Okta

Okta AuthorizationServer API

The AuthorizationServer API from Okta — 21 operation(s) for authorizationserver.

Documentation GitHub OpenAPI

Operations 38

GET /api/v1/authorizationServers #

POST /api/v1/authorizationServers #

GET /api/v1/authorizationServers/{authServerId} #

PUT /api/v1/authorizationServers/{authServerId} #

DELETE /api/v1/authorizationServers/{authServerId} #

GET /api/v1/authorizationServers/{authServerId}/claims #

POST /api/v1/authorizationServers/{authServerId}/claims #

GET /api/v1/authorizationServers/{authServerId}/claims/{claimId} #

PUT /api/v1/authorizationServers/{authServerId}/claims/{claimId} #

DELETE /api/v1/authorizationServers/{authServerId}/claims/{claimId} #

GET /api/v1/authorizationServers/{authServerId}/clients #

GET /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens #

DELETE /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens #

GET /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens/{tokenId} #

DELETE /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens/{tokenId} #

GET /api/v1/authorizationServers/{authServerId}/credentials/keys #

POST /api/v1/authorizationServers/{authServerId}/credentials/lifecycle/keyRotate #

POST /api/v1/authorizationServers/{authServerId}/lifecycle/activate #

POST /api/v1/authorizationServers/{authServerId}/lifecycle/deactivate #

GET /api/v1/authorizationServers/{authServerId}/policies #

POST /api/v1/authorizationServers/{authServerId}/policies #

GET /api/v1/authorizationServers/{authServerId}/policies/{policyId} #

PUT /api/v1/authorizationServers/{authServerId}/policies/{policyId} #

DELETE /api/v1/authorizationServers/{authServerId}/policies/{policyId} #

POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/lifecycle/activate #

POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/lifecycle/deactivate #

GET /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules #

POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules #

GET /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId} #

PUT /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId} #

DELETE /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId} #

POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}/lifecycle/activate #

POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}/lifecycle/deactivate #

GET /api/v1/authorizationServers/{authServerId}/scopes #

POST /api/v1/authorizationServers/{authServerId}/scopes #

GET /api/v1/authorizationServers/{authServerId}/scopes/{scopeId} #

PUT /api/v1/authorizationServers/{authServerId}/scopes/{scopeId} #

DELETE /api/v1/authorizationServers/{authServerId}/scopes/{scopeId} #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/okta-authorizationserver-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Okta Application Authorization Server API
  description: Allows customers to easily access the Okta API
  termsOfService: https://developer.okta.com/terms/
  contact:
    name: Okta Developer Team
    url: https://developer.okta.com/
    email: devex-public@okta.com
  license:
    name: Apache-2.0
    url: https://www.apache.org/licenses/LICENSE-2.0.html
  version: 2.16.0
servers:
- url: https://your-subdomain.okta.com/
tags:
- name: AuthorizationServer
paths:
  /api/v1/authorizationServers:
    get:
      tags:
      - AuthorizationServer
      description: Success
      operationId: listAuthorizationServers
      parameters:
      - name: q
        in: query
        schema:
          type: string
      - name: limit
        in: query
        schema:
          type: string
      - name: after
        in: query
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/AuthorizationServer'
      security:
      - api_token: []
    post:
      tags:
      - AuthorizationServer
      description: Success
      operationId: createAuthorizationServer
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AuthorizationServer'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthorizationServer'
        '201':
          description: Created
          content: {}
      security:
      - api_token: []
      x-codegen-request-body-name: authorizationServer
  /api/v1/authorizationServers/{authServerId}:
    get:
      tags:
      - AuthorizationServer
      description: Success
      operationId: getAuthorizationServer
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthorizationServer'
      security:
      - api_token: []
    put:
      tags:
      - AuthorizationServer
      description: Success
      operationId: updateAuthorizationServer
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AuthorizationServer'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthorizationServer'
      security:
      - api_token: []
      x-codegen-request-body-name: authorizationServer
    delete:
      tags:
      - AuthorizationServer
      description: Success
      operationId: deleteAuthorizationServer
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/claims:
    get:
      tags:
      - AuthorizationServer
      description: Success
      operationId: listOAuth2Claims
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/OAuth2Claim'
      security:
      - api_token: []
    post:
      tags:
      - AuthorizationServer
      description: Success
      operationId: createOAuth2Claim
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OAuth2Claim'
        required: true
      responses:
        '200':
          description: Created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OAuth2Claim'
        '201':
          description: Success
          content: {}
      security:
      - api_token: []
      x-codegen-request-body-name: oAuth2Claim
  /api/v1/authorizationServers/{authServerId}/claims/{claimId}:
    get:
      tags:
      - AuthorizationServer
      description: Success
      operationId: getOAuth2Claim
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: claimId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OAuth2Claim'
      security:
      - api_token: []
    put:
      tags:
      - AuthorizationServer
      description: Success
      operationId: updateOAuth2Claim
