Okta

Use the @bijection/connectors/okta entrypoint to declare Okta resources.

Availability

This page describes the pinned source package. Published availability is unestablished for this artifact. Source build and package availability.

Resources and modes

Resource	Mode	Description
Users	`users`	Users with System Log or event-hook hints and lifecycle transitions

Declare a resource in application code, then bind deployment-specific settings and credentials. See typed resources, connections and source inspection.

Users

users: Users with System Log or event-hook hints and lifecycle transitions

The following example matches configuration systemLog.

import { okta } from "@bijection/connectors/okta";

export const users = okta.users.users({ updates: "systemLog" });

Inferred record types

Resource without an operational record table

Configuration: systemLog

Case: okta/users/users/systemLog. Connection and resource configuration are declared by this exact case. Credential kind: okta. Keep credential material in the private credential inventory.

Setting	Type	Required	Owner
`orgUrl`	string	Yes	Shared connection

Complete configuration contract

{
  "setup": [],
  "resource": {
    "access": {},
    "defaults": {},
    "connector": "okta",
    "output": {
      "kind": "single",
      "collection": "users"
    },
    "credential_kind": "okta",
    "connection_fields": [
      "orgUrl"
    ],
    "address": {
      "kind": "setup",
      "field": "orgUrl"
    }
  },
  "connection_setup": {
    "type": "object",
    "value": {
      "orgUrl": {
        "fieldType": {
          "type": "string"
        },
        "optional": false
      }
    }
  },
  "execution": null
}

Native admission analysis is available for this exact declaration. Collection: users

Contract	Meaning
Initial	Enumeration of observed records
Changes	Repeated observations of current records
Deletions	Reconciliation
Resume	Opaque cursor
Gap	Explicit repair required after a gap
Retention	Unspecified

Complete native profile

{
  "movement": {
    "exchanges": {
      "list": {
        "200": {
          "placement": "retained_bytes",
          "interpretation": "json",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        },
        "429": {
          "placement": "retained_bytes",
          "interpretation": "opaque",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        }
      },
      "user": {
        "200": {
          "placement": "retained_bytes",
          "interpretation": "json",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        },
        "404": {
          "placement": "retained_bytes",
          "interpretation": "opaque",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        },
        "429": {
          "placement": "retained_bytes",
          "interpretation": "opaque",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        }
      }
    },
    "nativeInputLimitBytes": null,
    "steps": [
      {
        "id": "acquire.1",
        "inputs": [],
        "action": {
          "operation": "acquire",
          "subject": "exchange list",
          "limitBytes": null
        }
      },
      {
        "id": "acquire.2",
        "inputs": [],
        "action": {
          "operation": "acquire",
          "subject": "exchange user",
          "limitBytes": null
        }
      },
      {
        "id": "acquire.3",
        "inputs": [],
        "action": {
          "operation": "acquire",
          "subject": "listener changes",
          "limitBytes": null
        }
      },
      {
        "id": "retain.1",
        "inputs": [
          "acquire.1",
          "acquire.2",
          "acquire.3"
        ],
        "action": {
          "operation": "retain",
          "subject": "acquisition evidence",
          "reason": "recovery",
          "release": "acquisition_custody"
        }
      },
      {
        "id": "interpret.1",
        "inputs": [
          "retain.1"
        ],
        "action": {
          "operation": "interpret",
          "subject": "acquired input",
          "produces": "records"
        }
      },
      {
        "id": "materialize.1",
        "inputs": [
          "interpret.1"
        ],
        "action": {
          "operation": "materialize",
          "subject": "source rows",
          "reason": "serving",
          "release": "replacement"
        }
      },
      {
        "id": "publish.1",
        "inputs": [
          "materialize.1"
        ],
        "action": {
          "operation": "publish",
          "subject": "source rows",
          "visibility": "with_acquisition"
        }
      }
    ]
  },
  "initial": "enumeration",
  "changes": "observations",
  "deletions": "reconciliation",
  "resume": "opaque_cursor",
  "retentionMs": null,
  "gap": "explicit_repair",
  "limits": {
    "http_response_bytes": "524288"
  },
  "restrictions": [],
  "commands": {}
}

