Skip to main content
Okta
Okta
51 actions · 21 events · 3 auth methods
PreviewIAM

​
Authentication

OAuth 2.0

Requires an OAuth app registered in Okta Admin Console. Supports OIDC and granular API scopes.Guides: Connector Profile, Link Account

OAuth 2.0 (Managed App)

Each user signs in with their own Okta account and the token inherits their permissions. The OAuth app Client ID and Sec…Guides: Connector Profile, Link Account

API Key

Best for admin scripts and internal tools. Token inherits the permissions of the admin who created it.Guides: Connector Profile, Link Account
Actions
|
|
51 actions
Action
Description
Required scopes
List Devices
Lists all devices with pagination support and flexible search options
Get Device
Retrieves a device by its ID
Delete Device
Permanently deletes a device. Device must be in DEACTIVATED status first.
Activate Device
Activates a device by setting its status to ACTIVE
Deactivate Device
Deactivates a device by setting its status to DEACTIVATED
List Groups
Lists all groups with pagination support
Get Group
Retrieves a specific group by ID from your org
Create Group
Adds a new group with OKTA_GROUP type to your org
Update Group
Replaces the profile for a group of OKTA_GROUP type
Delete Group
Deletes a group of OKTA_GROUP or APP_GROUP type from your org
List Group Members
Lists all users that are a member of a group
Add User To Group
Assigns a user to a group with OKTA_GROUP type
Remove User From Group
Unassigns a user from a group with OKTA_GROUP type
List Policies
Lists all policies of a given type
Get Policy
Retrieves a specific policy by ID. Use list_policies to obtain the policyId.
Create Policy
Creates a new policy of the specified type. The returned policy ID can be used with get_policy, replace_policy, delete_p…
Replace Policy
Replaces a policy with the provided data. Use list_policies or create_policy to obtain the policyId.
Delete Policy
Deletes a policy by ID
Activate Policy
Activates a policy by setting its status to ACTIVE
Deactivate Policy
Deactivates a policy by setting its status to INACTIVE
Clone An Existing Policy
Clones an existing ACCESS_POLICY to create a copy
Create A Policy Simulation
Simulates a policy evaluation to test access outcomes
List All Apps Mapped To A Policy
Lists all applications mapped to an ACCESS_POLICY. Use list_policies with type ACCESS_POLICY to obtain the policyId.
List All Resources Mapped To A Policy
Lists all resources mapped to a policy. Use list_policies to obtain the policyId.
Retrieve A Policy Resource Mapping
Retrieves a specific policy resource mapping. Use list_policy_mappings to obtain the mappingId.
List All Policy Rules
Lists all rules for a specific policy. Use list_policies to obtain the policyId first.
Retrieve A Policy Rule
Retrieves a specific rule for a policy
Create Policy Rule
Creates a new rule for a policy. Use list_policies to obtain the policyId. The created rule ID is returned in the respon…
Replace Policy Rule
Replaces a policy rule with the provided data. Use list_policy_rules to obtain the ruleId.
Delete Policy Rule
Deletes a policy rule. Use list_policy_rules to obtain the ruleId.
Activate Policy Rule
Activates a policy rule. Use list_policy_rules to obtain the ruleId.
Deactivate Policy Rule
Deactivates a policy rule. Use list_policy_rules to obtain the ruleId.
List Realms
Lists all Realms with pagination support
Get Realm
Retrieves a Realm by its ID
Create Realm
Creates a new Realm
Update Realm
Replaces the realm profile by its ID
Delete Realm
Deletes a Realm by its ID
Get User Info
Retrieves information about the currently authenticated user from the OAuth 2.0 UserInfo endpoint.
List Users
Lists all users in your org with pagination and flexible query options
Get User
Retrieves a user from your Okta org by ID, login, or shortname
Create User
Creates a new user in your Okta org with or without credentials
Update User
Updates a user’s profile or credentials with partial update semantics
Replace User
Replaces a user’s profile, credentials, or both using strict-update semantics
List User Blocks
Lists information about how a user is blocked from accessing their account
Delete User
Permanently deletes a user from your Okta organization
List User Types
Lists all user types in your Okta organization
Get User Type
