Query structured spec data via REST or MCP. Get exactly what your agent needs.
https://your-subdomain.okta.com
/api/v1/apps/{appId}
Updates an application in your organization.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| appId | path | required | string | — |
application/json
Application
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| label | string | optional |
| _links | object | optional |
| status | string | optional |
| created | string | optional |
| profile | object | optional |
| features | array | optional |
| settings | object | optional |
| └ app | object | optional |
| └ url | string | optional |
| └ acsUrl | string | optional |
| └ orgName | string | optional |
| └ buttonField | string | optional |
| └ loginUrlRegex | string | optional |
| └ passwordField | string | optional |
| └ usernameField | string | optional |
| └ notes | object | optional |
| └ admin | string | optional |
| └ enduser | string | optional |
| └ inlineHookId | string | optional |
| └ notifications | object | optional |
| └ vpn | object | optional |
| └ helpUrl | string | optional |
| └ message | string | optional |
| └ network | object | optional |
| └ implicitAssignment | boolean | optional |
| _embedded | object | optional |
| licensing | object | optional |
| └ seatCount | integer | optional |
| signOnMode | string | optional |
| visibility | object | optional |
| └ hide | object | optional |
| └ iOS | boolean | optional |
| └ web | boolean | optional |
| └ appLinks | object | optional |
| └ autoLaunch | boolean | optional |
| └ autoSubmitToolbar | boolean | optional |
| credentials | object | optional |
| └ signing | object | optional |
| └ kid | string | optional |
| └ use | string | optional |
| └ lastRotated | string | optional |
| └ nextRotation | string | optional |
| └ rotationMode | string | optional |
| └ userNameTemplate | object | optional |
| └ type | string | optional |
| └ suffix | string | optional |
| └ template | string | optional |
| └ pushStatus | string | optional |
| lastUpdated | string | optional |
| accessibility | object | optional |
| └ selfService | boolean | optional |
| └ errorRedirectUrl | string | optional |
| └ loginRedirectUrl | string | optional |
Success
PUT /api/v1/apps/{appId}
/api/v1/apps/{appId}/features/{name}
Updates a Feature object for an application.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| appId | path | required | string | — |
| name | path | required | string | — |
application/json
CapabilitiesObject
| Property | Type | Required |
|---|---|---|
| create | object | optional |
| └ lifecycleCreate | object | optional |
| └ status | string | optional |
| update | object | optional |
| └ profile | object | optional |
| └ status | string | optional |
| └ password | object | optional |
| └ seed | string | optional |
| └ change | string | optional |
| └ status | string | optional |
| └ lifecycleDeactivate | object | optional |
| └ status | string | optional |
Success
Not Found
PUT /api/v1/apps/{appId}/features/{name}
/api/v1/apps/{appId}/groups/{groupId}
Assigns a group to an application
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| appId | path | required | string | — |
| groupId | path | required | string | — |
application/json
ApplicationGroupAssignment
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| _links | object | optional |
| profile | object | optional |
| priority | integer | optional |
| _embedded | object | optional |
| lastUpdated | string | optional |
Success
PUT /api/v1/apps/{appId}/groups/{groupId}
/api/v1/apps/{appId}/policies/{policyId}
Assign an application to a specific policy. This unassigns the application from its currently assigned policy.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| appId | path | required | string | — |
| policyId | path | required | string | — |
No Content
PUT /api/v1/apps/{appId}/policies/{policyId}
/api/v1/authenticators/{authenticatorId}
Updates an authenticator
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| authenticatorId | path | required | string | — |
application/json
Authenticator
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| key | string | optional |
| name | string | optional |
| type | string | optional |
| _links | object | optional |
| status | string | optional |
| created | string | optional |
| provider | object | optional |
| └ type | string | optional |
| └ configuration | object | optional |
| └ host | string | optional |
| └ authPort | integer | optional |
| └ hostName | string | optional |
| └ secretKey | string | optional |
| └ instanceId | string | optional |
| └ sharedSecret | string | optional |
| └ integrationKey | string | optional |
| └ userNameTemplate | object | optional |
| └ template | string | optional |
| settings | object | optional |
| └ allowedFor | string | optional |
| └ compliance | object | optional |
| └ fips | string | optional |
| └ appInstanceId | string | optional |
| └ channelBinding | object | optional |
| └ style | string | optional |
| └ required | string | optional |
| └ userVerification | string | optional |
| └ tokenLifetimeInMinutes | integer | optional |
| lastUpdated | string | optional |
Success
PUT /api/v1/authenticators/{authenticatorId}
/api/v1/authorizationServers/{authServerId}
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| authServerId | path | required | string | — |
application/json
AuthorizationServer
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| _links | object | optional |
| issuer | string | optional |
| status | string | optional |
| created | string | optional |
| default | boolean | optional |
| audiences | array | optional |
| issuerMode | string | optional |
| credentials | object | optional |
| └ signing | object | optional |
| └ kid | string | optional |
| └ use | string | optional |
| └ lastRotated | string | optional |
| └ nextRotation | string | optional |
| └ rotationMode | string | optional |
| description | string | optional |
| lastUpdated | string | optional |
Success
PUT /api/v1/authorizationServers/{authServerId}
/api/v1/authorizationServers/{authServerId}/claims/{claimId}
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| authServerId | path | required | string | — |
| claimId | path | required | string | — |
application/json
OAuth2Claim
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| value | string | optional |
| _links | object | optional |
| status | string | optional |
| system | boolean | optional |
| claimType | string | optional |
| valueType | string | optional |
| conditions | object | optional |
| └ scopes | array | optional |
| group_filter_type | string | optional |
| alwaysIncludeInToken | boolean | optional |
Success
PUT /api/v1/authorizationServers/{authServerId}/claims/{claimId}
/api/v1/authorizationServers/{authServerId}/policies/{policyId}
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| authServerId | path | required | string | — |
| policyId | path | required | string | — |
application/json
AuthorizationServerPolicy
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| type | string | optional |
| _links | object | optional |
| status | string | optional |
| system | boolean | optional |
| created | string | optional |
| priority | integer | optional |
| _embedded | object | optional |
| conditions | object | optional |
| └ app | object | optional |
| └ exclude | array | optional |
| └ id | string | optional |
| └ name | string | optional |
| └ type | string | optional |
| └ include | array | optional |
| └ id | string | optional |
| └ name | string | optional |
| └ type | string | optional |
| └ apps | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ risk | object | optional |
| └ behaviors | array | optional |
| └ users | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ inactivity | object | optional |
| └ unit | string | optional |
| └ number | integer | optional |
| └ passwordExpiration | object | optional |
| └ unit | string | optional |
| └ number | integer | optional |
| └ lifecycleExpiration | object | optional |
| └ unit | string | optional |
| └ number | integer | optional |
| └ lifecycleStatus | string | optional |
| └ userLifecycleAttribute | object | optional |
| └ attributeName | string | optional |
| └ matchingValue | string | optional |
| └ device | object | optional |
| └ rooted | boolean | optional |
| └ migrated | boolean | optional |
| └ platform | object | optional |
| └ types | array | optional |
| └ supportedMDMFrameworks | array | optional |
| └ trustLevel | string | optional |
| └ groups | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ people | object | optional |
| └ users | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ groups | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ scopes | object | optional |
| └ include | array | optional |
| └ clients | object | optional |
| └ include | array | optional |
| └ context | object | optional |
| └ expression | string | optional |
| └ network | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ connection | string | optional |
| └ platform | object | optional |
| └ exclude | array | optional |
| └ os | object | optional |
| └ type | string | optional |
| └ include | array | optional |
| └ os | object | optional |
| └ type | string | optional |
| └ riskScore | object | optional |
| └ level | string | optional |
| └ grantTypes | object | optional |
| └ include | array | optional |
| └ userStatus | object | optional |
| └ value | string | optional |
| └ authContext | object | optional |
| └ authType | string | optional |
| └ authProvider | object | optional |
| └ include | array | optional |
| └ provider | string | optional |
| └ mdmEnrollment | object | optional |
| └ enrollment | string | optional |
| └ blockNonSafeAndroid | boolean | optional |
| └ userIdentifier | object | optional |
| └ type | string | optional |
| └ patterns | array | optional |
| └ value | string | optional |
| └ matchType | string | optional |
| └ attribute | string | optional |
| └ identityProvider | object | optional |
| └ idpIds | array | optional |
| └ provider | string | optional |
| └ …1 more | object | optional |
| description | string | optional |
| lastUpdated | string | optional |
Success
PUT /api/v1/authorizationServers/{authServerId}/policies/{policyId}
/api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}
Updates the configuration of the Policy Rule defined in the specified Custom Authorization Server and Policy.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| authServerId | path | required | string | — |
| policyId | path | required | string | — |
| ruleId | path | required | string | — |
application/json
AuthorizationServerPolicyRule
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| type | string | optional |
| status | string | optional |
| system | boolean | optional |
| actions | object | optional |
| └ token | object | optional |
| └ inlineHook | object | optional |
| └ id | string | optional |
| └ refreshTokenWindowMinutes | integer | optional |
| └ accessTokenLifetimeMinutes | integer | optional |
| └ refreshTokenLifetimeMinutes | integer | optional |
| created | string | optional |
| priority | integer | optional |
| conditions | object | optional |
| └ people | object | optional |
| └ users | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ groups | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ scopes | object | optional |
| └ include | array | optional |
| └ clients | object | optional |
| └ include | array | optional |
| └ grantTypes | object | optional |
| └ include | array | optional |
| lastUpdated | string | optional |
Success
PUT /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}
/api/v1/authorizationServers/{authServerId}/scopes/{scopeId}
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| authServerId | path | required | string | — |
| scopeId | path | required | string | — |
application/json
OAuth2Scope
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| system | boolean | optional |
| consent | string | optional |
| default | boolean | optional |
| description | string | optional |
| displayName | string | optional |
| metadataPublish | string | optional |
Success
PUT /api/v1/authorizationServers/{authServerId}/scopes/{scopeId}
/api/v1/brands/{brandId}
Updates a brand by brandId
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| brandId | path | required | string | — |
application/json
Brand
Success
Bad Request
PUT /api/v1/brands/{brandId}
/api/v1/brands/{brandId}/templates/email/{templateName}/customizations/{customizationId}
Update an email customization
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| brandId | path | required | string | — |
| templateName | path | required | string | — |
| customizationId | path | required | string | — |
application/json
EmailTemplateCustomizationRequest
Success
Conflict
PUT /api/v1/brands/{brandId}/templates/email/{templateName}/customizations/{customizationId}
/api/v1/brands/{brandId}/themes/{themeId}
Updates a theme for a brand
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| brandId | path | required | string | — |
| themeId | path | required | string | — |
application/json
Theme
Success
Bad Request
Not Found
PUT /api/v1/brands/{brandId}/themes/{themeId}
/api/v1/domains/{domainId}/certificate
Creates the Certificate for the Domain.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| domainId | path | required | string | — |
application/json
DomainCertificate
No Content
PUT /api/v1/domains/{domainId}/certificate
/api/v1/eventHooks/{eventHookId}
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| eventHookId | path | required | string | — |
application/json
EventHook
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| _links | object | optional |
| events | object | optional |
| └ type | string | optional |
| └ items | array | optional |
| status | string | optional |
| channel | object | optional |
| └ type | string | optional |
| └ config | object | optional |
| └ uri | string | optional |
| └ headers | array | optional |
| └ key | string | optional |
| └ value | string | optional |
| └ authScheme | object | optional |
| └ key | string | optional |
| └ type | string | optional |
| └ value | string | optional |
| └ version | string | optional |
| created | string | optional |
| createdBy | string | optional |
| lastUpdated | string | optional |
| verificationStatus | string | optional |
Success
PUT /api/v1/eventHooks/{eventHookId}
/api/v1/groups/rules/{ruleId}
Updates a group rule. Only INACTIVE rules can be updated.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| ruleId | path | required | string | — |
application/json
GroupRule
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| type | string | optional |
| status | string | optional |
| actions | object | optional |
| └ assignUserToGroups | object | optional |
| └ groupIds | array | optional |
| created | string | optional |
| conditions | object | optional |
| └ people | object | optional |
| └ users | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ groups | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ expression | object | optional |
| └ type | string | optional |
| └ value | string | optional |
| lastUpdated | string | optional |
Success
PUT /api/v1/groups/rules/{ruleId}
/api/v1/groups/{groupId}
