QUESTION 15
Okta implemented a way to receive reports (Okta usage, Okta Password Health, MFA Usage, etc.) via email. True?

QUESTION 16
In a SAML Trace, you can see that on an [Okta (IDP) App SAML request towards an App (SP side)] where you”ve already configured some regex-matching custom SAML attributes (not set in Mappings, but directly in the SAML App”s config) to be passed over, these (which are named in the App”s config as ”User attributes” or ”Group attributes”) are send:

QUESTION 17
Which of the following is / are OAuth 2.0 flow(s):

QUESTION 18
Groups are pushed towards apps via the method(s):

QUESTION 19
You can create Users via API calls. More than that, you can use Okta APIs in a ”customized” way, so that it is possible to create already activated and random password assigned Users into Okta Universal Directory.

QUESTION 20
Okta user accounts can exist in a large variety of states. When do accounts become ”active”, by having this state labeled next to them in the “Okta Admin Panel > Directoy > People > <specific_user_profile>”s page”?

QUESTION 21
Can I add more than one domain?

QUESTION 22
Okta org, when being used as an authorization server (issuer: https://<subdomain>.okta.com), can only be used for OIDC (Open ID Connect, hence Authentication) and not for OAuth (Authorization).

QUESTION 23
Per Okta Retention Policy, API calls of type GET cannot retrieve data older than:

QUESTION 24
In an Inline Hook scenario, if the external service responds with a redirect, Okta follows it.

QUESTION 25
In terms of security, is Okta allowing you to revoke an API token?

QUESTION 26
Access tokens are returned if ”response_type” included:

QUESTION 27
Okta serves pages on your custom domain over HTTPS. To set up this feature, you need to provide:

QUESTION 28
Inline Hooks are:

QUESTION 29
”token_type_hint” indicates the type of ”token” being passed. Valid value(s) can be: