# Get Okta user

Canonical URL: https://docs.fuse.init.inc/integrations/okta/actions/users.get

Get one Okta user by id.

Action ID: `users.get`
Provider: Okta (`okta`)
Contract version: 1

## Risk and exposure

- Risk: Read
- Idempotency: Safe — Safe to retry without coordination; repeats do not create additional side effects.
- Availability: Default
- Exposure: REST, SDK, MCP
- MCP hints: readOnly=true, destructive=false, idempotent=true, openWorld=true

## Required scopes

- `okta.users.read`

## Input schema fields

- `user_id`

## Output schema fields

- `id`
- `status`
- `transitioning_to_status`
- `created_at`
- `activated_at`
- `last_login_at`
- `profile`
- `profile.login`
- `profile.email`
- `profile.first_name`
- `profile.last_name`
- `profile.display_name`
- `profile.title`
- `profile.department`
- `profile.manager_id`
- `profile.employee_number`
- `profile.organization`
- `profile.cost_center`

Provider overview: https://docs.fuse.init.inc/integrations/okta
Actions index: https://docs.fuse.init.inc/integrations/okta/actions
Exact canonical JSON contract: https://docs.fuse.init.inc/api/catalog/v1/providers/okta/actions/users.get
Deployment-effective discovery: https://api.fuse.init.inc/v1/tenants/%7Btenant_id%7D/providers/okta/actions