# Latest

**URL:** https://devforum.okta.com/latest.md

[Latest](https://devforum.okta.com/latest.md) · [Categories](https://devforum.okta.com/categories.md) · [Tags](https://devforum.okta.com/tags.md)

---

## [Getting Started in the DevForum](https://devforum.okta.com/t/getting-started-in-the-devforum/20369)

<div class="topic-metadata">

**Author:** [@community\_admin](https://devforum.okta.com/u/community_admin)\
**Replies:** 0\
**Last updated:** [April 22, 2022, 4:13pm UTC](https://devforum.okta.com/t/getting-started-in-the-devforum/20369 "2022-04-22T16:13:19Z")

</div>

What is the Dev Forum? This is a technical forum for Q&A about building custom applications in the Okta Platform and preparing applications for the Okta Integration Network (OIN). Getting Started: Your DevForum.okta.c…

---

## [Cancel Access Request from Workflow After Validation Failure](https://devforum.okta.com/t/cancel-access-request-from-workflow-after-validation-failure/35543)

<div class="topic-metadata">

**Author:** [@hori](https://devforum.okta.com/u/hori)\
**Replies:** 1\
**Last updated:** [November 13, 2026, 3:14pm UTC](https://devforum.okta.com/t/cancel-access-request-from-workflow-after-validation-failure/35543 "2026-11-13T15:14:49Z")

</div>

I am creating an approval workflow using Okta’s access requests. To validate the values entered in the access request, I am using a workflow to check them. If there are any errors, I intend to call the API from the work…

---

## [I Found My Coordinates: Code, Community, and Okta](https://devforum.okta.com/t/i-found-my-coordinates-code-community-and-okta/35436)

<div class="topic-metadata">

**Author:** [@oktadev-blog](https://devforum.okta.com/u/oktadev-blog)\
**Replies:** 1\
**Last updated:** [November 13, 2026, 1:34pm UTC](https://devforum.okta.com/t/i-found-my-coordinates-code-community-and-okta/35436 "2026-11-13T13:34:03Z")

</div>

It all started with a phone call from an institute that reached out to recruit me for its campus ambassador program. I was navigating my first year of college, figuring things out. It was all new for me, a new city, far …

---

## [Okta Integrator Free Plan org exists, but didn't get activation email](https://devforum.okta.com/t/okta-integrator-free-plan-org-exists-but-didnt-get-activation-email/35550)

<div class="topic-metadata">

**Author:** [@will.daniel](https://devforum.okta.com/u/will.daniel)\
**Replies:** 1\
**Last updated:** [November 13, 2026, 6:37am UTC](https://devforum.okta.com/t/okta-integrator-free-plan-org-exists-but-didnt-get-activation-email/35550 "2026-11-13T06:37:02Z")

</div>

Hi Okta Developer Community, I’m trying to set up an Okta Integrator Free Plan org for integrating Okta login into our application. I successfully signed up using my business-domain email address: will.daniel@pcinvest…

---

## [Trial environment E0000011 error with SSWS requests](https://devforum.okta.com/t/trial-environment-e0000011-error-with-ssws-requests/35531)

<div class="topic-metadata">

**Author:** [@mikeatsyncari](https://devforum.okta.com/u/mikeatsyncari)\
**Replies:** 7\
**Last updated:** [November 13, 2026, 6:30am UTC](https://devforum.okta.com/t/trial-environment-e0000011-error-with-ssws-requests/35531 "2026-11-13T06:30:19Z")

</div>

I have a new trial environment (trial-4250371.okta.com) that is hitting the E0000011 error on my SSWS requests. Is someone able to help me resolve this issue?

---

## [How can I identify apps that support the grants endpoint?](https://devforum.okta.com/t/how-can-i-identify-apps-that-support-the-grants-endpoint/35545)

<div class="topic-metadata">

**Author:** [@ashoksingh](https://devforum.okta.com/u/ashoksingh)\
**Replies:** 0\
**Last updated:** [November 12, 2026, 7:15am UTC](https://devforum.okta.com/t/how-can-i-identify-apps-that-support-the-grants-endpoint/35545 "2026-11-12T07:15:42Z")

</div>

I’m importing apps and their OAuth scope grants from Okta. Calling GET /api/v1/apps/{appId}/grants for some apps returns 404, so I’d like to skip apps that don’t support grants without missing any that do. An Okta Devel…

