Okta Group API

openapi: 3.0.1
info:
  title: Okta Application Group API
  description: Allows customers to easily access the Okta API
  termsOfService: https://developer.okta.com/terms/
  contact:
    name: Okta Developer Team
    url: https://developer.okta.com/
    email: devex-public@okta.com
  license:
    name: Apache-2.0
    url: https://www.apache.org/licenses/LICENSE-2.0.html
  version: 2.16.0
servers:
- url: https://your-subdomain.okta.com/
tags:
- name: Group
paths:
  /api/v1/groups:
    get:
      tags:
      - Group
      summary: Okta List Groups
      description: Enumerates groups in your organization with pagination. A subset of groups can be returned that match a supported filter expression or query.
      operationId: listGroups
      parameters:
      - name: q
        in: query
        description: Searches the name property of groups for matching value
        schema:
          type: string
      - name: filter
        in: query
        description: Filter expression for groups
        schema:
          type: string
      - name: after
        in: query
        description: Specifies the pagination cursor for the next page of groups
        schema:
          type: string
      - name: limit
        in: query
        description: Specifies the number of group results in a page
        schema:
          type: integer
          format: int32
          default: 10000
      - name: expand
        in: query
        description: If specified, it causes additional metadata to be included in the response.
        schema:
          type: string
      - name: search
        in: query
        description: Searches for groups with a supported filtering expression for all attributes except for _embedded, _links, and objectClass
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Group'
      security:
      - api_token: []
    post:
      tags:
      - Group
      summary: Okta Add Group
      description: Adds a new group with `OKTA_GROUP` type to your organization.
      operationId: createGroup
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Group'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Group'
      security:
      - api_token: []
      x-codegen-request-body-name: group
  /api/v1/groups/rules:
    get:
      tags:
      - Group
      summary: Okta List Group Rules
      description: Lists all group rules for your organization.
      operationId: listGroupRules
      parameters:
      - name: limit
        in: query
        description: Specifies the number of rule results in a page
        schema:
          type: integer
          format: int32
          default: 50
      - name: after
        in: query
        description: Specifies the pagination cursor for the next page of rules
        schema:
          type: string
      - name: search
        in: query
        description: Specifies the keyword to search fules for
        schema:
          type: string
      - name: expand
        in: query
        description: If specified as `groupIdToGroupNameMap`, then show group names
        schema:
          type: string
          x-okta-added-version: 1.3.0
        x-okta-added-version: 1.3.0
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/GroupRule'
      security:
      - api_token: []
    post:
      tags:
      - Group
      summary: Okta Create Group Rule
      description: Creates a group rule to dynamically add users to the specified group if they match the condition
      operationId: createGroupRule
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GroupRule'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GroupRule'
      security:
      - api_token: []
      x-codegen-request-body-name: groupRule
  /api/v1/groups/rules/{ruleId}:
    get:
      tags:
      - Group
      summary: Okta Get Group Rule
      description: Fetches a specific group rule by id from your organization
      operationId: getGroupRule
      parameters:
      - name: ruleId
        in: path
        required: true
        schema:
          type: string
      - name: expand
        in: query
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GroupRule'
      security:
      - api_token: []
    put:
      tags:
      - Group
      description: Updates a group rule. Only `INACTIVE` rules can be updated.
      operationId: updateGroupRule
      parameters:
      - name: ruleId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GroupRule'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GroupRule'
      security:
      - api_token: []
      x-codegen-request-body-name: groupRule
    delete:
      tags:
      - Group
      summary: Okta Delete a group Rule
      description: Removes a specific group rule by id from your organization
      operationId: deleteGroupRule
      parameters:
      - name: ruleId
        in: path
        required: true
        schema:
          type: string
      - name: removeUsers
        in: query
        description: Indicates whether to keep or remove users from groups assigned by this rule.
