okta-mcp-server
Version:
Model Context Protocol (MCP) server for Okta API operations with support for bulk operations and caching
1,229 lines • 487 kB
TypeScript
import { z } from 'zod';
export declare const PolicyTypeSchema: z.ZodEnum<["PASSWORD", "OKTA_SIGN_ON", "MFA_ENROLL", "IDP_DISCOVERY", "PROFILE_ENROLLMENT"]>;
export declare const PolicyStatusSchema: z.ZodEnum<["ACTIVE", "INACTIVE"]>;
export declare const PolicyRuleStatusSchema: z.ZodEnum<["ACTIVE", "INACTIVE"]>;
export declare const FactorTypeSchema: z.ZodEnum<["okta_verify", "okta_sms", "okta_voice", "okta_email", "google_otp", "fido_webauthn", "fido_u2f", "rsa_token", "symantec_vip", "duo", "hotp", "question"]>;
export declare const BasePolicySchema: z.ZodObject<{
name: z.ZodString;
description: z.ZodOptional<z.ZodString>;
priority: z.ZodOptional<z.ZodNumber>;
status: z.ZodDefault<z.ZodEnum<["ACTIVE", "INACTIVE"]>>;
system: z.ZodOptional<z.ZodBoolean>;
}, "strip", z.ZodTypeAny, {
name: string;
status: "ACTIVE" | "INACTIVE";
priority?: number | undefined;
description?: string | undefined;
system?: boolean | undefined;
}, {
name: string;
status?: "ACTIVE" | "INACTIVE" | undefined;
priority?: number | undefined;
description?: string | undefined;
system?: boolean | undefined;
}>;
export declare const PasswordComplexitySchema: z.ZodObject<{
minLength: z.ZodOptional<z.ZodNumber>;
minLowerCase: z.ZodOptional<z.ZodNumber>;
minUpperCase: z.ZodOptional<z.ZodNumber>;
minNumber: z.ZodOptional<z.ZodNumber>;
minSymbol: z.ZodOptional<z.ZodNumber>;
excludeUsername: z.ZodOptional<z.ZodBoolean>;
excludeFirstName: z.ZodOptional<z.ZodBoolean>;
excludeLastName: z.ZodOptional<z.ZodBoolean>;
excludeAttributes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
dictionary: z.ZodOptional<z.ZodObject<{
common: z.ZodOptional<z.ZodObject<{
exclude: z.ZodOptional<z.ZodBoolean>;
}, "strip", z.ZodTypeAny, {
exclude?: boolean | undefined;
}, {
exclude?: boolean | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
common?: {
exclude?: boolean | undefined;
} | undefined;
}, {
common?: {
exclude?: boolean | undefined;
} | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
minLength?: number | undefined;
minLowerCase?: number | undefined;
minUpperCase?: number | undefined;
minNumber?: number | undefined;
minSymbol?: number | undefined;
excludeUsername?: boolean | undefined;
excludeFirstName?: boolean | undefined;
excludeLastName?: boolean | undefined;
excludeAttributes?: string[] | undefined;
dictionary?: {
common?: {
exclude?: boolean | undefined;
} | undefined;
} | undefined;
}, {
minLength?: number | undefined;
minLowerCase?: number | undefined;
minUpperCase?: number | undefined;
minNumber?: number | undefined;
minSymbol?: number | undefined;
excludeUsername?: boolean | undefined;
excludeFirstName?: boolean | undefined;
excludeLastName?: boolean | undefined;
excludeAttributes?: string[] | undefined;
dictionary?: {
common?: {
exclude?: boolean | undefined;
} | undefined;
} | undefined;
}>;
export declare const PasswordAgeSchema: z.ZodObject<{
maxAgeDays: z.ZodOptional<z.ZodNumber>;
expireWarnDays: z.ZodOptional<z.ZodNumber>;
minAgeMinutes: z.ZodOptional<z.ZodNumber>;
historyCount: z.ZodOptional<z.ZodNumber>;
}, "strip", z.ZodTypeAny, {
maxAgeDays?: number | undefined;
expireWarnDays?: number | undefined;
minAgeMinutes?: number | undefined;
historyCount?: number | undefined;
}, {
maxAgeDays?: number | undefined;
expireWarnDays?: number | undefined;
minAgeMinutes?: number | undefined;
historyCount?: number | undefined;
}>;
export declare const PasswordLockoutSchema: z.ZodObject<{
maxAttempts: z.ZodOptional<z.ZodNumber>;
autoUnlockMinutes: z.ZodOptional<z.ZodNumber>;
showLockoutFailures: z.ZodOptional<z.ZodBoolean>;
userLockoutNotificationChannels: z.ZodOptional<z.ZodArray<z.ZodEnum<["EMAIL", "SMS"]>, "many">>;
}, "strip", z.ZodTypeAny, {
maxAttempts?: number | undefined;
autoUnlockMinutes?: number | undefined;
showLockoutFailures?: boolean | undefined;
userLockoutNotificationChannels?: ("EMAIL" | "SMS")[] | undefined;
}, {
maxAttempts?: number | undefined;
autoUnlockMinutes?: number | undefined;
showLockoutFailures?: boolean | undefined;
userLockoutNotificationChannels?: ("EMAIL" | "SMS")[] | undefined;
}>;
export declare const PasswordPolicySettingsSchema: z.ZodObject<{
password: z.ZodOptional<z.ZodObject<{
complexity: z.ZodOptional<z.ZodObject<{
minLength: z.ZodOptional<z.ZodNumber>;
minLowerCase: z.ZodOptional<z.ZodNumber>;
minUpperCase: z.ZodOptional<z.ZodNumber>;
minNumber: z.ZodOptional<z.ZodNumber>;
minSymbol: z.ZodOptional<z.ZodNumber>;
excludeUsername: z.ZodOptional<z.ZodBoolean>;
excludeFirstName: z.ZodOptional<z.ZodBoolean>;
excludeLastName: z.ZodOptional<z.ZodBoolean>;
excludeAttributes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