Updates the profile for a group with OKTA_GROUP type from your organization.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| groupId | path | required | string | — |
application/json
Group
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| type | string | optional |
| _links | object | optional |
| created | string | optional |
| profile | object | optional |
| └ name | string | optional |
| └ description | string | optional |
| _embedded | object | optional |
| lastUpdated | string | optional |
| objectClass | array | optional |
| lastMembershipUpdated | string | optional |
Success
PUT /api/v1/groups/{groupId}
/api/v1/groups/{groupId}/roles/{roleId}/targets/catalog/apps/{appName}
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| groupId | path | required | string | — |
| roleId | path | required | string | — |
| appName | path | required | string | — |
Success
PUT /api/v1/groups/{groupId}/roles/{roleId}/targets/catalog/apps/{appName}
/api/v1/groups/{groupId}/roles/{roleId}/targets/catalog/apps/{appName}/{applicationId}
Add App Instance Target to App Administrator Role given to a Group
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| groupId | path | required | string | — |
| roleId | path | required | string | — |
| appName | path | required | string | — |
| applicationId | path | required | string | — |
No Content
PUT /api/v1/groups/{groupId}/roles/{roleId}/targets/catalog/apps/{appName}/{applicationId}
/api/v1/groups/{groupId}/roles/{roleId}/targets/groups/{targetGroupId}
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| groupId | path | required | string | — |
| roleId | path | required | string | — |
| targetGroupId | path | required | string | — |
No Content
PUT /api/v1/groups/{groupId}/roles/{roleId}/targets/groups/{targetGroupId}
/api/v1/groups/{groupId}/users/{userId}
Adds a user to a group with ‘OKTA_GROUP’ type.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| groupId | path | required | string | — |
| userId | path | required | string | — |
No Content
PUT /api/v1/groups/{groupId}/users/{userId}
/api/v1/idps/{idpId}
Updates the configuration for an IdP.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| idpId | path | required | string | — |
application/json
IdentityProvider
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| type | string | optional |
| _links | object | optional |
| policy | object | optional |
| └ subject | object | optional |
| └ filter | string | optional |
| └ format | array | optional |
| └ matchType | string | optional |
| └ matchAttribute | string | optional |
| └ userNameTemplate | object | optional |
| └ template | string | optional |
| └ accountLink | object | optional |
| └ action | string | optional |
| └ filter | object | optional |
| └ groups | object | optional |
| └ maxClockSkew | integer | optional |
| └ provisioning | object | optional |
| └ action | string | optional |
| └ groups | object | optional |
| └ action | string | optional |
| └ filter | array | optional |
| └ assignments | array | optional |
| └ sourceAttributeName | string | optional |
| └ conditions | object | optional |
| └ suspended | object | optional |
| └ deprovisioned | object | optional |
| └ profileMaster | boolean | optional |
| status | string | optional |
| created | string | optional |
| protocol | object | optional |
| └ type | string | optional |
| └ issuer | object | optional |
| └ url | string | optional |
| └ type | string | optional |
| └ binding | string | optional |
| └ destination | string | optional |
| └ scopes | array | optional |
| └ settings | object | optional |
| └ nameFormat | string | optional |
| └ endpoints | object | optional |
| └ acs | object | optional |
| └ url | string | optional |
| └ type | string | optional |
| └ binding | string | optional |
| └ destination | string | optional |
| └ slo | object | optional |
| └ url | string | optional |
| └ type | string | optional |
| └ binding | string | optional |
| └ destination | string | optional |
| └ sso | object | optional |
| └ url | string | optional |
| └ type | string | optional |
| └ binding | string | optional |
| └ destination | string | optional |
| └ jwks | object | optional |
| └ url | string | optional |
| └ type | string | optional |
| └ binding | string | optional |
| └ destination | string | optional |
| └ token | object | optional |
| └ url | string | optional |
| └ type | string | optional |
| └ binding | string | optional |
| └ destination | string | optional |
| └ metadata | object | optional |
| └ url | string | optional |
| └ type | string | optional |
| └ binding | string | optional |
| └ destination | string | optional |
| └ userInfo | object | optional |
| └ url | string | optional |
| └ type | string | optional |
| └ binding | string | optional |
| └ destination | string | optional |
| └ authorization | object | optional |
| └ url | string | optional |
| └ type | string | optional |
| └ binding | string | optional |
| └ destination | string | optional |
| └ algorithms | object | optional |
| └ request | object | optional |
| └ signature | object | optional |
| └ response | object | optional |
| └ signature | object | optional |
| └ relayState | object | optional |
| └ format | string | optional |
| └ credentials | object | optional |
| └ trust | object | optional |
| └ kid | string | optional |
| └ issuer | string | optional |
| └ audience | string | optional |
| └ revocation | string | optional |
| └ revocationCacheLifetime | integer | optional |
| └ client | object | optional |
| └ client_id | string | optional |
| └ client_secret | string | optional |
| └ signing | object | optional |
| └ kid | string | optional |
| └ teamId | string | optional |
| └ privateKey | string | optional |
| issuerMode | string | optional |
| lastUpdated | string | optional |
Success
PUT /api/v1/idps/{idpId}
/api/v1/inlineHooks/{inlineHookId}
Updates an inline hook by ID
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| inlineHookId | path | required | string | — |
application/json
InlineHook
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| type | string | optional |
| _links | object | optional |
| status | string | optional |
| channel | object | optional |
| └ type | string | optional |
| └ config | object | optional |
| └ uri | string | optional |
| └ method | string | optional |
| └ headers | array | optional |
| └ key | string | optional |
| └ value | string | optional |
| └ authScheme | object | optional |
| └ key | string | optional |
| └ type | string | optional |
| └ value | string | optional |
| └ version | string | optional |
| created | string | optional |
| version | string | optional |
| lastUpdated | string | optional |
Success
PUT /api/v1/inlineHooks/{inlineHookId}
/api/v1/zones/{zoneId}
Updates a network zone in your organization.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| zoneId | path | required | string | — |
application/json
NetworkZone
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| asns | array | optional |
| name | string | optional |
| type | string | optional |
| usage | string | optional |
| _links | object | optional |
| status | string | optional |
| system | boolean | optional |
| created | string | optional |
| proxies | array | optional |
| └ type | string | optional |
| └ value | string | optional |
| gateways | array | optional |
| └ type | string | optional |
| └ value | string | optional |
| locations | array | optional |
| └ region | string | optional |
| └ country | string | optional |
| proxyType | string | optional |
| lastUpdated | string | optional |
Success
PUT /api/v1/zones/{zoneId}
/api/v1/org
Update settings of your organization.
