# API

**URL:** https://devforum.okta.com/c/questions/api/22.md?page=1

[Latest](https://devforum.okta.com/latest.md) · [Categories](https://devforum.okta.com/categories.md) · [Tags](https://devforum.okta.com/tags.md)

**Page:** 2

---

## [MyProfile Replace Password not enabled](https://devforum.okta.com/t/myprofile-replace-password-not-enabled/34345)

<div class="topic-metadata">

**Author:** [@gze](https://devforum.okta.com/u/gze)\
**Replies:** 5\
**Last updated:** [September 30, 2025, 3:20pm UTC](https://devforum.okta.com/t/myprofile-replace-password-not-enabled/34345 "2025-09-30T15:20:13Z")

</div>

I logged into the org server for a user on a native app, and have attempted to use that to update the password (Password) of the user. I have the right scope granted and have checked to make sure my JWT has the right sco…

---

## [Get credentials and Policy information from okta](https://devforum.okta.com/t/get-credentials-and-policy-information-from-okta/34311)

<div class="topic-metadata">

**Author:** [@ketan.dudhane](https://devforum.okta.com/u/ketan.dudhane)\
**Replies:** 1\
**Last updated:** [September 12, 2025, 4:53pm UTC](https://devforum.okta.com/t/get-credentials-and-policy-information-from-okta/34311 "2025-09-12T16:53:47Z")

</div>

e are trying to access Credentials and Policy data from Okta. It is giving a permission error {“COLLECTOR SERVICE”: “HttpRequestError \[401\]: Request to /authenticator-enrollments failed with the message = {\\“errorCode\\”…

---

## [Question About OIE Authenticators vs Factors](https://devforum.okta.com/t/question-about-oie-authenticators-vs-factors/34276)

<div class="topic-metadata">

**Author:** [@jgentry\_teamibr](https://devforum.okta.com/u/jgentry_teamibr)\
**Replies:** 3\
**Last updated:** [September 9, 2025, 5:34pm UTC](https://devforum.okta.com/t/question-about-oie-authenticators-vs-factors/34276 "2025-09-09T17:34:08Z")

</div>

I’m a little confused by the expected flow for managing a user’s Okta Verify enrollment in OIE. For our existing use case we only allow users to manage their accounts (setting username/password and removing/adding Okta V…

---

## [Creating an IdP Authenticator using API (+Terraform)](https://devforum.okta.com/t/creating-an-idp-authenticator-using-api-terraform/34290)

<div class="topic-metadata">

**Author:** [@muhwagwa](https://devforum.okta.com/u/muhwagwa)\
**Replies:** 0\
**Last updated:** [September 8, 2025, 6:42pm UTC](https://devforum.okta.com/t/creating-an-idp-authenticator-using-api-terraform/34290 "2025-09-08T18:42:21Z")

</div>

Hi, I’m using Terraform to structure Okta for my org. I need to create an authenticator, specifically ‘IdP Authenticator’ using Terraform. I checked API docs for creating Authenticator but it doesn’t seem to have a good…

---

## [Add okta.policies.read permission through API](https://devforum.okta.com/t/add-okta-policies-read-permission-through-api/34027)

<div class="topic-metadata">

**Author:** [@hpcsc](https://devforum.okta.com/u/hpcsc)\
**Replies:** 2\
**Last updated:** [August 20, 2025, 8:54pm UTC](https://devforum.okta.com/t/add-okta-policies-read-permission-through-api/34027 "2025-08-20T20:54:59Z")

</div>

hi, I’m trying to add a permission to a custom admin role using this API like below curl -s -X POST -H "Authorization: SSWS ${OKTA\_TOKEN}" \\ -H "Content-Type: application/json" \\ -d "{}" \\ "https…

---

## [Django django-okta-auth CORS issue](https://devforum.okta.com/t/django-django-okta-auth-cors-issue/34121)

<div class="topic-metadata">

**Author:** [@prashshyam](https://devforum.okta.com/u/prashshyam)\
**Replies:** 1\
**Last updated:** [August 15, 2025, 9:07pm UTC](https://devforum.okta.com/t/django-django-okta-auth-cors-issue/34121 "2025-08-15T21:07:48Z")

</div>

Hi, I am using follwing version of packages python 3.12 django 4.2.23 django-okta-auth==0.8.0 django-cors-headers==4.7.0 for my django web app.Now when I try to sign in using okta sign in widget I get Access to XMLHt…

