AACFlow

Okta

Manage users and groups in Okta

Usage Instructions

Integrate Okta identity management into your workflow. List, create, update, activate, suspend, and delete users. Reset passwords. Manage groups and group membership.

Tools

okta_list_users

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
searchstringNoOkta search expression (e.g., profile.firstName eq "John" or profile.email co "example.com")
filterstringNoOkta filter expression (e.g., status eq "ACTIVE")
limitnumberNoNo description

Output

ParameterTypeDescription
usersarrayArray of Okta user objects
idstringUser ID
statusstringUser status (ACTIVE, STAGED, PROVISIONED, etc.)
firstNamestringFirst name
lastNamestringLast name
emailstringEmail address
loginstringLogin (usually email)
mobilePhonestringMobile phone
titlestringJob title
departmentstringDepartment
createdstringCreation timestamp
lastLoginstringLast login timestamp
lastUpdatedstringLast update timestamp
activatedstringActivation timestamp
statusChangedstringStatus change timestamp
countnumberNumber of users returned
successbooleanOperation success status

okta_get_user

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
userIdstringYesNo description

Output

ParameterTypeDescription
idstringUser ID
statusstringUser status
firstNamestringFirst name
lastNamestringLast name
emailstringEmail address
loginstringLogin (usually email)
mobilePhonestringMobile phone
secondEmailstringSecondary email
displayNamestringDisplay name
titlestringJob title
departmentstringDepartment
organizationstringOrganization
managerstringManager name
managerIdstringManager ID
divisionstringDivision
employeeNumberstringEmployee number
userTypestringUser type
createdstringCreation timestamp
activatedstringActivation timestamp
lastLoginstringLast login timestamp
lastUpdatedstringLast update timestamp
statusChangedstringStatus change timestamp
passwordChangedstringPassword change timestamp
successbooleanOperation success status

okta_create_user

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
firstNamestringYesNo description
lastNamestringYesNo description
emailstringYesNo description
loginstringNoNo description
passwordstringNoNo description
mobilePhonestringNoNo description
titlestringNoNo description
departmentstringNoNo description
activatebooleanNoNo description

Output

ParameterTypeDescription
idstringCreated user ID
statusstringUser status
firstNamestringFirst name
lastNamestringLast name
emailstringEmail address
loginstringLogin
createdstringCreation timestamp
lastUpdatedstringLast update timestamp
successbooleanOperation success status

okta_update_user

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
userIdstringYesNo description
firstNamestringNoNo description
lastNamestringNoNo description
emailstringNoNo description
loginstringNoNo description
mobilePhonestringNoNo description
titlestringNoNo description
departmentstringNoNo description

Output

ParameterTypeDescription
idstringUser ID
statusstringUser status
firstNamestringFirst name
lastNamestringLast name
emailstringEmail address
loginstringLogin
createdstringCreation timestamp
lastUpdatedstringLast update timestamp
successbooleanOperation success status

okta_activate_user

Activate a user in your Okta organization. Can only be performed on users with STAGED or DEPROVISIONED status. Optionally sends an activation email.

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
userIdstringYesNo description
sendEmailbooleanNoNo description

Output

ParameterTypeDescription
userIdstringActivated user ID
activatedbooleanWhether the user was activated
activationUrlstringActivation URL (only returned when sendEmail is false)
activationTokenstringActivation token (only returned when sendEmail is false)
successbooleanOperation success status

okta_deactivate_user

Deactivate a user in your Okta organization. This transitions the user to DEPROVISIONED status.

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
userIdstringYesNo description
sendEmailbooleanNoNo description

Output

ParameterTypeDescription
userIdstringDeactivated user ID
deactivatedbooleanWhether the user was deactivated
successbooleanOperation success status

okta_suspend_user

Suspend a user in your Okta organization. Only users with ACTIVE status can be suspended. Suspended users cannot log in but retain group and app assignments.

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
userIdstringYesNo description

Output

ParameterTypeDescription
userIdstringSuspended user ID
suspendedbooleanWhether the user was suspended
successbooleanOperation success status

okta_unsuspend_user

Unsuspend a previously suspended user in your Okta organization. Returns the user to ACTIVE status.

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
userIdstringYesNo description

Output

ParameterTypeDescription
userIdstringUnsuspended user ID
unsuspendedbooleanWhether the user was unsuspended
successbooleanOperation success status

okta_reset_password

Generate a one-time token to reset a user password. Can email the reset link to the user or return it directly. Transitions the user to RECOVERY status.

