# Workflows

**URL:** https://devforum.okta.com/c/workflows/28.md

[Latest](https://devforum.okta.com/latest.md) · [Categories](https://devforum.okta.com/categories.md) · [Tags](https://devforum.okta.com/tags.md)

---

## [About the Workflows category](https://devforum.okta.com/t/about-the-workflows-category/29624)

<div class="topic-metadata">

**Author:** [@community\_admin](https://devforum.okta.com/u/community_admin)\
**Replies:** 0\
**Last updated:** [July 25, 2024, 6:31pm UTC](https://devforum.okta.com/t/about-the-workflows-category/29624 "2024-07-25T18:31:43Z")

</div>

This is for general Workflows related questions and discussion. Please log all bugs at support.okta.

---

## [Run Hourly, Daily, Weekly, and Monthly Jobs with a Reusable Scheduler (Workflows template)](https://devforum.okta.com/t/run-hourly-daily-weekly-and-monthly-jobs-with-a-reusable-scheduler-workflows-template/35476)

<div class="topic-metadata">

**Author:** [@Tatsumi](https://devforum.okta.com/u/Tatsumi)\
**Replies:** 0\
**Last updated:** [September 27, 2026, 11:29pm UTC](https://devforum.okta.com/t/run-hourly-daily-weekly-and-monthly-jobs-with-a-reusable-scheduler-workflows-template/35476 "2026-09-27T23:29:06Z")

</div>

This Okta Workflows template provides a reusable scheduler for running multiple jobs with different schedule conditions. Normally, you need to create a separate Scheduled Flow when jobs have different trigger times, wee…

---

## [Workflows: 405 error on Resend Activation Email & missing User ID from List Users Streaming Helper Flow](https://devforum.okta.com/t/workflows-405-error-on-resend-activation-email-missing-user-id-from-list-users-streaming-helper-flow/35451)

<div class="topic-metadata">

**Author:** [@Srikanth1](https://devforum.okta.com/u/Srikanth1)\
**Replies:** 5\
**Last updated:** [September 3, 2026, 6:14pm UTC](https://devforum.okta.com/t/workflows-405-error-on-resend-activation-email-missing-user-id-from-list-users-streaming-helper-flow/35451 "2026-09-03T18:14:50Z")

</div>

Hi everyone, I am building an Okta Workflow to resend activation emails to users, but I am encountering two issues: Missing User ID in Helper Flow / Get Object: In my Parent Flow, I use the Okta - List Users with …

---

## [Build an API Request Body Using Output From Previous Cards (Workflows template)](https://devforum.okta.com/t/build-an-api-request-body-using-output-from-previous-cards-workflows-template/35413)

<div class="topic-metadata">

**Author:** [@maxkatz](https://devforum.okta.com/u/maxkatz)\
**Replies:** 0\
**Last updated:** [August 6, 2026, 12:40am UTC](https://devforum.okta.com/t/build-an-api-request-body-using-output-from-previous-cards-workflows-template/35413 "2026-08-06T00:40:03Z")

</div>

This community-built Workflows template shows how to build an API request body using output from previous cards. Download flow: apiRequestExamples.folder (32.5 KB)

---

## [How to bulk delete Okta groups (Workflows template)](https://devforum.okta.com/t/how-to-bulk-delete-okta-groups-workflows-template/35393)

<div class="topic-metadata">

**Author:** [@maxkatz](https://devforum.okta.com/u/maxkatz)\
**Replies:** 0\
**Last updated:** [July 21, 2026, 8:51pm UTC](https://devforum.okta.com/t/how-to-bulk-delete-okta-groups-workflows-template/35393 "2026-07-21T20:51:28Z")

</div>

This community-built Workflows template shows how to bulk delete Okta groups. Download flow: bulkDeleteGroups.folder (15.7 KB)

---

## [How to Export Group Membership to a CSV File and Email the File (Workflows template)](https://devforum.okta.com/t/how-to-export-group-membership-to-a-csv-file-and-email-the-file-workflows-template/35392)

<div class="topic-metadata">

**Author:** [@maxkatz](https://devforum.okta.com/u/maxkatz)\
**Replies:** 0\
**Last updated:** [July 20, 2026, 10:06pm UTC](https://devforum.okta.com/t/how-to-export-group-membership-to-a-csv-file-and-email-the-file-workflows-template/35392 "2026-07-20T22:06:30Z")

