Skip to main content

federated_claims

Creates, updates, deletes, gets or lists a federated_claims resource.

Overview

Namefederated_claims
TypeResource
Idokta.apps.federated_claims

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
idstringThe unique ID of the federated claim (example: ofc2f4zrZbs8nUa7p0g4)
namestringThe name of the claim to be used in the produced token (example: roleg)
createdstringTimestamp when the federated claim was created (example: 2024-02-29T20:08:24.000Z)
expressionstringThe Okta Expression Language expression to be evaluated at runtime (example: appuser.entitlements.role)
lastUpdatedstringTimestamp when the federated claim was updated (example: 2023-02-21T20:08:24.000Z)

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
list_federated_claimsselectsubdomainLists all federated claims for your app
get_federated_claimselectsubdomainRetrieves a federated claim by claimId
create_federated_claiminsertsubdomainCreates a claim that will be included in tokens produced by federation protocols (for example: OIDC id_tokens or SAML Assertions)
replace_federated_claimreplacesubdomainReplaces a claim that will be included in tokens produced by federation protocols (for example: OIDC id_tokens or SAML Assertions)
delete_federated_claimdeletesubdomainDeletes a federated claim by claimId

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
subdomainstringThe domain of your organization. This can be a provided subdomain of an official okta domain (okta.com, oktapreview.com, etc) or one of your configured custom domains. (default: my-org)

SELECT examples

Lists all federated claims for your app

SELECT
id,
name,
created,
expression,
lastUpdated
FROM okta.apps.federated_claims
WHERE subdomain = '{{ subdomain }}' -- required;

INSERT examples

Creates a claim that will be included in tokens produced by federation protocols (for example: OIDC id_tokens or SAML Assertions)

INSERT INTO okta.apps.federated_claims (
data__expression,
data__name,
subdomain
)
SELECT
'{{ expression }}',
'{{ name }}',
'{{ subdomain }}'
RETURNING
id,
name,
created,
expression,
lastUpdated
;

REPLACE examples

Replaces a claim that will be included in tokens produced by federation protocols (for example: OIDC id_tokens or SAML Assertions)

REPLACE okta.apps.federated_claims
SET
data__expression = '{{ expression }}',
data__name = '{{ name }}'
WHERE
subdomain = '{{ subdomain }}' --required
RETURNING
id,
name,
created,
expression,
lastUpdated;

DELETE examples

Deletes a federated claim by claimId

DELETE FROM okta.apps.federated_claims
WHERE subdomain = '{{ subdomain }}' --required;