Package com.okta.sdk.resource.api

Class IdentityProviderSigningKeysApi

java.lang.Object
com.okta.sdk.resource.api.IdentityProviderSigningKeysApi
@Generated(value="org.openapitools.codegen.languages.JavaClientCodegen", date="2026-03-13T17:36:05.533634+05:30[Asia/Kolkata]", comments="Generator version: 7.15.0") public class IdentityProviderSigningKeysApi extends Object

  • Constructor Details

    • IdentityProviderSigningKeysApi

      public IdentityProviderSigningKeysApi()

    • IdentityProviderSigningKeysApi

      public IdentityProviderSigningKeysApi(ApiClient apiClient)

  • Method Details

    • getApiClient

      public ApiClient getApiClient()

    • setApiClient

      public void setApiClient(ApiClient apiClient)

    • cloneIdentityProviderKey

      public IdPKeyCredential cloneIdentityProviderKey(String idpId, String kid, String targetIdpId) throws ApiException
      Clone a signing key credential for IdP Clones an X.509 certificate for an identity provider (IdP) signing key credential from a source IdP to target IdP > **Caution:** Sharing certificates isn't a recommended security practice. > **Note:** If the key is already present in the list of key credentials for the target IdP, you receive a 400 error response.
      Parameters:
      idpId - `id` of IdP (required)
      kid - Unique `id` of the IdP key credential (required)
      targetIdpId - `id` of the target IdP (required)
      Returns:
      IdPKeyCredential
      Throws:
      ApiException - if fails to make API call

    • cloneIdentityProviderKey

      public IdPKeyCredential cloneIdentityProviderKey(String idpId, String kid, String targetIdpId, Map<String,String> additionalHeaders) throws ApiException
      Clone a signing key credential for IdP Clones an X.509 certificate for an identity provider (IdP) signing key credential from a source IdP to target IdP > **Caution:** Sharing certificates isn't a recommended security practice. > **Note:** If the key is already present in the list of key credentials for the target IdP, you receive a 400 error response.
      Parameters:
      idpId - `id` of IdP (required)
      kid - Unique `id` of the IdP key credential (required)
      targetIdpId - `id` of the target IdP (required)
      additionalHeaders - additionalHeaders for this call
      Returns:
      IdPKeyCredential
      Throws:
      ApiException - if fails to make API call

    • generateCsrForIdentityProvider

      public IdPCsr generateCsrForIdentityProvider(String idpId, CsrMetadata metadata) throws ApiException
      Generate a certificate signing request Generates a new key pair and returns a certificate signing request (CSR) for it > **Note:** The private key isn't listed in the [signing key credentials for the identity provider (IdP)](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/IdentityProviderSigningKeys/#tag/IdentityProviderSigningKeys/operation/listIdentityProviderSigningKeys) until it's published.
      Parameters:
      idpId - `id` of IdP (required)
      metadata - (required)
      Returns:
      IdPCsr
      Throws:
      ApiException - if fails to make API call

    • generateCsrForIdentityProvider

      public IdPCsr generateCsrForIdentityProvider(String idpId, CsrMetadata metadata, Map<String,String> additionalHeaders) throws ApiException
      Generate a certificate signing request Generates a new key pair and returns a certificate signing request (CSR) for it > **Note:** The private key isn't listed in the [signing key credentials for the identity provider (IdP)](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/IdentityProviderSigningKeys/#tag/IdentityProviderSigningKeys/operation/listIdentityProviderSigningKeys) until it's published.
      Parameters:
      idpId - `id` of IdP (required)
      metadata - (required)
      additionalHeaders - additionalHeaders for this call
      Returns:
      IdPCsr
      Throws:
      ApiException - if fails to make API call

