# Okta MCP connector The Okta connector brings your users, groups, applications, admin roles, and system logs into Claude, ChatGPT, Cursor, and the Elaichi Agent, so each person can look up and manage accounts within their own Okta access, with every action logged. Source: https://elaichi.ai/connectors/okta/ ## Facts | | | | --- | --- | | Application | Okta | | Category | SSO | | AI tools | 318 | | Authentication | OAuth or API key | | Needs your own OAuth app | Yes | | MCP endpoint | https://api.elaichi.ai/mcp | | Works with | Claude, ChatGPT, Cursor, any MCP client, and the Elaichi Agent | | Tools advertised by name | No. 318 tools is past the 30-tool threshold, so clients use `search_tools` and `execute_tool` | ## What you can ask once Okta is connected - Which Okta users were deactivated in the last week? - List members of the Engineering Okta group. - Show Okta users suspended but still in groups. ## Connect Okta in Elaichi This happens once for the organization, before any client is involved. 1. Open Connections, choose Add connection, and pick Okta. 2. Optionally set Share with, then press Connect. 3. Supply your own Okta app, then approve. Okta needs an OAuth app you register yourself, so bring its client ID and secret. One person does this once for the organization. Credentials are vaulted and nobody, including the AI, reads them back. The connection becomes a toolbox immediately, so you can curate which Okta tools are exposed, rename them, or freeze arguments before anyone points a client at it. ## Connect Okta to Claude Endpoint: https://api.elaichi.ai/mcp 1. Open Customize, then Connectors. 2. Press Add. 3. Name it, paste the MCP server URL, then Continue. 4. Sign in and approve. On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves. ## Connect Okta to ChatGPT Endpoint: https://api.elaichi.ai/mcp 1. Open Plugins, then press the + button. 2. Name it and paste the endpoint into Server URL. 3. Leave Authentication on OAuth, then tick the risk acknowledgement. 4. Press Create, then sign in and approve. Works on the web today. The plugin directory lives at chatgpt.com/plugins. ## Connect Okta to Cursor Endpoint: https://api.elaichi.ai/mcp 1. Open `~/.cursor/mcp.json`. 2. Add the endpoint under `mcpServers`. 3. Reload Cursor, then sign in and approve. Set up per machine, so repeat it on each computer you work from. ## Connect Okta to any MCP client Endpoint: https://api.elaichi.ai/mcp 1. Add the endpoint as a remote MCP server. 2. Sign in and approve. The Elaichi Agent already has these tools, with nothing to set up. ## What the consent screen decides Only Read is granted by default, which is not enough to call a Okta tool. Over MCP there is no trusted place to confirm a write in the moment, so the consent screen is the standing approval rather than a formality. Grant Read and Run tools. Think hard before granting Delete, which reaches into connected apps and cannot be undone. ## What teams do with Okta through Elaichi ### Set up a new hire on day one IT. Create the Okta user, add them to the right groups, and confirm which applications they can now reach, all from one request. ### Deactivate a leaver before their laptop is returned IT. Suspend or deactivate the Okta account the moment HR confirms a departure, and check that every group membership is gone. ### Answer why someone cannot sign in Helpdesk. Pull up the user, see their status and groups, and read the recent Okta system log entries for that person to find the failed sign-in or locked account. ### Review who holds admin roles Security. List every Okta role and who is assigned to it, then flag accounts that hold more than the job needs. ### Investigate a suspicious sign-in Security. Search the Okta system log for a user, an application, or a time window and get a plain summary of what happened and from where. ### Keep group membership matched to the org chart HR. After a team move, update the user's details and swap their Okta group memberships so application access follows the new role. ## Frequently asked questions ### How do I connect Okta to Claude? First connect Okta in Elaichi, then paste the endpoint https://api.elaichi.ai/mcp into Claude under Customize, then Connectors, then Add. Okta is one of the few applications where an Okta administrator registers an OAuth application inside Okta and brings the client ID and secret to Elaichi once, or connects with an Okta API token instead. After that one-time step, everyone else simply signs in to Okta as themselves when they connect. ### Does Okta work with ChatGPT and Cursor as well as Claude? Yes. Once Okta is connected in Elaichi, the same endpoint, https://api.elaichi.ai/mcp, works in Claude, ChatGPT, Cursor, any MCP client, and the Elaichi Agent. You connect Okta once and every client sees it. ### What can an AI agent actually do with my Okta data? With Okta connected, you can ask an agent to look up a user, create one, update their details, suspend or deactivate them, or change their group memberships. It can list your Okta applications, show who holds which admin role, assign a role, and read the system log to explain a failed sign-in. Because Okta exposes a large number of actions, short concrete asks such as "deactivate Jane Smith" work better than long paragraphs. ### Does connecting Okta give the AI admin rights over my whole organization? No. Every request to Okta runs inside the access of the person who signed in, so a helpdesk agent who cannot deactivate users in Okta cannot do it through an AI either. Elaichi can narrow that access further with per-action restrictions, and it can never widen it beyond what Okta already allows that person. ### Can my team share one Okta connection? Yes. One Okta administrator connects the account in Elaichi and shares it with a team, and nobody else ever handles the client secret or API token. Each teammate still signs in to Elaichi as themselves, so the audit log names the actual person behind every Okta change. ### Can I stop an agent from deleting or changing things in Okta? Yes. In Elaichi you can block individual Okta actions, such as deleting users, deleting applications, or assigning admin roles, while leaving lookups and group changes available. A blocked action is never shown to Claude, ChatGPT, Cursor, or any other client, so no prompt, however worded, can reach it. ### What happens to an Okta connection when someone leaves? Offboarding a person in Elaichi ends their access to Okta through every AI client at once. If they had shared an Okta connection with a team, it keeps working for everyone else. Disconnecting Okta once in Elaichi removes it from Claude, ChatGPT, Cursor, and every other client at the same time. ## All 318 Okta tools Every tool below is callable through https://api.elaichi.ai/mcp once Okta is connected, subject to the toolbox it is in and the restrictions on the caller. - **Get single Okta user by ID** (Get). Get a single Okta user by id. Returns the full user object including profile, status, and credential details. Required: id. - **Create a Okta user** (Create). Create a new user in Okta. Returns the created user object including its id, status, and profile. - **Update a Okta user by ID** (Update). Replace an existing Okta user's profile and credentials in full via PUT. Returns the updated user object. Required: id. - **Delete a Okta user by ID** (Delete). Delete an Okta user by id. Returns an empty response on