Commands, occurrences and artifacts

{
  "records": {
    "users": {
      "protocol": "record_observation",
      "coverage": "records",
      "consistency": "observations",
      "atomicity": "record",
      "history": "observations",
      "recordRefresh": true,
      "reconciliation": true,
      "notifications": true,
      "snapshotMaxRows": null,
      "profile": {
        "movement": {
          "exchanges": {
            "list": {
              "200": {
                "placement": "retained_bytes",
                "interpretation": "json",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              },
              "429": {
                "placement": "retained_bytes",
                "interpretation": "opaque",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              }
            },
            "user": {
              "200": {
                "placement": "retained_bytes",
                "interpretation": "json",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              },
              "404": {
                "placement": "retained_bytes",
                "interpretation": "opaque",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              },
              "429": {
                "placement": "retained_bytes",
                "interpretation": "opaque",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              }
            }
          },
          "nativeInputLimitBytes": null,
          "steps": [
            {
              "id": "acquire.1",
              "inputs": [],
              "action": {
                "operation": "acquire",
                "subject": "exchange list",
                "limitBytes": null
              }
            },
            {
              "id": "acquire.2",
              "inputs": [],
              "action": {
                "operation": "acquire",
                "subject": "exchange user",
                "limitBytes": null
              }
            },
            {
              "id": "acquire.3",
              "inputs": [],
              "action": {
                "operation": "acquire",
                "subject": "listener changes",
                "limitBytes": null
              }
            },
            {
              "id": "retain.1",
              "inputs": [
                "acquire.1",
                "acquire.2",
                "acquire.3"
              ],
              "action": {
                "operation": "retain",
                "subject": "acquisition evidence",
                "reason": "recovery",
                "release": "acquisition_custody"
              }
            },
            {
              "id": "interpret.1",
              "inputs": [
                "retain.1"
              ],
              "action": {
                "operation": "interpret",
                "subject": "acquired input",
                "produces": "records"
              }
            },
            {
              "id": "materialize.1",
              "inputs": [
                "interpret.1"
              ],
              "action": {
                "operation": "materialize",
                "subject": "source rows",
                "reason": "serving",
                "release": "replacement"
              }
            },
            {
              "id": "publish.1",
              "inputs": [
                "materialize.1"
              ],
              "action": {
                "operation": "publish",
                "subject": "source rows",
                "visibility": "with_acquisition"
              }
            }
          ]
        },
        "initial": "enumeration",
        "changes": "observations",
        "deletions": "reconciliation",
        "resume": "opaque_cursor",
        "retentionMs": null,
        "gap": "explicit_repair",
        "limits": {
          "http_response_bytes": "524288"
        },
        "restrictions": [],
        "commands": {}
      }
    }
  },
  "occurrences": null,
  "artifacts": {
    "raw_archive": false,
    "native_file_transfer_limit_bytes": null,
    "external_versions": false,
    "files": {}
  },
  "commands": {}
}

Recorded checks

Requirement	Scope	Evidence	Result
page-publication-recovery	{“kind”:“collection”,“name”:“users”}	Native test: integrations/acquisition/acquisition_windows_preserve_sequences_and_restart_fences_old_work (shared_engine)	Execution result unavailable
stated-cursor-empty-page-advances	{“kind”:“collection”,“name”:“users”}	Fixture: ./src/connectors/okta/fixtures/link-page-advances.json	passed (2026-10-24T21:36:12.104Z)
stated-cursor-repeat-refused	{“kind”:“collection”,“name”:“users”}	No check exercises this packaged Okta declaration against Okta; it has not run or been qualified.	Execution result unavailable
backoff-stated-wait	{“kind”:“connection”}	Native test: integrations/acquisition/backoff_a_stated_wait_defers_the_next_dispatch_and_then_resumes (shared_engine)	Execution result unavailable
identity-account	{“kind”:“connection”}	Fixture: ./src/connectors/okta/fixtures/identity.json	passed (2026-10-24T21:36:12.104Z)

Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

Configuration: eventHooks

Case: okta/users/users/eventHooks. Connection and resource configuration are declared by this exact case. Credential kind: okta. Keep credential material in the private credential inventory.

