generated: '2026-10-03' method: derived generator: derive-data-model.py source: - openapi/okta-application-api-openapi.yml - openapi/okta-authenticator-api-openapi.yml - openapi/okta-authorizationserver-api-openapi.yml - openapi/okta-brand-api-openapi.yml - openapi/okta-domain-api-openapi.yml - openapi/okta-eventhook-api-openapi.yml - openapi/okta-feature-api-openapi.yml - openapi/okta-group-api-openapi.yml - openapi/okta-groupschema-api-openapi.yml - openapi/okta-identity-provider-api-openapi.yml - openapi/okta-inlinehook-api-openapi.yml - openapi/okta-linkedobject-api-openapi.yml notation: has_one = property $ref; has_many = array of $ref; belongs_to = _id field summary: entities: 285 entities_in_spec: 285 relationships: 262 entities: - name: ActivateFactorRequest fields: 5 - name: AppAndInstanceConditionEvaluatorAppOrInstance fields: 3 - name: AppAndInstancePolicyRuleCondition fields: 2 - name: AppAuthenticatorEnrollment fields: 8 description: App authenticator enrollment object - name: AppAuthenticatorEnrollmentRequest fields: 3 description: App authenticator enrollment request - name: AppAuthenticatorMethodCapabilities fields: 1 - name: AppInstancePolicyRuleCondition fields: 2 - name: AppLink fields: 10 - name: AppUser fields: 14 - name: AppUserCredentials fields: 2 - name: AppUserPasswordCredential fields: 1 - name: Application fields: 16 - name: ApplicationAccessibility fields: 3 - name: ApplicationCredentials fields: 2 - name: ApplicationCredentialsSigning fields: 5 - name: ApplicationCredentialsUsernameTemplate fields: 4 - name: ApplicationFeature fields: 5 - name: ApplicationGroupAssignment fields: 6 - name: ApplicationLicensing fields: 1 - name: ApplicationSettings fields: 5 - name: ApplicationSettingsApplication fields: 7 - name: ApplicationSettingsNotes fields: 2 - name: ApplicationSettingsNotifications fields: 1 - name: ApplicationSettingsNotificationsVpn fields: 3 - name: ApplicationSettingsNotificationsVpnNetwork fields: 3 - name: ApplicationVisibility fields: 4 - name: ApplicationVisibilityHide fields: 2 - name: AssignRoleRequest fields: 1 - name: AuthenticationProvider fields: 2 - name: Authenticator fields: 10 - name: AuthenticatorEnrollment fields: 9 description: Authenticator enrollment of the current user - name: AuthenticatorProvider fields: 2 - name: AuthenticatorProviderConfiguration fields: 8 - name: AuthenticatorProviderConfigurationUserNamePlate fields: 1 - name: AuthenticatorSettings fields: 6 - name: AuthorizationServer fields: 12 - name: AuthorizationServerCredentials fields: 1 - name: AuthorizationServerCredentialsSigningConfig fields: 5 - name: AuthorizationServerPolicy fields: 12 - name: AuthorizationServerPolicyRule fields: 10 - name: AuthorizationServerPolicyRuleActions fields: 1 - name: AuthorizationServerPolicyRuleConditions fields: 4 - name: BeforeScheduledActionPolicyRuleCondition fields: 2 - name: Brand fields: 5 - name: CapabilitiesCreateObject fields: 1 - name: CapabilitiesObject fields: 2 - name: CapabilitiesUpdateObject fields: 3 - name: CatalogApplication fields: 12 - name: ChangePasswordRequest fields: 2 - name: ChannelBinding fields: 2 - name: ClientPolicyCondition fields: 1 - name: ClientSecret fields: 7 - name: ClientSecretMetadata fields: 1 - name: Compliance fields: 1 - name: ContextPolicyRuleCondition fields: 1 - name: CreateSessionRequest fields: 1 - name: CreateUserRequest fields: 4 - name: Csr fields: 4 - name: CsrMetadata fields: 2 - name: CsrMetadataSubject fields: 6 - name: CsrMetadataSubjectAltNames fields: 1 - name: DNSRecord fields: 4 - name: DevicePolicyRuleCondition fields: 4 - name: DevicePolicyRuleConditionPlatform fields: 2 - name: Domain fields: 6 - name: DomainCertificate fields: 4 - name: DomainCertificateMetadata fields: 3 - name: DomainListResponse fields: 1 - name: Duration fields: 2 - name: Email fields: 5 description: Email object - name: EmailTemplate fields: 2 - name: EmailTemplateContent fields: 5 - name: EmailTemplateCustomization fields: 8 - name: EmailTemplateCustomizationRequest fields: 4 - name: EmailTemplateTestRequest fields: 1 - name: Error fields: 5 description: Standard API error object - name: EventHook fields: 10 - name: EventHookChannel fields: 3 - name: EventHookChannelConfig fields: 3 - name: EventHookChannelConfigAuthScheme fields: 3 - name: EventHookChannelConfigHeader fields: 2 - name: