How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Okta

Okta IdentityProvider API

The IdentityProvider API from Okta — 16 operation(s) for identityprovider.

Documentation Provider Profile APIs.io OpenAPI GitHub

Okta IdentityProvider API is one of 28 APIs that Okta publishes on the APIs.io network, described by a machine-readable OpenAPI specification and an AsyncAPI event-driven specification.

This API exposes 4 JSON Schema definitions.

Tagged areas include Identity Provider. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an AsyncAPI specification, authentication docs, rate-limit docs, a JSON-LD context, and 4 JSON Schemas.

This API exposes 25 operations across 16 paths, and defines 34 schemas. It is described by OpenAPI 3.0.1, at version 2.16.0.

Requests are made against a single base URL, https://your-subdomain.okta.com/.

25 operations 16 paths 34 schemas 4 DELETE11 GET9 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.1
API Version
2.16.0
Base URL
https://your-subdomain.okta.com
Authentication
API Key
Contact
Okta Developer Team
License
Apache-2.0
Terms of Service
View terms
Resource Areas
1

Authentication & Security 1

Okta IdentityProvider API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (api_token).

  • api_token — SSWS {API Token}

Paths & Operations 25

Across 16 paths, the API surfaces 25 operations — 4 DELETE, 11 GET, 9 POST, 1 PUT. Each is listed below with its method, path, parameters, and response codes.

IdentityProvider 25
GET
/api/v1/idps
Okta List Identity Providers
listIdentityProviders 4 params → 200
POST
/api/v1/idps
Okta Add Identity Provider
createIdentityProvider body → 200
GET
/api/v1/idps/credentials/keys
Okta List Keys
listIdentityProviderKeys 2 params → 200
POST
/api/v1/idps/credentials/keys
Okta Add X.509 Certificate Public Key
createIdentityProviderKey body → 200
GET
/api/v1/idps/credentials/keys/{keyId}
Okta Get Key
getIdentityProviderKey 1 param → 200
DELETE
/api/v1/idps/credentials/keys/{keyId}
Okta Delete Key
deleteIdentityProviderKey 1 param → 204
GET
/api/v1/idps/{idpId}
Okta Get Identity Provider
getIdentityProvider 1 param → 200
PUT
/api/v1/idps/{idpId}
Okta Update Identity Provider
updateIdentityProvider 1 param body → 200
DELETE
/api/v1/idps/{idpId}
Okta Delete Identity Provider
deleteIdentityProvider 1 param → 204
GET
/api/v1/idps/{idpId}/credentials/csrs
Okta List Certificate Signing Requests for IdP
listCsrsForIdentityProvider 1 param → 200
POST
/api/v1/idps/{idpId}/credentials/csrs
Okta Generate Certificate Signing Request for IdP
generateCsrForIdentityProvider 1 param body → 201
GET
/api/v1/idps/{idpId}/credentials/csrs/{csrId}
Gets a specific Certificate Signing Request model by id
getCsrForIdentityProvider 2 params → 200
DELETE
/api/v1/idps/{idpId}/credentials/csrs/{csrId}
Revoke a Certificate Signing Request and delete the key pair from the IdP
revokeCsrForIdentityProvider 2 params → 204
POST
/api/v1/idps/{idpId}/credentials/csrs/{csrId}/lifecycle/publish
Update the Certificate Signing Request with a signed X.509 certificate and add it into the signing key credentials for the IdP.
2 params → 201
GET
/api/v1/idps/{idpId}/credentials/keys
Okta List Signing Key Credentials for IdP
listIdentityProviderSigningKeys 1 param → 200
POST
/api/v1/idps/{idpId}/credentials/keys/generate
Okta Generate New IdP Signing Key Credential
generateIdentityProviderSigningKey 2 params → 200
GET
/api/v1/idps/{idpId}/credentials/keys/{keyId}
Okta Get Signing Key Credential for IdP
getIdentityProviderSigningKey 2 params → 200
POST
/api/v1/idps/{idpId}/credentials/keys/{keyId}/clone
Okta Clone Signing Key Credential for IdP
cloneIdentityProviderKey 3 params → 201
POST
/api/v1/idps/{idpId}/lifecycle/activate
Okta Activate Identity Provider
activateIdentityProvider 1 param → 200
POST
/api/v1/idps/{idpId}/lifecycle/deactivate
Okta Deactivate Identity Provider
deactivateIdentityProvider 1 param → 200
GET
/api/v1/idps/{idpId}/users
Okta Find Users
listIdentityProviderApplicationUsers 1 param → 200
GET
/api/v1/idps/{idpId}/users/{userId}
Fetches a linked IdP user by ID
getIdentityProviderApplicationUser 2 params → 200
POST
/api/v1/idps/{idpId}/users/{userId}
Okta Link a user to a Social IdP without a transaction
linkUserToIdentityProvider 2 params body → 200
DELETE
/api/v1/idps/{idpId}/users/{userId}
Okta Unlink User from IdP
unlinkUserFromIdentityProvider 2 params → 204
GET
/api/v1/idps/{idpId}/users/{userId}/credentials/tokens
Okta Social Authentication Token Operation
listSocialAuthTokens 2 params → 200

