How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Okta

Okta Application API

The Application API from Okta — 31 operation(s) for application.

Documentation Provider Profile APIs.io OpenAPI GitHub

Okta Application API is one of 28 APIs that Okta publishes on the APIs.io network, described by a machine-readable OpenAPI specification and an AsyncAPI event-driven specification.

This API exposes 4 JSON Schema definitions.

Tagged areas include Application. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an AsyncAPI specification, authentication docs, rate-limit docs, a JSON-LD context, and 4 JSON Schemas.

This API exposes 49 operations across 31 paths, and defines 48 schemas. It is described by OpenAPI 3.0.1, at version 2.16.0.

Requests are made against a single base URL, https://your-subdomain.okta.com/.

49 operations 31 paths 48 schemas 8 DELETE20 GET17 POST4 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.1
API Version
2.16.0
Base URL
https://your-subdomain.okta.com
Authentication
API Key
Contact
Okta Developer Team
License
Apache-2.0
Terms of Service
View terms
Resource Areas
1

Authentication & Security 1

Okta Application API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (api_token).

  • api_token — SSWS {API Token}

Paths & Operations 49

Across 31 paths, the API surfaces 49 operations — 8 DELETE, 20 GET, 17 POST, 4 PUT. Each is listed below with its method, path, parameters, and response codes.