dictionary: z.ZodOptional<z.ZodObject<{
common: z.ZodOptional<z.ZodObject<{
exclude: z.ZodOptional<z.ZodBoolean>;
}, "strip", z.ZodTypeAny, {
exclude?: boolean | undefined;
}, {
exclude?: boolean | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
common?: {
exclude?: boolean | undefined;
} | undefined;
}, {
common?: {
exclude?: boolean | undefined;
} | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
minLength?: number | undefined;
minLowerCase?: number | undefined;
minUpperCase?: number | undefined;
minNumber?: number | undefined;
minSymbol?: number | undefined;
excludeUsername?: boolean | undefined;
excludeFirstName?: boolean | undefined;
excludeLastName?: boolean | undefined;
excludeAttributes?: string[] | undefined;
dictionary?: {
common?: {
exclude?: boolean | undefined;
} | undefined;
} | undefined;
}, {
minLength?: number | undefined;
minLowerCase?: number | undefined;
minUpperCase?: number | undefined;
minNumber?: number | undefined;
minSymbol?: number | undefined;
excludeUsername?: boolean | undefined;
excludeFirstName?: boolean | undefined;
excludeLastName?: boolean | undefined;
excludeAttributes?: string[] | undefined;
dictionary?: {
common?: {
exclude?: boolean | undefined;
} | undefined;
} | undefined;
}>>;
age: z.ZodOptional<z.ZodObject<{
maxAgeDays: z.ZodOptional<z.ZodNumber>;
expireWarnDays: z.ZodOptional<z.ZodNumber>;
minAgeMinutes: z.ZodOptional<z.ZodNumber>;
historyCount: z.ZodOptional<z.ZodNumber>;
}, "strip", z.ZodTypeAny, {
maxAgeDays?: number | undefined;
expireWarnDays?: number | undefined;
minAgeMinutes?: number | undefined;
historyCount?: number | undefined;
}, {
maxAgeDays?: number | undefined;
expireWarnDays?: number | undefined;
minAgeMinutes?: number | undefined;
historyCount?: number | undefined;
}>>;
lockout: z.ZodOptional<z.ZodObject<{
maxAttempts: z.ZodOptional<z.ZodNumber>;
autoUnlockMinutes: z.ZodOptional<z.ZodNumber>;
showLockoutFailures: z.ZodOptional<z.ZodBoolean>;
userLockoutNotificationChannels: z.ZodOptional<z.ZodArray<z.ZodEnum<["EMAIL", "SMS"]>, "many">>;
}, "strip", z.ZodTypeAny, {
maxAttempts?: number | undefined;
autoUnlockMinutes?: number | undefined;
showLockoutFailures?: boolean | undefined;
userLockoutNotificationChannels?: ("EMAIL" | "SMS")[] | undefined;
}, {
maxAttempts?: number | undefined;
autoUnlockMinutes?: number | undefined;
showLockoutFailures?: boolean | undefined;
userLockoutNotificationChannels?: ("EMAIL" | "SMS")[] | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
age?: {
maxAgeDays?: number | undefined;
expireWarnDays?: number | undefined;
minAgeMinutes?: number | undefined;
historyCount?: number | undefined;
} | undefined;
complexity?: {
minLength?: number | undefined;
minLowerCase?: number | undefined;
minUpperCase?: number | undefined;
minNumber?: number | undefined;
minSymbol?: number | undefined;
excludeUsername?: boolean | undefined;
excludeFirstName?: boolean | undefined;
excludeLastName?: boolean | undefined;
excludeAttributes?: string[] | undefined;
dictionary?: {
common?: {
exclude?: boolean | undefined;
} | undefined;
} | undefined;
} | undefined;
lockout?: {
maxAttempts?: number | undefined;
autoUnlockMinutes?: number | undefined;
showLockoutFailures?: boolean | undefined;
userLockoutNotificationChannels?: ("EMAIL" | "SMS")[] | undefined;
} | undefined;
}, {
age?: {
maxAgeDays?: number | undefined;
expireWarnDays?: number | undefined;
minAgeMinutes?: number | undefined;
historyCount?: number | undefined;
} | undefined;
complexity?: {
minLength?: number | undefined;
minLowerCase?: number | undefined;
minUpperCase?: number | undefined;
minNumber?: number | undefined;
minSymbol?: number | undefined;
excludeUsername?: boolean | undefined;
excludeFirstName?: boolean | undefined;
excludeLastName?: boolean | undefined;
excludeAttributes?: string[] | undefined;
dictionary?: {
common?: {
exclude?: boolean | undefined;
} | undefined;
} | undefined;
} | undefined;
lockout?: {
maxAttempts?: number | undefined;
autoUnlockMinutes?: number | undefined;
showLockoutFailures?: boolean | undefined;
userLockoutNotificationChannels?: ("EMAIL" | "SMS")[] | undefined;
} | undefined;
}>>;
recovery: z.ZodOptional<z.ZodObject<{
factors: z.ZodOptional<z.ZodObject<{
recovery_question: z.ZodOptional<z.ZodObject<{
status: z.ZodOptional<z.ZodEnum<["ACTIVE", "INACTIVE"]>>;
properties: z.ZodOptional<z.ZodObject<{
complexity: z.ZodOptional<z.ZodObject<{
minLength: z.ZodOptional<z.ZodNumber>;
}, "strip", z.ZodTypeAny, {
minLength?: number | undefined;
}, {
minLength?: number | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
complexity?: {
minLength?: number | undefined;
} | undefined;
}, {
complexity?: {
minLength?: number | undefined;
} | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
