# API

**URL:** https://devforum.okta.com/c/questions/api/22.md?page=3

[Latest](https://devforum.okta.com/latest.md) · [Categories](https://devforum.okta.com/categories.md) · [Tags](https://devforum.okta.com/tags.md)

**Page:** 4

---

## [Filter groups by name in Python API SDK](https://devforum.okta.com/t/filter-groups-by-name-in-python-api-sdk/31846)

<div class="topic-metadata">

**Author:** [@matt.wasserman1](https://devforum.okta.com/u/matt.wasserman1)\
**Replies:** 0\
**Last updated:** [January 31, 2025, 1:23pm UTC](https://devforum.okta.com/t/filter-groups-by-name-in-python-api-sdk/31846 "2025-01-31T13:23:17Z")

</div>

I am trying to retrieve a group by name using list\_groups. Retrieving the entire list with client.list\_groups() works perfectly. But if I use q= or query= or filter= I get an unexpected keyword error. If I just use the …

---

## [Is there an API that provides vendor names for the Okta Apps?](https://devforum.okta.com/t/is-there-an-api-that-provides-vendor-names-for-the-okta-apps/31828)

<div class="topic-metadata">

**Author:** [@felipe.santiago](https://devforum.okta.com/u/felipe.santiago)\
**Replies:** 3\
**Last updated:** [January 30, 2025, 4:31pm UTC](https://devforum.okta.com/t/is-there-an-api-that-provides-vendor-names-for-the-okta-apps/31828 "2025-01-30T16:31:41Z")

</div>

Hi everyone, Is there an API that provides the vendor and application names (e.g.: Google - Gmail, Microsoft - OneDrive, Slack - Slack) for installed Okta apps? Thanks!

---

## [How to Accurately Determine a Successful Login from Okta Logs?](https://devforum.okta.com/t/how-to-accurately-determine-a-successful-login-from-okta-logs/31839)

<div class="topic-metadata">

**Author:** [@zoesapir](https://devforum.okta.com/u/zoesapir)\
**Replies:** 0\
**Last updated:** [January 30, 2025, 11:33am UTC](https://devforum.okta.com/t/how-to-accurately-determine-a-successful-login-from-okta-logs/31839 "2025-01-30T11:33:23Z")

</div>

Hi everyone, I’m trying to determine the best way to identify whether a login attempt was truly successful based on Okta logs. At first glance, user.session.start seems like a good indicator, but it only reflects the s…

---

## [Is this a bug? Pagination Broken when used together with sortBy parameter](https://devforum.okta.com/t/is-this-a-bug-pagination-broken-when-used-together-with-sortby-parameter/31798)

<div class="topic-metadata">

**Author:** [@kkn](https://devforum.okta.com/u/kkn)\
**Replies:** 1\
**Last updated:** [January 28, 2025, 10:34am UTC](https://devforum.okta.com/t/is-this-a-bug-pagination-broken-when-used-together-with-sortby-parameter/31798 "2025-01-28T10:34:34Z")

</div>

Describe the bug? We use the UserAPI. When we call userApiClient.listUsers(CONTENT\_TYPE, null, after, limit, null, search, sortBy, sortOrder) with the following parameters: search: profile.accountId eq "xxx" and \[type…

---

## [Use API to retrieve application users where scope = user](https://devforum.okta.com/t/use-api-to-retrieve-application-users-where-scope-user/31529)

<div class="topic-metadata">

**Author:** [@RogerSo](https://devforum.okta.com/u/RogerSo)\
**Replies:** 2\
**Last updated:** [January 27, 2025, 11:15pm UTC](https://devforum.okta.com/t/use-api-to-retrieve-application-users-where-scope-user/31529 "2025-01-27T23:15:12Z")

</div>

I want to retrieve a list of users assigned to applications outside of groups. I am able to retrieve a list of users, and then check for scope = ‘user’. However, this requires a lot of interactions for applications wit…

---

## [Request for Clarification on "expiresAt" in IdxTransaction object](https://devforum.okta.com/t/request-for-clarification-on-expiresat-in-idxtransaction-object/31745)

<div class="topic-metadata">

**Author:** [@Anugrah\_SR](https://devforum.okta.com/u/Anugrah_SR)\
**Replies:** 2\
**Last updated:** [January 27, 2025, 7:00am UTC](https://devforum.okta.com/t/request-for-clarification-on-expiresat-in-idxtransaction-object/31745 "2025-01-27T07:00:51Z")