        schema:
          type: boolean
      responses:
        '202':
          description: Accepted
          content: {}
      security:
      - api_token: []
  /api/v1/groups/rules/{ruleId}/lifecycle/activate:
    post:
      tags:
      - Group
      summary: Okta Activate a group Rule
      description: Activates a specific group rule by id from your organization
      operationId: activateGroupRule
      parameters:
      - name: ruleId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/groups/rules/{ruleId}/lifecycle/deactivate:
    post:
      tags:
      - Group
      summary: Okta Deactivate a group Rule
      description: Deactivates a specific group rule by id from your organization
      operationId: deactivateGroupRule
      parameters:
      - name: ruleId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/groups/{groupId}:
    get:
      tags:
      - Group
      summary: Okta List Group Rules
      description: Fetches a group from your organization.
      operationId: getGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Group'
      security:
      - api_token: []
    put:
      tags:
      - Group
      summary: Okta Update Group
      description: Updates the profile for a group with `OKTA_GROUP` type from your organization.
      operationId: updateGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Group'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Group'
      security:
      - api_token: []
      x-codegen-request-body-name: group
    delete:
      tags:
      - Group
      summary: Okta Remove Group
      description: Removes a group with `OKTA_GROUP` type from your organization.
      operationId: deleteGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/groups/{groupId}/apps:
    get:
      tags:
      - Group
      summary: Okta List Assigned Applications
      description: Enumerates all applications that are assigned to a group.
      operationId: listAssignedApplicationsForGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: after
        in: query
        description: Specifies the pagination cursor for the next page of apps
        schema:
          type: string
      - name: limit
        in: query
        description: Specifies the number of app results for a page
        schema:
          type: integer
          format: int32
          default: 20
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Application'
      security:
      - api_token: []
  /api/v1/groups/{groupId}/roles:
    get:
      tags:
      - Group
      description: Success
      operationId: listGroupAssignedRoles
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: expand
        in: query
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Role'
      security:
      - api_token: []
    post:
      tags:
      - Group
      description: Assigns a Role to a Group
      operationId: assignRoleToGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: disableNotifications
        in: query
        schema:
          type: boolean
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AssignRoleRequest'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Role'
        '201':
          description: Success
          content: {}
      security:
      - api_token: []
      x-codegen-request-body-name: assignRoleRequest
  /api/v1/groups/{groupId}/roles/{roleId}:
    get:
      tags:
      - Group
      description: Success
      operationId: getRole
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: roleId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Role'
      security:
      - api_token: []
    delete:
      tags:
      - Group
      description: Unassigns a Role from a Group
      operationId: removeRoleFromGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: roleId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/groups/{groupId}/roles/{roleId}/targets/catalog/apps:
    get:
      tags:
      - Group
      description: Lists all App targets for an `APP_ADMIN` Role assigned to a Group. This methods return list may include full Applications or Instances. The response for an instance will have an `ID` value, while Application will not have an ID.
      operationId: listApplicationTargetsForApplicationAdministratorRoleForGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: roleId
        in: path
        required: true
        schema:
          type: string
      - name: after
        in: query
        schema:
          type: string
      - name: limit
        in: query
        schema:
          type: integer
          format: int32
          default: 20
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/CatalogApplication'
      security:
      - api_token: []
  /api/v1/groups/{groupId}/roles/{roleId}/targets/catalog/apps/{appName}:
    put:
      tags:
      - Group
      description: Success
      operationId: addApplicationTargetToAdminRoleGivenToGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: roleId
        in: path
        required: true
        schema:
          type: string
      - name: appName
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success
          content: {}
      security:
      - api_token: []
    delete:
      tags:
      - Group
      description: Success
      operationId: removeApplicationTargetFromApplicationAdministratorRoleGivenToGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: roleId
        in: path
