definition such as Manager:Subordinate or Case Worker:Client. These pairs are represented by a `primary` attribute and an `associated` attribute.\n2. Link users together to create the relationship between the two. You create a linked object value with a single request that links one `primary` and one `associated` user.\n\nFor each relationship:\n\n* A user has at most one `primary` link (a user has a single manager), but can have many `associated` links (a user can have many subordinates).\n* A user can be the `primary` in one relationship and the `associated` in another.\n* A user can be both the `primary` and `associated` in the same relationship.\n\nOkta Expression Language function for [linked objects](https://developer.okta.com/docs/reference/okta-expression-language/#linked-object-function) provides access to the details about a linked user.\n\n> **Note:** The linked objects feature isn't available for OpenID Connect claims.\n\n## Example usage\n\nOkta allows you to create up to 200 linked object definitions. These definitions are one-to-many, for example:\n\n* A manager has many subordinates. Each subordinate has one manager.\n* A sales representative has many customers. Each customer has one sales rep.\n* A case worker has many clients. Each client has one case worker.\n\nMost orgs have more than one manager or sales representative. You can create the linked object definition once, and then assign the `primary` relationship to as many users as you have people in that relationship.\n\nYou can assign the `associated` relationship for a single `primary` user to as many users as needed. The `associated` user can be related to only one `primary` per linked object definition. But you can assign a user to more than one linked object definition.\n\nFor example, assume that you've created one linked object definition for manager (`primary`) and for subordinates (`associated`):\n\n* Joe is Frank's manager.\n* Bob is Joe's manager, but Jane's subordinate.\n* Jane is the CEO, so she reports to herself.\n\nThus, you can create chains of relationships (Jane > Bob > Joe > Frank) or terminal relationships (Jane is both `primary` and `associated` user).\n\nThen, if you create another linked object relationship for scrum team membership, you could assign relationships to the same four users:\n\n* Bob is the scrum lead for the Identity Scrum team.\n* Joe and Frank are both contributors to the team.\n\nBob can be the `primary` for a Manager:Subordinate, an `associated` user for that same linked object definition, and also the `primary` for the Scrumlead:Contributor linked object definition.\n\nTo represent a relationship, create a linked object definition that specifies a `primary` (parent) relationship and an `associated` (child) relationship, and then add a link in which the appropriate user is assigned to each side of that link type.\n\n## Links between user types\n\nIf you created multiple user types (see [User Types](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserType/)), they all share the same linked object definitions. For example, if you have separate user types for employees and contractors, a link could designate an employee as the manager for a contractor, with the contractor being a subordinate of that employee.\n\n## Link definition operations\n\nLink definition operations allow you to manage the creation and removal of the link definitions. If you remove a link definition, links based on that definition are unavailable.\n\n> **Note:** Links reappear if you recreate the definition. However, Okta is likely to change this behavior so that links don't reappear. Don't rely on this behavior in production environments.",
"name": "LinkedObject",
"x-displayName": "Linked Objects"
},
{
"description": "The Log Streaming API provides operations to manage log stream configurations for an org. You can configure up to two log stream integrations per org.",
"name": "LogStream",
"x-displayName": "Log Streaming"
},
{
