Okta
Okta is the workforce identity incumbent — its Identity Cloud platform (also called the Okta Workforce Identity Platform) covers Single Sign-On, Adaptive MFA, Universal Directory, Lifecycle Management, Identity Governance, Privileged Access, Device Access, Identity Threat Protection, Identity Security Posture Management, Access Gateway, and API Access Management. Customer identity is handled by Auth0, which Okta acquired in 2021 and now operates as its consumer-facing identity arm. The platform now extends to securing AI agents via Okta for AI Agents and the Cross-App Access (XAA) protocol — an emerging OAuth profile based on the IETF ID-JAG draft for agent-to-app authorization. The Okta Management API is the primary developer surface, with an official MCP server (okta-mcp-server) exposing administrative operations to LLM agents under human-in-the-loop confirmation.
Reference-quality API operations across every facet — a rich contract, published governance, transparent operations, and machine-readable commercial terms.
API Evangelist profiles Okta the way a machine reads it — 552 machine-readable artifacts across 28 APIs, pulled from the provider's own public surface and indexed so a developer, an analyst, or an AI agent can evaluate it against every other provider on the network.
Every provider in the network is reduced to the same set of machine-readable artifacts — OpenAPI contracts, event specifications, GraphQL schemas, runnable collections, pricing and rate-limit signals, security posture, OAuth scopes, and the agent surfaces (MCP servers and skills) that let software drive the API on its own. We profile them because the interface is the part of a company you can actually inspect: it is a truer signal of what a provider does than any marketing page. From those artifacts we compute the Kin Score — Okta scores 74.7/100 (exemplar), with a separate agent-readiness read of 65/100 (agent native). The full breakdown is below, followed by every artifact we hold — each card links through to its machine-readable definition on apis.io.
Kin Score
This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance.
Kin Score
How this is scored →scored 2026-07-27 · rubric v0.5
How we profile Okta
Each block below is one kind of artifact we hold for Okta. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.
APIs 28
Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.
Individual APIs this provider publishes, each with its own machine-readable definition.
Cross-App Access (XAA)
Cross-App Access is Okta's emerging OAuth profile for secure agent-to-app and app-to-app authorization, based on the IETF draft "OAuth Identity Assertion Authorization Grant" (I...
Okta for AI Agents
Okta for AI Agents secures the full lifecycle of AI agents — discovery, registration with mandatory human ownership, least-privilege scope enforcement, runtime monitoring, and i...
Okta Application API
The Application API from Okta — 31 operation(s) for application.
Okta Authenticator API
The Authenticator API from Okta — 4 operation(s) for authenticator.
Okta AuthorizationServer API
The AuthorizationServer API from Okta — 21 operation(s) for authorizationserver.
Okta Brand API
The Brand API from Okta — 15 operation(s) for brand.
Okta Domain API
The Domain API from Okta — 4 operation(s) for domain.
Okta EventHook API
The EventHook API from Okta — 5 operation(s) for eventhook.
Okta Feature API
The Feature API from Okta — 5 operation(s) for feature.
Okta Group API
The Group API from Okta — 16 operation(s) for group.
Okta GroupSchema API
The GroupSchema API from Okta — 1 operation(s) for groupschema.
Okta IdentityProvider API
The IdentityProvider API from Okta — 16 operation(s) for identityprovider.
Okta InlineHook API
The InlineHook API from Okta — 5 operation(s) for inlinehook.
Okta LinkedObject API
The LinkedObject API from Okta — 2 operation(s) for linkedobject.
Okta Log API
The Log API from Okta — 1 operation(s) for log.
Okta NetworkZone API
The NetworkZone API from Okta — 4 operation(s) for networkzone.
Okta Org API
The Org API from Okta — 14 operation(s) for org.
Okta Policy API
The Policy API from Okta — 8 operation(s) for policy.
Okta ProfileMapping API
The ProfileMapping API from Okta — 2 operation(s) for profilemapping.
Okta Session API
The Session API from Okta — 3 operation(s) for session.
Okta Subscription API
The Subscription API from Okta — 6 operation(s) for subscription.
Okta Template API
The Template API from Okta — 2 operation(s) for template.
Okta ThreatInsight API
The ThreatInsight API from Okta — 1 operation(s) for threatinsight.
Okta TrustedOrigin API
The TrustedOrigin API from Okta — 4 operation(s) for trustedorigin.