        required: true
        schema:
          type: string
      - name: appName
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/groups/{groupId}/roles/{roleId}/targets/catalog/apps/{appName}/{applicationId}:
    put:
      tags:
      - Group
      summary: Okta Add App Instance Target to App Administrator Role given to a Group
      description: Add App Instance Target to App Administrator Role given to a Group
      operationId: addApplicationInstanceTargetToAppAdminRoleGivenToGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: roleId
        in: path
        required: true
        schema:
          type: string
      - name: appName
        in: path
        required: true
        schema:
          type: string
      - name: applicationId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
    delete:
      tags:
      - Group
      summary: Okta Remove App Instance Target to App Administrator Role given to a Group
      description: Remove App Instance Target to App Administrator Role given to a Group
      operationId: removeApplicationTargetFromAdministratorRoleGivenToGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: roleId
        in: path
        required: true
        schema:
          type: string
      - name: appName
        in: path
        required: true
        schema:
          type: string
      - name: applicationId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/groups/{groupId}/roles/{roleId}/targets/groups:
    get:
      tags:
      - Group
      description: Success
      operationId: listGroupTargetsForGroupRole
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: roleId
        in: path
        required: true
        schema:
          type: string
      - name: after
        in: query
        schema:
          type: string
      - name: limit
        in: query
        schema:
          type: integer
          format: int32
          default: 20
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Group'
      security:
      - api_token: []
  /api/v1/groups/{groupId}/roles/{roleId}/targets/groups/{targetGroupId}:
    put:
      tags:
      - Group
      operationId: addGroupTargetToGroupAdministratorRoleForGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: roleId
        in: path
        required: true
        schema:
          type: string
      - name: targetGroupId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
    delete:
      tags:
      - Group
      operationId: removeGroupTargetFromGroupAdministratorRoleGivenToGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: roleId
        in: path
        required: true
        schema:
          type: string
      - name: targetGroupId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
  /api/v1/groups/{groupId}/users:
    get:
      tags:
      - Group
      summary: Okta List Group Members
      description: Enumerates all users that are a member of a group.
      operationId: listGroupUsers
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: after
        in: query
        description: Specifies the pagination cursor for the next page of users
        schema:
          type: string
      - name: limit
        in: query
        description: Specifies the number of user results in a page
        schema:
          type: integer
          format: int32
          default: 1000
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/User'
      security:
      - api_token: []
  /api/v1/groups/{groupId}/users/{userId}:
    put:
      tags:
      - Group
      summary: Okta Add User to Group
      description: Adds a user to a group with 'OKTA_GROUP' type.
      operationId: addUserToGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: userId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
    delete:
      tags:
      - Group
      summary: Okta Remove User from Group
      description: Removes a user from a group with 'OKTA_GROUP' type.
      operationId: removeUserFromGroup
      parameters:
      - name: groupId
        in: path
        required: true
        schema:
          type: string
      - name: userId
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
          content: {}
      security:
      - api_token: []
components:
  schemas:
    GroupRuleGroupAssignment:
      type: object
      properties:
        groupIds:
          type: array
          items:
            type: string
      x-okta-tags:
      - GroupRule
    ApplicationCredentialsSigning:
      type: object
      properties:
        kid:
          type: string
        lastRotated:
          type: string
          format: date-time
          readOnly: true
        nextRotation:
          type: string
          format: date-time
          readOnly: true
        rotationMode:
          type: string
        use:
          $ref: '#/components/schemas/ApplicationCredentialsSigningUse'
      x-okta-tags:
      - Application
    CatalogApplicationStatus:
      type: string
      enum:
      - ACTIVE
      - INACTIVE
      x-okta-tags:
      - Role
    AuthenticationProvider:
      type: object
      properties:
        name:
          type: string
        type:
          $ref: '#/components/schemas/AuthenticationProviderType'
      x-okta-tags:
      - User
    UserType:
      type: object
      properties:
        _links:
          type: object
          additionalProperties:
            type: object
            properties: {}
