{
 "categories": [
  "identity",
  "enterprise"
 ],
 "deployment": "saas",
 "evidence": [
  {
   "date": "2026-08-30",
   "fact": "homepage",
   "note": "Okta presents Workforce Identity Cloud as SSO, Adaptive MFA, lifecycle, and governance for employees, contractors, and partners. A separate customer-identity block points at Auth0, which is outside this record.",
   "source": "https://www.okta.com/products/workforce-identity/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "license",
   "note": "Workforce suites are billed annually per user. The opened pricing page lists paid Starter and Essentials plans with an annual contract minimum.",
   "source": "https://www.okta.com/pricing/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.api.exists",
   "note": "Okta documents a versioned HTTPS JSON Management API. Example Users path is https://{yourOktaDomain}/api/v1/users.",
   "source": "https://developer.okta.com/docs/api",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.api.kinds[0]",
   "note": "The documented interface is a JSON REST API using GET, POST, PUT, PATCH, and DELETE.",
   "source": "https://developer.okta.com/docs/api",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.api.auth[0]",
   "note": "Okta documents scoped OAuth 2.0 access tokens with Authorization: Bearer as the recommended Management API method.",
   "source": "https://developer.okta.com/docs/api/openapi/okta-management/guides/overview",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.api.auth[1]",
   "note": "Okta documents SSWS API tokens that inherit the creating admin's privileges and expire after 30 days unused.",
   "source": "https://developer.okta.com/docs/guides/create-an-api-token/main/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.api.coverage",
   "note": "The Management API covers admin resources such as users. It is the documented machine admin surface, not a claim that every Admin Console control is exposed.",
   "source": "https://developer.okta.com/docs/api",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.sdk.exists",
   "note": "Okta publishes official Management SDKs for .NET, Python, Java, node.js, and Go.",
   "source": "https://developer.okta.com/code/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.sdk.languages[0]",
   "note": "Official Okta Management SDK for .NET is listed.",
   "source": "https://developer.okta.com/code/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.sdk.languages[1]",
   "note": "Official Okta Management SDK for Python is listed.",
   "source": "https://developer.okta.com/code/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.sdk.languages[2]",
   "note": "Official Okta Management SDK for Java is listed.",
   "source": "https://developer.okta.com/code/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.sdk.languages[3]",
   "note": "Official Okta Management SDK for node.js is listed.",
   "source": "https://developer.okta.com/code/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.sdk.languages[4]",
   "note": "Official Okta Management SDK for Go is listed.",
   "source": "https://developer.okta.com/code/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.mcp.first_party",
   "note": "Okta documents a first-party Open Source MCP Server that calls Admin Management APIs via the Python SDK, and names a separate Managed MCP Server hosting option.",
   "source": "https://developer.okta.com/docs/concepts/mcp-server/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.cli.exists",
   "note": "Okta Developer states the Okta CLI was deprecated in May 2025 and that setup should use the Admin Console instead.",
   "source": "https://developer.okta.com/blog/2022/07/27/python-okta",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.extensibility.scripting[0]",
   "note": "Okta Workflows is documented as no-code identity automation with connectors and Connector Builder.",
   "source": "https://www.okta.com/products/workflows/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.extensibility.webhooks",
   "note": "Event hooks are outbound HTTPS REST calls for System Log-eligible events, with a published maximum of 25 active hooks.",
   "source": "https://developer.okta.com/docs/concepts/event-hooks/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.data_access.export[0]",
   "note": "Management API responses are JSON.",
   "source": "https://developer.okta.com/docs/api",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.data_access.import[0]",
   "note": "Okta documents Admin Console CSV import of users at Directory > People.",
   "source": "https://help.okta.com/en-us/Content/Topics/users-groups-profiles/usgp-import-users-csv.htm",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.integrations.zapier",
   "note": "Zapier publishes an Okta app with user lifecycle actions and a New Event trigger.",
   "source": "https://zapier.com/apps/okta/integrations",
   "tier": "scraped"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.integrations.make",
   "note": "Make publishes an Okta app with user modules and a generic API Call using an API token.",
   "source": "https://apps.make.com/okta",
   "tier": "scraped"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.integrations.n8n",
   "note": "n8n documents a built-in Okta node for user create, delete, get, get many, and update.",
   "source": "https://docs.n8n.io/integrations/builtin/app-nodes/n8n-nodes-base.okta/",
   "tier": "scraped"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.integrations.power_automate",
   "note": "Microsoft's official connector documentation path /connectors/okta/ returned 404 on 2026-08-30.",
   "source": "https://learn.microsoft.com/en-us/connectors/okta/",
   "tier": "scraped"
  },
  {
   "date": "2026-08-30",
   "fact": "modalities.agent_docs.llms_txt",
