Lap-Platform Okta Admin Management
API version: 5.1.0
Auth
ApiKey Authorization in header | OAuth2
Base URL
Setup
- Set your API key in the appropriate header
- GET /.well-known/app-authenticator-configuration -- verify access
- POST /api/v1/agentPools/{poolId}/updates -- create first updates
Endpoints
705 endpoints across 10 groups. See references/api-spec.lap for full details.
.well-known
| Method | Path | Description |
|---|---|---|
| GET | /.well-known/app-authenticator-configuration | Retrieve the well-known app authenticator configuration |
| GET | /.well-known/apple-app-site-association | Retrieve the customized apple-app-site-association URI content |
| GET | /.well-known/assetlinks.json | Retrieve the customized assetlinks.json URI content |
| GET | /.well-known/okta-organization | Retrieve the Org metadata |
| GET | /.well-known/ssf-configuration | Retrieve the SSF transmitter metadata |
| GET | /.well-known/webauthn | Retrieve the customized webauthn URI content |
api
| Method | Path | Description |
|---|---|---|
| GET | /api/v1/agentPools | List all agent pools |
| GET | /api/v1/agentPools/{poolId}/updates | List all agent pool updates |
| POST | /api/v1/agentPools/{poolId}/updates | Create an agent pool update |
| GET | /api/v1/agentPools/{poolId}/updates/settings | Retrieve an agent pool update's settings |
| POST | /api/v1/agentPools/{poolId}/updates/settings | Update an agent pool update settings |
| GET | /api/v1/agentPools/{poolId}/updates/{updateId} | Retrieve an agent pool update by ID |
| POST | /api/v1/agentPools/{poolId}/updates/{updateId} | Update an agent pool update by ID |
| DELETE | /api/v1/agentPools/{poolId}/updates/{updateId} | Delete an agent pool update |
| POST | /api/v1/agentPools/{poolId}/updates/{updateId}/activate | Activate an agent pool update |
| POST | /api/v1/agentPools/{poolId}/updates/{updateId}/deactivate | Deactivate an agent pool update |
| POST | /api/v1/agentPools/{poolId}/updates/{updateId}/pause | Pause an agent pool update |
| POST | /api/v1/agentPools/{poolId}/updates/{updateId}/resume | Resume an agent pool update |
| POST | /api/v1/agentPools/{poolId}/updates/{updateId}/retry | Retry an agent pool update |
| POST | /api/v1/agentPools/{poolId}/updates/{updateId}/stop | Stop an agent pool update |
| GET | /api/v1/api-tokens | List all API token metadata |
| DELETE | /api/v1/api-tokens/current | Revoke the current API token |
| GET | /api/v1/api-tokens/{apiTokenId} | Retrieve an API token's metadata |
| PUT | /api/v1/api-tokens/{apiTokenId} | Upsert an API token network condition |
| DELETE | /api/v1/api-tokens/{apiTokenId} | Revoke an API token |
| GET | /api/v1/apps | List all applications |
| POST | /api/v1/apps | Create an application |
| GET | /api/v1/apps/{appId} | Retrieve an application |
| PUT | /api/v1/apps/{appId} | Replace an application |
| DELETE | /api/v1/apps/{appId} | Delete an application |
| GET | /api/v1/apps/{appId}/connections/default | Retrieve the default provisioning connection |
| POST | /api/v1/apps/{appId}/connections/default | Update the default provisioning connection |
| GET | /api/v1/apps/{appId}/connections/default/jwks | Retrieve a JSON Web Key Set (JWKS) for the default provisioning connection |
| POST | /api/v1/apps/{appId}/connections/default/lifecycle/activate | Activate the default provisioning connection |
| POST | /api/v1/apps/{appId}/connections/default/lifecycle/deactivate | Deactivate the default provisioning connection |
| GET | /api/v1/apps/{appId}/credentials/csrs | List all certificate signing requests |
| POST | /api/v1/apps/{appId}/credentials/csrs | Generate a certificate signing request |
| GET | /api/v1/apps/{appId}/credentials/csrs/{csrId} | Retrieve a certificate signing request |
| DELETE | /api/v1/apps/{appId}/credentials/csrs/{csrId} | Revoke a certificate signing request |
| POST | /api/v1/apps/{appId}/credentials/csrs/{csrId}/lifecycle/publish | Publish a certificate signing request |
| GET | /api/v1/apps/{appId}/credentials/jwks | List all the OAuth 2.0 client JSON Web Keys |
| POST | /api/v1/apps/{appId}/credentials/jwks | Add a JSON Web Key |
| GET | /api/v1/apps/{appId}/credentials/jwks/{keyId} | Retrieve an OAuth 2.0 client JSON Web Key |
| DELETE | /api/v1/apps/{appId}/credentials/jwks/{keyId} | Delete an OAuth 2.0 client JSON Web Key |
| POST | /api/v1/apps/{appId}/credentials/jwks/{keyId}/lifecycle/activate | Activate an OAuth 2.0 client JSON Web Key |
| POST | /api/v1/apps/{appId}/credentials/jwks/{keyId}/lifecycle/deactivate | Deactivate an OAuth 2.0 client JSON Web Key |
| GET | /api/v1/apps/{appId}/credentials/keys | List all key credentials |
| POST | /api/v1/apps/{appId}/credentials/keys/generate | Generate a key credential |
| GET | /api/v1/apps/{appId}/credentials/keys/{keyId} | Retrieve a key credential |
| POST | /api/v1/apps/{appId}/credentials/keys/{keyId}/clone | Clone a key credential |
| GET | /api/v1/apps/{appId}/credentials/secrets | List all OAuth 2.0 client secrets |
| POST | /api/v1/apps/{appId}/credentials/secrets | Create an OAuth 2.0 client secret |
| GET | /api/v1/apps/{appId}/credentials/secrets/{secretId} | Retrieve an OAuth 2.0 client secret |
| DELETE | /api/v1/apps/{appId}/credentials/secrets/{secretId} | Delete an OAuth 2.0 client secret |
| POST | /api/v1/apps/{appId}/credentials/secrets/{secretId}/lifecycle/activate | Activate an OAuth 2.0 client secret |
| POST | /api/v1/apps/{appId}/credentials/secrets/{secretId}/lifecycle/deactivate | Deactivate an OAuth 2.0 client secret |
| GET | /api/v1/apps/{appId}/cwo/connections | Retrieve all Cross App Access connections |
| POST | /api/v1/apps/{appId}/cwo/connections | Create a Cross App Access connection |
| GET | /api/v1/apps/{appId}/cwo/connections/{connectionId} | Retrieve a Cross App Access connection |
| PATCH | /api/v1/apps/{appId}/cwo/connections/{connectionId} | Update a Cross App Access connection |
| DELETE | /api/v1/apps/{appId}/cwo/connections/{connectionId} | Delete a Cross App Access connection |
| GET | /api/v1/apps/{appId}/features | List all features |
| GET | /api/v1/apps/{appId}/features/{featureName} | Retrieve a feature |
| PUT | /api/v1/apps/{appId}/features/{featureName} | Update a feature |
| GET | /api/v1/apps/{appId}/federated-claims | List all configured federated claims |
| POST | /api/v1/apps/{appId}/federated-claims | Create a federated claim |
| GET | /api/v1/apps/{appId}/federated-claims/{claimId} | Retrieve a federated claim |
| PUT | /api/v1/apps/{appId}/federated-claims/{claimId} | Replace a federated claim |
| DELETE | /api/v1/apps/{appId}/federated-claims/{claimId} | Delete a federated claim |
| GET | /api/v1/apps/{appId}/grants | List all app grants |
| POST | /api/v1/apps/{appId}/grants | Grant consent to scope |
| GET | /api/v1/apps/{appId}/grants/{grantId} | Retrieve an app grant |
| DELETE | /api/v1/apps/{appId}/grants/{grantId} | Revoke an app grant |
| GET | /api/v1/apps/{appId}/group-push/mappings | List all group push mappings |
| POST | /api/v1/apps/{appId}/group-push/mappings | Create a group push mapping |
| GET | /api/v1/apps/{appId}/group-push/mappings/{mappingId} | Retrieve a group push mapping |
| PATCH | /api/v1/apps/{appId}/group-push/mappings/{mappingId} | Update a group push mapping |
| DELETE | /api/v1/apps/{appId}/group-push/mappings/{mappingId} | Delete a group push mapping |
| GET | /api/v1/apps/{appId}/groups | List all application groups |
| GET | /api/v1/apps/{appId}/groups/{groupId} | Retrieve an application group |
| PUT | /api/v1/apps/{appId}/groups/{groupId} | Assign an application group |
| PATCH | /api/v1/apps/{appId}/groups/{groupId} | Update an application group |
| DELETE | /api/v1/apps/{appId}/groups/{groupId} | Unassign an application group |
| POST | /api/v1/apps/{appId}/lifecycle/activate | Activate an application |
| POST | /api/v1/apps/{appId}/lifecycle/deactivate | Deactivate an application |
| POST | /api/v1/apps/{appId}/logo | Upload an application logo |
| PUT | /api/v1/apps/{appId}/policies/{policyId} | Assign an authentication policy |
| GET | /api/v1/apps/{appId}/sso/saml/metadata | Preview the application SAML metadata |
| GET | /api/v1/apps/{appId}/tokens | List all application refresh tokens |
| DELETE | /api/v1/apps/{appId}/tokens | Revoke all application tokens |
| GET | /api/v1/apps/{appId}/tokens/{tokenId} | Retrieve an application token |
| DELETE | /api/v1/apps/{appId}/tokens/{tokenId} | Revoke an application token |
| GET | /api/v1/apps/{appId}/users | List all application users |
| POST | /api/v1/apps/{appId}/users | Assign an application user |
| GET | /api/v1/apps/{appId}/users/{userId} | Retrieve an application user |
| POST | /api/v1/apps/{appId}/users/{userId} | Update an application user |
| DELETE | /api/v1/apps/{appId}/users/{userId} | Unassign an application user |
| POST | /api/v1/apps/{appName}/{appId}/oauth2/callback | Verify the provisioning connection |
| GET | /api/v1/authenticators | List all authenticators |
| POST | /api/v1/authenticators | Create an authenticator |
| GET | /api/v1/authenticators/{authenticatorId} | Retrieve an authenticator |
| PUT | /api/v1/authenticators/{authenticatorId} | Replace an authenticator |
| GET | /api/v1/authenticators/{authenticatorId}/aaguids | List all custom AAGUIDs |
| POST | /api/v1/authenticators/{authenticatorId}/aaguids | Create a custom AAGUID |
| GET | /api/v1/authenticators/{authenticatorId}/aaguids/{aaguid} | Retrieve a custom AAGUID |
| PUT | /api/v1/authenticators/{authenticatorId}/aaguids/{aaguid} | Replace a custom AAGUID |
| PATCH | /api/v1/authenticators/{authenticatorId}/aaguids/{aaguid} | Update a custom AAGUID |
| DELETE | /api/v1/authenticators/{authenticatorId}/aaguids/{aaguid} | Delete a custom AAGUID |
| POST | /api/v1/authenticators/{authenticatorId}/lifecycle/activate | Activate an authenticator |
