Okta

使用说明

Integrate Okta identity management into your workflow. List, create, update, activate, suspend, and delete users. Reset passwords. Manage groups and group membership.

工具

`okta_list_users`

List all users in your Okta organization with optional search and filtering

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`search`	string	否	Okta search expression (e.g., profile.firstName eq "John" or profile.email co "example.com")
`filter`	string	否	Okta filter expression (e.g., status eq "ACTIVE")
`limit`	number	否	Maximum number of users to return (default: 200, max: 200)

输出

参数	类型	描述
`users`	array	Array of Okta user objects
↳ `id`	string	User ID
↳ `status`	string	User status (ACTIVE, STAGED, PROVISIONED, etc.)
↳ `firstName`	string	First name
↳ `lastName`	string	Last name
↳ `email`	string	Email address
↳ `login`	string	Login (usually email)
↳ `mobilePhone`	string	Mobile phone
↳ `title`	string	Job title
↳ `department`	string	Department
↳ `created`	string	Creation timestamp
↳ `lastLogin`	string	Last login timestamp
↳ `lastUpdated`	string	Last update timestamp
↳ `activated`	string	Activation timestamp
↳ `statusChanged`	string	Status change timestamp
`count`	number	Number of users returned
`success`	boolean	Operation success status

`okta_get_user`

Get a specific user by ID or login from your Okta organization

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`userId`	string	是	User ID or login (email) to look up

输出

参数	类型	描述
`id`	string	User ID
`status`	string	User status
`firstName`	string	First name
`lastName`	string	Last name
`email`	string	Email address
`login`	string	Login (usually email)
`mobilePhone`	string	Mobile phone
`secondEmail`	string	Secondary email
`displayName`	string	Display name
`title`	string	Job title
`department`	string	Department
`organization`	string	Organization
`manager`	string	Manager name
`managerId`	string	Manager ID
`division`	string	Division
`employeeNumber`	string	Employee number
`userType`	string	User type
`created`	string	Creation timestamp
`activated`	string	Activation timestamp
`lastLogin`	string	Last login timestamp
`lastUpdated`	string	Last update timestamp
`statusChanged`	string	Status change timestamp
`passwordChanged`	string	Password change timestamp
`success`	boolean	Operation success status

`okta_create_user`

Create a new user in your Okta organization

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`firstName`	string	是	First name of the user
`lastName`	string	是	Last name of the user
`email`	string	是	Email address of the user
`login`	string	否	Login for the user (defaults to email if not provided)
`password`	string	否	Password for the user (if not set, user will be emailed to set password)
`mobilePhone`	string	否	Mobile phone number
`title`	string	否	Job title
`department`	string	否	Department
`activate`	boolean	否	Whether to activate the user immediately (default: true)

输出

参数	类型	描述
`id`	string	Created user ID
`status`	string	User status
`firstName`	string	First name
`lastName`	string	Last name
`email`	string	Email address
`login`	string	Login
`created`	string	Creation timestamp
`lastUpdated`	string	Last update timestamp
`success`	boolean	Operation success status

`okta_update_user`

Update a user profile in your Okta organization

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`userId`	string	是	User ID or login to update
`firstName`	string	否	Updated first name
`lastName`	string	否	Updated last name
`email`	string	否	Updated email address
`login`	string	否	Updated login
`mobilePhone`	string	否	Updated mobile phone number
`title`	string	否	Updated job title
`department`	string	否	Updated department

输出

参数	类型	描述
`id`	string	User ID
`status`	string	User status
`firstName`	string	First name
`lastName`	string	Last name
`email`	string	Email address
`login`	string	Login
`created`	string	Creation timestamp
`lastUpdated`	string	Last update timestamp
`success`	boolean	Operation success status

`okta_activate_user`

Activate a user in your Okta organization. Can only be performed on users with STAGED or DEPROVISIONED status. Optionally sends an activation email.

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`userId`	string	是	User ID or login to activate
`sendEmail`	boolean	否	Send activation email to the user (default: true)

输出

参数	类型	描述
`userId`	string	Activated user ID
`activated`	boolean	Whether the user was activated
`activationUrl`	string	Activation URL (only returned when sendEmail is false)
`activationToken`	string	Activation token (only returned when sendEmail is false)
`success`	boolean	Operation success status

`okta_deactivate_user`

Deactivate a user in your Okta organization. This transitions the user to DEPROVISIONED status.

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`userId`	string	是	User ID or login to deactivate
`sendEmail`	boolean	否	Send deactivation email to admin (default: false)

输出

参数	类型	描述
`userId`	string	Deactivated user ID
`deactivated`	boolean	Whether the user was deactivated
`success`	boolean	Operation success status

`okta_suspend_user`

Suspend a user in your Okta organization. Only users with ACTIVE status can be suspended. Suspended users cannot log in but retain group and app assignments.

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`userId`	string	是	User ID or login to suspend

输出

参数	类型	描述
`userId`	string	Suspended user ID
`suspended`	boolean	Whether the user was suspended
`success`	boolean	Operation success status

`okta_unsuspend_user`

Unsuspend a previously suspended user in your Okta organization. Returns the user to ACTIVE status.

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`userId`	string	是	User ID or login to unsuspend

输出

参数	类型	描述
`userId`	string	Unsuspended user ID
`unsuspended`	boolean	Whether the user was unsuspended
`success`	boolean	Operation success status

`okta_reset_password`

Generate a one-time token to reset a user password. Can email the reset link to the user or return it directly. Transitions the user to RECOVERY status.