Schemas 34

The contract defines 34 schemas that model the data the API accepts and returns. The most detailed are JsonWebKey (16 properties), IdentityProvider (10 properties), ProtocolEndpoints (8 properties), Protocol (8 properties). Each schema is shown below with its type and property counts.

ProtocolEndpoint
object
4 properties
SocialAuthToken
object
6 properties
CsrMetadataSubject
object
6 properties
ProvisioningDeprovisionedCondition
object
1 property
Csr
object
4 properties
ProtocolAlgorithmTypeSignature
object
2 properties
ProtocolEndpoints
object
8 properties
ProvisioningConditions
object
2 properties
Provisioning
object
4 properties
ProtocolAlgorithmType
object
1 property
IdentityProviderCredentialsSigning
object
3 properties
PolicySubject
object
5 properties
PolicyAccountLink
object
2 properties
UserIdentityProviderLinkRequest
object
1 property
ProtocolRelayStateFormat
string
CsrMetadataSubjectAltNames
object
1 property
IdentityProviderCredentialsClient
object
2 properties
ProtocolSettings
object
1 property
ProvisioningSuspendedCondition
object
1 property
CsrMetadata
object
2 properties
IdentityProviderCredentials
object
3 properties
IdentityProvider
object
10 properties
PolicyUserNameTemplate
object
1 property
ProtocolAlgorithms
object
2 properties
PolicyAccountLinkFilter
object
1 property
ProvisioningGroups
object
4 properties
JsonWebKey
object
16 properties
IdentityProviderCredentialsTrust
object
5 properties
ProtocolRelayState
object
1 property
IdentityProviderPolicy
object
4 properties
IdentityProviderApplicationUser
object
7 properties
PolicyAccountLinkFilterGroups
object
1 property
Protocol
object
8 properties
PolicySubjectMatchType
string

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

okta-identityprovider-api-openapi.yml Raw ↑

Other APIs Okta publishes across the network.

Cross-App Access (XAA)
AE Profile APIs.io
Okta for AI Agents
AE Profile APIs.io
Okta Application API
AE Profile APIs.io
Okta Authenticator API
AE Profile APIs.io
Okta AuthorizationServer API
AE Profile APIs.io
Okta Brand API
AE Profile APIs.io
Okta Domain API
AE Profile APIs.io
Okta EventHook API
AE Profile APIs.io
Okta Feature API
AE Profile APIs.io
Okta Group API
AE Profile APIs.io
Okta GroupSchema API
AE Profile APIs.io
Okta InlineHook API
AE Profile APIs.io
#Identity Provider
← Back to O APIs
API Details
ID
okta:okta-identityprovider-api
Base URL
https://your-subdomain.okta.com
Docs
https://developer.okta.com/docs/reference/
Provider
Okta
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=okta-identityprovider-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/okta-identityprovider-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Okta IdentityProvider API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.