devicereport.ps1

param(
    [Parameter(Mandatory)]
    [string]$OktaDomain,   # e.g. https://your-org.okta.com

    [Parameter(Mandatory)]
    [string]$ApiToken,     # API token

    [string]$CsvPath = ".\devices.csv"
)

$headers = @{
    "Authorization" = "SSWS $ApiToken"
    "Accept" = "application/json"
}

$uri = "$OktaDomain/api/v1/devices?expand=userSummary"
$allDevices = @()

do {
    $webResponse = Invoke-WebRequest -Uri $uri -Headers $headers -Method Get
    $response = $webResponse.Content | ConvertFrom-Json

    # Always treat as array
    if ($response -isnot [System.Collections.IEnumerable] -or $response -is [string]) {
        $response = @($response)
    }

    $allDevices += $response

    # Pagination (via Link header)
    $nextLink = $null
    if ($webResponse.Headers.Link) {
        $matches = [regex]::Matches($webResponse.Headers.Link, '<([^>]+)>;\s*rel="next"')
        if ($matches.Count -gt 0) {
            $nextLink = $matches[0].Groups[1].Value
        }
    }
    $uri = $nextLink

} while ($uri)

$results = @()

foreach ($device in $allDevices) {
    $profile = $device.profile
    $users = $device._embedded.users
    $userCount = if ($users) { $users.Count } else { 0 }
    $hasMultipleUsers = if ($userCount -gt 1) { "True" } else { "False" }
    $userEmails = if ($users) { ($users | ForEach-Object { $_.user.profile.email }) -join ";" } else { "" }

    $results += [PSCustomObject]@{
        "Device Id"            = $device.id
        "Display Name"         = $profile.displayName
        "Platform"             = $profile.platform
        "Manufacturer"         = $profile.manufacturer
        "Model"                = $profile.model
        "OS Version"           = $profile.osVersion
        "Registered"           = $profile.registered
        "Disk Encryption Type" = $profile.diskEncryptionType
        "Secure Hardware"      = $profile.secureHardwarePresent
        "User Count"           = $userCount
        "Has Multiple Users"   = $hasMultipleUsers
        "User Emails"          = $userEmails
    }
}

$results | Export-Csv -Path $CsvPath -NoTypeInformation

Write-Host "Done. Exported $($results.Count) devices to $CsvPath"