Setting	Type	Required	Owner
`orgUrl`	string	Yes	Shared connection

Complete configuration contract

{
  "setup": [],
  "resource": {
    "access": {},
    "defaults": {},
    "connector": "okta",
    "output": {
      "kind": "single",
      "collection": "users"
    },
    "credential_kind": "okta",
    "connection_fields": [
      "orgUrl"
    ],
    "address": {
      "kind": "setup",
      "field": "orgUrl"
    }
  },
  "connection_setup": {
    "type": "object",
    "value": {
      "orgUrl": {
        "fieldType": {
          "type": "string"
        },
        "optional": false
      }
    }
  },
  "execution": null
}

Native admission analysis is available for this exact declaration. Collection: users

Contract	Meaning
Initial	Enumeration of observed records
Changes	Repeated observations of current records
Deletions	Reconciliation
Resume	Opaque cursor
Gap	Explicit repair required after a gap
Retention	Unspecified

Complete native profile

{
  "movement": {
    "exchanges": {
      "list": {
        "200": {
          "placement": "retained_bytes",
          "interpretation": "json",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        },
        "429": {
          "placement": "retained_bytes",
          "interpretation": "opaque",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        }
      },
      "user": {
        "200": {
          "placement": "retained_bytes",
          "interpretation": "json",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        },
        "404": {
          "placement": "retained_bytes",
          "interpretation": "opaque",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        },
        "429": {
          "placement": "retained_bytes",
          "interpretation": "opaque",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        }
      }
    },
    "nativeInputLimitBytes": null,
    "steps": [
      {
        "id": "acquire.1",
        "inputs": [],
        "action": {
          "operation": "acquire",
          "subject": "exchange list",
          "limitBytes": null
        }
      },
      {
        "id": "acquire.2",
        "inputs": [],
        "action": {
          "operation": "acquire",
          "subject": "exchange user",
          "limitBytes": null
        }
      },
      {
        "id": "acquire.3",
        "inputs": [],
        "action": {
          "operation": "acquire",
          "subject": "listener changes",
          "limitBytes": null
        }
      },
      {
        "id": "retain.1",
        "inputs": [
          "acquire.1",
          "acquire.2",
          "acquire.3"
        ],
        "action": {
          "operation": "retain",
          "subject": "acquisition evidence",
          "reason": "recovery",
          "release": "acquisition_custody"
        }
      },
      {
        "id": "interpret.1",
        "inputs": [
          "retain.1"
        ],
        "action": {
          "operation": "interpret",
          "subject": "acquired input",
          "produces": "records"
        }
      },
      {
        "id": "materialize.1",
        "inputs": [
          "interpret.1"
        ],
        "action": {
          "operation": "materialize",
          "subject": "source rows",
          "reason": "serving",
          "release": "replacement"
        }
      },
      {
        "id": "publish.1",
        "inputs": [
          "materialize.1"
        ],
        "action": {
          "operation": "publish",
          "subject": "source rows",
          "visibility": "with_acquisition"
        }
      }
    ]
  },
  "initial": "enumeration",
  "changes": "observations",
  "deletions": "reconciliation",
  "resume": "opaque_cursor",
  "retentionMs": null,
  "gap": "explicit_repair",
  "limits": {
    "http_response_bytes": "524288"
  },
  "restrictions": [],
  "commands": {}
}

