Skip to main contentSkip to docs navigation
Docs
  • English (United States)
  • 日本語 (日本)
  • Français (France)
    • Identity Engine
    • Classic Engine
    • Access Gateway
    • Advanced Server Access
    • Aerial
    • Identity Security Posture Management
    • Workflows
    • Identity Engine
    • Classic Engine
    • Access Gateway
    • Advanced Server Access
    • Aerial
    • Identity Security Posture Management
    • Workflows
  • Okta Developer
    • Auth0 Docs
    • Auth0 FGA Docs
  • Training
  • Support
    • English (United States)
    • 日本語 (日本)
    • Français (France)

Feedback
Workflows publication
  • Okta Workflows
  • Release notes
    • Production
    • Preview
  • Overview
    • Use cases
    • Okta Workflows apps
    • Workflows Console
      • Folders and subfolders
      • Flows and tables
      • Connections page
    • Workflow elements
      • Cards in flows
      • Connections
      • Events
      • Action and function cards
        • Action cards
        • Function cards
      • Stream data with action cards
      • Fields
      • Note cards
      • Upgraded and deprecated cards
      • Flow charts
    • Role-based access control
      • Get started with RBAC
      • Roles and permissions
        • Resource permissions
      • Assign the Okta Workflows app
      • Synchronize Okta Workflows users and groups
        • Sync a user account
        • Sync a group
      • Assign the Workflows Administrator role
      • Manage Workflows org roles
      • Manage Workflows folder roles
      • Governance for Workflows
      • Access control example
      • System Log events for access control
      • Permission type changes for delegated flows
    • Execution limits
    • Parent flows and other flow types
    • Helper flows
    • Delegated flows
    • Low-latency mode
      • Criteria for low-latency mode
    • Back up flows and folders
    • Tables
    • Lists
    • Numbers and text
    • Invoke an API endpoint flow
    • Flow aliases
    • Flow client token
  • Build flows
    • Sample flows for new orgs
    • Connect your applications
    • Configure a connection
    • Mutual TLS connections
      • Manage certificates in the trust store
      • Create an mTLS connection
    • Customize a card
    • Duplicate a card
    • Stream matching records with a helper flow
    • Import data from a CSV file into a table
    • Build and test a flow
    • Set data exchange options
    • Set schedule options
    • Set error handling for cards in flows
    • Export and import flows
    • Set up a template for flow backup
    • Create and edit a table
    • Provide a table ID at runtime
    • Build a delegated flow
  • Run flows
    • Invoke a flow with an API endpoint
      • Invoke a flow with an API endpoint using OAuth 2.0
      • Invoke a flow with an API endpoint using a Client Token
      • Invoke a flow with an API as a public service
    • Run a delegated flow
    • Resume a paused flow
    • Cancel a flow execution
    • Flow execution history
      • Save flow data to execution history
      • View flow execution history
        • Execution history details
      • Clear flow execution history
    • Event and log reporting
    • Execution Log Streaming
      • Configure Execution Log Streaming
      • Manage Execution Log Streaming for individual flows
      • Event metadata for Execution Log Streaming
      • System events for Execution Log Streaming
    • Understand errors when working with lists
    • Troubleshoot inactive flows
    • Repair an invalid flow
    • Workflows error messages
    • HTTP status codes
  • Connector Builder
    • Overview
      • Building blocks of a connector
      • Connections
      • Connector settings
      • Preview dialogs in Connector Builder
      • Authentication
      • Flow types in Connector Builder
      • Dynamic dropdown, fields, and groups
      • Extensible input fields
      • Functions
      • Custom API Action (CAPIA) cards
      • Webhook events
      • Polling monitor events
    • Build connections
      • Create a connector
      • Rename or delete a project
      • Create and edit connector settings
    • Build authentication for your connector
      • Build basic authentication
      • Build OAuth 2.0 authentication
        • Authentication Code grant type
        • Client Credentials grant type
      • Build custom authentication
      • Build multiple authentications
      • Add parameters for connector authentication
      • Add configuration values for connector authentication
      • Test connections
    • Build action cards for your connector
      • Add option fields to connector cards
      • Add static values for a dropdown options field
      • Add a dynamic dropdown field: HTTP example
      • Add dependent options to an action card
      • Add input and output fields to connector cards
      • Add static values for a dropdown input field
      • Add dynamic fields and groups
      • Add dynamic input fields: HTTP example
      • Add selectable outputs to an action card
    • Build common flows
      • Build an httpHelper flow
      • Build an _authping flow
      • Build a custom API action card
      • Build a revoke flow
      • Build a webhook event flow
        • Enable run mode for webhooks
        • Known issues and limitations
      • Register a webhook event
      • Deregister a webhook event
      • Build a polling monitor event flow
        • Enable run mode for polling monitors
    • Test and deploy your connector
      • Test your flows
      • Check execution history
      • Deploy your connector
        • Test your connector
        • Deploy your connector privately
        • Submit your connector
      • Deployment validation errors
    • Submit your connector
      • Submissions overview
      • Documentation
        • Authorization
        • Connector cards
        • CAPIA card
      • Testing overview
    • Best practices
      • Best practices: Action card names and descriptions
      • Best practices: Choose between an API Connector and Connector Builder
      • Best practices: Options fields
      • Best practices: Object shapes
      • Best practices: Error handling
      • Best practices: Rate limits
    • Additional resources
      • Connector Builder feature limits
  • Integration Builder
    • Integration Builder and Connector Builder comparison
    • Create an Integration Builder project
    • Shared Folder
    • API spec imports
      • Upload an OpenAPI spec to an integration project
      • Generate authentication from an OpenAPI spec
      • Generate core flows from an OpenAPI spec
    • Connectors
      • Add a connector to an Integration Builder project
    • Actions
      • Add an action to an Integration Builder project
      • Test action API calls
      • Validate and submit an Integration Builder action
  • Connectors
    • Adobe User Management
      • Authorization
      • Revoke an Adobe User Management connection