complexity?: {
minLength?: number | undefined;
} | undefined;
} | undefined;
}, {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
complexity?: {
minLength?: number | undefined;
} | undefined;
} | undefined;
}>>;
okta_email: z.ZodOptional<z.ZodObject<{
status: z.ZodOptional<z.ZodEnum<["ACTIVE", "INACTIVE"]>>;
properties: z.ZodOptional<z.ZodObject<{
recoveryToken: z.ZodOptional<z.ZodObject<{
tokenLifetimeMinutes: z.ZodOptional<z.ZodNumber>;
}, "strip", z.ZodTypeAny, {
tokenLifetimeMinutes?: number | undefined;
}, {
tokenLifetimeMinutes?: number | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
recoveryToken?: {
tokenLifetimeMinutes?: number | undefined;
} | undefined;
}, {
recoveryToken?: {
tokenLifetimeMinutes?: number | undefined;
} | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
recoveryToken?: {
tokenLifetimeMinutes?: number | undefined;
} | undefined;
} | undefined;
}, {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
recoveryToken?: {
tokenLifetimeMinutes?: number | undefined;
} | undefined;
} | undefined;
}>>;
okta_sms: z.ZodOptional<z.ZodObject<{
status: z.ZodOptional<z.ZodEnum<["ACTIVE", "INACTIVE"]>>;
}, "strip", z.ZodTypeAny, {
status?: "ACTIVE" | "INACTIVE" | undefined;
}, {
status?: "ACTIVE" | "INACTIVE" | undefined;
}>>;
okta_call: z.ZodOptional<z.ZodObject<{
status: z.ZodOptional<z.ZodEnum<["ACTIVE", "INACTIVE"]>>;
}, "strip", z.ZodTypeAny, {
status?: "ACTIVE" | "INACTIVE" | undefined;
}, {
status?: "ACTIVE" | "INACTIVE" | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
recovery_question?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
complexity?: {
minLength?: number | undefined;
} | undefined;
} | undefined;
} | undefined;
okta_sms?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
} | undefined;
okta_email?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
recoveryToken?: {
tokenLifetimeMinutes?: number | undefined;
} | undefined;
} | undefined;
} | undefined;
okta_call?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
} | undefined;
}, {
recovery_question?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
complexity?: {
minLength?: number | undefined;
} | undefined;
} | undefined;
} | undefined;
okta_sms?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
} | undefined;
okta_email?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
recoveryToken?: {
tokenLifetimeMinutes?: number | undefined;
} | undefined;
} | undefined;
} | undefined;
okta_call?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
} | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
factors?: {
recovery_question?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
complexity?: {
minLength?: number | undefined;
} | undefined;
} | undefined;
} | undefined;
okta_sms?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
} | undefined;
okta_email?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
recoveryToken?: {
tokenLifetimeMinutes?: number | undefined;
} | undefined;
} | undefined;
} | undefined;
okta_call?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
} | undefined;
} | undefined;
}, {
factors?: {
recovery_question?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
complexity?: {
minLength?: number | undefined;
} | undefined;
} | undefined;
} | undefined;
okta_sms?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
} | undefined;
okta_email?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
recoveryToken?: {
tokenLifetimeMinutes?: number | undefined;
} | undefined;
} | undefined;
} | undefined;
okta_call?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
} | undefined;
} | undefined;
}>>;
delegation: z.ZodOptional<z.ZodObject<{
options: z.ZodOptional<z.ZodObject<{
skipUnlock: z.ZodOptional<z.ZodBoolean>;
}, "strip", z.ZodTypeAny, {
skipUnlock?: boolean | undefined;
}, {
skipUnlock?: boolean | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
options?: {
skipUnlock?: boolean | undefined;
} | undefined;
}, {
options?: {
skipUnlock?: boolean | undefined;
} | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
password?: {
age?: {
maxAgeDays?: number | undefined;
expireWarnDays?: number | undefined;
minAgeMinutes?: number | undefined;
historyCount?: number | undefined;
} | undefined;
complexity?: {
minLength?: number | undefined;
minLowerCase?: number | undefined;
minUpperCase?: number | undefined;
minNumber?: number | undefined;
minSymbol?: number | undefined;
excludeUsername?: boolean | undefined;
excludeFirstName?: boolean | undefined;
excludeLastName?: boolean | undefined;
excludeAttributes?: string[] | undefined;
dictionary?: {
common?: {
exclude?: boolean | undefined;
} | undefined;
} | undefined;
} | undefined;
lockout?: {
maxAttempts?: number | undefined;