---

## [Is user.risk.detect logged when user risk decreases, and who can read it via the API?](https://devforum.okta.com/t/is-user-risk-detect-logged-when-user-risk-decreases-and-who-can-read-it-via-the-api/35544)

<div class="topic-metadata">

**Author:** [@ajax](https://devforum.okta.com/u/ajax)\
**Replies:** 0\
**Last updated:** [November 12, 2026, 5:40am UTC](https://devforum.okta.com/t/is-user-risk-detect-logged-when-user-risk-decreases-and-who-can-read-it-via-the-api/35544 "2026-11-12T05:40:55Z")

</div>

Hi all, We track each user’s current ITP risk level from System Log user.risk.detect events, without polling GET /api/v1/users/{id}/risk for every user. Questions: Is user.risk.detect written on every risk decrease (e…

---

## [Unable to sign in to my Okta Sandbox](https://devforum.okta.com/t/unable-to-sign-in-to-my-okta-sandbox/35516)

<div class="topic-metadata">

**Author:** [@TonySosa](https://devforum.okta.com/u/TonySosa)\
**Replies:** 4\
**Last updated:** [November 12, 2026, 4:51am UTC](https://devforum.okta.com/t/unable-to-sign-in-to-my-okta-sandbox/35516 "2026-11-12T04:51:02Z")

</div>

This is my developer account https://integrator-7006939.okta.com/. Everything was working fine and suddenly I’m not able to login or or reset password. It says to contact Okta Support.

---

## [Error saving schema when adding custom attributes to OIN SCIM app (Import User Schema enabled)](https://devforum.okta.com/t/error-saving-schema-when-adding-custom-attributes-to-oin-scim-app-import-user-schema-enabled/35533)

<div class="topic-metadata">

**Author:** [@Gary.sg](https://devforum.okta.com/u/Gary.sg)\
**Replies:** 1\
**Last updated:** [November 11, 2026, 4:04am UTC](https://devforum.okta.com/t/error-saving-schema-when-adding-custom-attributes-to-oin-scim-app-import-user-schema-enabled/35533 "2026-11-11T04:04:49Z")

</div>

Hi everyone, I am building a SCIM integration for the Okta Integration Network (OIN) to sync data from OIN to our server, but I’m running into issues configuring custom profile attributes. Our goal is to increase the de…

---

## [Okta Workflows 2026.44.0 Release and Fixes](https://devforum.okta.com/t/okta-workflows-2026-44-0-release-and-fixes/35538)

<div class="topic-metadata">

**Author:** [@emily](https://devforum.okta.com/u/emily)\
**Replies:** 0\
**Last updated:** [November 9, 2026, 5:23pm UTC](https://devforum.okta.com/t/okta-workflows-2026-44-0-release-and-fixes/35538 "2026-11-09T17:23:41Z")

</div>

RSS feeds for release notes Preview and Production release notes now have RSS feeds for automated updates. Use the RSS icon to subscribe. PKCE for OAuth 2.0 authorization code Builders can enable PKCE in Integration B…

---

## [Client Credentials missing from Access Policy Rule editor in Free Trial Plan tenant (API Services app)](https://devforum.okta.com/t/client-credentials-missing-from-access-policy-rule-editor-in-free-trial-plan-tenant-api-services-app/35480)

<div class="topic-metadata">

**Author:** [@abhijit.mali](https://devforum.okta.com/u/abhijit.mali)\
**Replies:** 4\
**Last updated:** [November 7, 2026, 7:37pm UTC](https://devforum.okta.com/t/client-credentials-missing-from-access-policy-rule-editor-in-free-trial-plan-tenant-api-services-app/35480 "2026-11-07T19:37:56Z")

</div>

Hi Team, I’m seeing unexpected behavior in a newly created Okta tenant and would like to understand whether this is expected behavior, a tenant entitlement limitation, or a UI defect. Tenant Type - This issue is occurr…

---

## [Okta Custom domain configuration with Fastly WAF securing Okta](https://devforum.okta.com/t/okta-custom-domain-configuration-with-fastly-waf-securing-okta/35530)

<div class="topic-metadata">

**Author:** [@kgowrabathun](https://devforum.okta.com/u/kgowrabathun)\
**Replies:** 1\
**Last updated:** [November 7, 2026, 3:48pm UTC](https://devforum.okta.com/t/okta-custom-domain-configuration-with-fastly-waf-securing-okta/35530 "2026-11-07T15:48:23Z")