Application 49
GET
/api/v1/apps
Okta List Applications
listApplications 6 params → 200
POST
/api/v1/apps
Okta Add Application
createApplication 2 params body → 200
GET
/api/v1/apps/{appId}
Okta Get Application
getApplication 2 params → 200
PUT
/api/v1/apps/{appId}
Okta Update Application
updateApplication 1 param body → 200
DELETE
/api/v1/apps/{appId}
Okta Delete Application
deleteApplication 1 param → 200
GET
/api/v1/apps/{appId}/connections/default
Okta Fetches the default Provisioning Connection for an application.
getDefaultProvisioningConnectionForApplication 1 param → 200404
POST
/api/v1/apps/{appId}/connections/default
Okta Sets the default Provisioning Connection for an application.
setDefaultProvisioningConnectionForApplication 2 params body → 201400404
POST
/api/v1/apps/{appId}/connections/default/lifecycle/activate
Okta Activate default Provisioning Connection for application
activateDefaultProvisioningConnectionForApplication 1 param → 204404
POST
/api/v1/apps/{appId}/connections/default/lifecycle/deactivate
Okta Deactivate default Provisioning Connection for application
deactivateDefaultProvisioningConnectionForApplication 1 param → 204404
GET
/api/v1/apps/{appId}/credentials/csrs
Okta List Certificate Signing Requests for Application
listCsrsForApplication 1 param → 200
POST
/api/v1/apps/{appId}/credentials/csrs
Okta Generate Certificate Signing Request for Application
generateCsrForApplication 1 param body → 201
GET
/api/v1/apps/{appId}/credentials/csrs/{csrId}
getCsrForApplication 2 params → 200
DELETE
/api/v1/apps/{appId}/credentials/csrs/{csrId}
revokeCsrFromApplication 2 params → 204
POST
/api/v1/apps/{appId}/credentials/csrs/{csrId}/lifecycle/publish
2 params → 201
GET
/api/v1/apps/{appId}/credentials/keys
Okta List Key Credentials for Application
listApplicationKeys 1 param → 200
POST
/api/v1/apps/{appId}/credentials/keys/generate
Generates a new X.509 certificate for an application key credential
generateApplicationKey 2 params → 201
GET
/api/v1/apps/{appId}/credentials/keys/{keyId}
Okta Get Key Credential for Application
getApplicationKey 2 params → 200
POST
/api/v1/apps/{appId}/credentials/keys/{keyId}/clone
Okta Clone Application Key Credential
cloneApplicationKey 3 params → 201
GET
/api/v1/apps/{appId}/credentials/secrets
Okta List client secrets
listClientSecretsForApplication 1 param → 200
POST
/api/v1/apps/{appId}/credentials/secrets
Okta Add new client secret
createNewClientSecretForApplication 1 param body → 201
GET
/api/v1/apps/{appId}/credentials/secrets/{secretId}
Okta Get client secret
getClientSecretForApplication 2 params → 200
DELETE
/api/v1/apps/{appId}/credentials/secrets/{secretId}
Removes a secret from the client's collection of secrets.
deleteClientSecretForApplication 2 params → 204
POST
/api/v1/apps/{appId}/credentials/secrets/{secretId}/lifecycle/activate
Okta Activate a client secret
activateClientSecretForApplication 2 params → 200
POST
/api/v1/apps/{appId}/credentials/secrets/{secretId}/lifecycle/deactivate
Okta Deactivate a client secret
deactivateClientSecretForApplication 2 params → 200
GET
/api/v1/apps/{appId}/features
Okta Fetches the Feature objects for an application.
listFeaturesForApplication 1 param → 200404
GET
/api/v1/apps/{appId}/features/{name}
Okta Fetches a Feature object for an application.
getFeatureForApplication 2 params → 200404
PUT
/api/v1/apps/{appId}/features/{name}
Okta Updates a Feature object for an application.
updateFeatureForApplication 2 params body → 200404
GET
/api/v1/apps/{appId}/grants
Lists all scope consent grants for the application
listScopeConsentGrants 2 params → 200
POST
/api/v1/apps/{appId}/grants
Grants consent for the application to request an OAuth 2.0 Okta scope
grantConsentToScope 1 param body → 201
GET
/api/v1/apps/{appId}/grants/{grantId}
Fetches a single scope consent grant for the application
getScopeConsentGrant 3 params → 200
DELETE
/api/v1/apps/{appId}/grants/{grantId}
Revokes permission for the application to request the given scope
revokeScopeConsentGrant 2 params → 204
GET
/api/v1/apps/{appId}/groups
Okta List Groups Assigned to Application
listApplicationGroupAssignments 5 params → 200
GET
/api/v1/apps/{appId}/groups/{groupId}
Okta Get Assigned Group for Application
getApplicationGroupAssignment 3 params → 200
PUT
/api/v1/apps/{appId}/groups/{groupId}
Okta Assign Group to Application
createApplicationGroupAssignment 2 params body → 200
DELETE
/api/v1/apps/{appId}/groups/{groupId}
Okta Remove Group from Application
deleteApplicationGroupAssignment 2 params → 204
POST
/api/v1/apps/{appId}/lifecycle/activate
Okta Activate Application
activateApplication 1 param → 200
POST
/api/v1/apps/{appId}/lifecycle/deactivate
Okta Deactivate Application
deactivateApplication 1 param → 200
POST
/api/v1/apps/{appId}/logo
Okta The file must be in PNG, JPG, or GIF format, and less than 1 MB in size. For best results use landscape orientation, a transparent background, and a minimum size of 420px by 120px to prevent ups…
uploadApplicationLogo 1 param body → 201400404
PUT
/api/v1/apps/{appId}/policies/{policyId}
Okta Update application policy
updateApplicationPolicy 2 params → 204
GET
/api/v1/apps/{appId}/sso/saml/metadata
Previews SAML metadata based on a specific key credential for an application
previewSAMLAppMetadata 2 params → 200
GET
/api/v1/apps/{appId}/tokens
Lists all tokens for the application
listOAuth2TokensForApplication 4 params → 200
DELETE
/api/v1/apps/{appId}/tokens
Revokes all tokens for the specified application
revokeOAuth2TokensForApplication 1 param → 204
GET
/api/v1/apps/{appId}/tokens/{tokenId}
Gets a token for the specified application
getOAuth2TokenForApplication 3 params → 200
DELETE
/api/v1/apps/{appId}/tokens/{tokenId}
Revokes the specified token for the specified application
revokeOAuth2TokenForApplication 2 params → 204
GET
/api/v1/apps/{appId}/users
Okta List Users Assigned to Application
listApplicationUsers 7 params → 200
POST
/api/v1/apps/{appId}/users
Okta Assign User to Application for SSO & Provisioning
assignUserToApplication 1 param body → 200
GET
/api/v1/apps/{appId}/users/{userId}
Okta Get Assigned User for Application
getApplicationUser 3 params → 200
POST
/api/v1/apps/{appId}/users/{userId}
Okta Update Application Profile for Assigned User
updateApplicationUser 2 params body → 200
DELETE
/api/v1/apps/{appId}/users/{userId}
Okta Remove User from Application
deleteApplicationUser 3 params → 204

