Okta API — Application

naftiko: 1.0.0-alpha2
info:
  label: Okta API — Application
  description: 'Okta API — Application. 49 operations. Lead operation: Okta List Applications. Self-contained Naftiko capability
    covering one Okta business surface.'
  tags:
  - Okta
  - Application
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    OKTA_API_KEY: OKTA_API_KEY
capability:
  consumes:
  - type: http
    namespace: okta-application
    baseUri: https://your-subdomain.okta.com
    description: Okta API — Application business capability. Self-contained, no shared references.
    resources:
    - name: api-v1-apps
      path: /api/v1/apps
      operations:
      - name: listapplications
        method: GET
        description: Okta List Applications
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: q
          in: query
          type: string
        - name: after
          in: query
          type: string
          description: Specifies the pagination cursor for the next page of apps
        - name: limit
          in: query
          type: integer
          description: Specifies the number of results for a page
        - name: filter
          in: query
          type: string
          description: Filters apps by status, user.id, group.id or credentials.signing.kid expression
        - name: expand
          in: query
          type: string
          description: Traverses users link relationship and optionally embeds Application User resource
        - name: includeNonDeleted
          in: query
          type: boolean
      - name: createapplication
        method: POST
        description: Okta Add Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: activate
          in: query
          type: boolean
          description: Executes activation lifecycle operation when creating the app
        - name: OktaAccessGateway-Agent
          in: header
          type: string
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-apps-appId
      path: /api/v1/apps/{appId}
      operations:
      - name: getapplication
        method: GET
        description: Okta Get Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: expand
          in: query
          type: string
      - name: updateapplication
        method: PUT
        description: Okta Update Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deleteapplication
        method: DELETE
        description: Okta Delete Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-connections-default
      path: /api/v1/apps/{appId}/connections/default
      operations:
      - name: getdefaultprovisioningconnectionforapplication
        method: GET
        description: Okta Fetches the default Provisioning Connection for an application.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
      - name: setdefaultprovisioningconnectionforapplication
        method: POST
        description: Okta Sets the default Provisioning Connection for an application.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: activate
          in: query
          type: boolean
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-apps-appId-connections-default-lifecycle-activate
      path: /api/v1/apps/{appId}/connections/default/lifecycle/activate
      operations:
      - name: activatedefaultprovisioningconnectionforapplication
        method: POST
        description: Okta Activate default Provisioning Connection for application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-connections-default-lifecycle-deactivate
      path: /api/v1/apps/{appId}/connections/default/lifecycle/deactivate
      operations:
      - name: deactivatedefaultprovisioningconnectionforapplication
        method: POST
        description: Okta Deactivate default Provisioning Connection for application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-credentials-csrs
      path: /api/v1/apps/{appId}/credentials/csrs
      operations:
      - name: listcsrsforapplication
        method: GET
        description: Okta List Certificate Signing Requests for Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
      - name: generatecsrforapplication
        method: POST
        description: Okta Generate Certificate Signing Request for Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-apps-appId-credentials-csrs-csrId
      path: /api/v1/apps/{appId}/credentials/csrs/{csrId}
      operations:
      - name: getcsrforapplication
        method: GET
        description: ''
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: csrId
          in: path
          type: string
          required: true
      - name: revokecsrfromapplication
        method: DELETE
        description: ''
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: csrId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-credentials-csrs-csrId-lifecycle-publish
      path: /api/v1/apps/{appId}/credentials/csrs/{csrId}/lifecycle/publish
      operations:
      - name: post
        method: POST
        description: ''
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: csrId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-credentials-keys
      path: /api/v1/apps/{appId}/credentials/keys
      operations:
      - name: listapplicationkeys
        method: GET
        description: Okta List Key Credentials for Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-credentials-keys-generate
      path: /api/v1/apps/{appId}/credentials/keys/generate
      operations:
      - name: generateapplicationkey
        method: POST
        description: Generates a new X.509 certificate for an application key credential
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: validityYears
          in: query
          type: integer
    - name: api-v1-apps-appId-credentials-keys-keyId
      path: /api/v1/apps/{appId}/credentials/keys/{keyId}
      operations:
      - name: getapplicationkey
        method: GET
        description: Okta Get Key Credential for Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: keyId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-credentials-keys-keyId-clone
      path: /api/v1/apps/{appId}/credentials/keys/{keyId}/clone
      operations:
      - name: cloneapplicationkey
        method: POST
        description: Okta Clone Application Key Credential
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: keyId
          in: path
          type: string
          required: true
        - name: targetAid
          in: query
          type: string
          description: Unique key of the target Application
          required: true
    - name: api-v1-apps-appId-credentials-secrets
      path: /api/v1/apps/{appId}/credentials/secrets
      operations:
      - name: listclientsecretsforapplication
        method: GET
        description: Okta List client secrets
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
      - name: createnewclientsecretforapplication
        method: POST