      • Guidance for Adobe User Management connector
      • Actions
        • Add User to Group
        • Create Group
        • Create User
        • Custom API Action
        • Delete Directory User
        • Delete Group
        • List Group Members
        • List Groups
        • List Users
        • Read Users
        • Remove User from Group
        • Remove User Membership
        • Update Group
        • Update User
    • Advanced Server Access
      • Authorization
      • Guidance for Advanced Server Access connector
      • Actions
        • Add Group to Project
        • Add User to Group
        • Change Project Properties of Project Group
        • Create ASA Group
        • Create Preauthorization
        • Create Project
        • Create Server Enrollment Token for Project
        • Custom API Action
        • Delete Project
        • List Projects for Team
        • List Server Enrollment Tokens within a Project
        • Read Server Enrollment Token for Project
        • Remove an ASA User from an ASA Group
        • Remove Group from Team
        • Update PreAuthorization
        • Update Project
    • Airtable
      • Authorization
      • Events
        • New Row in Table
      • Actions
        • Create Row
        • Custom API Action
        • Delete Row
        • Read All Rows
        • Read Row
        • Search Rows
        • Update Row
    • Asana
      • Authorization
      • Actions
        • Add Task
        • Add User to Team
        • Add Users to Project
        • Create Membership
        • Create Project
        • Create User
        • Custom API Action
        • Deactivate User
        • Delete Membership
        • List Tasks
        • Read Project
        • Read Project Tasks
        • Read User
        • Read User Tasks
        • Remove User from Team
        • Remove Users from Project
        • Search Projects
        • Search Tasks
        • Search Teams
        • Search User
        • Update Project
        • Update Task
        • Update User
    • Atlassian Admin
      • Authorization
      • Actions
        • Add User to Group
        • Create a Group
        • Create User
        • Custom API Action
        • Deactivate User
        • Delete Group
        • Get User
        • Read a Group
        • Remove User from Group
        • Search Groups
        • Search Users
        • Update Group
        • Update User
    • Auth0
      • Authorization
      • Actions
        • Create User
        • Custom API Action
        • Delete User
        • Link Account
        • Read User
        • Search Users
        • Update User
    • AWS Lambda
      • Authorization
      • Actions
        • Invoke
        • List Functions
    • AWS Multi-Account Access
      • AWS Multi-Account Access Authorization
      • Actions
        • Add AWS Entitlements
        • List AWS Entitlements
        • List Instances
        • Remove All AWS Entitlements
        • Remove AWS Entitlements
    • AWS S3
      • Authorization
      • Action
        • Copy Object
        • Create Bucket
        • Custom API Action
        • Delete Bucket
        • Delete Object
        • Download Object
        • Read Object
        • Read Object Tags
        • Search Buckets
        • Search Objects
        • Tag Object
        • Upload Object
    • BambooHR
      • Authorization
      • Actions
        • List Employees
        • Read Employee
        • Update Employee
    • Box
      • Authorization
      • Known issues and limitations
      • Events
        • Collaboration Created
        • File Moved
        • File Uploaded
        • Folder Created
        • Shared Link Created
        • Shared Link Updated
      • Actions
        • Add User to Group
        • Create Personal Box Folder
        • Create User
        • Custom API Action
        • Deactivate User
        • Delete File
        • Delete Folder
        • Delete User
        • Download File
        • Get User
        • Get User's Group Membership
        • List Group's Members
        • List User's Groups
        • Reactivate User
        • Remove User from Group
        • Search Users
        • Transfer User Folders
        • Update User
        • Update User's Group Membership
        • Upload File
    • Citrix ShareFile
      • Authorization
      • Revoke Token
      • Actions
        • Add Contact to Group
        • Create Share for Request
        • Create Share for Send
        • Create User
        • Custom API Action
        • Delete User
        • List Groups
        • List Users
        • List User Shared Folders
        • Read User
        • Remove Contact from Group
        • Search Items
        • Update User
    • Coupa
      • Authorization
      • Actions
        • Create Group
        • Create Membership
        • Create User
        • Custom API Action
        • List User Memberships
        • Read Group
        • Read User
        • Search Groups
        • Search Users
        • Update Group
        • Update Membership
        • Update User
    • CrowdStrike
      • Authorization
      • Actions
        • Assign User Roles
        • Create User
        • Custom API Action
        • Delete User
        • List User Roles IDs
        • Read Role Details
        • Read User
        • Remove User Roles
        • Search User Roles
        • Search Users
        • Update User Names
    • DataGrail
      • Authorization
      • Actions
        • Create Privacy Request
        • Custom API Action
        • Get Privacy Request
    • DocuSign
      • Authorization
      • Revoke Token
      • Actions
        • Add Custom Envelope Field
        • Add Recipient to Envelope
        • Add User to Group
        • Create Envelope
        • Create User
        • Delete User
        • Download Document in Envelope
        • Custom API Action
        • List Groups
        • List Users in Group
        • Modify Custom Field in Envelope
        • Read Envelope
        • Read User
        • Remove User from Group
        • Search Custom Fields in Envelope
        • Search Envelope
        • Search Users
        • Send Envelope
        • Update User
        • Upload Document to Envelope
    • Dropbox for Business
      • Authorization
      • Actions
        • Add User to Group
        • Create Group
        • Create User
        • Custom API Action
        • Delete Group
        • Download File
        • List Group Members
        • List Groups
        • List Users
        • Read Group
        • Read User
        • Remove User
        • Remove User from Group
        • Search Files or Folders
        • Suspend User
        • Unsuspend User
        • Update Group
        • Update User
        • Upload File
    • Duo Security Admin
      • Authorization
      • Actions
        • Add User to Group
        • Create User
        • Custom API Action
        • Delete User
        • Enroll User
        • Get Groups
        • Read User
        • Remove User from Group
        • Search User
        • Update User