Okta User API
The User API from Okta — 36 operation(s) for user.
Okta UserFactor API
The UserFactor API from Okta — 7 operation(s) for userfactor.
Okta UserSchema API
The UserSchema API from Okta — 2 operation(s) for userschema.
Okta UserType API
The UserType API from Okta — 2 operation(s) for usertype.
Scroll within the panel for all 28 ·
Postman Collections 1
A runnable collection turns the contract into something a developer can execute in seconds. We profile them because the fastest way to trust an API is to make a real call against it.
Ready-to-run Postman collections for exercising this provider's APIs.
Okta API
POSTMANArazzo Workflows 21
Real integrations are rarely a single call. Arazzo describes the multi-step sequences — auth, then create, then confirm — so both a human and an agent can follow the choreography, not just the endpoints.
Multi-step API workflows described with the Arazzo specification.
Okta Assign Admin Role to Group
Assign an administrator role to a group and verify the assignment.
ARAZZOOkta Assign Admin Role to User
Assign an administrator role to a user and verify the assignment.
ARAZZOOkta Assign Group to Application
Find a group by name and assign it to an application for bulk access.
ARAZZOOkta Create and Activate Application
Create an application in INACTIVE state and then activate it.
ARAZZOOkta Create and Activate Authenticator
Add an authenticator to the org and activate it for enrollment.
ARAZZOOkta Create and Activate Group Rule
Create a dynamic group rule and activate it so it begins evaluating.
ARAZZOOkta Create Application, Assign User, and Activate
Create an application, assign a user to it, then activate the application.
ARAZZOOkta Create Policy with Rule and Activate
Create a policy, add a rule to it, and activate the policy.
ARAZZOOkta Create User with Group Membership
Create a user pre-seeded with groups, then verify their memberships.
ARAZZOOkta Deactivate and Delete User
Deactivate a user and then permanently delete the deprovisioned account.
ARAZZOOkta Enroll and Activate User Factor
Enroll an MFA factor for a user and activate it with a passcode.
ARAZZOOkta Find User and Assign Application
Look up a user by login and assign them to an application if found.
ARAZZOOkta Onboard User to Group and Application
Create a user, add them to a group, then assign them to an application.
ARAZZOOkta Reset and Re-enroll User Factor
Reset all of a user's MFA factors and enroll a fresh factor.
ARAZZOOkta Update Group Rule Expression
Deactivate a group rule, update its expression, then reactivate it.
ARAZZOScroll within the panel for all 21 ·
MCP Servers 1
Model Context Protocol servers expose these APIs directly to AI agents. We profile them because agent-native access is the fastest-growing way this provider's capabilities actually get used.
Model Context Protocol servers that expose these APIs to AI agents.
Okta MCP Server
MCP SERVERGraphQL 1
Where a provider ships GraphQL, the schema is the contract. We profile it alongside the REST surface so the whole interface is legible in one place.
GraphQL schemas published by this provider.
Okta GraphQL Schema
Okta does not currently expose a public GraphQL API endpoint. The platform's primary developer surface is the Okta Management REST API, supplemented by the Events API (AsyncAPI)...
GRAPHQLPricing Plans 1
Pricing is part of the interface. Machine-readable plans tell you what a tier costs and includes before you commit — one of the six things the Kin Score reads for commercial clarity.
Published pricing tiers and plan structures.
Okta Plans Pricing
PLANSRate Limits 1
Rate limits are the difference between a demo that works and a production integration that doesn't fall over. Publishing them is an operational-transparency signal — and a hard requirement for any agent that plans its own throughput.
Documented rate limits and quota policies.
Okta Rate Limits
RATE LIMITSFinOps 1
Cost, billing, and metering signals let a buyer model the financial operations of an API before it's live. We profile them for the same reason we profile pricing: the money is part of the contract.
Cost, billing, and metering signals for API financial operations.
Okta Finops
FINOPSFeatures 19
The notable capabilities this provider advertises, captured as structured features so they can be searched and compared instead of read one landing page at a time.
Notable capabilities this provider offers.
Scroll within the panel for all 19 ·
Event Specifications 1
Not every API is request/response. AsyncAPI describes the event-driven and streaming side — the webhooks and channels — so the asynchronous half of the interface is documented the same way the synchronous half is.
AsyncAPI definitions for this provider's event-driven and streaming APIs.