EventSubscriptions fields: 2 - name: Feature fields: 7 - name: FeatureStage fields: 2 - name: ForgotPasswordResponse fields: 1 - name: GrantTypePolicyRuleCondition fields: 1 - name: Group fields: 9 - name: GroupCondition fields: 2 - name: GroupPolicyRuleCondition fields: 2 - name: GroupProfile fields: 2 - name: GroupRule fields: 8 - name: GroupRuleAction fields: 1 - name: GroupRuleConditions fields: 2 - name: GroupRuleExpression fields: 2 - name: GroupRuleGroupAssignment fields: 1 - name: GroupRuleGroupCondition fields: 2 - name: GroupRulePeopleCondition fields: 2 - name: GroupRuleUserCondition fields: 2 - name: GroupSchema fields: 11 - name: GroupSchemaAttribute fields: 17 - name: GroupSchemaBase fields: 4 - name: GroupSchemaBaseProperties fields: 2 - name: GroupSchemaCustom fields: 4 - name: GroupSchemaDefinitions fields: 2 - name: HrefObject fields: 4 - name: IdentityProvider fields: 10 - name: IdentityProviderApplicationUser fields: 7 - name: IdentityProviderCredentials fields: 3 - name: IdentityProviderCredentialsClient fields: 2 - name: IdentityProviderCredentialsSigning fields: 3 - name: IdentityProviderCredentialsTrust fields: 5 - name: IdentityProviderPolicy fields: 4 - name: IdentityProviderPolicyRuleCondition fields: 2 - name: IdpPolicyRuleAction fields: 1 - name: IdpPolicyRuleActionProvider fields: 2 - name: ImageUploadResponse fields: 1 - name: InactivityPolicyRuleCondition fields: 2 - name: InlineHook fields: 9 - name: InlineHookChannel fields: 3 - name: InlineHookChannelConfig fields: 4 - name: InlineHookChannelConfigAuthScheme fields: 3 - name: InlineHookChannelConfigHeaders fields: 2 - name: InlineHookPayload fields: 0 - name: InlineHookResponse fields: 1 - name: InlineHookResponseCommandValue fields: 3 - name: InlineHookResponseCommands fields: 2 - name: JsonWebKey fields: 16 - name: JwkUse fields: 1 - name: KeyEC fields: 6 - name: KeyObject fields: 0 - name: KeyRSA fields: 5 - name: LifecycleCreateSettingObject fields: 1 - name: LifecycleDeactivateSettingObject fields: 1 - name: LifecycleExpirationPolicyRuleCondition fields: 3 - name: LinkedObject fields: 3 - name: LinkedObjectDetails fields: 4 - name: LogActor fields: 5 - name: LogAuthenticationContext fields: 7 - name: LogClient fields: 6 - name: LogDebugContext fields: 1 - name: LogEvent fields: 16 - name: LogGeographicalContext fields: 5 - name: LogGeolocation fields: 2 - name: LogIpAddress fields: 4 - name: LogIssuer fields: 2 - name: LogOutcome fields: 2 - name: LogRequest fields: 1 - name: LogSecurityContext fields: 5 - name: LogTarget fields: 5 - name: LogTransaction fields: 3 - name: LogUserAgent fields: 3 - name: MDMEnrollmentPolicyRuleCondition fields: 2 - name: NetworkZone fields: 14 - name: NetworkZoneAddress fields: 2 - name: NetworkZoneLocation fields: 2 - name: OAuth2Actor fields: 2 - name: OAuth2Claim fields: 11 - name: OAuth2ClaimConditions fields: 1 - name: OAuth2Client fields: 5 - name: OAuth2RefreshToken fields: 12 - name: OAuth2Scope fields: 8 - name: OAuth2ScopeConsentGrant fields: 12 - name: OAuth2ScopesMediationPolicyRuleCondition fields: 1 - name: OAuth2Token fields: 11 - name: OktaApplication fields: 3 description: Okta apps list - name: OktaSignOnPolicyRuleSignonActions fields: 6 - name: OktaSignOnPolicyRuleSignonSessionActions fields: 3 - name: OrgContactTypeObj fields: 2 - name: OrgContactUser fields: 2 - name: OrgOktaCommunicationSetting fields: 2 - name: OrgOktaSupportSettingsObj fields: 3 - name: OrgPreferences fields: 2 - name: OrgSetting fields: 18 - name: Organization fields: 5 description: Org object - name: PasswordCredential fields: 3 - name: PasswordCredentialHash fields: 5 - name: PasswordCredentialHook fields: 1 - name: PasswordExpirationPolicyRuleCondition fields: 2 - name: PasswordPolicyAuthenticationProviderCondition fields: 2 - name: PasswordPolicyRuleAction fields: 1 - name: PasswordResponse fields: 5 description: Password response object - name: PasswordSettingObject fields: 3 - name: Phone fields: 4 description: Phone object - name: PlatformConditionEvaluatorPlatform fields: 2 - name: PlatformConditionEvaluatorPlatformOperatingSystem fields: 3 - name: PlatformConditionEvaluatorPlatformOperatingSystemVersion fields: 2 - name: PlatformPolicyRuleCondition fields: 2 - name: Policy fields: 12 - name: PolicyAccountLink fields: 2 - name: PolicyAccountLinkFilter fields: 