> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tracecat.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta SDK Applications

> Reference for the Tracecat Okta SDK Applications integration: registered actions, required secrets, expected inputs, and example workflow usage.

## Activate application

Action ID: `tools.okta_sdk.activate_application`

Activate an Okta application.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="app_id" type="string" required>
  Okta application ID.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Call method

Action ID: `tools.okta_sdk.call_method`

Instantiate an Okta SDK client and call an async Okta SDK method.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="method_name" type="string" required>
  Okta SDK client method name, e.g. `list_users`.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode. Auto prefers OAuth/bearer, then private key, then SSWS.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="params" type="object | null">
  Parameters for the Okta SDK method.

  Default: `null`.
</ParamField>

<ParamField path="rate_limit_max_retries" type="integer">
  Okta SDK rate-limit retry count.

  Default: `2`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Call paginated method

Action ID: `tools.okta_sdk.call_paginated_method`

Call an Okta SDK list method and follow Okta `Link` pagination.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="method_name" type="string" required>
  Okta SDK method name, e.g. `list_users`.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="limit" type="integer | null">
  Per-page item limit.

  Default: `null`.
</ParamField>

<ParamField path="max_pages" type="integer | null">
  Maximum pages to fetch.

  Default: `null`.
</ParamField>

<ParamField path="params" type="object | null">
  Parameters for the Okta SDK method.

  Default: `null`.
</ParamField>

<ParamField path="rate_limit_max_retries" type="integer">
  Okta SDK rate-limit retry count.

  Default: `2`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Change user password

Action ID: `tools.okta_sdk.change_password`

Change an Okta user's password.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="change_password_request" type="object" required>
  Okta change password request body.
</ParamField>

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

<ParamField path="strict" type="boolean | null">
  Apply Okta strict validation.

  Default: `null`.
</ParamField>

## Create group

Action ID: `tools.okta_sdk.add_group`

Create an Okta group.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="group" type="object" required>
  Okta group body.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Deactivate application

Action ID: `tools.okta_sdk.deactivate_application`

Deactivate an Okta application.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="app_id" type="string" required>
  Okta application ID.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Deactivate user

Action ID: `tools.okta_sdk.deactivate_user`

Deactivate an Okta user.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="prefer" type="string | null">
  Okta Prefer header value.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

<ParamField path="send_email" type="boolean | null">
  Send Okta lifecycle email.

  Default: `null`.
</ParamField>

## Delete group

Action ID: `tools.okta_sdk.delete_group`

Delete an Okta group.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="group_id" type="string" required>
  Okta group ID.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Delete user

Action ID: `tools.okta_sdk.delete_user`

Delete or clear an Okta user, depending on current user status.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="prefer" type="string | null">
  Okta Prefer header value.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

<ParamField path="send_email" type="boolean | null">
  Send Okta lifecycle email.

  Default: `null`.
</ParamField>

## Forgot password

Action ID: `tools.okta_sdk.forgot_password`

Start Okta forgot-password flow for a user.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

<ParamField path="send_email" type="boolean | null">
  Send Okta lifecycle email.

  Default: `null`.
</ParamField>

## Get application

Action ID: `tools.okta_sdk.get_application`

Get an Okta application.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="app_id" type="string" required>
  Okta application ID.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="expand" type="string | null">
  Okta expand expression.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Get factor

Action ID: `tools.okta_sdk.get_factor`

Get an Okta user factor.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="factor_id" type="string" required>
  Okta factor ID.
</ParamField>

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Get group

Action ID: `tools.okta_sdk.get_group`

Get an Okta group.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="group_id" type="string" required>
  Okta group ID.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## List applications

Action ID: `tools.okta_sdk.list_applications`

List Okta applications.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="after" type="string | null">
  Okta pagination cursor.

  Default: `null`.
</ParamField>

<ParamField path="always_include_vpn_settings" type="boolean | null">
  Include VPN settings.

  Default: `null`.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="expand" type="string | null">
  Okta expand expression.

  Default: `null`.
</ParamField>

<ParamField path="filter" type="string | null">
  Okta filter expression.

  Default: `null`.
</ParamField>

<ParamField path="include_non_deleted" type="boolean | null">
  Include non-deleted applications.

  Default: `null`.
</ParamField>

<ParamField path="limit" type="integer | null">
  Per-page item limit.

  Default: `null`.
</ParamField>

<ParamField path="q" type="string | null">
  Search query.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

<ParamField path="use_optimization" type="boolean | null">
  Use Okta application-list optimization.

  Default: `null`.
</ParamField>

## List factors

Action ID: `tools.okta_sdk.list_factors`

List enrolled factors for an Okta user.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## List group applications

Action ID: `tools.okta_sdk.list_assigned_applications_for_group`

List applications assigned to an Okta group.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="group_id" type="string" required>
  Okta group ID.
</ParamField>

<ParamField path="after" type="string | null">
  Okta pagination cursor.