success. Required: id. - **Okta users deactivate** (Deactivate). Deactivate an Okta user, transitioning them to the DEPROVISIONED lifecycle state. Returns an empty response on success. Required: user_id. - **Okta users suspend** (Suspend). Suspend an Okta user, preventing them from signing in while retaining their account. Returns an empty response on success. Required: user_id. - **Okta users bulk update** (Update). Replace an existing identity source user. Replaces an existing user for the given identity source instance and external ID. Required: identity_source_id, external_id. - **Okta users bulk delete** (Delete). Delete an identity source user. Deletes a user in an identity source for the given identity source instance and external ID. Required: identity_source_id, external_id. - **Okta users list subscriptions** (List). List all subscriptions for a user. Lists all subscriptions available to a specified user. Required: id. - **Okta users partial update** (Update). Update a user. Updates a user's profile or credentials with partial update semantics. Required: id. - **Get single Okta group by ID** (Get). Get a single Okta group by id. Returns the full group object. Required: id. - **Update a Okta group by ID** (Update). Update an existing Okta group by id using a full replacement (PUT). Returns the updated group object. Required: id. - **List all Okta group members** (List). List all members of an Okta group. Returns user objects belonging to the specified group. Required: group_id. - **Create a Okta group member** (Create). Add a user to an Okta group. Returns an empty 204 response on success. Required: group_id and user_id. - **Delete a Okta group member by ID** (Delete). Remove a user from an Okta group. Returns an empty 204 response on success. Required: group_id (query) and user id (id). - **List all Okta apps** (List). List all applications in Okta. Returns a collection of application objects. - **Get single Okta app by ID** (Get). Get a single Okta application by id. Returns the full application object. Required: id. - **Delete a Okta app by ID** (Delete). Delete an application. Deletes an inactive application. Required: id. - **List all Okta system logs** (List). List system log events from an Okta organization. Returns an array of LogEvent objects representing audit trail entries recorded by Okta. - **List all Okta roles** (List). List all IAM roles defined in Okta. Returns a collection of role objects from the roles array. - **Get single Okta role by ID** (Get). Get a single Okta IAM role by id. Returns the full role object. Required: id. - **Okta roles assign** (Assign). Assign a role to an Okta user. Required: user_id. - **Okta roles list subscriptions** (List). List all subscriptions for a role. Lists all subscriptions available to a specified Role. Required: role_ref. - **List all Okta user roles** (List). List all roles assigned to a specific Okta user. Returns the collection of role objects associated with the user. Required: user_id. - **Delete a Okta user role by ID** (Delete). Unassign a user role. Unassigns a role assignment (identified by roleAssignmentId) from a user (identified by userId). Required: user_id, id. - **List all Okta user groups** (List). List all Okta groups that a specific user belongs to. Returns the collection of group objects associated with the user. Required: user_id. - **Okta app authenticators challenges verify** (Verify). Verify a push notification challenge response from an Okta app authenticator. Returns an empty response on success., challenge_id, method, and challengeResponse. - **Get single Okta authenticator enrollment by ID** (Get). Retrieve a single Okta authenticator enrollment by id. Returns: id, name, created, lastChallenged, canReset, canUnenroll. Required: authenticator_id (query) and enrollment id (id). - **Okta myaccount app authenticators bulk update** (Update). Partially update an existing Okta app authenticator enrollment by enrollment_id., enrollment_id. - **Create a Okta myaccount app authenticator** (Create). Create an Okta app authenticator enrollment for the current user. Returns the enrollment object including id, authenticatorId, createdDate, device, methods, and user., authenticatorId. - **Create a Okta myaccount email** (Create). Create a primary or secondary email address for the current Okta user's account. The new address is created with UNVERIFIED status. Returns: id, status, roles, profile.email. - **Get single Okta myaccount email by ID** (Get). Get a specific email address for the current Okta user by id. Returns: id, status, roles, profile.email. Required: id, base_url. - **List all Okta myaccount Okta applications** (List). List all Okta apps assigned to the current user. Returns: id, name, displayName for each app. - **List all Okta myaccount organizations** (List). Retrieve org details for the authenticated user's Okta organization. Returns: name, url, supportEmail. - **Okta myaccount passwords bulk delete** (Delete). Delete the current Okta user's enrolled password. Returns an empty response on success. - **Okta myaccount passwords bulk update** (Update). Replace the current Okta user's password. Returns: id, status, created, lastUpdated. and a profile object containing the new password. - **List all Okta myaccount passwords** (List). Retrieve the current Okta user's password status (not the password value itself). Returns: id, status, created, lastUpdated. - **Get single Okta myaccount phone by ID** (Get). Get the current Okta user's phone by id. Returns: id, status, profile.phoneNumber, and available operation links. Required: id. - **List all Okta myaccount phones** (List). List all phones for the current Okta user. Returns an array of phone objects each including id, status, and profile.phoneNumber. - **Okta myaccount sessions bulk delete** (Delete). Delete all Okta MyAccount sessions for the current user in a single call. Returns an empty 204 response on success. - **Delete a Okta myaccount webauthn by ID** (Delete). Delete a specific Passkey (FIDO2 WebAuthn) enrollment in Okta by id. Returns an empty 204 response on success. Requires base_url and id. - **Get single Okta myaccount webauthn by ID** (Get). Get a single Passkey (FIDO2 WebAuthn) enrollment in Okta by id. Returns: id, status, name, credentialId, created, lastUpdated. Requires base_url and id. - **Create a Okta password change password** (Create). Update a password in Okta for the authenticated user. The caller must supply the current password to change it. Returns an empty 204 response on success., oldPassword, newPassword. - **List all Okta password complexity requirements** (List). Retrieve the password complexity requirements for the current okta user. Returns: description, complexity (minLength, minLowerCase, minUpperCase, minNumber, minSymbol, excludeUsername). - **Create a Okta phone challenge** (Create). Send a phone challenge in Okta via SMS or CALL to begin phone number verification. Returns a `_links.verify.href` link to use with the verification code at the verify endpoint. Required: `id` (phone ID), `base_url`. The verification code expires in five minutes; set `retry` to `true` in the body to resend a failed challenge. - **List all Okta aaguids** (List). List all custom AAGUIDs. Lists all custom Authenticator Attestation Global Unique Identifiers (AAGUIDs) in the org Only custom AAGUIDs that an admin has created are returned. Required: authenticator_id. - **Get single Okta aaguid by ID** (Get). Retrieve a custom AAGUID. Retrieves a custom AAGUID. Required: authenticator_id, id. - **Delete a Okta aaguid by ID** (Delete). Delete a custom AAGUID. Deletes a custom AAGUID You can only delete custom AAGUIDs that an admin has created. Required: authenticator_id, id. - **Create a Okta aerial grant** (Create). Grant Okta Aerial access to your org. Grants an Okta Aerial account consent to manage your org. - **Create a Okta aerial revoke** (Create). Revoke Okta Aerial access to your org. Revokes access of an Okta Aerial account to your Org. - **List all Okta agent pools** (List). List all agent pools. Lists all agent pools with pagination support - **List all Okta API tokens** (List). List all API token metadata. Lists all the metadata of the active API tokens - **Get single Okta API token by ID** (Get). Retrieve an API token's metadata. Retrieves the metadata for an active API token by apiTokenId. Required: id. - **List all Okta assignees users** (List). List all users with role assignments. Lists all users with role assignments - **List all Okta attack protection authenticator settings** (List). Retrieve the authenticator settings. Retrieves the Authenticator Settings for an org - **List all Okta attack protection user lockout settings** (List). Retrieve the user lockout settings. Retrieves the User Lockout Settings for an org - **Update a Okta attack protection user lockout setting by ID** (Update). Replace the user lockout settings. Replaces the User Lockout Settings for an org - **Create a Okta authenticator enrollments phone** (Create). Create an auto-activated Phone authenticator enrollment. Creates a Phone authenticator enrollment that's automatically activated. Required: user_id. - **Get single Okta authenticator by ID** (Get). Retrieve an authenticator. Retrieves an authenticator from your Okta organization by authenticatorId. Required: id. - **Create a Okta authenticator** (Create). Create an authenticator. Creates an authenticator - **Update a Okta authenticator by ID** (Update). Replace an authenticator. Replaces the properties for an authenticator identified by authenticatorId. Required: id. - **Create a Okta authorization server** (Create). Create an authorization server. Creates an authorization server - **Create a Okta background image** (Create). Upload the background image. Uploads and replaces the background image for the theme. Required: brand_id, theme_id. - **Delete a Okta behavior by ID** (Delete). Delete a behavior detection rule. Deletes a Behavior Detection Rule by behaviorId. Required: id. - **Create a Okta binding** (Create). Create a role resource set binding. Creates a binding for the resource set, custom role, and members (users or groups) . Required: resource_set_id_or_label. - **Create a Okta bounces remove list** (Create). Remove bounced emails. Removes emails from an email service bounce list. - **List all Okta brands** (List). List all brands. Lists all the brands in your org - **Update a Okta brand by ID** (Update). Replace a brand. Replaces a brand by brandId Passing an invalid brandId returns a 404 Not Found status code with the error code E0000007. Required: id. - **Create a Okta bulk delete** (Create). Upload the data to be deleted in Okta. Uploads external IDs of entities that need to be deleted in Okta from the identity source for the given session. Required: identity_source_id, session_id. - **Create a Okta bulk group memberships upsert** (Create). Upload the group memberships to be upserted in Okta. Uploads the group memberships that need to be inserted or updated in Okta from the identity source for the given session. Required: identity_source_id, session_id. - **Create a Okta bulk groups delete** (Create). Upload the group external IDs to be deleted in Okta. Uploads external IDs of groups that need to be deleted in Okta from the identity source for the given session. Required: identity_source_id, session_id. - **Create a Okta bulk groups upsert** (Create). Upload the group profiles without memberships to be upserted in Okta. Uploads the group profiles without memberships that need to be inserted or updated in Okta from the identity source for the given session. Required: identity_source_id, session_id. - **List all Okta captchas** (List). List all CAPTCHA instances. Lists all CAPTCHA instances with pagination support. - **Update a Okta captcha by ID** (Update). Replace a CAPTCHA instance. Replaces the properties for a specified CAPTCHA instance. Required: id. - **Okta captchas replace** (Action). Update a CAPTCHA instance. Partially updates the properties of a specified CAPTCHA instance. Required: id. - **List all Okta claims** (List). List all custom token claims. Lists all custom token Claims defined for a specified custom authorization server. Required: auth_server_id. - **Update a Okta classification by ID** (Update). Replace the user's classification. Replaces the user's classification. Required: user_id. - **List all Okta clients** (List). List all client resources for an authorization server. Lists all client resources for which the specified authorization server has tokens. Required: auth_server_id. - **Get single Okta connection by ID** (Get). Retrieve the default provisioning connection. Retrieves the default provisioning connection for an app. Required: app_id. - **Create a Okta credentials change recovery question** (Create). Update recovery question. Updates a user's recovery question and answer credential by validating the user's current password. Required: user_id. - **Get single Okta customization by ID** (Get). Retrieve an email customization. Retrieves an email customization by its unique identifier If Custom languages for Okta Email Templates is disabled, requests to retrieve an additional language customization by ID result in a 404 Not Found error response. Required: brand_id, template_name, id. - **List all Okta customizeds** (List). Retrieve the customized content of the specified well-known URI. Retrieves the customized content of a well-known URI for a specific brand and well-known URI path. Required: brand_id, path. - **List all Okta cwo connections** (List). Retrieve all Cross App Access connections. Retrieves inbound and outbound Cross App Access connections associated with an app. Required: app_id. - **Create a Okta cwo connection** (Create). Create a Cross App Access connection. Creates a Cross App Access connection. Required: app_id. - **List all Okta default content previews** (List). Retrieve a preview of the email template default content. Retrieves a preview of an Email Template's default content. Required: brand_id, template_name. - **List all Okta dependencies** (List). List all dependencies. Lists all feature dependencies for a specified feature. Required: feature_id. - **Create a Okta device assurance** (Create). Create a device assurance policy. Creates a new device assurance policy - **Update a Okta device assurance by ID** (Update). Replace a device assurance policy. Replaces a device assurance policy by deviceAssuranceId. Required: id. - **List all Okta device integrations** (List). List all device integrations. Lists all device integrations for your org. - **Get single Okta device integration by ID** (Get). Retrieve a device integration. Retrieves a device integration by deviceIntegrationId. Required: id. - **List all Okta device posture checks** (List). List all device posture