    • generateIdentityProviderSigningKey

      public IdPKeyCredential generateIdentityProviderSigningKey(String idpId, Integer validityYears) throws ApiException
      Generate a new signing key credential for IdP Generates a new X.509 certificate for an identity provider (IdP) signing key credential to be used for signing assertions sent to the IdP. IdP signing keys are read-only. > **Note:** To update an IdP with the newly generated key credential, [update your IdP](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/IdentityProvider/#tag/IdentityProvider/operation/replaceIdentityProvider) using the returned key's `kid` in the [signing credential](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/IdentityProvider/#tag/IdentityProvider/operation/replaceIdentityProvider!path=protocol/0/credentials/signing/kid&t=request).
      Parameters:
      idpId - `id` of IdP (required)
      validityYears - expiry of the IdP key credential (required)
      Returns:
      IdPKeyCredential
      Throws:
      ApiException - if fails to make API call

    • generateIdentityProviderSigningKey

      public IdPKeyCredential generateIdentityProviderSigningKey(String idpId, Integer validityYears, Map<String,String> additionalHeaders) throws ApiException
      Generate a new signing key credential for IdP Generates a new X.509 certificate for an identity provider (IdP) signing key credential to be used for signing assertions sent to the IdP. IdP signing keys are read-only. > **Note:** To update an IdP with the newly generated key credential, [update your IdP](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/IdentityProvider/#tag/IdentityProvider/operation/replaceIdentityProvider) using the returned key's `kid` in the [signing credential](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/IdentityProvider/#tag/IdentityProvider/operation/replaceIdentityProvider!path=protocol/0/credentials/signing/kid&t=request).
      Parameters:
      idpId - `id` of IdP (required)
      validityYears - expiry of the IdP key credential (required)
      additionalHeaders - additionalHeaders for this call
      Returns:
      IdPKeyCredential
      Throws:
      ApiException - if fails to make API call

    • getCsrForIdentityProvider

      public IdPCsr getCsrForIdentityProvider(String idpId, String idpCsrId) throws ApiException
      Retrieve a certificate signing request Retrieves a specific certificate signing request (CSR) by `id`
      Parameters:
      idpId - `id` of IdP (required)
      idpCsrId - `id` of the IdP CSR (required)
      Returns:
      IdPCsr
      Throws:
      ApiException - if fails to make API call

    • getCsrForIdentityProvider

      public IdPCsr getCsrForIdentityProvider(String idpId, String idpCsrId, Map<String,String> additionalHeaders) throws ApiException
      Retrieve a certificate signing request Retrieves a specific certificate signing request (CSR) by `id`
      Parameters:
      idpId - `id` of IdP (required)
      idpCsrId - `id` of the IdP CSR (required)
      additionalHeaders - additionalHeaders for this call
      Returns:
      IdPCsr
      Throws:
      ApiException - if fails to make API call

    • getIdentityProviderSigningKey

      public IdPKeyCredential getIdentityProviderSigningKey(String idpId, String kid) throws ApiException
      Retrieve a signing key credential for IdP Retrieves a specific identity provider (IdP) key credential by `kid`
      Parameters:
      idpId - `id` of IdP (required)
      kid - Unique `id` of the IdP key credential (required)
      Returns:
      IdPKeyCredential
      Throws:
      ApiException - if fails to make API call

    • getIdentityProviderSigningKey

      public IdPKeyCredential getIdentityProviderSigningKey(String idpId, String kid, Map<String,String> additionalHeaders) throws ApiException
      Retrieve a signing key credential for IdP Retrieves a specific identity provider (IdP) key credential by `kid`
      Parameters:
      idpId - `id` of IdP (required)
      kid - Unique `id` of the IdP key credential (required)
      additionalHeaders - additionalHeaders for this call
      Returns:
      IdPKeyCredential
      Throws:
      ApiException - if fails to make API call

    • listActiveIdentityProviderSigningKey

      public List<IdPKeyCredential> listActiveIdentityProviderSigningKey(String idpId) throws ApiException
      List the active signing key credential for IdP Lists the active signing key credential for an identity provider (IdP)
      Parameters:
      idpId - `id` of IdP (required)
      Returns:
      List<IdPKeyCredential>
      Throws:
      ApiException - if fails to make API call

