AACFlow

Okta

Benutzer und Gruppen in Okta verwalten

Okta is an identity and access management platform that provides secure authentication, authorization, and user management for organizations.

With the Okta integration in AACFlow, you can:

  • List and search users: Retrieve users from your Okta org with SCIM search expressions and filters
  • Manage user lifecycle: Create, activate, deactivate, suspend, unsuspend, and delete users
  • Update user profiles: Modify user attributes like name, email, phone, title, and department
  • Reset passwords: Trigger password reset flows with optional email notification
  • Manage groups: Create, update, delete, and list groups in your organization
  • Manage group membership: Add or remove users from groups, and list group members

In AACFlow, the Okta integration enables your agents to automate identity management tasks as part of their workflows. This allows for scenarios such as onboarding new employees, offboarding departing users, managing group-based access, auditing user status, and responding to security events by suspending or deactivating accounts.

Need Help?

If you encounter issues with the Okta integration, contact us at help@aacflow.io

Nutzungsanleitung

Integrate Okta identity management into your workflow. List, create, update, activate, suspend, and delete users. Reset passwords. Manage groups and group membership.

Tools

okta_list_users

List all users in your Okta organization with optional search and filtering

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
searchstringNeinOkta search expression (e.g., profile.firstName eq "John" or profile.email co "example.com")
filterstringNeinOkta filter expression (e.g., status eq "ACTIVE")
limitnumberNeinMaximum number of users to return (default: 200, max: 200)

Ausgabe

ParameterTypBeschreibung
usersarrayArray of Okta user objects
idstringUser ID
statusstringUser status (ACTIVE, STAGED, PROVISIONED, etc.)
firstNamestringFirst name
lastNamestringLast name
emailstringEmail address
loginstringLogin (usually email)
mobilePhonestringMobile phone
titlestringJob title
departmentstringDepartment
createdstringCreation timestamp
lastLoginstringLast login timestamp
lastUpdatedstringLast update timestamp
activatedstringActivation timestamp
statusChangedstringStatus change timestamp
countnumberNumber of users returned
successbooleanOperation success status

okta_get_user

Get a specific user by ID or login from your Okta organization

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
userIdstringJaUser ID or login (email) to look up

Ausgabe

ParameterTypBeschreibung
idstringUser ID
statusstringUser status
firstNamestringFirst name
lastNamestringLast name
emailstringEmail address
loginstringLogin (usually email)
mobilePhonestringMobile phone
secondEmailstringSecondary email
displayNamestringDisplay name
titlestringJob title
departmentstringDepartment
organizationstringOrganization
managerstringManager name
managerIdstringManager ID
divisionstringDivision
employeeNumberstringEmployee number
userTypestringUser type
createdstringCreation timestamp
activatedstringActivation timestamp
lastLoginstringLast login timestamp
lastUpdatedstringLast update timestamp
statusChangedstringStatus change timestamp
passwordChangedstringPassword change timestamp
successbooleanOperation success status

okta_create_user

Create a new user in your Okta organization

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
firstNamestringJaFirst name of the user
lastNamestringJaLast name of the user
emailstringJaEmail address of the user
loginstringNeinLogin for the user (defaults to email if not provided)
passwordstringNeinPassword for the user (if not set, user will be emailed to set password)
mobilePhonestringNeinMobile phone number
titlestringNeinJob title
departmentstringNeinDepartment
activatebooleanNeinWhether to activate the user immediately (default: true)

Ausgabe

ParameterTypBeschreibung
idstringCreated user ID
statusstringUser status
firstNamestringFirst name
lastNamestringLast name
emailstringEmail address
loginstringLogin
createdstringCreation timestamp
lastUpdatedstringLast update timestamp
successbooleanOperation success status

okta_update_user

Update a user profile in your Okta organization

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
userIdstringJaUser ID or login to update
firstNamestringNeinUpdated first name
lastNamestringNeinUpdated last name
emailstringNeinUpdated email address
loginstringNeinUpdated login
mobilePhonestringNeinUpdated mobile phone number
titlestringNeinUpdated job title
departmentstringNeinUpdated department

Ausgabe

ParameterTypBeschreibung
idstringUser ID
statusstringUser status
firstNamestringFirst name
lastNamestringLast name
emailstringEmail address
loginstringLogin
createdstringCreation timestamp
lastUpdatedstringLast update timestamp
successbooleanOperation success status

okta_activate_user

Activate a user in your Okta organization. Can only be performed on users with STAGED or DEPROVISIONED status. Optionally sends an activation email.

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
userIdstringJaUser ID or login to activate
sendEmailbooleanNeinSend activation email to the user (default: true)

Ausgabe

ParameterTypBeschreibung
userIdstringActivated user ID
activatedbooleanWhether the user was activated
activationUrlstringActivation URL (only returned when sendEmail is false)
activationTokenstringActivation token (only returned when sendEmail is false)
successbooleanOperation success status

okta_deactivate_user

Deactivate a user in your Okta organization. This transitions the user to DEPROVISIONED status.

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
userIdstringJaUser ID or login to deactivate
sendEmailbooleanNeinSend deactivation email to admin (default: false)

Ausgabe

ParameterTypBeschreibung
userIdstringDeactivated user ID
deactivatedbooleanWhether the user was deactivated
successbooleanOperation success status

okta_suspend_user

Suspend a user in your Okta organization. Only users with ACTIVE status can be suspended. Suspended users cannot log in but retain group and app assignments.