---

## [Api validation failed: rotationType\\nrotationType: The field has an invalid value](https://devforum.okta.com/t/api-validation-failed-rotationtype-nrotationtype-the-field-has-an-invalid-value/34099)

<div class="topic-metadata">

**Author:** [@justin.kahn](https://devforum.okta.com/u/justin.kahn)\
**Replies:** 3\
**Last updated:** [August 12, 2025, 4:28pm UTC](https://devforum.okta.com/t/api-validation-failed-rotationtype-nrotationtype-the-field-has-an-invalid-value/34099 "2025-08-12T16:28:46Z")

</div>

I am trying to update an App (adding a redirect URI) via API. I have been using the same code for a while, but this time, I got the following error: Okta HTTP 400 E0000001 Api validation failed: rotationType\\nrotationTy…

---

## [MAX delay of events for system logs polling](https://devforum.okta.com/t/max-delay-of-events-for-system-logs-polling/34048)

<div class="topic-metadata">

**Author:** [@jisesi](https://devforum.okta.com/u/jisesi)\
**Replies:** 1\
**Last updated:** [August 9, 2025, 8:25pm UTC](https://devforum.okta.com/t/max-delay-of-events-for-system-logs-polling/34048 "2025-08-09T20:25:08Z")

</div>

Hi, I’m working on an app that consumes a stream of events from the /api/v1/logs endpoint via polling requests. The app is designed to only process events that are no older than 24 hours, based on the published field in…

---

## [Trying to Enroll HOTP](https://devforum.okta.com/t/trying-to-enroll-hotp/34064)

<div class="topic-metadata">

**Author:** [@Amm123](https://devforum.okta.com/u/Amm123)\
**Replies:** 2\
**Last updated:** [August 8, 2025, 3:49pm UTC](https://devforum.okta.com/t/trying-to-enroll-hotp/34064 "2025-08-08T15:49:44Z")

</div>

Trying to Enroll HOTP, after adding Custom TOTP and a profile for Enrolling(user is a member of a specific group where it is allowed). I get the following error when trying e.g. “factorType”: “token:hotp”, “provider”:…

---

## [Using .self scoped tokens](https://devforum.okta.com/t/using-self-scoped-tokens/34018)

<div class="topic-metadata">

**Author:** [@markmark](https://devforum.okta.com/u/markmark)\
**Replies:** 5\
**Last updated:** [July 25, 2025, 7:39am UTC](https://devforum.okta.com/t/using-self-scoped-tokens/34018 "2025-07-25T07:39:09Z")

</div>

I had been trying to use a self scoped OAuth 2.0 token for the Factors API - okta.users.manage.self - as well as using “me” and not the userId with the goal of enrolling Google Authenticator in our custom application. T…

---

## [Issues Authenticating with Okta SDK](https://devforum.okta.com/t/issues-authenticating-with-okta-sdk/34008)

<div class="topic-metadata">

**Author:** [@chris.clewell](https://devforum.okta.com/u/chris.clewell)\
**Replies:** 1\
**Last updated:** [July 23, 2025, 12:23pm UTC](https://devforum.okta.com/t/issues-authenticating-with-okta-sdk/34008 "2025-07-23T12:23:49Z")

</div>

Hello, I am having issues authenticating with the Okta SDK API tooling. I have success using direct URL API but when I try to use the SDK Client Config, no dice. I am getting the below error: Cannot connect to host ope…

---

## [Okta Server cutting connections unexpectedly](https://devforum.okta.com/t/okta-server-cutting-connections-unexpectedly/34003)

<div class="topic-metadata">

**Author:** [@marcellus.tavares](https://devforum.okta.com/u/marcellus.tavares)\
**Replies:** 1\
**Last updated:** [July 23, 2025, 12:44pm UTC](https://devforum.okta.com/t/okta-server-cutting-connections-unexpectedly/34003 "2025-07-23T12:44:33Z")

</div>

Hello, I’m investigating an issue in my application server logs, and I can see several entries related to abrupt connection interruptions before an Okta API response (an average of 10x/day). We’re using the Pekko HTTP l…

---

## [Discrepancy in Event Count During Parallel Okta Data Ingestion for Different Applications](https://devforum.okta.com/t/discrepancy-in-event-count-during-parallel-okta-data-ingestion-for-different-applications/33981)