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`userId`	string	是	User ID or login to reset password for
`sendEmail`	boolean	否	Send password reset email to the user (default: true)

输出

参数	类型	描述
`userId`	string	User ID
`resetPasswordUrl`	string	Password reset URL (only returned when sendEmail is false)
`success`	boolean	Operation success status

`okta_delete_user`

Permanently delete a user from your Okta organization. Can only be performed on DEPROVISIONED users. If the user is active, this will first deactivate them and a second call is needed to delete.

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`userId`	string	是	User ID to delete
`sendEmail`	boolean	否	Send deactivation email to admin (default: false)

输出

参数	类型	描述
`userId`	string	Deleted user ID
`deleted`	boolean	Whether the user was deleted
`success`	boolean	Operation success status

`okta_list_groups`

List all groups in your Okta organization with optional search and filtering

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`search`	string	否	Okta search expression for groups (e.g., profile.name sw "Engineering" or type eq "OKTA_GROUP")
`filter`	string	否	Okta filter expression (e.g., type eq "OKTA_GROUP")
`limit`	number	否	Maximum number of groups to return (default: 10000, max: 10000)

输出

参数	类型	描述
`groups`	array	Array of Okta group objects
↳ `id`	string	Group ID
↳ `name`	string	Group name
↳ `description`	string	Group description
↳ `type`	string	Group type (OKTA_GROUP, APP_GROUP, BUILT_IN)
↳ `created`	string	Creation timestamp
↳ `lastUpdated`	string	Last update timestamp
↳ `lastMembershipUpdated`	string	Last membership change timestamp
`count`	number	Number of groups returned
`success`	boolean	Operation success status

`okta_get_group`

Get a specific group by ID from your Okta organization

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`groupId`	string	是	Group ID to look up

输出

参数	类型	描述
`id`	string	Group ID
`name`	string	Group name
`description`	string	Group description
`type`	string	Group type
`created`	string	Creation timestamp
`lastUpdated`	string	Last update timestamp
`lastMembershipUpdated`	string	Last membership change timestamp
`success`	boolean	Operation success status

`okta_create_group`

Create a new group in your Okta organization

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`name`	string	是	Name of the group
`description`	string	否	Description of the group

输出

参数	类型	描述
`id`	string	Created group ID
`name`	string	Group name
`description`	string	Group description
`type`	string	Group type
`created`	string	Creation timestamp
`lastUpdated`	string	Last update timestamp
`lastMembershipUpdated`	string	Last membership change timestamp
`success`	boolean	Operation success status

`okta_update_group`

Update a group profile in your Okta organization. Only groups of OKTA_GROUP type can be updated. All profile properties must be specified (full replacement).

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`groupId`	string	是	Group ID to update
`name`	string	是	Updated group name
`description`	string	否	Updated group description

输出

参数	类型	描述
`id`	string	Group ID
`name`	string	Group name
`description`	string	Group description
`type`	string	Group type
`created`	string	Creation timestamp
`lastUpdated`	string	Last update timestamp
`lastMembershipUpdated`	string	Last membership change timestamp
`success`	boolean	Operation success status

`okta_delete_group`

Delete a group from your Okta organization. Groups of OKTA_GROUP or APP_GROUP type can be removed.

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`groupId`	string	是	Group ID to delete

输出

参数	类型	描述
`groupId`	string	Deleted group ID
`deleted`	boolean	Whether the group was deleted
`success`	boolean	Operation success status

`okta_add_user_to_group`

Add a user to a group in your Okta organization

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`groupId`	string	是	Group ID to add the user to
`userId`	string	是	User ID to add to the group

输出

参数	类型	描述
`groupId`	string	Group ID
`userId`	string	User ID added to the group
`added`	boolean	Whether the user was added
`success`	boolean	Operation success status

`okta_remove_user_from_group`

Remove a user from a group in your Okta organization

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`groupId`	string	是	Group ID to remove the user from
`userId`	string	是	User ID to remove from the group

输出

参数	类型	描述
`groupId`	string	Group ID
`userId`	string	User ID removed from the group
`removed`	boolean	Whether the user was removed
`success`	boolean	Operation success status

`okta_list_group_members`

List all members of a specific group in your Okta organization

输入

参数	类型	必填	描述
`apiKey`	string	是	Okta API token for authentication
`domain`	string	是	Okta domain (e.g., dev-123456.okta.com)
`groupId`	string	是	Group ID to list members for
`limit`	number	否	Maximum number of members to return (default: 1000, max: 1000)

输出

参数	类型	描述
`members`	array	Array of group member user objects
↳ `id`	string	User ID
↳ `status`	string	User status
↳ `firstName`	string	First name
↳ `lastName`	string	Last name
↳ `email`	string	Email address
↳ `login`	string	Login
↳ `mobilePhone`	string	Mobile phone
↳ `title`	string	Job title
↳ `department`	string	Department
↳ `created`	string	Creation timestamp
↳ `lastLogin`	string	Last login timestamp
↳ `lastUpdated`	string	Last update timestamp
↳ `activated`	string	Activation timestamp
↳ `statusChanged`	string	Status change timestamp
`count`	number	Number of members returned
`success`	boolean	Operation success status

On this page