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
userIdstringJaUser ID or login to suspend

Ausgabe

ParameterTypBeschreibung
userIdstringSuspended user ID
suspendedbooleanWhether the user was suspended
successbooleanOperation success status

okta_unsuspend_user

Unsuspend a previously suspended user in your Okta organization. Returns the user to ACTIVE status.

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
userIdstringJaUser ID or login to unsuspend

Ausgabe

ParameterTypBeschreibung
userIdstringUnsuspended user ID
unsuspendedbooleanWhether the user was unsuspended
successbooleanOperation success status

okta_reset_password

Generate a one-time token to reset a user password. Can email the reset link to the user or return it directly. Transitions the user to RECOVERY status.

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
userIdstringJaUser ID or login to reset password for
sendEmailbooleanNeinSend password reset email to the user (default: true)

Ausgabe

ParameterTypBeschreibung
userIdstringUser ID
resetPasswordUrlstringPassword reset URL (only returned when sendEmail is false)
successbooleanOperation success status

okta_delete_user

Permanently delete a user from your Okta organization. Can only be performed on DEPROVISIONED users. If the user is active, this will first deactivate them and a second call is needed to delete.

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
userIdstringJaUser ID to delete
sendEmailbooleanNeinSend deactivation email to admin (default: false)

Ausgabe

ParameterTypBeschreibung
userIdstringDeleted user ID
deletedbooleanWhether the user was deleted
successbooleanOperation success status

okta_list_groups

List all groups in your Okta organization with optional search and filtering

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
searchstringNeinOkta search expression for groups (e.g., profile.name sw "Engineering" or type eq "OKTA_GROUP")
filterstringNeinOkta filter expression (e.g., type eq "OKTA_GROUP")
limitnumberNeinMaximum number of groups to return (default: 10000, max: 10000)

Ausgabe

ParameterTypBeschreibung
groupsarrayArray of Okta group objects
idstringGroup ID
namestringGroup name
descriptionstringGroup description
typestringGroup type (OKTA_GROUP, APP_GROUP, BUILT_IN)
createdstringCreation timestamp
lastUpdatedstringLast update timestamp
lastMembershipUpdatedstringLast membership change timestamp
countnumberNumber of groups returned
successbooleanOperation success status

okta_get_group

Get a specific group by ID from your Okta organization

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
groupIdstringJaGroup ID to look up

Ausgabe

ParameterTypBeschreibung
idstringGroup ID
namestringGroup name
descriptionstringGroup description
typestringGroup type
createdstringCreation timestamp
lastUpdatedstringLast update timestamp
lastMembershipUpdatedstringLast membership change timestamp
successbooleanOperation success status

okta_create_group

Create a new group in your Okta organization

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
namestringJaName of the group
descriptionstringNeinDescription of the group

Ausgabe

ParameterTypBeschreibung
idstringCreated group ID
namestringGroup name
descriptionstringGroup description
typestringGroup type
createdstringCreation timestamp
lastUpdatedstringLast update timestamp
lastMembershipUpdatedstringLast membership change timestamp
successbooleanOperation success status

okta_update_group

Update a group profile in your Okta organization. Only groups of OKTA_GROUP type can be updated. All profile properties must be specified (full replacement).

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
groupIdstringJaGroup ID to update
namestringJaUpdated group name
descriptionstringNeinUpdated group description

Ausgabe

ParameterTypBeschreibung
idstringGroup ID
namestringGroup name
descriptionstringGroup description
typestringGroup type
createdstringCreation timestamp
lastUpdatedstringLast update timestamp
lastMembershipUpdatedstringLast membership change timestamp
successbooleanOperation success status

okta_delete_group

Delete a group from your Okta organization. Groups of OKTA_GROUP or APP_GROUP type can be removed.

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
groupIdstringJaGroup ID to delete

Ausgabe

ParameterTypBeschreibung
groupIdstringDeleted group ID
deletedbooleanWhether the group was deleted
successbooleanOperation success status

okta_add_user_to_group

Add a user to a group in your Okta organization

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
groupIdstringJaGroup ID to add the user to
userIdstringJaUser ID to add to the group

Ausgabe

ParameterTypBeschreibung
groupIdstringGroup ID
userIdstringUser ID added to the group
addedbooleanWhether the user was added
successbooleanOperation success status

okta_remove_user_from_group

Remove a user from a group in your Okta organization

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
groupIdstringJaGroup ID to remove the user from
userIdstringJaUser ID to remove from the group

Ausgabe

ParameterTypBeschreibung
groupIdstringGroup ID
userIdstringUser ID removed from the group
removedbooleanWhether the user was removed
successbooleanOperation success status

okta_list_group_members

List all members of a specific group in your Okta organization

Eingabe

ParameterTypErforderlichBeschreibung
apiKeystringJaOkta API token for authentication
domainstringJaOkta domain (e.g., dev-123456.okta.com)
groupIdstringJaGroup ID to list members for
limitnumberNeinMaximum number of members to return (default: 1000, max: 1000)

Ausgabe

ParameterTypBeschreibung
membersarrayArray of group member user objects
idstringUser ID
statusstringUser status
firstNamestringFirst name
lastNamestringLast name
emailstringEmail address
loginstringLogin
mobilePhonestringMobile phone
titlestringJob title
departmentstringDepartment
createdstringCreation timestamp
lastLoginstringLast login timestamp
lastUpdatedstringLast update timestamp
activatedstringActivation timestamp
statusChangedstringStatus change timestamp
countnumberNumber of members returned
successbooleanOperation success status

On this page

Heute mit dem Aufbau beginnen
Über 100 000 Entwickler vertrauen uns.
Die SaaS-Plattform zum Aufbau von KI-Agenten und für Ihre agentische Belegschaft.
Loslegen