        description: Okta Add new client secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-apps-appId-credentials-secrets-secretId
      path: /api/v1/apps/{appId}/credentials/secrets/{secretId}
      operations:
      - name: getclientsecretforapplication
        method: GET
        description: Okta Get client secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: secretId
          in: path
          type: string
          required: true
      - name: deleteclientsecretforapplication
        method: DELETE
        description: Removes a secret from the client's collection of secrets.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: secretId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-credentials-secrets-secretId-lifecycle-activate
      path: /api/v1/apps/{appId}/credentials/secrets/{secretId}/lifecycle/activate
      operations:
      - name: activateclientsecretforapplication
        method: POST
        description: Okta Activate a client secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: secretId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-credentials-secrets-secretId-lifecycle-deactivate
      path: /api/v1/apps/{appId}/credentials/secrets/{secretId}/lifecycle/deactivate
      operations:
      - name: deactivateclientsecretforapplication
        method: POST
        description: Okta Deactivate a client secret
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: secretId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-features
      path: /api/v1/apps/{appId}/features
      operations:
      - name: listfeaturesforapplication
        method: GET
        description: Okta Fetches the Feature objects for an application.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-features-name
      path: /api/v1/apps/{appId}/features/{name}
      operations:
      - name: getfeatureforapplication
        method: GET
        description: Okta Fetches a Feature object for an application.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: name
          in: path
          type: string
          required: true
      - name: updatefeatureforapplication
        method: PUT
        description: Okta Updates a Feature object for an application.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: name
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-apps-appId-grants
      path: /api/v1/apps/{appId}/grants
      operations:
      - name: listscopeconsentgrants
        method: GET
        description: Lists all scope consent grants for the application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: expand
          in: query
          type: string
      - name: grantconsenttoscope
        method: POST
        description: Grants consent for the application to request an OAuth 2.0 Okta scope
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-apps-appId-grants-grantId
      path: /api/v1/apps/{appId}/grants/{grantId}
      operations:
      - name: getscopeconsentgrant
        method: GET
        description: Fetches a single scope consent grant for the application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: grantId
          in: path
          type: string
          required: true
        - name: expand
          in: query
          type: string
      - name: revokescopeconsentgrant
        method: DELETE
        description: Revokes permission for the application to request the given scope
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: grantId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-groups
      path: /api/v1/apps/{appId}/groups
      operations:
      - name: listapplicationgroupassignments
        method: GET
        description: Okta List Groups Assigned to Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: q
          in: query
          type: string
        - name: after
          in: query
          type: string
          description: Specifies the pagination cursor for the next page of assignments
        - name: limit
          in: query
          type: integer
          description: Specifies the number of results for a page
        - name: expand
          in: query
          type: string
    - name: api-v1-apps-appId-groups-groupId
      path: /api/v1/apps/{appId}/groups/{groupId}
      operations:
      - name: getapplicationgroupassignment
        method: GET
        description: Okta Get Assigned Group for Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: groupId
          in: path
          type: string
          required: true
        - name: expand
          in: query
          type: string
      - name: createapplicationgroupassignment
        method: PUT
        description: Okta Assign Group to Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: groupId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: deleteapplicationgroupassignment
        method: DELETE
        description: Okta Remove Group from Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: groupId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-lifecycle-activate
      path: /api/v1/apps/{appId}/lifecycle/activate
      operations:
      - name: activateapplication
        method: POST
        description: Okta Activate Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-lifecycle-deactivate
      path: /api/v1/apps/{appId}/lifecycle/deactivate
      operations:
      - name: deactivateapplication
        method: POST
        description: Okta Deactivate Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-logo
      path: /api/v1/apps/{appId}/logo
      operations:
      - name: uploadapplicationlogo
        method: POST
        description: Okta The file must be in PNG, JPG, or GIF format, and less than 1 MB in size. For best results use landscape
          orientation, a transparent background, and a minimum size of 420px by 120px to prevent upscaling.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-apps-appId-policies-policyId
      path: /api/v1/apps/{appId}/policies/{policyId}
      operations:
      - name: updateapplicationpolicy
        method: PUT
        description: Okta Update application policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: policyId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-sso-saml-metadata
      path: /api/v1/apps/{appId}/sso/saml/metadata
      operations:
      - name: previewsamlappmetadata
        method: GET
        description: Previews SAML metadata based on a specific key credential for an application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: kid
          in: query
          type: string
          description: unique key identifier of an Application Key Credential
          required: true
    - name: api-v1-apps-appId-tokens
      path: /api/v1/apps/{appId}/tokens
      operations:
      - name: listoauth2tokensforapplication
        method: GET
        description: Lists all tokens for the application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: expand
          in: query
