1. Acquire device list/Acquire information of specific device

Get device list
You can filter the device list by using the “search” query parameter.
Specifically, by specifying "search=profile.platform eq "WINDOWS"", you can list only Windows device information.

Details: https://developer.okta.com/docs/reference/api/devices/#list-devices

API for acquiring information on a specific device
The device information that can be obtained is the same as the device list acquisition API.

Details: https://developer.okta.com/docs/reference/api/devices/#get-device-by-id

[Supplement] Device information acquisition items
The profile items in the device information are as shown in the table below. We have verified that the items that can be acquired differ depending on the device. Therefore, please note that some information cannot be obtained for each device. Devices that can be registered (devices on which Okta Verify can be installed) are "Windows", "macOS", "Android", and "iOS".

Details: https://developer.okta.com/docs/reference/api/devices/#device-profile-properties

2. Device disable/enable, suspend/unsuspend

The state of the device changes as shown in the figure below.

What are the characteristics of "suspended" and "disabled" devices?

[Common point]

• Kill all active sessions established on the device
• Unable to establish new session

[Difference]

• "Suspended" is not affected by the link between the device and the user
• If "disabled", the link between the device and the user will be broken and the user will need to register again when enabled.

"Suspend" is useful for suspending access to a user's device on leave and needs to be resumed later, while "Disabled" is for final review before deletion or unusable (blacklisted). This is useful when

Also, to remove a device, it must be done from "disabled" and cannot be done from "enabled" or "suspended".

From now on, we will look at the situation during API calls to disable/enable, suspend/suspend, and delete devices.

Disable device
The link between device and user is broken.

Details: https://developer.okta.com/docs/reference/api/devices/#deactivate-device

Device activation
The link between the device and the user will remain broken and the user will need to re-enroll.

Details: https://developer.okta.com/docs/reference/api/devices/#activate-device

Pause device
The link between device and user is maintained.

Details: https://developer.okta.com/docs/reference/api/devices/#suspend-device

Unpause device
No re-registration is required on the part of the user as the link between the device and the user is maintained.

Details: https://developer.okta.com/docs/reference/api/devices/#unsuspend-device

Delete device
The device can be deleted only when the device status is disabled (Deactivate), and an error will occur if the deletion API call is performed in a status other than disabled.
Please note that deleting a device will permanently delete all profile data on the device.

Details: https://developer.okta.com/docs/reference/api/devices/#delete-device