</div>

We are trying to configure Fastly WAF in front of Okta. We have created a custom domain (e.g., login.example.com) and the corresponding DNS records and TLS certificate in Fastly WAF. Then we created a custom domain in Ok…

---

## [SCIM Reactivation Sequence Issue and Documentation Reference](https://devforum.okta.com/t/scim-reactivation-sequence-issue-and-documentation-reference/35490)

<div class="topic-metadata">

**Author:** [@bharath\_choudhary](https://devforum.okta.com/u/bharath_choudhary)\
**Replies:** 3\
**Last updated:** [November 5, 2026, 11:16am UTC](https://devforum.okta.com/t/scim-reactivation-sequence-issue-and-documentation-reference/35490 "2026-11-05T11:16:06Z")

</div>

We are currently integrating Workforce Identity Federation with Okta via SCIM and are experiencing an issue during user deactivation and reactivation cycles where users occasionally remain inactive after being re-activat…

---

## [On prem - OIN listing](https://devforum.okta.com/t/on-prem-oin-listing/35482)

<div class="topic-metadata">

**Author:** [@gab1920](https://devforum.okta.com/u/gab1920)\
**Replies:** 1\
**Last updated:** [November 3, 2026, 8:42am UTC](https://devforum.okta.com/t/on-prem-oin-listing/35482 "2026-11-03T08:42:52Z")

</div>

Can a self-hosted (on-prem) product be listed in the OIN with Cross App Access? Our product is installed once per customer, on the customer’s own infrastructure. Each install has its own URL and its own client ID and se…

---

## [Client Credentials grant type not shown in access policy rule on an Integrator Free Plan org](https://devforum.okta.com/t/client-credentials-grant-type-not-shown-in-access-policy-rule-on-an-integrator-free-plan-org/35522)

<div class="topic-metadata">

**Author:** [@kanimolli](https://devforum.okta.com/u/kanimolli)\
**Replies:** 1\
**Last updated:** [November 2, 2026, 2:28am UTC](https://devforum.okta.com/t/client-credentials-grant-type-not-shown-in-access-policy-rule-on-an-integrator-free-plan-org/35522 "2026-11-02T02:28:21Z")

</div>

Hi, I’m building a machine to machine proof of concept: a Raspberry Pi app calling a server API, authorised with Okta tokens. My setup is an Okta Integrator Free Plan org. What I’ve done so far: Created a custom scope…

---

## [Native SSO on a device with no browser: how to get a device secret](https://devforum.okta.com/t/native-sso-on-a-device-with-no-browser-how-to-get-a-device-secret/35503)

<div class="topic-metadata">

**Author:** [@kanimolli](https://devforum.okta.com/u/kanimolli)\
**Replies:** 1\
**Last updated:** [October 30, 2026, 1:12am UTC](https://devforum.okta.com/t/native-sso-on-a-device-with-no-browser-how-to-get-a-device-secret/35503 "2026-10-30T01:12:04Z")

</div>

I’m building Native SSO between two apps on a device with no browser. Signing in with the Device Authorization grant works, but when I add the device\_sso scope to the /device/authorize request, Okta returns: invalid\_s…

---

## [👥 shshouOkta Workflows Community Meetup in San Francisco (Tue, Nov 17, 2026)](https://devforum.okta.com/t/shshouokta-workflows-community-meetup-in-san-francisco-tue-nov-17-2026/35515)

<div class="topic-metadata">

**Author:** [@maxkatz](https://devforum.okta.com/u/maxkatz)\
**Replies:** 0\
**Last updated:** [October 27, 2026, 5:36pm UTC](https://devforum.okta.com/t/shshouokta-workflows-community-meetup-in-san-francisco-tue-nov-17-2026/35515 "2026-10-27T17:36:02Z")

</div>

Okta Workflows community meetup is back in San Francisco :right\_arrow\_curving\_down: Talks, food, and time to meet other Workflows builders. :round\_pushpin: Okta SF | Tuesday, November 17 @ 5:30 PM PT A Peek into the…

---

## [Real-Time Phishing Attacks - Detection and Alerts (Workflows template)](https://devforum.okta.com/t/real-time-phishing-attacks-detection-and-alerts-workflows-template/35505)