    • listActiveIdentityProviderSigningKey

      public List<IdPKeyCredential> listActiveIdentityProviderSigningKey(String idpId, Map<String,String> additionalHeaders) throws ApiException
      List the active signing key credential for IdP Lists the active signing key credential for an identity provider (IdP)
      Parameters:
      idpId - `id` of IdP (required)
      additionalHeaders - additionalHeaders for this call
      Returns:
      List<IdPKeyCredential>
      Throws:
      ApiException - if fails to make API call

    • listActiveIdentityProviderSigningKeyPaged

      public Iterable<IdPKeyCredential> listActiveIdentityProviderSigningKeyPaged(String idpId)
      List the active signing key credential for IdP (Paginated) Lists the active signing key credential for an identity provider (IdP) This method returns a lazy, paginated iterable that automatically handles pagination. It is thread-safe and does not cause memory leaks. Use this method in a for-each loop to automatically fetch all pages without manual cursor management.
      Parameters:
      idpId - `id` of IdP (required)
      Returns:
      Iterable<IdPKeyCredential> lazy iterable over all pages

    • listActiveIdentityProviderSigningKeyPaged

      public Iterable<IdPKeyCredential> listActiveIdentityProviderSigningKeyPaged(String idpId, Map<String,String> additionalHeaders)
      List the active signing key credential for IdP (Paginated with additional headers) Lists the active signing key credential for an identity provider (IdP) This method returns a lazy, paginated iterable that automatically handles pagination. It is thread-safe and does not cause memory leaks.
      Parameters:
      idpId - `id` of IdP (required)
      additionalHeaders - additional headers for this call
      Returns:
      Iterable<IdPKeyCredential> lazy iterable over all pages

    • listCsrsForIdentityProvider

      public List<IdPCsr> listCsrsForIdentityProvider(String idpId) throws ApiException
      List all certificate signing requests Lists all certificate signing requests (CSRs) for an identity provider (IdP)
      Parameters:
      idpId - `id` of IdP (required)
      Returns:
      List<IdPCsr>
      Throws:
      ApiException - if fails to make API call

    • listCsrsForIdentityProvider

      public List<IdPCsr> listCsrsForIdentityProvider(String idpId, Map<String,String> additionalHeaders) throws ApiException
      List all certificate signing requests Lists all certificate signing requests (CSRs) for an identity provider (IdP)
      Parameters:
      idpId - `id` of IdP (required)
      additionalHeaders - additionalHeaders for this call
      Returns:
      List<IdPCsr>
      Throws:
      ApiException - if fails to make API call

    • listCsrsForIdentityProviderPaged

      public Iterable<IdPCsr> listCsrsForIdentityProviderPaged(String idpId)
      List all certificate signing requests (Paginated) Lists all certificate signing requests (CSRs) for an identity provider (IdP) This method returns a lazy, paginated iterable that automatically handles pagination. It is thread-safe and does not cause memory leaks. Use this method in a for-each loop to automatically fetch all pages without manual cursor management.
      Parameters:
      idpId - `id` of IdP (required)
      Returns:
      Iterable<IdPCsr> lazy iterable over all pages

    • listCsrsForIdentityProviderPaged

      public Iterable<IdPCsr> listCsrsForIdentityProviderPaged(String idpId, Map<String,String> additionalHeaders)
      List all certificate signing requests (Paginated with additional headers) Lists all certificate signing requests (CSRs) for an identity provider (IdP) This method returns a lazy, paginated iterable that automatically handles pagination. It is thread-safe and does not cause memory leaks.
      Parameters:
      idpId - `id` of IdP (required)
      additionalHeaders - additional headers for this call
      Returns:
      Iterable<IdPCsr> lazy iterable over all pages

    • listIdentityProviderSigningKeys

      public List<IdPKeyCredential> listIdentityProviderSigningKeys(String idpId) throws ApiException
      List all signing key credentials for IdP Lists all signing key credentials for an identity provider (IdP)
      Parameters:
      idpId - `id` of IdP (required)
      Returns:
      List<IdPKeyCredential>
      Throws:
      ApiException - if fails to make API call