1 - name: PolicyAccountLinkFilterGroups fields: 1 - name: PolicyNetworkCondition fields: 3 - name: PolicyPeopleCondition fields: 2 - name: PolicyRule fields: 10 - name: PolicyRuleActions fields: 6 - name: PolicyRuleActionsEnroll fields: 1 - name: PolicyRuleAuthContextCondition fields: 1 - name: PolicyRuleConditions fields: 21 - name: PolicySubject fields: 5 - name: PolicyUserNameTemplate fields: 1 - name: Profile fields: 4 description: Profile object based on the user's directory profile schema (based on UD) - name: ProfileMapping fields: 5 - name: ProfileMappingProperty fields: 2 - name: ProfileMappingPropertyPushStatus fields: 0 - name: ProfileMappingSource fields: 4 - name: ProfileSettingObject fields: 1 - name: Protocol fields: 8 - name: ProtocolAlgorithmType fields: 1 - name: ProtocolAlgorithmTypeSignature fields: 2 - name: ProtocolAlgorithms fields: 2 - name: ProtocolEndpoint fields: 4 - name: ProtocolEndpoints fields: 8 - name: ProtocolRelayState fields: 1 - name: ProtocolSettings fields: 1 - name: Provisioning fields: 4 - name: ProvisioningConditions fields: 2 - name: ProvisioningConnection fields: 3 - name: ProvisioningConnectionProfile fields: 2 - name: ProvisioningConnectionRequest fields: 1 - name: ProvisioningDeprovisionedCondition fields: 1 - name: ProvisioningGroups fields: 4 - name: ProvisioningSuspendedCondition fields: 1 - name: PushNotificationChallenge fields: 2 description: Push notification challenge request object for an app authenticator - name: PushNotificationChallengeRequestJwt fields: 20 description: JSON Web Token payload constructed by Okta for the push notification challenge request JWT - name: PushNotificationChallengeRequestJwtHeader fields: 3 description: JSON Web Token header used for the push notification challenge request JWT - name: PushNotificationChallengeResponseJwt fields: 13 description: JSON Web Token payload used for the push notification challenge response JWT - name: PushNotificationChallengeResponseJwtHeader fields: 3 description: JSON Web Token header used for the push notification challenge response JWT - name: PushNotificationVerification fields: 2 description: Push notification challenge response object for an app authenticator - name: RecoveryQuestionCredential fields: 2 - name: ResetPasswordToken fields: 1 - name: ResponseLinks fields: 1 - name: RiskPolicyRuleCondition fields: 1 - name: RiskScorePolicyRuleCondition fields: 1 - name: Role fields: 10 - name: ScheduledUserLifecycleAction fields: 1 - name: Schema fields: 2 description: Describes a user's directory profile schema (based on UD) - name: Scope fields: 3 - name: SecurityQuestion fields: 3 - name: Session fields: 11 - name: SessionIdentityProvider fields: 2 - name: SmsTemplate fields: 7 - name: SmsTemplateTranslations fields: 0 - name: SocialAuthToken fields: 6 - name: Subscription fields: 4 - name: TempPassword fields: 1 - name: Theme fields: 10 - name: ThemeResponse fields: 13 - name: ThreatInsightConfiguration fields: 5 - name: TokenAuthorizationServerPolicyRuleAction fields: 4 - name: TokenAuthorizationServerPolicyRuleActionInlineHook fields: 1 - name: TrustedOrigin fields: 10 - name: UpdateAppAuthenticatorEnrollmentRequest fields: 1 - name: UpdateAuthenticatorEnrollmentRequest fields: 1 - name: User fields: 14 - name: UserActivationToken fields: 2 - name: UserCondition fields: 2 - name: UserCredentials fields: 3 - name: UserFactor fields: 9 - name: UserIdString fields: 1 - name: UserIdentifierConditionEvaluatorPattern fields: 2 - name: UserIdentifierPolicyRuleCondition fields: 3 - name: UserIdentityProviderLinkRequest fields: 1 - name: UserLifecycleAttributePolicyRuleCondition fields: 2 - name: UserPolicyRuleCondition fields: 6 - name: UserProfile fields: 31 - name: UserSchema fields: 10 - name: UserSchemaAttribute fields: 18 - name: UserSchemaAttributeEnum fields: 2 - name: UserSchemaAttributeItems fields: 3 - name: UserSchemaAttributeMaster fields: 2 - name: UserSchemaAttributeMasterPriority fields: 2 - name: UserSchemaAttributePermission fields: 2 - name: UserSchemaAttributeScope fields: 0 - name: UserSchemaAttributeUnion fields: 0 - name: UserSchemaBase fields: 4 - name: UserSchemaBaseProperties fields: 31 - name: UserSchemaDefinitions fields: 2 - name: UserSchemaProperties fields: 1 - name: UserSchemaPropertiesProfile fields: 1 - name: UserSchemaPropertiesProfileItem