Okta API: what you can do and how to use it with AI agents
The Okta management API lets you administer users, groups, application assignments and authentication factors, and query the system logs. IT and security teams use it to automate the identity lifecycle. Access is through a service app with OAuth 2.0 and scopes, or an administrator's API token.
What the Okta API offers
Users
Creating, activating, suspending, deactivating and resetting passwords.
Groups
Members and group rules.
Applications
Assigning users and groups to integrated apps.
Authentication factors
Enrolling and resetting MFA.
System logs
Login events, administrative changes and alerts.
Event hooks
Event notices sent to your endpoint.
How to access the Okta API
- With your company’s credentialsOAuth 2.0 with a service app and Okta API scopes (recommended), or an API token created by an administrator, which inherits that person's permissions.
- Never use a super administrator token for the agent.
- Respect the request limits per endpoint.
- Access changes require approval and a record for the audit.
Official documentation: developer.okta.com
What an iTeam agent does with the Okta API
Access onboarding
On a new hire, the agent creates the user and places them in the groups for the role, with the manager's approval.
Offboarding with nothing forgotten
On a departure, the agent suspends the user and lists the assigned apps for IT to confirm the revocation.
Access request through Teams
An employee asks for access to an app, and the agent forwards it to the app owner and, once approved, makes the assignment.
Suspicious login
The agent follows the logs and warns security about repeated failures or logins from unusual locations.
From the credential to the agent at work, with approval
Create the service app in Okta
IT defines minimal scopes, such as reading users and managing specific groups.
Store it in the iTeam vault
Credentials stay in the vault, and only the IT agent uses them, with read and write actions kept separate.
Every change with approval
Creating, suspending and assigning access go through human approval and are audited.
Ready-made AI teams that use Okta
Questions about the Okta API
Is the Okta API free?
The API comes with the Okta subscription, and the available features depend on the products you have.
Do I need to code to use the Okta API with iTeam?
Not necessarily. iTeam's HTTP tool reads the documentation, and the deployment team sets it up with your IT.
Does the agent grant access on its own?
It should not. In iTeam, access changes sit behind approval by the person who has the authority.