    • Evident ID
      • Authorization
      • Events
        • Verification Request Completed
        • Verification Request Created
        • Verification Request Submission Completed
      • Actions
        • Create Verification Request
        • Custom API Action
        • Read Verification Results
        • Search Request Templates
    • Excel Online
      • Authorization
      • Guidance for Excel Online connector
      • Revoke Token
      • Events
        • Row Added or Updated
        • Updated Cell
      • Actions
        • Add Row
        • Clear Cells
        • Custom API Action
        • Delete Cells
        • Get Cell Value
        • Read All Rows
        • Read Row
        • Read Worksheet Info
        • Search Rows by Column
        • Update Cell
        • Update Row
    • Freshservice
      • Authorization
      • Actions
        • Create Ticket
        • Create User
        • Custom API Action
        • Deactivate User
        • Delete Ticket
        • Read Ticket
        • Read User
        • Search Tickets
        • Search Users
        • Update Ticket
        • Update User
      • Events
        • New Ticket
        • Ticket Updated
    • GitHub
      • Authorization
      • Actions
        • Add User to Organization
        • Add User to Repository
        • Add User to Team
        • Create Issue
        • Create Branch
        • Create File Content
        • Create Pull Request
        • Custom API Action
        • Read Issue
        • Read Pull Request
        • Read Repository
        • Read User
        • Remove User from Organization
        • Remove User from Repository
        • Remove User from Team
        • Search Branches
        • Search Organizations
        • Search Repositories
        • Search Teams
        • Search Users
        • Update File Content
        • Update Issue
        • Update Pull Request
        • Update User
    • Gmail
      • Authorization
      • Authorize an account for transfer of ownership
      • Scopes for Gmail connector cards
      • Events
        • Label Added or Removed
        • New Email
      • Actions
        • Add Delegate
        • Add Send-As Alias
        • Custom API Action
        • Delete Delegate
        • Delete Send-As Alias
        • Forward Emails
        • List Delegates
        • Read Email
        • Search Emails
        • Send Email
        • Send Email with Attachment
        • Set Auto Reply
        • Update User Gmail Settings
    • Google Calendar
      • Authorization
      • Scopes for Google Calendar connector cards
      • Set up transfer of ownership
      • Events
        • Monitor New Events
        • Monitor Updated Events
      • Actions
        • Add User to Calendar
        • Create New Event
        • Create Reminder
        • Create Transfer Request
        • Custom API Action
        • Delete Event
        • Is Free Slot
        • Move Event
        • Read All Calendars
        • Read Available Time Slots
        • Read Event Information
        • Read Transfer Request
        • Remove User from Calendar
        • Search Events
        • Search Rooms
        • Search Transfer Request
        • Update Event
    • Google Cloud Functions
      • Authorization
      • Actions
        • Custom API Action
        • Invoke Cloud Function
        • Invoke Service Function
    • Google Docs
      • Authorization
      • Guidance for Google Docs connector
      • Actions
        • Create Document
        • Custom API Action
        • Read Document
        • Update Document
    • Google Drive
      • Authorization
      • Set up transfer of ownership
      • Events
        • File Created
        • File Updated
        • Folder Created
        • Folder Updated
        • New Comment
      • Actions
        • Add Comment to File
        • Copy File
        • Create Folder
        • Create Permission
        • Create Transfer Request
        • Custom API Action
        • Delete File
        • Download File
        • Get File Permissions
        • Move File or Folder
        • Read File Info
        • Read Folder Info
        • Read Transfer Request
        • Search Files
        • Search Folders
        • Search Transfer Request
        • Update File
        • Update File Info
        • Update File Permission
        • Update Folder Info
        • Upload File
    • Google Sheets
      • Authorization
      • Known issues and limitations
      • Events
        • New Row
      • Actions
        • Clear Row
        • Copy Spreadsheet
        • Copy Worksheet
        • Create Row
        • Create Spreadsheet
        • Create Worksheet
        • Custom API Action
        • Delete Rows
        • Delete Spreadsheet
        • Delete Worksheet
        • Read All Rows
        • Read All Spreadsheets
        • Read Cell
        • Read Column
        • Read Row
        • Read Spreadsheet Info
        • Read Worksheet Info
        • Search Column
        • Update Cell
        • Update Row
        • Update Worksheet Info
    • Google Workspace Admin
      • Authorization
      • Actions
        • Activate User
        • Add Address to User
        • Add Email to User
        • Add External ID to User
        • Add IM to User
        • Add Organization to User
        • Add Phone to User
        • Add Relation to User
        • Add User to Group
        • Add Website to User
        • Assign License to User
        • Create Group
        • Create Role Assignment
        • Create User
        • Create User Alias
        • Custom API Action
        • Suspend User
        • Delete Group
        • Delete Role Assignment
        • Delete User
        • Delete User Access Token
        • Delete User Alias
        • Delete User ASP
        • Delete User Device
        • Get All Licenses
        • Invalidate User Verification Code
        • List Group Members
        • List Roles
        • Make User Admin
        • Perform Device Action
        • Read All Groups
        • Read All Organizational Units
        • Read All User Access Tokens
        • Read All User ASPs
        • Read All User Devices
        • Read All User Groups
        • Read All Verification Codes
        • Read Group
        • Read Group Settings
        • Read User
        • Read User Alias
        • Read User Licenses
        • Remove User from Group
        • Search Groups
        • Search Role Assignments
        • Search Users
        • Sign Out User
        • Turn Off MFA
        • Unassign License from User
        • Update Group
        • Update Group Settings
        • Update User
    • Greenhouse
      • Authorization
      • Actions
        • Add User Email Address
        • List Candidates
        • List Users
        • Read Candidate
        • Read User
        • Update Candidate
        • Update User
    • Harmony SASE
      • Authorization
      • Revoke Token
      • Actions
        • Add member to group
        • Create group
        • Create member
        • Custom API action
        • Delete group