| POST | /api/v1/authenticators/{authenticatorId}/lifecycle/deactivate | Deactivate an authenticator |
| GET | /api/v1/authenticators/{authenticatorId}/methods | List all methods of an authenticator |
| GET | /api/v1/authenticators/{authenticatorId}/methods/{methodType} | Retrieve an authenticator method |
| PUT | /api/v1/authenticators/{authenticatorId}/methods/{methodType} | Replace an authenticator method |
| POST | /api/v1/authenticators/{authenticatorId}/methods/{methodType}/lifecycle/activate | Activate an authenticator method |
| POST | /api/v1/authenticators/{authenticatorId}/methods/{methodType}/lifecycle/deactivate | Deactivate an authenticator method |
| GET | /api/v1/authorizationServers | List all authorization servers |
| POST | /api/v1/authorizationServers | Create an authorization server |
| GET | /api/v1/authorizationServers/{authServerId} | Retrieve an authorization server |
| PUT | /api/v1/authorizationServers/{authServerId} | Replace an authorization server |
| DELETE | /api/v1/authorizationServers/{authServerId} | Delete an authorization server |
| GET | /api/v1/authorizationServers/{authServerId}/associatedServers | List all associated authorization servers |
| POST | /api/v1/authorizationServers/{authServerId}/associatedServers | Create an associated authorization server |
| DELETE | /api/v1/authorizationServers/{authServerId}/associatedServers/{associatedServerId} | Delete an associated authorization server |
| GET | /api/v1/authorizationServers/{authServerId}/claims | List all custom token claims |
| POST | /api/v1/authorizationServers/{authServerId}/claims | Create a custom token claim |
| GET | /api/v1/authorizationServers/{authServerId}/claims/{claimId} | Retrieve a custom token claim |
| PUT | /api/v1/authorizationServers/{authServerId}/claims/{claimId} | Replace a custom token claim |
| DELETE | /api/v1/authorizationServers/{authServerId}/claims/{claimId} | Delete a custom token claim |
| GET | /api/v1/authorizationServers/{authServerId}/clients | List all client resources for an authorization server |
| GET | /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens | List all refresh tokens for a client |
| DELETE | /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens | Revoke all refresh tokens for a client |
| GET | /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens/{tokenId} | Retrieve a refresh token for a client |
| DELETE | /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens/{tokenId} | Revoke a refresh token for a client |
| GET | /api/v1/authorizationServers/{authServerId}/credentials/keys | List all credential keys |
| GET | /api/v1/authorizationServers/{authServerId}/credentials/keys/{keyId} | Retrieve an authorization server key |
| POST | /api/v1/authorizationServers/{authServerId}/credentials/lifecycle/keyRotate | Rotate all credential keys |
| POST | /api/v1/authorizationServers/{authServerId}/lifecycle/activate | Activate an authorization server |
| POST | /api/v1/authorizationServers/{authServerId}/lifecycle/deactivate | Deactivate an authorization server |
| GET | /api/v1/authorizationServers/{authServerId}/policies | List all policies |
| POST | /api/v1/authorizationServers/{authServerId}/policies | Create a policy |
| GET | /api/v1/authorizationServers/{authServerId}/policies/{policyId} | Retrieve a policy |
| PUT | /api/v1/authorizationServers/{authServerId}/policies/{policyId} | Replace a policy |
| DELETE | /api/v1/authorizationServers/{authServerId}/policies/{policyId} | Delete a policy |
| POST | /api/v1/authorizationServers/{authServerId}/policies/{policyId}/lifecycle/activate | Activate a policy |
| POST | /api/v1/authorizationServers/{authServerId}/policies/{policyId}/lifecycle/deactivate | Deactivate a policy |
| GET | /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules | List all policy rules |
| POST | /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules | Create a policy rule |
| GET | /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId} | Retrieve a policy rule |
| PUT | /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId} | Replace a policy rule |
| DELETE | /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId} | Delete a policy rule |
| POST | /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}/lifecycle/activate | Activate a policy rule |
| POST | /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}/lifecycle/deactivate | Deactivate a policy rule |
| GET | /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys | List all Custom Authorization Server Public JSON Web Keys |
| POST | /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys | Add a JSON Web Key |
| GET | /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId} | Retrieve a Custom Authorization Server Public JSON Web Key |
| DELETE | /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId} | Delete a Custom Authorization Server Public JSON Web Key |
