Skip to main content

custom_aaguids

Creates, updates, deletes, gets or lists a custom_aaguids resource.

Overview

Namecustom_aaguids
TypeResource
Idokta.authenticators.custom_aaguids

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
namestringThe product name associated with the AAGUID
_linksobjectSpecifies link relations (see Web Linking) available using the JSON Hypertext Application Language specification. This object is used for dynamic discovery of related resources and lifecycle operations.
aaguidstringA unique 128-bit identifier that's assigned to a specific model of security key or authenticator
attestationRootCertificatesarray
authenticatorCharacteristicsobjectContains additional properties about custom AAGUID.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
list_all_custom_aaguidsselectsubdomainLists all custom Authenticator Attestation Global Unique Identifiers (AAGUIDs) in the org

Only custom AAGUIDs that an admin has created are returned.
get_custom_aaguidselectsubdomainRetrieves a custom AAGUID
create_custom_aaguidinsertsubdomainCreates a custom AAGUID for the WebAuthn authenticator
update_custom_aaguidupdatesubdomainUpdates the properties of a custom AAGUID by the authenticatorId and aaguid ID
replace_custom_aaguidreplacesubdomainReplaces a custom AAGUID for the specified WebAuthn authenticator
delete_custom_aaguiddeletesubdomainDeletes a custom AAGUID

You can only delete custom AAGUIDs that an admin has created.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
subdomainstringThe domain of your organization. This can be a provided subdomain of an official okta domain (okta.com, oktapreview.com, etc) or one of your configured custom domains. (default: my-org)

SELECT examples

Lists all custom Authenticator Attestation Global Unique Identifiers (AAGUIDs) in the org

Only custom AAGUIDs that an admin has created are returned.

SELECT
name,
_links,
aaguid,
attestationRootCertificates,
authenticatorCharacteristics
FROM okta.authenticators.custom_aaguids
WHERE subdomain = '{{ subdomain }}' -- required
;

INSERT examples

Creates a custom AAGUID for the WebAuthn authenticator

INSERT INTO okta.authenticators.custom_aaguids (
data__aaguid,
data__attestationRootCertificates,
data__authenticatorCharacteristics,
subdomain
)
SELECT
'{{ aaguid }}',
'{{ attestationRootCertificates }}',
'{{ authenticatorCharacteristics }}',
'{{ subdomain }}'
RETURNING
name,
_links,
aaguid,
attestationRootCertificates,
authenticatorCharacteristics
;

UPDATE examples

Updates the properties of a custom AAGUID by the authenticatorId and aaguid ID

UPDATE okta.authenticators.custom_aaguids
SET
data__attestationRootCertificates = '{{ attestationRootCertificates }}',
data__authenticatorCharacteristics = '{{ authenticatorCharacteristics }}',
data__name = '{{ name }}'
WHERE
subdomain = '{{ subdomain }}' --required
RETURNING
name,
_links,
aaguid,
attestationRootCertificates,
authenticatorCharacteristics
;

REPLACE examples

Replaces a custom AAGUID for the specified WebAuthn authenticator

REPLACE okta.authenticators.custom_aaguids
SET
data__attestationRootCertificates = '{{ attestationRootCertificates }}',
data__authenticatorCharacteristics = '{{ authenticatorCharacteristics }}',
data__name = '{{ name }}'
WHERE
subdomain = '{{ subdomain }}' --required
RETURNING
name,
_links,
aaguid,
attestationRootCertificates,
authenticatorCharacteristics
;

DELETE examples

Deletes a custom AAGUID

You can only delete custom AAGUIDs that an admin has created.

DELETE FROM okta.authenticators.custom_aaguids
WHERE subdomain = '{{ subdomain }}' --required
;