</div>

We are implementing a password-optional signup flow and are analyzing the response we receive. During this process, we call the following method: OktaAuth.idx.register() Upon resolving, we observe a property called …

---

## [Specifying 'Any scope' when creating claim via API](https://devforum.okta.com/t/specifying-any-scope-when-creating-claim-via-api/31653)

<div class="topic-metadata">

**Author:** [@joshuaan7](https://devforum.okta.com/u/joshuaan7)\
**Replies:** 3\
**Last updated:** [January 21, 2025, 6:15pm UTC](https://devforum.okta.com/t/specifying-any-scope-when-creating-claim-via-api/31653 "2025-01-21T18:15:30Z")

</div>

In the UI, when creating a claim for an authorization server, I can include in “Any Scope” for an access token with a value type of “expression”. How can I do specify “Any Scope” when using the API? The documentation say…

---

## [Error: failed to change group rule status: the API returned an unknown error](https://devforum.okta.com/t/error-failed-to-change-group-rule-status-the-api-returned-an-unknown-error/31606)

<div class="topic-metadata">

**Author:** [@HennessyWorks](https://devforum.okta.com/u/HennessyWorks)\
**Replies:** 2\
**Last updated:** [January 20, 2025, 3:13pm UTC](https://devforum.okta.com/t/error-failed-to-change-group-rule-status-the-api-returned-an-unknown-error/31606 "2025-01-20T15:13:30Z")

</div>

Hey all, Currently doing a piece of work with importing our group rules into terraform (yay such fun!) just wanted to spot check a couple of rules to see if they would update accordingly. When running the apply I’m gett…

---

## [SDK IDX Use Okta Verify TOTP?](https://devforum.okta.com/t/sdk-idx-use-okta-verify-totp/31594)

<div class="topic-metadata">

**Author:** [@cstaber](https://devforum.okta.com/u/cstaber)\
**Replies:** 3\
**Last updated:** [January 17, 2025, 3:31pm UTC](https://devforum.okta.com/t/sdk-idx-use-okta-verify-totp/31594 "2025-01-17T15:31:32Z")

</div>

What call do I make to tell the SDK I want to use the Okta Verify App TOTP? I thought it’d be: const res = await authClient.idx.proceed({ authenticator: “okta\_verify”, methodType: “totp”, exchangeCodeForTokens: fals…

---

## [Is the Pipeline value from the Org Metadata endpoint an indicator of the Organization Engine Version?](https://devforum.okta.com/t/is-the-pipeline-value-from-the-org-metadata-endpoint-an-indicator-of-the-organization-engine-version/31687)

<div class="topic-metadata">

**Author:** [@Damian](https://devforum.okta.com/u/Damian)\
**Replies:** 1\
**Last updated:** [January 16, 2025, 4:57pm UTC](https://devforum.okta.com/t/is-the-pipeline-value-from-the-org-metadata-endpoint-an-indicator-of-the-organization-engine-version/31687 "2025-01-16T16:57:53Z")

</div>

I’ve been exploring the Org Metadata API endpoint and noticed the Pipeline property, which can have values like v1 or idx. I’m wondering if this property directly corresponds to the Organization Engine Version (e.g., v1…

---

## [How to Create Authentication Policies via the API?](https://devforum.okta.com/t/how-to-create-authentication-policies-via-the-api/31629)

<div class="topic-metadata">

**Author:** [@Kelko](https://devforum.okta.com/u/Kelko)\
**Replies:** 1\
**Last updated:** [January 8, 2025, 5:29pm UTC](https://devforum.okta.com/t/how-to-create-authentication-policies-via-the-api/31629 "2025-01-08T17:29:12Z")

</div>

Hello, I would like to use the API to create authentication policies, but I can’t find where this is mentioned in the API documentation. I can do it via the web application at the following URL: https://xxx-xxxxx-admin…

---

## [Is there a possibility to send a notification to an okta user without email?](https://devforum.okta.com/t/is-there-a-possibility-to-send-a-notification-to-an-okta-user-without-email/31508)

