List all users in your Okta organization with optional filtering and pagination. Supports filtering by status (STAGED, PROVISIONED, ACTIVE, RECOVERY, LOCKED_OUT, PASSWORD_EXPIRED, SUSPENDED, DEPROVISIONED) and searching by name, email, or other profile attributes. Use this to discover users, audit accounts, or find specific users matching criteria.

Get detailed information about a specific user by their ID or login email. Returns user profile, status, credentials info, and lifecycle state. Use this to retrieve complete user details for a known user.

Search for users using advanced filter expressions. Supports complex queries with operators like eq (equals), sw (starts with), pr (present), gt (greater than), lt (less than). Examples: 'status eq "ACTIVE" and profile.department eq "Engineering"' or 'profile.lastName sw "Smith"'. Use this for complex user discovery scenarios.

Create a new user in your Okta organization. Requires at minimum an email address and can optionally include full profile details, password, and activation preferences. You can create users in different states: with activation email, without activation, or as a group admin. Use this to provision new user accounts.

Update an existing user's profile information. You can modify any profile attributes like name, email, phone, or custom attributes. This performs a partial update - only specified fields are updated. Use this to keep user information current.

Deactivate a user account. This changes the user's status to DEPROVISIONED and revokes all active sessions. The user will not be able to log in. User data is retained and the user can be reactivated later. Use this for offboarding or temporarily suspending access.

Activate a user account that is in STAGED or DEPROVISIONED status. This allows the user to authenticate and access applications. Optionally sends an activation email with a temporary token. Use this for onboarding new users or reactivating previously deactivated accounts.

List all groups in your Okta organization. Supports searching by name and pagination. Groups are used to organize users and assign them to applications collectively. Use this to discover groups, audit group structure, or find specific groups.

Get detailed information about a specific group including its name, description, type, and member count. Use this to retrieve complete group details for a known group ID.

List all users who are members of a specific group. Returns user profiles for each member with pagination support. Use this to see who belongs to a group or audit group membership.