Retrieves a user type by ID
Create User Type
Creates a new user type in your Okta organization
Update User Type
Partially updates an existing user type
Replace User Type
Fully replaces an existing user type
Delete User Type
Permanently deletes a user type
Events
|
21 events
Event
Description
Tags
Active Check
Responds to Okta’s one-time verification GET by echoing the x-okta-verification-challenge header value back in the JSON…
Health Check
User Created
Emitted when a new user account is created in Okta (provisioned by an admin, sourced from a directory, or self-registere…
User Lifecycle
User Activated
Emitted when a user transitions from STAGED, PROVISIONED, or DEPROVISIONED to ACTIVE status and gains access. Maps to Ok…
User Lifecycle
User Deactivated
Emitted when a user is deactivated — access is revoked and sessions are invalidated, but the account is preserved (statu…
User Lifecycle
User Suspended
Emitted when a user is temporarily suspended — sign-in is blocked and sessions are invalidated, but the user can be unsu…
User Lifecycle
User Delete Initiated
Emitted when a user-deletion request is initiated — the user enters DELETED status. Note that `user.lifecycle.delete.con…
User Lifecycle
User Password Reset
Emitted when a user’s password is reset (admin-initiated, self-service, or via the connector’s reset action). Maps to Ok…
User Account
User Profile Updated
Emitted when one or more user profile attributes are changed (first name, last name, email, phone, custom attributes, et…
User Account
User Universal Logout
Emitted when a Universal Logout signal terminates all of a user’s sessions and tokens across federated apps. Maps to Okt…
User Authentication
Group Created
Emitted when a new group is created in Okta. Maps to Okta event group.lifecycle.create.
Group Lifecycle
Group Deleted
Emitted when a group is deleted from Okta. Note that there is no group.lifecycle.modify or update event — group attr…
Group Lifecycle
Group Member Added
Emitted when a user is added as a member of a group. Maps to Okta event group.user_membership.add.
Group Membership
Group Member Removed
Emitted when a user is removed from a group’s membership. Maps to Okta event group.user_membership.remove.
Group Membership
Device Activated
Emitted when a device transitions from STAGED to ACTIVE status and becomes trusted. Maps to Okta event `device.lifecycle…
Device Lifecycle
Device Deactivated
Emitted when a device is deactivated and loses its trusted status. Maps to Okta event device.lifecycle.deactivate.
Device Lifecycle
Device Deleted
Emitted when a device is permanently removed from Okta. Maps to Okta event device.lifecycle.delete.
Device Lifecycle
App User Assigned
Emitted when a user is assigned to an application — the core “who has access to what” IAM signal. Maps to Okta event `ap…
Application Assignment
App User Removed
Emitted when a user is removed from an application — deprovisioning / access-loss signal critical for downstream cleanup…
Application Assignment
App Sign-On Access Denied
Emitted when an application sign-on policy denies a user access during sign-in. Security / compliance signal — useful fo…
Application Policy
API Token Created
Emitted when a new Okta admin API token is created. Security-critical signal — useful for audit logging, anomaly detecti…
System API Token
API Token Revoked
Emitted when an Okta admin API token is revoked. Security signal — useful for tracking credential lifecycle and detectin…
System API Token

​
Getting Started

1

Create or Select a Project

Set up a new project or select an existing one. See Organizations & Projects.
2

Configure the Connector

Enable the connector and set up a connector profile in your project. See Managing Connectors.

Connector Profile

Okta - OAuth 2.0

Connector Profile

Okta - OAuth 2.0 (Managed App)

Connector Profile

Okta - API Key
3

Link an Account

Connect an account using StackOne Hub or Auth Link.

Link Account

Okta - OAuth 2.0

Link Account

Okta - OAuth 2.0 (Managed App)

Link Account

Okta - API Key
4

Use Actions

Invoke actions using one of the methods below:
  • MCP – Model Context Protocol for AI assistants
  • A2A – Agent-to-Agent protocol
  • Agent SDK – TypeScript and Python SDKs for AI agents
  • Actions RPC – Direct API calls
  • Playground – Test actions in the dashboard