<div class="topic-metadata">

**Author:** [@karthick.chinthamani](https://devforum.okta.com/u/karthick.chinthamani)\
**Replies:** 0\
**Last updated:** [October 23, 2026, 2:53am UTC](https://devforum.okta.com/t/real-time-phishing-attacks-detection-and-alerts-workflows-template/35505 "2026-10-23T02:53:55Z")

</div>

This workflow automatically alerts Okta administrators when a phishing-resistant authenticator, such as FastPass or Passkeys, blocks a sign-in attempt from a malicious link. By triggering off of real-time phishing (AiTM)…

---

## [Malformed authorization\_details claim](https://devforum.okta.com/t/malformed-authorization-details-claim/35472)

<div class="topic-metadata">

**Author:** [@aratibm](https://devforum.okta.com/u/aratibm)\
**Replies:** 5\
**Last updated:** [October 22, 2026, 10:29pm UTC](https://devforum.okta.com/t/malformed-authorization-details-claim/35472 "2026-10-22T22:29:11Z")

</div>

Using okta.myAccount.manage scope on client credentials flow against a custom authorization server produces an authorization\_details claim in the access token that is not documented and is non-compliant with RFC 9396 sec…

---

## [Entitlement support for OPP](https://devforum.okta.com/t/entitlement-support-for-opp/35457)

<div class="topic-metadata">

**Author:** [@phi1ipp](https://devforum.okta.com/u/phi1ipp)\
**Replies:** 3\
**Last updated:** [October 18, 2026, 1:44am UTC](https://devforum.okta.com/t/entitlement-support-for-opp/35457 "2026-10-18T01:44:56Z")

</div>

Hi All, Can someone confirm if they were able to create a custom SCIM server with entitlement support working through OPP agent? It seems that for me it’s only sending all the SCIM1.1 requests and nothing from SCIM2 wor…

---

## [Okta Workflows 2026.41.0 Release and Fixes](https://devforum.okta.com/t/okta-workflows-2026-41-0-release-and-fixes/35502)

<div class="topic-metadata">

**Author:** [@emily](https://devforum.okta.com/u/emily)\
**Replies:** 0\
**Last updated:** [October 14, 2026, 4:49pm UTC](https://devforum.okta.com/t/okta-workflows-2026-41-0-release-and-fixes/35502 "2026-10-14T16:49:23Z")

</div>

Workflows version history (GA in Production) Flows now keep a change record over time. You can audit edits, look at execution history for particular iterations, and roll a flow back to an earlier state. Folder pinning …

---

## [Fetch app \*external\* metadata url through API](https://devforum.okta.com/t/fetch-app-external-metadata-url-through-api/35468)

<div class="topic-metadata">

**Author:** [@richard.barnett](https://devforum.okta.com/u/richard.barnett)\
**Replies:** 4\
**Last updated:** [October 13, 2026, 9:49pm UTC](https://devforum.okta.com/t/fetch-app-external-metadata-url-through-api/35468 "2026-10-13T21:49:14Z")

</div>

I have an Auth0 tenant with a number of connections created using Okta app metadata urls of the form https://XXXX.oktapreview.com/app/exkXXXX/sso/saml/metadata I want to work out which Okta apps these correspond to. I c…

---

## [Okta Workflows 2026.09.2 Release and Fixes](https://devforum.okta.com/t/okta-workflows-2026-09-2-release-and-fixes/35500)

<div class="topic-metadata">

**Author:** [@emily](https://devforum.okta.com/u/emily)\
**Replies:** 0\
**Last updated:** [October 13, 2026, 3:20pm UTC](https://devforum.okta.com/t/okta-workflows-2026-09-2-release-and-fixes/35500 "2026-10-13T15:20:00Z")

</div>

Fixes Validating a connector in Connector Builder returned an error if one of its flows had a name containing a double space between words. An internal system outage caused invoke requests to be discarded without any r…

---

## [okta.appGrants.read scope requires Super Admin](https://devforum.okta.com/t/okta-appgrants-read-scope-requires-super-admin/35456)

<div class="topic-metadata">

**Author:** [@Ganeshs](https://devforum.okta.com/u/Ganeshs)\
**Replies:** 4\
**Last updated:** [October 8, 2026, 7:29am UTC](https://devforum.okta.com/t/okta-appgrants-read-scope-requires-super-admin/35456 "2026-10-08T07:29:39Z")