Commands, occurrences and artifacts

{
  "records": {
    "users": {
      "protocol": "record_observation",
      "coverage": "records",
      "consistency": "observations",
      "atomicity": "record",
      "history": "observations",
      "recordRefresh": true,
      "reconciliation": true,
      "notifications": true,
      "snapshotMaxRows": null,
      "profile": {
        "movement": {
          "exchanges": {
            "list": {
              "200": {
                "placement": "retained_bytes",
                "interpretation": "json",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              },
              "429": {
                "placement": "retained_bytes",
                "interpretation": "opaque",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              }
            },
            "user": {
              "200": {
                "placement": "retained_bytes",
                "interpretation": "json",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              },
              "404": {
                "placement": "retained_bytes",
                "interpretation": "opaque",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              },
              "429": {
                "placement": "retained_bytes",
                "interpretation": "opaque",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              }
            }
          },
          "nativeInputLimitBytes": null,
          "steps": [
            {
              "id": "acquire.1",
              "inputs": [],
              "action": {
                "operation": "acquire",
                "subject": "exchange list",
                "limitBytes": null
              }
            },
            {
              "id": "acquire.2",
              "inputs": [],
              "action": {
                "operation": "acquire",
                "subject": "exchange user",
                "limitBytes": null
              }
            },
            {
              "id": "acquire.3",
              "inputs": [],
              "action": {
                "operation": "acquire",
                "subject": "listener changes",
                "limitBytes": null
              }
            },
            {
              "id": "retain.1",
              "inputs": [
                "acquire.1",
                "acquire.2",
                "acquire.3"
              ],
              "action": {
                "operation": "retain",
                "subject": "acquisition evidence",
                "reason": "recovery",
                "release": "acquisition_custody"
              }
            },
            {
              "id": "interpret.1",
              "inputs": [
                "retain.1"
              ],
              "action": {
                "operation": "interpret",
                "subject": "acquired input",
                "produces": "records"
              }
            },
            {
              "id": "materialize.1",
              "inputs": [
                "interpret.1"
              ],
              "action": {
                "operation": "materialize",
                "subject": "source rows",
                "reason": "serving",
                "release": "replacement"
              }
            },
            {
              "id": "publish.1",
              "inputs": [
                "materialize.1"
              ],
              "action": {
                "operation": "publish",
                "subject": "source rows",
                "visibility": "with_acquisition"
              }
            }
          ]
        },
        "initial": "enumeration",
        "changes": "observations",
        "deletions": "reconciliation",
        "resume": "opaque_cursor",
        "retentionMs": null,
        "gap": "explicit_repair",
        "limits": {
          "http_response_bytes": "524288"
        },
        "restrictions": [],
        "commands": {}
      }
    }
  },
  "occurrences": null,
  "artifacts": {
    "raw_archive": false,
    "native_file_transfer_limit_bytes": null,
    "external_versions": false,
    "files": {}
  },
  "commands": {}
}

Recorded checks

Requirement	Scope	Evidence	Result
listener-custody-before-ack	{“kind”:“listener”,“collection”:“users”}	Native test: integrations/listeners/webhook_delivery_commits_responsibility_before_acknowledging (shared_engine)	Execution result unavailable
listener-duplicate-delivery	{“kind”:“listener”,“collection”:“users”}	Native test: integrations/listeners/okta_hook_admits_only_the_configured_header (provider_contract)	Execution result unavailable
page-publication-recovery	{“kind”:“collection”,“name”:“users”}	Native test: integrations/acquisition/acquisition_windows_preserve_sequences_and_restart_fences_old_work (shared_engine)	Execution result unavailable
stated-cursor-empty-page-advances	{“kind”:“collection”,“name”:“users”}	Fixture: ./src/connectors/okta/fixtures/link-page-advances.json	passed (2026-10-24T21:36:12.105Z)
stated-cursor-repeat-refused	{“kind”:“collection”,“name”:“users”}	No check exercises this packaged Okta declaration against Okta; it has not run or been qualified.	Execution result unavailable
backoff-stated-wait	{“kind”:“connection”}	Native test: integrations/acquisition/backoff_a_stated_wait_defers_the_next_dispatch_and_then_resumes (shared_engine)	Execution result unavailable
identity-account	{“kind”:“connection”}	Fixture: ./src/connectors/okta/fixtures/identity.json	passed (2026-10-24T21:36:12.105Z)

Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

Configuration: transitions

Case: okta/users/users/transitions. Connection and resource configuration are declared by this exact case. Credential kind: okta. Keep credential material in the private credential inventory.

Setting	Type	Required	Owner
`orgUrl`	string	Yes	Shared connection

Complete configuration contract

{
  "setup": [],
  "resource": {
    "access": {},
    "defaults": {},
    "connector": "okta",
    "output": {
      "kind": "single",
      "collection": "users"
    },
    "credential_kind": "okta",
    "connection_fields": [
      "orgUrl"
    ],
    "address": {
      "kind": "setup",
      "field": "orgUrl"
    }
  },
  "connection_setup": {
    "type": "object",
    "value": {
      "orgUrl": {
        "fieldType": {
          "type": "string"
        },
        "optional": false
      }
    }
  },
  "execution": null
}

Native admission analysis is available for this exact declaration. Collection: users

Contract	Meaning
Initial	Enumeration of observed records
Changes	Repeated observations of current records
Deletions	Reconciliation
Resume	Opaque cursor
Gap	Explicit repair required after a gap
Retention	Unspecified