checks. Lists all device posture checks - **Create a Okta device posture check** (Create). Create a device posture check. Creates a device posture check - **Update a Okta device posture check by ID** (Update). Replace a device posture check. Replaces a device posture check by postureCheckId. Required: id. - **Delete a Okta device posture check by ID** (Delete). Delete a device posture check. Deletes a device posture check by postureCheckId. Required: id. - **List all Okta devices** (List). List all devices. Lists all devices with pagination support. - **Delete a Okta device by ID** (Delete). Delete a device. Deletes (permanently) a device by deviceId if it has a status of DEACTIVATED. Required: id. - **List all Okta domains** (List). List all domains associated with a brand. Lists all domains associated with a brand by brandId. Required: brand_id. - **Update a Okta domain by ID** (Update). Replace a custom domain's brand. Replaces a custom domain's brand. Required: id. - **Okta domains verify** (Verify). Verify a custom domain. Verifies the custom domain and validity of DNS records by domainId. Required: id. - **List all Okta email domains** (List). List all email domains. Lists all the Email Domains in your org - **Update a Okta email domain by ID** (Update). Replace an email domain. Replaces associated username and sender display name by emailDomainId. Required: id. - **Delete a Okta email domain by ID** (Delete). Delete an email domain. Deletes an Email Domain by emailDomainId. Required: id. - **List all Okta email servers** (List). List all enrolled SMTP servers. Lists all the enrolled custom SMTP server configurations - **Update a Okta email server by ID** (Update). Update an SMTP server configuration. Updates the specified custom SMTP server configuration .0 authentication, the authType property is required in the request body. Required: id. - **Delete a Okta enrollment by ID** (Delete). Delete a WebAuthn preregistration factor. Deletes a specific WebAuthn preregistration factor for a user. Required: user_id, authenticator_enrollment_id. - **Update a Okta error customized by ID** (Update). Replace the customized error page. Replaces the customized error page. Required: brand_id. - **Delete a Okta error preview by ID** (Delete). Delete the preview error page. Deletes the preview error page. Required: brand_id. - **Get single Okta event hook by ID** (Get). Retrieve an event hook. Retrieves an event hook. Required: id. - **Update a Okta event hook by ID** (Update). Replace an event hook. Replaces an event hook. Required: id. - **List all Okta factors** (List). List all enrolled factors. Lists all enrolled factors for the specified user that are included in the highest priority authenticator enrollment policy that applies to the user. Required: user_id. - **Delete a Okta factor by ID** (Delete). Unenroll a factor. Unenrolls an existing factor for the specified user. Required: user_id, id. - **List all Okta factors catalogs** (List). List all supported factors. Lists all the supported factors that can be enrolled for the specified user that are included in the highest priority authenticator enrollment policy that applies to the user. Required: user_id. - **List all Okta factors questions** (List). List all supported security questions. Lists all available security questions for the specified user. Required: user_id. - **Create a Okta favicon** (Create). Upload the favicon. Uploads and replaces the favicon for the theme. Required: brand_id, theme_id. - **Delete a Okta favicon by ID** (Delete). Delete the favicon. Deletes a theme favicon. Required: brand_id, theme_id. - **Create a Okta federated claim** (Create). Create a federated claim. Creates a claim that will be included in tokens produced by federation protocols (for example: OIDC id_tokens or SAML Assertions). Required: app_id. - **Update a Okta federated claim by ID** (Update). Replace a federated claim. Replaces a claim that will be included in tokens produced by federation protocols (for example: OIDC id_tokens or SAML Assertions). Required: app_id, claim_id. - **List all Okta first party app settings** (List). Retrieve the Okta application settings. Retrieves the settings for an Okta app (also known as an Okta first-party app). Required: app_name. - **Create a Okta governance bundle** (Create). Create a governance bundle. Creates a governance bundle of entitlements for the Admin Console - **Create a Okta governance opt in** (Create). Opt in the Admin Console to entitlement management. Opts in the Admin Console to entitlement management - **List all Okta governances** (List). Retrieve all user role governance sources. Retrieves the governance sources of a role (identified by roleAssignmentId) that's assigned to a user (identified by userId). Required: user_id, role_assignment_id. - **List all Okta grants** (List). List all app grants. Lists all scope consent Grants for the app. Required: app_id. - **List all Okta group push mappings** (List). List all group push mappings. Lists all group push mappings with pagination support. Required: app_id. - **Create a Okta group push mapping** (Create). Create a group push mapping. Creates or links a group push mapping. Required: app_id. - **Create a Okta groups modify** (Create). Update an external directory group membership. Updates an Active Directory or LDAP group membership directly in the Active Directory or LDAP server. Required: app_instance_id. - **Get single Okta groups rule by ID** (Get). Retrieve a group rule. Retrieves a specific group rule by ID from your org. Required: id. - **Delete a Okta groups rule by ID** (Delete). Delete a group rule. Deletes a specific group rule by groupRuleId. Required: id. - **Get single Okta hook key by ID** (Get). Retrieve a key by ID. Retrieves the public portion of the Key object using the id parameter . Required: id. - **Update a Okta hook key by ID** (Update). Replace a key. Replaces a key by id This request replaces existing properties after passing validation. Required: id. - **Delete a Okta hook key by ID** (Delete). Delete a key. Deletes a key by id. Required: id. - **Get single Okta hook keys public by ID** (Get). Retrieve a public key. Retrieves a public key by keyId . Required: id. - **Delete a Okta iam role by ID** (Delete). Delete a custom role. Deletes a custom role by roleIdOrLabel. Required: id. - **Delete a Okta idp by ID** (Delete). Delete an IdP. Deletes an identity provider (IdP) integration by idpId * All existing IdP users are unlinked with the highest order profile source taking precedence for each IdP user. Required: id. - **List all Okta inline hooks** (List). List all inline hooks. Lists all inline hooks or all inline hooks of a specific type. - **Get single Okta inline hook by ID** (Get). Retrieve an inline hook. Retrieves an inline hook by inlineHookId. Required: id. - **Okta inline hooks replace** (Action). Update an inline hook. Updates an inline hook by inlineHookId. Required: id. - **List all Okta integrations API services** (List). List all API service integration instances. Lists all API Service Integration instances with a pagination option - **Create a Okta integrations API service** (Create). Create an API service integration instance. Creates and authorizes an API Service Integration instance - **List all Okta interclient allowed apps** (List). List all allowed apps for a target app. Lists all apps allowed by this app to request