    • listIdentityProviderSigningKeys

      public List<IdPKeyCredential> listIdentityProviderSigningKeys(String idpId, Map<String,String> additionalHeaders) throws ApiException
      List all signing key credentials for IdP Lists all signing key credentials for an identity provider (IdP)
      Parameters:
      idpId - `id` of IdP (required)
      additionalHeaders - additionalHeaders for this call
      Returns:
      List<IdPKeyCredential>
      Throws:
      ApiException - if fails to make API call

    • listIdentityProviderSigningKeysPaged

      public Iterable<IdPKeyCredential> listIdentityProviderSigningKeysPaged(String idpId)
      List all signing key credentials for IdP (Paginated) Lists all signing key credentials for an identity provider (IdP) This method returns a lazy, paginated iterable that automatically handles pagination. It is thread-safe and does not cause memory leaks. Use this method in a for-each loop to automatically fetch all pages without manual cursor management.
      Parameters:
      idpId - `id` of IdP (required)
      Returns:
      Iterable<IdPKeyCredential> lazy iterable over all pages

    • listIdentityProviderSigningKeysPaged

      public Iterable<IdPKeyCredential> listIdentityProviderSigningKeysPaged(String idpId, Map<String,String> additionalHeaders)
      List all signing key credentials for IdP (Paginated with additional headers) Lists all signing key credentials for an identity provider (IdP) This method returns a lazy, paginated iterable that automatically handles pagination. It is thread-safe and does not cause memory leaks.
      Parameters:
      idpId - `id` of IdP (required)
      additionalHeaders - additional headers for this call
      Returns:
      Iterable<IdPKeyCredential> lazy iterable over all pages

    • publishCsrForIdentityProvider

      public IdPKeyCredential publishCsrForIdentityProvider(String idpId, String idpCsrId, File body) throws ApiException
      Publish a certificate signing request Publishes the certificate signing request (CSR) with a signed X.509 certificate and adds it into the signing key credentials for the identity provider (IdP) > **Notes:** > * Publishing a certificate completes the lifecycle of the CSR, and it's no longer accessible. > * If the validity period of the certificate is less than 90 days, a 400 error response is returned.
      Parameters:
      idpId - `id` of IdP (required)
      idpCsrId - `id` of the IdP CSR (required)
      body - (required)
      Returns:
      IdPKeyCredential
      Throws:
      ApiException - if fails to make API call

    • publishCsrForIdentityProvider

      public IdPKeyCredential publishCsrForIdentityProvider(String idpId, String idpCsrId, File body, Map<String,String> additionalHeaders) throws ApiException
      Publish a certificate signing request Publishes the certificate signing request (CSR) with a signed X.509 certificate and adds it into the signing key credentials for the identity provider (IdP) > **Notes:** > * Publishing a certificate completes the lifecycle of the CSR, and it's no longer accessible. > * If the validity period of the certificate is less than 90 days, a 400 error response is returned.
      Parameters:
      idpId - `id` of IdP (required)
      idpCsrId - `id` of the IdP CSR (required)
      body - (required)
      additionalHeaders - additionalHeaders for this call
      Returns:
      IdPKeyCredential
      Throws:
      ApiException - if fails to make API call

    • revokeCsrForIdentityProvider

      public void revokeCsrForIdentityProvider(String idpId, String idpCsrId) throws ApiException
      Revoke a certificate signing request Revokes a certificate signing request (CSR) and deletes the key pair from the identity provider (IdP)
      Parameters:
      idpId - `id` of IdP (required)
      idpCsrId - `id` of the IdP CSR (required)
      Throws:
      ApiException - if fails to make API call

    • revokeCsrForIdentityProvider

      public void revokeCsrForIdentityProvider(String idpId, String idpCsrId, Map<String,String> additionalHeaders) throws ApiException
      Revoke a certificate signing request Revokes a certificate signing request (CSR) and deletes the key pair from the identity provider (IdP)
      Parameters:
      idpId - `id` of IdP (required)
      idpCsrId - `id` of the IdP CSR (required)
      additionalHeaders - additionalHeaders for this call
      Throws:
      ApiException - if fails to make API call

    • getObjectMapper

      protected static com.fasterxml.jackson.databind.ObjectMapper getObjectMapper()