Okta Event Hooks and Log Streams
AsyncAPI description of Okta's two outbound event delivery surfaces: 1. **Event Hooks** — Okta POSTs a CloudEvents-style envelope to a customer-owned HTTPS endpoint whenever a s...
ASYNCAPISemantic Vocabularies 1
JSON-LD contexts give the data shared meaning across APIs. We profile them because semantics are what let a machine reconcile 'customer' here with 'customer' somewhere else.
JSON-LD contexts and semantic vocabularies used across these APIs.
Okta Context
JSON-LDSpectral Rules 3
Governance rulesets we run against this provider's specs — the automated checks behind parts of the score. Profiling them makes the quality bar explicit and re-runnable, not a matter of opinion.
JSON Schema 462
Standalone JSON Schema definitions describe the data models behind the API. We profile them so the shapes are validatable on their own — useful long after a single request is forgotten.
Standalone JSON Schema definitions for this provider's data models.
AccessPolicy
JSON SCHEMAAccessPolicyConstraint
JSON SCHEMAAccessPolicyConstraints
JSON SCHEMAAccessPolicyRule
JSON SCHEMAAccessPolicyRuleActions
JSON SCHEMAAccessPolicyRuleApplicationSignOn
JSON SCHEMAAccessPolicyRuleConditions
JSON SCHEMAAccessPolicyRuleCustomCondition
JSON SCHEMAAcsEndpoint
JSON SCHEMAActivateFactorRequest
JSON SCHEMAAllowedForEnum
JSON SCHEMAAppAndInstancePolicyRuleCondition
JSON SCHEMAAppInstancePolicyRuleCondition
JSON SCHEMAOkta Application
JSON SCHEMAApplicationAccessibility
JSON SCHEMAApplicationCredentials
JSON SCHEMAApplicationCredentialsOAuthClient
JSON SCHEMAApplicationCredentialsScheme
JSON SCHEMAApplicationCredentialsSigning
JSON SCHEMAApplicationCredentialsSigningUse
JSON SCHEMAApplicationCredentialsUsernameTemplate
JSON SCHEMAApplicationFeature
JSON SCHEMAApplicationGroupAssignment
JSON SCHEMAApplicationLicensing
JSON SCHEMAApplicationSettings
JSON SCHEMAApplicationSettingsApplication
JSON SCHEMAApplicationSettingsNotes
JSON SCHEMAApplicationSettingsNotifications
JSON SCHEMAApplicationSettingsNotificationsVpn
JSON SCHEMAApplicationSettingsNotificationsVpnNetwork
JSON SCHEMAApplicationSignOnMode
JSON SCHEMAApplicationVisibility
JSON SCHEMAApplicationVisibilityHide
JSON SCHEMAAppLink
JSON SCHEMAAppUser
JSON SCHEMAAppUserCredentials
JSON SCHEMAAppUserPasswordCredential
JSON SCHEMAAssignRoleRequest
JSON SCHEMAAuthenticationProvider
JSON SCHEMAAuthenticationProviderType
JSON SCHEMAAuthenticator
JSON SCHEMAAuthenticatorProvider
JSON SCHEMAAuthenticatorProviderConfiguration
JSON SCHEMAAuthenticatorSettings
JSON SCHEMAAuthenticatorStatus
JSON SCHEMAAuthenticatorType
JSON SCHEMAAuthorizationServer
JSON SCHEMAAuthorizationServerCredentials
JSON SCHEMAAuthorizationServerCredentialsRotationMode
JSON SCHEMAAuthorizationServerCredentialsSigningConfig
JSON SCHEMAAuthorizationServerCredentialsUse
JSON SCHEMAAuthorizationServerPolicy
JSON SCHEMAAuthorizationServerPolicyRule
JSON SCHEMAAuthorizationServerPolicyRuleActions
JSON SCHEMAAuthorizationServerPolicyRuleConditions
JSON SCHEMAAutoLoginApplication
