v6.9.0

6.9.0 (April 9, 2026)

ENHANCEMENTS

• Added skip_authentication_policy field to okta_app_bookmark, okta_app_oauth, and okta_app_saml resources #2428 by exitcode0
• Added dynamic IdP rules support to okta_policy_rule_idp_discovery resource #2767 by pranav-okta

Bug Fixes

• Fixed handling of unknown values in rule dynamic blocks #2771 by mbampi

v6.8.0

6.8.0 (April 7, 2026)

FEATURES

• New resource and data source okta_entity_risk_policy and okta_entity_risk_policy_rule #2749 by pranav-okta
• New resource and data source okta_session_violation_policy and okta_session_violation_policy_rule #2759 by pranav-okta
• New resource okta_group_owners #2459 by exitcode0
• New data source okta_auth_server_default (org auth server) #2339 by exitcode0

ENHANCEMENTS

• Support for updating resource okta_campaign #2760 by aditya-okta
• Support for chains argument in resource okta_app_signon_policy_rules #2758 by aditya-okta
• Support for network attribute in okta_app_oauth #2754 by pranav-okta
• Support for app_settings_json attribute in okta_app_swa #2755 by dhiwakar-okta

Bug Fixes

• Fixes bug when using dynamic rule blocks in resource okta_app_signon_policy_rules #2753 by aditya-okta

v6.7.0

6.7.0 (March 27, 2026)

FEATURES

• New Resource and data source okta_user_risk for UserRisk API #2724 by pranav-okta
• Resource and data source okta_post_auth_session_policy, okta_post_auth_session_policy_rule #2746 by pranav-okta

ENHANCEMENTS

• Support for preconfigured_app attribute in okta_app_oauth #2721 by dhiwakar-okta
• Update fallback templates for tfplugindocs v0.17+ #2744 by exitcode0

Bug Fixes

• Add validate authenticators to list the authenticator #2718 by pranav-okta
• okta_event_hook_verification not re-verifying after update #2723 by dhiwakar-okta

v6.6.1

6.6.1 (March 10, 2026)

FEATURES

• New data source okta_admin_role_custom to allow users to look up an existing custom admin role by its ID or label #2704 by dhiwakar-okta

Bug Fixes

• Fix issue while creation of oauth applications when using OAuth2.0 Authentication #2708 by aditya-okta

v6.6.0

6.6.0 (March 5, 2026)

FEATURES

• New resource okta_app_signon_policy_rules to multiple app sign-on policy rules for a single policy #2680 by aditya-okta
• Add support for field configuration.IdpId in the provider_json field for resource okta_authenticator #2650 by aditya-okta
• New resource and data source okta_app_push_groups for group push mappings #2670 by tim-koehler
• Add support for set_usage_as_exempt_list to resource set_usage_as_exempt_list #2676 by aditya-okta
• Add support for creating user_types via resource okta_user #2679 by andrew951
• Add validation to check approval_sequence_id and name have length > 1 in resource request_condition #2681 by exitcode0
• Add AdditionalProperties to AccessPolicyConstraints to hold any constraint fields beyond knowledge and possession #2681 by aditya-okta.
• Add support for trust_claims to resource and data source okta_idp_oidc and okta_idp_saml #2698 by dhiwakar-okta

Bug Fixes

• Fix issue in removing existing groups_claim in resource okta_app_oauth #2643 by aditya-okta
• Fix nil pointer when applying okta_campaign autoRemediationSettings to state #2661 by exitcode0
• Fix issue in setting auto_key_rotation to false for resource okta_app_oauth #2662 by ohookins
• Fix issue while importing okta_log_stream #2667 by aditya-okta
• Adds handling to prevent provider panic if credentials not set #2669 by aditya-okta
• Fix issue in importing resource okta_customized_signin_page #2678 by aditya-okta
• Fix setting elCondition when custom_expression is not empty in resource okta_app_sigon_policy_rule #2684 by pranav-okta
• Documentation fix for resource okta_app_group_assignments #2685 by aditya-okta
• Fix issue in updating resource okta_entitlement #2688 by aditya-okta

v6.5.5

6.5.5 (January 30, 2026)

FEATURES

• New resource and data source okta_app_federated_claim to manage federated claims for applications #2640 by aditya-okta
• Add create and delete functionalities for okta_principal_rate_limit resource #2628 by aditya-okta
• Add support for activating/deactivating network zones and upgrade okta_network_zone resource and data source to use V6 SDK #2636 by aditya-okta

BUG FIXES

• Fix JWKS configuration for OAuth applications - properly implement V6 SDK types for inline JWKS keys #2639 by aditya-okta
• Fix persistent diff issue in okta_app_oauth resource #2634 by aditya-okta
• Fix inactivity_period cannot be set to null in okta_app_signon_policy_rule #2614 by dhiwakar-okta
• Remove unnecessary len>0 check for login_scopes in OAuth apps #2624 by aditya-okta
• Add nil checks for app.Settings and app.Settings.SignOn to prevent panics #2621 by aditya-okta

IMPROVEMENTS

• Add warning regarding resource being deleted and re-created when updating certain properties #2638 by aditya-okta
• Set max items for dynamic_locations in okta_network_zone #2501 by Rose Security
• Add missing documentation for realm_id attributes #2632 by tim-koehler

v6.5.4

6.5.4 (January 15, 2025)

FEATURE

• Add AgentPools resource #2603 by aditya-okta
• Add nil checks when accessing fields for resources and data sources okta_idp_saml, okta_idp_oidc and resource okta_idp_social #2601 by aditya-okta
• Changes To Update Okta Default Brand's help_url #2607 by dhiwakar-okta
• Adds support for ID field in AuthenticationMethodObject #2609 by aditya-okta

v6.5.3

v6.5.3 (December 24, 2025)

FEATURE

• GH-2437 | Introduces support for custom_app Authenticator For Resource okta_policy_mfa 32584 by dhiwakar-okta
• New resource and data source okta_ui_schema to manage UI Schema #2589 by aditya-okta
• Adding Support For custom_app Authenticator #2592 by dhiwakar-okta
• Add support for status management for request conditions #2562 by exitcode0
• Add support for realm_id in okta_user resource and data source #2535 by tim-koehler

v6.5.2

What's Changed

• Bump github.com/okta/okta-sdk-golang/v6 from 6.0.0 to 6.0.1 by @dependabot[bot] in #2580
• feat(v2_requestExecutor): clear cache in retries by @pranav-okta in #2585

Full Changelog: v6.5.1...v6.5.2

v6.5.1

6.5.1 (November 25, 2025)

BUG FIXES

• Use mutex locks in okta_app_signon_policy_rule to address intermittent HTTP 500 errors #2571 by pranav-okta.
• Fixed error during import of okta_group_owner #2454 by exitcode0.
• Added frontchannel_logout_uri, participate_slo attributes to okta_app_oauth #2557 by pranav-okta.
• risk_level, risc_level will not be set to default value if neither of the fields are specified in Terraform configuration #2494 by ohookins.
• Updated app_features documentation to document okta_app_features is only supported on a limited subset of OIN applications #2565 by exitcode0.