<div class="topic-metadata">

**Author:** [@daniuz67](https://devforum.okta.com/u/daniuz67)\
**Replies:** 1\
**Last updated:** [January 2, 2025, 11:50pm UTC](https://devforum.okta.com/t/is-there-a-possibility-to-send-a-notification-to-an-okta-user-without-email/31508 "2025-01-02T23:50:30Z")

</div>

Hi, I would like to send notifications to specific users when some action happens (user deactivated, request rejected, specific user attribute changes…) Is there any possibility to send notifications via Okta without c…

---

## [Get admin-console's app Protected Actions settings using API](https://devforum.okta.com/t/get-admin-consoles-app-protected-actions-settings-using-api/31442)

<div class="topic-metadata">

**Author:** [@mickey](https://devforum.okta.com/u/mickey)\
**Replies:** 1\
**Last updated:** [December 31, 2024, 7:33am UTC](https://devforum.okta.com/t/get-admin-consoles-app-protected-actions-settings-using-api/31442 "2024-12-31T07:33:27Z")

</div>

In the admin page, under Applications → Applications → Okta Admin Console → Protected Actions, there is a selection form for all protected actions. Is there a REST API for retrieving the current state of the selection?

---

## [Okta API - how to specify attribute statements for WS-Federation app?](https://devforum.okta.com/t/okta-api-how-to-specify-attribute-statements-for-ws-federation-app/31479)

<div class="topic-metadata">

**Author:** [@cruscio](https://devforum.okta.com/u/cruscio)\
**Replies:** 3\
**Last updated:** [December 20, 2024, 12:41pm UTC](https://devforum.okta.com/t/okta-api-how-to-specify-attribute-statements-for-ws-federation-app/31479 "2024-12-20T12:41:05Z")

</div>

Is there a way to set an Attribute Statement for a Templated WS Federation app (‘signOnMode’ = ‘WS\_FEDERATION’) using the API? 01 - Tried the answer in SAML app- Is there API to update attribute statement - The app gets…

---

## [Application grants](https://devforum.okta.com/t/application-grants/31286)

<div class="topic-metadata">

**Author:** [@minekaine](https://devforum.okta.com/u/minekaine)\
**Replies:** 2\
**Last updated:** [December 18, 2024, 8:48am UTC](https://devforum.okta.com/t/application-grants/31286 "2024-12-18T08:48:12Z")

</div>

Hello, while working with /api/v1/apps/{appId}/grants I noticed that for some apps for which grants (scopes) cannot be given the API responds with 404. I would like to avoid making redundant API calls, meaning not calli…

---

## [Check for duplicate/prior session](https://devforum.okta.com/t/check-for-duplicate-prior-session/31477)

<div class="topic-metadata">

**Author:** [@jayanthy.kapistalam](https://devforum.okta.com/u/jayanthy.kapistalam)\
**Replies:** 0\
**Last updated:** [December 13, 2024, 6:37pm UTC](https://devforum.okta.com/t/check-for-duplicate-prior-session/31477 "2024-12-13T18:37:44Z")

</div>

We have a .net framework 4.8 and MVC application integrated with Okta. We want to restrict users from accessing the application in multiple browser/tabs. Is there a way to check if there is a prior okta session that exis…

---

## [Password History when resetting a user password](https://devforum.okta.com/t/password-history-when-resetting-a-user-password/31465)

<div class="topic-metadata">

**Author:** [@mirza.yusof.praxedo](https://devforum.okta.com/u/mirza.yusof.praxedo)\
**Replies:** 0\
**Last updated:** [December 12, 2024, 4:11pm UTC](https://devforum.okta.com/t/password-history-when-resetting-a-user-password/31465 "2024-12-12T16:11:24Z")

</div>

I am using the Okta Spring SDK version 3.0.6 along with the Okta SDK API version 8.2.5. Here is my workflow: In my application, I am an admin and I want to reset a user’s password directly from my app, rather than usin…

---

## [How to find Identity Provider metadata for templated WS-Federation application via API](https://devforum.okta.com/t/how-to-find-identity-provider-metadata-for-templated-ws-federation-application-via-api/31433)

<div class="topic-metadata">

**Author:** [@cruscio](https://devforum.okta.com/u/cruscio)\
**Replies:** 1\
**Last updated:** [December 10, 2024, 12:16pm UTC](https://devforum.okta.com/t/how-to-find-identity-provider-metadata-for-templated-ws-federation-application-via-api/31433 "2024-12-10T12:16:24Z")