<div class="topic-metadata">

**Author:** [@Ulaga](https://devforum.okta.com/u/Ulaga)\
**Replies:** 0\
**Last updated:** [July 17, 2025, 7:14am UTC](https://devforum.okta.com/t/discrepancy-in-event-count-during-parallel-okta-data-ingestion-for-different-applications/33981 "2025-07-17T07:14:01Z")

</div>

We are migrating Okta data ingestion (System Logs) from Application 1 to Application 2 for a customer. To compare event ingestion, we ran the Okta ingest process in parallel on both applications over a specific period. W…

---

## [Is there an API to create or update approval sequences in Access Request conditions via Okta Workflows?](https://devforum.okta.com/t/is-there-an-api-to-create-or-update-approval-sequences-in-access-request-conditions-via-okta-workflows/33032)

<div class="topic-metadata">

**Author:** [@kirann9679](https://devforum.okta.com/u/kirann9679)\
**Replies:** 4\
**Last updated:** [July 10, 2025, 5:58pm UTC](https://devforum.okta.com/t/is-there-an-api-to-create-or-update-approval-sequences-in-access-request-conditions-via-okta-workflows/33032 "2025-07-10T17:58:49Z")

</div>

Hi Okta team, I’m working with Access Requests in Okta and need to manage approval sequences through Okta Workflows. While I’ve found APIs that allow me to list or retrieve approval sequences, I haven’t been able to fin…

---

## [Super Admin cannot create API token how to step-up authenticate?](https://devforum.okta.com/t/super-admin-cannot-create-api-token-how-to-step-up-authenticate/33844)

<div class="topic-metadata">

**Author:** [@dkz](https://devforum.okta.com/u/dkz)\
**Replies:** 3\
**Last updated:** [July 3, 2025, 5:11pm UTC](https://devforum.okta.com/t/super-admin-cannot-create-api-token-how-to-step-up-authenticate/33844 "2025-07-03T17:11:10Z")

</div>

I created a trial integration account. I am the only user. I have the role Super Administrator. When I try to create an api token I get a message that I need to “step-up authentication”. How do I step-up authenticate? …

---

## ["errorCode":"E0000006","errorSummary":"You do not have permission to perform the requested action"](https://devforum.okta.com/t/errorcode-e0000006-errorsummary-you-do-not-have-permission-to-perform-the-requested-action/33820)

<div class="topic-metadata">

**Author:** [@shireesha](https://devforum.okta.com/u/shireesha)\
**Replies:** 1\
**Last updated:** [July 1, 2025, 3:25pm UTC](https://devforum.okta.com/t/errorcode-e0000006-errorsummary-you-do-not-have-permission-to-perform-the-requested-action/33820 "2025-07-01T15:25:11Z")

</div>

Hi Okta Team, Currently I’m using free Okta Developer account and oauth flow. Basically I’m trying to get the users and groups Info (/api/v1/groups/{groupID}/users and /api/v1/groups ) information using token. Token i…

---

## [Terraform Provider 4.8.1 platform\_included attribute](https://devforum.okta.com/t/terraform-provider-4-8-1-platform-included-attribute/33744)

<div class="topic-metadata">

**Author:** [@geuntak](https://devforum.okta.com/u/geuntak)\
**Replies:** 0\
**Last updated:** [June 27, 2025, 3:38am UTC](https://devforum.okta.com/t/terraform-provider-4-8-1-platform-included-attribute/33744 "2025-06-27T03:38:48Z")

</div>

(state file after import) I am currently working on terraforming policies using terraform okta provider 4.8.1 version. There is one problem in the current test tenant, so I would like to ask you. I tried to add “ot…

---

## [Send Email Verification Code through Okta public API](https://devforum.okta.com/t/send-email-verification-code-through-okta-public-api/33462)

<div class="topic-metadata">

**Author:** [@ssahabdeen](https://devforum.okta.com/u/ssahabdeen)\
**Replies:** 2\
**Last updated:** [June 20, 2025, 6:00pm UTC](https://devforum.okta.com/t/send-email-verification-code-through-okta-public-api/33462 "2025-06-20T18:00:51Z")

</div>

Hi Team, Am using Okta public Web API’s for the Login, MFA setup etc and am facing an issue with sending email verification code through Public API’s and achieving the same. Method I used for Enroll Email auth using A…

---

## [Cannot update mutability of an attribute](https://devforum.okta.com/t/cannot-update-mutability-of-an-attribute/33364)

