> This page is for Workforce.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.merge.dev/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.merge.dev/_mcp/server.

# Okta

**Authentication:** OAuth or API token. See [Magic Link](/merge-agent-handler/features/magic-link) for the runtime auth flow, or [Application credentials](/merge-agent-handler/admin-setup/add-oauth-credentials) to bring your own OAuth app.

## Sample use cases

* List users who haven't logged in for 90 days and draft a deactivation report.
* Add a new hire to the `Engineering` group and review their application assignments.
* Pull yesterday's system log entries for failed MFA attempts and summarize by user.

## Available Tools

#### list_app_groups

List groups assigned to an Okta application with cursor pagination

#### get_app_group

Get a specific group's assignment to an Okta application

#### assign_group_to_app

Assign a group to an Okta application (all group members get app access)

#### update_app_group_assignment

Update a group's assignment (priority or app-specific profile) for an Okta application, leaving fields you omit unchanged

#### unassign_group_from_app

Remove a group's assignment from an Okta application

#### list_app_users

List users assigned to an Okta application with cursor pagination

#### get_app_user

Get a specific user's assignment to an Okta application

#### assign_user_to_app

Assign a user to an Okta application

#### update_app_user

Update a user's app-specific profile or credentials for an Okta application

#### unassign_user_from_app

Remove a user's assignment from an Okta application

#### list_apps

List Okta applications with cursor pagination

#### get_app

Get an Okta application by ID

#### activate_app

Activate an INACTIVE Okta application

#### deactivate_app

Deactivate an ACTIVE Okta application

#### delete_app

Permanently delete an Okta application

#### list_group_owners

List owners (users or groups) of an Okta group with cursor pagination

#### add_group_owner

Assign an owner to an Okta group

#### remove_group_owner

Remove an owner from an Okta group

#### list_group_rules

List Okta group rules with cursor pagination

#### get_group_rule

Get an Okta group rule by ID

#### create_group_rule

Create an Okta group rule that auto-assigns matching users to groups

#### update_group_rule

Replace an Okta group rule's name, condition, and target groups

#### delete_group_rule

Delete an Okta group rule

#### activate_group_rule

Activate an INACTIVE Okta group rule so it starts assigning users

#### deactivate_group_rule

Deactivate an ACTIVE Okta group rule

#### list_groups

List Okta groups with cursor pagination

#### get_group

Get an Okta group by ID

#### create_group

Create an Okta group (OKTA_GROUP type)

#### update_group

Replace an Okta group's profile (name required)

#### delete_group

Permanently delete an Okta group

#### list_group_users

List members of an Okta group with cursor pagination

#### add_user_to_group

Add a user to an Okta group

#### remove_user_from_group

Remove a user from an Okta group

#### list_group_apps

List applications assigned to an Okta group with cursor pagination

#### list_log_events

List Okta System Log events with cursor pagination

#### list_users

List Okta users with cursor pagination

#### get_user

Get an Okta user by ID or login

#### create_user

Create an Okta user. profile requires firstName, lastName, email, and login

#### update_user

Partially update an Okta user's profile or credentials

#### delete_user

Permanently delete an Okta user

#### activate_user

Activate a STAGED or DEPROVISIONED Okta user

#### deactivate_user

Deactivate an Okta user (moves to DEPROVISIONED)

#### suspend_user

Suspend an ACTIVE Okta user (moves to SUSPENDED)

#### unsuspend_user

Unsuspend a SUSPENDED Okta user (returns to ACTIVE)

#### unlock_user

Unlock a LOCKED_OUT Okta user (returns to ACTIVE)