- Fixes
- Update for PowerShell 7.3 breaking change
- New functions
- Import-OktaUser to allow importing users with a CSV
- Get-OktaApplication has a IncludeOkta switch to include apps that start with "Okta "
- New functions
- Import-OktaConfiguration for easier CI/CD. This has a superset of the Build-OktaSpaApplication and Build-OktaAuthorizationServer functions
- Set-OktaReadOnly can disable any non-GET API calls in case you connect to a system you don't want to accidentally write to. Not that this has ever happened before.
- Updates
- Set-Options has -WarnIfMore switch that will kick out a warning message if more data is available when getting items
- Change Export-OktaAuthorizationServer to export formatted JSON instead of one line for easier comparing
- Change Export-OktaAuthorizationServer to export more details about scopes and rules
- New-Okta*Application Inactive switch obsolete since Okta always added as active.
- ConvertTo-OktaYaml now takes array for app name query and regular expression for TrustedOrigins
- Fixes
- Fix ConvertTo-OktaApplicationYaml to get all applications if more than default Limit of 20, and get all groups
- Fix ConvertTo-OktaAuthorizationYaml in instance where label was missing, and claim sorting by type
- Fix ConvertTo-OktaYaml to exclude directories starting with '.' to avoid warning
- Fix Export-OktaAuthorizationServer for policies with rules.
- Get-OktaLog better -Since and -Until support for d, h, m, s
- Invoke-OktaApi has -AdditionalHeaders
- Disable-OktaUser has -Async
- Remove-OktaUser has -Async
- New functions
- Remove-OktaUserSession
- Reset-OktaPassword
- Reset-OktaPasswordWithAnswer
- Reset-OktaUserMfa
- Revoke-OktaPassword
- Set-OktaPassword
- Set-OktaUserRecoveryQuestion
- Unlock-User
- New helper functions
- Build-OktaAuthorizationServer
- Build-OktaApplication
- New functions for linking users
- Get-OktaLink
- Get-OktaLinkDefinition
- New-OktaLinkDefinition
- Remove-OktaLink
- Remove-OktaLinkDefinition
- Set-OktaLink
- All Get-Okta* function with a -Query parameter now will use heuristics to determine if it's an id. This may be turned off with
Set-OktaQueryForId $false
- Add unit test for yaml
- More parameter index cleanup
- Add -Until to Get-OktaLog
- Fix for yaml for newlines and trusted origins
- New functions
- ConvertTo-Okta*Yaml functions to generate easily compared configuration
- *-OktaZone
- Get-OktaLog
- *-OktaPasswordPolicy
- *-OktaPasswordPolicyRule
- Update Test-OktaNext to work for any type of object. Tab completion dynamically shows available ObjectNames. See about_oktaposh_paging
- For functions with -Next there's -NoWarn to suppress warning with no results returned
- Parameter updates for ambiguous parameter sets
- Add Set-OktaUser
- Add auth and app to Show-Okta
- Fix for passing secure strings
- Show-Okta will launch browser with the Get-OktaBaseUri
- Support for SPA Apps and Authorization Code flow in New-OktaSpaApp
- New auth server functions
- Set-OktaScope
- Remove-OktaScope
- Set-OktaPolicy
- Remove-OktaPolicy
- Set-OktaRule
- Remove-OktaRule
- New-OktaAuthProviderUser remove unusable NextLogin parameter since didn't make sense
- New-OktaAuthUser added support for more parameters
- GroupIds
- NextLogin
- RecoveryQuestion
- RecoveryAnswer
- Note that GroupIds is limited to a max of 20 in the API and enforced by parameter validation now
- Add retry logic for rate limit, and override switch of
Invoke-OktaApi
- Authorization Server Functions
- Fixes for Export-OktaAuthorizationServer
- User Functions
- New-OktaAuthProviderUser added Activate and NextLogin parameters. The former can avoid emails sent on add by calling Enable-OktaUser afterwards.
- New-OktaUser added pw parameter
- Disable-OktaUser
- Enable-OktaUser
- Suspend-OktaUser
- Resume-OktaUser
- Misc
- Set-OktaOption returns boolean indicating success
- Invoke-OktaApi added NotFoundOk parameter, PS v5 fixes
- Greatly increase test code coverage
- Fixes for Get-OktaJwt, split into two functions, Get-OktaJwt only works on PS v7
- PowerShell v5 compatibility fixes
- Add run.ps1 to more easily invoke commands locally
- Replace less that useful -After parameter with -Next switch for Gets that have -Limit and support it
- User Functions
- Get-OktaUserApplication
- Get-OktaUserGroup
- New-OktaAuthProviderUser
- Misc
- Get-OktaIdentityProvider
- User Functions
- Add-OktaApplicationUser
- Add-OktaGroupUser
- Remove-OktaApplicationUser
- Remove-OktaGroupUser
- All
Get-*
functions have-Json
switch to return raw JSON instead of PSCustomObject - Get-OktaJwt really works now, and will be api and user tokens.
- New Functions
- Applications
- Disable-OktaApplication
- Enable-OktaApplication
- Set-OktaApplication
- New-OktaSpaApplication
- Authorization Servers
- Export-OktaAuthorizationServer
- Get-OktaOpenIdConfig
- Claims
- Remove-OktaClaim
- Groups & Users
- Add-OktaApplicationGroup
- Get-OktaApplicationGroup
- Get-OktaApplicationUser
- Get-OktaGroupApp
- Get-OktaGroupUser
- Remove-OktaApplicationGroup
- TrustedDomains
- Get-OktaTrustedOrigin
- New-OktaTrustedOrigin
- Remove-OktaTrustedOrigin
- Set-OktaTrustedOrigin
- Schemas (Profiles)
- Get-OktaApplicationSchema
- Remove-OktaApplicationSchemaProperty
- Set-OktaApplicationSchemaProperty
- Users
- Add-OktaUser
- Get-OktaUser
- Remove-OktaUser
- Applications
- New Functions
- Get-OktaRateLimit
- Disable-OktaAuthorizationServer
- Enable-OktaAuthorizationServer