</div>

Hello, I am developing an app that fetches a list of application OAuth 2.0 grants using the “/apps/{id}/grants” endpoint. I am always getting the error 403 (Forbidden) from the API, even though I assigned this app the “o…

---

## [How to release or delete an Integrator Free Plan org tied to my work email?](https://devforum.okta.com/t/how-to-release-or-delete-an-integrator-free-plan-org-tied-to-my-work-email/35489)

<div class="topic-metadata">

**Author:** [@kanimolli](https://devforum.okta.com/u/kanimolli)\
**Replies:** 2\
**Last updated:** [October 8, 2026, 12:23am UTC](https://devforum.okta.com/t/how-to-release-or-delete-an-integrator-free-plan-org-tied-to-my-work-email/35489 "2026-10-08T00:23:22Z")

</div>

Hi everyone, I signed up for an Integrator Free Plan org using my work email, but the activation email never arrived (not in inbox, junk, or spam). Now: - Signing up again says an Integrator org already exists for this e…

---

## [Recovering Okta Integrator Accounts](https://devforum.okta.com/t/recovering-okta-integrator-accounts/35487)

<div class="topic-metadata">

**Author:** [@MioPOCOkta](https://devforum.okta.com/u/MioPOCOkta)\
**Replies:** 2\
**Last updated:** [October 6, 2026, 9:39am UTC](https://devforum.okta.com/t/recovering-okta-integrator-accounts/35487 "2026-10-06T09:39:00Z")

</div>

Hello, I have a number of Okta Integrator accounts that have gone inactive. Unfortunately, I missed the emails notifying me of the inactivity and they are now shut down. Is there a way to reinstate these environments? If…

---

## [OKTA Verify RESET MFA](https://devforum.okta.com/t/okta-verify-reset-mfa/35486)

<div class="topic-metadata">

**Author:** [@rmadem](https://devforum.okta.com/u/rmadem)\
**Replies:** 1\
**Last updated:** [October 5, 2026, 3:09pm UTC](https://devforum.okta.com/t/okta-verify-reset-mfa/35486 "2026-10-05T15:09:53Z")

</div>

I need help resetting MFA for my developer account. name: \_\_\_rmadem email: \_\_\_\_\_devi.towards@gmail.com\_ URL: dev-6067058\[.\]okta\[.\]com I am new to OKTA and i am the only admin on the tenant and I have lost access to O…

---

## [Okta Workflows 2026.09.1 Release and Fixes](https://devforum.okta.com/t/okta-workflows-2026-09-1-release-and-fixes/35481)

<div class="topic-metadata">

**Author:** [@emily](https://devforum.okta.com/u/emily)\
**Replies:** 0\
**Last updated:** [October 1, 2026, 4:20pm UTC](https://devforum.okta.com/t/okta-workflows-2026-09-1-release-and-fixes/35481 "2026-10-01T16:20:08Z")

</div>

OPA connector streaming support for List Resource Groups card The listed action card within the Okta Privileged Access connector gained support for streaming data. Fixes A capacity issue where the resource groups lis…

---

## [Latest Release notes "nice features"](https://devforum.okta.com/t/latest-release-notes-nice-features/35477)

<div class="topic-metadata">

**Author:** [@Bertrand\_Djena](https://devforum.okta.com/u/Bertrand_Djena)\
**Replies:** 1\
**Last updated:** [October 1, 2026, 11:08am UTC](https://devforum.okta.com/t/latest-release-notes-nice-features/35477 "2026-10-01T11:08:58Z")

</div>

Hello, Please, I need your input. I’d like you to tell me about the key features you really liked in the latest Okta release notes for production (2026.09.0) and preview (2026.09.1), based on this agenda : -Productio…

---

## [Okta Agent Gateway connectivity Issue](https://devforum.okta.com/t/okta-agent-gateway-connectivity-issue/35471)

<div class="topic-metadata">

**Author:** [@nithishsubramani](https://devforum.okta.com/u/nithishsubramani)\
**Replies:** 1\
**Last updated:** [September 30, 2026, 8:37am UTC](https://devforum.okta.com/t/okta-agent-gateway-connectivity-issue/35471 "2026-09-30T08:37:56Z")

</div>

We’re trying to connect our MCP server, which uses XAA with MCP OAuth, to Claude through Okta Agent Gateway. We were able to connect the MCP server to Agent Gateway, but Claude shows the following error when we try to co…

[Next page](https://devforum.okta.com/latest.md?page=1)