</div>

This is a Workflows template for the How to Export Group Membership to a CSV File and Email the File in Workflows KB article. The template uses the streaming option to support groups with more than 200 members. Downloa…

---

## [Automate Temporary User Access in Okta Using Workflows (Workflows template)](https://devforum.okta.com/t/automate-temporary-user-access-in-okta-using-workflows-workflows-template/35315)

<div class="topic-metadata">

**Author:** [@maxkatz](https://devforum.okta.com/u/maxkatz)\
**Replies:** 0\
**Last updated:** [June 12, 2026, 9:49pm UTC](https://devforum.okta.com/t/automate-temporary-user-access-in-okta-using-workflows-workflows-template/35315 "2026-06-12T21:49:40Z")

</div>

This flow is from Karthick Chinthamani, who presented at the Workflows community meetup in DC. This delegated Okta Workflows flow enables Help Desk agents to securely generate a Temporary Access Code (TAC) and assign us…

---

## [Push Group Visibility (Workflows template)](https://devforum.okta.com/t/push-group-visibility-workflows-template/35312)

<div class="topic-metadata">

**Author:** [@jasonaugust](https://devforum.okta.com/u/jasonaugust)\
**Replies:** 0\
**Last updated:** [June 11, 2026, 6:21pm UTC](https://devforum.okta.com/t/push-group-visibility-workflows-template/35312 "2026-06-11T18:21:38Z")

</div>

Adding a set of Flows for automatically capturing Push Groups across your org and then mapping the apps each group is pushed to, to the group’s schema. There’s 5 flows in this set, one set (3) is a one shot that fires of…

---

## [Access Requests Tasks API example](https://devforum.okta.com/t/access-requests-tasks-api-example/35290)

<div class="topic-metadata">

**Author:** [@christianjm](https://devforum.okta.com/u/christianjm)\
**Replies:** 0\
**Last updated:** [June 2, 2026, 8:02pm UTC](https://devforum.okta.com/t/access-requests-tasks-api-example/35290 "2026-06-02T20:02:55Z")

</div>

tasks.folder (58.3 KB) Have you seen the new Tasks API for V2? No? Well here’s some basic workflows examples on how the API’s work. See here: Tasks

---

## [Remediate Partially offboarded users in Salesforce (Workflows template)](https://devforum.okta.com/t/remediate-partially-offboarded-users-in-salesforce-workflows-template/35277)

<div class="topic-metadata">

**Author:** [@ajay.seetharam](https://devforum.okta.com/u/ajay.seetharam)\
**Replies:** 0\
**Last updated:** [May 22, 2026, 9:53pm UTC](https://devforum.okta.com/t/remediate-partially-offboarded-users-in-salesforce-workflows-template/35277 "2026-05-22T21:53:16Z")

</div>

Okta Identity Security Posture Management (ISPM) can help provide you visibility in to “Partially Offboarded users” i.e. user active in Identity Provider but still active in Salesforce. Here is a sample flow to perform “…

---

## [Sample flow adding IP address to an existing network zone (Workflows template)](https://devforum.okta.com/t/sample-flow-adding-ip-address-to-an-existing-network-zone-workflows-template/29921)

<div class="topic-metadata">

**Author:** [@aj.okta](https://devforum.okta.com/u/aj.okta)\
**Replies:** 28\
**Last updated:** [May 22, 2026, 5:50pm UTC](https://devforum.okta.com/t/sample-flow-adding-ip-address-to-an-existing-network-zone-workflows-template/29921 "2026-05-22T17:50:58Z")

</div>

Sample workflow that is called by an API endpoint and populates the IP address into a pre-existing network zone (if needed) addIpToBlocklistZone.flow (45.9 KB)

---

## [Caller Verification with Okta Verify Push (Workflows template)](https://devforum.okta.com/t/caller-verification-with-okta-verify-push-workflows-template/35276)

<div class="topic-metadata">

**Author:** [@cameron.williams](https://devforum.okta.com/u/cameron.williams)\
**Replies:** 0\
**Last updated:** [May 22, 2026, 4:12pm UTC](https://devforum.okta.com/t/caller-verification-with-okta-verify-push-workflows-template/35276 "2026-05-22T16:12:19Z")

</div>

Sharing the Workflow folder export for the demo I shared during the Workflows meet-up in SF on May 20th 2026. Make sure you’ve modified the final card of the helper flow with your own email distro or replace it with a S…