   "note": "https://developer.okta.com/llms.txt returned 404 on 2026-08-30.",
   "source": "https://developer.okta.com/llms.txt",
   "tier": "scraped"
  },
  {
   "date": "2026-08-30",
   "fact": "verdict.scores.api",
   "note": "The Management API is documented, read/write for admin resources, and backed by official SDKs and OAuth. SSWS privilege inheritance and org-specific hosts keep it in the broad-production tier.",
   "source": "https://developer.okta.com/docs/api",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "verdict.scores.mcp",
   "note": "Official Open Source MCP wraps the Management API with scope-based tools. Managed MCP is Early Access and write tools need extra scopes, so coverage is official and useful rather than complete.",
   "source": "https://developer.okta.com/docs/concepts/mcp-server/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "verdict.scores.integrations",
   "note": "Zapier, Make, and n8n list user-lifecycle connectors. That is useful production coverage of people operations, not the full Management API.",
   "source": "https://zapier.com/apps/okta/integrations",
   "tier": "scraped"
  },
  {
   "date": "2026-08-30",
   "fact": "verdict.scores.cli",
   "note": "The Okta CLI still exists as a binary and repo but is vendor-deprecated, which is a stale unsupported path.",
   "source": "https://developer.okta.com/blog/2022/07/27/python-okta",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "freshness.watch[0].url",
   "note": "Opened and verified as Okta's current MCP overview, including Open Source and Managed hosting options and scope-based tools.",
   "source": "https://developer.okta.com/docs/concepts/mcp-server/",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "freshness.watch[1].url",
   "note": "Opened the okta/okta-mcp-server repository. It is Apache-2.0, not archived, and had a push on 2026-08-27.",
   "source": "https://github.com/okta/okta-mcp-server",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "freshness.watch[2].url",
   "note": "Opened and verified as Okta's current Management API index.",
   "source": "https://developer.okta.com/docs/api",
   "tier": "declared"
  },
  {
   "date": "2026-08-30",
   "fact": "freshness.watch[3].url",
   "note": "Opened and verified as the current Management API authentication overview covering OAuth Bearer and SSWS tokens.",
   "source": "https://developer.okta.com/docs/api/openapi/okta-management/guides/overview",
   "tier": "declared"
  }
 ],
 "freshness": {
  "last_verified": "2026-08-30",
  "volatility": "high",
  "watch": [
   {
    "type": "mcp",
    "url": "https://developer.okta.com/docs/concepts/mcp-server/"
   },
   {
    "type": "repo",
    "url": "https://github.com/okta/okta-mcp-server"
   },
   {
    "type": "docs",
    "url": "https://developer.okta.com/docs/api"
   },
   {
    "type": "docs",
    "url": "https://developer.okta.com/docs/api/openapi/okta-management/guides/overview"
   }
  ]
 },
 "homepage": "https://www.okta.com/products/workforce-identity/",
 "id": "okta",
 "license": "commercial",
 "modalities": {
  "agent_docs": {
   "llms_txt": false
  },
  "api": {
   "auth": [
    "oauth2",
    "ssws-api-token"
   ],
   "coverage": "partial",
   "docs": "https://developer.okta.com/docs/api",
   "exists": true,
   "kinds": [
    "rest"
   ]
  },
  "cli": {
   "exists": true
  },
  "computer_use": {
   "issues": [],
   "viability": "unknown"
  },
  "data_access": {
   "export": [
    "api-json"
   ],
   "import": [
    "csv"
   ]
  },
  "extensibility": {
   "scripting": [
    "okta-workflows"
   ],
   "webhooks": true
  },
  "integrations": {
   "make": true,
   "n8n": true,
   "power_automate": false,
   "zapier": true
  },
  "mcp": {
   "first_party": true,
   "third_party": [],
   "verdict": "official"
  },
  "rpa": {
   "drivability": "unknown",
   "notes": "No repeatable UI probe was run. The Management API, event hooks, Workflows, and official MCP servers cover admin work without browser control.\n",
   "ui_stack": [
    "web-dom"
   ],
   "vendor_support": []
  },
  "sdk": {
   "exists": true,
   "languages": [
    "dotnet",
    "python",
    "java",
    "javascript",
    "go"
   ],
   "official": true
  }
 },
 "name": "Okta Workforce Identity Cloud",
 "platforms": [
  "web"
 ],
 "related": {
  "alternatives": [
   "microsoft-entra-id",
   "active-directory-ds",
   "id-porten"
  ],
  "our_products": []
 },
 "schema_version": 1,
 "score_version": 1,
 "status": "active",
 "vendor": "Okta",
 "verdict": {
  "best_path": "api",
  "scores": {
   "api": 8,
   "cli": 2,
   "computer_use": null,
   "integrations": 6,
   "mcp": 8,
   "overall": 8,
   "rpa": null
  },
  "summary": "Okta Workforce Identity is automatable today through the Management REST API and an official MCP server. The API is JSON over HTTPS at /api/v1/ paths such as users, groups, apps, and policies. Okta documents scoped OAuth 2.0 Bearer tokens as the recommended method and SSWS API tokens as an unscoped alternative that inherits the creating admin's privileges. Official Management SDKs exist for .NET, Python, Java, Node.js, and Go. The Open Source MCP Server translates agent requests into those Management API calls via the Python SDK; tools load only for granted OAuth scopes. Okta also names a Managed MCP Server that is Early Access. Event hooks post System Log events to HTTPS endpoints. Zapier, Make, and n8n list user-lifecycle connectors. Microsoft's official Power Automate connector path returned 404 on 2026-08-30. The historical Okta CLI is vendor-deprecated as of May 2025. This record is Workforce Identity only; Auth0 is outside the boundary. Computer-use viability is unassessed. API and MCP both score 8; API is the best path because Managed MCP is Early Access and write tools are scope-gated.\n"
 }
}