Schemas 48

The contract defines 48 schemas that model the data the API accepts and returns. The most detailed are JsonWebKey (16 properties), Application (16 properties), AppUser (14 properties), OAuth2ScopeConsentGrant (12 properties). Each schema is shown below with its type and property counts.

ProvisioningConnection
object
3 properties
ApplicationCredentialsSigning
object
5 properties
CsrMetadataSubject
object
6 properties
OAuth2ScopeConsentGrantStatus
string
OAuth2Actor
object
2 properties
ClientSecret
object
7 properties
ClientSecretMetadata
object
1 property
SeedEnum
string
Csr
object
4 properties
LifecycleCreateSettingObject
object
1 property
OAuth2ScopeConsentGrant
object
12 properties
CapabilitiesCreateObject
object
1 property
ApplicationSignOnMode
string
AppUserPasswordCredential
object
1 property
ApplicationVisibilityHide
object
2 properties
ApplicationSettingsNotificationsVpn
object
3 properties
ApplicationSettingsNotes
object
2 properties
Application
object
16 properties
ProvisioningConnectionProfile
object
2 properties
ApplicationGroupAssignment
object
6 properties
CapabilitiesObject
object
2 properties
OAuth2Token
object
11 properties
ApplicationFeature
object
5 properties
ApplicationCredentials
object
2 properties
ApplicationSettingsNotificationsVpnNetwork
object
3 properties
CsrMetadataSubjectAltNames
object
1 property
ProvisioningConnectionRequest
object
1 property
ApplicationSettings
object
5 properties
ProvisioningConnectionStatus
string
ProfileSettingObject
object
1 property
CsrMetadata
object
2 properties
ApplicationVisibility
object
4 properties
ChangeEnum
string
AppUser
object
14 properties
ApplicationLicensing
object
1 property
OAuth2ScopeConsentGrantSource
string
JsonWebKey
object
16 properties
ApplicationAccessibility
object
3 properties
ApplicationSettingsNotifications
object
1 property
ApplicationCredentialsSigningUse
string
CapabilitiesUpdateObject
object
3 properties
EnabledStatus
string
LifecycleDeactivateSettingObject
object
1 property
ProvisioningConnectionAuthScheme
string
ApplicationSettingsApplication
object
7 properties
AppUserCredentials
object
2 properties
PasswordSettingObject
object
3 properties
ApplicationCredentialsUsernameTemplate
object
4 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

okta-application-api-openapi.yml Raw ↑

Other APIs Okta publishes across the network.

Cross-App Access (XAA)
AE Profile APIs.io
Okta for AI Agents
AE Profile APIs.io
Okta Authenticator API
AE Profile APIs.io
Okta AuthorizationServer API
AE Profile APIs.io
Okta Brand API
AE Profile APIs.io
Okta Domain API
AE Profile APIs.io
Okta EventHook API
AE Profile APIs.io
Okta Feature API
AE Profile APIs.io
Okta Group API
AE Profile APIs.io
Okta GroupSchema API
AE Profile APIs.io
Okta IdentityProvider API
AE Profile APIs.io
Okta InlineHook API
AE Profile APIs.io
#Application
← Back to O APIs
API Details
ID
okta:okta-application-api
Base URL
https://your-subdomain.okta.com
Docs
https://developer.okta.com/docs/reference/
Provider
Okta
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=okta-application-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/okta-application-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Okta Application API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.