| POST | /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}/lifecycle/activate | Activate a Custom Authorization Server Public JSON Web Key |
| POST | /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}/lifecycle/deactivate | Deactivate a Custom Authorization Server Public JSON Web Key |
| GET | /api/v1/authorizationServers/{authServerId}/scopes | List all custom token scopes |
| POST | /api/v1/authorizationServers/{authServerId}/scopes | Create a custom token scope |
| GET | /api/v1/authorizationServers/{authServerId}/scopes/{scopeId} | Retrieve a custom token scope |
| PUT | /api/v1/authorizationServers/{authServerId}/scopes/{scopeId} | Replace a custom token scope |
| DELETE | /api/v1/authorizationServers/{authServerId}/scopes/{scopeId} | Delete a custom token scope |
| GET | /api/v1/behaviors | List all behavior detection rules |
| POST | /api/v1/behaviors | Create a behavior detection rule |
| GET | /api/v1/behaviors/{behaviorId} | Retrieve a behavior detection rule |
| PUT | /api/v1/behaviors/{behaviorId} | Replace a behavior detection rule |
| DELETE | /api/v1/behaviors/{behaviorId} | Delete a behavior detection rule |
| POST | /api/v1/behaviors/{behaviorId}/lifecycle/activate | Activate a behavior detection rule |
| POST | /api/v1/behaviors/{behaviorId}/lifecycle/deactivate | Deactivate a behavior detection rule |
| GET | /api/v1/brands | List all brands |
| POST | /api/v1/brands | Create a brand |
| GET | /api/v1/brands/{brandId} | Retrieve a brand |
| PUT | /api/v1/brands/{brandId} | Replace a brand |
| DELETE | /api/v1/brands/{brandId} | Delete a brand |
| GET | /api/v1/brands/{brandId}/domains | List all domains associated with a brand |
| GET | /api/v1/brands/{brandId}/pages/error | Retrieve the error page sub-resources |
| GET | /api/v1/brands/{brandId}/pages/error/customized | Retrieve the customized error page |
| PUT | /api/v1/brands/{brandId}/pages/error/customized | Replace the customized error page |
| DELETE | /api/v1/brands/{brandId}/pages/error/customized | Delete the customized error page |
| GET | /api/v1/brands/{brandId}/pages/error/default | Retrieve the default error page |
| GET | /api/v1/brands/{brandId}/pages/error/preview | Retrieve the preview error page preview |
| PUT | /api/v1/brands/{brandId}/pages/error/preview | Replace the preview error page |
| DELETE | /api/v1/brands/{brandId}/pages/error/preview | Delete the preview error page |
| GET | /api/v1/brands/{brandId}/pages/sign-in | Retrieve the sign-in page sub-resources |
| GET | /api/v1/brands/{brandId}/pages/sign-in/customized | Retrieve the customized sign-in page |
| PUT | /api/v1/brands/{brandId}/pages/sign-in/customized | Replace the customized sign-in page |
| DELETE | /api/v1/brands/{brandId}/pages/sign-in/customized | Delete the customized sign-in page |
| GET | /api/v1/brands/{brandId}/pages/sign-in/default | Retrieve the default sign-in page |
| GET | /api/v1/brands/{brandId}/pages/sign-in/preview | Retrieve the preview sign-in page preview |
| PUT | /api/v1/brands/{brandId}/pages/sign-in/preview | Replace the preview sign-in page |
| DELETE | /api/v1/brands/{brandId}/pages/sign-in/preview | Delete the preview sign-in page |
| GET | /api/v1/brands/{brandId}/pages/sign-in/widget-versions | List all Sign-In Widget versions |
| GET | /api/v1/brands/{brandId}/pages/sign-out/customized | Retrieve the sign-out page settings |
| PUT | /api/v1/brands/{brandId}/pages/sign-out/customized | Replace the sign-out page settings |
| GET | /api/v1/brands/{brandId}/templates/email | List all email templates |
| GET | /api/v1/brands/{brandId}/templates/email/{templateName} | Retrieve an email template |
| GET | /api/v1/brands/{brandId}/templates/email/{templateName}/customizations | List all email customizations |
| POST | /api/v1/brands/{brandId}/templates/email/{templateName}/customizations | Create an email customization |
| DELETE | /api/v1/brands/{brandId}/templates/email/{templateName}/customizations | Delete all email customizations |
| GET | /api/v1/brands/{brandId}/templates/email/{templateName}/customizations/{customizationId} | Retrieve an email customization |
| PUT | /api/v1/brands/{brandId}/templates/email/{templateName}/customizations/{customizationId} | Replace an email customization |
| DELETE | /api/v1/brands/{brandId}/templates/email/{templateName}/customizations/{customizationId} | Delete an email customization |
| GET | /api/v1/brands/{brandId}/templates/email/{templateName}/customizations/{customizationId}/preview | Retrieve a preview of an email customization |
| GET | /api/v1/brands/{brandId}/templates/email/{templateName}/default-content | Retrieve an email template default content |
| GET | /api/v1/brands/{brandId}/templates/email/{templateName}/default-content/preview | Retrieve a preview of the email template default content |
| GET | /api/v1/brands/{brandId}/templates/email/{templateName}/settings | Retrieve the email template settings |
