Flow endpoint security limits

The following table defines the cards that you can use to create security endpoints:

Card

Purpose

API Endpoint The main trigger for API-driven flows.
Delegated Flow The trigger for flows that are designed to be run from the Okta Admin Console.
Pause or Pause Raw These cards stop a flow and generate a unique resumption URL. This URL acts as a second endpoint.

Limits

A flow can have only one endpoint security setting. This ensures your flow's security model is clear, stable, and predictable. For example, the Pause or Pause Raw cards can't be used in a delegated flow.

Related topics

Invoke a flow with an API endpoint

Delegated flows

Functions