          readOnly: true
        created:
          type: string
          format: date-time
          readOnly: true
        createdBy:
          type: string
          readOnly: true
        default:
          type: boolean
          readOnly: true
        description:
          type: string
        displayName:
          type: string
        id:
          type: string
        lastUpdated:
          type: string
          format: date-time
          readOnly: true
        lastUpdatedBy:
          type: string
          readOnly: true
        name:
          type: string
      x-okta-crud:
      - alias: create
        arguments:
        - dest: userType
          self: true
        operationId: createUserType
      - alias: update
        arguments:
        - dest: typeId
          src: id
        - dest: userType
          self: true
        operationId: updateUserType
      - alias: read
        arguments:
        - dest: typeId
          src: id
        operationId: getUserType
      - alias: delete
        arguments:
        - dest: typeId
          src: id
        operationId: deleteUserType
      x-okta-operations:
      - alias: replaceUserType
        arguments:
        - dest: roleId
          src: id
        operationId: replaceUserType
      x-okta-tags:
      - UserType
    GroupRuleExpression:
      type: object
      properties:
        type:
          type: string
        value:
          type: string
      x-okta-tags:
      - GroupRule
    GroupRule:
      type: object
      properties:
        actions:
          $ref: '#/components/schemas/GroupRuleAction'
        conditions:
          $ref: '#/components/schemas/GroupRuleConditions'
        created:
          type: string
          format: date-time
          readOnly: true
        id:
          type: string
          readOnly: true
        lastUpdated:
          type: string
          format: date-time
          readOnly: true
        name:
          type: string
        status:
          $ref: '#/components/schemas/GroupRuleStatus'
        type:
          type: string
      x-okta-crud:
      - alias: update
        arguments:
        - dest: ruleId
          src: id
        - dest: groupRule
          self: true
        operationId: updateGroupRule
      - alias: delete
        arguments:
        - dest: ruleId
          src: id
        operationId: deleteGroupRule
      x-okta-operations:
      - alias: activate
        arguments:
        - dest: ruleId
          src: id
        operationId: activateGroupRule
      - alias: deactivate
        arguments:
        - dest: ruleId
          src: id
        operationId: deactivateGroupRule
      x-okta-tags:
      - GroupRule
    ApplicationSignOnMode:
      type: string
      enum:
      - BOOKMARK
      - BASIC_AUTH
      - BROWSER_PLUGIN
      - SECURE_PASSWORD_STORE
      - AUTO_LOGIN
      - WS_FEDERATION
      - SAML_2_0
      - OPENID_CONNECT
      - SAML_1_1
      x-okta-tags:
      - Application
    GroupRuleStatus:
      type: string
      enum:
      - ACTIVE
      - INACTIVE
      - INVALID
      x-okta-tags:
      - GroupRule
    GroupRuleGroupCondition:
      type: object
      properties:
        exclude:
          type: array
          items:
            type: string
        include:
          type: array
          items:
            type: string
      x-okta-tags:
      - GroupRule
    Role:
      type: object
      properties:
        _embedded:
          type: object
          additionalProperties:
            type: object
            properties: {}
          readOnly: true
        _links:
          type: object
          additionalProperties:
            type: object
            properties: {}
          readOnly: true
        assignmentType:
          $ref: '#/components/schemas/RoleAssignmentType'
        created:
          type: string
          format: date-time
          readOnly: true
        description:
          type: string
        id:
          type: string
          readOnly: true
        label:
          type: string
          readOnly: true
        lastUpdated:
          type: string
          format: date-time
          readOnly: true
        status:
          $ref: '#/components/schemas/RoleStatus'
        type:
          $ref: '#/components/schemas/RoleType'
      x-okta-operations:
      - alias: addAdminGroupTarget
        arguments:
        - dest: roleId
          src: id
        - dest: groupId
          parentSrc: id
        operationId: addGroupTargetToGroupAdministratorRoleForGroup
      - alias: addAppInstanceTargetToAdminRole
        arguments:
        - dest: roleId
          src: id
        - dest: groupId
          parentSrc: id
        operationId: addApplicationInstanceTargetToAppAdminRoleGivenToGroup
      - alias: addAppTargetToAdminRole
        arguments:
        - dest: roleId
          src: id
        - dest: groupId
          parentSrc: id
        operationId: addApplicationTargetToAdminRoleGivenToGroup
      - alias: addAllAppsAsTargetToRole
        arguments:
        - dest: roleId
          src: id
        - dest: userId
          parentSrc: id
        operationId: addAllAppsAsTargetToRole
      - alias: addAppTargetToAppAdminRoleForUser
        arguments:
        - dest: roleId
          src: id
        - dest: userId
          parentSrc: id
        operationId: addApplicationTargetToAppAdminRoleForUser