"description": "The Network Zones API provides operations to manage system default and custom zones in your Okta org.\nNetwork Zones are configurable boundaries that you can use to grant or restrict access to resources in your organization.\nThey're used for two purposes:\n* `POLICY`: Network Zones used to guide policy decisions\n* `BLOCKLIST`: Network Zones used to deny access from certain IP addresses, locations, Autonomous System Numbers (ASNs), proxy types, or IP service categories before policy evaluation\n> **Note:** The Network Zone blocklist applies to all URLs for the org.\n\nSee [Network zones](https://help.okta.com/okta_help.htm?id=ext_Security_Network) in the Okta product documentation.\n\nYour Okta org provides the following default system Network Zones that you can modify and use:\n* `LegacyIpZone`: The system default IP Network Zone\n* `BlockedIpZone`: The system default IP Blocklist Network Zone\n* `DefaultEnhancedDynamicZone`: The system default Enhanced Dynamic Network Zone\n\nYou can create and use the following custom Network Zones:\n* IP Network Zone (`IP`): Allows you to define network perimeters around a set of IPs\n* Dynamic Network Zone (`DYNAMIC`): Allows you to define network perimeters around location, IP type, or ASNs\n* Enhanced Dynamic Network Zone (`DYNAMIC_V2`): Extends the Dynamic Network Zone and allows you to include or exclude specific locations, ASNs, or IP service categories\n\n> **Note:** To create multiple Network Zones, you must have Adaptive MFA enabled in your Okta org.",
"name": "NetworkZone",
"x-displayName": "Network Zones"
},
{
"description": "Provides operations to manage public [JSON Web Key](https://datatracker.ietf.org/doc/html/rfc7517) credentials used for encrypting tokens minted by the custom authorization server.",
"name": "OAuth2ResourceServerCredentialsKeys",
"x-displayName": "Authorization Server Public Keys",
"x-okta-lifecycle": {
"isGenerallyAvailable": true,
"lifecycle": "GA"
}
},
{
"description": "The Okta Application Settings API provides operations to manage settings for Okta apps in your org.",
"name": "OktaApplicationSettings",
"x-displayName": "Okta Application Settings"
},
{
"description": "The Okta Managed User Accounts API provides operations to manage user accounts in Okta Universal Directory with Okta Privileged Access (OPA).\n\nYou can also manage Okta users with Okta Privileged Access through the Admin Console. Okta users designated with privileged access are treated as service accounts and appear in the **Service Accounts** section of the Admin Console. You can then use Okta Privileged Access to implement security measures for the user account that's designated as a service account. See [Manage service accounts](https://help.okta.com/okta_help.htm?type=oie&id=ud-privileged-acnt).\n\n> **Note:** This feature is available only if you're subscribed to Okta Privileged Access. Ensure that you've set up the Okta Privileged Access app before managing Okta user accounts through this API.",
"name": "OktaManagedUserAccount",
"x-displayName": "Okta Managed User Accounts"
},
{
"description": "The Okta Personal Settings API provides operations to manage the [Okta Personal](https://www.okta.com/products/okta-personal/workforce) settings of your Okta org.",
"name": "OktaPersonalSettings",
"x-displayName": "Okta Personal Settings"
},
{
"description": "> **Note:** You need to have the **Platform—Multi-org Deployment** product to enable the **Org Creator API** feature. Contact your Okta account team for more information.\n\nThe Org Creator API provides an operation to create Okta orgs (child orgs) based on features from your current org (the parent org). See [Org Creator](https://developer.okta.com/docs/concepts/org-creator/).",
"name": "OrgCreator",
"x-displayName": "Org Creator"
},
{
"description": "The Org Admin Settings API provides operations to manage the admin settings for your Okta org.",
"name": "OrgSettingAdmin",
"x-displayName": "Org Admin Settings"
},
{
"description": "The Org Communication Settings API provides operations to manage the communication settings for your Okta org. For example, opt users in or out of communication emails.",
"name": "OrgSettingCommunication",
"x-displayName": "Org Communication Settings"
},
{
"description": "The Org Contacts API provides operations to manage the contact types of your Okta org.",
"name": "OrgSettingContact",
"x-displayName": "Org Contacts"
},
{
"description": "The Org Customization API provides operations to retrieve and modify custom settings for your Okta org.",
"name": "OrgSettingCustomization",
"x-displayName": "Org Customization"
},
{
"description": "The Org General Settings API provides operations to manage the general settings of your Okta org.",
"name": "OrgSettingGeneral",
"x-displayName": "Org General Settings"
},
{
"description": "The Org Metadata API provides operation to fetch metadata for your Okta org.",
"name": "OrgSettingMetadata",
"x-displayName": "Org Metadata"
},
{
"description": "The Org Support Settings API provides operations to manage the support settings for your Okta org.",
"name": "OrgSettingSupport",
"x-displayName": "Org Support Settings"
},
{
