> This page is for Agent Handler.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.merge.dev/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.merge.dev/_mcp/server.

# Okta

**Authentication:** OAuth or API token. See [Magic Link](/merge-agent-handler/features/magic-link) for the runtime auth flow, or [Application credentials](/merge-agent-handler/admin-setup/add-oauth-credentials) to bring your own OAuth app.

## Sample use cases

* List users who haven't logged in for 90 days and draft a deactivation report.
* Add a new hire to the `Engineering` group and review their application assignments.
* Pull yesterday's system log entries for failed MFA attempts and summarize by user.

## Available Tools

#### list\_app\_groups

List groups assigned to an Okta application with cursor pagination

#### get\_app\_group

Get a specific group's assignment to an Okta application

#### assign\_group\_to\_app

Assign a group to an Okta application (all group members get app access)

#### update\_app\_group\_assignment

Update a group's assignment (priority or app-specific profile) for an Okta application, leaving fields you omit unchanged

#### unassign\_group\_from\_app

Remove a group's assignment from an Okta application

#### list\_app\_users

List users assigned to an Okta application with cursor pagination

#### get\_app\_user

Get a specific user's assignment to an Okta application

#### assign\_user\_to\_app

Assign a user to an Okta application

#### update\_app\_user

Update a user's app-specific profile or credentials for an Okta application

#### unassign\_user\_from\_app

Remove a user's assignment from an Okta application

#### list\_apps

List Okta applications with cursor pagination

#### get\_app

Get an Okta application by ID

#### activate\_app

Activate an INACTIVE Okta application

#### deactivate\_app

Deactivate an ACTIVE Okta application

#### delete\_app

Permanently delete an Okta application

#### list\_group\_owners

List owners (users or groups) of an Okta group with cursor pagination

#### add\_group\_owner

Assign an owner to an Okta group

#### remove\_group\_owner

Remove an owner from an Okta group

#### list\_group\_rules

List Okta group rules with cursor pagination

#### get\_group\_rule

Get an Okta group rule by ID

#### create\_group\_rule

Create an Okta group rule that auto-assigns matching users to groups

#### update\_group\_rule

Replace an Okta group rule's name, condition, and target groups

#### delete\_group\_rule

Delete an Okta group rule

#### activate\_group\_rule

Activate an INACTIVE Okta group rule so it starts assigning users

#### deactivate\_group\_rule

Deactivate an ACTIVE Okta group rule

#### list\_groups

List Okta groups with cursor pagination

#### get\_group

Get an Okta group by ID

#### create\_group

Create an Okta group (OKTA\_GROUP type)

#### update\_group

Replace an Okta group's profile (name required)

#### delete\_group

Permanently delete an Okta group

#### list\_group\_users

List members of an Okta group with cursor pagination

#### add\_user\_to\_group

Add a user to an Okta group

#### remove\_user\_from\_group

Remove a user from an Okta group

#### list\_group\_apps

List applications assigned to an Okta group with cursor pagination

#### list\_log\_events

List Okta System Log events with cursor pagination

#### list\_users

List Okta users with cursor pagination

#### get\_user

Get an Okta user by ID or login

#### create\_user

Create an Okta user. profile requires firstName, lastName, email, and login

#### update\_user

Partially update an Okta user's profile or credentials

#### delete\_user

Permanently delete an Okta user

#### activate\_user

Activate a STAGED or DEPROVISIONED Okta user

#### deactivate\_user

Deactivate an Okta user (moves to DEPROVISIONED)

#### suspend\_user

Suspend an ACTIVE Okta user (moves to SUSPENDED)

#### unsuspend\_user

Unsuspend a SUSPENDED Okta user (returns to ACTIVE)

#### unlock\_user

Unlock a LOCKED\_OUT Okta user (returns to ACTIVE)