autoUnlockMinutes?: number | undefined;
showLockoutFailures?: boolean | undefined;
userLockoutNotificationChannels?: ("EMAIL" | "SMS")[] | undefined;
} | undefined;
} | undefined;
recovery?: {
factors?: {
recovery_question?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
complexity?: {
minLength?: number | undefined;
} | undefined;
} | undefined;
} | undefined;
okta_sms?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
} | undefined;
okta_email?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
recoveryToken?: {
tokenLifetimeMinutes?: number | undefined;
} | undefined;
} | undefined;
} | undefined;
okta_call?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
} | undefined;
} | undefined;
} | undefined;
delegation?: {
options?: {
skipUnlock?: boolean | undefined;
} | undefined;
} | undefined;
}, {
password?: {
age?: {
maxAgeDays?: number | undefined;
expireWarnDays?: number | undefined;
minAgeMinutes?: number | undefined;
historyCount?: number | undefined;
} | undefined;
complexity?: {
minLength?: number | undefined;
minLowerCase?: number | undefined;
minUpperCase?: number | undefined;
minNumber?: number | undefined;
minSymbol?: number | undefined;
excludeUsername?: boolean | undefined;
excludeFirstName?: boolean | undefined;
excludeLastName?: boolean | undefined;
excludeAttributes?: string[] | undefined;
dictionary?: {
common?: {
exclude?: boolean | undefined;
} | undefined;
} | undefined;
} | undefined;
lockout?: {
maxAttempts?: number | undefined;
autoUnlockMinutes?: number | undefined;
showLockoutFailures?: boolean | undefined;
userLockoutNotificationChannels?: ("EMAIL" | "SMS")[] | undefined;
} | undefined;
} | undefined;
recovery?: {
factors?: {
recovery_question?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
complexity?: {
minLength?: number | undefined;
} | undefined;
} | undefined;
} | undefined;
okta_sms?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
} | undefined;
okta_email?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
properties?: {
recoveryToken?: {
tokenLifetimeMinutes?: number | undefined;
} | undefined;
} | undefined;
} | undefined;
okta_call?: {
status?: "ACTIVE" | "INACTIVE" | undefined;
} | undefined;
} | undefined;
} | undefined;
delegation?: {
options?: {
skipUnlock?: boolean | undefined;
} | undefined;
} | undefined;
}>;
export declare const SignOnPolicySettingsSchema: z.ZodObject<{
signon: z.ZodOptional<z.ZodObject<{
access: z.ZodOptional<z.ZodEnum<["ALLOW", "DENY"]>>;
requireFactor: z.ZodOptional<z.ZodBoolean>;
factorMode: z.ZodOptional<z.ZodEnum<["1FA", "2FA"]>>;
factorPromptMode: z.ZodOptional<z.ZodEnum<["ALWAYS", "DEVICE", "SESSION"]>>;
rememberDeviceByDefault: z.ZodOptional<z.ZodBoolean>;
factorLifetime: z.ZodOptional<z.ZodNumber>;
session: z.ZodOptional<z.ZodObject<{
usePersistentCookie: z.ZodOptional<z.ZodBoolean>;
maxSessionIdleMinutes: z.ZodOptional<z.ZodNumber>;
maxSessionLifetimeMinutes: z.ZodOptional<z.ZodNumber>;
}, "strip", z.ZodTypeAny, {
usePersistentCookie?: boolean | undefined;
maxSessionIdleMinutes?: number | undefined;
maxSessionLifetimeMinutes?: number | undefined;
}, {
usePersistentCookie?: boolean | undefined;
maxSessionIdleMinutes?: number | undefined;
maxSessionLifetimeMinutes?: number | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
session?: {
usePersistentCookie?: boolean | undefined;
maxSessionIdleMinutes?: number | undefined;
maxSessionLifetimeMinutes?: number | undefined;
} | undefined;
access?: "ALLOW" | "DENY" | undefined;
requireFactor?: boolean | undefined;
factorMode?: "1FA" | "2FA" | undefined;
factorPromptMode?: "ALWAYS" | "DEVICE" | "SESSION" | undefined;
rememberDeviceByDefault?: boolean | undefined;
factorLifetime?: number | undefined;
}, {
session?: {
usePersistentCookie?: boolean | undefined;
maxSessionIdleMinutes?: number | undefined;
maxSessionLifetimeMinutes?: number | undefined;
} | undefined;
access?: "ALLOW" | "DENY" | undefined;
requireFactor?: boolean | undefined;
factorMode?: "1FA" | "2FA" | undefined;
factorPromptMode?: "ALWAYS" | "DEVICE" | "SESSION" | undefined;
rememberDeviceByDefault?: boolean | undefined;
factorLifetime?: number | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
signon?: {
session?: {
usePersistentCookie?: boolean | undefined;
maxSessionIdleMinutes?: number | undefined;
maxSessionLifetimeMinutes?: number | undefined;
} | undefined;
access?: "ALLOW" | "DENY" | undefined;
requireFactor?: boolean | undefined;
factorMode?: "1FA" | "2FA" | undefined;
factorPromptMode?: "ALWAYS" | "DEVICE" | "SESSION" | undefined;
rememberDeviceByDefault?: boolean | undefined;
factorLifetime?: number | undefined;
} | undefined;
}, {
signon?: {
session?: {
usePersistentCookie?: boolean | undefined;
maxSessionIdleMinutes?: number | undefined;