        • Delete member
        • List groups
        • Read member
        • Remove member from group
        • Search members
    • HubSpot CRM
      • Authorization
      • Actions
        • Associate Contact with Another Object
        • Create Contact
        • Custom API Action
        • Delete Contact
        • Read Company
        • Read Contact
        • Remove Association between Contact and Another Object
        • Search Companies
        • Search Contacts
        • Update Contact
    • IBM Cloud
      • Authorization
      • Actions
        • Add Member to Access Group
        • Create Access Group
        • Custom API Action
        • Delete Access Group
        • Delete Member from Access Group
        • Invite User to Account
        • List Access Group Members
        • Read Access Group
        • Read User
        • Remove User from Account
        • Search Access Groups
        • Search Users
        • Update Access Group
    • Jamf Pro Classic API
      • Authorization
      • Actions
        • Add Computer to Static Computer Group
        • Add Mobile Device to Static Mobile Device Group
        • Add User to Static User Group
        • Create Department
        • Create Static Computer Group
        • Create Static Mobile Device Group
        • Create Static User Group
        • Create User
        • Custom API Action
        • Delete Computer Group
        • Delete Mobile Device Group
        • Delete User
        • Delete User Group
        • Read Computer
        • Read Computer Group
        • Read Department
        • Read Mobile Device
        • Read Mobile Device Group
        • Read User
        • Read User Group
        • Remove Computer from Static Computer Group
        • Remove Mobile Device from Static Mobile Device Group
        • Remove User from Static User Group
        • Send Computer MDM Command
        • Send Mobile Device MDM Command
        • Update User
    • Jira
      • Authorization
      • Events
        • Issue Deleted
        • Issue Transitioned
        • Issue Updated
        • New Issue
      • Actions
        • Create Issue
        • Custom API Action
        • Delete Issue
        • List Issues
        • Read Issue
        • Search Issues
        • Search Issues by JQL
        • Transition Issue
        • Update Issue
    • Jira Service Management
      • Authorization
      • Custom fields
      • Events
        • New Request
        • New Request in Queue
        • Request Updated
      • Actions
        • Create a Request
        • Custom API Action
        • Read Queue Requests
        • Read Request
        • Subscribe to Request
        • Transition Request
        • Unsubscribe from Request
    • KnowBe4
      • Authorization
      • Actions
        • Custom API Action
        • List Group Members
        • List Groups
        • List Users
        • Read Group
        • Read User
    • Lucidchart
      • Authorization
      • Revoke token
      • Actions
        • Add users to group
        • Add users to team
        • Archive team
        • Create group
        • Create team
        • Create User
        • Custom API action
        • Delete group
        • List groups
        • List teams
        • List users on team
        • Read group
        • Read team
        • Read user
        • Remove users from group
        • Remove users from team
        • Restore team
        • Search users
        • Update group
        • Update user
    • Marketo
      • Authorization
      • Actions
        • Add Leads to List
        • Create Lead
        • Custom API Call
        • Read Lead
        • Read List
        • Read List Leads
        • Search Leads
        • Search Lists
        • Update Lead
    • Azure Active Directory
      • Authorization
      • Guidance for Azure Active Directory connector
      • Events
        • Group Created
        • Group Deleted
        • Group Member Added
        • Group Member Removed
        • Group Updated
        • User Created
        • User Deleted
        • User Updated
      • Actions
        • Add User to Group
        • Assign License to User
        • Assign Role to User
        • Assign User Manager
        • Create Cloud User
        • Create Contact
        • Create Group
        • Create Guest User
        • Custom API Action
        • Delete Group
        • Delete User
        • Disable User Account
        • Enable User Account
        • Get Licenses
        • List Contact Folders
        • Read Directory Roles
        • Read Group
        • Read User
        • Read User Manager
        • Read User Roles
        • Remove License from User
        • Remove User from Group
        • Revoke User Sign In Sessions
        • Search Contacts
        • Search Groups
        • Search Group Members
        • Search Users
        • Unassign Role from User
        • Update Group
        • Update User
    • Microsoft Teams
      • Authorization
      • Guidance for Microsoft Teams connector
      • Actions
        • Add Member
        • Add Member to Channel
        • Create Channel
        • Create Chat
        • Create Team from Group
        • Custom API Action
        • List Channel Members
        • List Members
        • Read Channel
        • Read Team
        • Remove Member
        • Remove Member from Channel
        • Search Channels
        • Search Chats
        • Search Teams
        • Send Message in Chat
        • Send Message to Channel
    • Mimecast
      • Authorization
      • Actions
        • Add profile group member
        • Create profile group
        • Create user
        • Custom API action
        • Delete profile group
        • Search profile groups
        • List profile group members
        • List users
        • Read user
        • Remove profile group member
        • Update profile group
        • Update user
    • Mixpanel
      • Authorization
      • Actions
        • Create Track Event
        • Create Profile
        • Custom API Action
        • Delete Profile
        • Read Profile
        • Search Track Events
        • Search Profiles
        • Update Profile
    • monday.com
      • Authorization
      • Actions
        • Add User to Board
        • Archive Board
        • Create Board
        • Custom API Action
        • Delete Board
        • Delete User from Board
        • List Boards
        • Read Board
        • Read User
        • Search Users
    • Netskope
      • Authorization
      • Revoke Token
      • Actions
        • Add User to Group
        • Create Group
        • Create User
        • Custom API Action
        • Delete Group
        • Delete User
        • Read Group
        • Read User
        • Remove User from Group
        • Update User
    • NetSuite
      • Authorization
      • Actions
        • Create Employee
        • Custom API Action
        • Delete Employee
        • Read Employee
        • Search Employees
        • Update Employee
    • Office 365 Calendar
      • Authorization
