Create OKTA Users using REST - #JoelKallmanDay

Using the Social Signon capabilities in APEX, you can authenticate your users with a wide range of identity providers such as OKTA, Auth0 or Azure/MS365.  We've blogged about that here: its-time-for-a-new-name-for-apex-social-sign-in.html

But what if you need to maintain those users from APEX - for example, to enroll a new user?   That's where Oracle APEX's built-in APEX_WEB_SERVICE package comes in handy.   This blog post shows you how to achieve this.

Step 1 - Get an OKTA account

In order to use the Okta REST API you'll need an Okta account with a given Okta subdomain, eg "dev-313934".    You'll also need to create an API token on this account, which is used for authentication with the REST API, eg "00h5I0GvKUa41234234q80JTds6A21342134".

Step 2 - Review the OKTA APIs

You can create a user with either one or two REST API calls:

Code Editor

{okta_domain} is your Okta domain and {user_id} is the internal user ID of the specific user, returned by the first REST API call.

As other REST API calls depend upon this, you'll need a mapping table between the user ID e-mail address and Okta user ID (see later).
​
The REST API returns HTTP 200 OK for success, HTTP 400 Bad Request for errors with JSON details about the error.

You cannot delete a given user in one step, the user needs to be deactivated first. ​

​Once again, {okta_domain} is your Okta domain and {user_id} is the internal user ID of the specific user, returned by the create user REST API call.
The REST API returns HTTP 200 OK/204 No Content for success, HTTP 400 Bad Request for errors with JSON details about the error.

Step 3 - Implement in PL/SQL

The REST API calls can then be wrapped up in a PL/SQL package using APEX_WEB_SERVICE.   

  

Step 4 - Test Your Implementation

Conclusion

APEX_WEB_SERVICE makes it simple to call REST APIs and integration your APEX apps with third party identity providers.

On #JoelKallmanDay, we remain grateful to Joel Kallman and the APEX team for the amazing Oracle product and community they built.