Okta

Okta is an identity and access management platform that provides secure authentication, authorization, and user management for organizations.

With the Okta integration in Sim, you can:

• List and search users: Retrieve users from your Okta org with SCIM search expressions and filters
• Manage user lifecycle: Create, activate, deactivate, suspend, unsuspend, and delete users
• Update user profiles: Modify user attributes like name, email, phone, title, and department
• Reset passwords: Trigger password reset flows with optional email notification
• Manage groups: Create, update, delete, and list groups in your organization
• Manage group membership: Add or remove users from groups, and list group members

In Sim, the Okta integration enables your agents to automate identity management tasks as part of their workflows. This allows for scenarios such as onboarding new employees, offboarding departing users, managing group-based access, auditing user status, and responding to security events by suspending or deactivating accounts.

Usage Instructions

Integrate Okta identity management into your workflow. Manage users, groups, and group rules. Run service desk actions like resetting MFA factors and clearing sessions. Review and change application assignments and admin roles. Query the System Log to audit sign-ins and admin changes.

Actions

List Users from Okta

List users in your Okta organization with optional search and filtering. Users with a DEPROVISIONED status are omitted unless a search or filter expression selects them.

Input

Output

Get User from Okta

Get a specific user by ID or login from your Okta organization

Input

Output

Create User in Okta

Create a new user in your Okta organization

Input

Output

Update User in Okta

Update a user profile in your Okta organization

Input

Output

Activate User in Okta

Activate a user in your Okta organization. Can only be performed on users with STAGED or DEPROVISIONED status. Optionally sends an activation email.

Input

Output

Deactivate User in Okta

Deactivate a user in your Okta organization. This transitions the user to DEPROVISIONED status.

Input

Output

Suspend User in Okta

Suspend a user in your Okta organization. Only users with ACTIVE status can be suspended. Suspended users cannot log in but retain group and app assignments.

Input

Output

Unsuspend User in Okta

Unsuspend a previously suspended user in your Okta organization. Returns the user to ACTIVE status.

Input

Output

Reset Password in Okta

Generate a one-time token to reset a user password. Can email the reset link to the user or return it directly. Transitions the user to RECOVERY status.

Input

Output

Delete User from Okta

Permanently delete a user from your Okta organization. Can only be performed on DEPROVISIONED users. If the user is active, this will first deactivate them and a second call is needed to delete.

Input

Output

List Groups from Okta

List all groups in your Okta organization with optional search and filtering

Input

Output

Get Group from Okta

Get a specific group by ID from your Okta organization

Input

Output

Create Group in Okta

Create a new group in your Okta organization

Input

Output

Update Group in Okta

Update a group profile in your Okta organization. Only groups of OKTA_GROUP type can be updated. Fields left blank keep their stored value.

Input

Output

Delete Group from Okta

Delete a group from your Okta organization. Groups of OKTA_GROUP or APP_GROUP type can be removed.

Input

Output

Add User to Group in Okta

Add a user to a group in your Okta organization

Input

Output

Remove User from Group in Okta

Remove a user from a group in your Okta organization

Input

Output

List Group Members from Okta

List all members of a specific group in your Okta organization

Input

Output

List Group Rules from Okta

List the group rules in your Okta organization. Each rule assigns users to groups automatically based on an expression over their profile, so this shows how group membership is being driven.

Input

Output

Get Group Rule from Okta

Retrieve a single Okta group rule by ID, including the expression that decides which users it matches and the groups those users are assigned to.

Input

Output

Create Group Rule in Okta

Create a group rule that automatically assigns users matching an Okta expression to one or more groups. New rules are created INACTIVE, so run Activate Group Rule afterwards to start applying it.

Input

Output

Activate Group Rule in Okta

Activate a group rule so Okta starts applying it, assigning every matching user to the target groups.

Input

Output

Deactivate Group Rule in Okta

Deactivate a group rule so Okta stops applying it. Existing memberships the rule created are left in place. A rule must be INACTIVE before it can be edited.

