Skip to content

Instantly share code, notes, and snippets.

View karlmcguinness-okta's full-sized avatar

Karl karlmcguinness-okta

  • Okta
  • San Francisco, CA
View GitHub Profile

Provisioning API

Design Doc: https://oktawiki.atlassian.net/wiki/display/eng/Provisioning+API+Design

Design decisions:

  • Feature enabling & disabling operations are under [lifecycle endpoints] (#provisioning-lifecycle-operations)
  • Continue using Features object to indicate the status of provisioning features, enabled features will show in Features list
  • Use same Feature enums for lifecycle
  • 4 states ("DISABLED", "ENABLED", "NOT_AUTHORIZED", "NOT_SUPPORTED") for [provisioning status] (#provisioning-status-state-machine)
#!/bin/bash
if [ "$(id -u)" != "0" ]; then
echo "This script must be run as root" 1>&2
exit 1
fi
cat <<MAXFILES > /Library/LaunchDaemons/limit.maxfiles.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

Enroll via Auth API

Primary Authentication

POST https://your-domain.okta.com/api/v1/authn

{
  "username": "isaac@example.org",
  "password": "GoAw@y123",