# Okta Partners

> Developer platform for building partner applications that integrate with Okta tenants. Apps are scaffolded from an official Laravel 13 + Livewire 4 + Tailwind 4 + nwidart/laravel-modules boilerplate, authenticate via per-installation Bearer tokens, and consume tenant data through scoped APIs (`<feature>.<resource>.<action>`).

The developer guide is published as a public, AI-friendly page. The raw markdown source is linked below for clean ingestion by LLMs.

## Developer documentation

- [Introduction](https://partners.getokta.io/docs/introduction): docs portal landing — what the platform is, who it is for, integration types, and how it works.
- [API reference (HTML)](https://partners.getokta.io/docs/api): structured public reference for the partner-app runtime API hosted by okta-web (`/apps`) — base URL, Bearer auth, scopes, endpoint catalog, pagination, idempotency, error envelopes, rate limits, and webhook signing.
- [Interactive endpoint explorer](https://partners.getokta.io/reference): one page per endpoint with params, multi-language code samples (Shell/Node/Ruby/PHP/Python), a try-it console, and example responses.
- [OpenAPI 3.1 spec](https://partners.getokta.io/docs/openapi.json): machine-readable spec generated from the endpoint catalog — import into codegen tools.
- [Postman collection](https://partners.getokta.io/docs/postman_collection.json): ready-to-run Postman v2.1 collection with a Bearer token variable.
- [Developer guide (Arabic, HTML)](https://partners.getokta.io/docs/developer-guide?lang=ar): canonical reference covering architecture, scope catalog, manifest format, runtime authentication, webhook signing, and partner-policy scanner.
- [Developer guide (English, HTML)](https://partners.getokta.io/docs/developer-guide?lang=en): same content in English.
- [Developer guide (Arabic, raw markdown)](https://partners.getokta.io/docs/developer-guide.md?lang=ar): markdown source — preferred for LLM ingestion.
- [Developer guide (English, raw markdown)](https://partners.getokta.io/docs/developer-guide.md?lang=en): markdown source in English.

## Platform conventions (summary — full text in the guide)

- **Repo scaffold**: every partner app's GitHub repo is created by the platform as a clone of an official boilerplate (`resources/partner-boilerplate/` in the okta-partners repo). It is a Laravel 13 + Livewire 4 + Tailwind 4 + `nwidart/laravel-modules 13` project. The agent works inside it; never `composer create-project` to replace it.
- **Module layout**: all domain code lives under `Modules/<ModuleNamespace>/...` per nwidart/laravel-modules — Services, Controllers, routes, Models, migrations, Livewire, views, config. The module namespace is pre-substituted into `module.json` by `GitHubAppService::pushBoilerplate()`.
- **Permission naming**: `<feature>.<resource>.<action>`, lowercase, dot-separated, snake_case inside each part. Allowed actions: view, create, update, delete, activate. Never `manage`, never wildcards.
- **Runtime auth**: every partner-app endpoint declares `middleware('app.scope:<feature>.<resource>.<action>')`. Apps authenticate against okta-web via the installation Bearer token (env: `OKTA_PARTNER_TOKEN`).
- **Partner-policy scanner**: `scripts/partner-policy/Scanner.php` (regex) + `scripts/partner-policy/phpstan/PartnerInternalAccessRule.php` (PHPStan rule). Run `php scripts/partner-policy/check.php` before declaring done. Forbidden: `use App\\Models\\*`, `use App\\Services\\*` (except `App\\Services\\PartnerApi\\*`), direct `.env` reads, raw DB queries against platform tables.

## Optional

- [Apply to become a partner](https://partners.getokta.io/apply): public application form for new partners.
- [Privacy](https://partners.getokta.io/privacy) · [Terms](https://partners.getokta.io/terms) · [Security](https://partners.getokta.io/security)