maxSessionLifetimeMinutes?: number | undefined;
} | undefined;
access?: "ALLOW" | "DENY" | undefined;
requireFactor?: boolean | undefined;
factorMode?: "1FA" | "2FA" | undefined;
factorPromptMode?: "ALWAYS" | "DEVICE" | "SESSION" | undefined;
rememberDeviceByDefault?: boolean | undefined;
factorLifetime?: number | undefined;
} | undefined;
}>;
export declare const MfaPolicySettingsSchema: z.ZodObject<{
factors: z.ZodOptional<z.ZodRecord<z.ZodEnum<["okta_verify", "okta_sms", "okta_voice", "okta_email", "google_otp", "fido_webauthn", "fido_u2f", "rsa_token", "symantec_vip", "duo", "hotp", "question"]>, z.ZodObject<{
status: z.ZodOptional<z.ZodEnum<["REQUIRED", "OPTIONAL", "NOT_SETUP", "INACTIVE"]>>;
enroll: z.ZodOptional<z.ZodEnum<["REQUIRED", "OPTIONAL", "NOT_SETUP"]>>;
}, "strip", z.ZodTypeAny, {
status?: "INACTIVE" | "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
enroll?: "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
}, {
status?: "INACTIVE" | "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
enroll?: "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
}>>>;
authenticators: z.ZodOptional<z.ZodArray<z.ZodObject<{
key: z.ZodString;
enroll: z.ZodOptional<z.ZodObject<{
self: z.ZodOptional<z.ZodEnum<["REQUIRED", "OPTIONAL", "NOT_SETUP"]>>;
}, "strip", z.ZodTypeAny, {
self?: "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
}, {
self?: "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
}>>;
status: z.ZodOptional<z.ZodEnum<["REQUIRED", "OPTIONAL", "NOT_SETUP", "INACTIVE"]>>;
}, "strip", z.ZodTypeAny, {
key: string;
status?: "INACTIVE" | "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
enroll?: {
self?: "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
} | undefined;
}, {
key: string;
status?: "INACTIVE" | "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
enroll?: {
self?: "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
} | undefined;
}>, "many">>;
}, "strip", z.ZodTypeAny, {
factors?: Partial<Record<"question" | "okta_verify" | "okta_sms" | "okta_voice" | "okta_email" | "google_otp" | "fido_webauthn" | "fido_u2f" | "rsa_token" | "symantec_vip" | "duo" | "hotp", {
status?: "INACTIVE" | "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
enroll?: "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
}>> | undefined;
authenticators?: {
key: string;
status?: "INACTIVE" | "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
enroll?: {
self?: "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
} | undefined;
}[] | undefined;
}, {
factors?: Partial<Record<"question" | "okta_verify" | "okta_sms" | "okta_voice" | "okta_email" | "google_otp" | "fido_webauthn" | "fido_u2f" | "rsa_token" | "symantec_vip" | "duo" | "hotp", {
status?: "INACTIVE" | "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
enroll?: "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
}>> | undefined;
authenticators?: {
key: string;
status?: "INACTIVE" | "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
enroll?: {
self?: "REQUIRED" | "OPTIONAL" | "NOT_SETUP" | undefined;
} | undefined;
}[] | undefined;
}>;
export declare const PolicyConditionsSchema: z.ZodObject<{
people: z.ZodOptional<z.ZodObject<{
users: z.ZodOptional<z.ZodObject<{
include: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
exclude: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
}, "strip", z.ZodTypeAny, {
exclude?: string[] | undefined;
include?: string[] | undefined;
}, {
exclude?: string[] | undefined;
include?: string[] | undefined;
}>>;
groups: z.ZodOptional<z.ZodObject<{
include: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
exclude: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
}, "strip", z.ZodTypeAny, {
exclude?: string[] | undefined;
include?: string[] | undefined;
}, {
exclude?: string[] | undefined;
include?: string[] | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
users?: {
exclude?: string[] | undefined;
include?: string[] | undefined;
} | undefined;
groups?: {
exclude?: string[] | undefined;
include?: string[] | undefined;
} | undefined;
}, {
users?: {
exclude?: string[] | undefined;
include?: string[] | undefined;
} | undefined;
groups?: {
exclude?: string[] | undefined;
include?: string[] | undefined;
} | undefined;
}>>;
network: z.ZodOptional<z.ZodObject<{
connection: z.ZodOptional<z.ZodEnum<["ANYWHERE", "ZONE"]>>;
include: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
exclude: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
}, "strip", z.ZodTypeAny, {
connection?: "ANYWHERE" | "ZONE" | undefined;
exclude?: string[] | undefined;
include?: string[] | undefined;
}, {
connection?: "ANYWHERE" | "ZONE" | undefined;
exclude?: string[] | undefined;
include?: string[] | undefined;
}>>;