</div>

Hi, For a ‘Templated WS-Federation’ application, how can the Identity Provider Metadata URL be retrieved, using the API? In the app’s sign-on tab in the portal, there is a URL with an ID different from the application I…

---

## [/api/v1/apps/{appId}/tokens pagination](https://devforum.okta.com/t/api-v1-apps-appid-tokens-pagination/31261)

<div class="topic-metadata">

**Author:** [@minekaine](https://devforum.okta.com/u/minekaine)\
**Replies:** 2\
**Last updated:** [December 10, 2024, 11:47am UTC](https://devforum.okta.com/t/api-v1-apps-appid-tokens-pagination/31261 "2024-12-10T11:47:04Z")

</div>

Hello, according to the documentation when making an API call on /api/v1/apps/{appId}/tokens I should expect a link header with a link to the next page of resources (if the amount of entities exceeds the limit, obviousl…

---

## [Unable to get the forgot password stateToken](https://devforum.okta.com/t/unable-to-get-the-forgot-password-statetoken/31408)

<div class="topic-metadata">

**Author:** [@francis](https://devforum.okta.com/u/francis)\
**Replies:** 0\
**Last updated:** [December 6, 2024, 3:30pm UTC](https://devforum.okta.com/t/unable-to-get-the-forgot-password-statetoken/31408 "2024-12-06T15:30:09Z")

</div>

Hi all, I use OKTA Developer. I’m trying to implement the forgot password functionality in my application using the OKTA API. This is my steps : I call the OKTA endpoint /api/v1/authn/recovery/password with a URL to …

---

## [Inline Hook request payload object](https://devforum.okta.com/t/inline-hook-request-payload-object/31278)

<div class="topic-metadata">

**Author:** [@dzy5012](https://devforum.okta.com/u/dzy5012)\
**Replies:** 0\
**Last updated:** [November 20, 2024, 7:18pm UTC](https://devforum.okta.com/t/inline-hook-request-payload-object/31278 "2024-11-20T19:18:39Z")

</div>

I am trying to create an API for an inline hook to use to add claims during authentication. I have been referencing this for input/output information: Inline Hooks I am able to get the POST to execute my API with json…

---

## [Get Application attributes of user via .Net SDK / API](https://devforum.okta.com/t/get-application-attributes-of-user-via-net-sdk-api/31184)

<div class="topic-metadata">

**Author:** [@chekm8](https://devforum.okta.com/u/chekm8)\
**Replies:** 3\
**Last updated:** [November 14, 2024, 5:10pm UTC](https://devforum.okta.com/t/get-application-attributes-of-user-via-net-sdk-api/31184 "2024-11-14T17:10:37Z")

</div>

I have a .NET application that has custom attributes assigned and then set on a per user basis. How can I use the Okta API or .NET Okta SDK to retrieve the user along with these custom attribute values? I can retrieve …

---

## [Problem with GetConfigurationOrDefault Method in Okta](https://devforum.okta.com/t/problem-with-getconfigurationordefault-method-in-okta/30937)

<div class="topic-metadata">

**Author:** [@Farhin](https://devforum.okta.com/u/Farhin)\
**Replies:** 1\
**Last updated:** [November 11, 2024, 11:51pm UTC](https://devforum.okta.com/t/problem-with-getconfigurationordefault-method-in-okta/30937 "2024-11-11T23:51:46Z")

</div>

Hi, I’m experiencing a similar issue to what is discussed in GetConfigurationOrDefault throwing Object reference not set to an instance of an object. The Okta.AspNetCore version that I am on is 4.6.1 Here’s the pie…

---

## [How to find REST API call logs in my okta tenant](https://devforum.okta.com/t/how-to-find-rest-api-call-logs-in-my-okta-tenant/31143)

<div class="topic-metadata">

**Author:** [@Natraj619](https://devforum.okta.com/u/Natraj619)\
**Replies:** 0\
**Last updated:** [November 8, 2024, 3:59am UTC](https://devforum.okta.com/t/how-to-find-rest-api-call-logs-in-my-okta-tenant/31143 "2024-11-08T03:59:58Z")

</div>

Hi Everyone, I am using postman to test the Okta REST APIs, and I wanted to find the log details of my API request & response calls from system logs. Here I have no such features to retrieve REST API log details. Okta h…

