Flow endpoint security limits

The following table defines the cards that you can use to create security endpoints:

Card

Purpose

API Endpoint The main trigger for API-driven flows.
Delegated Flow The trigger for flows that are designed to be run from the Okta Admin Console.
Pause or Pause Raw These cards stop a flow and generate a unique resumption URL. This URL acts as a second endpoint.

Limits

A flow can have only one endpoint security setting. This ensures your flow's security model is clear, stable, and predictable. For example, the Pause or Pause Raw cards can't be used in a delegated flow.

Use helper flows to tie multiple security endpoint cards together. The endpoint security setting of a helper flow can be different from the parent flow.

Related topics

Invoke a flow with an API endpoint

Delegated flows

Functions