Complete native profile

{
  "movement": {
    "exchanges": {
      "list": {
        "200": {
          "placement": "retained_bytes",
          "interpretation": "json",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        },
        "429": {
          "placement": "retained_bytes",
          "interpretation": "opaque",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        }
      },
      "user": {
        "200": {
          "placement": "retained_bytes",
          "interpretation": "json",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        },
        "404": {
          "placement": "retained_bytes",
          "interpretation": "opaque",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        },
        "429": {
          "placement": "retained_bytes",
          "interpretation": "opaque",
          "projectsBeforeRetention": false,
          "retainedBodyLimitBytes": "524288",
          "fileLimitBytes": null
        }
      }
    },
    "nativeInputLimitBytes": null,
    "steps": [
      {
        "id": "acquire.1",
        "inputs": [],
        "action": {
          "operation": "acquire",
          "subject": "exchange list",
          "limitBytes": null
        }
      },
      {
        "id": "acquire.2",
        "inputs": [],
        "action": {
          "operation": "acquire",
          "subject": "exchange user",
          "limitBytes": null
        }
      },
      {
        "id": "acquire.3",
        "inputs": [],
        "action": {
          "operation": "acquire",
          "subject": "listener changes",
          "limitBytes": null
        }
      },
      {
        "id": "retain.1",
        "inputs": [
          "acquire.1",
          "acquire.2",
          "acquire.3"
        ],
        "action": {
          "operation": "retain",
          "subject": "acquisition evidence",
          "reason": "recovery",
          "release": "acquisition_custody"
        }
      },
      {
        "id": "interpret.1",
        "inputs": [
          "retain.1"
        ],
        "action": {
          "operation": "interpret",
          "subject": "acquired input",
          "produces": "records"
        }
      },
      {
        "id": "materialize.1",
        "inputs": [
          "interpret.1"
        ],
        "action": {
          "operation": "materialize",
          "subject": "source rows",
          "reason": "serving",
          "release": "replacement"
        }
      },
      {
        "id": "publish.1",
        "inputs": [
          "materialize.1"
        ],
        "action": {
          "operation": "publish",
          "subject": "source rows",
          "visibility": "with_acquisition"
        }
      }
    ]
  },
  "initial": "enumeration",
  "changes": "observations",
  "deletions": "reconciliation",
  "resume": "opaque_cursor",
  "retentionMs": null,
  "gap": "explicit_repair",
  "limits": {
    "http_response_bytes": "524288"
  },
  "restrictions": [],
  "commands": {
    "deactivate": {
      "target": "users",
      "delivery": "single_attempt",
      "condition": "target_state",
      "replayWindowMs": null,
      "maxDeliveryHours": "1",
      "providerEnforcedExpiry": false
    },
    "suspend": {
      "target": "users",
      "delivery": "single_attempt",
      "condition": "target_state",
      "replayWindowMs": null,
      "maxDeliveryHours": "1",
      "providerEnforcedExpiry": false
    },
    "unlock": {
      "target": "users",
      "delivery": "single_attempt",
      "condition": "target_state",
      "replayWindowMs": null,
      "maxDeliveryHours": "1",
      "providerEnforcedExpiry": false
    },
    "unsuspend": {
      "target": "users",
      "delivery": "single_attempt",
      "condition": "target_state",
      "replayWindowMs": null,
      "maxDeliveryHours": "1",
      "providerEnforcedExpiry": false
    }
  }
}

Commands

Command	Target	Condition	Delivery
`deactivate`	users	Target state precondition	Single dispatch attempt
`suspend`	users	Target state precondition	Single dispatch attempt
`unlock`	users	Target state precondition	Single dispatch attempt
`unsuspend`	users	Target state precondition	Single dispatch attempt