application/json
OrgSetting
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| city | string | optional |
| state | string | optional |
| _links | object | optional |
| status | string | optional |
| country | string | optional |
| created | string | optional |
| website | string | optional |
| address1 | string | optional |
| address2 | string | optional |
| expiresAt | string | optional |
| subdomain | string | optional |
| postalCode | string | optional |
| companyName | string | optional |
| lastUpdated | string | optional |
| phoneNumber | string | optional |
| supportPhoneNumber | string | optional |
| endUserSupportHelpURL | string | optional |
Success
PUT /api/v1/org
/api/v1/org/contacts/{contactType}
Updates the User associated with the specified Contact Type.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| contactType | path | required | string | — |
application/json
UserIdString
| Property | Type | Required |
|---|---|---|
| userId | string | optional |
Success
PUT /api/v1/org/contacts/{contactType}
/api/v1/policies/{policyId}
Updates a policy.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| policyId | path | required | string | — |
application/json
Policy
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| type | string | optional |
| _links | object | optional |
| status | string | optional |
| system | boolean | optional |
| created | string | optional |
| priority | integer | optional |
| _embedded | object | optional |
| conditions | object | optional |
| └ app | object | optional |
| └ exclude | array | optional |
| └ id | string | optional |
| └ name | string | optional |
| └ type | string | optional |
| └ include | array | optional |
| └ id | string | optional |
| └ name | string | optional |
| └ type | string | optional |
| └ apps | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ risk | object | optional |
| └ behaviors | array | optional |
| └ users | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ inactivity | object | optional |
| └ unit | string | optional |
| └ number | integer | optional |
| └ passwordExpiration | object | optional |
| └ unit | string | optional |
| └ number | integer | optional |
| └ lifecycleExpiration | object | optional |
| └ unit | string | optional |
| └ number | integer | optional |
| └ lifecycleStatus | string | optional |
| └ userLifecycleAttribute | object | optional |
| └ attributeName | string | optional |
| └ matchingValue | string | optional |
| └ device | object | optional |
| └ rooted | boolean | optional |
| └ migrated | boolean | optional |
| └ platform | object | optional |
| └ types | array | optional |
| └ supportedMDMFrameworks | array | optional |
| └ trustLevel | string | optional |
| └ groups | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ people | object | optional |
| └ users | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ groups | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ scopes | object | optional |
| └ include | array | optional |
| └ clients | object | optional |
| └ include | array | optional |
| └ context | object | optional |
| └ expression | string | optional |
| └ network | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ connection | string | optional |
| └ platform | object | optional |
| └ exclude | array | optional |
| └ os | object | optional |
| └ type | string | optional |
| └ include | array | optional |
| └ os | object | optional |
| └ type | string | optional |
| └ riskScore | object | optional |
| └ level | string | optional |
| └ grantTypes | object | optional |
| └ include | array | optional |
| └ userStatus | object | optional |
| └ value | string | optional |
| └ authContext | object | optional |
| └ authType | string | optional |
| └ authProvider | object | optional |
| └ include | array | optional |
| └ provider | string | optional |
| └ mdmEnrollment | object | optional |
| └ enrollment | string | optional |
| └ blockNonSafeAndroid | boolean | optional |
| └ userIdentifier | object | optional |
| └ type | string | optional |
| └ patterns | array | optional |
| └ value | string | optional |
| └ matchType | string | optional |
| └ attribute | string | optional |
| └ identityProvider | object | optional |
| └ idpIds | array | optional |
| └ provider | string | optional |
| └ …1 more | object | optional |
| description | string | optional |
| lastUpdated | string | optional |
Success
PUT /api/v1/policies/{policyId}
/api/v1/policies/{policyId}/rules/{ruleId}
Updates a policy rule.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| policyId | path | required | string | — |
| ruleId | path | required | string | — |
application/json
PolicyRule
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| type | string | optional |
| status | string | optional |
| system | boolean | optional |
| actions | object | optional |
| └ idp | object | optional |
| └ providers | array | optional |
| └ id | string | optional |
| └ type | string | optional |
| └ enroll | object | optional |
| └ self | string | optional |
| └ signon | object | optional |
| └ access | string | optional |
| └ session | object | optional |
| └ usePersistentCookie | boolean | optional |
| └ maxSessionIdleMinutes | integer | optional |
| └ maxSessionLifetimeMinutes | integer | optional |
| └ requireFactor | boolean | optional |
| └ factorLifetime | integer | optional |
| └ factorPromptMode | string | optional |
| └ rememberDeviceByDefault | boolean | optional |
| └ passwordChange | object | optional |
| └ access | string | optional |
| └ selfServiceUnlock | object | optional |
| └ access | string | optional |
| └ selfServicePasswordReset | object | optional |
| └ access | string | optional |
| created | string | optional |
| priority | integer | optional |
| conditions | object | optional |
| └ app | object | optional |
| └ exclude | array | optional |
| └ id | string | optional |
| └ name | string | optional |
| └ type | string | optional |
| └ include | array | optional |
| └ id | string | optional |
| └ name | string | optional |
| └ type | string | optional |
| └ apps | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ risk | object | optional |
| └ behaviors | array | optional |
| └ users | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ inactivity | object | optional |
| └ unit | string | optional |
| └ number | integer | optional |
| └ passwordExpiration | object | optional |
| └ unit | string | optional |
| └ number | integer | optional |
| └ lifecycleExpiration | object | optional |
| └ unit | string | optional |
| └ number | integer | optional |
| └ lifecycleStatus | string | optional |
| └ userLifecycleAttribute | object | optional |
| └ attributeName | string | optional |
| └ matchingValue | string | optional |
| └ device | object | optional |