authContext: z.ZodOptional<z.ZodObject<{
authType: z.ZodOptional<z.ZodEnum<["ANY", "RADIUS"]>>;
}, "strip", z.ZodTypeAny, {
authType?: "ANY" | "RADIUS" | undefined;
}, {
authType?: "ANY" | "RADIUS" | undefined;
}>>;
app: z.ZodOptional<z.ZodObject<{
include: z.ZodOptional<z.ZodArray<z.ZodObject<{
type: z.ZodEnum<["APP", "APP_TYPE"]>;
id: z.ZodOptional<z.ZodString>;
name: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
type: "APP" | "APP_TYPE";
id?: string | undefined;
name?: string | undefined;
}, {
type: "APP" | "APP_TYPE";
id?: string | undefined;
name?: string | undefined;
}>, "many">>;
exclude: z.ZodOptional<z.ZodArray<z.ZodObject<{
type: z.ZodEnum<["APP", "APP_TYPE"]>;
id: z.ZodOptional<z.ZodString>;
name: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
type: "APP" | "APP_TYPE";
id?: string | undefined;
name?: string | undefined;
}, {
type: "APP" | "APP_TYPE";
id?: string | undefined;
name?: string | undefined;
}>, "many">>;
}, "strip", z.ZodTypeAny, {
exclude?: {
type: "APP" | "APP_TYPE";
id?: string | undefined;
name?: string | undefined;
}[] | undefined;
include?: {
type: "APP" | "APP_TYPE";
id?: string | undefined;
name?: string | undefined;
}[] | undefined;
}, {
exclude?: {
type: "APP" | "APP_TYPE";
id?: string | undefined;
name?: string | undefined;
}[] | undefined;
include?: {
type: "APP" | "APP_TYPE";
id?: string | undefined;
name?: string | undefined;
}[] | undefined;
}>>;
platform: z.ZodOptional<z.ZodObject<{
include: z.ZodOptional<z.ZodArray<z.ZodObject<{
type: z.ZodEnum<["ANY", "MOBILE", "DESKTOP"]>;
os: z.ZodOptional<z.ZodObject<{
type: z.ZodOptional<z.ZodEnum<["ANY", "IOS", "ANDROID", "OSX", "WINDOWS", "MOBILE_OTHER", "DESKTOP_OTHER"]>>;
version: z.ZodOptional<z.ZodObject<{
minimum: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
minimum?: string | undefined;
}, {
minimum?: string | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
type?: "ANY" | "IOS" | "ANDROID" | "OSX" | "WINDOWS" | "MOBILE_OTHER" | "DESKTOP_OTHER" | undefined;
version?: {
minimum?: string | undefined;
} | undefined;
}, {
type?: "ANY" | "IOS" | "ANDROID" | "OSX" | "WINDOWS" | "MOBILE_OTHER" | "DESKTOP_OTHER" | undefined;
version?: {
minimum?: string | undefined;
} | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
type: "ANY" | "MOBILE" | "DESKTOP";
os?: {
type?: "ANY" | "IOS" | "ANDROID" | "OSX" | "WINDOWS" | "MOBILE_OTHER" | "DESKTOP_OTHER" | undefined;
version?: {
minimum?: string | undefined;
} | undefined;
} | undefined;
}, {
type: "ANY" | "MOBILE" | "DESKTOP";
os?: {
type?: "ANY" | "IOS" | "ANDROID" | "OSX" | "WINDOWS" | "MOBILE_OTHER" | "DESKTOP_OTHER" | undefined;
version?: {
minimum?: string | undefined;
} | undefined;
} | undefined;
}>, "many">>;
}, "strip", z.ZodTypeAny, {
include?: {
type: "ANY" | "MOBILE" | "DESKTOP";
os?: {
type?: "ANY" | "IOS" | "ANDROID" | "OSX" | "WINDOWS" | "MOBILE_OTHER" | "DESKTOP_OTHER" | undefined;
version?: {
minimum?: string | undefined;
} | undefined;
} | undefined;
}[] | undefined;
}, {
include?: {
type: "ANY" | "MOBILE" | "DESKTOP";
os?: {
type?: "ANY" | "IOS" | "ANDROID" | "OSX" | "WINDOWS" | "MOBILE_OTHER" | "DESKTOP_OTHER" | undefined;
version?: {
minimum?: string | undefined;
} | undefined;
} | undefined;
}[] | undefined;
}>>;
userIdentifier: z.ZodOptional<z.ZodObject<{
patterns: z.ZodOptional<z.ZodArray<z.ZodObject<{
matchType: z.ZodOptional<z.ZodEnum<["EQUALS", "CONTAINS", "STARTS_WITH", "SUFFIX"]>>;
value: z.ZodString;
}, "strip", z.ZodTypeAny, {
value: string;
matchType?: "SUFFIX" | "EQUALS" | "CONTAINS" | "STARTS_WITH" | undefined;
}, {
value: string;
matchType?: "SUFFIX" | "EQUALS" | "CONTAINS" | "STARTS_WITH" | undefined;
}>, "many">>;
type: z.ZodOptional<z.ZodEnum<["ATTRIBUTE", "IDENTIFIER"]>>;
attribute: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
type?: "IDENTIFIER" | "ATTRIBUTE" | undefined;
patterns?: {
value: string;
matchType?: "SUFFIX" | "EQUALS" | "CONTAINS" | "STARTS_WITH" | undefined;
}[] | undefined;
attribute?: string | undefined;
}, {
type?: "IDENTIFIER" | "ATTRIBUTE" | undefined;
patterns?: {
value: string;
matchType?: "SUFFIX" | "EQUALS" | "CONTAINS" | "STARTS_WITH" | undefined;
}[] | undefined;
attribute?: string | undefined;
}>>;
grantTypes: z.ZodOptional<z.ZodObject<{
include: z.ZodOptional<z.ZodArray<z.ZodEnum<["authorization_code", "implicit", "password", "refresh_token", "client_credentials", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange"]>, "many">>;
}, "strip", z.ZodTypeAny, {
include?: ("authorization_code" | "refresh_token" | "password" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:device_code" | "urn:ietf:params:oauth:grant-type:token-exchange")[] | undefined;
}, {