Input

Output

Delete Group Rule in Okta

Permanently delete a group rule. Destructive and irreversible. Optionally also removes the users that this rule had assigned from those groups, which revokes any access those groups grant.

Input

Output

List Factors from Okta

List the MFA factors a user has enrolled, with each factor type, provider, and enrollment status. Use this before resetting a factor to confirm which one to target.

Input

Output

Get Factor from Okta

Retrieve a single enrolled MFA factor for a user, including its type, provider, enrollment status, and factor-specific profile.

Input

Output

Enroll Factor in Okta

Enroll an MFA factor for a user. The profile fields required depend on the factor type: a phone number for sms and call, an email address for email, and a question and answer for question. Factors that enroll from the user device, such as webauthn and push, need no profile fields.

Input

Output

Reset Factor in Okta

Unenroll one specific MFA factor for a user so they can re-enroll it. Destructive and irreversible: the existing enrollment is removed. Unenrolling a push or signed_nonce factor also unenrolls the related Okta Verify factors. Factors cannot be unenrolled from a deactivated user.

Input

Output

Reset All Factors in Okta

Reset every MFA factor for a user, returning all enrollments to the unenrolled state. Destructive and irreversible: the user must re-enroll each factor before they can complete MFA again. The user status stays ACTIVE.

Input

Output

Clear User Sessions in Okta

Revoke every active Okta session for a user, signing them out of all devices immediately. Destructive and irreversible: the user must sign in again. Optionally also revokes their OAuth and OpenID Connect tokens, and clears remembered factors.

Input

Output

Get Session from Okta

Retrieve an Okta session by ID, including who it belongs to, when it expires, and which authentication methods were used to establish it.

Input

Output

Revoke Session in Okta

Revoke a single Okta session by ID, ending that sign-in immediately. Destructive and irreversible: the affected user must sign in again on that device.

Input

Output

List Applications from Okta

List the applications configured in your Okta organization, with optional name search, filtering, and cursor pagination.

Input

Output

Get Application from Okta

Retrieve a single Okta application by ID, including its sign-on mode, status, enabled provisioning features, and configuration objects.

Input

Output

List Application Users from Okta

List the users assigned to an Okta application, including how each assignment was made and its provisioning sync state. Use this to audit who has access to an app.

Input

Output

Assign User to Application in Okta

Assign a user to an Okta application, granting them access to it. Applications that require credentials also need the username the user signs in with.

Input

Output

Remove User from Application in Okta

Unassign a user from an Okta application, revoking their access. Destructive and irreversible: the app profile for that user is permanently removed, and if provisioning is enabled the downstream account is deactivated.

Input

Output

List Application Groups from Okta

List the groups assigned to an Okta application. Every member of an assigned group inherits access to the app, so this is the starting point for an app access review.

Input

Output

Assign Group to Application in Okta

Assign a group to an Okta application so every member of the group inherits access to it.

Input

Output

Remove Group from Application in Okta

Unassign a group from an Okta application. Destructive: every member who had access only through this group loses access to the app.

Input

Output

List User Roles from Okta

List the administrator roles assigned to a user. Returns both standard roles and custom role bindings, so you can review who holds privileged access.

Input

Output

Assign User Role in Okta

Grant a user an administrator role. Use a standard role type such as USER_ADMIN or HELP_DESK_ADMIN, or CUSTOM together with a custom role ID and a resource set ID. This grants privileged access, so confirm the role is the least privilege that fits.

Input

Output

Remove User Role in Okta

Revoke an administrator role from a user. Destructive: the user immediately loses the admin permissions that role granted. Takes the role assignment ID, not the role type, which List User Roles returns as the role id field.

Input

Output

Get System Log Events from Okta

Query the Okta System Log for sign-ins, admin changes, and security events. Supports a time window, SCIM filter expressions, keyword search, and cursor pagination for audit and investigation workflows.

Input

Output