          type: string
        - name: after
          in: query
          type: string
        - name: limit
          in: query
          type: integer
      - name: revokeoauth2tokensforapplication
        method: DELETE
        description: Revokes all tokens for the specified application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-tokens-tokenId
      path: /api/v1/apps/{appId}/tokens/{tokenId}
      operations:
      - name: getoauth2tokenforapplication
        method: GET
        description: Gets a token for the specified application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: tokenId
          in: path
          type: string
          required: true
        - name: expand
          in: query
          type: string
      - name: revokeoauth2tokenforapplication
        method: DELETE
        description: Revokes the specified token for the specified application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: tokenId
          in: path
          type: string
          required: true
    - name: api-v1-apps-appId-users
      path: /api/v1/apps/{appId}/users
      operations:
      - name: listapplicationusers
        method: GET
        description: Okta List Users Assigned to Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: q
          in: query
          type: string
        - name: query_scope
          in: query
          type: string
        - name: after
          in: query
          type: string
          description: specifies the pagination cursor for the next page of assignments
        - name: limit
          in: query
          type: integer
          description: specifies the number of results for a page
        - name: filter
          in: query
          type: string
        - name: expand
          in: query
          type: string
      - name: assignusertoapplication
        method: POST
        description: Okta Assign User to Application for SSO & Provisioning
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-apps-appId-users-userId
      path: /api/v1/apps/{appId}/users/{userId}
      operations:
      - name: getapplicationuser
        method: GET
        description: Okta Get Assigned User for Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: userId
          in: path
          type: string
          required: true
        - name: expand
          in: query
          type: string
      - name: updateapplicationuser
        method: POST
        description: Okta Update Application Profile for Assigned User
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: userId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deleteapplicationuser
        method: DELETE
        description: Okta Remove User from Application
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: appId
          in: path
          type: string
          required: true
        - name: userId
          in: path
          type: string
          required: true
        - name: sendEmail
          in: query
          type: boolean
    authentication:
      type: apikey
      key: Authorization
      value: '{{env.OKTA_API_KEY}}'
      placement: header
  exposes:
  - type: rest
    namespace: okta-application-rest
    port: 8080
    description: REST adapter for Okta API — Application. One Spectral-compliant resource per consumed operation, prefixed
      with /v1.
    resources:
    - path: /v1/api/v1/apps
      name: api-v1-apps
      description: REST surface for api-v1-apps.
      operations:
      - method: GET
        name: listapplications
        description: Okta List Applications
        call: okta-application.listapplications
        with:
          q: rest.q
          after: rest.after
          limit: rest.limit
          filter: rest.filter
          expand: rest.expand
          includeNonDeleted: rest.includeNonDeleted
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: createapplication
        description: Okta Add Application
        call: okta-application.createapplication
        with:
          activate: rest.activate
          OktaAccessGateway-Agent: rest.OktaAccessGateway-Agent
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/apps/{appid}
      name: api-v1-apps-appid
      description: REST surface for api-v1-apps-appId.
      operations:
      - method: GET
        name: getapplication
        description: Okta Get Application
        call: okta-application.getapplication
        with:
          appId: rest.appId
          expand: rest.expand
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updateapplication
        description: Okta Update Application
        call: okta-application.updateapplication
        with:
          appId: rest.appId
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deleteapplication
        description: Okta Delete Application
        call: okta-application.deleteapplication
        with:
          appId: rest.appId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/apps/{appid}/connections/default
      name: api-v1-apps-appid-connections-default
      description: REST surface for api-v1-apps-appId-connections-default.
      operations:
      - method: GET
        name: getdefaultprovisioningconnectionforapplication
        description: Okta Fetches the default Provisioning Connection for an application.
        call: okta-application.getdefaultprovisioningconnectionforapplication
        with:
          appId: rest.appId
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: setdefaultprovisioningconnectionforapplication
        description: Okta Sets the default Provisioning Connection for an application.
        call: okta-application.setdefaultprovisioningconnectionforapplication
        with:
          appId: rest.appId
          activate: rest.activate
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/apps/{appid}/connections/default/lifecycle/activate
      name: api-v1-apps-appid-connections-default-lifecycle-activate
      description: REST surface for api-v1-apps-appId-connections-default-lifecycle-activate.
      operations:
      - method: POST
        name: activatedefaultprovisioningconnectionforapplication
        description: Okta Activate default Provisioning Connection for application
        call: okta-application.activatedefaultprovisioningconnectionforapplication
        with:
          appId: rest.appId
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/apps/{appid}/connections/default/lifecycle/deactivate
      name: api-v1-apps-appid-connections-default-lifecycle-deactivate
      description: REST surface for api-v1-apps-appId-connections-default-lifecycle-deactivate.
      operations:
      - method: POST
        name: deactivatedefaultprovisioningconnectionforapplication
        description: Okta Deactivate default Provisioning Connection for applica

# --- truncated at 32 KB (69 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/okta/refs/heads/main/capabilities/okta-application.yaml