JSON SCHEMAAutoLoginApplicationSettings
JSON SCHEMAAutoLoginApplicationSettingsSignOn
JSON SCHEMABasicApplicationSettings
JSON SCHEMABasicApplicationSettingsApplication
JSON SCHEMABasicAuthApplication
JSON SCHEMABeforeScheduledActionPolicyRuleCondition
JSON SCHEMABookmarkApplication
JSON SCHEMABookmarkApplicationSettings
JSON SCHEMABookmarkApplicationSettingsApplication
JSON SCHEMABrand
JSON SCHEMABrowserPluginApplication
JSON SCHEMACallUserFactor
JSON SCHEMACallUserFactorProfile
JSON SCHEMACapabilitiesCreateObject
JSON SCHEMACapabilitiesObject
JSON SCHEMACapabilitiesUpdateObject
JSON SCHEMACatalogApplication
JSON SCHEMACatalogApplicationStatus
JSON SCHEMAChangeEnum
JSON SCHEMAChangePasswordRequest
JSON SCHEMAChannelBinding
JSON SCHEMAClientPolicyCondition
JSON SCHEMAClientSecret
JSON SCHEMAClientSecretMetadata
JSON SCHEMACompliance
JSON SCHEMAContextPolicyRuleCondition
JSON SCHEMACreateSessionRequest
JSON SCHEMACreateUserRequest
JSON SCHEMACsr
JSON SCHEMACsrMetadata
JSON SCHEMACsrMetadataSubject
JSON SCHEMACsrMetadataSubjectAltNames
JSON SCHEMACustomHotpUserFactor
JSON SCHEMACustomHotpUserFactorProfile
JSON SCHEMADeviceAccessPolicyRuleCondition
JSON SCHEMADevicePolicyRuleCondition
JSON SCHEMADevicePolicyRuleConditionPlatform
JSON SCHEMADNSRecord
JSON SCHEMADNSRecordType
JSON SCHEMADomain
JSON SCHEMADomainCertificate
JSON SCHEMADomainCertificateMetadata
JSON SCHEMADomainCertificateSourceType
JSON SCHEMADomainCertificateType
JSON SCHEMADomainListResponse
JSON SCHEMADomainValidationStatus
JSON SCHEMADuration
JSON SCHEMAEmailTemplate
JSON SCHEMAEmailTemplateContent
JSON SCHEMAEmailTemplateCustomization
JSON SCHEMAEmailTemplateCustomizationRequest
JSON SCHEMAEmailTemplateTestRequest
JSON SCHEMAEmailTemplateTouchPointVariant
JSON SCHEMAEmailUserFactor
JSON SCHEMAEmailUserFactorProfile
JSON SCHEMAEnabledStatus
JSON SCHEMAEndUserDashboardTouchPointVariant
JSON SCHEMAErrorPageTouchPointVariant
JSON SCHEMAEventHook
JSON SCHEMAEventHookChannel
JSON SCHEMAEventHookChannelConfig
JSON SCHEMAEventHookChannelConfigAuthScheme
JSON SCHEMAEventHookChannelConfigAuthSchemeType
JSON SCHEMAEventHookChannelConfigHeader
JSON SCHEMAEventSubscriptions
JSON SCHEMAFactorProvider
JSON SCHEMAFactorResultType
JSON SCHEMAFactorStatus
JSON SCHEMAFactorType
JSON SCHEMAFeature
JSON SCHEMAFeatureStage
JSON SCHEMAFeatureStageState
JSON SCHEMAFeatureStageValue
JSON SCHEMAFeatureType
JSON SCHEMAFipsEnum
JSON SCHEMAForgotPasswordResponse
JSON SCHEMAGrantTypePolicyRuleCondition
JSON SCHEMAOkta Group
JSON SCHEMAGroupCondition
JSON SCHEMAGroupPolicyRuleCondition
JSON SCHEMAGroupProfile
JSON SCHEMAGroupRule
JSON SCHEMAGroupRuleAction
JSON SCHEMAGroupRuleConditions
JSON SCHEMAGroupRuleExpression
JSON SCHEMAGroupRuleGroupAssignment
JSON SCHEMAGroupRuleGroupCondition
JSON SCHEMAGroupRulePeopleCondition
JSON SCHEMAGroupRuleStatus
JSON SCHEMAGroupRuleUserCondition
JSON SCHEMAGroupSchema
JSON SCHEMAGroupSchemaAttribute
JSON SCHEMAGroupSchemaBase
JSON SCHEMAGroupSchemaBaseProperties
JSON SCHEMAGroupSchemaCustom
JSON SCHEMAGroupSchemaDefinitions
JSON SCHEMAGroupType