| PUT | /api/v1/brands/{brandId}/templates/email/{templateName}/settings | Replace the email template settings |
| POST | /api/v1/brands/{brandId}/templates/email/{templateName}/test | Send a test email |
| GET | /api/v1/brands/{brandId}/themes | List all themes |
| GET | /api/v1/brands/{brandId}/themes/{themeId} | Retrieve a theme |
| PUT | /api/v1/brands/{brandId}/themes/{themeId} | Replace a theme |
| POST | /api/v1/brands/{brandId}/themes/{themeId}/background-image | Upload the background image |
| DELETE | /api/v1/brands/{brandId}/themes/{themeId}/background-image | Delete the background image |
| POST | /api/v1/brands/{brandId}/themes/{themeId}/favicon | Upload the favicon |
| DELETE | /api/v1/brands/{brandId}/themes/{themeId}/favicon | Delete the favicon |
| POST | /api/v1/brands/{brandId}/themes/{themeId}/logo | Upload the logo |
| DELETE | /api/v1/brands/{brandId}/themes/{themeId}/logo | Delete the logo |
| GET | /api/v1/brands/{brandId}/well-known-uris | Retrieve all the well-known URIs |
| GET | /api/v1/brands/{brandId}/well-known-uris/{path} | Retrieve the well-known URI of a specific brand |
| GET | /api/v1/brands/{brandId}/well-known-uris/{path}/customized | Retrieve the customized content of the specified well-known URI |
| PUT | /api/v1/brands/{brandId}/well-known-uris/{path}/customized | Replace the customized well-known URI of the specific path |
| GET | /api/v1/captchas | List all CAPTCHA instances |
| POST | /api/v1/captchas | Create a CAPTCHA instance |
| GET | /api/v1/captchas/{captchaId} | Retrieve a CAPTCHA instance |
| POST | /api/v1/captchas/{captchaId} | Update a CAPTCHA instance |
| PUT | /api/v1/captchas/{captchaId} | Replace a CAPTCHA instance |
| DELETE | /api/v1/captchas/{captchaId} | Delete a CAPTCHA instance |
| GET | /api/v1/device-assurances | List all device assurance policies |
| POST | /api/v1/device-assurances | Create a device assurance policy |
| GET | /api/v1/device-assurances/{deviceAssuranceId} | Retrieve a device assurance policy |
| PUT | /api/v1/device-assurances/{deviceAssuranceId} | Replace a device assurance policy |
| DELETE | /api/v1/device-assurances/{deviceAssuranceId} | Delete a device assurance policy |
| GET | /api/v1/device-integrations | List all device integrations |
| GET | /api/v1/device-integrations/{deviceIntegrationId} | Retrieve a device integration |
| POST | /api/v1/device-integrations/{deviceIntegrationId}/lifecycle/activate | Activate a device integration |
| POST | /api/v1/device-integrations/{deviceIntegrationId}/lifecycle/deactivate | Deactivate a device integration |
| GET | /api/v1/device-posture-checks | List all device posture checks |
| POST | /api/v1/device-posture-checks | Create a device posture check |
| GET | /api/v1/device-posture-checks/default | List all default device posture checks |
| GET | /api/v1/device-posture-checks/{postureCheckId} | Retrieve a device posture check |
| PUT | /api/v1/device-posture-checks/{postureCheckId} | Replace a device posture check |
| DELETE | /api/v1/device-posture-checks/{postureCheckId} | Delete a device posture check |
| GET | /api/v1/devices | List all devices |
| GET | /api/v1/devices/{deviceId} | Retrieve a device |
| DELETE | /api/v1/devices/{deviceId} | Delete a device |
| POST | /api/v1/devices/{deviceId}/lifecycle/activate | Activate a device |
| POST | /api/v1/devices/{deviceId}/lifecycle/deactivate | Deactivate a device |
| POST | /api/v1/devices/{deviceId}/lifecycle/suspend | Suspend a Device |
| POST | /api/v1/devices/{deviceId}/lifecycle/unsuspend | Unsuspend a Device |
| GET | /api/v1/devices/{deviceId}/users | List all users for a device |
| POST | /api/v1/directories/{appInstanceId}/groups/modify | Update an Active Directory group membership |
| GET | /api/v1/domains | List all Custom Domains |
| POST | /api/v1/domains | Create a Custom Domain |
| GET | /api/v1/domains/{domainId} | Retrieve a custom domain |
| PUT | /api/v1/domains/{domainId} | Replace a custom domain's brand |
| DELETE | /api/v1/domains/{domainId} | Delete a custom domain |
| PUT | /api/v1/domains/{domainId}/certificate | Upsert the custom domain's certificate |
| POST | /api/v1/domains/{domainId}/verify | Verify a custom domain |
| GET | /api/v1/email-domains | List all email domains |
| POST | /api/v1/email-domains | Create an email domain |
| GET | /api/v1/email-domains/{emailDomainId} | Retrieve an email domain |
| PUT | /api/v1/email-domains/{emailDomainId} | Replace an email domain |
| DELETE | /api/v1/email-domains/{emailDomainId} | Delete an email domain |
| POST | /api/v1/email-domains/{emailDomainId}/verify | Verify an email domain |
| GET | /api/v1/email-servers | List all enrolled SMTP servers |
| POST | /api/v1/email-servers | Create a custom SMTP server |
| GET | /api/v1/email-servers/{emailServerId} | Retrieve an SMTP server configuration |