      • Guidance for Office 365 Calendar connector
      • Actions
        • Create Event
        • Custom API Action
        • Delete Event
        • List Calendars
        • Read the Event
        • Search Events
        • Search Rooms
        • Update Event
    • Office 365 Mail
      • Authorization
      • Guidance for Office 365 Mail connector
      • Revoke connection
      • Events
        • New Email
      • Actions
        • Custom API Action
        • Delete Email
        • Download Message Attachment
        • Forward Email
        • Get Message
        • Reply to Email
        • Search Emails
        • Send Email
    • Okta Devices
      • Authorization
      • Scopes for Okta Devices connector cards
      • Events
        • Authenticator Activated
        • Authenticator Deactivated
        • Device Activated
        • Device Added to User
        • Device Deactivated
        • Device Deleted
        • Device Enrolled
        • Device Removed from User
        • Device Suspended
        • Device Unsuspended
        • MFA Preregistration Initiated
        • Phone Verification Call Sent
        • Phone Verification SMS Sent
        • User MFA
        • User MFA Factor Activated
        • User MFA Factor Deactivated
        • User MFA Factor Reset All
        • User MFA Factor Suspended
        • User MFA Factor Unsuspended
      • Actions
        • Activate Device
        • Custom API Action
        • Deactivate Device
        • Delete Device
        • List Device Users
        • Read Device
        • Search Devices
        • Suspend Device
        • Unsuspend Device
    • OIG
      • Authorization
      • Events
        • Access certification decision submitted
        • Access request created
        • Access request resolved
      • Actions
        • Activate request condition
        • Add entitlement value
        • Create bundle
        • Create entitlement
        • Create request
        • Create request condition
        • Create resource campaign
        • Create user campaign
        • Custom API action
        • Launch campaign
        • Search requests
        • List requestable access levels
        • List requestable resources
        • List request sequences
        • Read request condition
        • Reassign review
        • Remove entitlement value
        • Retrieve review
        • Search entitlement bundles
        • Search entitlements
        • Search entitlement values
        • Search reviews
        • Update request condition
    • Okta ITP
      • Authorization
      • Events
        • Policy Reevaluate Auth Failed
        • Universal Logout
        • User Risk Detected
      • Actions
        • Custom API Action
        • Global Token Revocation
        • Retrieve User Risk
        • Upsert User Risk
    • Okta Privileged Access
      • Authorization
      • Guidance for Okta Privileged Access connector
      • Actions
        • Create Access Report
        • Create Project
        • Create Project Enrollment Token
        • Create Resource Group
        • Custom API Action
        • Delete Project
        • Delete Resource Group
        • Delete Server
        • Download Access Report
        • Find Group By Name
        • Find Groups
        • Find Project By Name
        • Find Resource Group By Name
        • Find Servers
        • Find Service User By Username
        • Find Users
        • List Access Reports
        • List Enrolled Servers in Project
        • List Project Enrollment Tokens
        • List Resource Group Projects
        • List Resource Groups
        • List Service Accounts
        • Retrieve Access Report
        • Update Resource Group
    • Okta Realms
      • Authorization
      • Scopes for Okta Realms connector cards
      • Actions
        • Create Realm
        • Create Realm User
        • List Realm Users
        • Read Realm
        • Search Realms
        • Update Realm
        • Update Realm for User
    • Okta
      • Authorization
      • Guidance for Okta connector
      • Scopes for Okta connector cards
      • Events
        • Access Certification Decision Submitted
        • Access Request Created
        • Access Request Resolved
        • API Token Created
        • API Token Revoked
        • Application Activated
        • Application Created
        • Application Deactivated
        • Application Deleted
        • Application Updated
        • Application Policy Sign On Access Denied
        • Group Created
        • Group Deleted
        • Group Privilege Granted
        • Group Privilege Revoked
        • Group Profile Updated
        • Group Push Failed
        • Import Group Created
        • Import Group Deleted
        • Import Process Completed
        • Import Roadblock
        • Import Started
        • OAuth2 App Consent Granted
        • Org Rate Limit Violation
        • Org Rate Limit Warning
        • Policy Activated
        • Policy Deactivated
        • Policy Rule Activated
        • Policy Rule Added
        • Policy Rule Deactivated
        • Policy Rule Deleted
        • Policy Rule Updated
        • Policy Updated
        • Suspicious Activity Reported
        • Security Breached Credential Detected
        • User Account Locked
        • User Account Unlocked
        • User Account Unlocked by Admin
        • User Activated
        • User Added to Group
        • User App Password Changed
        • User Assigned to Application
        • User Created
        • User Deactivated
        • User Deleted
        • User Okta Password Reset by an Admin
        • User Okta Password Updated
        • User Okta Profile Updated
        • User Password Imported
        • User Privilege Granted
        • User Privilege Revoked
        • User Reactivated
        • User Removed from Group
        • User Signed In Attempt
        • User Signed Out
        • User Suspended
        • User Synced in External Application
        • User Unassigned from Application
        • User Unsuspended
      • Actions
        • Activate Application
        • Activate Group Rule
        • Activate User
        • Add User to Group
        • Assign Group to Application
        • Assign User to Application for SSO
        • Assign User to Application for SSO and Provisioning
        • Bulk User Import
        • Clear User Sessions
        • Create Group
        • Create Group Rule
        • Create an Import Session
        • Create User
        • Custom API Action
        • Deactivate Application
        • Deactivate Group Rule
        • Deactivate User
        • Delete Application
        • Delete Group
        • Delete Group Rule
        • Delete Import Session
        • Delete Linked Object Value
        • Delete User
        • Find Users
        • Get Assigned User for Application
        • Get Associated Linked Object Values
        • Get Primary Linked Object Value
        • Get Users Groups
        • List Applications Assigned to Group
        • List Applications Assigned to User