include?: ("authorization_code" | "refresh_token" | "password" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:device_code" | "urn:ietf:params:oauth:grant-type:token-exchange")[] | undefined;
}>>;
scopes: z.ZodOptional<z.ZodObject<{
include: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
}, "strip", z.ZodTypeAny, {
include?: string[] | undefined;
}, {
include?: string[] | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
people?: {
users?: {
exclude?: string[] | undefined;
include?: string[] | undefined;
} | undefined;
groups?: {
exclude?: string[] | undefined;
include?: string[] | undefined;
} | undefined;
} | undefined;
network?: {
connection?: "ANYWHERE" | "ZONE" | undefined;
exclude?: string[] | undefined;
include?: string[] | undefined;
} | undefined;
authContext?: {
authType?: "ANY" | "RADIUS" | undefined;
} | undefined;
userIdentifier?: {
type?: "IDENTIFIER" | "ATTRIBUTE" | undefined;
patterns?: {
value: string;
matchType?: "SUFFIX" | "EQUALS" | "CONTAINS" | "STARTS_WITH" | undefined;
}[] | undefined;
attribute?: string | undefined;
} | undefined;
platform?: {
include?: {
type: "ANY" | "MOBILE" | "DESKTOP";
os?: {
type?: "ANY" | "IOS" | "ANDROID" | "OSX" | "WINDOWS" | "MOBILE_OTHER" | "DESKTOP_OTHER" | undefined;
version?: {
minimum?: string | undefined;
} | undefined;
} | undefined;
}[] | undefined;
} | undefined;
scopes?: {
include?: string[] | undefined;
} | undefined;
app?: {
exclude?: {
type: "APP" | "APP_TYPE";
id?: string | undefined;
name?: string | undefined;
}[] | undefined;
include?: {
type: "APP" | "APP_TYPE";
id?: string | undefined;
name?: string | undefined;
}[] | undefined;
} | undefined;
grantTypes?: {
include?: ("authorization_code" | "refresh_token" | "password" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:device_code" | "urn:ietf:params:oauth:grant-type:token-exchange")[] | undefined;
} | undefined;
}, {
people?: {
users?: {
exclude?: string[] | undefined;
include?: string[] | undefined;
} | undefined;
groups?: {
exclude?: string[] | undefined;
include?: string[] | undefined;
} | undefined;
} | undefined;
network?: {
connection?: "ANYWHERE" | "ZONE" | undefined;
exclude?: string[] | undefined;
include?: string[] | undefined;
} | undefined;
authContext?: {
authType?: "ANY" | "RADIUS" | undefined;
} | undefined;
userIdentifier?: {
type?: "IDENTIFIER" | "ATTRIBUTE" | undefined;
patterns?: {
value: string;
matchType?: "SUFFIX" | "EQUALS" | "CONTAINS" | "STARTS_WITH" | undefined;
}[] | undefined;
attribute?: string | undefined;
} | undefined;
platform?: {
include?: {
type: "ANY" | "MOBILE" | "DESKTOP";
os?: {
type?: "ANY" | "IOS" | "ANDROID" | "OSX" | "WINDOWS" | "MOBILE_OTHER" | "DESKTOP_OTHER" | undefined;
version?: {
minimum?: string | undefined;
} | undefined;
} | undefined;
}[] | undefined;
} | undefined;
scopes?: {
include?: string[] | undefined;
} | undefined;
app?: {
exclude?: {
type: "APP" | "APP_TYPE";
id?: string | undefined;
name?: string | undefined;
}[] | undefined;
include?: {
type: "APP" | "APP_TYPE";
id?: string | undefined;
name?: string | undefined;
}[] | undefined;
} | undefined;
grantTypes?: {
include?: ("authorization_code" | "refresh_token" | "password" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:device_code" | "urn:ietf:params:oauth:grant-type:token-exchange")[] | undefined;
} | undefined;
}>;
export declare const PolicyRuleActionsSchema: z.ZodObject<{
signon: z.ZodOptional<z.ZodObject<{
access: z.ZodOptional<z.ZodEnum<["ALLOW", "DENY"]>>;
requireFactor: z.ZodOptional<z.ZodBoolean>;
factorMode: z.ZodOptional<z.ZodEnum<["1FA", "2FA"]>>;
factorPromptMode: z.ZodOptional<z.ZodEnum<["ALWAYS", "DEVICE", "SESSION"]>>;
factorLifetime: z.ZodOptional<z.ZodNumber>;
session: z.ZodOptional<z.ZodObject<{
usePersistentCookie: z.ZodOptional<z.ZodBoolean>;
maxSessionIdleMinutes: z.ZodOptional<z.ZodNumber>;
maxSessionLifetimeMinutes: z.ZodOptional<z.ZodNumber>;
}, "strip", z.ZodTypeAny, {
usePersistentCookie?: boolean | undefined;
maxSessionIdleMinutes?: number | undefined;
maxSessionLifetimeMinutes?: number | undefined;
}, {
usePersistentCookie?: boolean | undefined;
maxSessionIdleMinutes?: number | undefined;
maxSessionLifetimeMinutes?: number | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
session?: {
usePersistentCookie?: boolean | undefined;
maxSessionIdleMinutes?: number | undefined;
maxSessionLifetimeMinutes?: number | undefined;
} | undefined;
access?: "ALLOW" | "DENY" | undefined;
requireFactor?: boolean | undefined;
factorMode?: "1FA" | "2FA" | undefined;
factorPromptMode?: "ALWAYS" | "DEVICE" | "SESSION" | undefined;
factorLifetime?: number | undefined;
}, {
session?: {
usePersistentCookie?: boolean | undefined;
maxSessionIdleMinutes?: number | undefined;
maxSessionLifetimeMinutes?: number | undefined;
} | undefined;
access?: "ALLOW" | "DENY" | undefined;