| └ rooted | boolean | optional |
| └ migrated | boolean | optional |
| └ platform | object | optional |
| └ types | array | optional |
| └ supportedMDMFrameworks | array | optional |
| └ trustLevel | string | optional |
| └ groups | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ people | object | optional |
| └ users | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ groups | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ scopes | object | optional |
| └ include | array | optional |
| └ clients | object | optional |
| └ include | array | optional |
| └ context | object | optional |
| └ expression | string | optional |
| └ network | object | optional |
| └ exclude | array | optional |
| └ include | array | optional |
| └ connection | string | optional |
| └ platform | object | optional |
| └ exclude | array | optional |
| └ os | object | optional |
| └ type | string | optional |
| └ include | array | optional |
| └ os | object | optional |
| └ type | string | optional |
| └ riskScore | object | optional |
| └ level | string | optional |
| └ grantTypes | object | optional |
| └ include | array | optional |
| └ userStatus | object | optional |
| └ value | string | optional |
| └ authContext | object | optional |
| └ authType | string | optional |
| └ authProvider | object | optional |
| └ include | array | optional |
| └ provider | string | optional |
| └ mdmEnrollment | object | optional |
| └ enrollment | string | optional |
| └ blockNonSafeAndroid | boolean | optional |
| └ userIdentifier | object | optional |
| └ type | string | optional |
| └ patterns | array | optional |
| └ value | string | optional |
| └ matchType | string | optional |
| └ attribute | string | optional |
| └ identityProvider | object | optional |
| └ idpIds | array | optional |
| └ provider | string | optional |
| └ …1 more | object | optional |
| lastUpdated | string | optional |
Success
PUT /api/v1/policies/{policyId}/rules/{ruleId}
/api/v1/templates/sms/{templateId}
Updates the SMS template.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| templateId | path | required | string | — |
application/json
SmsTemplate
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| type | string | optional |
| created | string | optional |
| template | string | optional |
| lastUpdated | string | optional |
| translations | object | optional |
Success
PUT /api/v1/templates/sms/{templateId}
/api/v1/trustedOrigins/{trustedOriginId}
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| trustedOriginId | path | required | string | — |
application/json
TrustedOrigin
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| _links | object | optional |
| origin | string | optional |
| scopes | array | optional |
| └ type | string | optional |
| └ stringValue | string | optional |
| └ allowedOktaApps | array | optional |
| status | string | optional |
| created | string | optional |
| createdBy | string | optional |
| lastUpdated | string | optional |
| lastUpdatedBy | string | optional |
Success
PUT /api/v1/trustedOrigins/{trustedOriginId}
/api/v1/users/{associatedUserId}/linkedObjects/{primaryRelationshipName}/{primaryUserId}
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| associatedUserId | path | required | string | — |
| primaryRelationshipName | path | required | string | — |
| primaryUserId | path | required | string | — |
Success
PUT /api/v1/users/{associatedUserId}/linkedObjects/{primaryRelationshipName}/{primaryUserId}
/api/v1/users/{userId}
Update a user’s profile and/or credentials using strict-update semantics.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| strict | query | optional | boolean | — |
application/json
User
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| type | object | optional |
| └ id | string | optional |
| └ name | string | optional |
| └ _links | object | optional |
| └ created | string | optional |
| └ default | boolean | optional |
| └ createdBy | string | optional |
| └ description | string | optional |
| └ displayName | string | optional |
| └ lastUpdated | string | optional |
| └ lastUpdatedBy | string | optional |
| _links | object | optional |
| status | string | optional |
| created | string | optional |
| profile | object | optional |
| └ city | string | optional |
| string | optional | |
| └ login | string | optional |
| └ state | string | optional |
| └ title | string | optional |
| └ locale | string | optional |
| └ manager | string | optional |
| └ zipCode | string | optional |
| └ division | string | optional |
| └ lastName | string | optional |
| └ nickName | string | optional |
| └ timezone | string | optional |
| └ userType | string | optional |
| └ firstName | string | optional |
| └ managerId | string | optional |
| └ costCenter | string | optional |
| └ department | string | optional |
| └ middleName | string | optional |
| └ profileUrl | string | optional |
| └ countryCode | string | optional |
| └ …11 more | object | optional |
| _embedded | object | optional |
| activated | string | optional |
| lastLogin | string | optional |
| credentials | object | optional |
| └ password | object | optional |
| └ hash | object | optional |
| └ salt | string | optional |
| └ value | string | optional |
| └ algorithm | string | optional |
| └ saltOrder | string | optional |
| └ workFactor | integer | optional |
| └ hook | object | optional |
| └ type | string | optional |
| └ value | string | optional |
| └ provider | object | optional |
| └ name | string | optional |
| └ type | string | optional |
| └ recovery_question | object | optional |
| └ answer | string | optional |
| └ question | string | optional |
| lastUpdated | string | optional |
| statusChanged | string | optional |
| passwordChanged | string | optional |
| transitioningToStatus | string | optional |
Success
PUT /api/v1/users/{userId}
/api/v1/users/{userId}/roles/{roleId}/targets/catalog/apps
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| roleId | path | required | string | — |
Success
PUT /api/v1/users/{userId}/roles/{roleId}/targets/catalog/apps
/api/v1/users/{userId}/roles/{roleId}/targets/catalog/apps/{appName}
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| roleId | path | required | string | — |
| appName | path | required | string | — |
Success
PUT /api/v1/users/{userId}/roles/{roleId}/targets/catalog/apps/{appName}
/api/v1/users/{userId}/roles/{roleId}/targets/catalog/apps/{appName}/{applicationId}
Add App Instance Target to App Administrator Role given to a User
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| roleId | path | required | string | — |
| appName | path | required | string | — |
| applicationId | path | required | string | — |
No Content
PUT /api/v1/users/{userId}/roles/{roleId}/targets/catalog/apps/{appName}/{applicationId}
/api/v1/users/{userId}/roles/{roleId}/targets/groups/{groupId}