        • List Groups Assigned to Application
        • List Group Members
        • List Import Sessions
        • List Users Assigned to Application
        • List Users With Filter
        • List Users With Search
        • Map Profile Source Attributes
        • Read Application
        • Read Assigned Group for Application
        • Read Group
        • Read Group Rule
        • Read User
        • Remove Group from Application
        • Read Import Session
        • Remove User from Application
        • Remove User from Group
        • Reset Password
        • Search Applications
        • Search Group Rules
        • Search Groups
        • Search System Logs
        • Set Linked Object Value for Primary
        • Suspend User
        • Trigger Import Session
        • Unsuspend User
        • Update Application Credentials for an Assigned User
        • Update Application Profile for Assigned User
        • Update Group
        • Update Group Rule
        • Update User
    • OneDrive
      • Authorization
      • Guidance for OneDrive connector
      • Events
        • Files or Folder Updated
      • Actions
        • Create Folder
        • Create Organization Sharing Link
        • Create Recipients Sharing Link
        • Custom API Action
        • Delete Permission
        • Download File
        • List Permissions
        • Move File or Folder
        • Read File or Folder
        • Search Files or Folders
        • Upload File
    • OneTrust
      • Authorization
      • Actions
        • Create Data Subject
        • Create User
        • Custom API Action
        • Delete User
        • Read All Custom Preferences
        • Read Custom Preference
        • Read Data Subject
        • Read User
        • Search Data Subjects
        • Search Users
        • Update Data Subject
        • Update User
    • OpenAI
      • Authorization
      • Actions
        • Create Chat Completion
        • Custom API Action
    • Opsgenie
      • Authorization
      • Actions
        • Add Team Member
        • Build Participant Object
        • Build Time Restriction Object
        • Create Schedule
        • Create Schedule Rotation
        • Create Team
        • Create User
        • Custom API Action
        • Delete Schedule
        • Delete Schedule Rotation
        • Delete Team
        • Delete User
        • List Teams
        • Read On-Call Participants
        • Read Schedule
        • Read Schedule Rotation
        • Read Team
        • Read User
        • Remove Team Member
        • Search Users
        • Update Schedule Rotation
        • Update User
    • Oracle HCM
      • Authorization
      • Actions
        • Read Worker
        • Search Workers
        • Update Worker
    • Oracle IAM
      • Authorization
      • Actions
        • Add user to group
        • Create group
        • Create user
        • Custom API action
        • Delete group
        • Delete user
        • Read group
        • Read user
        • Remove user from group
        • Search groups
        • Search users
        • Update group
        • Update user
    • PagerDuty
      • Authorization
      • Revoke token
      • Events
        • New Incident
      • Actions
        • Add User to Team
        • Build Restriction Object
        • Build Schedule Layer
        • Build User Object
        • Create Incident
        • Create User
        • Custom API Action
        • Delete User
        • List Team Members
        • Read Escalation Policy
        • Read Incident
        • Read Schedule
        • Read Service
        • Read Team
        • Read User
        • Read Users On Call
        • Remove User from Team
        • Search Schedules
        • Search Teams
        • Search User
        • Update Incident
        • Update Schedule
        • Update User
    • Personio
      • Authorization
      • Actions
        • List Employees
        • Read Employee
        • Update Employee
    • Proofpoint
      • Authorization
      • Events
        • New Permitted Malicious Click
      • Actions
        • Custom API Action
        • Read Compromised User
        • Read Delivered Malicious Messages
        • Read Permitted Malicious Clicks
    • Salesforce
      • Authorization
      • Events
        • New Record
        • Record Deleted
        • Record Updated
      • Actions
        • Activate User
        • Build Record Object
        • Create Multiple Records
        • Create Record
        • Create User
        • Custom API Action
        • Deactivate User
        • Execute Query
        • Freeze User
        • Get All Feature Licenses
        • Get All Permission Set Licenses
        • Get All Permission Sets
        • Get All Profiles
        • Get All Public Groups
        • Get All Roles
        • Get Multiselect Values - Custom Fields
        • List User Permission Assignments
        • Read Record
        • Read Related Records
        • Read User
        • Remove User Entitlements
        • Search Permission Set Groups
        • Search Records
        • Search Users
        • Transfer Leads
        • Unfreeze User
        • Update Record
        • Update User
        • Upload Attachment
        • Upload Document
    • Sap Analytics Cloud
      • Authorization
      • Actions
        • Create Team
        • Create User
        • Custom API Action
        • Delete Team
        • Delete User
        • List Teams
        • Search Users
        • Read Team
        • Read User
        • Update Team
        • Update User
    • SendGrid
      • Authorization
      • Actions
        • Add Contact to List
        • Create Contact
        • Create List
        • Create Single Send
        • Custom API Action
        • Delete Contact
        • Read Contact
        • Read Contact Job
        • Schedule Single Send
        • Search Contacts
        • Send Email
        • Update Contact
    • SentinelOne
      • Authorization
      • Revoke Token
      • Actions
        • Create User
        • Custom API Action
        • Delete User
        • Read User
        • Search Roles
        • Search Users
        • Update User
    • ServiceNow
      • Authorization
      • Guidance for ServiceNow connector
      • Events
        • New Incident
        • Updated Incident
      • Actions
        • Add User to Group
        • Create Group
        • Create Incident
        • Create Request
        • Create Task
        • Create User
        • Custom API Action
        • Deactivate User
        • Delete Group
        • Delete Incident
        • Delete Request
        • Delete Task
        • Delete User
        • Download Attachment
        • Read Group
        • Read Incident
        • Read Request
        • Read Task
        • Read User
        • Read Users in Group
        • Remove User from Group
        • Search Groups
        • Search Incidents
        • Search Requests
        • Search Tasks
        • Search Users
        • Update Group
        • Update Incident