<div class="topic-metadata">

**Author:** [@pierschester](https://devforum.okta.com/u/pierschester)\
**Replies:** 0\
**Last updated:** [June 11, 2025, 1:32pm UTC](https://devforum.okta.com/t/cannot-update-mutability-of-an-attribute/33364 "2025-06-11T13:32:32Z")

</div>

Hello, According to the SCIM RFC, certain fields can be set to “immutable”, “read\_only”, “read\_write” and so on. Apparently that is supported in Okta through the API but when I try to actually use it to update an att…

---

## [I’m developing a Flutter application that interact directly with the Okta APIs and I’m trying to implement the MFA FIDO2. I’ve tried to use the Okta Classic Engine, but the FIDO provider is not supported by the ENUM of the SDK. And I don’t want to use a](https://devforum.okta.com/t/i-m-developing-a-flutter-application-that-interact-directly-with-the-okta-apis-and-i-m-trying-to-implement-the-mfa-fido2-i-ve-tried-to-use-the-okta-classic-engine-but-the-fido-provider-is-not-supported-by-the-enum-of-the-sdk-and-i-don-t-want-to-use-a/33237)

<div class="topic-metadata">

**Author:** [@akashyopmail](https://devforum.okta.com/u/akashyopmail)\
**Replies:** 0\
**Last updated:** [May 27, 2025, 8:47am UTC](https://devforum.okta.com/t/i-m-developing-a-flutter-application-that-interact-directly-with-the-okta-apis-and-i-m-trying-to-implement-the-mfa-fido2-i-ve-tried-to-use-the-okta-classic-engine-but-the-fido-provider-is-not-supported-by-the-enum-of-the-sdk-and-i-don-t-want-to-use-a/33237 "2025-05-27T08:47:29Z")

</div>

I’m developing a Android native application that interact directly with the Okta APIs and I’m trying to implement the MFA FIDO2. I’ve tried to use the \[Okta Classic Engine\], but the FIDO provider is not supported by the…

---

## [Python-SDK sample code for network zones](https://devforum.okta.com/t/python-sdk-sample-code-for-network-zones/33040)

<div class="topic-metadata">

**Author:** [@TheScriptGuy](https://devforum.okta.com/u/TheScriptGuy)\
**Replies:** 1\
**Last updated:** [May 26, 2025, 4:06am UTC](https://devforum.okta.com/t/python-sdk-sample-code-for-network-zones/33040 "2025-05-26T04:06:03Z")

</div>

Hi, I’m struggling to find sample documentation of how to list all network zones, get information about a network zone and create a new network zone. I’m specifically interested in the feature where I can add ASN’s to a…

---

## [Missing CAEP Events from SSF Transmitter](https://devforum.okta.com/t/missing-caep-events-from-ssf-transmitter/33134)

<div class="topic-metadata">

**Author:** [@yarden\_porat](https://devforum.okta.com/u/yarden_porat)\
**Replies:** 2\
**Last updated:** [May 13, 2025, 2:08pm UTC](https://devforum.okta.com/t/missing-caep-events-from-ssf-transmitter/33134 "2025-05-13T14:08:27Z")

</div>

Hi, I’m working on integrating the new CAEP feature via the SSF Transmitter. I’ve successfully added the API to the integration app, created an SSF stream, and received the verification message on my endpoint. However,…

---

## [401 Unauthorized when changing user password](https://devforum.okta.com/t/401-unauthorized-when-changing-user-password/33078)

<div class="topic-metadata">

**Author:** [@JREOktaDev](https://devforum.okta.com/u/JREOktaDev)\
**Replies:** 1\
**Last updated:** [May 5, 2025, 5:41pm UTC](https://devforum.okta.com/t/401-unauthorized-when-changing-user-password/33078 "2025-05-05T17:41:38Z")

</div>

I’m developing a script that I’m hoping will change the password for a user under the context of the user but I’m running into a roadblock. I’m using the following endpoint to authenticate a basic (non-admin) user. The…

---

## [Api auth with MFA per application](https://devforum.okta.com/t/api-auth-with-mfa-per-application/33063)

<div class="topic-metadata">

**Author:** [@bryan-api](https://devforum.okta.com/u/bryan-api)\
**Replies:** 0\
**Last updated:** [May 3, 2025, 3:06pm UTC](https://devforum.okta.com/t/api-auth-with-mfa-per-application/33063 "2025-05-03T15:06:45Z")