requireFactor?: boolean | undefined;
factorMode?: "1FA" | "2FA" | undefined;
factorPromptMode?: "ALWAYS" | "DEVICE" | "SESSION" | undefined;
factorLifetime?: number | undefined;
}>>;
password: z.ZodOptional<z.ZodObject<{
change: z.ZodOptional<z.ZodEnum<["ALLOW", "DENY"]>>;
reset: z.ZodOptional<z.ZodEnum<["ALLOW", "DENY"]>>;
unlock: z.ZodOptional<z.ZodEnum<["ALLOW", "DENY"]>>;
}, "strip", z.ZodTypeAny, {
reset?: "ALLOW" | "DENY" | undefined;
change?: "ALLOW" | "DENY" | undefined;
unlock?: "ALLOW" | "DENY" | undefined;
}, {
reset?: "ALLOW" | "DENY" | undefined;
change?: "ALLOW" | "DENY" | undefined;
unlock?: "ALLOW" | "DENY" | undefined;
}>>;
enroll: z.ZodOptional<z.ZodObject<{
self: z.ZodOptional<z.ZodEnum<["CHALLENGE", "LOGIN", "NEVER"]>>;
}, "strip", z.ZodTypeAny, {
self?: "CHALLENGE" | "LOGIN" | "NEVER" | undefined;
}, {
self?: "CHALLENGE" | "LOGIN" | "NEVER" | undefined;
}>>;
token: z.ZodOptional<z.ZodObject<{
accessTokenLifetimeMinutes: z.ZodOptional<z.ZodNumber>;
refreshTokenLifetimeMinutes: z.ZodOptional<z.ZodNumber>;
refreshTokenWindowMinutes: z.ZodOptional<z.ZodNumber>;
inlineHook: z.ZodOptional<z.ZodObject<{
id: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
id?: string | undefined;
}, {
id?: string | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
accessTokenLifetimeMinutes?: number | undefined;
refreshTokenLifetimeMinutes?: number | undefined;
refreshTokenWindowMinutes?: number | undefined;
inlineHook?: {
id?: string | undefined;
} | undefined;
}, {
accessTokenLifetimeMinutes?: number | undefined;
refreshTokenLifetimeMinutes?: number | undefined;
refreshTokenWindowMinutes?: number | undefined;
inlineHook?: {
id?: string | undefined;
} | undefined;
}>>;
}, "strip", z.ZodTypeAny, {
password?: {
reset?: "ALLOW" | "DENY" | undefined;
change?: "ALLOW" | "DENY" | undefined;
unlock?: "ALLOW" | "DENY" | undefined;
} | undefined;
token?: {
accessTokenLifetimeMinutes?: number | undefined;
refreshTokenLifetimeMinutes?: number | undefined;
refreshTokenWindowMinutes?: number | undefined;
inlineHook?: {
id?: string | undefined;
} | undefined;
} | undefined;
signon?: {
session?: {
usePersistentCookie?: boolean | undefined;
maxSessionIdleMinutes?: number | undefined;
maxSessionLifetimeMinutes?: number | undefined;
} | undefined;
access?: "ALLOW" | "DENY" | undefined;
requireFactor?: boolean | undefined;
factorMode?: "1FA" | "2FA" | undefined;
factorPromptMode?: "ALWAYS" | "DEVICE" | "SESSION" | undefined;
factorLifetime?: number | undefined;
} | undefined;
enroll?: {
self?: "CHALLENGE" | "LOGIN" | "NEVER" | undefined;
} | undefined;
}, {
password?: {
reset?: "ALLOW" | "DENY" | undefined;
change?: "ALLOW" | "DENY" | undefined;
unlock?: "ALLOW" | "DENY" | undefined;
} | undefined;
token?: {
accessTokenLifetimeMinutes?: number | undefined;
refreshTokenLifetimeMinutes?: number | undefined;
refreshTokenWindowMinutes?: number | undefined;
inlineHook?: {
id?: string | undefined;
} | undefined;
} | undefined;
signon?: {
session?: {
usePersistentCookie?: boolean | undefined;
maxSessionIdleMinutes?: number | undefined;
maxSessionLifetimeMinutes?: number | undefined;
} | undefined;
access?: "ALLOW" | "DENY" | undefined;
requireFactor?: boolean | undefined;
factorMode?: "1FA" | "2FA" | undefined;
factorPromptMode?: "ALWAYS" | "DEVICE" | "SESSION" | undefined;
factorLifetime?: number | undefined;
} | undefined;
enroll?: {
self?: "CHALLENGE" | "LOGIN" | "NEVER" | undefined;
} | undefined;
}>;
export declare const ListPoliciesSchema: z.ZodObject<{
type: z.ZodEnum<["PASSWORD", "OKTA_SIGN_ON", "MFA_ENROLL", "IDP_DISCOVERY", "PROFILE_ENROLLMENT"]>;
status: z.ZodOptional<z.ZodEnum<["ACTIVE", "INACTIVE"]>>;
limit: z.ZodDefault<z.ZodNumber>;
after: z.ZodOptional<z.ZodString>;
sortBy: z.ZodOptional<z.ZodEnum<["name", "priority", "created", "lastUpdated"]>>;
sortOrder: z.ZodDefault<z.ZodEnum<["asc", "desc"]>>;
filter: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
limit: number;
sortOrder: "asc" | "desc";
type: "OKTA_SIGN_ON" | "PASSWORD" | "MFA_ENROLL" | "IDP_DISCOVERY" | "PROFILE_ENROLLMENT";
status?: "ACTIVE" | "INACTIVE" | undefined;
after?: string | undefined;
filter?: string | undefined;
sortBy?: "name" | "lastUpdated" | "created" | "priority" | undefined;
}, {
type: "OKTA_SIGN_ON" | "PASSWORD" | "MFA_ENROLL" | "IDP_DISCOVERY" | "PROFILE_ENROLLMENT";
status?: "ACTIVE" | "INACTIVE" | undefined;
limit?: number | undefined;
after?: string | undefined;
filter?: string | undefined;
sortBy?: "name" | "lastUpdated" | "created" | "priority" | undefined;
sortOrder?: "asc" | "desc" | undefined;
}>;
export declare const GetPolicySchema: z.ZodObject<{
policyId: z.ZodString;
expand: z.ZodOptional<z.ZodEnum<["rules"]>>;
}, "strip", z.ZodTypeAny, {
policyId: string;
expand?: "ru