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: claimId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OAuth2Claim'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OAuth2Claim'
      security:
      - api_token: []
      x-codegen-request-body-name: oAuth2Claim
    delete:
      tags:
      - AuthorizationServer
      description: Success
      operationId: deleteOAuth2Claim
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: claimId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/clients:
    get:
      tags:
      - AuthorizationServer
      description: Success
      operationId: listOAuth2ClientsForAuthorizationServer
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/OAuth2Client'
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens:
    get:
      tags:
      - AuthorizationServer
      description: Success
      operationId: listRefreshTokensForAuthorizationServerAndClient
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: clientId
        in: path
        required: true
        schema:
          type: string
      - name: expand
        in: query
        schema:
          type: string
      - name: after
        in: query
        schema:
          type: string
      - name: limit
        in: query
        schema:
          type: integer
          format: int32
          default: -1
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/OAuth2RefreshToken'
      security:
      - api_token: []
    delete:
      tags:
      - AuthorizationServer
      description: Success
      operationId: revokeRefreshTokensForAuthorizationServerAndClient
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: clientId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens/{tokenId}:
    get:
      tags:
      - AuthorizationServer
      description: Success
      operationId: getRefreshTokenForAuthorizationServerAndClient
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: clientId
        in: path
        required: true
        schema:
          type: string
      - name: tokenId
        in: path
        required: true
        schema:
          type: string
      - name: expand
        in: query
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OAuth2RefreshToken'
      security:
      - api_token: []
    delete:
      tags:
      - AuthorizationServer
      description: Success
      operationId: revokeRefreshTokenForAuthorizationServerAndClient
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: clientId
        in: path
        required: true
        schema:
          type: string
      - name: tokenId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/credentials/keys:
    get:
      tags:
      - AuthorizationServer
      description: Success
      operationId: listAuthorizationServerKeys
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/JsonWebKey'
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/credentials/lifecycle/keyRotate:
    post:
      tags:
      - AuthorizationServer
      description: Success
      operationId: rotateAuthorizationServerKeys
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/JwkUse'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/JsonWebKey'
      security:
      - api_token: []
      x-codegen-request-body-name: use
  /api/v1/authorizationServers/{authServerId}/lifecycle/activate:
    post:
      tags:
      - AuthorizationServer
      description: Success
      operationId: activateAuthorizationServer
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content: {}
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/lifecycle/deactivate:
    post:
      tags:
      - AuthorizationServer
      description: Success
      operationId: deactivateAuthorizationServer
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content: {}
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/policies:
    get:
      tags:
      - AuthorizationServer
      description: Success
      operationId: listAuthorizationServerPolicies
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/AuthorizationServerPolicy'
      security:
      - api_token: []
    post:
      tags:
      - AuthorizationServer
      description: Success
      operationId: createAuthorizationServerPolicy
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AuthorizationServerPolicy'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthorizationServerPolicy'
        '201':
          description: Created
          content: {}
      security:
      - api_token: []
      x-codegen-request-body-name: policy
  /api/v1/authorizationServers/{authServerId}/policies/{policyId}:
    get:
      tags:
      - AuthorizationServer
      description: Success
      operationId: getAuthorizationServerPolicy
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: policyId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthorizationServerPolicy'
      security:
      - api_token: []
    put:
      tags:
      - AuthorizationServer
      description: Success
      operationId: updateAuthorizationServerPolicy
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: policyId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AuthorizationServerPolicy'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthorizationServerPolicy'
      security:
      - api_token: []
      x-codegen-request-body-name: policy
    delete:
      tags:
      - AuthorizationServer
      description: Success
      operationId: deleteAuthorizationServerPolicy
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: policyId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/policies/{policyId}/lifecycle/activate:
    post:
      tags:
      - AuthorizationServer
      description: Activate Authorization Server Policy
      operationId: activateAuthorizationServerPolicy
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: policyId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content: {}
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/policies/{policyId}/lifecycle/deactivate:
    post:
      tags:
      - AuthorizationServer
      description: Deactivate Authorization Server Policy
      operationId: deactivateAuthorizationServerPolicy
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: policyId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content: {}