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| roleId | path | required | string | — |
| groupId | path | required | string | — |
Success
PUT /api/v1/users/{userId}/roles/{roleId}/targets/groups/{groupId}
/api/v1/meta/types/user/{typeId}
Replace an existing User Type
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| typeId | path | required | string | — |
application/json
UserType
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| _links | object | optional |
| created | string | optional |
| default | boolean | optional |
| createdBy | string | optional |
| description | string | optional |
| displayName | string | optional |
| lastUpdated | string | optional |
| lastUpdatedBy | string | optional |
Success
PUT /api/v1/meta/types/user/{typeId}
AccessPolicy
{
"x-okta-tags": [
"Policy"
],
"x-okta-parent": "#/definitions/Policy"
}
AccessPolicyConstraint
{
"type": "object",
"properties": {
"types": {
"type": "array",
"items": {
"type": "string"
}
},
"methods": {
"type": "array",
"items": {
"type": "string"
}
},
"reauthenticateIn": {
"type": "string"
}
},
"x-okta-tags": [
"Policy"
]
}
AccessPolicyConstraints
{
"type": "object",
"properties": {
"knowledge": {
"$ref": "#/components/schemas/KnowledgeConstraint"
},
"possession": {
"$ref": "#/components/schemas/PossessionConstraint"
}
},
"x-okta-tags": [
"Policy"
]
}
AccessPolicyRule
{
"type": "object",
"properties": {
"name": {
"type": "string"
},
"actions": {
"$ref": "#/components/schemas/AccessPolicyRuleActions"
},
"conditions": {
"$ref": "#/components/schemas/AccessPolicyRuleConditions"
}
},
"x-okta-tags": [
"Policy"
],
"x-okta-parent": "#/definitions/PolicyRule"
}
AccessPolicyRuleActions
{
"type": "object",
"properties": {
"appSignOn": {
"$ref": "#/components/schemas/AccessPolicyRuleApplicationSignOn"
}
},
"x-okta-tags": [
"Policy"
],
"x-okta-parent": "#/definitions/PolicyRuleActions"
}
AccessPolicyRuleApplicationSignOn
{
"type": "object",
"properties": {
"access": {
"type": "string"
},
"verificationMethod": {
"$ref": "#/components/schemas/VerificationMethod"
}
},
"x-okta-tags": [
"Policy"
]
}
AccessPolicyRuleConditions
{
"properties": {
"device": {
"$ref": "#/components/schemas/DeviceAccessPolicyRuleCondition"
},
"userType": {
"$ref": "#/components/schemas/UserTypeCondition"
},
"elCondition": {
"$ref": "#/components/schemas/AccessPolicyRuleCustomCondition"
}
},
"x-okta-tags": [
"Policy"
],
"x-okta-parent": "#/definitions/PolicyRuleConditions"
}
AccessPolicyRuleCustomCondition
{
"properties": {
"condition": {
"type": "string"
}
},
"x-okta-tags": [
"Policy"
]
}
AcsEndpoint
{
"properties": {
"url": {
"type": "string"
},
"index": {
"type": "integer"
}
},
"x-okta-tags": [
"Application"
]
}
ActivateFactorRequest
{
"properties": {
"passCode": {
"type": "string"
},
"clientData": {
"type": "string"
},
"stateToken": {
"type": "string"
},
"attestation": {
"type": "string"
},
"registrationData": {
"type": "string"
}
},
"x-okta-tags": [
"UserFactor"
]
}
AllowedForEnum
{
"enum": [
"recovery",
"sso",
"any",
"none"
],
"type": "string",
"x-okta-tags": [
"Authenticator"
]
}
AppAndInstanceConditionEvaluatorAppOrInstance
{
"type": "object",
"properties": {
"id": {
"type": "string",
"readOnly": true
},
"name": {
"type": "string"
},
"type": {
"enum": [
"APP_TYPE",
"APP"
],
"type": "string"
}
},
"x-okta-tags": [
"Policy"
]
}
AppAndInstancePolicyRuleCondition
{
"type": "object",
"properties": {
"exclude": {
"type": "array",
"items": {
"$ref": "#/components/schemas/AppAndInstanceConditionEvaluatorAppOrInstance"
}
},
"include": {
"type": "array",
"items": {
"$ref": "#/components/schemas/AppAndInstanceConditionEvaluatorAppOrInstance"
}
}
},
"x-okta-tags": [
"Policy"
]
}
AppInstancePolicyRuleCondition
{
"type": "object",
"properties": {
"exclude": {
"type": "array",
"items": {
"type": "string"
}
},
"include": {
"type": "array",
"items": {
"type": "string"
}
}
},
"x-okta-tags": [
"Policy"
]
}
AppLink
{
"type": "object",
"properties": {
"id": {
"type": "string",
"readOnly": true
},
"label": {
"type": "string",
"readOnly": true
},
"hidden": {
"type": "boolean",
"readOnly": true
},
"appName": {
"type": "string",
"readOnly": true
},
"linkUrl": {
"type": "string",
"readOnly": true
},
"logoUrl": {
"type": "string",
"readOnly": true
},
"sortOrder": {
"type": "integer",
"readOnly": true
},
"appInstanceId": {
"type": "string",
"readOnly": true
},
"appAssignmentId": {
"type": "string",
"readOnly": true
},
"credentialsSetup": {
"type": "boolean",
"readOnly": true
}
},
"x-okta-tags": [
"User"
]
}
AppUser
{
"type": "object",
"properties": {
"id": {
"type": "string"
},
"scope": {
"type": "string"
},
"_links": {
"type": "object",
"readOnly": true,
"additionalProperties": {
"type": "object"
}
},
"status": {
"type": "string",
"readOnly": true
},
"created": {
"type": "string",
"format": "date-time",
"readOnly": true
},
"profile": {
"type": "object",
"additionalProperties": {
"type": "object"
}
},
"lastSync": {
"type": "string",
"format": "date-time",
"readOnly": true
},
"_embedded": {
"type": "object",
"readOnly": true,
"additionalProperties": {
"type": "object"
}
},
"syncState": {
"type": "string",
"readOnly": true
},
"externalId": {
"type": "string",
"readOnly": true
},
"credentials": {
"$ref": "#/components/schemas/AppUserCredentials"
},
"lastUpdated": {
"type": "string",
"format": "date-time",
"readOnly": true
},
"statusChanged": {
"type": "string",
"format": "date-time",
"readOnly": true
},
"passwordChanged": {
"type": "string",
"format": "date-time",
"readOnly": true
}
},
"x-okta-crud": [
{
"alias": "update",
"arguments": [
{
"dest": "appId",
"parentSrc": "appId"
},
{
"src": "id",
"dest": "userId"
},
{
"dest": "appUser",
"self": true
}
],
"operationId": "updateApplicationUser"
},
{
"alias": "delete",
"arguments": [
{
"dest": "appId",
"parentSrc": "appId"
},
{
"src": "id",
"dest": "userId"
}
],
"operationId": "deleteApplicationUser"
}
],
"x-okta-tags": [
"Application"
]
}
AppUserCredentials
{
"type": "object",
"properties": {
"password": {
"$ref": "#/components/schemas/AppUserPasswordCredential"
},
"userName": {
"type": "string"
}
},
"x-okta-tags": [
"Application"
]
}
AppUserPasswordCredential
{
"properties": {
"value": {
"type": "string",
"format": "password"
}
},
"x-okta-tags": [
"Application"
]
}
Application
{
"type": "object",
"properties": {
"id": {
"type": "string",
"readOnly": true
},
"name": {
"type": "string",
"readOnly": true
},
"label": {
"type": "string"
},
"_links": {
"type": "object",
"readOnly": true,
"additionalProperties": {
"type": "object"
}
},
"status": {
"enum": [
"ACTIVE",
"INACTIVE",
"DELETED"
],
"type": "string",
"readOnly": true
},
"created": {
"type": "string",
"format": "date-time",
"readOnly": true
},
"profile": {
"type": "object",
"additionalProperties": {
"type": "object"
}
},
"features": {
"type": "array",