---

## [HTTP 405 on GET /api/v1/groups endpoint](https://devforum.okta.com/t/http-405-on-get-api-v1-groups-endpoint/31129)

<div class="topic-metadata">

**Author:** [@081518d09b1239eeae7b](https://devforum.okta.com/u/081518d09b1239eeae7b)\
**Replies:** 0\
**Last updated:** [November 6, 2024, 10:38pm UTC](https://devforum.okta.com/t/http-405-on-get-api-v1-groups-endpoint/31129 "2024-11-06T22:38:45Z")

</div>

My application retrieves the “Everyone” group from the /api/v1/groups endpoint of various subdomains (using an API token for auth) with a request like: GET https://.okta.com/api/v1/groups?q=Everyone However, I’m occasi…

---

## [okta-java-SDK - apparently unused code (Oauth2 PEM key flow; ClientCredentialsResolver)](https://devforum.okta.com/t/okta-java-sdk-apparently-unused-code-oauth2-pem-key-flow-clientcredentialsresolver/31012)

<div class="topic-metadata">

**Author:** [@HackerMan0](https://devforum.okta.com/u/HackerMan0)\
**Replies:** 3\
**Last updated:** [November 5, 2024, 4:59pm UTC](https://devforum.okta.com/t/okta-java-sdk-apparently-unused-code-oauth2-pem-key-flow-clientcredentialsresolver/31012 "2024-11-05T16:59:30Z")

</div>

I believe I have found a unused/unnecessary bit of code in the okta-java-sdk and would like to bring it your attention. In the DefaultClientBuilder#build method, if you are configuring the client for OAuth2 with private…

---

## [Is API Key Okta API authentication approach not deprecated anymore?](https://devforum.okta.com/t/is-api-key-okta-api-authentication-approach-not-deprecated-anymore/31033)

<div class="topic-metadata">

**Author:** [@mgz](https://devforum.okta.com/u/mgz)\
**Replies:** 2\
**Last updated:** [November 4, 2024, 5:49pm UTC](https://devforum.okta.com/t/is-api-key-okta-api-authentication-approach-not-deprecated-anymore/31033 "2024-11-04T17:49:22Z")

</div>

Hi! When I was investigating Okta Management API authentication methods back in September, I found in documentation that API Key approach (SSWS) was deprecated in favour of OAuth 2.0 access token usage, thus decided to …

---

## [Identifiers uniqueness](https://devforum.okta.com/t/identifiers-uniqueness/31035)

<div class="topic-metadata">

**Author:** [@minekaine](https://devforum.okta.com/u/minekaine)\
**Replies:** 1\
**Last updated:** [November 1, 2024, 10:57pm UTC](https://devforum.okta.com/t/identifiers-uniqueness/31035 "2024-11-01T22:57:56Z")

</div>

Hello, I am working with OKTA API and wonder weather users, groups and apps identifiers are unique among each other or just within themselfs. In other words, is there any possibility to have the same identifier for, for…

---

## [Regarding user creation](https://devforum.okta.com/t/regarding-user-creation/31068)

<div class="topic-metadata">

**Author:** [@testAppflow](https://devforum.okta.com/u/testAppflow)\
**Replies:** 1\
**Last updated:** [October 30, 2024, 4:22pm UTC](https://devforum.okta.com/t/regarding-user-creation/31068 "2024-10-30T16:22:33Z")

</div>

We are trying to create users and after 50000 users we are getting error “errorSummary”: “Cannot create user. Maximum number of users has been reached.” Please let us know if there is any limitations for creating users …

---

## [Issue while fetching users records more than 10MB size](https://devforum.okta.com/t/issue-while-fetching-users-records-more-than-10mb-size/31069)

<div class="topic-metadata">

**Author:** [@testAppflow](https://devforum.okta.com/u/testAppflow)\
**Replies:** 0\
**Last updated:** [October 30, 2024, 4:18pm UTC](https://devforum.okta.com/t/issue-while-fetching-users-records-more-than-10mb-size/31069 "2024-10-30T16:18:31Z")

</div>

we have created 50000 users but while fetching records from our application we are getting “The response size of 10.01 MB is too large. Responses can be up to 10.00 MB”. Let us know is there any limitations how to fetch …

[Previous page](https://devforum.okta.com/c/questions/api/22.md?page=2)

[Next page](https://devforum.okta.com/c/questions/api/22.md?page=4)