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules:
    get:
      tags:
      - AuthorizationServer
      description: Enumerates all policy rules for the specified Custom Authorization Server and Policy.
      operationId: listAuthorizationServerPolicyRules
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: policyId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/AuthorizationServerPolicyRule'
      security:
      - api_token: []
    post:
      tags:
      - AuthorizationServer
      description: Creates a policy rule for the specified Custom Authorization Server and Policy.
      operationId: createAuthorizationServerPolicyRule
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: policyId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AuthorizationServerPolicyRule'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthorizationServerPolicyRule'
      security:
      - api_token: []
      x-codegen-request-body-name: policyRule
  /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}:
    get:
      tags:
      - AuthorizationServer
      description: Returns a Policy Rule by ID that is defined in the specified Custom Authorization Server and Policy.
      operationId: getAuthorizationServerPolicyRule
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: policyId
        in: path
        required: true
        schema:
          type: string
      - name: ruleId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthorizationServerPolicyRule'
      security:
      - api_token: []
    put:
      tags:
      - AuthorizationServer
      description: Updates the configuration of the Policy Rule defined in the specified Custom Authorization Server and Policy.
      operationId: updateAuthorizationServerPolicyRule
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: policyId
        in: path
        required: true
        schema:
          type: string
      - name: ruleId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AuthorizationServerPolicyRule'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthorizationServerPolicyRule'
      security:
      - api_token: []
      x-codegen-request-body-name: policyRule
    delete:
      tags:
      - AuthorizationServer
      description: Deletes a Policy Rule defined in the specified Custom Authorization Server and Policy.
      operationId: deleteAuthorizationServerPolicyRule
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: policyId
        in: path
        required: true
        schema:
          type: string
      - name: ruleId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}/lifecycle/activate:
    post:
      tags:
      - AuthorizationServer
      description: Activate Authorization Server Policy Rule
      operationId: activateAuthorizationServerPolicyRule
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: policyId
        in: path
        required: true
        schema:
          type: string
      - name: ruleId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content: {}
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}/lifecycle/deactivate:
    post:
      tags:
      - AuthorizationServer
      description: Deactivate Authorization Server Policy Rule
      operationId: deactivateAuthorizationServerPolicyRule
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: policyId
        in: path
        required: true
        schema:
          type: string
      - name: ruleId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content: {}
      security:
      - api_token: []
  /api/v1/authorizationServers/{authServerId}/scopes:
    get:
      tags:
      - AuthorizationServer
      description: Success
      operationId: listOAuth2Scopes
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: q
        in: query
        schema:
          type: string
      - name: filter
        in: query
        schema:
          type: string
      - name: cursor
        in: query
        schema:
          type: string
      - name: limit
        in: query
        schema:
          type: integer
          format: int32
          default: -1
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/OAuth2Scope'
      security:
      - api_token: []
    post:
      tags:
      - AuthorizationServer
      description: Success
      operationId: createOAuth2Scope
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OAuth2Scope'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OAuth2Scope'
        '201':
          description: Success
          content: {}
      security:
      - api_token: []
      x-codegen-request-body-name: oAuth2Scope
  /api/v1/authorizationServers/{authServerId}/scopes/{scopeId}:
    get:
      tags:
      - AuthorizationServer
      description: Success
      operationId: getOAuth2Scope
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: scopeId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OAuth2Scope'
      security:
      - api_token: []
    put:
      tags:
      - AuthorizationServer
      description: Success
      operationId: updateOAuth2Scope
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: scopeId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OAuth2Scope'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OAuth2Scope'
      security:
      - api_token: []
      x-codegen-request-body-name: oAuth2Scope
    delete:
      tags:
      - AuthorizationServer
      description: Success
      operationId: deleteOAuth2Scope
      parameters:
      - name: authServerId
        in: path
        required: true
        schema:
          type: string
      - name: scopeId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
components:
  schemas:
    PolicyPeopleCondition:
      type: object
      properties:
        groups:
          $ref: '#/components/schemas/GroupCondition'
        users:
          $ref: '#/components/schemas/UserCondition'
      x-okta-tags:
      - Policy
    Duration:
      type: object
      properties:
        number:
          type: integer
        unit:
          type: string
      x-okta-tags:
      - Policy
    ClientPolicyCondition:
      type: object
      properties:
        include:
          type: array
          items:
            type: string
      x-okta-tags:
      - Policy
    OAuth2ScopesMediationPolicyRuleCondition:
      type: object
      properties:
        include:
          type: array
          items:
            type: string
      x-okta-tags:
      - Application
    GroupPolicyRuleCondition:
      type: object
      properties:
        exclude:
          type: array
          items:
            type: string
        include:
          type: array
          items:
            type: string
      x-okta-tags:
      - Policy
    UserIdentifierPolicyRuleCondition:
      type: object
      properties:
        attribute:
          type: string
        patterns:
          type: array
          items:
            $ref: '#/components/schemas/UserIdentifierConditionEvaluatorPattern'
        type:
          type: string
          enum:
          - IDENTIFIER
          - ATTRIBUTE
      x-okta-tags:
      - Policy
    AuthorizationServerCredentials:
      type: object
      properties:
        signing:
          $ref: '#/components/schemas/AuthorizationServerCredentialsSigningConfig'
      x-okta-tags:
      - Application
    UserIdentifierConditionEvaluatorPattern:
      type: object
      properties:
        matchType:
          type: string
          enum:
          - SUFFIX
          - EXPRESSION
          - STARTS_WITH
          - EQUALS
          - CONTAINS
        value:
          type: string
      x-okta-tags:
      - Policy
    JsonWebKey:
      type: object
      properties:
        _links:
          type: object
          additionalProperties:
            type: object
            properties: {}
          readOnly: true
        alg:
          type: string
        created:
          type: string
          format: date-time
        e:
          type: string
        expiresAt:
          type: string
          format: date-time
        key_ops:
          type: array
          items:
            type: string
        kid:
          type: string
        kty:
          type: string
        lastUpdated:
          type: string
          format: date-time
        n:
          type: string
        status:
          type: string
        use:
          type: string
        x5c:
          type: array
          items:
            type: string
        x5t:
          type: string
        x5t#S256:
          type: string
        x5u:
          type: string
      x-okta-tags:
      - Application
    OAuth2Actor:
      type: object
      properties:
        id:
          type: string
          readOnly: true
        type:
          type: string
      x-okta-tags:
      - Application
    PasswordExpirationPolicyRuleCondition:
      type: object
      properties:
        number:
          type: integer
        unit:
          type: string
      x-okta-tags:
      - Policy
    UserStatusPolicyRuleCondition:
      type: object
      properties:
        value:
          type: string
          enum:
          - ACTIVE
          - INACTIVE
          - PENDING
          - DELETED
          - EXPIRED_PASSWORD
          - ACTIVATING
          - SUSPENDED
          - DELETING
      x-okta-tags:
      - Policy
    PolicyType:
      type: string
      enum:
      - OAUTH_AUTHORIZATION_POLICY
      - OKTA_SIGN_ON
      - PASSWORD
      - IDP_DISCOVERY
      - PROFILE_ENROLLMENT
      - ACCESS_POLICY
      - MFA_ENROLL
      x-okta-tags:
      - Policy
    GroupCondition:
      type: object
      properties:
        exclude:
          type: array
          items:
            type: string
        include:
          type: array
          items:
            type: string
      x-okta-tags:
      - Policy
    OAuth2Client:
      type: object
      properties:
        _links:
          type: object
          additionalProperties:
            type: object
            properties: {}
          readOnly: true
        client_id:
          type: string
          readOnly: true
        client_name:
          type: string
          readOnly: true
        client_uri:
          type: string
          readOnly: true
        logo_uri:
          type: string
          readOnly: true
      x-okta-tags:
      - Application
    TokenAuthorizationServerPolicyRuleAction:
      type: object
      properties:
        accessTokenLifetimeMinutes:
          type: integer
        inlineHook:
          $ref: '#/components/schemas/TokenAuthorizationServerPolicyRuleActionInlineHook'
        refreshTokenLifetimeMinutes:
          type: integer
        refreshTokenWindowMinutes:
          type: integer
      x-okta-tags:
      - AuthorizationServerPolicy
    BeforeScheduledActionPolicyRuleCondition:
      type: object
      properties:
        duration:
          $ref: '#/components/schemas/Duration'
        lifecycleAction:
          $ref: '#/components/schemas/ScheduledUserLifecycleAction'
      x-okta-tags:
      - Policy
    AuthorizationServerCredentialsSigningConfig:
      type: object
      properties:
        kid:
          type: string
        lastRotated:
          type: string
          format: date-time
          readOnly: true
        nextRotation:
          type: string
          format: date-time
          readOnly: true
        rotationMode:
          $ref: '#/components/schemas/AuthorizationServerCredentialsRotationMode'
        use:
          $ref: '#/components/schemas/AuthorizationServerCredentialsUse'
      x-okta-tags:
      - AuthorizationServer
    InactivityPolicyRuleCondition:
      type: object
      properties:
        number:
          type: integer
        unit:
          type: string
      x-okta-tags:
      - Policy
    AuthorizationServerCredentialsRotationMode:
      type: string
      enum:
      - AUTO
      - MANUAL
      x-okta-tags:
      - AuthorizationServer
    MDMEnrollmentPolicyRuleCondition:
      type: object
      properties:
        blockNonSafeAndroid:
          type: boolean
        enrollment:
          type: string
          enum:
          - OMM
          - 

# --- truncated at 32 KB (54 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/okta/refs/heads/main/openapi/okta-authorizationserver-api-openapi.yml

Okta AuthorizationServer API

Operations 38

Documentation

Specifications

Schemas & Data

Other Resources