Okta world

A local Okta org with users, groups, app assignments, sessions and the full user lifecycle. Test the agent that onboards, offboards and changes access, and see exactly which users and groups it touched.

UsersGroupsApp AssignmentsLifecycleSessions

Book a demo

Okta · Directory · PeopleIllustrative

User	Groups	Apps	Status
dana.lee@acme.test	Finance, VPN	Slack, NetSuite	ACTIVEDEPROVISIONED
dana.lee2@acme.test	Support	Slack, Zendesk	ACTIVEDEPROVISIONED
kim.park@acme.test	Engineering, Admins	AWS, GitHub	ACTIVE
jo.park@acme.test	Sales	Salesforce	STAGEDACTIVE
m.ortiz@acme.test	Finance	NetSuite	SUSPENDED

fig. 1 · illustrative replica · the agent's changes land as you scroll

What's in this world

What you get when you open Okta. Seeded, local, yours to break.

Seeded records

users: 300 across STAGED, ACTIVE, SUSPENDED, LOCKED_OUT and DEPROVISIONED
groups: 24 Okta groups, including Admins and department groups
apps: Slack, Google Workspace, Salesforce and AWS with group assignments
sessions: Active sessions for most ACTIVE users
admin roles: Super Admin and Group Admin assignments

Agent jobs you can test

Offboard a leaver: deactivate, clear sessions, remove app assignments
Activate staged users and add them to the right groups
Suspend an account during a security review

What your agent can get wrong here

The reply sounds right. The record is what counts.

ActionWhat the world recordsCommon mistake

Offboard a useruser status, sessions and app assignmentsDeactivates dana.lee2 in Support instead of dana.lee in Finance

Remove from a groupgroup membershipRemoves kim.park from Admins along with the leaver

Clear sessionsactive sessions after deactivationDeactivates the user but leaves sessions open

Activate a userstatus and group membershipActivates the user with no department group

Example test

Describe the job. Review the checks before anything runs.

Brief · plain EnglishIllustrative

Drafted test · reviewDrafting

01Only dana.lee@acme.test DEPROVISIONED
02dana.lee sessions cleared
03dana.lee removed from Slack and NetSuite
04dana.lee2 still ACTIVE
05Admins group membership unchanged

fig. 2 · illustrative brief and drafted checks

Failures you can inject

Make it a bad day on purpose.

effectGET /api/v1/users returns 429 until X-Rate-Limit-Resetfires before the handler · state untouched · same result every run

Evidence

StatusIncluded in the closed beta, like every world in the catalog. Apply and tell us the workflow you want to test.Known limitations