</div>

Hello. I’m having problems implementing auth via an API for a native application with PKCE where MFA is only enabled for this application and not a global policy. Is there any example where I can end up with a JWT token …

---

## [Using Okta Api to modify custom branded page CSP list](https://devforum.okta.com/t/using-okta-api-to-modify-custom-branded-page-csp-list/32979)

<div class="topic-metadata">

**Author:** [@BillS](https://devforum.okta.com/u/BillS)\
**Replies:** 1\
**Last updated:** [April 24, 2025, 12:57pm UTC](https://devforum.okta.com/t/using-okta-api-to-modify-custom-branded-page-csp-list/32979 "2025-04-24T12:57:23Z")

</div>

Is there a way to use the Okta Api to modify the Content Security Policy (CSP) settings? I’m using Identity Engine. We are already using an Api call to automate updating the actual contents of the page, but don’t see any…

---

## [Issuer with updating Okta user -- Okta SDK 21 SingtonUser](https://devforum.okta.com/t/issuer-with-updating-okta-user-okta-sdk-21-singtonuser/32973)

<div class="topic-metadata">

**Author:** [@HelpMeLearnOkta](https://devforum.okta.com/u/HelpMeLearnOkta)\
**Replies:** 1\
**Last updated:** [April 23, 2025, 11:00am UTC](https://devforum.okta.com/t/issuer-with-updating-okta-user-okta-sdk-21-singtonuser/32973 "2025-04-23T11:00:22Z")

</div>

We have a way for a user to update their profile – first and last name so forth. Our company is calling the Okta SDK – a wrapper for the API. Our code is going to do an update. First it calls the Okta get User. Then …

---

## [Report truncated](https://devforum.okta.com/t/report-truncated/32878)

<div class="topic-metadata">

**Author:** [@Agets1981](https://devforum.okta.com/u/Agets1981)\
**Replies:** 1\
**Last updated:** [April 22, 2025, 12:54pm UTC](https://devforum.okta.com/t/report-truncated/32878 "2025-04-22T12:54:58Z")

</div>

Hello, The User App Access report (from the UI) is being truncated and does not export more than 1million records. How can we change that (in the UI, so it exports everything) and what is the API alternative call for d…

---

## [Able to create users using SHA256 Hash but unable to authenticate](https://devforum.okta.com/t/able-to-create-users-using-sha256-hash-but-unable-to-authenticate/32958)

<div class="topic-metadata">

**Author:** [@ashish.gupta1](https://devforum.okta.com/u/ashish.gupta1)\
**Replies:** 1\
**Last updated:** [April 22, 2025, 12:47pm UTC](https://devforum.okta.com/t/able-to-create-users-using-sha256-hash-but-unable-to-authenticate/32958 "2025-04-22T12:47:17Z")

</div>

Hi all, I am using SHA 256 algorithm to encrypt the password hash (with pre-fix salt) and able to create the user in Okta with that imported hash but after creation, I am unable to authenticate the same user by providin…

---

## [Enumerate OIN catalog?](https://devforum.okta.com/t/enumerate-oin-catalog/32906)

<div class="topic-metadata">

**Author:** [@sanderi](https://devforum.okta.com/u/sanderi)\
**Replies:** 1\
**Last updated:** [April 21, 2025, 4:47pm UTC](https://devforum.okta.com/t/enumerate-oin-catalog/32906 "2025-04-21T16:47:44Z")

</div>

Hi, we would like to cross-run the list of all our saas applications (from inventory tool) with the OIN-catalog, to see which exist in the catalog and not. Is it possible to enumerate the OIN catalog using the API someho…

---

## [Cannot change user type with replaceUser](https://devforum.okta.com/t/cannot-change-user-type-with-replaceuser/32942)

<div class="topic-metadata">

**Author:** [@cqq](https://devforum.okta.com/u/cqq)\
**Replies:** 0\
**Last updated:** [April 17, 2025, 6:02pm UTC](https://devforum.okta.com/t/cannot-change-user-type-with-replaceuser/32942 "2025-04-17T18:02:47Z")

</div>

Hello, I am attempting to change the user’s type id from one profile to another as part of a migration. In the notes section it says to perform this action requires a “full PUT replacement”. When running the following…

[Previous page](https://devforum.okta.com/c/questions/api/22.md)

[Next page](https://devforum.okta.com/c/questions/api/22.md?page=2)