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
userIdstringYesNo description
sendEmailbooleanNoNo description

Output

ParameterTypeDescription
userIdstringUser ID
resetPasswordUrlstringPassword reset URL (only returned when sendEmail is false)
successbooleanOperation success status

okta_delete_user

Permanently delete a user from your Okta organization. Can only be performed on DEPROVISIONED users. If the user is active, this will first deactivate them and a second call is needed to delete.

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
userIdstringYesNo description
sendEmailbooleanNoNo description

Output

ParameterTypeDescription
userIdstringDeleted user ID
deletedbooleanWhether the user was deleted
successbooleanOperation success status

okta_list_groups

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
searchstringNoOkta search expression for groups (e.g., profile.name sw "Engineering" or type eq "OKTA_GROUP")
filterstringNoOkta filter expression (e.g., type eq "OKTA_GROUP")
limitnumberNoNo description

Output

ParameterTypeDescription
groupsarrayArray of Okta group objects
idstringGroup ID
namestringGroup name
descriptionstringGroup description
typestringGroup type (OKTA_GROUP, APP_GROUP, BUILT_IN)
createdstringCreation timestamp
lastUpdatedstringLast update timestamp
lastMembershipUpdatedstringLast membership change timestamp
countnumberNumber of groups returned
successbooleanOperation success status

okta_get_group

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
groupIdstringYesNo description

Output

ParameterTypeDescription
idstringGroup ID
namestringGroup name
descriptionstringGroup description
typestringGroup type
createdstringCreation timestamp
lastUpdatedstringLast update timestamp
lastMembershipUpdatedstringLast membership change timestamp
successbooleanOperation success status

okta_create_group

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
namestringYesNo description
descriptionstringNoNo description

Output

ParameterTypeDescription
idstringCreated group ID
namestringGroup name
descriptionstringGroup description
typestringGroup type
createdstringCreation timestamp
lastUpdatedstringLast update timestamp
lastMembershipUpdatedstringLast membership change timestamp
successbooleanOperation success status

okta_update_group

Update a group profile in your Okta organization. Only groups of OKTA_GROUP type can be updated. All profile properties must be specified (full replacement).

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
groupIdstringYesNo description
namestringYesNo description
descriptionstringNoNo description

Output

ParameterTypeDescription
idstringGroup ID
namestringGroup name
descriptionstringGroup description
typestringGroup type
createdstringCreation timestamp
lastUpdatedstringLast update timestamp
lastMembershipUpdatedstringLast membership change timestamp
successbooleanOperation success status

okta_delete_group

Delete a group from your Okta organization. Groups of OKTA_GROUP or APP_GROUP type can be removed.

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
groupIdstringYesNo description

Output

ParameterTypeDescription
groupIdstringDeleted group ID
deletedbooleanWhether the group was deleted
successbooleanOperation success status

okta_add_user_to_group

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
groupIdstringYesNo description
userIdstringYesNo description

Output

ParameterTypeDescription
groupIdstringGroup ID
userIdstringUser ID added to the group
addedbooleanWhether the user was added
successbooleanOperation success status

okta_remove_user_from_group

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
groupIdstringYesNo description
userIdstringYesNo description

Output

ParameterTypeDescription
groupIdstringGroup ID
userIdstringUser ID removed from the group
removedbooleanWhether the user was removed
successbooleanOperation success status

okta_list_group_members

Input

ParameterTypeRequiredDescription
apiKeystringYesNo description
domainstringYesNo description
groupIdstringYesNo description
limitnumberNoNo description

Output

ParameterTypeDescription
membersarrayArray of group member user objects
idstringUser ID
statusstringUser status
firstNamestringFirst name
lastNamestringLast name
emailstringEmail address
loginstringLogin
mobilePhonestringMobile phone
titlestringJob title
departmentstringDepartment
createdstringCreation timestamp
lastLoginstringLast login timestamp
lastUpdatedstringLast update timestamp
activatedstringActivation timestamp
statusChangedstringStatus change timestamp
countnumberNumber of members returned
successbooleanOperation success status

On this page

Start building today
Trusted by over 100,000 builders.
The SaaS platform to build AI agents and run your agentic workforce.
Get started