---

## [500 error when accessing Workflows Console](https://devforum.okta.com/t/500-error-when-accessing-workflows-console/34840)

<div class="topic-metadata">

**Author:** [@pholderness](https://devforum.okta.com/u/pholderness)\
**Replies:** 10\
**Last updated:** [May 13, 2026, 5:18pm UTC](https://devforum.okta.com/t/500-error-when-accessing-workflows-console/34840 "2026-05-13T17:18:50Z")

</div>

Has anyone else encountered this error when attempting to access the Workflows Console? 500 Server Error Sorry! Something’s gone wrong. Our astronauts are looking into it. There is an ID listed as well, but I suspect…

---

## [Not able to create an Asana Webhook to Okta Workflows](https://devforum.okta.com/t/not-able-to-create-an-asana-webhook-to-okta-workflows/35084)

<div class="topic-metadata">

**Author:** [@rcortez](https://devforum.okta.com/u/rcortez)\
**Replies:** 9\
**Last updated:** [May 6, 2026, 8:53pm UTC](https://devforum.okta.com/t/not-able-to-create-an-asana-webhook-to-okta-workflows/35084 "2026-05-06T20:53:56Z")

</div>

The Asana POST is expecting a 200 with the header key pair X-Hook-Secret: {value 1st card}. I’m using the Return Raw card, status = 200, and the header constructed from the API card headers. A simple test to the flow fr…

---

## [403 Forbidden - cannot activate the flow. Webhook registration failed](https://devforum.okta.com/t/403-forbidden-cannot-activate-the-flow-webhook-registration-failed/34629)

<div class="topic-metadata">

**Author:** [@sachin34](https://devforum.okta.com/u/sachin34)\
**Replies:** 5\
**Last updated:** [April 20, 2026, 7:41pm UTC](https://devforum.okta.com/t/403-forbidden-cannot-activate-the-flow-webhook-registration-failed/34629 "2026-04-20T19:41:48Z")

</div>

Hi, I am unable to activate the flow. I have already validated that the required grant — as mentioned in the documentation (Scopes for Okta connector cards | Okta Workflows) — is assigned to our Okta Workflows OAuth app. …

---

## [Utility flow to look up type of resource id's (Workflows template)](https://devforum.okta.com/t/utility-flow-to-look-up-type-of-resource-ids-workflows-template/35216)

<div class="topic-metadata">

**Author:** [@christianjm](https://devforum.okta.com/u/christianjm)\
**Replies:** 0\
**Last updated:** [April 7, 2026, 5:36pm UTC](https://devforum.okta.com/t/utility-flow-to-look-up-type-of-resource-ids-workflows-template/35216 "2026-04-07T17:36:54Z")

</div>

This utility automates the identification and lookup of Okta resource types by pattern-matching ID prefixes , allowing you to dynamically route data to the correct API for Users, Groups, Applications, or Entitlements wit…

---

## [Active Campaign Report flow to Tables (Workflows template)](https://devforum.okta.com/t/active-campaign-report-flow-to-tables-workflows-template/35215)

<div class="topic-metadata">

**Author:** [@christianjm](https://devforum.okta.com/u/christianjm)\
**Replies:** 0\
**Last updated:** [April 7, 2026, 5:32pm UTC](https://devforum.okta.com/t/active-campaign-report-flow-to-tables-workflows-template/35215 "2026-04-07T17:32:47Z")

</div>

Use this example to pull active campaign details and store it in a table. Active Campaign Reporting table version.pdf (71.7 KB) activeCampaignsReportTableApproach.folder (485.6 KB)

---

## [Workflows to update ENtraID ObjectGuid into the Okta Microsoft External Authentication Method (EAM) Application (Workflows template)](https://devforum.okta.com/t/workflows-to-update-entraid-objectguid-into-the-okta-microsoft-external-authentication-method-eam-application-workflows-template/35169)

<div class="topic-metadata">

**Author:** [@mistermik1](https://devforum.okta.com/u/mistermik1)\
**Replies:** 0\
**Last updated:** [March 25, 2026, 5:23pm UTC](https://devforum.okta.com/t/workflows-to-update-entraid-objectguid-into-the-okta-microsoft-external-authentication-method-eam-application-workflows-template/35169 "2026-03-25T17:23:35Z")