| PATCH | /api/v1/email-servers/{emailServerId} | Update an SMTP server configuration |
| DELETE | /api/v1/email-servers/{emailServerId} | Delete an SMTP server configuration |
| POST | /api/v1/email-servers/{emailServerId}/test | Test an SMTP server configuration |
| GET | /api/v1/eventHooks | List all event hooks |
| POST | /api/v1/eventHooks | Create an event hook |
| GET | /api/v1/eventHooks/{eventHookId} | Retrieve an event hook |
| PUT | /api/v1/eventHooks/{eventHookId} | Replace an event hook |
| DELETE | /api/v1/eventHooks/{eventHookId} | Delete an event hook |
| POST | /api/v1/eventHooks/{eventHookId}/lifecycle/activate | Activate an event hook |
| POST | /api/v1/eventHooks/{eventHookId}/lifecycle/deactivate | Deactivate an event hook |
| POST | /api/v1/eventHooks/{eventHookId}/lifecycle/verify | Verify an event hook |
| GET | /api/v1/features | List all features |
| GET | /api/v1/features/{featureId} | Retrieve a feature |
| GET | /api/v1/features/{featureId}/dependencies | List all dependencies |
| GET | /api/v1/features/{featureId}/dependents | List all dependents |
| POST | /api/v1/features/{featureId}/{lifecycle} | Update a feature lifecycle |
| GET | /api/v1/first-party-app-settings/{appName} | Retrieve the Okta application settings |
| PUT | /api/v1/first-party-app-settings/{appName} | Replace the Okta application settings |
| GET | /api/v1/groups | List all groups |
| POST | /api/v1/groups | Add a group |
| GET | /api/v1/groups/rules | List all group rules |
| POST | /api/v1/groups/rules | Create a group rule |
| GET | /api/v1/groups/rules/{groupRuleId} | Retrieve a group rule |
| PUT | /api/v1/groups/rules/{groupRuleId} | Replace a group rule |
| DELETE | /api/v1/groups/rules/{groupRuleId} | Delete a group rule |
| POST | /api/v1/groups/rules/{groupRuleId}/lifecycle/activate | Activate a group rule |
| POST | /api/v1/groups/rules/{groupRuleId}/lifecycle/deactivate | Deactivate a group rule |
| GET | /api/v1/groups/{groupId} | Retrieve a group |
| PUT | /api/v1/groups/{groupId} | Replace a group |
| DELETE | /api/v1/groups/{groupId} | Delete a group |
| GET | /api/v1/groups/{groupId}/apps | List all assigned apps |
| GET | /api/v1/groups/{groupId}/owners | List all group owners |
| POST | /api/v1/groups/{groupId}/owners | Assign a group owner |
| DELETE | /api/v1/groups/{groupId}/owners/{ownerId} | Delete a group owner |
| GET | /api/v1/groups/{groupId}/roles | List all group role assignments |
| POST | /api/v1/groups/{groupId}/roles | Assign a role to a group |
| GET | /api/v1/groups/{groupId}/roles/{roleAssignmentId} | Retrieve a group role assignment |
| DELETE | /api/v1/groups/{groupId}/roles/{roleAssignmentId} | Unassign a group role |
| GET | /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps | List all group role app targets |
| PUT | /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps/{appName} | Assign a group role app target |
| DELETE | /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps/{appName} | Unassign a group role app target |
| PUT | /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps/{appName}/{appId} | Assign a group role app instance target |
| DELETE | /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps/{appName}/{appId} | Unassign a group role app instance target |
| GET | /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/groups | List all group role group targets |
| PUT | /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/groups/{targetGroupId} | Assign a group role group target |
| DELETE | /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/groups/{targetGroupId} | Unassign a group role group target |
| GET | /api/v1/groups/{groupId}/users | List all member users |
| PUT | /api/v1/groups/{groupId}/users/{userId} | Assign a user to a group |
| DELETE | /api/v1/groups/{groupId}/users/{userId} | Unassign a user from a group |
| GET | /api/v1/hook-keys | List all keys |
| POST | /api/v1/hook-keys | Create a key |
| GET | /api/v1/hook-keys/public/{keyId} | Retrieve a public key |
| GET | /api/v1/hook-keys/{id} | Retrieve a key by ID |
| PUT | /api/v1/hook-keys/{id} | Replace a key |
| DELETE | /api/v1/hook-keys/{id} | Delete a key |
| GET | /api/v1/iam/assignees/users | List all users with role assignments |
| GET | /api/v1/iam/governance/bundles | List all governance bundles for the Admin Console |
| POST | /api/v1/iam/governance/bundles | Create a governance bundle for the Admin Console in RAMP |
| GET | /api/v1/iam/governance/bundles/{bundleId} | Retrieve a governance bundle from RAMP |
| PUT | /api/v1/iam/governance/bundles/{bundleId} | Replace a governance bundle in RAMP |
| DELETE | /api/v1/iam/governance/bundles/{bundleId} | Delete a governance bundle from RAMP |
| GET | /api/v1/iam/governance/bundles/{bundleId}/entitlements | List all entitlements for a governance bundle |
| GET | /api/v1/iam/governance/bundles/{bundleId}/entitlements/{entitlementId}/values | List all entitlement values for a bundle entitlement |