interclient SSO using the interclient token. Required: app_id. - **Create a Okta interclient allowed app** (Create). Create an allowed app mapping for a target app. Creates a mapping between the target app and an allowed app for interclient SSO using the interclient token. Required: app_id. - **Delete a Okta interclient allowed app by ID** (Delete). Delete an interclient trust mapping. Deletes the mapping between the target app and an allowed app. Required: app_id, allowed_app_id. - **List all Okta interclient target apps** (List). List all target apps for an allowed app. Lists all the target apps that allow this app to request interclient SSO using an interclient token. Required: app_id. - **List all Okta keys actives** (List). List the active signing key credential for IdP. Lists the active signing key credential for an identity provider (IdP). Required: idp_id. - **Okta lifecycle activates activate app default connection** (Activate). Activate the default provisioning connection. Activates the default provisioning connection for an app. Required: app_id. - **Okta lifecycle activates activate authenticator** (Activate). Activate an authenticator. Activates an authenticator by authenticatorId. Required: authenticator_id. - **Okta lifecycle activates activate authenticator method** (Activate). Activate an authenticator method. Activates a method for an authenticator identified by authenticatorId and methodType. Required: authenticator_id, id. - **Lifecycle activates activate authorization server policy rule** (Activate). Activate a policy rule. Activates an authorization server policy rule. Required: auth_server_id, policy_id, rule_id. - **Okta lifecycle deactivates deactivate app default connection** (Deactivate). Deactivate the default provisioning connection. Deactivates the default provisioning connection for an app. Required: app_id. - **Okta lifecycle deactivates deactivate authenticator method** (Deactivate). Deactivate an authenticator method. Deactivates a method for an authenticator identified by authenticatorId and methodType. Required: authenticator_id, id. - **Create a Okta lifecycle expire password** (Create). Expire the password. Expires the password. Required: id. - **Create a Okta lifecycle reset factor** (Create). Reset the factors. Resets all factors for the specified user. Required: id. - **Create a Okta lifecycle unlock** (Create). Unlock a user. Unlocks a user with a LOCKED_OUT status or unlocks a user with an ACTIVE status that's blocked from unknown devices. Required: id. - **Okta lifecycle unsuspends unsuspend user** (Action). Unsuspend a user. Unsuspends a user and returns them to the ACTIVE state. Required: id. - **Create a Okta lifecycle verify** (Create). Verify an event hook. Verifies that the event hook matches the provided eventHookId. Required: event_hook_id. - **List all Okta linked objects** (List). List the primary or all of the associated linked object values. Lists either the self link for the primary user or all associated users in the relationship specified by relationshipName. Required: user_id_or_login, relationship_name. - **Delete a Okta linked object by ID** (Delete). Delete a linked object value. Deletes any existing relationship between the associated and primary user. Required: user_id_or_login, relationship_name. - **Delete a Okta log stream by ID** (Delete). Delete a log stream. Deletes a log stream object from your org by ID. Required: id. - **Create a Okta logo** (Create). Upload an application logo. Uploads a logo for the app instance. Required: app_id. - **Delete a Okta logo by ID** (Delete). Delete the logo. Deletes a Theme logo. Required: brand_id, theme_id. - **Get single Okta mapping by ID** (Get). Retrieve a profile mapping. Retrieves a single profile mapping referenced by its ID. Required: id. - **Create a Okta mark error** (Create). Assign the fulfillment error status to a WebAuthn preregistration factor. Assigns the fulfillment error status to a WebAuthn preregistration factor for a user. Required: user_id, authenticator_enrollment_id. - **Delete a Okta membership by ID** (Delete). Delete the memberships for the specified identity source group. Deletes group memberships for the specified identity source group using member external IDs. Required: identity_source_id, group_or_external_id, member_external_id. - **Get single Okta meta uischema by ID** (Get). Retrieve a UI schema. Retrieves a UI Schema by id. Required: id. - **Update a Okta meta uischema by ID** (Update). Replace a UI schema. Replaces a UI Schema by id. Required: id. - **List all Okta methods** (List). List all methods of an authenticator. Lists all methods of an authenticator identified by authenticatorId. Required: authenticator_id. - **Update a Okta method by ID** (Update). Replace an authenticator method. Replaces a method of methodType for an authenticator identified by authenticatorId. Required: authenticator_id, method_type. - **Create a Okta oauth 2 callback** (Create). Verify the provisioning connection. Verifies the OAuth 2.0-based connection as part of the OAuth 2.0 consent flow. Required: app_name, app_id. - **Create a Okta Okta communication opt out** (Create). Opt out of Okta user communication emails. Opts out all users of this org from Okta communication emails - **Update a Okta Okta personal settings edit feature by ID** (Update). Replace the Okta Personal admin settings. Replaces Okta Personal admin settings in a Workforce org - **List all Okta Okta support cases** (List). List all Okta Support cases. Lists all Okta Support cases that the requesting principal has permission to view - **Delete a Okta org captcha by ID** (Delete). Delete the org-wide CAPTCHA settings. Deletes the CAPTCHA settings object for your organization - **Update a Okta org contact by ID** (Update). Replace the contact type user. Replaces the user associated with the specified contact type. Required: contact_type. - **Create a Okta owner** (Create). Assign a group owner. Assigns a group owner. Required: group_id. - **Delete a Okta permission by ID** (Delete). Delete a custom role permission. Deletes a permission (identified by permissionType) from a custom role. Required: role_id_or_label, permission_type. - **Get single Okta policy by ID** (Get). Retrieve a policy. Retrieves a policy. Required: id. - **Create a Okta policy** (Create). Create a policy. Creates a policy. Required: auth_server_id. - **Update a Okta policy by ID** (Update). Replace a policy. Replaces the properties of a policy identified by policyId. Required: id. - **Delete a Okta policy by ID** (Delete). Delete a policy. Deletes a policy. Required: id. - **Okta policies bulk update** (Update). Assign an app sign-in policy. Assigns an app to an app sign-in policy, identified by policyId. Required: app_id, policy_id. - **Okta policies clone** (Action). Clone an existing policy. Clones an existing policy. Required: policy_id. - **Create a Okta policies simulate** (Create). Create a policy simulation. Creates a policy or policy rule simulation. - **List all Okta principal rate limits** (List). List all principal rate limits. Lists all Principal Rate Limit entities considering the provided parameters - **Get single Okta principal rate limit by ID** (Get). Retrieve a principal rate limit. Retrieves a principal rate limit entity by principalRateLimitId. Required: id. - **Update a Okta principal rate limit by ID** (Update). Replace a principal rate