fields: 1 - name: UserSchemaPublic fields: 4 - name: UserStatusPolicyRuleCondition fields: 1 - name: UserType fields: 10 - name: VerifyFactorRequest fields: 8 - name: VerifyUserFactorResponse fields: 5 relationships: - from: ApplicationVisibility to: ApplicationVisibilityHide type: has_one via: hide - from: OAuth2Token to: User type: belongs_to via: userId - from: Application to: ApplicationAccessibility type: has_one via: accessibility - from: Application to: ApplicationCredentials type: has_one via: credentials - from: Application to: ApplicationLicensing type: has_one via: licensing - from: Application to: ApplicationSettings type: has_one via: settings - from: Application to: ApplicationVisibility type: has_one via: visibility - from: CapabilitiesCreateObject to: LifecycleCreateSettingObject type: has_one via: lifecycleCreate - from: AppUserCredentials to: AppUserPasswordCredential type: has_one via: password - from: CapabilitiesObject to: CapabilitiesCreateObject type: has_one via: create - from: CapabilitiesObject to: CapabilitiesUpdateObject type: has_one via: update - from: OAuth2ScopeConsentGrant to: OAuth2Actor type: has_one via: createdBy - from: OAuth2ScopeConsentGrant to: Scope type: belongs_to via: scopeId - from: OAuth2ScopeConsentGrant to: User type: belongs_to via: userId - from: CsrMetadata to: CsrMetadataSubject type: has_one via: subject - from: CsrMetadata to: CsrMetadataSubjectAltNames type: has_one via: subjectAltNames - from: ApplicationSettingsNotifications to: ApplicationSettingsNotificationsVpn type: has_one via: vpn - from: ApplicationCredentials to: ApplicationCredentialsSigning type: has_one via: signing - from: ApplicationCredentials to: ApplicationCredentialsUsernameTemplate type: has_one via: userNameTemplate - from: ApplicationSettingsNotificationsVpn to: ApplicationSettingsNotificationsVpnNetwork type: has_one via: network - from: AppUser to: AppUserCredentials type: has_one via: credentials - from: CapabilitiesUpdateObject to: LifecycleDeactivateSettingObject type: has_one via: lifecycleDeactivate - from: CapabilitiesUpdateObject to: PasswordSettingObject type: has_one via: password - from: CapabilitiesUpdateObject to: ProfileSettingObject type: has_one via: profile - from: ApplicationFeature to: CapabilitiesObject type: has_one via: capabilities - from: ApplicationSettings to: ApplicationSettingsApplication type: has_one via: app - from: ApplicationSettings to: InlineHook type: belongs_to via: inlineHookId - from: ApplicationSettings to: ApplicationSettingsNotes type: has_one via: notes - from: ApplicationSettings to: ApplicationSettingsNotifications type: has_one via: notifications - from: ProvisioningConnectionRequest to: ProvisioningConnectionProfile type: has_one via: profile - from: AuthenticatorProvider to: AuthenticatorProviderConfiguration type: has_one via: configuration - from: AuthenticatorProviderConfiguration to: AuthenticatorProviderConfigurationUserNamePlate type: has_one via: userNameTemplate - from: Authenticator to: AuthenticatorProvider type: has_one via: provider - from: Authenticator to: AuthenticatorSettings type: has_one via: settings - from: AuthenticatorSettings to: ChannelBinding type: has_one via: channelBinding - from: AuthenticatorSettings to: Compliance type: has_one via: compliance - from: PlatformConditionEvaluatorPlatform to: PlatformConditionEvaluatorPlatformOperatingSystem type: has_one via: os - from: AuthorizationServerPolicyRule to: AuthorizationServerPolicyRuleActions type: has_one via: actions - from: AuthorizationServerPolicyRule to: AuthorizationServerPolicyRuleConditions type: has_one via: conditions - from: PlatformConditionEvaluatorPlatformOperatingSystem to: PlatformConditionEvaluatorPlatformOperatingSystemVersion type: has_one via: version - from: DevicePolicyRuleCondition to: DevicePolicyRuleConditionPlatform type: has_one via: platform - from: AuthorizationServerPolicyRuleConditions to: ClientPolicyCondition type: has_one via: clients - from: AuthorizationServerPolicyRuleConditions to: GrantTypePolicyRuleCondition type: has_one via: grantTypes - from: AuthorizationServerPolicyRuleConditions to: PolicyPeopleCondition type: has_one via: people - from: AuthorizationServerPolicyRuleConditions to: OAuth2ScopesMediationPolicyRuleCondition type: has_one via: scopes - from: AppAndInstancePolicyRuleCondition to: AppAndInstanceConditionEvaluatorAppOrInstance type: has_many via: exclude - from: AppAndInstancePolicyRuleCondition to: AppAndInstanceConditionEvaluatorAppOrInstance type: has_many via: include - from: UserPolicyRuleCondition to: InactivityPolicyRuleCondition type: has_one via: inactivity - from: UserPolicyRuleCondition to: LifecycleExpirationPolicyRuleCondition type: has_one via: lifecycleExpiration - from: UserPolicyRuleCondition to: PasswordExpirationPolicyRuleCondition type: has_one via: passwordExpiration - from: UserPolicyRuleCondition to: UserLifecycleAttributePolicyRuleCondition type: has_one via: userLifecycleAttribute - from: PolicyRuleConditions to: AppAndInstancePolicyRuleCondition type: has_one via: app - from: PolicyRuleConditions to: AppInstancePolicyRuleCondition type: has_one via: apps - from: PolicyRuleConditions to: PolicyRuleAuthContextCondition type: has_one via: authContext - from: PolicyRuleConditions to: PasswordPolicyAuthenticationProviderCondition type: has_one via: authProvider - from: PolicyRuleConditions to: BeforeScheduledActionPolicyRuleCondition type: has_one via: beforeScheduledAction - from: PolicyRuleConditions to: ClientPolicyCondition type: has_one via: clients - from: PolicyRuleConditions to: ContextPolicyRuleCondition type: has_one via: context - from: PolicyRuleConditions to: DevicePolicyRuleCondition type: has_one via: device - from: PolicyRuleConditions to: GrantTypePolicyRuleCondition type: has_one via: grantTypes - from: PolicyRuleConditions to: GroupPolicyRuleCondition type: has_one via: groups - from: PolicyRuleConditions to: IdentityProviderPolicyRuleCondition type: has_one via: identityProvider - from: PolicyRuleConditions to: MDMEnrollmentPolicyRuleCondition type: has_one via: mdmEnrollment - from: PolicyRuleConditions to: PolicyNetworkCondition type: has_one via: network - from: PolicyRuleConditions to: PolicyPeopleCondition type: has_one via: people - from: PolicyRuleConditions to: PlatformPolicyRuleCondition type: has_one via: platform - from: PolicyRuleConditions to: RiskPolicyRuleCondition type: has_one via: risk - from: PolicyRuleConditions to: RiskScorePolicyRuleCondition type: has_one via: riskScore - from: PolicyRuleConditions to: OAuth2ScopesMediationPolicyRuleCondition type: has_one via: scopes - from: PolicyRuleConditions to: UserIdentifierPolicyRuleCondition type: has_one via: userIdentifier - from: PolicyRuleConditions to: UserStatusPolicyRuleCondition type: has_one via: userStatus - from: PolicyRuleConditions to: UserPolicyRuleCondition type: has_one via: users - from: UserIdentifierPolicyRuleCondition to: UserIdentifierConditionEvaluatorPattern type: has_many via: patterns - from: AuthorizationServer to: AuthorizationServerCredentials type: has_one via: credentials - from: PolicyPeopleCondition to: GroupCondition type: has_one via: groups - from: PolicyPeopleCondition to: UserCondition type: has_one via: users - from: OAuth2RefreshToken to: OAuth2Actor type: has_one via: createdBy - from: OAuth2RefreshToken to: User type: belongs_to via: userId - from: TokenAuthorizationServerPolicyRuleAction to: TokenAuthorizationServerPolicyRuleActionInlineHook type: has_one via: inlineHook - from: AuthorizationServerPolicyRuleActions to: TokenAuthorizationServerPolicyRuleAction type: has_one via: token - from: OAuth2Claim to: OAuth2ClaimConditions type: has_one via: conditions - from: AuthorizationServerPolicy to: PolicyRuleConditions type: has_one via: conditions - from: BeforeScheduledActionPolicyRuleCondition to: Duration type: has_one via: duration - from: BeforeScheduledActionPolicyRuleCondition to: ScheduledUserLifecycleAction type: has_one via: lifecycleAction - from: AuthorizationServerCredentials to: AuthorizationServerCredentialsSigningConfig type: has_one via: signing - from: PlatformPolicyRuleCondition to: PlatformConditionEvaluatorPlatform type: has_many via: exclude - from: PlatformPolicyRuleCondition to: PlatformConditionEvaluatorPlatform type: has_many via: include - from: DomainListResponse to: Domain type: has_many via: domains - from: Domain to: DNSRecord type: has_many via: dnsRecords - from: Domain to: DomainCertificateMetadata type: has_one via: publicCertificate - from: EventHookChannel to: EventHookChannelConfig type: has_one via: config - from: EventHook to: EventHookChannel type: has_one via: channel - from: EventHook to: EventSubscriptions type: has_one via: events - from: EventHookChannelConfig to: EventHookChannelConfigAuthScheme type: has_one via: authScheme - from: EventHookChannelConfig to: EventHookChannelConfigHeader type: has_many via: headers - from: Feature to: FeatureStage type: has_one via: stage - from: GroupRuleGroupAssignment to: Group type: belongs_to via: groupIds - from: Group to: GroupProfile type: has_one via: profile - from: PasswordCredential to: PasswordCredentialHash type: has_one via: hash - from: PasswordCredential to: PasswordCredentialHook type: has_one via: hook - from: UserCredentials to: PasswordCredential type: has_one via: password - from: UserCredentials to: AuthenticationProvider type: has_one via: provider - from: UserCredentials to: RecoveryQuestionCredential type: has_one via: recovery_question - from: GroupRuleConditions to: GroupRuleExpression type: has_one via: expression - from: GroupRuleConditions to: GroupRulePeopleCondition type: has_one via: people - from: GroupRule to: GroupRuleAction type: has_one via: actions - from: GroupRule to: GroupRuleConditions type: has_one via: conditions - from: User to: UserCredentials type: has_one via: credentials - from: User to: UserProfile type: has_one via: profile - from: User to: UserType type: has_one via: type - from: GroupRuleAction to: GroupRuleGroupAssignment type: has_one via: assignUserToGroups - from: GroupRulePeopleCondition to: GroupRuleGroupCondition type: has_one via: groups - from: GroupRulePeopleCondition to: GroupRuleUserCondition type: has_one via: users - from: GroupSchemaDefinitions to: GroupSchemaBase type: has_one via: base - from: GroupSchemaDefinitions to: GroupSchemaCustom type: has_one via: custom - from: UserSchemaAttributeMaster to: UserSchemaAttributeMasterPriority type: has_many via: priority - from: GroupSchemaAttribute to: UserSchemaAttributeItems type: has_one via: items - from: GroupSchemaAttribute to: UserSchemaAttributeMaster type: has_one via: master - from: GroupSchemaAttribute to: UserSchemaAttributeEnum type: has_many via: oneOf - from: GroupSchemaAttribute to: UserSchemaAttributePermission type: has_many via: permissions - from: GroupSchemaAttribute to: UserSchemaAttributeScope type: has_one via: scope - from: GroupSchemaAttribute to: UserSchemaAttributeUnion type: has_one via: union - from: GroupSchemaBaseProperties to: GroupSchemaAttribute type: has_one via: description - from: GroupSchemaBaseProperties to: GroupSchemaAttribute type: has_one via: name - from: UserSchemaPropertiesProfile to: UserSchemaPropertiesProfileItem type: has_many via: allOf - from: UserSchemaProperties to: UserSchemaPropertiesProfile type: has_one via: profile - from: GroupSchema to: GroupSchemaDefinitions type: has_one via: definitions - from: GroupSchema to: UserSchemaProperties type: has_one via: properties - from: GroupSchemaBase to: GroupSchemaBaseProperties type: has_one via: properties - from: UserSchemaAttributeItems to: UserSchemaAttributeEnum type: has_many via: oneOf - from: ProtocolEndpoints to: ProtocolEndpoint type: has_one via: acs - from: ProtocolEndpoints to: ProtocolEndpoint type: has_one via: authorization - from: ProtocolEndpoints to: ProtocolEndpoint type: has_one via: jwks - from: ProtocolEndpoints to: ProtocolEndpoint type: has_one via: metadata - from: ProtocolEndpoints to: ProtocolEndpoint type: has_one via: slo - from: ProtocolEndpoints to: ProtocolEndpoint type: has_one via: sso - from: ProtocolEndpoints to: ProtocolEndpoint type: has_one via: token - from: ProtocolEndpoints to: ProtocolEndpoint type: has_one via: userInfo - from: ProtocolAlgorithms to: ProtocolAlgorithmType type: has_one via: request - from: ProtocolAlgorithms to: ProtocolAlgorithmType type: has_one via: response - from: PolicySubject to: PolicyUserNameTemplate type: has_one via: userNameTemplate - from: ProtocolAlgorithmType to: ProtocolAlgorithmTypeSignature type: has_one via: signature - from: PolicyAccountLinkFilter to: PolicyAccountLinkFilterGroups type: has_one via: groups - from: IdentityProviderPolicy to: PolicyAccountLink type: has_one via: accountLink - from: IdentityProviderPolicy to: Provisioning type: has_one via: provisioning - from: IdentityProviderPolicy to: PolicySubject type: has_one via: subject - from: Provisioning to: ProvisioningConditions