InTouch Hub · Blue Isle Software

Okta

Read Okta identity data — users, groups and assigned applications — through the Okta Management API.

Provided free and as is, without warranty of any kind — including merchantability, fitness for a particular purpose, and the accuracy or completeness of any result. See the licence. You are responsible for checking what this produces before relying on it.

identityoktastatus

Okta Tool

Read Okta identity data — users, groups, apps — via the Okta Management API.

Tool ID

okta-directory

Credential Required

Yes — an API-key credential (auth mode header:Authorization). The credential's key is sent as the raw Authorization request header, so it must be the FULL header value including the SSWS scheme prefix: SSWS <yourToken> (e.g. SSWS 00QCjAl4MlV-WPXM...). Create the token in the Okta Admin Console under Security > API > Tokens. The tool resolves the key from the credential's apiKey, password, or secret field (a task-input apiKey is honoured as a legacy fallback). The Okta domain is not part of the credential — it is the domain task input, forming the base URL https://{domain}/api/v1.

Credential Properties

Property Type Default Description
apiKey string — Required. API key / token used to authenticate. For Okta: the full Authorization header value, SSWS <yourToken>.

Operations

1. list_users — List users

Lists users in the Okta org. Calls GET /users.

Properties:

Property Type Default Description
operation string — Required. list_users
domain string — Required. Your full Okta domain (host only, no scheme), e.g. dev-12345.okta.com or acme.okta.com.
query string — Optional query params as a JSON object string, e.g. {"limit": 50, "filter": "status eq \"ACTIVE\""}.

Published Outputs: - result — the JSON response body - status — HTTP status code

2. get_user — Get one user

Fetches a single user by id. Calls GET /users/{id}.

Properties:

Property Type Default Description
operation string — Required. get_user
domain string — Required. Your full Okta domain (host only, no scheme), e.g. dev-12345.okta.com or acme.okta.com.
id string — Required. Okta user id.
query string — Optional query params as a JSON object string.

Published Outputs: - result — the JSON response body - status — HTTP status code

3. list_groups — List groups

Lists groups in the Okta org. Calls GET /groups.

Properties:

Property Type Default Description
operation string — Required. list_groups
domain string — Required. Your full Okta domain (host only, no scheme), e.g. dev-12345.okta.com or acme.okta.com.
query string — Optional query params as a JSON object string.

Published Outputs: - result — the JSON response body - status — HTTP status code

4. list_apps — List apps

Lists applications in the Okta org. Calls GET /apps.

Properties:

Property Type Default Description
operation string — Required. list_apps
domain string — Required. Your full Okta domain (host only, no scheme), e.g. dev-12345.okta.com or acme.okta.com.
query string — Optional query params as a JSON object string.

Published Outputs: - result — the JSON response body - status — HTTP status code

Self-Contained JAR

The jar bundles all runtime dependencies; only intouch-tool-api is provided by the server.

Publishes

The keys a later task may reference as {{taskName.key}}. Referencing anything not listed here resolves to nothing at run time.