limit. Replaces a principal rate limit entity by principalRateLimitId. Required: id. - **List all Okta privacy Okta supports** (List). Retrieve the Okta Support settings. Retrieves Okta Support Settings for your org - **Get single Okta privileged access Okta service account by ID** (Get). Retrieve an Okta managed user account. Retrieves an Okta managed user account specified by ID. Required: id. - **Create a Okta privileged access service account** (Create). Create an app service account. Creates a new app service account for managing an app account - **Delete a Okta privileged access service account by ID** (Delete). Delete an app service account. Deletes an app service account specified by ID. Required: id. - **List all Okta push providers** (List). List all push providers. Lists all push providers - **Update a Okta push provider by ID** (Update). Replace a push provider. Replaces a push provider by pushProviderId. Required: id. - **Create a Okta query** (Create). Submit a query for AD Group. Submits a query search on the on-premises agent to asynchronously fetch specific Active Directory (AD) attributes for a group. Required: app_instance_id, group_id. - **List all Okta rate limit settings admin notifications** (List). Retrieve the rate limit admin notification settings. Retrieves the currently configured Rate Limit Admin Notification Settings - **List all Okta rate limit settings per clients** (List). Retrieve the per-client rate limit settings. Retrieves the currently configured Per-Client Rate Limit Settings - **Create a Okta realm assignment** (Create). Create a realm assignment. Creates a new realm assignment - **Update a Okta realm assignment by ID** (Update). Replace a realm assignment. Replaces a realm assignment. Required: id. - **List all Okta realm assignments operations** (List). List all realm assignment operations. Lists all realm assignment operations. - **List all Okta realms** (List). List all realms. Lists all realms. - **Get single Okta realm by ID** (Get). Retrieve a realm. Retrieves a realm. Required: id. - **Create a Okta resource** (Create). Add a resource set resource with conditions. Adds a resource with conditions for a resource set. Required: resource_set_id_or_label. - **Update a Okta resource by ID** (Update). Replace the resource set resource conditions. Replaces the conditions of a resource identified by resourceId in a resource set. Required: resource_set_id_or_label, id. - **Okta resources bulk update** (Update). Add more resources to a resource set. Adds more resources to a resource set. Required: resource_set_id_or_label. - **Create a Okta resourceservercredentials key** (Create). Add a JSON Web Key. Adds a new JSON Web Key to the custom authorization servers JSON web keys. Required: auth_server_id. - **Delete a Okta resourceservercredentials key by ID** (Delete). Delete a Custom Authorization Server Public JSON Web Key. Deletes a custom authorization server public JSON web key by key id. Required: auth_server_id, key_id. - **Update a Okta risk by ID** (Update). Upsert the user's risk. Upserts (creates or updates) the user risk object for a user ID. Required: user_id. - **Delete a Okta rule by ID** (Delete). Delete a policy rule. Deletes a Policy Rule defined in the specified Custom Authorization Server and Policy. Required: auth_server_id, policy_id, id. - **Create a Okta schemas group** (Create). Update the group profile schema. Updates the group profile schema. - **Get single Okta schemas user by ID** (Get). Retrieve a user schema. Retrieves the schema for a user type. Required: id. - **List all Okta scopes** (List). List all custom token scopes. Lists all custom token scopes. Required: auth_server_id. - **Update a Okta scope by ID** (Update). Replace a custom token scope. Replaces a custom token scope. Required: auth_server_id, id. - **List all Okta security events providers** (List). List all security events providers. Lists all security events provider instances - **Delete a Okta security events provider by ID** (Delete). Delete a security events provider. Deletes a security events provider instance specified by id. Required: id. - **Create a Okta session** (Create). Create an identity source session. Creates an identity source session for the given identity source instance. Required: identity_source_id. - **List all Okta settings** (List). Retrieve the email template settings. Retrieves an email template's settings. Required: brand_id, template_name. - **Update a Okta sign in customized by ID** (Update). Replace the customized sign-in page. Replaces the customized sign-in page. Required: brand_id. - **List all Okta sign in previews** (List). Retrieve the preview sign-in page preview. Retrieves the preview sign-in page. Required: brand_id. - **Update a Okta sign in preview by ID** (Update). Replace the preview sign-in page. Replaces the preview sign-in page. Required: brand_id. - **Delete a Okta sign in preview by ID** (Delete). Delete the preview sign-in page. Deletes the preview sign-in page. Required: brand_id. - **List all Okta sign out customizeds** (List). Retrieve the sign-out page settings. Retrieves the sign-out page settings. Required: brand_id. - **List all Okta ssf streams** (List). Retrieve the SSF stream configuration(s). Retrieves either a list of all known SSF stream configurations or the individual configuration if specified by ID. - **Okta ssf streams partial update** (Update). Update an SSF stream. Updates properties for an existing SSF stream configuration. - **Create a Okta start import** (Create). Start the import from the identity source. Starts the import from the identity source described by the uploaded bulk operations. Required: identity_source_id, session_id. - **List all Okta stream status** (List). Retrieve the SSF stream status. Retrieves the status of an SSF stream. - **List all Okta targets** (List). Retrieve a role target by assignment type. Retrieves all role targets for an APP_ADMIN, USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user by user or group assignment type. Required: user_id, role_id_or_encoded_role_id. - **List all Okta telephony providers** (List). List all custom telephony providers. Lists all custom telephony providers that are configured in your org - **Get single Okta telephony provider by ID** (Get). Retrieve a custom telephony provider. Retrieves the details of a custom telephony provider by its ID. Required: id. - **Create a Okta telephony provider** (Create). Create a custom telephony provider. Creates a custom telephony provider with the provided credentials - **Update a Okta telephony provider by ID** (Update). Update a custom telephony provider credential. Updates the credentials of an existing custom telephony provider. Required: id. - **List all Okta templates emails** (List). List all email templates. Lists all supported email templates. Required: brand_id. - **Update a Okta templates sm by ID** (Update). Replace an SMS template. Replaces the SMS Template . Required: id. - **Okta templates sms replace** (Action). Update an SMS template. Updates only some of the SMS Template properties: * All properties within the custom SMS Template that have values are updated. Required: id. - **Update a Okta theme by ID** (Update). Replace a theme. Replaces a theme for a brand. Required: brand_id, id. - **Create a Okta threats configuration** (Create). Update the ThreatInsight configuration. Updates the ThreatInsight