JSON SCHEMAHardwareUserFactor
JSON SCHEMAHardwareUserFactorProfile
JSON SCHEMAIdentityProvider
JSON SCHEMAIdentityProviderApplicationUser
JSON SCHEMAIdentityProviderCredentials
JSON SCHEMAIdentityProviderCredentialsClient
JSON SCHEMAIdentityProviderCredentialsSigning
JSON SCHEMAIdentityProviderCredentialsTrust
JSON SCHEMAIdentityProviderPolicy
JSON SCHEMAIdentityProviderPolicyRuleCondition
JSON SCHEMAIdpPolicyRuleAction
JSON SCHEMAIdpPolicyRuleActionProvider
JSON SCHEMAIframeEmbedScopeAllowedApps
JSON SCHEMAImageUploadResponse
JSON SCHEMAInactivityPolicyRuleCondition
JSON SCHEMAInlineHook
JSON SCHEMAInlineHookChannel
JSON SCHEMAInlineHookChannelConfig
JSON SCHEMAInlineHookChannelConfigAuthScheme
JSON SCHEMAInlineHookChannelConfigHeaders
JSON SCHEMAInlineHookPayload
JSON SCHEMAInlineHookResponse
JSON SCHEMAInlineHookResponseCommands
JSON SCHEMAInlineHookResponseCommandValue
JSON SCHEMAInlineHookStatus
JSON SCHEMAInlineHookType
JSON SCHEMAIonField
JSON SCHEMAIonForm
JSON SCHEMAJsonWebKey
JSON SCHEMAJwkUse
JSON SCHEMAKnowledgeConstraint
JSON SCHEMALifecycleCreateSettingObject
JSON SCHEMALifecycleDeactivateSettingObject
JSON SCHEMALifecycleExpirationPolicyRuleCondition
JSON SCHEMALinkedObject
JSON SCHEMALinkedObjectDetails
JSON SCHEMALinkedObjectDetailsType
JSON SCHEMALogActor
JSON SCHEMALogAuthenticationContext
JSON SCHEMALogAuthenticationProvider
JSON SCHEMALogClient
JSON SCHEMALogCredentialProvider
JSON SCHEMALogCredentialType
JSON SCHEMALogDebugContext
JSON SCHEMALogEvent
JSON SCHEMALogGeographicalContext
JSON SCHEMALogGeolocation
JSON SCHEMALogIpAddress
JSON SCHEMALogIssuer
JSON SCHEMALogOutcome
JSON SCHEMALogRequest
JSON SCHEMALogSecurityContext
JSON SCHEMALogSeverity
JSON SCHEMALogTarget
JSON SCHEMALogTransaction
JSON SCHEMALogUserAgent
JSON SCHEMAMDMEnrollmentPolicyRuleCondition
JSON SCHEMAMultifactorEnrollmentPolicy
JSON SCHEMAMultifactorEnrollmentPolicyAuthenticatorType
JSON SCHEMAMultifactorEnrollmentPolicySettings
JSON SCHEMAMultifactorEnrollmentPolicySettingsType
JSON SCHEMANetworkZone
JSON SCHEMANetworkZoneAddress
JSON SCHEMANetworkZoneAddressType
JSON SCHEMANetworkZoneLocation
JSON SCHEMANetworkZoneStatus
JSON SCHEMANetworkZoneType
JSON SCHEMANetworkZoneUsage
JSON SCHEMANotificationType
JSON SCHEMAOAuth2Actor
JSON SCHEMAOAuth2Claim
JSON SCHEMAOAuth2ClaimConditions
JSON SCHEMAOAuth2Client
JSON SCHEMAOAuth2RefreshToken
JSON SCHEMAOAuth2Scope
JSON SCHEMAOAuth2ScopeConsentGrant
JSON SCHEMAOAuth2ScopeConsentGrantSource
JSON SCHEMAOAuth2ScopeConsentGrantStatus
JSON SCHEMAOAuth2ScopesMediationPolicyRuleCondition
JSON SCHEMAOAuth2Token
JSON SCHEMAOAuthApplicationCredentials
JSON SCHEMAOAuthAuthorizationPolicy
JSON SCHEMAOAuthEndpointAuthenticationMethod
JSON SCHEMAOAuthGrantType
JSON SCHEMAOAuthResponseType
JSON SCHEMAOktaSignOnPolicy
JSON SCHEMAOktaSignOnPolicyConditions
JSON SCHEMAOktaSignOnPolicyRule
JSON SCHEMAOktaSignOnPolicyRuleActions
JSON SCHEMAOktaSignOnPolicyRuleConditions
JSON SCHEMAOktaSignOnPolicyRuleSignonActions
JSON SCHEMAOktaSignOnPolicyRuleSignonSessionActions
JSON SCHEMAOpenIdConnectApplication
