# What changed in okta

> 46 changes in okta 2 to 3 from its official release notes, upgrade guides and advisories: 2 breaking, 1 security, 28 new APIs and options. Each one cited. Sources checked 2026-10-24. HTML: https://unstale.sh/pypi/okta/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## okta 3

### Breaking changes

- The methods enum casing now aligns with the actual API. (3.4.4) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.4.4)

### Security

- Fixes a security vulnerability. (3.4.2) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.4.2)

### New APIs and options

- Adds the UserFactorSignedNonce schema and discriminator mapping for Okta FastPass. (3.4.4) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.4.4)
- Custom Domain Operations gained support for CAA DNS record types. (3.4.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.4.0)
- A DPoP module was implemented. (3.4.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.4.0)
- Adds FAILED_TO_VERIFY as an enum option for DomainValidationStatus. (3.3.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.3.0)
- Adds the LogUserBehavior model for System Log userBehaviors support. (3.2.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.2.0)
- Adds comprehensive System Log userBehaviors support. (3.2.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.2.0)

### Behavior and default changes

- The OpenAPI spec no longer applies minLength validation to the secondEmail attribute. (3.4.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.4.0)
- Adds handling for apps with the MFA_AS_SERVICE sign-on mode. (3.2.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.2.0)
- The SDK adds support for the okta-gov.com, okta.mil, okta-miltest.com, and trex-govcloud.com domains. (3.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.0.0)

### Tooling

- The SDK was updated with the latest management YAML specifications, which may affect the available management API surface. (3.1.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.1.0)
- The SDK was upgraded to OAS 3.0, which may affect the SDK API developers use. (3.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.0.0)

### Fixes and other changes

- Required boolean constraints were relaxed on SamlApplicationSettingsSignOn. (3.4.6) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.4.6)
- Resolved a name collision between UserType and the inline User.type schema. (3.4.5) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.4.5)
- The types enum casing now aligns with the actual API. (3.4.4) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.4.4)
- Required constraints were removed from the SamlApplicationSettingsSignOn schema, so those fields are no longer required. (3.4.3) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.4.3)
- Primitive fallback for oneOf deserialization in Device Assurance Models is fixed. (3.4.1) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.4.1)
- Multipart file upload handling in the HTTP client was fixed. (3.4.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.4.0)
- Unknown signOnMode values are now handled gracefully. (3.3.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.3.0)
- Corrects field deserialization for the EmailDomain model. (3.3.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.3.0)
- Handles nullable discriminator fields in JWKS models. (3.3.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.3.0)
- Fixes malformed requests for OAuth access tokens. (3.2.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v3.2.0)

## okta 2

### Breaking changes

- The sign_on_mode attribute is now consistently typed as ApplicationSignOnMode for all applications, which may break custom client code that expects a string. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)

### New APIs and options

- Adds the DnsRecord model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the DnsRecordType model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the Domain resource. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the Domain model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the DomainCertificate model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the DomainCertificateMetadata model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the DomainCertificateSourceType model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the DomainCertificateType model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the DomainListResponse model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the DomainValidationStatus model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds response headers to the OktaAPIResponse object. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the UserSchema resource. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the UserSchemaAttributeEnum model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the UserSchemaAttributeItems model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the UserSchemaAttributeMasterPriority model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the UserSchemaAttributeMasterType model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the UserSchemaAttributeScope model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the UserSchemaAttributeType model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the UserSchemaAttributeUnion model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the UserSchemaProperties model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the UserSchemaPropertiesProfile model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)
- Adds the UserSchemaPropertiesProfileItem model. (2.0.0) — [release notes](https://github.com/okta/okta-sdk-python/releases/tag/v2.0.0)