</div>

associateEntraidObjectguidIntoOktaUd.flow (30.2 KB) i everyone, I ran into an issue while trying to update the Microsoft User ID (microsoftUserId) on an app assignment using Okta Workflows, following the official docum…

---

## [Create ORN formats in Workflows (Workflows template)](https://devforum.okta.com/t/create-orn-formats-in-workflows-workflows-template/35095)

<div class="topic-metadata">

**Author:** [@christianjm](https://devforum.okta.com/u/christianjm)\
**Replies:** 0\
**Last updated:** [March 2, 2026, 3:28pm UTC](https://devforum.okta.com/t/create-orn-formats-in-workflows-workflows-template/35095 "2026-03-02T15:28:48Z")

</div>

Ever get stuck in a workflow because you need to supply a ORN format to a Governance API? This flow will help generate the Org Id and partition name for you so you can construct ORNs in your flows. See this guide on OR…

---

## [Detect and Suspend Accounts Based on Suspicious Events (Workflows template)](https://devforum.okta.com/t/detect-and-suspend-accounts-based-on-suspicious-events-workflows-template/35057)

<div class="topic-metadata">

**Author:** [@vasilis.caraman](https://devforum.okta.com/u/vasilis.caraman)\
**Replies:** 0\
**Last updated:** [February 16, 2026, 5:06pm UTC](https://devforum.okta.com/t/detect-and-suspend-accounts-based-on-suspicious-events-workflows-template/35057 "2026-02-16T17:06:39Z")

</div>

Detect and Suspend Accounts Based on Suspicious Events File: detect-and-suspend-accounts-based-on-suspicious-events.folder (278.6 KB) Overview Automatically detects and suspends potentially compromised accounts by mon…

---

## [Paginate Okta API via Headers Recursively (Workflows template)](https://devforum.okta.com/t/paginate-okta-api-via-headers-recursively-workflows-template/35037)

<div class="topic-metadata">

**Author:** [@maxkatz](https://devforum.okta.com/u/maxkatz)\
**Replies:** 0\
**Last updated:** [February 10, 2026, 11:10pm UTC](https://devforum.okta.com/t/paginate-okta-api-via-headers-recursively-workflows-template/35037 "2026-02-10T23:10:00Z")

</div>

This flow template shows how to paginate an Okta API The example uses recursion. The example retrieves the next set of records (link) from the API header. The flow defaults to using /api/v1/users. You can enter another…

---

## [Bulk onboarding and Registration of AI Agents (Workflows template)](https://devforum.okta.com/t/bulk-onboarding-and-registration-of-ai-agents-workflows-template/34940)

<div class="topic-metadata">

**Author:** [@Rajesh.kumar\_atokta](https://devforum.okta.com/u/Rajesh.kumar_atokta)\
**Replies:** 0\
**Last updated:** [January 29, 2026, 4:47pm UTC](https://devforum.okta.com/t/bulk-onboarding-and-registration-of-ai-agents-workflows-template/34940 "2026-01-29T16:47:16Z")

</div>

This workflow is designed to provide continuous support for bulk onboarding and registration of AI agents into Okta Universal Directory. oktaairegistration.folder (183.6 KB) Automation - Onboarding Okta AI Agents.pdf (…

---

## [Dynamically determine if a user should be included or not in a flow based upon attributes (Workflows template)](https://devforum.okta.com/t/dynamically-determine-if-a-user-should-be-included-or-not-in-a-flow-based-upon-attributes-workflows-template/34921)

<div class="topic-metadata">

**Author:** [@christianjm](https://devforum.okta.com/u/christianjm)\
**Replies:** 0\
**Last updated:** [January 20, 2026, 9:05pm UTC](https://devforum.okta.com/t/dynamically-determine-if-a-user-should-be-included-or-not-in-a-flow-based-upon-attributes-workflows-template/34921 "2026-01-20T21:05:10Z")

</div>

Ever want to use a dynamic approach to checking users against rules without having to update your workflows? checkUserAgainstRules.folder (106.3 KB) User Lookup based upon Rules.pdf (71.2 KB)

---

## [Connector action with multiple optional outputs](https://devforum.okta.com/t/connector-action-with-multiple-optional-outputs/34853)

<div class="topic-metadata">

**Author:** [@Dee\_Queue](https://devforum.okta.com/u/Dee_Queue)\
**Replies:** 7\
**Last updated:** [January 17, 2026, 1:03am UTC](https://devforum.okta.com/t/connector-action-with-multiple-optional-outputs/34853 "2026-01-17T01:03:11Z")

</div>

When we add an Okta action card to a workflow, it allows us to select what outputs we need from the card. Super handy! Is it possible for us to build that same thing for our custom connectors?