Commands, occurrences and artifacts

{
  "records": {
    "users": {
      "protocol": "record_observation",
      "coverage": "records",
      "consistency": "observations",
      "atomicity": "record",
      "history": "observations",
      "recordRefresh": true,
      "reconciliation": true,
      "notifications": true,
      "snapshotMaxRows": null,
      "profile": {
        "movement": {
          "exchanges": {
            "list": {
              "200": {
                "placement": "retained_bytes",
                "interpretation": "json",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              },
              "429": {
                "placement": "retained_bytes",
                "interpretation": "opaque",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              }
            },
            "user": {
              "200": {
                "placement": "retained_bytes",
                "interpretation": "json",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              },
              "404": {
                "placement": "retained_bytes",
                "interpretation": "opaque",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              },
              "429": {
                "placement": "retained_bytes",
                "interpretation": "opaque",
                "projectsBeforeRetention": false,
                "retainedBodyLimitBytes": "524288",
                "fileLimitBytes": null
              }
            }
          },
          "nativeInputLimitBytes": null,
          "steps": [
            {
              "id": "acquire.1",
              "inputs": [],
              "action": {
                "operation": "acquire",
                "subject": "exchange list",
                "limitBytes": null
              }
            },
            {
              "id": "acquire.2",
              "inputs": [],
              "action": {
                "operation": "acquire",
                "subject": "exchange user",
                "limitBytes": null
              }
            },
            {
              "id": "acquire.3",
              "inputs": [],
              "action": {
                "operation": "acquire",
                "subject": "listener changes",
                "limitBytes": null
              }
            },
            {
              "id": "retain.1",
              "inputs": [
                "acquire.1",
                "acquire.2",
                "acquire.3"
              ],
              "action": {
                "operation": "retain",
                "subject": "acquisition evidence",
                "reason": "recovery",
                "release": "acquisition_custody"
              }
            },
            {
              "id": "interpret.1",
              "inputs": [
                "retain.1"
              ],
              "action": {
                "operation": "interpret",
                "subject": "acquired input",
                "produces": "records"
              }
            },
            {
              "id": "materialize.1",
              "inputs": [
                "interpret.1"
              ],
              "action": {
                "operation": "materialize",
                "subject": "source rows",
                "reason": "serving",
                "release": "replacement"
              }
            },
            {
              "id": "publish.1",
              "inputs": [
                "materialize.1"
              ],
              "action": {
                "operation": "publish",
                "subject": "source rows",
                "visibility": "with_acquisition"
              }
            }
          ]
        },
        "initial": "enumeration",
        "changes": "observations",
        "deletions": "reconciliation",
        "resume": "opaque_cursor",
        "retentionMs": null,
        "gap": "explicit_repair",
        "limits": {
          "http_response_bytes": "524288"
        },
        "restrictions": [],
        "commands": {
          "deactivate": {
            "target": "users",
            "delivery": "single_attempt",
            "condition": "target_state",
            "replayWindowMs": null,
            "maxDeliveryHours": "1",
            "providerEnforcedExpiry": false
          },
          "suspend": {
            "target": "users",
            "delivery": "single_attempt",
            "condition": "target_state",
            "replayWindowMs": null,
            "maxDeliveryHours": "1",
            "providerEnforcedExpiry": false
          },
          "unlock": {
            "target": "users",
            "delivery": "single_attempt",
            "condition": "target_state",
            "replayWindowMs": null,
            "maxDeliveryHours": "1",
            "providerEnforcedExpiry": false
          },
          "unsuspend": {
            "target": "users",
            "delivery": "single_attempt",
            "condition": "target_state",
            "replayWindowMs": null,
            "maxDeliveryHours": "1",
            "providerEnforcedExpiry": false
          }
        }
      }
    }
  },
  "occurrences": null,
  "artifacts": {
    "raw_archive": false,
    "native_file_transfer_limit_bytes": null,
    "external_versions": false,
    "files": {}
  },
  "commands": {
    "deactivate": {
      "target": "users",
      "condition": {
        "kind": "target_state"
      },
      "delivery": {
        "kind": "single_attempt",
        "retention": {
          "kind": "unknown"
        },
        "max_delivery_hours": 1
      }
    },
    "suspend": {
      "target": "users",
      "condition": {
        "kind": "target_state"
      },
      "delivery": {
        "kind": "single_attempt",
        "retention": {
          "kind": "unknown"
        },
        "max_delivery_hours": 1
      }
    },
    "unlock": {
      "target": "users",
      "condition": {
        "kind": "target_state"
      },
      "delivery": {
        "kind": "single_attempt",
        "retention": {
          "kind": "unknown"
        },
        "max_delivery_hours": 1
      }
    },
    "unsuspend": {
      "target": "users",
      "condition": {
        "kind": "target_state"
      },
      "delivery": {
        "kind": "single_attempt",
        "retention": {
          "kind": "unknown"
        },
        "max_delivery_hours": 1
      }
    }
  }
}

