Okta, Inc. operates as an independent identity partner.
The company's Okta Platform and Auth0 Platform enable customers to securely connect the right people to the right technologies and services at the right time.
The acceleration of digital transformation, cloud adoption, and the evolving security threat landscape are driving a shift in how organizations securely manage the identity of their employees, contractors, and partners. At the same time, consumer expectations favoring simple, secure...
Okta, Inc. operates as an independent identity partner.
The company's Okta Platform and Auth0 Platform enable customers to securely connect the right people to the right technologies and services at the right time.
The acceleration of digital transformation, cloud adoption, and the evolving security threat landscape are driving a shift in how organizations securely manage the identity of their employees, contractors, and partners. At the same time, consumer expectations favoring simple, secure digital experiences are driving the adoption of new consumer identity technologies. The company's platforms help organizations effectively harness the power of cloud, mobile, and web technologies by securing users and connecting them with the applications and technology they use. Every day, thousands of organizations and millions of people use its platforms to securely access a wide range of cloud, mobile, web, and Software-as-a-Service (SaaS) applications, on-premises servers, application programming interfaces (APIs), IT infrastructure providers, and services from a multitude of devices. The company's approach to customer identity provides organizations with the scale, interoperability, extensibility, and security they need to build applications with seamless and private experiences that serve a wide variety of users, from customers to citizens. As it adds new customers, users, developers, and integrations to its platforms, its business, customers, partners, and users benefit from powerful network effects that increase the value and security of its solutions.
The company's approach to identity allows its customers to simplify and efficiently scale their security infrastructures across internal IT systems and external customer-facing applications.
As of January 31, 2025, more than 19,650 customers across nearly every industry used the company's solutions to secure and manage identities around the world. The company's customers consist of leading global organizations ranging from the largest enterprises to small- and medium-sized businesses, universities, nonprofits, and government agencies. The company partners with leading application, infrastructure, and security vendors, such as Amazon Web Services (AWS), CrowdStrike, Google, LexisNexis Risk Solutions, Microsoft, Netskope, Palo Alto Networks, Plaid, Proofpoint, Salesforce, ServiceNow, VMware, Workday, Yubico, and Zscaler. The company had over 7,000 integrations with cloud, mobile, and web applications and IT infrastructure providers as of January 31, 2025.
The company employs a SaaS business model and generates revenue primarily by selling multi-year subscriptions to its cloud-based offerings. The company focuses on attracting and retaining its customers and increasing the value it provides to them over time. By retaining customers and increasing value, the company increases their spending with it through expanding the number of users who access its Okta Platform and Auth0 Platform, and by selling additional product offerings. The company sells its product offerings directly through its field and inside sales teams, as well as indirectly through its network of channel partners, including resellers, system integrators, and other distribution partners.
Platforms
The company offers independent and neutral cloud-based identity solutions that allow its customers to integrate with nearly any application, service, or cloud that they choose through its secure, reliable, and scalable platforms. The company's technological neutrality allows its customers to adopt the best technologies easily, and its two platforms are designed to securely connect users to the technology that they choose. Okta AI, a suite of AI-powered capabilities using its unique threat intelligence identity data to power real-time identity actions, is infused into several products available on its two platforms. The company prioritizes the compatibility of its platforms with public clouds, on-premises infrastructures, and hybrid clouds.
The company's platforms are used by organizations in two distinct and powerful ways. Customers manage and secure their employees, contractors, and partners using what the company calls workforce identity, as supported by its Okta Platform. Customers can enable, manage, and secure their customers' identities using what the company calls customer identity, as supported by both its Okta Platform and Auth0 Platform.
Okta Platform
The Okta Platform simplifies the way an organization's employees, contractors, and partners connect to its applications and data from any device, while increasing efficiency and keeping IT environments secure. The Okta Platform can be used as the central system for an organization's connectivity, access, authentication, and identity lifecycle management needs spanning all of its users, technology, and applications. The company's customers use the Okta Platform to secure their workforces, to create solutions that make their partner networks more collaborative, and to provide more seamless and secure experiences for their end users. These features, combined with the company's technological neutrality, help its customers future-proof their environments. The company enables its customers to easily deploy, manage, and secure applications and devices, and to provision and support users across their IT environments, with a simple, intuitive, consumer-like user experience. Once deployed, the company enables administrators to enforce contextual access management decisions based on conditions such as user identity, device, location, application identity, IP reputation, and time of day, and maintain secure access throughout the duration of users' sessions.
The company enables organizations to provide their workforces with immediate and secure access to every application they need from any device they use, without requiring multiple credentials, which significantly enhances user productivity and IT efficiency. The company offers its customers an additional security layer through its Adaptive Multi-Factor Authentication (Adaptive MFA), Device Access, and Identity Threat Protection with Okta AI product offerings. The company's Universal Directory product offering also serves as a system of record to help its customers organize and manage their users. The company's Lifecycle Management product offering enables customers to manage users' access privileges through their entire lifecycle with a no-code approach that improves administrative efficiency and productivity. The company's Workflows product offering enables the building of identity-related business processes with minimal or no-code. Okta Identity Governance, the company's unified identity access management and identity governance product offering, helps its customers improve their security and compliance posture while mitigating modern security risks and increasing efficiency. The company's Privileged Access Management product offering provides unified access and governance for privileged resources and increases visibility, compliance, and security without compromising user experience. The company's Access Gateway product offering enables its customers to extend the Okta Platform to their existing on-premises applications. The company's Identity Security Posture Management product offering proactively identifies vulnerabilities and security gaps before they can be exploited by providing consolidated visibility into identity posture across the Okta Platform and third-party solutions.