  Default: `null`.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="limit" type="integer | null">
  Per-page item limit.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## List log events

Action ID: `tools.okta_sdk.list_log_events`

List Okta System Log events.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="after" type="string | null">
  Okta pagination cursor.

  Default: `null`.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="filter" type="string | null">
  Okta filter expression.

  Default: `null`.
</ParamField>

<ParamField path="limit" type="integer | null">
  Per-page item limit.

  Default: `null`.
</ParamField>

<ParamField path="q" type="string | null">
  Search query.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

<ParamField path="since" type="string | null">
  Lower time bound for log events.

  Default: `null`.
</ParamField>

<ParamField path="sort_order" type="string | null">
  Sort order, e.g. `ASCENDING` or `DESCENDING`.

  Default: `null`.
</ParamField>

<ParamField path="until" type="string | null">
  Upper time bound for log events.

  Default: `null`.
</ParamField>

## Reactivate user

Action ID: `tools.okta_sdk.reactivate_user`

Reactivate an Okta user.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

<ParamField path="send_email" type="boolean | null">
  Send Okta lifecycle email.

  Default: `null`.
</ParamField>

## Replace group

Action ID: `tools.okta_sdk.replace_group`

Replace an Okta group.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="group" type="object" required>
  Okta group body.
</ParamField>

<ParamField path="group_id" type="string" required>
  Okta group ID.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Replace user

Action ID: `tools.okta_sdk.replace_user`

Replace an Okta user profile and credentials.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="user" type="object" required>
  Okta user request body.
</ParamField>

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="if_match" type="string | null">
  ETag value for conditional replace.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

<ParamField path="strict" type="boolean | null">
  Apply Okta strict validation.

  Default: `null`.
</ParamField>

## Reset user factors

Action ID: `tools.okta_sdk.reset_factors`

Reset all enrolled factors for an Okta user.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Revoke user sessions

Action ID: `tools.okta_sdk.revoke_user_sessions`

Revoke active Okta sessions for a user.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="forget_devices" type="boolean | null">
  Forget remembered devices.

  Default: `null`.
</ParamField>

<ParamField path="oauth_tokens" type="boolean | null">
  Revoke OAuth tokens too.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Unenroll factor

Action ID: `tools.okta_sdk.unenroll_factor`

Unenroll an Okta user factor.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="factor_id" type="string" required>
  Okta factor ID.
</ParamField>

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="remove_recovery_enrollment" type="boolean | null">
  Remove recovery enrollment.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Unlock user

Action ID: `tools.okta_sdk.unlock_user`

Unlock an Okta user account.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

## Update user

Action ID: `tools.okta_sdk.update_user`

Partially update an Okta user profile and credentials.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="user" type="object" required>
  Okta user request body.
</ParamField>

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="if_match" type="string | null">
  ETag value for conditional update.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

<ParamField path="strict" type="boolean | null">
  Apply Okta strict validation.

  Default: `null`.
</ParamField>

## Verify factor

Action ID: `tools.okta_sdk.verify_factor`

Verify an Okta user factor.

Reference: [https://github.com/okta/okta-sdk-python](https://github.com/okta/okta-sdk-python)

### Secrets

Optional secrets:

* `okta`: optional values `OKTA_BASE_URL`, `OKTA_API_TOKEN`, `OKTA_ACCESS_TOKEN`, `OKTA_SERVICE_TOKEN`, `OKTA_CLIENT_ID`, `OKTA_PRIVATE_KEY`, `OKTA_SCOPES`, `OKTA_KID`, `OKTA_DPOP_ENABLED`, `OKTA_DPOP_KEY_ROTATION_INTERVAL`.
* `okta_oauth`: OAuth token `OKTA_SERVICE_TOKEN`.

### Input fields

<ParamField path="factor_id" type="string" required>
  Okta factor ID.
</ParamField>

<ParamField path="user_id" type="string" required>
  Okta user ID or login.
</ParamField>

<ParamField path="accept_language" type="string | null">
  Accept-Language header value.

  Default: `null`.
</ParamField>

<ParamField path="auth_mode" type="OktaAuthMode">
  Auth mode.

  Default: `"auto"`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Okta org URL. Defaults to `OKTA_BASE_URL`.

  Default: `null`.
</ParamField>

<ParamField path="body" type="object | null">
  Okta verify factor request body.

  Default: `null`.
</ParamField>

<ParamField path="scopes" type="array[string] | null">
  OAuth scopes for private-key auth.

  Default: `null`.
</ParamField>

<ParamField path="template_id" type="string | null">
  Okta template ID.

  Default: `null`.
</ParamField>

<ParamField path="token_lifetime_seconds" type="integer | null">
  Token lifetime in seconds.

  Default: `null`.
</ParamField>

<ParamField path="user_agent" type="string | null">
  User-Agent header value.

  Default: `null`.
</ParamField>

<ParamField path="x_forwarded_for" type="string | null">
  X-Forwarded-For header value.

  Default: `null`.
</ParamField>