Recorded checks

Requirement	Scope	Evidence	Result
page-publication-recovery	{“kind”:“collection”,“name”:“users”}	Native test: integrations/acquisition/acquisition_windows_preserve_sequences_and_restart_fences_old_work (shared_engine)	Execution result unavailable
stated-cursor-empty-page-advances	{“kind”:“collection”,“name”:“users”}	Fixture: ./src/connectors/okta/fixtures/link-page-advances.json	passed (2026-10-24T21:36:12.105Z)
stated-cursor-repeat-refused	{“kind”:“collection”,“name”:“users”}	No check exercises this packaged Okta declaration against Okta; it has not run or been qualified.	Execution result unavailable
command-response-lost	{“kind”:“command”,“name”:“deactivate”}	No check exercises this packaged Okta declaration against Okta; it has not run or been qualified.	Execution result unavailable
command-response-lost	{“kind”:“command”,“name”:“suspend”}	No check exercises this packaged Okta declaration against Okta; it has not run or been qualified.	Execution result unavailable
command-response-lost	{“kind”:“command”,“name”:“unlock”}	No check exercises this packaged Okta declaration against Okta; it has not run or been qualified.	Execution result unavailable
command-response-lost	{“kind”:“command”,“name”:“unsuspend”}	No check exercises this packaged Okta declaration against Okta; it has not run or been qualified.	Execution result unavailable
backoff-stated-wait	{“kind”:“connection”}	Native test: integrations/acquisition/backoff_a_stated_wait_defers_the_next_dispatch_and_then_resumes (shared_engine)	Execution result unavailable
identity-account	{“kind”:“connection”}	Fixture: ./src/connectors/okta/fixtures/identity.json	passed (2026-10-24T21:36:12.106Z)

Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

Provider guidance

Compiled declaration examples and configuration details are published in the connector reference. The connection’s setup names the org origin (orgUrl, such as https://example.okta.com) and holds an okta credential (okta.credential): a keyword envelope writing Authorization: SSWS <token>. An API token carries its minting admin’s privileges. Identity is the org id from GET /api/v1/org. Users are listed from GET /api/v1/users, paged by the Link header. The listing omits DEPROVISIONED users and a deleted user answers 404 with no tombstone, so the listing claims no coverage and only the daily point-read sweep’s 404 withdraws a user. updates selects the change hints:

systemLog polls GET /api/v1/logs oldest first, filtered to user.* events, including the typed user.lifecycle.delete.* events that announce a deletion. The opaque after cursor is read from the response’s rel="next" link, and Okta retains the log for ninety days.
eventHooks admits Okta event hooks. Okta signs nothing: the hook carries the header value the operator chose when registering it, installed as the listener’s signing credential (configured_token on authorization), so a delivery proves only a refresh hint. The one-time x-okta-verification-challenge GET is answered on the same endpoint.

With a governingRule, the lifecycle transitions unlock, suspend, unsuspend and deactivate are commands under a target_state condition: one attempt, no idempotency, and the refusals E0000032, E0000038 and E0000016 read as a lost conditional write. Only E0000032 is in the probe’s evidence; the other two are documented. A lost answer stays unknown: the reconcile read shows the user’s status now, never whose transition produced it. Nothing here has run against Okta or been qualified.

Provider references

Provider references and prerequisites are maintained in the connector guidance above. No separate provider-documentation review date is recorded.

Source and evidence

Canonical connector source, native analysis and check receipts. Connector artifact: 905888ea276a2a28e36981a79e8142b2547ea451c3e63162cb6915ad4a7d1305. The resource declaration examples above are compiled and compared with exact catalog declarations. Recorded checks apply only to their source, declaration and runtime identities. Configure a connection and inspect its status to establish deployment-specific readiness.

Get Started

Use-case atlas

Platform

Data and Operations

Guides

Client Libraries

Tools

API Reference

Availability

Resources and modes

Users

users: Users with System Log or event-hook hints and lifecycle transitions

Configuration: systemLog

Configuration: eventHooks

Configuration: transitions

Provider guidance

Provider references

Source and evidence

​Availability

​Resources and modes

​Users

​users: Users with System Log or event-hook hints and lifecycle transitions

​Configuration: systemLog

​Configuration: eventHooks

​Configuration: transitions

​Provider guidance

​Provider references

​Source and evidence

Availability

Resources and modes

Users

users: Users with System Log or event-hook hints and lifecycle transitions

Configuration: systemLog

Configuration: eventHooks

Configuration: transitions

Provider guidance

Provider references

Source and evidence