type: has_one via: conditions - from: Provisioning to: ProvisioningGroups type: has_one via: groups - from: IdentityProviderCredentials to: IdentityProviderCredentialsClient type: has_one via: client - from: IdentityProviderCredentials to: IdentityProviderCredentialsSigning type: has_one via: signing - from: IdentityProviderCredentials to: IdentityProviderCredentialsTrust type: has_one via: trust - from: IdentityProvider to: IdentityProviderPolicy type: has_one via: policy - from: IdentityProvider to: Protocol type: has_one via: protocol - from: PolicyAccountLink to: PolicyAccountLinkFilter type: has_one via: filter - from: ProvisioningConditions to: ProvisioningDeprovisionedCondition type: has_one via: deprovisioned - from: ProvisioningConditions to: ProvisioningSuspendedCondition type: has_one via: suspended - from: Protocol to: ProtocolAlgorithms type: has_one via: algorithms - from: Protocol to: IdentityProviderCredentials type: has_one via: credentials - from: Protocol to: ProtocolEndpoints type: has_one via: endpoints - from: Protocol to: ProtocolEndpoint type: has_one via: issuer - from: Protocol to: ProtocolRelayState type: has_one via: relayState - from: Protocol to: ProtocolSettings type: has_one via: settings - from: InlineHook to: InlineHookChannel type: has_one via: channel - from: InlineHookResponseCommands to: InlineHookResponseCommandValue type: has_many via: value - from: InlineHookChannelConfig to: InlineHookChannelConfigAuthScheme type: has_one via: authScheme - from: InlineHookChannelConfig to: InlineHookChannelConfigHeaders type: has_many via: headers - from: InlineHookChannel to: InlineHookChannelConfig type: has_one via: config - from: InlineHookResponse to: InlineHookResponseCommands type: has_many via: commands - from: LinkedObject to: LinkedObjectDetails type: has_one via: associated - from: LinkedObject to: LinkedObjectDetails type: has_one via: primary - from: LogRequest to: LogIpAddress type: has_many via: ipChain - from: LogEvent to: LogActor type: has_one via: actor - from: LogEvent to: LogAuthenticationContext type: has_one via: authenticationContext - from: LogEvent to: LogClient type: has_one via: client - from: LogEvent to: LogDebugContext type: has_one via: debugContext - from: LogEvent to: LogOutcome type: has_one via: outcome - from: LogEvent to: LogRequest type: has_one via: request - from: LogEvent to: LogSecurityContext type: has_one via: securityContext - from: LogEvent to: LogTarget type: has_many via: target - from: LogEvent to: LogTransaction type: has_one via: transaction - from: LogClient to: LogGeographicalContext type: has_one via: geographicalContext - from: LogClient to: LogUserAgent type: has_one via: userAgent - from: LogAuthenticationContext to: LogIssuer type: has_one via: issuer - from: LogIpAddress to: LogGeographicalContext type: has_one via: geographicalContext - from: LogGeographicalContext to: LogGeolocation type: has_one via: geolocation - from: AppAuthenticatorEnrollment to: Authenticator type: belongs_to via: authenticatorId - from: AppAuthenticatorEnrollmentRequest to: Authenticator type: belongs_to via: authenticatorId - from: PushNotificationChallengeRequestJwt to: AuthenticatorEnrollment type: belongs_to via: authenticatorEnrollmentId - from: PushNotificationChallengeRequestJwt to: AuthorizationServer type: belongs_to via: authorizationServerId - from: PushNotificationChallengeRequestJwt to: User type: belongs_to via: userId - from: NetworkZone to: NetworkZoneAddress type: has_many via: gateways - from: NetworkZone to: NetworkZoneLocation type: has_many via: locations - from: NetworkZone to: NetworkZoneAddress type: has_many via: proxies - from: UserIdString to: User type: belongs_to via: userId - from: OrgContactUser to: User type: belongs_to via: userId - from: OktaSignOnPolicyRuleSignonActions to: OktaSignOnPolicyRuleSignonSessionActions type: has_one via: session - from: Policy to: PolicyRuleConditions type: has_one via: conditions - from: PolicyRuleActions to: PolicyRuleActionsEnroll type: has_one via: enroll - from: PolicyRuleActions to: IdpPolicyRuleAction type: has_one via: idp - from: PolicyRuleActions to: PasswordPolicyRuleAction type: has_one via: passwordChange - from: PolicyRuleActions to: PasswordPolicyRuleAction type: has_one via: selfServicePasswordReset - from: PolicyRuleActions to: PasswordPolicyRuleAction