JSON SCHEMAOpenIdConnectApplicationConsentMethod
JSON SCHEMAOpenIdConnectApplicationIdpInitiatedLogin
JSON SCHEMAOpenIdConnectApplicationIssuerMode
JSON SCHEMAOpenIdConnectApplicationSettings
JSON SCHEMAOpenIdConnectApplicationSettingsClient
JSON SCHEMAOpenIdConnectApplicationSettingsClientKeys
JSON SCHEMAOpenIdConnectApplicationSettingsRefreshToken
JSON SCHEMAOpenIdConnectApplicationType
JSON SCHEMAOpenIdConnectRefreshTokenRotationType
JSON SCHEMAOrg2OrgApplication
JSON SCHEMAOrg2OrgApplicationSettings
JSON SCHEMAOrg2OrgApplicationSettingsApp
JSON SCHEMAOrgContactType
JSON SCHEMAOrgContactTypeObj
JSON SCHEMAOrgContactUser
JSON SCHEMAOrgOktaCommunicationSetting
JSON SCHEMAOrgOktaSupportSetting
JSON SCHEMAOrgOktaSupportSettingsObj
JSON SCHEMAOrgPreferences
JSON SCHEMAOrgSetting
JSON SCHEMAPasswordCredential
JSON SCHEMAPasswordCredentialHash
JSON SCHEMAPasswordCredentialHashAlgorithm
JSON SCHEMAPasswordCredentialHook
JSON SCHEMAPasswordDictionary
JSON SCHEMAPasswordDictionaryCommon
JSON SCHEMAPasswordExpirationPolicyRuleCondition
JSON SCHEMAPasswordPolicy
JSON SCHEMAPasswordPolicyConditions
JSON SCHEMAPasswordPolicyDelegationSettings
JSON SCHEMAPasswordPolicyDelegationSettingsOptions
JSON SCHEMAPasswordPolicyPasswordSettings
JSON SCHEMAPasswordPolicyPasswordSettingsAge
JSON SCHEMAPasswordPolicyPasswordSettingsComplexity
JSON SCHEMAPasswordPolicyPasswordSettingsLockout
JSON SCHEMAPasswordPolicyRecoveryEmail
JSON SCHEMAPasswordPolicyRecoveryEmailProperties
JSON SCHEMAPasswordPolicyRecoveryEmailRecoveryToken
JSON SCHEMAPasswordPolicyRecoveryFactors
JSON SCHEMAPasswordPolicyRecoveryFactorSettings
JSON SCHEMAPasswordPolicyRecoveryQuestion
JSON SCHEMAPasswordPolicyRecoveryQuestionComplexity
JSON SCHEMAPasswordPolicyRecoveryQuestionProperties
JSON SCHEMAPasswordPolicyRecoverySettings
JSON SCHEMAPasswordPolicyRule
JSON SCHEMAPasswordPolicyRuleAction
JSON SCHEMAPasswordPolicyRuleActions
JSON SCHEMAPasswordPolicyRuleConditions
JSON SCHEMAPasswordPolicySettings
JSON SCHEMAPasswordSettingObject
JSON SCHEMAPlatformConditionEvaluatorPlatform
JSON SCHEMAPlatformPolicyRuleCondition
JSON SCHEMAPolicy
JSON SCHEMAPolicyAccountLink
JSON SCHEMAPolicyAccountLinkFilter
JSON SCHEMAPolicyAccountLinkFilterGroups
JSON SCHEMAPolicyNetworkCondition
JSON SCHEMAPolicyPeopleCondition
JSON SCHEMAPolicyRule
JSON SCHEMAPolicyRuleActions
JSON SCHEMAPolicyRuleActionsEnroll
JSON SCHEMAPolicyRuleActionsEnrollSelf
JSON SCHEMAPolicyRuleAuthContextCondition
JSON SCHEMAPolicyRuleConditions
JSON SCHEMAPolicySubject
JSON SCHEMAPolicySubjectMatchType
JSON SCHEMAPolicyType
JSON SCHEMAPolicyUserNameTemplate
JSON SCHEMAPossessionConstraint
JSON SCHEMAPreRegistrationInlineHook
JSON SCHEMAProfileEnrollmentPolicy
JSON SCHEMAProfileEnrollmentPolicyRule
JSON SCHEMAProfileEnrollmentPolicyRuleAction
JSON SCHEMAProfileEnrollmentPolicyRuleActions
JSON SCHEMAProfileEnrollmentPolicyRuleProfileAttribute
JSON SCHEMAProfileMapping
JSON SCHEMAProfileMappingProperty
JSON SCHEMAProfileMappingPropertyPushStatus
JSON SCHEMAProfileMappingSource
JSON SCHEMAProfileSettingObject
