Okta Privileged Access API release notes (2026)

Subscribe to RSS

Okta Privileged Access (OPA) is available for both Okta Classic Engine and Okta Identity Engine.

March

Monthly release 2026.03.0

Change	Expected in Preview Orgs
Developer documentation update in 2026.03.0	March 4, 2026

Developer documentation update in 2026.03.0

Okta's API reference pages (opens new window) are undergoing a migration, which started on February 24. While the look and feel may vary across pages during this time, all technical documentation remains accurate and up to date.

February

Weekly release 2026.02.3

Change	Expected in Preview Orgs	Expected in Production
New System Log event for password rotation changes	February 25, 2026
New password management options for on-premises SaaS app accounts is EA	February 25, 2026

New System Log event for password rotation changes

A new System Log event (pam.app.update) has been added to track changes to the password rotation strategy for apps connected to Okta Privileged Access. You can use this event to track configuration changes that impact the management of credentials for connected app accounts. See Event Types.

New password management options for on-premises SaaS app accounts is EA

You can now configure password rotation for managed on-premises app accounts that require a current password to rotate. This enhancement also allows authorized users to manually override stored passwords in Okta Privileged Access to resolve out-of-sync credentials. New API endpoints allow you to list, retrieve, and update these strategies:

• GET /v1/teams/{team_name}/connections/saas_apps

• GET /v1/teams/{team_name}/connections/saas_apps/{saas_app_instance_id}

• PATCH /v1/teams/{team_name}/connections/saas_apps/{saas_app_instance_id}

See SaaS Application Accounts (opens new window).

Weekly release 2026.02.2

Change	Expected in Preview Orgs	Expected in Production
Enhanced filtering for Sudo Commands API	February 12, 2026	February 17, 2026
New List Secret Templates endpoint is GA	February 11, 2026	February 18, 2026
Server Account reveal password configuration is GA	February 19, 2026	February 25, 2026

Enhanced filtering for the Sudo Commands API

You can now filter the List all sudo command bundles (opens new window) operation using the new contains parameter. This parameter filters and limits the results to sudo command bundles where the name matches the provided search string.

New List Secret Templates endpoint is GA

Okta Privileged Access now provides a new List Secret Templates (opens new window) endpoint in the Secrets (opens new window) API. This endpoint allows teams to list and discover available secret templates.

Server Account reveal password configuration is GA

Authorized end users can now retrieve managed server account passwords through the Server Accounts API. See the Server Account API (opens new window).

Monthly release 2026.02.0

Change	Expected in Preview Orgs	Expected in Production
Enhanced filtering for Active Directory domains API is EA	February 4, 2026	February 11, 2026
Enhanced filtering for Active Directory accounts API is EA	February 4, 2026	February 10, 2026
New List Secret Templates endpoint is EA	February 5, 2026
Developer documentation updates in 2026.02.0	February 4, 2026

Enhanced filtering for Active Directory domains API is EA

You can now filter the List all Active Directory domains (opens new window) operation using the new parameter contains. This parameter filters and limits the results to domains where the name matches the provided search string.

Enhanced filtering for Active Directory accounts API is EA

You can now filter the List all discovered Active Directory accounts (opens new window) operation using the new contains_account_name_or_assigned_opa_user parameter. This parameter filters and limits the results to AD accounts where the User Principal Name (UPN), Security Account Manager (SAM) name, or assigned user name that matches the provided search string.

New List Secret Templates endpoint is EA

Okta Privileged Access now provides a new List Secret Templates (opens new window) endpoint in the Secrets (opens new window) API. This endpoint allows teams to list and discover available secret templates.

Developer documentation updates in 2026.02.0

The Okta developer portal search results now include the API references.

January

Weekly release 2026.01.2

Change	Expected in Preview Orgs
Service account password rotation	January 28, 2026

Service account password rotation

The Okta Universal Directory Accounts (opens new window) and SaaS Application Accounts (opens new window) APIs now support password rotation for Service and SaaS accounts. Additionally, the new skipRotation parameter in the Staged Service Accounts (opens new window) API allows you to control whether a password rotates immediately upon assignment.

Monthly release 2026.01.0

Change	Expected in Preview Orgs
Developer documentation update in 2026.01.0	January 7, 2026

Developer documentation update in 2026.01.0

The Okta API release notes now provide an RSS feed for each API release note category: Classic Engine, Identity Engine, Identity Governance, Privileged Access, Access Gateway, and Aerial. Click the RSS icon to subscribe.