{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/okta/main/json-schema/okta-user-schema.json",
  "title": "Okta User",
  "description": "Core user representation in the Okta Management API.",
  "type": "object",
  "required": ["id", "status", "profile"],
  "properties": {
    "id": { "type": "string", "description": "Stable Okta user identifier (20-char alphanumeric)." },
    "status": {
      "type": "string",
      "enum": ["STAGED", "PROVISIONED", "ACTIVE", "RECOVERY", "LOCKED_OUT", "PASSWORD_EXPIRED", "SUSPENDED", "DEPROVISIONED"]
    },
    "created": { "type": "string", "format": "date-time" },
    "activated": { "type": ["string", "null"], "format": "date-time" },
    "statusChanged": { "type": ["string", "null"], "format": "date-time" },
    "lastLogin": { "type": ["string", "null"], "format": "date-time" },
    "lastUpdated": { "type": "string", "format": "date-time" },
    "passwordChanged": { "type": ["string", "null"], "format": "date-time" },
    "type": {
      "type": "object",
      "properties": { "id": { "type": "string" } }
    },
    "profile": {
      "type": "object",
      "required": ["login", "email"],
      "properties": {
        "login": { "type": "string", "format": "email" },
        "email": { "type": "string", "format": "email" },
        "secondEmail": { "type": ["string", "null"], "format": "email" },
        "firstName": { "type": "string" },
        "lastName": { "type": "string" },
        "mobilePhone": { "type": ["string", "null"] }
      },
      "additionalProperties": true
    },
    "credentials": {
      "type": "object",
      "properties": {
        "password": { "type": "object" },
        "recovery_question": {
          "type": "object",
          "properties": {
            "question": { "type": "string" }
          }
        },
        "provider": {
          "type": "object",
          "properties": {
            "type": {
              "type": "string",
              "enum": ["OKTA", "ACTIVE_DIRECTORY", "LDAP", "FEDERATION", "SOCIAL", "IMPORT"]
            },
            "name": { "type": "string" }
          }
        }
      }
    },
    "_links": { "type": "object" }
  },
  "additionalProperties": false
}