configuration for the org - **List all Okta trusted origins** (List). List all trusted origins. Lists all trusted origins - **Create a Okta trusted origin** (Create). Create a trusted origin. Creates a trusted origin - **Create a Okta types user** (Create). Create a user type. Creates a new user type. - **Create a Okta unsubscribe** (Create). Unsubscribe a role from a specific notification type. Unsubscribes a Role from a specified notification type. Required: role_ref, notification_type. - **Create a Okta update** (Create). Create an agent pool update. Creates an agent pool update. Required: pool_id. - **Delete a Okta update by ID** (Delete). Delete an agent pool update. Deletes agent pool update. Required: pool_id, id. - **Okta updates pause** (Pause). Pause an agent pool update. Pauses a running or queued agent pool update. Required: pool_id, id. - **Okta updates resume** (Resume). Resume an agent pool update. Resumes a running or queued agent pool update. Required: pool_id, id. - **Okta updates stop** (Stop). Stop an agent pool update. Stops an agent pool update. Required: pool_id, id. - **Okta updates replace** (Action). Update an agent pool update by ID. Updates an agent pool update instance and returns the latest agent pool update. Required: pool_id, id. - **List all Okta updates settings** (List). Retrieve an agent pool update's settings. Retrieves the current state of the agent pool update instance settings. Required: pool_id. - **Create a Okta updates setting** (Create). Update an agent pool update settings. Updates an agent pool update instance settings. Required: pool_id. - **List all Okta user authenticator enrollments** (List). List all authenticator enrollments. Lists all authenticator enrollments of the specified user. Required: user_id. - **Delete a Okta user authenticator enrollment by ID** (Delete). Delete an authenticator enrollment. Deletes an existing enrollment for the specified user. Required: user_id, id. - **List all Okta values** (List). List all values for a governance bundle entitlement. Lists all entitlement values that are specific to a governance bundle entitlement. Required: bundle_id, entitlement_id. - **Create a Okta webauthn registration enroll** (Create). Enroll a preregistered WebAuthn factor. Enrolls a preregistered WebAuthn factor. - **Create a Okta webauthn registration initiate fulfillment request** (Create). Generate a fulfillment request. Generates a fulfillment request by sending a WebAuthn preregistration event to start the flow. - **Create a Okta webauthn registration send pin** (Create). Send a PIN to user. Sends the decoded PIN for the specified WebAuthn preregistration enrollment. - **List all Okta well known assetlinks jsons** (List). Retrieve the customized assetlinks.json URI content. Retrieves the content of the assetlinks.json well-known URI - **List all Okta well known Okta organizations** (List). Retrieve the Org metadata. Retrieves the org metadata, which includes the org ID, configured custom domains, and authentication pipeline - **List all Okta well known ssf configurations** (List). Retrieve the SSF transmitter metadata. Retrieves SSF transmitter configuration metadata. - **Get single Okta yubikey token token by ID** (Get). Retrieve a YubiKey OTP token. Retrieves the specified YubiKey OTP token by id. Required: id. - **Update a Okta zone by ID** (Update). Replace a network zone. Replaces a Network Zone by zoneId. Required: id. - **List all Okta group role catalog app targets** (List). List all group role app targets. Lists all app targets for an APP_ADMIN role assignment to a group. Required: group_id, role_assignment_id. - **Okta group role catalog app targets delete instance** (Delete). Unassign a group role app instance target. Unassigns an app instance target from an APP_ADMIN role assignment to a group . Required: group_id, role_assignment_id, app_name, app_id. - **Update a Okta user role catalog app target by ID** (Update). Assign all apps as target to admin role. Assigns all apps as target to an APP_ADMIN role. Required: user_id, role_assignment_id. - **Okta user role catalog app targets update instance** (Update). Assign an admin role app instance target. Assigns an app instance target to an APP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, app_name, app_id. - **Delete a Okta user role catalog app target by ID** (Delete). Unassign an admin role app target. Unassigns an OIN app target from an APP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, app_name. - **List all Okta oauth client role catalog app targets** (List). List all client role app targets. Lists all OIN app targets for an APP_ADMIN role that's assigned to a client (by clientId). Required: client_id, role_assignment_id. - **Okta oauth client role catalog app targets update instance** (Update). Assign a client role app instance target. Assigns an app instance target to an APP_ADMIN role assignment to a client. Required: client_id, role_assignment_id, app_name, app_id. - **List all Okta app certificate csrs** (List). List all certificate signing requests. Lists all certificate signing requests for an app. Required: app_id. - **Delete a Okta app certificate csr by ID** (Delete). Revoke a certificate signing request. Revokes a certificate signing request and deletes the key pair from the app. Required: app_id, id. - **List all Okta idp certificate csrs** (List). List all certificate signing requests. Lists all certificate signing requests (CSRs) for an identity provider (IdP). Required: idp_id. - **Get single Okta app jwk by ID** (Get). Retrieve an OAuth 2.0 client JSON Web Key. Retrieves an OAuth 2.0 client JSON Web Key by keyId. Required: app_id, id. - **Create a Okta app jwk** (Create). Add a JSON Web Key. Adds a new JSON Web Key to the clients JSON Web Keys. Required: app_id. - **Delete a Okta app jwk by ID** (Delete). Delete an OAuth 2.0 client JSON Web Key. Deletes an OAuth 2.0 Client JSON Web Key by keyId. Required: app_id, id. - **List all Okta app credentials keys** (List). List all key credentials. Lists all key credentials for an app. Required: app_id. - **Get single Okta app credentials key by ID** (Get). Retrieve a key credential. Retrieves a specific application key credential by kid. Required: app_id, id. - **Okta app credentials keys clone** (Action). Clone a key credential. Clones an X.509 certificate for an application key credential from a source app to a target app. Required: app_id, id. - **Get single Okta authorization server credentials key by ID** (Get). Retrieve an authorization server key. Retrieves an Authorization Server Key specified by the keyId. Required: auth_server_id, id. - **List all Okta org idp credentials keys** (List). List all IdP key credentials. Lists all identity provider (IdP) key credentials - **Get single Okta org idp credentials key by ID** (Get). Retrieve an IdP key credential. Retrieves a specific identity provider (IdP) key credential by kid. Required: id. - **Create a Okta org idp credentials key** (Create). Create an IdP key credential. Creates a new X.509 certificate credential in the identity provider (IdP) key store . - **List all Okta idp credentials keys** (List). List all signing key credentials for IdP. Lists all signing key credentials for an identity provider (IdP). Required: idp_id. - **Get single Okta idp credentials key by ID** (Get). Retrieve a signing key credential for IdP. Retrieves a specific identity