Create Any Application from the Okta Integration Network Catalog via API

The Okta API supports creating any application available in the Okta Integration Network (OIN) catalog, extending beyond the standard documented examples. Specify the correct application name and parameters in the payload of the <url>/api/v1/apps API call to generate any OIN application.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta API
• Okta Integration Network (OIN)

As per the Application documentation, Okta API currently supports creating applications already in the application catalog. However, it is not limited to the described applications (such as Google Workspace, Microsoft Office 365, Org2Org).

How is an application created from the Okta Integration Network catalog via API?

Create any application from the OIN catalog by executing a POST request to the <url>/api/v1/apps endpoint with a JSON payload containing the specific application name, sign-on mode, and required settings.

{
"name": "cornerstone",
"label": "created via API",
"signOnMode": "SAML_2_0",
"settings": {
"app": {
"orgName": "dan",
"acsURL": null,
"url": "https://example.com/login.html"
},
"signOn": {
"destinationOverride": "http://www.okta.com",
"attributeStatements": [
{
"type": "EXPRESSION",
"name": "nameFromAPI",
"namespace": "urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified",
"values": [
"Value1FromAPI",
"Value2FromAPI"
]
},
{
"type": "EXPRESSION",
"name": "name2FromAPI",
"namespace": "urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified",
"values": [
"Value1FromAPI",
"Value2FromAPI",
"Value3FromAPI"
]
},
{
"type": "GROUP",
"name": "GroupNameFromAPI",
"namespace": "urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified",
"filterType": "STARTS_WITH",
"filterValue": "ValueFromAPI"
}
]
}
}
}

NOTE: The name variable defines which application Okta creates, while label reflects the application's naming convention.

NOTE: Application parameters vary across the catalog. Gather the name parameter and other required parameters by performing a <url>/api/v1/apps/<appId> API call on an application already integrated via the Admin Console.