      - alias: addAppTargetToAdminRoleForUser
        arguments:
        - dest: roleId
          src: id
        - dest: userId
          parentSrc: id
        operationId: addApplicationTargetToAdminRoleForUser
      x-okta-tags:
      - User
    ApplicationSettingsNotes:
      type: object
      properties:
        admin:
          type: string
        enduser:
          type: string
      x-okta-tags:
      - Application
    ApplicationSettingsNotificationsVpn:
      type: object
      properties:
        helpUrl:
          type: string
        message:
          type: string
        network:
          $ref: '#/components/schemas/ApplicationSettingsNotificationsVpnNetwork'
      x-okta-tags:
      - Application
    ApplicationVisibilityHide:
      type: object
      properties:
        iOS:
          type: boolean
        web:
          type: boolean
      x-okta-tags:
      - Application
    Application:
      type: object
      properties:
        _embedded:
          type: object
          additionalProperties:
            type: object
            properties: {}
          readOnly: true
        _links:
          type: object
          additionalProperties:
            type: object
            properties: {}
          readOnly: true
        accessibility:
          $ref: '#/components/schemas/ApplicationAccessibility'
        created:
          type: string
          format: date-time
          readOnly: true
        credentials:
          $ref: '#/components/schemas/ApplicationCredentials'
        features:
          type: array
          items:
            type: string
        id:
          type: string
          readOnly: true
        label:
          type: string
        lastUpdated:
          type: string
          format: date-time
          readOnly: true
        licensing:
          $ref: '#/components/schemas/ApplicationLicensing'
        name:
          type: string
          readOnly: true
        profile:
          type: object
          additionalProperties:
            type: object
            properties: {}
        settings:
          $ref: '#/components/schemas/ApplicationSettings'
        signOnMode:
          $ref: '#/components/schemas/ApplicationSignOnMode'
        status:
          type: string
          readOnly: true
          enum:
          - ACTIVE
          - INACTIVE
          - DELETED
        visibility:
          $ref: '#/components/schemas/ApplicationVisibility'
      x-okta-crud:
      - alias: read
        arguments:
        - dest: appId
          src: id
        operationId: getApplication
      - alias: update
        arguments:
        - dest: appId
          src: id
        - dest: application
          self: true
        operationId: updateApplication
      - alias: delete
        arguments:
        - dest: appId
          src: id
        operationId: deleteApplication
      x-okta-operations:
      - alias: activate
        arguments:
        - dest: appId
          src: id
        operationId: activateApplication
      - alias: deactivate
        arguments:
        - dest: appId
          src: id
        operationId: deactivateApplication
      - alias: listApplicationUsers
        arguments:
        - dest: appId
          src: id
        operationId: listApplicationUsers
      - alias: assignUserToApplication
        arguments:
        - dest: appId
          src: id
        operationId: assignUserToApplication
      - alias: getApplicationUser
        arguments:
        - dest: appId
          src: id
        operationId: getApplicationUser
      - alias: createApplicationGroupAssignment
        arguments:
        - dest: appId
          src: id
        operationId: createApplicationGroupAssignment
      - alias: getApplicationGroupAssignment
        arguments:
        - dest: appId
          src: id
        operationId: getApplicationGroupAssignment
      - alias: cloneApplicationKey
        arguments:
        - dest: appId
          src: id
        operationId: cloneApplicationKey
      - alias: getApplicationKey
        arguments:
        - dest: appId
          src: id
        operationId: getApplicationKey
      - alias: listGroupAssignments
        arguments:
        - dest: appId
          src: id
        operationId: listApplicationGroupAssignments
      - alias: listKeys
        arguments:
        - dest: appId
          src: id
        operationId: listApplicationKeys
      - alias: generateKey
        arguments:
        - dest: appId
          src: id
        operationId: generateApplicationKey
      - alias: generateCsr
        arguments:
        - dest: appId
          src: id
        operationId: generateCsrForApplication
      - alias: getCsr
        arguments:
        - dest: appId
          src: id
        operationId: getCsrForApplication
      - alias: revokeCsr
        arguments:
        - dest: appId
          src: id
        operationId: revokeCsrFromApplication
      - alias: listCsrs
        arguments:
        - dest: appId
          src: id
        operationId: listCsrsForApplication
      - alias: publishCerCert
        arguments:
        - dest: appId
          src: id
        operationId: publishCerCert
      - alias: publishBinaryCerCert
        arguments:
        - dest: appId
          src: id


# --- truncated at 32 KB (53 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/okta/refs/heads/main/openapi/okta-group-api-openapi.yml