provider (IdP) key credential by kid. Required: idp_id, id. - **Okta idp credentials keys clone** (Action). Clone a signing key credential for IdP. Clones an X.509 certificate for an identity provider (IdP) signing key credential from a source IdP to target IdP . Required: idp_id, id. - **Create a Okta app credentials secret** (Create). Create an OAuth 2.0 client secret. Creates an OAuth 2.0 client secret object with a new active client secret. Required: app_id. - **Delete a Okta app credentials secret by ID** (Delete). Delete an OAuth 2.0 client secret. Deletes an OAuth 2.0 client secret by secretId. Required: app_id, id. - **List all Okta API service credentials secrets** (List). List all API service integration instance secrets. Lists all client secrets for an API Service Integration instance by apiServiceId. Required: api_service_id. - **Create a Okta API service credentials secret** (Create). Create an API service integration instance secret. Creates an API Service Integration instance Secret object with a new active client secret. Required: api_service_id. - **Get single Okta disaster recovery status by ID** (Get). Retrieve the disaster recovery status for a domain. Retrieves the failover or failback status for the domain specified in the request path. Required: domain. - **Get single Okta org feature by ID** (Get). Retrieve a feature. Retrieves a feature by ID. Required: id. - **Create a Okta org feature** (Create). Update a feature lifecycle. Updates a feature's lifecycle status. Required: lifecycle, id. - **Get single Okta app federated claim by ID** (Get). Retrieve a federated claim. Retrieves a federated claim by claimId. Required: app_id, claim_id. - **Okta user grants bulk delete** (Delete). Revoke all user grants. Revokes all grants for a specified user. Required: user_id. - **Create a Okta identity source group** (Create). Create an identity source group. Creates a group in an identity source for the given identity source instance. Required: identity_source_id. - **Create a Okta brand theme logo** (Create). Upload the logo. Uploads and replaces the logo for the theme. Required: brand_id, theme_id. - **Create a Okta policy mapping** (Create). Map a resource to a policy. Maps a resource to a policy identified by policyId . Required: policy_id. - **Update a Okta authorization server policy by ID** (Update). Replace a policy. Replaces a policy. Required: auth_server_id, id. - **List all Okta org policies** (List). List all policies. Lists all policies with the specified type - **List all Okta user role governance resources** (List). Retrieve the user role governance source resources. Retrieves the resources of a governance source (identified by grantId) for a role (identified by roleAssignmentId) that's assigned to a user (identified by userId). Required: user_id, role_assignment_id, grant_id. - **Get single Okta oauth client role by ID** (Get). Retrieve a client role. Retrieves a role assignment (identified by roleAssignmentId) for a client app (identified by clientId). Required: client_id, id. - **Create a Okta oauth client role** (Create). Assign a client role. Assigns a standard role to a client app. Required: client_id. - **Get single Okta policy rule by ID** (Get). Retrieve a policy rule. Retrieves a policy rule. Required: policy_id, id. - **Create a Okta policy rule** (Create). Create a policy rule. Creates a policy rule . Required: policy_id. - **Delete a Okta policy rule by ID** (Delete). Delete a policy rule. Deletes a policy rule identified by policyId and ruleId. Required: policy_id, id. - **Get single Okta log stream schema by ID** (Get). Retrieve the log stream schema for the schema type. Retrieves the schema for a log stream type. Required: log_stream_type. - **Delete a Okta Okta session by ID** (Delete). Revoke a session. Revokes the specified session. Required: id. - **Okta user notification subscriptions subscribe** (Action). Subscribe a user to a specific notification type. Subscribes the current user to a specified notification type. Required: user_id, notification_type. - **Okta user notification subscriptions unsubscribe** (Action). Unsubscribe a user from a specific notification type. Unsubscribes the current user from a specified notification type. Required: user_id, notification_type. - **List all Okta group role group targets** (List). List all group role group targets. Lists all group targets for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a group. Required: group_id, role_assignment_id. - **Delete a Okta group role group target by ID** (Delete). Unassign a group role group target. Unassigns a group target from a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a group. Required: group_id, role_assignment_id, target_group_id. - **List all Okta user role group targets** (List). List all admin role group targets. Lists all group targets for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id. - **Delete a Okta user role group target by ID** (Delete). Unassign an admin role group target. Unassigns a group target from a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, group_id. - **List all Okta oauth client role group targets** (List). List all client role group targets. Lists all group targets for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a client. Required: client_id, role_assignment_id. - **Update a Okta oauth client role group target by ID** (Update). Assign a client role group target. Assigns a group target to a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a client app. Required: client_id, role_assignment_id, group_id. - **Okta telephony provider tests test** (Test). Send a test message from a custom telephony provider. Sends a test message (SMS or call) using the specified custom telephony provider to verify that the provider is configured correctly. Required: custom_telephony_provider_id. - **List all Okta authorization server client tokens** (List). List all refresh tokens for a client. Lists all refresh tokens issued by an authorization server for a specific Client. Required: auth_server_id, client_id. - **Okta authorization server client tokens bulk delete** (Delete). Revoke all refresh tokens for a client. Revokes all refresh tokens for a Client. Required: auth_server_id, client_id. - **Get single Okta user client token by ID** (Get). Retrieve a refresh token for a client. Retrieves a refresh token issued for the specified user and client. Required: user_id, client_id, id. - **Delete a Okta user client token by ID** (Delete). Revoke a token for a client. Revokes the specified refresh and access tokens. Required: user_id, client_id, id. - **Get single Okta user linked object schema by ID** (Get). Retrieve a linked object definition. Retrieves a Linked Object definition. Required: linked_object_name. - **List all Okta idp users** (List). List all users for IdP. Lists all the users linked to an identity provider (IdP). Required: idp_id. - **Create a Okta idp user** (Create). Link a user to IdP. Links an Okta user to an existing SAML or social identity provider (IdP). Required: idp_id, id. - **Delete a Okta idp user by ID** (Delete). Unlink a user from IdP. Unlinks the Okta user and the identity provider (IdP) user. Required: idp_id, id. - **Get single Okta brand well known uris by ID** (Get). Retrieve the well-known URI of a specific brand. Retrieves the well-known URI of a specific brand and well-known URI path. Required: brand_id, id.