When you see an error 429 - Too Many Requests notification in the Okta user interface, or you get this status as a result when contacting the Okta API, it means you have exceeded the threshold for number of web requests in a specified period of time.
Cause
API endpoint throttling limits have been created to protect the Okta service (in Production and Preview tenants) from load spikes or service interruptions caused by submitted requests, whether unintentional or as a Denial of Service attack. This strategy has been adopted across the industry in many SaaS applications and platforms to maintain consistent service levels for customers.
You can check the rate limit violations events from the org's Okta Admin Console:
Deep Link to the Okta Admin Console or log in with sufficient privileges to view the information.
Navigate to Reports > System Logs and use these queries:
eventType eq "system.operation.rate_limit.violation" and outcome.result eq "DENY"
eventType eq "system.client.concurrency_rate_limit.violation" and outcome.result eq "DENY"
Resolution
To solve this issue and or most rate limit issues, you can disable the auto-launch options or lower the applications that need to be auto-launched whenever an end-user accesses the Okta org so that the endpoint threshold won't be exceeded.
You can request a temporary or permanent rate limit increase on that endpoint, but the issue may reoccur later if the end-user's request exceeds the endpoint's new threshold. Fill in the requirement as per the API rate limits article here check out the section "Requesting exceptions."
SEE ALSO