        • Update Request
        • Update Task
        • Update User
        • Upload Attachment
    • SFTP
      • Authorization
      • Guidance for SFTP connector
      • Actions
        • Download File
        • Write File
        • Upload File
    • Shopify
      • Authorization
      • Actions
        • Add Address to Customer
        • Create Customer
        • Custom API Action
        • Delete Customer
        • Read Customer
        • Search Customers
        • Update Customer
    • Slack
      • Authorization
      • Events
        • New Channel Created
        • New Message in Channel
        • New Message in Private Channel
        • New Pinned Message
        • Slash Command
      • Actions
        • Archive Channel
        • Create Channel
        • Custom API Action
        • Get Users in Channel
        • Invite User to Channel
        • Join Channel
        • Leave Channel
        • Read Message History
        • Read User
        • Remove User from Channel
        • Rename Channel
        • Respond to Command - Real Time
        • Respond to Command - Delayed
        • Search Channels
        • Send Direct Message
        • Send Ephemeral Message
        • Send File to Channel
        • Send File to User
        • Send Message to Channel
    • Slack Admin
      • Authorization
      • Actions
        • Activate User
        • Add Users to Group
        • Create User
        • Custom API Action
        • Deactivate User
        • Read Group
        • Read User
        • Remove Users from Group
        • Search Groups
        • Search User
        • Update User
    • SmartHR
      • Authorization
      • Actions
        • List Business Establishments
        • List Custom Field Groups
        • List Custom Fields
        • List Departments
        • List Employment Types
        • List Job Titles
        • Read Employee
        • Search Employees
        • Update Employee
    • SmartRecruiters
      • Authorization
      • Actions
        • Add User to Group
        • Create User
        • Custom API Action
        • Deactivate User
        • Read User
        • Remove User from Group
        • Search Groups
        • Search Users
        • Update User
    • Smartsheet
      • Authorization
      • Guidance for Smartsheet connector
      • Events
        • New Row - Webhook
        • Row Updated - Webhook
      • Actions
        • Add Row
        • Add Rows
        • Add User to Group
        • Add User to Organization
        • Build Row Object
        • Comment on Row
        • Copy Row
        • Custom API Action
        • Delete Rows
        • List Groups
        • Move Row
        • Read Row
        • Read Row by Number
        • Read User
        • Remove User from Group
        • Remove User from Organization
        • Search Users
        • Send Row
        • Update User
        • Update Row
        • Update Rows
    • Snowflake
      • Authorization
      • Actions
        • Create role
        • Create user
        • Custom API action
        • Drop role
        • Drop user
        • Grant role to user
        • Read user
        • Revoke role from user
        • Search roles
        • Search users
        • Update user
    • Splunk Enterprise Security
      • Authorization
      • Actions
        • Create User
        • Custom API Action
        • Delete User
        • List Roles
        • Read User
        • Search Users
        • Update User
    • Tableau Cloud
      • Authorization
      • Actions
        • Add User to Group
        • Add User to Site
        • Custom API Action
        • List Group Members
        • List User Groups
        • Read User
        • Remove User from Group
        • Remove User from Site
        • Search Groups
        • Search Users
    • Tenable Vulnerability Management
      • Authorization
      • Revoke Token
      • Actions
        • Add User to Group
        • Change User Password
        • Create Group
        • Create User
        • Custom API Action
        • Delete Group
        • Delete User
        • Get User Role
        • List Groups
        • List Roles
        • List Users
        • List Users in Group
        • Read User
        • Remove User From Group
        • Update Group
        • Update User
        • Update User Role
    • Trend Micro
      • Authorization
      • Revoke token
      • Actions
        • Custom API action
        • Delete account
        • Invite user
        • List roles
        • Read account
        • Search accounts
        • Update user
    • Workday
      • Authorization
      • Actions
        • List Multi Instance Worker Custom Objects
        • List Worker Organizations
        • Read Multi Instance Worker Custom Object
        • Read Single Instance Worker Custom Object
        • Read Worker
        • Search Work Addresses
        • Search Work Emails
        • Search Work Phones
        • Search Workers
        • Update Work Address
        • Update Work Email
        • Update Work Phone
    • Zendesk
      • Authorization
      • Events
        • New Comment On Ticket
        • New Ticket
        • Updated Organization
        • Updated Ticket
      • Actions
        • Add User to Group
        • Add User to Organization
        • Comment on Ticket
        • Create Ticket
        • Create User
        • Custom API Action
        • Delete User
        • Download Attachment
        • List Group Members
        • Read Group
        • Read Organization
        • Read Ticket
        • Read Ticket Attachments
        • Read User
        • Remove User from Group
        • Remove User from Organization
        • Search Groups
        • Search Organizations
        • Search Tickets
        • Search Users
        • Update Organization
        • Update Ticket
        • Update User
        • Upload Attachment
    • Zoho Mail
      • Authorization
      • Actions
        • Add Email Alias
        • Add User to Organization
        • Custom API Action
        • Disable User Account
        • Enable User Account
        • List Users
        • Read User
        • Remove Email Alias
        • Send Email
    • Zoom
      • Authorization
      • Actions
        • Activate User
        • Add User to Group
        • Create User
        • Custom API Action
        • Deactivate User
        • Delete User
        • Read User
        • List Group Members
        • Remove User from Group
        • Read Group
        • Search Groups
        • Search Users
        • Update User
    • Third-party built connectors
      • Addigy
      • Darwinbox
      • Cisco Identity Intelligence
      • Jamf Pro API
      • Kandji
      • Miro Administration
      • Miro User Management
      • Pendo
      • Recorded Future Identity Intelligence
      • SecureFlag
      • Secure Code Warrior
      • Yubico
  • Functions
    • API Connector
      • Authenticate with API Connector cards
      • HTTP Errors
      • API Endpoint
      • Close
      • Delete
      • Get
      • Paginate
