Action

Description

Required scopes

List Applications

Lists all applications in your Okta org with pagination, filtering, and search

Get Application

Retrieves a specific application by ID from your Okta org. Use list\_applications to obtain the appId.

List Application Groups

Lists all group assignments for an application. Use list\_applications to obtain the appId.

Get Application Group

Retrieves a specific group assignment for an application. Use list\_applications and list\_application\_groups to obtain re...

List Application Users

Lists all users assigned to an application. Use list\_applications to obtain the appId.

Get Application User

Retrieves a specific user assigned to an application. Use list\_applications and list\_application\_users to obtain require...

Assign User To Application

Assigns a user to an application directly

Unassign User From Application

Removes a user's assignment to an application

Assign Group To Application

Assigns a group to an application, granting access to its members

Unassign Group From Application

Removes a group's assignment to an application

Activate Application

Activates an inactive application

Deactivate Application

Deactivates an active application and reconciles its group assignments

List Device Assurance Policies

Lists all device assurance policies in the org

Get Device Assurance Policy

Retrieves a single device assurance policy by ID

List Authenticators

Lists the authenticators configured in your org. Okta Identity Engine orgs only.

List Authenticator Methods

Lists the methods of an authenticator, such as sms and voice for phone. Okta Identity Engine orgs only. Use list\_authent...

List Devices

Lists all devices with pagination support and flexible search options

Get Device

Retrieves a device by its ID

Delete Device

Permanently deletes a device. Device must be in DEACTIVATED status first.

Activate Device

Activates a device by setting its status to ACTIVE

Deactivate Device

Deactivates a device by setting its status to DEACTIVATED

Suspend Device

Suspends a device temporarily without deactivating it

Unsuspend Device

Returns a suspended device to the active state

Get User Factor

Retrieves a single enrolled MFA factor for a user

List Supported Factors

Lists all MFA factors a user is eligible to enrol

List Access Certification Campaigns

Lists access certification campaigns in the org

Get Access Certification Campaign

Retrieves a single access certification campaign by ID

Launch Access Certification Campaign

Launches a scheduled campaign and assigns reviews to reviewers

List Access Requests

Lists access requests raised by users in the org

Get Access Request

Retrieves a single access request by ID

Create Access Request

Raises an access request for a resource on behalf of a user

Cancel Access Request

Cancels an open access request via the provider's Update a request operation

List Access Request Types

Lists the access request types defined in the org

Get Access Request Type

Retrieves a single access request type by ID

Publish Access Request Type

Publishes a request type, making it available to end users

Unpublish Access Request Type

Unpublishes a request type, returning it to draft

List Access Certification Reviews

Lists access certification reviews, optionally scoped to one campaign

Get Access Certification Review

Retrieves a single access certification review by ID

Reassign Access Certification Reviews

Reassigns a batch of reviews to a different reviewer

List Groups

Lists all groups with pagination support

Get Group

Retrieves a specific group by ID from your org. Use list\_groups to obtain the groupId.

List Group Rules

Lists the group rules in your org with pagination support

Get Group Rule

Retrieves a specific group rule by ID. Use list\_group\_rules to obtain the groupRuleId.

Create Group

Adds a new group with OKTA\_GROUP type to your org

Update Group

Replaces the profile for a group of OKTA\_GROUP type

Delete Group

Deletes a group of OKTA\_GROUP or APP\_GROUP type from your org

List Group Members

Lists all users that are a member of a group. Use list\_groups to obtain the groupId.

Add User To Group

Assigns a user to a group with OKTA\_GROUP type. Use list\_groups and list\_users to obtain required IDs.

Remove User From Group

Unassigns a user from a group with OKTA\_GROUP type. Use list\_groups and list\_group\_members to obtain required IDs.

Activate Group Rule

Activates a group rule so it begins assigning members

Deactivate Group Rule

Deactivates a group rule so it stops assigning members

List Group Assigned Applications

Lists the applications assigned to a group

List Group Owners

Lists the owners of a group

List Policies

Lists all policies of a given type

Get Policy

Retrieves a specific policy by ID. Use list\_policies to obtain the policyId.

Create Policy

Creates a new policy of the specified type. The returned policy ID can be used with get\_policy, replace\_policy, delete\_p...

Replace Policy

Replaces a policy with the provided data. Use list\_policies or create\_policy to obtain the policyId.