| GET | /api/v1/iam/governance/optIn | Retrieve the opt-in status from RAMP |
| POST | /api/v1/iam/governance/optIn | Opt in the Admin Console to RAMP |
| POST | /api/v1/iam/governance/optOut | Opt out the Admin Console from RAMP |
| GET | /api/v1/iam/resource-sets | List all resource sets |
| POST | /api/v1/iam/resource-sets | Create a resource set |
| GET | /api/v1/iam/resource-sets/{resourceSetIdOrLabel} | Retrieve a resource set |
| PUT | /api/v1/iam/resource-sets/{resourceSetIdOrLabel} | Replace a resource set |
| DELETE | /api/v1/iam/resource-sets/{resourceSetIdOrLabel} | Delete a resource set |
| GET | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings | List all role resource set bindings |
| POST | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings | Create a role resource set binding |
| GET | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel} | Retrieve a role resource set binding |
| DELETE | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel} | Delete a role resource set binding |
| GET | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members | List all role resource set binding members |
| PATCH | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members | Add more role resource set binding members |
| GET | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members/{memberId} | Retrieve a role resource set binding member |
| DELETE | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members/{memberId} | Unassign a role resource set binding member |
| GET | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources | List all resource set resources |
| POST | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources | Add a resource set resource with conditions |
| PATCH | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources | Add more resources to a resource set |
| GET | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources/{resourceId} | Retrieve a resource set resource |
| PUT | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources/{resourceId} | Replace the resource set resource conditions |
| DELETE | /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources/{resourceId} | Delete a resource set resource |
| GET | /api/v1/iam/roles | List all custom roles |
| POST | /api/v1/iam/roles | Create a custom role |
| GET | /api/v1/iam/roles/{roleIdOrLabel} | Retrieve a role |
| PUT | /api/v1/iam/roles/{roleIdOrLabel} | Replace a custom role |
| DELETE | /api/v1/iam/roles/{roleIdOrLabel} | Delete a custom role |
| GET | /api/v1/iam/roles/{roleIdOrLabel}/permissions | List all custom role permissions |
| GET | /api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType} | Retrieve a custom role permission |
| POST | /api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType} | Create a custom role permission |
| PUT | /api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType} | Replace a custom role permission |
| DELETE | /api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType} | Delete a custom role permission |
| GET | /api/v1/identity-sources/{identitySourceId}/sessions | List all identity source sessions |
| POST | /api/v1/identity-sources/{identitySourceId}/sessions | Create an identity source session |
| GET | /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId} | Retrieve an identity source session |
| DELETE | /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId} | Delete an identity source session |
| POST | /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-delete | Upload the data to be deleted in Okta |
| POST | /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-upsert | Upload the data to be upserted in Okta |
| POST | /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/start-import | Start the import from the identity source |
| GET | /api/v1/idps | List all IdPs |
| POST | /api/v1/idps | Create an IdP |
| GET | /api/v1/idps/credentials/keys | List all IdP key credentials |
| POST | /api/v1/idps/credentials/keys | Create an IdP key credential |
| GET | /api/v1/idps/credentials/keys/{kid} | Retrieve an IdP key credential |
| PUT | /api/v1/idps/credentials/keys/{kid} | Replace an IdP key credential |
| DELETE | /api/v1/idps/credentials/keys/{kid} | Delete an IdP key credential |
| GET | /api/v1/idps/{idpId} | Retrieve an IdP |
| PUT | /api/v1/idps/{idpId} | Replace an IdP |
| DELETE | /api/v1/idps/{idpId} | Delete an IdP |
| GET | /api/v1/idps/{idpId}/credentials/csrs | List all certificate signing requests |
| POST | /api/v1/idps/{idpId}/credentials/csrs | Generate a certificate signing request |
| GET | /api/v1/idps/{idpId}/credentials/csrs/{idpCsrId} | Retrieve a certificate signing request |
| DELETE | /api/v1/idps/{idpId}/credentials/csrs/{idpCsrId} | Revoke a certificate signing request |
| POST | /api/v1/idps/{idpId}/credentials/csrs/{idpCsrId}/lifecycle/publish | Publish a certificate signing request |