      • Paginate: set a maximum page index
      • Paginate: API endpoint
      • Patch
      • Post
      • Put
      • Raw Request
    • Branching
      • Assign If
      • Continue If
      • If/Else
      • If/ElseIf
      • Lookup
    • Date & Time
      • Add
      • Convert
      • Date to Text
      • Difference
      • Epoch
      • ISO
      • Now
      • Subtract
      • Text to Date
      • UNIX
    • Encryption
      • AES
      • Decrypt
      • Encrypt
      • Hash
      • HMAC
      • MD5
      • SHA1
      • SHA256
      • Sign
    • Error Handling
      • If Error
      • Return Error
      • Return Error If
    • File
      • Download
      • Use the Download function card in a flow
      • Info
      • Read metadata
      • Multipart Upload
      • File download
      • File upload
      • Upload
      • Use the Upload function card in a flow
    • Flow Control
      • Assign
      • Call Flow
      • Call Flow Async
      • Cursor
      • Pause
      • Pause Raw
      • Repeat
      • Return
      • Return Raw
      • Type Of
      • Wait For
      • Wait Until
    • Flows
      • Export Flow
    • Folders
      • Export Folder
    • JSON
      • Parse
        • Parse Example
      • Stringify
    • JWT
      • Decode
      • Sign
      • Verify
    • List
      • Add to End
      • Add to Front
      • At
      • Collapse
      • Combine All
      • Construct
      • Difference
      • Filter
      • Filter Custom
      • Find
      • Find Custom
      • Flatten
      • For Each
      • For Each - Ignore Errors
      • Get First Item
      • Get Last Item
      • Group By
      • Includes
      • Index By
      • Intersection
      • Length
      • List to Text
      • Map
      • Merge
      • Pluck
      • Reduce
      • Remove Duplicates
      • Reverse
      • Sample
      • Slice
      • Sort
      • Sort Custom
      • Split
      • Statistics
      • Sum
      • Swap
      • Truncate
      • Union (Combine Unique)
      • Unique Custom
      • XOR
      • Zip
    • Number
      • Absolute Value
      • Add
      • Divide
      • Exponent
      • Factorial
      • Formula
      • Increment
      • Larger
      • Log
      • Multiply
      • Percentage
      • Power
      • Random Integer
      • Remainder
      • Round
      • Round Decimal Places
      • Round Down
      • Round Up
      • Sign
      • Smaller
      • Square Root
      • Subtract
    • Object
      • Clear Empty
      • Collapse
      • Construct
      • Filter
      • For Each
      • Get
      • Get Multiple
      • Keys
      • Map
      • Map to List
      • Merge
      • Move
      • Set
      • Size
      • Split
      • Unset
      • Unzip
      • Values
      • Zip
    • Tables
      • Clear Table
      • Create Row
      • Delete Row
      • Export to CSV
      • Import From CSV
      • Read Row
      • Read Table
      • Search Rows
      • Update Row
    • Text
      • At
      • Base64
      • Base64 Decode
      • Compose
      • Concatenate
      • Find
      • Find Email
      • Find Last
      • Find Pattern
      • Length
      • Random
      • Replace
      • Replace Patterns
      • Split
      • Text Segment
      • To Lower Case
      • To Upper Case
      • Trim
      • Unique ID
    • True-False
      • All False?
      • And
      • Any False?
      • Compare
      • Expression
      • Not
      • Or
      • Or (Exclusive)
      • XNOR
    • URL
      • Decode Component
      • Decode Query
      • Encode Component
      • Encode Query
      • Format
      • Parse
      • Special characters and delimiters
    • XML
      • Build
      • Parse
  • Templates
    • Available Workflows templates
    • Add a template to your Workflows environment
  • Tutorials
    • User Provisioning to Salesforce
      • Step 0: Before you begin
      • Step 1: Access the flow
      • Step 2: Learn about the flow template
      • Step 3: Trigger the flow in Okta
      • Step 4: Customize the flow
      • Step 5: Save and test your custom flow
    • Basic Notifications Flow
      • Step 1: Build the flow
      • Step 2: Trigger the flow
    • Basic Reporting Flow
      • Step 0: Before you begin
      • Step 1: Build the flow
      • Step 2: Add a table to the flow
      • Step 3: Add an Excel spreadsheet to the flow
      • Step 4: Trigger the flow
    • Import Users from a Flat File
      • Step 0: Before you begin
      • Step 1: Build the parent flow
      • Step 2: Build the helper flow
      • Step 3: Connect the flows
      • Step 4: Designate objects to import
      • Step 5: Run and test the flow
    • Create Unique Identities with an Inline Hook
      • Step 1: Create email addresses
      • Step 2: Create an If/Else decision branch
      • Step 3: Create the Else branch
      • Step 4: Trigger the flow
    • Time-based Actions
      • Step 0: Before you begin
      • Step 1: Create a table
      • Step 2: Build a user creation flow
      • Step 3: Calculate term dates
      • Step 4: Create a row in the table
      • Step 5: Send a Slack message
      • Step 6: Build a flow to activate users
      • Step 7: Build a helper flow
      • Step 8: Send a user activated Slack message
      • Step 9: Update the row in your table
      • Step 10: Trigger the flow with Postman
    • Make API Requests, Part 1
      • Step 0: Before you begin (with video)
      • Step 1: Create a connection setting
      • Step 2: Create a raw request
      • Step 3: Populate values dynamically into a Raw Request card
      • Step 4: Test the flow
      • Step 5: Create the output
    • Make API Requests, Part 2
      • Step 1: Reauthorize the HTTP connection
      • Step 2: Test the flow
    • Make API Requests, Part 3
      • Step 1: Parse the results
      • Step 2: Add a helper flow
      • Step 3: Connect the flows
      • Step 4: Test the flow
  • Use cases
    • Provision and deprovision
    • Change time- and context-based identity entitlement
    • Report lifecycle activity
    • Send notifications for lifecycle activity
    • Sync customer identities with CRM and marketing tools
    • Send custom end-user notifications
    • Perform identity proofing with a third-party service
    • Take action on user identities with time-based conditions
  • Best practices and system limits
    • Best practices for building flows
    • Flow limits
    • Flow endpoint security limits
    • Workflows system limits
    • Workflows known issues
    • Common Workflows errors
    • Data deletion for Workflows
  • Resources
    • Enable self-service features
  1. Best practices and system limits

Learn about Workflows best practices and limits

Understand supported use cases, guidance for good Workflows design practice, and system limitations.

  • Best practices for building flows
  • Flow limits
  • Workflows system limits
  • Workflows known issues
  • Common Workflows errors
  • Data deletion for Workflows

© Okta, Inc. All Rights Reserved. Various trademarks held by their respective owners.

Top