"description": "The Okta Policy API enables an administrator to perform policy and policy rule operations. The policy framework is used by Okta to control rules and settings that govern many things:\n- user session lifetime\n- whether multi-factor authentication is required when signing in\n- what MFA factors may be employed\n- password complexity requirements\n- what types of self-service operations are permitted under various circumstances\n- which identity provider to route users to\n\nPolicy settings for a particular policy type, such as `OKTA_SIGN_ON` policy, consist of one or more policy objects, each of which contains one or more policy rules. Policies and rules contain conditions that determine whether they are applicable to a particular user at a particular time.\n\nSee:\n* [Authenticator enrollment policies](https://developer.okta.com/docs/concepts/policies/#authenticator-enrollment-policies): `MFA_ENROLL`\n* [App sign-in policies](https://developer.okta.com/docs/concepts/policies/#app-sign-in-policies): `ACCESS_POLICY`\n* [Client update policies](https://developer.okta.com/docs/concepts/policies/#client-update-policies): `CLIENT_UPDATE`\n*
\n\n### User creation scenarios\n\n The following table describes the user experience and expectation of user status and welcome screen, depending on which options (security question and answer, password, and activate query) are defined during user creation.\n\n **User creation details and outcomes**\n\n | Security Q & A | Password | Activate Query Parameter | User Status | Login Credential | Welcome Screen |\n | ----- | -------- | ------------------------ | ------------- | ---------------------- | -------------- |\n | | | FALSE | `STAGED` | | |\n | | | TRUE | `PROVISIONED` or `ACTIVE` | One-Time Token (Email) or Email | X |\n | X | | FALSE | `STAGED` | | |\n | X | | TRUE | `PROVISIONED` or `ACTIVE` | One-Time Token (Email) or Email | X |\n | | X | FALSE | `STAGED` | | |\n | | X | TRUE | `ACTIVE` | Password | X |\n | X | X | FALSE | `STAGED` | | |\n | X | X | TRUE | `ACTIVE` | Password | |\n\nCreating users with a `FEDERATION` or `SOCIAL` provider sets the user status to either `ACTIVE` or `STAGED` based on the `activate` query parameter since these two providers don't support a `password` or `recovery_question` credential.\n\nMore information about the use cases are in the following sections and in the examples for [Create a user](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/User/#tag/User/operation/createUser).\n\n#### Create user with optional password\n\nWhen making the password optional, the user status following user creation can be affected by the enrollment policy. See [Create an authenticator enrollment policy](https://help.okta.com/okta_help.htm?type=oie&id=ext-create-mfa-policy).\n\nBased on the group memberships that are specified when the user is created, a password may or may not be required to make the user's status `ACTIVE`. The groups assigned to the user determines the enrollment policy applied to the user. If the enrollment policy has the password authenticator set to `required`, then the user's status is determined by if the user is created with a password:\n\n* Created with a password - the user status is set to `PROVISIONED` and a One-Time Token is sent to the user through email\n* Created without a password - the user status is set to `ACTIVE` and they can immediately sign in using their password authenticator\n\nIf the user doesn't have an enrolled authenticator, Okta sets the user to `PROVISIONED` and sends an activation link. The user must click the activation link before they can sign in. The activation link provides a baseline assurance that can be used to enroll in other authenticators. If the user has one or more enrolled authenticators at activation time, they're set to `ACTIVE` and can sign in directly.\n\nSee [Passwordless authentication](https://help.okta.com/okta_help.htm?type=oie&id=ext-passwordless-auth) in the help documentation.\n\n#### Create user without credentials\n\nCreates a user without a `password` or a recovery `question` and `answer`.\n\nIf appropriate, when the user is activated, an email is sent to the user with an activation token that the user can use to complete the activation process.\n\nThis is the default flow for new user registration using the Admin Console.\n\n#### Create user with recovery question\n\nCreates a user without a `password`.\n\nWhen the user is activated, an email is sent to the user with an activation token that can be used to complete the activation process.\nThis flow is useful if migrating users from an existing user store.\n\n#### Create user with password\n\nCreates a user without a recovery `question` and `answer`.