| GET | /api/v1/idps/{idpId}/credentials/keys | List all signing key credentials for IdP |
| GET | /api/v1/idps/{idpId}/credentials/keys/active | List the active signing key credential for IdP |
| POST | /api/v1/idps/{idpId}/credentials/keys/generate | Generate a new signing key credential for IdP |
| GET | /api/v1/idps/{idpId}/credentials/keys/{kid} | Retrieve a signing key credential for IdP |
| POST | /api/v1/idps/{idpId}/credentials/keys/{kid}/clone | Clone a signing key credential for IdP |
| POST | /api/v1/idps/{idpId}/lifecycle/activate | Activate an IdP |
| POST | /api/v1/idps/{idpId}/lifecycle/deactivate | Deactivate an IdP |
| GET | /api/v1/idps/{idpId}/users | List all users for IdP |
| GET | /api/v1/idps/{idpId}/users/{userId} | Retrieve a user for IdP |
| POST | /api/v1/idps/{idpId}/users/{userId} | Link a user to IdP |
| DELETE | /api/v1/idps/{idpId}/users/{userId} | Unlink a user from IdP |
| GET | /api/v1/idps/{idpId}/users/{userId}/credentials/tokens | List all tokens from OIDC IdP |
| GET | /api/v1/inlineHooks | List all inline hooks |
| POST | /api/v1/inlineHooks | Create an inline hook |
| GET | /api/v1/inlineHooks/{inlineHookId} | Retrieve an inline hook |
| POST | /api/v1/inlineHooks/{inlineHookId} | Update an inline hook |
| PUT | /api/v1/inlineHooks/{inlineHookId} | Replace an inline hook |
| DELETE | /api/v1/inlineHooks/{inlineHookId} | Delete an inline hook |
| POST | /api/v1/inlineHooks/{inlineHookId}/execute | Execute an inline hook |
| POST | /api/v1/inlineHooks/{inlineHookId}/lifecycle/activate | Activate an inline hook |
| POST | /api/v1/inlineHooks/{inlineHookId}/lifecycle/deactivate | Deactivate an inline hook |
| GET | /api/v1/logStreams | List all log streams |
| POST | /api/v1/logStreams | Create a log stream |
| GET | /api/v1/logStreams/{logStreamId} | Retrieve a log stream |
| PUT | /api/v1/logStreams/{logStreamId} | Replace a log stream |
| DELETE | /api/v1/logStreams/{logStreamId} | Delete a log stream |
| POST | /api/v1/logStreams/{logStreamId}/lifecycle/activate | Activate a log stream |
| POST | /api/v1/logStreams/{logStreamId}/lifecycle/deactivate | Deactivate a log stream |
| GET | /api/v1/logs | List all System Log events |
| GET | /api/v1/mappings | List all profile mappings |
| GET | /api/v1/mappings/{mappingId} | Retrieve a profile mapping |
| POST | /api/v1/mappings/{mappingId} | Update a profile mapping |
| GET | /api/v1/meta/schemas/apps/{appId}/default | Retrieve the default app user schema for an app |
| POST | /api/v1/meta/schemas/apps/{appId}/default | Update the app user profile schema for an app |
| GET | /api/v1/meta/schemas/group/default | Retrieve the default group schema |
| POST | /api/v1/meta/schemas/group/default | Update the group profile schema |
| GET | /api/v1/meta/schemas/logStream | List the log stream schemas |
| GET | /api/v1/meta/schemas/logStream/{logStreamType} | Retrieve the log stream schema for the schema type |
| GET | /api/v1/meta/schemas/user/linkedObjects | List all linked object definitions |
| POST | /api/v1/meta/schemas/user/linkedObjects | Create a linked object definition |
| GET | /api/v1/meta/schemas/user/linkedObjects/{linkedObjectName} | Retrieve a linked object definition |
| DELETE | /api/v1/meta/schemas/user/linkedObjects/{linkedObjectName} | Delete a linked object definition |
| GET | /api/v1/meta/schemas/user/{schemaId} | Retrieve a user schema |
| POST | /api/v1/meta/schemas/user/{schemaId} | Update a user schema |
| GET | /api/v1/meta/types/user | List all user types |
| POST | /api/v1/meta/types/user | Create a user type |
| GET | /api/v1/meta/types/user/{typeId} | Retrieve a user type |
| POST | /api/v1/meta/types/user/{typeId} | Update a user type |
| PUT | /api/v1/meta/types/user/{typeId} | Replace a user type |
| DELETE | /api/v1/meta/types/user/{typeId} | Delete a user type |
| GET | /api/v1/meta/uischemas | List all UI schemas |
| POST | /api/v1/meta/uischemas | Create a UI schema |
| GET | /api/v1/meta/uischemas/{id} | Retrieve a UI schema |
| PUT | /api/v1/meta/uischemas/{id} | Replace a UI schema |
| DELETE | /api/v1/meta/uischemas/{id} | Delete a UI schema |
| GET | /api/v1/org | Retrieve the Org general settings |
| POST | /api/v1/org | Update the Org general settings |
| PUT | /api/v1/org | Replace the Org general settings |
| GET | /api/v1/org/captcha | Retrieve the org-wide CAPTCHA settings |
| PUT | /api/v1/org/captcha | Replace the org-wide CAPTCHA settings |
| DELETE | /api/v1/org/captcha | Delete the org-wide CAPTCHA settings |
| GET | /api/v1/org/contacts | List all org contact types |
| GET | /api/v1/org/contacts/{contactType} | Retrieve the contact type user |
| PUT | /api/v1/org/contacts/{contactType} | Replace the contact type user |
| POST | /api/v1/org/email/bounces/remove-list | Remove bounced emails |
| GET | /api/v1/org/factors/yubikey_token/tokens | L |
…(truncated)