JSON SCHEMAProtocol
JSON SCHEMAProtocolAlgorithms
JSON SCHEMAProtocolAlgorithmType
JSON SCHEMAProtocolAlgorithmTypeSignature
JSON SCHEMAProtocolEndpoint
JSON SCHEMAProtocolEndpoints
JSON SCHEMAProtocolRelayState
JSON SCHEMAProtocolRelayStateFormat
JSON SCHEMAProtocolSettings
JSON SCHEMAProvisioning
JSON SCHEMAProvisioningConditions
JSON SCHEMAProvisioningConnection
JSON SCHEMAProvisioningConnectionAuthScheme
JSON SCHEMAProvisioningConnectionProfile
JSON SCHEMAProvisioningConnectionRequest
JSON SCHEMAProvisioningConnectionStatus
JSON SCHEMAProvisioningDeprovisionedCondition
JSON SCHEMAProvisioningGroups
JSON SCHEMAProvisioningSuspendedCondition
JSON SCHEMAPushUserFactor
JSON SCHEMAPushUserFactorProfile
JSON SCHEMARecoveryQuestionCredential
JSON SCHEMARequiredEnum
JSON SCHEMAResetPasswordToken
JSON SCHEMAResponseLinks
JSON SCHEMARiskPolicyRuleCondition
JSON SCHEMARiskScorePolicyRuleCondition
JSON SCHEMARole
JSON SCHEMARoleAssignmentType
JSON SCHEMARoleStatus
JSON SCHEMARoleType
JSON SCHEMASamlApplication
JSON SCHEMASamlApplicationSettings
JSON SCHEMASamlApplicationSettingsSignOn
JSON SCHEMASamlAttributeStatement
JSON SCHEMAScheduledUserLifecycleAction
JSON SCHEMASchemeApplicationCredentials
JSON SCHEMAScope
JSON SCHEMAScopeType
JSON SCHEMASecurePasswordStoreApplication
JSON SCHEMASecurePasswordStoreApplicationSettings
JSON SCHEMASecurityQuestion
JSON SCHEMASecurityQuestionUserFactor
JSON SCHEMASecurityQuestionUserFactorProfile
JSON SCHEMASeedEnum
JSON SCHEMASession
JSON SCHEMASessionAuthenticationMethod
JSON SCHEMASessionIdentityProvider
JSON SCHEMASessionIdentityProviderType
JSON SCHEMASessionStatus
JSON SCHEMASignInPageTouchPointVariant
JSON SCHEMASignOnInlineHook
JSON SCHEMASingleLogout
JSON SCHEMASmsTemplate
JSON SCHEMASmsTemplateTranslations
JSON SCHEMASmsTemplateType
JSON SCHEMASmsUserFactor
JSON SCHEMASmsUserFactorProfile
JSON SCHEMASocialAuthToken
JSON SCHEMASpCertificate
JSON SCHEMASubscription
JSON SCHEMASubscriptionStatus
JSON SCHEMASwaApplication
JSON SCHEMASwaApplicationSettings
JSON SCHEMASwaApplicationSettingsApplication
JSON SCHEMASwaThreeFieldApplication
JSON SCHEMASwaThreeFieldApplicationSettings
JSON SCHEMASwaThreeFieldApplicationSettingsApplication
JSON SCHEMATempPassword
JSON SCHEMATheme
JSON SCHEMAThemeResponse
JSON SCHEMAThreatInsightConfiguration
JSON SCHEMATokenAuthorizationServerPolicyRuleAction
JSON SCHEMATokenUserFactor
JSON SCHEMATokenUserFactorProfile
JSON SCHEMATotpUserFactor
JSON SCHEMATotpUserFactorProfile
JSON SCHEMATrustedOrigin
JSON SCHEMAU2fUserFactor
JSON SCHEMAU2fUserFactorProfile
JSON SCHEMAOkta User
JSON SCHEMAUserActivationToken
JSON SCHEMAUserCondition
JSON SCHEMAUserCredentials
JSON SCHEMAUserFactor
JSON SCHEMAUserIdentifierConditionEvaluatorPattern
JSON SCHEMAUserIdentifierPolicyRuleCondition
JSON SCHEMAUserIdentityProviderLinkRequest
JSON SCHEMAUserIdString
JSON SCHEMAUserLifecycleAttributePolicyRuleCondition
JSON SCHEMAUserNextLogin
JSON SCHEMAUserPolicyRuleCondition
JSON SCHEMAUserProfile
JSON SCHEMAUserSchema
JSON SCHEMAUserSchemaAttribute
JSON SCHEMAUserSchemaAttributeEnum
