Okta
Business appsAPI keyConnection test available
Manage Okta users, groups, app assignments and sessions.
OCNORA ships 25 typed Okta operations. Each node has a schema-driven form, input and output tables beside its settings, and is pre-flighted by Workflow Health before your first real run. Endpoints not covered by a typed node are called at https://{org_url}/api/v1 through the HTTP node with the same credential.
Before you connect Okta
- Authentication
- API key
- Credential
- the API token, or {"api_token": "…"}
- Connection test
- Available: the stored credential can be checked against the provider when you add it. This is not a record that a test was run or passed.
What you can do with Okta
Operations, grouped by what they do to your data.
Create and send 3
Read and search 9
Delete and cancel 5
Other operations 5
A sample Okta workflow
- 1A core triggerStart the run from a chat, form, manual, schedule, webhook, workflow trigger — no Okta trigger is needed.
- 2Get Applicationokta.get_appFetch one Okta app integration by id, with its status and sign-on mode.
- 3Activate Userokta.activate_userActivate a STAGED or DEPROVISIONED user. When the activation email is not sent, Okta returns the activation URL and token so a workflow can deliver them itself.
An outline built from this provider’s node contracts, not a recorded run. Each step’s output fields are available to the next in the field picker.
Every node below has a reference page: what it does, the connection it needs, its config fields with types, constraints and examples, and the shapes it emits.
Operations 25
- Activate UserActivate a STAGED or DEPROVISIONED user. When the activation email is not sent, Okta returns the activation URL and token so a workflow can deliver them itself.okta.activate_user
- Add User to GroupAdd a user to an Okta group, granting them everything that group is assigned. Adding a member who is already in the group is not an error.okta.add_user_to_group
- Assign User to ApplicationAssign a user directly to an app integration. Apps whose sign-on mode needs credentials also want an application username.okta.assign_app_user
- Create GroupCreate an Okta group that users and app assignments can be added to.okta.create_group
- Create UserCreate a user in the Okta org, optionally activating them and adding them to groups in the same call.okta.create_user
- Deactivate UserDeactivate a user, moving them to DEPROVISIONED and ending their access. This is the step Okta requires before a user can be deleted.okta.deactivate_user
- Delete GroupDelete an Okta group. Its members keep their accounts but lose whatever access the group granted them.okta.delete_group
- Delete UserPermanently delete a user. Okta only deletes a user who is already DEPROVISIONED, so run Deactivate User first or switch on 'deactivate_first' and this node will make both calls in order. Deletion cannot be undone.okta.delete_user
- Expire PasswordExpire a user's current password so Okta forces them to choose a new one at their next sign-in.okta.expire_password
- Get ApplicationFetch one Okta app integration by id, with its status and sign-on mode.okta.get_app
- Get GroupFetch one Okta group by id, with its profile and type.okta.get_group
- Get UserFetch one Okta user by id, by login, or by login shortname, with their current lifecycle status.okta.get_user
- List Application UsersList the users assigned to an Okta app integration.okta.list_app_users
- List ApplicationsList the app integrations in the org, narrowed with a 'q' label prefix or an Okta 'filter' expression.okta.list_apps
- List Group MembersList the users who belong to an Okta group.okta.list_group_members
- List GroupsList groups in the org, narrowed with Okta's 'q' name prefix, an indexed 'filter' expression, or the richer 'search' expression grammar.okta.list_groups
- List User GroupsList every group a user belongs to, including their app groups.okta.list_user_groups
- List UsersList users with Okta's three query forms: 'q' for a name or email prefix, 'filter' for an indexed expression, and 'search' for the full expression grammar including custom profile attributes.okta.list_users
- Remove User from ApplicationUnassign a user from an app integration, removing the access it granted. A user who also has the app through a group keeps it.okta.remove_app_user
- Remove User from GroupRemove a user from an Okta group, withdrawing the access it granted.okta.remove_user_from_group
- Reset PasswordStart a password reset for a user. When the reset email is not sent, Okta returns a one-time reset URL that the workflow can deliver itself.okta.reset_password
- Revoke User SessionsEnd every Okta session the user currently holds, and optionally revoke the OAuth and OpenID Connect tokens issued to them.okta.revoke_user_sessions
- Suspend UserSuspend an active user so they cannot sign in, while keeping their account, group memberships and app assignments intact.okta.suspend_user
- Unsuspend UserReturn a suspended user to the ACTIVE state so they can sign in again.okta.unsuspend_user
- Update UserChange a user's profile or credentials. The default partial mode merges the keys you send; replace mode overwrites the whole profile.okta.update_user
Okta questions
- How does OCNORA authenticate with Okta?
- With a stored API key credential, shaped the API token, or {"api_token": "…"}. A connection test can check it when you add it.
- What can I automate with Okta?
- 25 typed operations, each with a reference page listing its config fields and the shapes it emits.
- What if the Okta operation I need is not listed?
- Call https://{org_url}/api/v1 from the HTTP node with the same credential, or describe the step to the AI builder, which asks our team for a typed node when one is missing.
- Are there templates that use Okta?
- Not yet. Start from a blank workflow, or describe the workflow to Build with AI.
- How are Okta calls controlled?
- Every call and every run step is audited, runs count against the execution budget, and Workflow Health pre-flights the workflow when you save it.
More in Business apps
See your first Okta workflow run.
Book a technical demo. We add the connection, pick a template or describe the workflow to Build with AI, and Workflow Health checks it before it runs.