"items": {
"type": "string"
}
},
"settings": {
"$ref": "#/components/schemas/ApplicationSettings"
},
"_embedded": {
"type": "object",
"readOnly": true,
"additionalProperties": {
"type": "object"
}
},
"licensing": {
"$ref": "#/components/schemas/ApplicationLicensing"
},
"signOnMode": {
"$ref": "#/components/schemas/ApplicationSignOnMode"
},
"visibility": {
"$ref": "#/components/schemas/ApplicationVisibility"
},
"credentials": {
"$ref": "#/components/schemas/ApplicationCredentials"
},
"lastUpdated": {
"type": "string",
"format": "date-time",
"readOnly": true
},
"accessibility": {
"$ref": "#/components/schemas/ApplicationAccessibility"
}
},
"x-okta-crud": [
{
"alias": "read",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "getApplication"
},
{
"alias": "update",
"arguments": [
{
"src": "id",
"dest": "appId"
},
{
"dest": "application",
"self": true
}
],
"operationId": "updateApplication"
},
{
"alias": "delete",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "deleteApplication"
}
],
"x-okta-tags": [
"Application"
],
"x-okta-operations": [
{
"alias": "activate",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "activateApplication"
},
{
"alias": "deactivate",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "deactivateApplication"
},
{
"alias": "listApplicationUsers",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "listApplicationUsers"
},
{
"alias": "assignUserToApplication",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "assignUserToApplication"
},
{
"alias": "getApplicationUser",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "getApplicationUser"
},
{
"alias": "createApplicationGroupAssignment",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "createApplicationGroupAssignment"
},
{
"alias": "getApplicationGroupAssignment",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "getApplicationGroupAssignment"
},
{
"alias": "cloneApplicationKey",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "cloneApplicationKey"
},
{
"alias": "getApplicationKey",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "getApplicationKey"
},
{
"alias": "listGroupAssignments",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "listApplicationGroupAssignments"
},
{
"alias": "listKeys",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "listApplicationKeys"
},
{
"alias": "generateKey",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "generateApplicationKey"
},
{
"alias": "generateCsr",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "generateCsrForApplication"
},
{
"alias": "getCsr",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "getCsrForApplication"
},
{
"alias": "revokeCsr",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "revokeCsrFromApplication"
},
{
"alias": "listCsrs",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "listCsrsForApplication"
},
{
"alias": "publishCerCert",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "publishCerCert"
},
{
"alias": "publishBinaryCerCert",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "publishBinaryCerCert"
},
{
"alias": "publishDerCert",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "publishDerCert"
},
{
"alias": "publishBinaryDerCert",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "publishBinaryDerCert"
},
{
"alias": "publishBinaryPemCert",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "publishBinaryPemCert"
},
{
"alias": "listOAuth2Tokens",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "listOAuth2TokensForApplication"
},
{
"alias": "revokeOAuth2TokenForApplication",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "revokeOAuth2TokenForApplication"
},
{
"alias": "getOAuth2Token",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "getOAuth2TokenForApplication"
},
{
"alias": "revokeOAuth2Tokens",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "revokeOAuth2TokensForApplication"
},
{
"alias": "listScopeConsentGrants",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "listScopeConsentGrants"
},
{
"alias": "grantConsentToScope",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "grantConsentToScope"
},
{
"alias": "revokeScopeConsentGrant",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "revokeScopeConsentGrant"
},
{
"alias": "getScopeConsentGrant",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "getScopeConsentGrant"
},
{
"alias": "uploadApplicationLogo",
"operationId": "uploadApplicationLogo"
},
{
"alias": "getFeatureForApplication",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "getFeatureForApplication"
},
{
"alias": "updateFeatureForApplication",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "updateFeatureForApplication"
},
{
"alias": "updateApplicationPolicy",
"arguments": [
{
"src": "id",
"dest": "appId"
}
],
"operationId": "updateApplicationPolicy"
}
],
"x-openapi-v3-discriminator": {
"mapping": {
"BOOKMARK": "#/definitions/BookmarkApplication",
"SAML_1_1": "#/definitions/SamlApplication",
"SAML_2_0": "#/definitions/SamlApplication",
"AUTO_LOGIN": "#/definitions/AutoLoginApplication",
"BASIC_AUTH": "#/definitions/BasicAuthApplication",
"WS_FEDERATION": "#/definitions/WsFederationApplication",
"BROWSER_PLUGIN": "#/definitions/BrowserPluginApplication",
"OPENID_CONNECT": "#/definitions/OpenIdConnectApplication",
"SECURE_PASSWORD_STORE": "#/definitions/SecurePasswordStoreApplication"
},
"propertyName": "signOnMode"
}
}
ApplicationAccessibility
{
"type": "object",
"properties": {
"selfService": {
"type": "boolean"
},
"errorRedirectUrl": {
"type": "string"
},
"loginRedirectUrl": {
"type": "string"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationCredentials
{
"type": "object",
"properties": {
"signing": {
"$ref": "#/components/schemas/ApplicationCredentialsSigning"
},
"userNameTemplate": {
"$ref": "#/components/schemas/ApplicationCredentialsUsernameTemplate"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationCredentialsOAuthClient
{
"properties": {
"client_id": {
"type": "string"
},
"client_secret": {
"type": "string"
},
"pkce_required": {
"type": "boolean"
},
"autoKeyRotation": {
"type": "boolean"
},
"token_endpoint_auth_method": {
"$ref": "#/components/schemas/OAuthEndpointAuthenticationMethod"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationCredentialsScheme
{
"enum": [
"SHARED_USERNAME_AND_PASSWORD",
"EXTERNAL_PASSWORD_SYNC",
"EDIT_USERNAME_AND_PASSWORD",
"EDIT_PASSWORD_ONLY",
"ADMIN_SETS_CREDENTIALS"
],
"type": "string",
"x-okta-tags": [
"Application"
]
}
ApplicationCredentialsSigning
{
"type": "object",
"properties": {
"kid": {
"type": "string"
},
"use": {
"$ref": "#/components/schemas/ApplicationCredentialsSigningUse"
},
"lastRotated": {
"type": "string",
"format": "date-time",
"readOnly": true
},
"nextRotation": {
"type": "string",
"format": "date-time",
"readOnly": true
},
"rotationMode": {
