Okta

Live 32 Actions 21 Events

Okta Integration for AI Agents

Connect your AI agent to 32 Okta actions via MCP, A2A, or SDK, with agent authentication, tool-calling execution, and security built-in, plus 21 events to subscribe to.

Start Free Book Demo Okta MCP Server

Okta AI Agent Actions

32 production-ready actions for your agent to do more on Okta.

Read the Okta docs

32 Actions

List Devices - Lists all devices with pagination support and flexible search options

Get Device - Retrieves a device by its ID

Delete Device - Permanently deletes a device. Device must be in DEACTIVATED status first.

Activate Device - Activates a device by setting its status to ACTIVE

Deactivate Device - Deactivates a device by setting its status to DEACTIVATED

List Groups - Lists all groups with pagination support

Get Group - Retrieves a specific group by ID from your org

Create Group - Adds a new group with OKTA_GROUP type to your org

Update Group - Replaces the profile for a group of OKTA_GROUP type

Delete Group - Deletes a group of OKTA_GROUP or APP_GROUP type from your org

List Group Members - Lists all users that are a member of a group

Add User To Group - Assigns a user to a group with OKTA_GROUP type

Remove User From Group - Unassigns a user from a group with OKTA_GROUP type

List Realms - Lists all Realms with pagination support

Get Realm - Retrieves a Realm by its ID

Create Realm - Creates a new Realm

Update Realm - Replaces the realm profile by its ID

Delete Realm - Deletes a Realm by its ID

Get User Info - Retrieves information about the currently authenticated user from the OAuth 2.0 UserInfo endpoint.

List Users - Lists all users in your org with pagination and flexible query options

Get User - Retrieves a user from your Okta org by ID, login, or shortname

Create User - Creates a new user in your Okta org with or without credentials

Update User - Updates a user's profile or credentials with partial update semantics

Replace User - Replaces a user's profile, credentials, or both using strict-update semantics

List User Blocks - Lists information about how a user is blocked from accessing their account

Delete User - Permanently deletes a user from your Okta organization

List User Types - Lists all user types in your Okta organization

Get User Type - Retrieves a user type by ID

Create User Type - Creates a new user type in your Okta organization

Update User Type - Partially updates an existing user type

Replace User Type - Fully replaces an existing user type

Delete User Type - Permanently deletes a user type

Okta Webhook Events

21 real-time Okta events your AI agent can subscribe to.

Webhooks for AI agents Read the Okta docs

21 Events

Active Check Responds to Okta's one-time verification GET by echoing the x-okta-verification-challenge header value back in the JSON response body.
User Created Emitted when a new user account is created in Okta (provisioned by an admin, sourced from a directory, or self-registered). Maps to Okta event `user.lifecycle.create`.
User Activated Emitted when a user transitions from STAGED, PROVISIONED, or DEPROVISIONED to ACTIVE status and gains access. Maps to Okta event `user.lifecycle.activate`.
User Deactivated Emitted when a user is deactivated — access is revoked and sessions are invalidated, but the account is preserved (status DEPROVISIONED). Maps to Okta event `user.lifecycle.deactivate`.
User Suspended Emitted when a user is temporarily suspended — sign-in is blocked and sessions are invalidated, but the user can be unsuspended without re-provisioning. Maps to Okta event `user.lifecycle.suspend`.
User Delete Initiated Emitted when a user-deletion request is initiated — the user enters DELETED status. Note that `user.lifecycle.delete.confirmed` is NOT event-hook-eligible — `initiated` is the only signal Okta provides. Maps to Okta event `user.lifecycle.delete.initiated`.
User Password Reset Emitted when a user's password is reset (admin-initiated, self-service, or via the connector's reset action). Maps to Okta event `user.account.reset_password`.
User Profile Updated Emitted when one or more user profile attributes are changed (first name, last name, email, phone, custom attributes, etc.). Maps to Okta event `user.account.update_profile`.
User Universal Logout Emitted when a Universal Logout signal terminates all of a user's sessions and tokens across federated apps. Maps to Okta event `user.authentication.universal_logout`.
Group Created Emitted when a new group is created in Okta. Maps to Okta event `group.lifecycle.create`.
Group Deleted Emitted when a group is deleted from Okta. Note that there is no `group.lifecycle.modify` or `update` event — group attribute changes are NOT subscribable via Event Hooks. Maps to Okta event `group.lifecycle.delete`.
Group Member Added Emitted when a user is added as a member of a group. Maps to Okta event `group.user_membership.add`.
Group Member Removed Emitted when a user is removed from a group's membership. Maps to Okta event `group.user_membership.remove`.
Device Activated Emitted when a device transitions from STAGED to ACTIVE status and becomes trusted. Maps to Okta event `device.lifecycle.activate`.
Device Deactivated Emitted when a device is deactivated and loses its trusted status. Maps to Okta event `device.lifecycle.deactivate`.
Device Deleted Emitted when a device is permanently removed from Okta. Maps to Okta event `device.lifecycle.delete`.
App User Assigned Emitted when a user is assigned to an application — the core "who has access to what" IAM signal. Maps to Okta event `application.user_membership.add`.
App User Removed Emitted when a user is removed from an application — deprovisioning / access-loss signal critical for downstream cleanup. Maps to Okta event `application.user_membership.remove`.
App Sign-On Access Denied Emitted when an application sign-on policy denies a user access during sign-in. Security / compliance signal — useful for fraud detection, conditional-access alerting, and audit logging. Maps to Okta event `application.policy.sign_on.deny_access`.
API Token Created Emitted when a new Okta admin API token is created. Security-critical signal — useful for audit logging, anomaly detection, and least-privilege monitoring. Maps to Okta event `system.api_token.create`.
API Token Revoked Emitted when an Okta admin API token is revoked. Security signal — useful for tracking credential lifecycle and detecting compromised-token responses. Maps to Okta event `system.api_token.revoke`.

Do More, Build Less

Integration Infrastructure for Okta AI Agents

Multiple Interfaces

Access integrations via API, AI SDKs, MCP & A2A.

Okta MCP server

Managed Authentication

Pre-built authentication UI.

Agent auth

Falcon Engine

Every Okta action runs on Falcon.

Agent Execution Engine

StackOne Defender

88.7% prompt injection detection.

Prompt injection defense

Start Free Book a Demo

"What impressed us most about StackOne is its ambition and clarity. They're creating infrastructure that modern software and the entire AI agent ecosystem can rely on. The depth of secure integrations, the pace of delivery, and the team's foresight into AI's future uniquely position StackOne to redefine this category."

Luna Schmid, Partner at GV

"We've been impressed by how quickly and deeply StackOne integrates with complex enterprise systems -- and now, with their focus on agent-to-agent interoperability, they're unlocking even more powerful use cases for customers. StackOne delivers all of the above in a universal layer -- without compromise."