JSON SCHEMAUserSchemaAttributeItems
JSON SCHEMAUserSchemaAttributeMaster
JSON SCHEMAUserSchemaAttributeMasterPriority
JSON SCHEMAUserSchemaAttributeMasterType
JSON SCHEMAUserSchemaAttributePermission
JSON SCHEMAUserSchemaAttributeScope
JSON SCHEMAUserSchemaAttributeType
JSON SCHEMAUserSchemaAttributeUnion
JSON SCHEMAUserSchemaBase
JSON SCHEMAUserSchemaBaseProperties
JSON SCHEMAUserSchemaDefinitions
JSON SCHEMAUserSchemaProperties
JSON SCHEMAUserSchemaPropertiesProfile
JSON SCHEMAUserSchemaPropertiesProfileItem
JSON SCHEMAUserSchemaPublic
JSON SCHEMAUserStatus
JSON SCHEMAUserStatusPolicyRuleCondition
JSON SCHEMAUserType
JSON SCHEMAUserTypeCondition
JSON SCHEMAUserVerificationEnum
JSON SCHEMAVerificationMethod
JSON SCHEMAVerifyFactorRequest
JSON SCHEMAVerifyUserFactorResponse
JSON SCHEMAWebAuthnUserFactor
JSON SCHEMAWebAuthnUserFactorProfile
JSON SCHEMAWebUserFactor
JSON SCHEMAWebUserFactorProfile
JSON SCHEMAWsFederationApplication
JSON SCHEMAWsFederationApplicationSettings
JSON SCHEMAWsFederationApplicationSettingsApplication
JSON SCHEMAScroll within the panel for all 462 ·
JSON Structure 2
JSON Structure captures the data shapes in a form built for tooling — a complement to JSON Schema that keeps the model machine-legible.
JSON Structure definitions describing this provider's data shapes.
Okta Structure
JSON STRUCTUREOkta User Structure
JSON STRUCTUREExamples 4
Real request and response payloads are what turn a spec from abstract into obvious — and they're one of the twelve things an agent needs to call an API correctly on the first try.
Example request and response payloads for these APIs.
Okta Group Example
EXAMPLEOkta User Active Example
EXAMPLESecurity Posture 4
Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Okta Trust Center
SOC 2, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA, FedRAMP, GDPR, CSA STAR, FIPS 140
SECURITYAgentic Access 1
An x-agentic-access contract marks which operations are safe for an agent to run on its own and which need a human in the loop. It is the difference between an API an agent can use and one it can use safely.
Recommended x-agentic-access execution contracts for AI agents.
Resources
Every other property we hold for Okta — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.
Get Started 4
Portal, sign-up, and the first successful call
Documentation 3
Reference material describing how the API behaves
Agent Surfaces 2
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 21
Pagination, idempotency, versioning, errors, and events
Scroll within the panel for all 21 ·
Build 25
SDKs, sample code, and the tooling you integrate with
Scroll within the panel for all 25 ·
Access & Security 5
Authentication, authorization, and security posture
Operate 4
Status, limits, changes, and where to get help
Commercial 3
Pricing, plans, and the legal terms of use
Company 3
The organization behind the API
Other 4
Properties that don't map to a standard resource type
← All providers · Data indexed from github.com/api-evangelist/okta · machine-readable index on apis.io