Delete Policy

Deletes a policy by ID

Activate Policy

Activates a policy by setting its status to ACTIVE

Deactivate Policy

Deactivates a policy by setting its status to INACTIVE

Clone An Existing Policy

Clones an existing ACCESS\_POLICY to create a copy

Create A Policy Simulation

Simulates a policy evaluation to test access outcomes

List All Apps Mapped To A Policy

Lists all applications mapped to an ACCESS\_POLICY. Use list\_policies with type ACCESS\_POLICY to obtain the policyId.

List All Resources Mapped To A Policy

Lists all resources mapped to a policy. Use list\_policies to obtain the policyId.

Retrieve A Policy Resource Mapping

Retrieves a specific policy resource mapping. Use list\_policy\_mappings to obtain the mappingId.

List All Policy Rules

Lists all rules for a specific policy. Use list\_policies to obtain the policyId first.

Retrieve A Policy Rule

Retrieves a specific rule for a policy

Create Policy Rule

Creates a new rule for a policy. Use list\_policies to obtain the policyId. The created rule ID is returned in the respon...

Replace Policy Rule

Replaces a policy rule with the provided data. Use list\_policy\_rules to obtain the ruleId.

Delete Policy Rule

Deletes a policy rule. Use list\_policy\_rules to obtain the ruleId.

Activate Policy Rule

Activates a policy rule. Use list\_policy\_rules to obtain the ruleId.

Deactivate Policy Rule

Deactivates a policy rule. Use list\_policy\_rules to obtain the ruleId.

List Realms

Lists all Realms with pagination support

Get Realm

Retrieves a Realm by its ID

Create Realm

Creates a new Realm

Update Realm

Replaces the realm profile by its ID

Delete Realm

Deletes a Realm by its ID

List User Assigned Roles

Lists all administrator roles assigned to a user

List Custom Roles

Lists the custom admin roles in your org, plus IAM-based standard roles such as WORKFLOWS\_ADMIN.

List Users With Role Assignments

Lists every user in the org that holds an administrator role

List API Tokens

Lists the metadata of the active API tokens in your org

List Event Hooks

Lists the event hooks configured in your org

List Identity Providers

Lists the identity provider (IdP) integrations in your org with pagination support

List Network Zones

Lists the network zones in your org with pagination support

List Trusted Origins

Lists the trusted origins in your org with pagination support

Get User Info

Retrieves information about the currently authenticated user from the OAuth 2.0 UserInfo endpoint.

List System Log Events

Lists events from the Okta System Log with filtering, keyword search, and pagination

List Users

Lists all users in your org with pagination and flexible query options

Get User

Retrieves a user from your Okta org by ID, login, or shortname. Use list\_users to find the user ID, or pass the user's l...

Create User

Creates a new user in your Okta org with or without credentials

Update User

Updates a user's profile or credentials with partial update semantics. Use list\_users or get\_user to obtain the user ID.

Replace User

Replaces a user's profile, credentials, or both using strict-update semantics. Use get\_user first to fetch the current p...

List User Blocks

Lists information about how a user is blocked from accessing their account. Use list\_users to obtain the user ID.

List User Factors

Lists the MFA factors a user has enrolled. Use list\_users to obtain the user ID.

List User Authenticator Enrollments

Lists all authenticators a user has enrolled. Okta Identity Engine orgs only. Use list\_users to obtain the user ID.

List User Groups

Lists the groups a user belongs to. Use list\_users to obtain the user ID.

List User Roles

Lists the admin roles assigned to a user, including standard and custom roles. Use list\_users to obtain the user ID.

Delete User

Permanently deletes a user from your Okta organization. Use list\_users to obtain the user ID. Requires two calls — first...

Suspend User

Suspends an active user, blocking sign-in without removing access

Unsuspend User

Returns a suspended user to the active state

Deactivate User

Deactivates a user and deprovisions them from all assigned apps

Activate User

Activates a staged or deprovisioned user

Reactivate User

Restarts the activation workflow for a provisioned or recovering user

Unlock User

Unlocks a locked-out user so they can sign in again

Reset User Password

Starts a password reset and moves the user into recovery

Expire User Password

Expires a user password, forcing a change at next sign-in

Revoke User Sessions

Revokes a user's active sessions, forcing re-authentication

List User App Links

Lists the apps a user can reach, directly or through a group

List User Devices

Lists the devices enrolled by a specific user

List User Types

Lists all user types in your Okta organization

Get User Type

Retrieves a user type by ID

Create User Type

Creates a new user type in your Okta organization

Update User Type

Partially updates an existing user type

Replace User Type

Fully replaces an existing user type

Delete User Type

Permanently deletes a user type