---

## [SAML Certificate Expiration Notice (Workflows template)](https://devforum.okta.com/t/saml-certificate-expiration-notice-workflows-template/30523)

<div class="topic-metadata">

**Author:** [@Dave\_Okta](https://devforum.okta.com/u/Dave_Okta)\
**Replies:** 10\
**Last updated:** [January 15, 2026, 10:15pm UTC](https://devforum.okta.com/t/saml-certificate-expiration-notice-workflows-template/30523 "2026-01-15T22:15:19Z")

</div>

Hey all, Dave from Okta here - I wrote this template a few years back to notify admins of any soon-to-expire SAML certificates in their org. In its current form, it will work for up to 2000 apps, but it’s easily modifiab…

---

## [Workflows learn](https://devforum.okta.com/t/workflows-learn/34712)

<div class="topic-metadata">

**Author:** [@amitright007](https://devforum.okta.com/u/amitright007)\
**Replies:** 1\
**Last updated:** [January 8, 2026, 9:43pm UTC](https://devforum.okta.com/t/workflows-learn/34712 "2026-01-08T21:43:32Z")

</div>

Hi Everyone, Wanted to know from where I can learn workflow I am very confused and don’t know anything. I have created developer account but not able to create one basic flow Please guide me

---

## [Removing custom entitlements as part of migration (Workflows template)](https://devforum.okta.com/t/removing-custom-entitlements-as-part-of-migration-workflows-template/34700)

<div class="topic-metadata">

**Author:** [@christianjm](https://devforum.okta.com/u/christianjm)\
**Replies:** 0\
**Last updated:** [January 6, 2026, 1:32pm UTC](https://devforum.okta.com/t/removing-custom-entitlements-as-part-of-migration-workflows-template/34700 "2026-01-06T13:32:26Z")

</div>

During the migration of an application the following steps typically the best path forward. Those steps require the removing of any custom entitlements imported from the downstream application as one of the steps. The …

---

## [Triggering Okta Account Provisioning From App Via Workflow](https://devforum.okta.com/t/triggering-okta-account-provisioning-from-app-via-workflow/34699)

<div class="topic-metadata">

**Author:** [@Dee\_Queue](https://devforum.okta.com/u/Dee_Queue)\
**Replies:** 3\
**Last updated:** [January 5, 2026, 11:35pm UTC](https://devforum.okta.com/t/triggering-okta-account-provisioning-from-app-via-workflow/34699 "2026-01-05T23:35:28Z")

</div>

I know we can setup provisioning in a SCIM enabled app to automatically create new Okta accounts under certain conditions, but we in IT like to doublecheck the data coming over from the other platform before letting it i…

---

## [When we click Flow is on for Deactivated users workflow](https://devforum.okta.com/t/when-we-click-flow-is-on-for-deactivated-users-workflow/34685)

<div class="topic-metadata">

**Author:** [@saisivangula](https://devforum.okta.com/u/saisivangula)\
**Replies:** 7\
**Last updated:** [December 31, 2025, 12:55pm UTC](https://devforum.okta.com/t/when-we-click-flow-is-on-for-deactivated-users-workflow/34685 "2025-12-31T12:55:43Z")

</div>

I created a deactivated users worflow, then save the flow and then click on the Flow is on, It shows error in the left that is “First connect to Your apps”. Please advice how to resolve this

---

## [Check for OIG delegates supporting workflows](https://devforum.okta.com/t/check-for-oig-delegates-supporting-workflows/34661)

<div class="topic-metadata">

**Author:** [@christianjm](https://devforum.okta.com/u/christianjm)\
**Replies:** 0\
**Last updated:** [December 10, 2025, 3:30pm UTC](https://devforum.okta.com/t/check-for-oig-delegates-supporting-workflows/34661 "2025-12-10T15:30:03Z")

</div>

If you’re rolling out OIG and want to ensure that certain groups of users have assigned delegates or not. This is an easy way to take a list of users, determine if a delegate has been setup or not. Out of all the users…

[Next page](https://devforum.okta.com/c/workflows/28.md?page=1)
