developer.okta.com

Revoke an offboarded Okta user's active sessions and OAuth access and refresh tokens, and verify reauthentication is actually forced

Create an OIDC application in Okta via the Apps API and rotate its client secret with zero downtime

Add a custom attribute to the Okta default user schema via the Schemas API and populate it on users without clobbering the profile

Assign an Okta application to a group and to individual users via the Apps API, including app user profile and credentials

Assign an Okta application to a group and to individual users via the Apps API, including app user profile and credentials

Create an Okta group rule for dynamic membership from profile attributes, then activate, update and retire it

Create an Okta group via the Groups API and manage its user memberships with cursor-based pagination

List and search Okta users correctly by choosing between q, filter and search, and paginate with the Link header rel=next cursor

Create an Okta user with a profile and password via the Users API, controlling activation and retrieving the activation link

Detect and correctly back off from Okta Management API rate limits across org-wide, per-user and concurrency buckets

Create, rotate and retire an Okta SSWS API token, and decide between SSWS and scoped OAuth 2.0 for Management API access

Obtain a scoped Okta Management API access token using OAuth 2.0 client_credentials with private_key_jwt from an API Services app

Implement Okta event hooks for real-time security event reaction including challenge verification

Implement CIBA (Client-Initiated Backchannel Authentication) with Okta for call-center and out-of-band authentication

Register and verify an Okta event hook with correct challenge handling

Monitor Okta System Log for security events via the API