Okta Access Requests automate the process of requesting access to applications and resources.
Endusers may request entries in their resource catalog.
Manage this process directly with the following request APIs.
See Access Requests for more information on Access Requests and Identity Governance.
okta.accessRequests.request.manage
Creates a request for my catalog entry specified by entryId
Creates a resource access request for a given user.
In general, the following information is needed to create a request:
Response when create request is accepted
When request fails as bad request
When authentication fails
When the requested resource was not found
When entry has no fields, empty object provided
{ }
Request access for authenticated user by omitting requesterUserIds
{- "id": "req42kjDgk1EubTwo0g4",
- "subject": "request-from-service-now-xsd23432",
- "created": "2019-08-24T14:15:22Z",
- "createdBy": "00ub0oNGTSWTBKOLGLNR",
- "lastUpdated": "2022-05-05T14:15:22Z",
- "lastUpdatedBy": "00ub0oNGTSWTBKOLGLNR",
- "status": "SUBMITTED",
- "requestedBy": {
- "type": "OKTA_USER",
- "externalId": "00ub0oNGTSWTBKOLGLNR"
}, - "requestedFor": {
- "type": "OKTA_USER",
- "externalId": "00ub0oNGTSWTBKOLGLNR"
}, - "requested": {
- "entryId": "cenb0oADRXTBKOLGLNR",
- "resourceId": "0oafxqCAJWWGELFTYASJ",
- "resourceType": "APPLICATION",
- "accessScopeType": "APPLICATION",
- "accessScopeId": "0oafxqCAJWWGELFTYASJ"
}, - "_links": {
- "catalogEntry": {
- "type": "application/json"
}, - "self": {
- "type": "application/json"
}
}
}
okta.accessRequests.request.read
Retrieves a request
A successful get request response
When authentication fails
When the requested resource was not found
Submitted requests can't yet have an approvalSequenceId
or requestConditionId
.
{- "id": "req42kjDgk1EubTwo0g4",
- "subject": "request-from-service-now-xsd23432",
- "created": "2019-08-24T14:15:22Z",
- "createdBy": "00ub0oNGTSWTBKOLGLNR",
- "lastUpdated": "2022-05-05T14:15:22Z",
- "lastUpdatedBy": "00ub0oNGTSWTBKOLGLNR",
- "status": "SUBMITTED",
- "requestedBy": {
- "type": "OKTA_USER",
- "externalId": "00ub0oNGTSWTBKOLGLNR"
}, - "requestedFor": {
- "type": "OKTA_USER",
- "externalId": "00ub0oNGTSWTBKOLGLNR"
}, - "requesterFieldValues": [
- {
- "id": "05c87fe9-11f6-4d40-a033-b155b39dcdbe",
- "label": "What is the business justification for the request?",
- "type": "TEXT",
- "value": "I need access to complete a task."
}
], - "requested": {
- "entryId": "cenb0oADRXTBKOLGLNR",
- "resourceId": "0oafxqCAJWWGELFTYASJ",
- "resourceType": "APPLICATION",
- "accessScopeId": "0oafxqCAJWWGELFTYASJ",
- "accessScopeType": "APPLICATION"
}, - "_links": {
- "catalogEntry": {
- "type": "application/json"
}, - "self": {
- "type": "application/json"
}
}
}