\n\nThe new user is able to sign in after activation with the assigned password. This flow is common when developing a custom user registration experience.\n> **Important:** Don't generate or send a one-time activation token when activating users with an assigned password. Users should sign in with their assigned password.\n\n> **Note:** You can also use this scenario to create a user without sending an activation email. See this [Knowledge Base article](https://support.okta.com/help/s/article/How-to-Avoid-Sending-a-Welcome-Email?language=en_US#:~:text=For%20users%20imported%20from%20the,t%20send%20new%20user%20activation).\n\n#### Create user with imported hashed password\n\nCreates a user with a specified hashed password.\n\nThe new user is able to sign in after activation with the specified password.\n\nThis flow is common when migrating users from another data store in cases where we want to allow the users to retain their current passwords.\n> **Important:** Do not generate or send a one-time activation token when activating users with an imported password. Users should login with their imported password.\n\n#### Create user with password import inline hook\n\nCreates a user with a `Password Hook` object specifying that a password inline hook should be used to handle password verification.\n\nThe password inline hook is triggered to handle verification of the end user's password the first time the user tries to sign in, with Okta calling the password inline hook to check that the password the user supplied is valid. If the password is valid, Okta stores the hash of the password that was provided and can authenticate the user independently from then on. See [Create a password import inline hook](https://developer.okta.com/docs/api/openapi/okta-management/management/tags/inlinehook/#tag/InlineHook/operation/createPasswordImportInlineHook) for more details.\n\nThe new user is able to sign in after activation with the valid password. This flow supports migrating users from another data store in cases where we wish to allow the users to retain their current passwords.\n> **Important:** Don't generate or send a one-time activation token when activating users with an password inline hook. Users should sign in with their existing password to be imported using the password import inline hook.\n\n#### Create user with password and recovery question\n\nCreates a new user with a password and recovery `question` and `answer`.\n\nThe new user is able to log in with the assigned password after activation. This flow is common when developing a custom user-registration experience.\n> **Important:** Don't generate or send a one-time activation token when activating users with an assigned password. Users should login with their assigned password.\n\n#### Create user with authentication provider\n\nCreates a new passwordless user with a `SOCIAL` or `FEDERATION` authentication provider that must be authenticated through a trusted identity provider.\n\n#### Create user in group\n\nCreates a user that is added to the specified groups upon creation.\n\nUse this in conjunction with other create operations for a group admin that's scoped to create users only in specified groups. The request can specify up to 20 group IDs. (This limit applies only when creating a user. You can add the user later to more groups.)\n\n#### Create user with non-default user type\n\nCreates a user with a specified user type. You can include the type specification with any of the above Create user operations. This example demonstrates creating a user without credentials.\nThe user type determines which [Schema](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/Schema/) applies to that user. After you create a user, you can assign the user a different user type using the full replacement [PUT operation](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserType/#tag/UserType/operation/replaceUserType).\n\n### Links object\n\nThe links object specifies link relations. See [`_links`](https://developer.okta.com/docs/api/openapi/okta-management/management/user/listusers!c=200&path=_links&t=response).\n\n> **Note:** This links object is different from [linked objects](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/LinkedObject/).\n\n#### Individual users versus collection of users\n\nFor an individual user result, the links object contains a full set of link relations available for that user as determined by your policies. For a collection of users, the links object contains only the `self` link. Operations that return a collection of users include [List all users](https://developer.okta.com/docs/api/openapi/okta-management/management/user/listusers) and [List all member users](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/Group/#tag/Group/operation/listGroupUsers).