type: has_one via: selfServiceUnlock - from: PolicyRuleActions to: OktaSignOnPolicyRuleSignonActions type: has_one via: signon - from: PolicyRule to: PolicyRuleActions type: has_one via: actions - from: PolicyRule to: PolicyRuleConditions type: has_one via: conditions - from: IdpPolicyRuleAction to: IdpPolicyRuleActionProvider type: has_many via: providers - from: ProfileMapping to: ProfileMappingSource type: has_one via: source - from: ProfileMapping to: ProfileMappingSource type: has_one via: target - from: ProfileMappingProperty to: ProfileMappingPropertyPushStatus type: has_one via: pushStatus - from: Session to: SessionIdentityProvider type: has_one via: idp - from: Session to: User type: belongs_to via: userId - from: SmsTemplate to: SmsTemplateTranslations type: has_one via: translations - from: TrustedOrigin to: Scope type: has_many via: scopes - from: CreateUserRequest to: UserCredentials type: has_one via: credentials - from: CreateUserRequest to: Group type: belongs_to via: groupIds - from: CreateUserRequest to: UserProfile type: has_one via: profile - from: CreateUserRequest to: UserType type: has_one via: type - from: ChangePasswordRequest to: PasswordCredential type: has_one via: newPassword - from: ChangePasswordRequest to: PasswordCredential type: has_one via: oldPassword - from: UserFactor to: VerifyFactorRequest type: has_one via: verify - from: UserSchema to: UserSchemaDefinitions type: has_one via: definitions - from: UserSchema to: UserSchemaProperties type: has_one via: properties - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: city - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: costCenter - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: countryCode - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: department - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: displayName - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: division - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: email - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: employeeNumber - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: firstName - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: honorificPrefix - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: honorificSuffix - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: lastName - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: locale - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: login - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: manager - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: managerId - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: middleName - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: mobilePhone - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: nickName - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: organization - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: postalAddress - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: preferredLanguage - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: primaryPhone - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: profileUrl - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: secondEmail - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: state - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: streetAddress - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: timezone - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: title - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: userType - from: UserSchemaBaseProperties to: UserSchemaAttribute type: has_one via: zipCode - from: UserSchemaDefinitions to: UserSchemaBase type: has_one via: base - from: UserSchemaDefinitions to: UserSchemaPublic type: has_one via: custom - from: UserSchemaAttribute to: UserSchemaAttributeItems type: has_one via: items - from: UserSchemaAttribute to: UserSchemaAttributeMaster type: has_one via: master - from: UserSchemaAttribute to: UserSchemaAttributeEnum type: has_many via: oneOf - from: UserSchemaAttribute to: UserSchemaAttributePermission type: has_many via: permissions - from: UserSchemaAttribute to: UserSchemaAttributeScope type: has_one via: scope - from: UserSchemaAttribute to: UserSchemaAttributeUnion type: has_one via: union - from: UserSchemaBase to: UserSchemaBaseProperties type: has_one via: properties