Hi, while developing a tool for Okta security assessments, I need to fetch a list of privileged entities (users, groups, and apps). For users, there is this official endpoint: /api/v1/iam/assignees/users.
But for groups and apps, I only discovered undocumented endpoints the portal uses: /api/internal/privileges/adminGroups and /admin/api/v1/privileges/adminPublicClientApps. Is there please another way of getting this information? Are there any plans of documenting these APIs and adding them to Okta SDKs?
I at least wasn’t able to find an officially documented public API endpoint that supported retrieving that kind of information. Might be a good idea to submit something to Okta Ideas so our Product team can track interest for such an endpoint.
I would warn against using any internal endpoints that we use for our own platform as the way those endpoints behave could change at any time as they are not intended for public consumption.