\n\nThe following table shows some links that may be available on a user, as determined by your policies:\n\n| Link Relation Type | Description |\n|------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n|self\t | A self-referential link to this user |\n|activate\t | Lifecycle action to [activate the user](https://developer.okta.com/docs/api/openapi/okta-management/management/userlifecycle/activateuser) |\n|deactivate |\tLifecycle action to [deactivate the user](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserLifecycle/#tag/UserLifecycle/operation/deactivateUser) |\n|suspend |\tLifecycle action to [suspend the user](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserLifecycle/#tag/UserLifecycle/operation/suspendUser) |\n|unsuspend |\tLifecycle action to [unsuspend the user](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserLifecycle/#tag/UserLifecycle/operation/unsuspendUser) |\n|resetPassword |\tLifecycle action to [trigger a password reset](https://developer.okta.com/docs/api/openapi/okta-management/management/usercred/resetpassword) |\n|expirePassword |\tLifecycle action to [expire the user's password](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserCred/#tag/UserCred/operation/expirePassword) |\n|resetFactors |\tLifecycle action to [reset all MFA factors](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserLifecycle/#tag/UserLifecycle/operation/resetFactors) |\n|unlock |\tLifecycle action to [unlock a locked-out user](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserLifecycle/#tag/UserLifecycle/operation/unlockUser) |\n|forgotPassword |\t[Resets a user's password](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserCred/#tag/UserCred/operation/forgotPassword) by validating the user's recovery credential. |\n|changePassword |\t[Changes a user's password](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserCred/#tag/UserCred/operation/changePassword) validating the user's current password |\n|changeRecoveryQuestion |\t[Changes a user's recovery credential](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserCred/#tag/UserCred/operation/changeRecoveryQuestion) by validating the user's current password |",
"name": "User",
"x-displayName": "Users"
},
{
"description": "The Authenticator Enrollments API provides operations for admins to manage the authenticator enrollments of their users.\n\nAn authenticator enrollment is the specific instance of an authenticator that a user has enrolled. For example, if a user enrolls an `sms` method with a phone number, they can use both `sms` and `voice` methods. The Authenticator Enrollments API allows admins to manage both of those user enrollments.",
"name": "UserAuthenticatorEnrollments",
"x-displayName": "User Authenticator Enrollments"
},
{
"description": "The User Classification API provides operations to manage user classifications in your org.",
"name": "UserClassification",
"x-displayName": "User Classification"
},
{
"description": "The User Credentials API provides operations to manage user credentials in your org.",
"name": "UserCred",
"x-displayName": "User Credentials"
},
{
"description": "The Factors API provides operations to enroll, manage, and verify factors for multifactor authentication (MFA). Generally, authentication involves verifying a different one-time passcode (OTP). Manage both administration and end-user accounts, or verify an individual factor at any time.\nOkta supports several different types of factors:\n\n| Factor Type | Description |\n|-----------------------|-------------|\n| `call` | Software OTP sent using a voice call to a registered phone number |\n| `sms` | Software OTP sent using SMS to a registered phone number |\n| `email` | Software OTP sent using email |\n| `question` | Additional knowledge-based security question |\n| `push` | Out-of-band verification using a push notification to a device and transaction verification with digital signature |\n| `token` | Software or hardware OTP sent to a device |\n| `token:hardware` | Hardware OTP sent to a device |\n| `token:hotp` | Custom [TOTP](https://www.ietf.org/rfc/rfc6238.txt) factor that uses an extension of the [HMAC (Hash-Based Message Authentication Codes)](https://www.okta.com/identity-101/hmac/)-based one-time passcode (HOTP) algorithm |\n| `token:software:totp` | Software time-based one-time passcode (TOTP) |\n| `u2f` | Hardware Universal 2nd Factor (U2F) device |\n| `web` | HTML inline frame (iframe) for embedding verification from a third party |\n| `webauthn` | Hardware WebAuthn device |\n| `signed_nonce` | Okta Fastpass (device-bound authentication). This is available for OIE orgs if the org has users that have enrolled with Okta Verify after the org started using OIE. The `signed_nonce` factor type can only be retrieved using GET operations or deleted using the [DELETE](https://developer.okta.com/docs/api/openapi/okta-management/management/userfactor/unenrollfactor) operation. It cannot be enrolled, activated, or verified through other HTTP methods with the Factors API. |\n\n> **Note:** As of the `2026.04.0` release, the FIDO2 (WebAuthn) authenticator is now called Passkey (FIDO2 WebAuthn), and there are new settings and updates to the authenticator page layout. There have been no changes to any existing parameter names, values, or endpoint paths. For example, the `factorType` for the Passkey (FIDO2 WebAuthn) authenticator is still `webauthn`.\n>\n> See [Passkeys and WebAuthn](/docs/guides/authenticators-web-authn/aspnet/main/#passkeys-and-webauthn).",
"name": "UserFactor",
"x-displayName": "User Factors"
},
{
"description": "The User Grants API provides operations to manage user consent grants in your org.\n\nA consent represents a user's explicit permission to allow an app to access resources protected by scopes. Consent grants are different from tokens because a consent can outlast a token. Also, there can be multiple tokens with varying sets of scopes derived from a single consent. When an app comes back and needs to get a new access token, it may not need to prompt the user for consent. This happens if they've already consented to the specified scopes. Consent grants remain valid until the user manually revokes them, or until the user, app, authorization server, or scope is deactivated or deleted.\n\n> **Hint:** For all grant operations, you can use `me` instead of the `userId` in an endpoint that contains `/users`, in an active session with no SSWS token (API token). For example: `https://${yourOktaDomain}/api/v1/users/me/grants` returns all the grants for the active session user.\n\n> **Note:** Some browsers have begun blocking third-party cookies by default, disrupting Okta functionality in certain flows. For more information, see [FAQ: How Blocking Third Party Cookies Can Potentially Impact Your Okta Environment](https://support.okta.com/help/s/article/FAQ-How-Blocking-Third-Party-Cookies-Can-Potentially-Impact-Your-Okta-Environment).",
"name": "UserGrant",
"x-displayName": "User Grants"
},
{
"description": "The User Lifecycle API provides lifecycle operations, which are non-idempotent operations that initiate a state transition for a user's status. Some operations are asynchronous while others are synchronous.\nThe user's current status limits what operations are allowed.",
"name": "UserLifecycle",
"x-displayName": "User Lifecycle"
},
{
"description": "The User Linked Objects API provides operations to manage user linked objects in your org.\nUse link value operations to assign users to a relationship, represented by a pair of `primary` and `associated` links. See also the [Linked Objects API](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/LinkedObject/).\n\nFor these operations, the examples use consistent IDs so that you can follow the operations more easily:\n* `manager` is the `primary` relationship and is assigned `00u5t60iloOHN9pBi0h7`\n* `subordinate` is the `associated` relationship and is assigned to IDs `00u5zex6ztMbOZhF50h7` and `00u1tsf0nQKavLDUh0g5`",
"name": "UserLinkedObject",
"x-displayName": "User Linked Objects"
},
{
"description": "The User OAuth 2.0 Token Management API provides operations to manage tokens issued by an authorization server for a particular user and client in your org. For example, you can revoke every active refresh token for a user in the context of a specific client. You can also [revoke specific tokens](https://developer.okta.com/docs/guides/revoke-tokens/main/) or [manage tokens at the authorization server level](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/AuthorizationServer/).\n\nRead [Validate Access Tokens](https://developer.okta.com/docs/guides/validate-access-tokens/) to understand more about how OAuth 2.0 tokens work.",
"name": "UserOAuth",
"x-displayName": "User OAuth 2.0 Token Management"
},
{
"description": "The User Resources API provides operations related to user resources.",
"name": "UserResources",
"x-displayName": "User Resources"
},
{
"description": "