"type": "string"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationCredentialsSigningUse
{
"enum": [
"sig"
],
"type": "string",
"x-okta-tags": [
"AuthorizationServer"
]
}
ApplicationCredentialsUsernameTemplate
{
"type": "object",
"properties": {
"type": {
"type": "string"
},
"suffix": {
"type": "string"
},
"template": {
"type": "string"
},
"pushStatus": {
"type": "string"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationFeature
{
"type": "object",
"properties": {
"name": {
"type": "string"
},
"_links": {
"type": "object",
"readOnly": true,
"additionalProperties": {
"type": "object"
}
},
"status": {
"$ref": "#/components/schemas/EnabledStatus"
},
"description": {
"type": "string"
},
"capabilities": {
"$ref": "#/components/schemas/CapabilitiesObject"
}
},
"x-okta-tags": [
"Application"
],
"x-okta-operations": [
{
"alias": "listFeaturesForApplication",
"operationId": "listFeaturesForApplication"
}
]
}
ApplicationGroupAssignment
{
"type": "object",
"properties": {
"id": {
"type": "string",
"readOnly": true
},
"_links": {
"type": "object",
"readOnly": true,
"additionalProperties": {
"type": "object"
}
},
"profile": {
"type": "object",
"additionalProperties": {
"type": "object"
}
},
"priority": {
"type": "integer"
},
"_embedded": {
"type": "object",
"readOnly": true,
"additionalProperties": {
"type": "object"
}
},
"lastUpdated": {
"type": "string",
"format": "date-time",
"readOnly": true
}
},
"x-okta-crud": [
{
"alias": "delete",
"arguments": [
{
"dest": "appId",
"parentSrc": "appId"
},
{
"src": "id",
"dest": "groupId"
}
],
"operationId": "deleteApplicationGroupAssignment"
}
],
"x-okta-tags": [
"Application"
]
}
ApplicationLicensing
{
"type": "object",
"properties": {
"seatCount": {
"type": "integer"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationListAppsResponse
{
"type": "array",
"items": {
"$ref": "#/components/schemas/Application"
}
}
ApplicationListAssignedUsersResponse
{
"type": "array",
"items": {
"$ref": "#/components/schemas/AppUser"
}
}
ApplicationListClientSecretsResponse
{
"type": "array",
"items": {
"$ref": "#/components/schemas/ClientSecret"
}
}
ApplicationListCsrsForApplicationResponse
{
"type": "array",
"items": {
"$ref": "#/components/schemas/Csr"
}
}
ApplicationListFeaturesResponse
{
"type": "array",
"items": {
"$ref": "#/components/schemas/ApplicationFeature"
}
}
ApplicationListGroupsAssignedResponse
{
"type": "array",
"items": {
"$ref": "#/components/schemas/ApplicationGroupAssignment"
}
}
ApplicationListKeyCredentialsResponse
{
"type": "array",
"items": {
"$ref": "#/components/schemas/JsonWebKey"
}
}
ApplicationListScopeConsentGrantsResponse
{
"type": "array",
"items": {
"$ref": "#/components/schemas/OAuth2ScopeConsentGrant"
}
}
ApplicationListTokensResponse
{
"type": "array",
"items": {
"$ref": "#/components/schemas/OAuth2Token"
}
}
ApplicationPreviewSamlAppMetadataResponse
{
"type": "object",
"properties": {
"EntityDescriptor": {
"type": "object",
"properties": {
"entityID": {
"xml": {
"attribute": true
},
"type": "string"
},
"IDPSSODescriptor": {
"type": "object",
"properties": {
"NameIDFormat": {
"type": "array",
"items": {
"type": "string"
}
},
"KeyDescriptor": {
"type": "object",
"properties": {
"use": {
"xml": {
"attribute": true
},
"type": "string"
},
"KeyInfo": {
"type": "object",
"properties": {
"X509Data": {
"type": "object",
"properties": {
"X509Certificate": {
"type": "string"
}
}
}
}
}
}
},
"SingleLogoutService": {
"type": "array",
"items": {
"type": "string"
},
"properties": {
"Binding": {
"xml": {
"attribute": true
},
"type": "string"
},
"Location": {
"xml": {
"attribute": true
},
"type": "string"
}
}
},
"SingleSignOnService": {
"type": "array",
"items": {
"type": "string"
},
"properties": {
"Binding": {
"xml": {
"attribute": true
},
"type": "string"
},
"Location": {
"xml": {
"attribute": true
},
"type": "string"
}
}
},
"WantAuthnRequestsSigned": {
"xml": {
"attribute": true
},
"type": "boolean"
},
"protocolSupportEnumeration": {
"xml": {
"attribute": true
},
"type": "string"
}
}
}
}
}
}
}
ApplicationSettings
{
"type": "object",
"properties": {
"app": {
"$ref": "#/components/schemas/ApplicationSettingsApplication"
},
"notes": {
"$ref": "#/components/schemas/ApplicationSettingsNotes"
},
"inlineHookId": {
"type": "string"
},
"notifications": {
"$ref": "#/components/schemas/ApplicationSettingsNotifications"
},
"implicitAssignment": {
"type": "boolean"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationSettingsApplication
{
"properties": {
"url": {
"type": "string"
},
"acsUrl": {
"type": "string"
},
"orgName": {
"type": "string"
},
"buttonField": {
"type": "string"
},
"loginUrlRegex": {
"type": "string"
},
"passwordField": {
"type": "string"
},
"usernameField": {
"type": "string"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationSettingsNotes
{
"type": "object",
"properties": {
"admin": {
"type": "string"
},
"enduser": {
"type": "string"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationSettingsNotifications
{
"type": "object",
"properties": {
"vpn": {
"$ref": "#/components/schemas/ApplicationSettingsNotificationsVpn"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationSettingsNotificationsVpn
{
"type": "object",
"properties": {
"helpUrl": {
"type": "string"
},
"message": {
"type": "string"
},
"network": {
"$ref": "#/components/schemas/ApplicationSettingsNotificationsVpnNetwork"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationSettingsNotificationsVpnNetwork
{
"type": "object",
"properties": {
"exclude": {
"type": "array",
"items": {
"type": "string"
}
},
"include": {
"type": "array",
"items": {
"type": "string"
}
},
"connection": {
"type": "string"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationSignOnMode
{
"enum": [
"BOOKMARK",
"BASIC_AUTH",
"BROWSER_PLUGIN",
"SECURE_PASSWORD_STORE",
"AUTO_LOGIN",
"WS_FEDERATION",
"SAML_2_0",
"OPENID_CONNECT",
"SAML_1_1"
],
"type": "string",
"x-okta-tags": [
"Application"
]
}
ApplicationUpdateLogoRequest
{
"type": "object",
"required": [
"file"
],
"properties": {
"file": {
"type": "string",
"format": "binary"
}
}
}
ApplicationVisibility
{
"type": "object",
"properties": {
"hide": {
"$ref": "#/components/schemas/ApplicationVisibilityHide"
},
"appLinks": {
"type": "object",
"additionalProperties": {
"type": "boolean"
}
},
"autoLaunch": {
"type": "boolean"
},
"autoSubmitToolbar": {
"type": "boolean"
}
},
"x-okta-tags": [
"Application"
]
}
ApplicationVisibilityHide
{
"type": "object",
"properties": {
"iOS": {
"type": "boolean"
},
"web": {
"type": "boolean"
}
},
"x-okta-tags": [
"Application"
]
}
AssignRoleRequest
{
"properties": {
"type": {
"$ref": "#/components/schemas/RoleType"
}
},
"x-okta-tags": [
"Role"
]
}
| Version | Endpoints | Schemas | Ingested | Status |
|---|---|---|---|---|
| 2.16.0 | 341 | 532 | 2026-05-25 | current |
| 2.16.0 | 341 | 532 | 2026-04-16 |