The Okta Platform enables the company's customers to automate and secure access across their ecosystem of employees, contractors, and partners, increasing collaboration across their workforces.
Auth0 Platform
The Auth0 Platform enables companies, nonprofits, and governmental agencies to transform their own customers' or citizens' experiences by empowering development teams to rapidly and securely build customer- and citizen-facing cloud, mobile, or web applications. The Auth0 Platform primarily supports consumer and SaaS applications. It empowers application builders to innovate faster by removing the complexity from identity and making it simple, extensible, and customizable. The company enables organizations to integrate its powerful identity platform into their cloud, web, and mobile applications. This makes it easier for them to authenticate, manage, scale, and secure their applications through comprehensive APIs, software development kits, and extensive developer tools, enabling rapid time to market for the business. Organizations are able to streamline user experience and improve security across all their applications, leading to increased customer acquisition, retention, and loyalty.
The Auth0 Platform provides multiple enhanced security capabilities, including bot detection, Adaptive MFA, fraud prevention, and account takeover attack protection while delivering a high level of security. In addition to security and authentication, Auth0 also supports authorization, including fine-grained authorization. The company's Auth for GenAI product offering enables developers to build chatbots and AI agents into their applications easily and securely.
Growth Strategy
The key elements of the company's growth strategy are to deepen relationships within its existing customer base; drive growth with large customers; leverage partner ecosystem; expand its international footprint; innovate and extend its platforms with new products; extend its accessible market with new use cases; increase go-to-market specialization; leverage its integrations; expand its developer ecosystem; leverage its unique data assets with powerful analytics; and pursue mergers and acquisitions and investments.
Product Offerings
The company's portfolio of product offerings and services is used to manage and secure identities. Most of the company's product offerings can be used for both customer identity and workforce identity use cases, and the company is continuously enhancing its product offerings and services. The company's workforce identity product offerings are consumed through web and mobile interfaces and provide simple ways for IT organizations to manage identities for their employees, contractors, and business partners. For customer identity, the company's APIs are also used by developers to embed its identity functionality into their own customer-facing mobile or web applications. The company continuously improves its Okta Platform and Auth0 Platform by releasing and developing additional product offerings, features, and services.
Okta Platform Product Offerings
Access Management
Single Sign-on: When used to manage and secure identities for a customer's workforce, Single Sign-On enables users to access all of their applications, whether in the cloud or on-premises, from any device, with a single entry of their user credentials. The company combines secure access, modern protocols, flexible policies, and a consumer-like user experience to permit organizations to easily allow customers or partners to sign in to their applications with their existing identity information. With Okta FastPass, the company enables its customers to provide their users with a passwordless experience across any device and every major operating system. Single Sign-On also enables built-in reporting and analytics that provide real-time search functionalities across users, devices, applications, and the associated access and usage activity.
Adaptive MFA: Adaptive MFA is a comprehensive, but simple-to-use, product that provides an additional layer of security for an organization's cloud, mobile, and web applications and data. The company offers an intelligent approach to security, built on contextual data. Adaptive MFA includes a policy framework that is integrated with a broad set of cloud and on-premises applications and network infrastructures. It offers adaptive, risk-based authentication that leverages data intelligence from across the Okta Platform network of thousands of organizations, as well as from its partner ecosystem.
API Access Management: API Access Management enables organizations to secure APIs as systems connect to each other. Access to these APIs is managed based on the user, which enables organizations to centrally maintain one set of permissions for any employee, partner, or customer across every point of access. API Access Management reduces development time, boosts security, helps in achieving compliance, and enables seamless end-user experiences by providing a unified portable service for authorizing secure and always available access to any API.
Access Gateway: Access Gateway enables organizations to extend the Okta Platform, which is a cloud-native platform, from the cloud to their existing on-premises applications so that they can harness the benefits of the platform to manage all of their critical systems, whether in the cloud, on-premises, or hybrid. Extending the benefits of the Okta Platform to hybrid IT environments delivers a single point of management for the company's customers' administrators and a single location from which end users can access their critical applications.
Okta Device Access: Okta Device Access extends the Okta Platform's secure access management to the device login experience. Okta Device Access enables end users to securely log in to their devices with their Okta Platform credentials and meet MFA challenges from a set of strong factors, helping organizations to harden their security posture by protecting a user's device with the same experience that the Okta Platform provides for applications and resources.
Universal Directory: Universal Directory provides a centralized, cloud-based system of record to store and secure user, application, and device profiles for an organization. Users and profiles stored in the directory can be used with the company's Single Sign-On product to manage passwords and authentication, or can be used by developers to store and authenticate the users of their applications. When used for workforce identity, Universal Directory becomes a customer's system of record for all of its employees, contractors, and partners.
Security
Identity Threat Protection with Okta AI: Identity Threat Protection helps safeguard organizations with native identity intelligence from the Okta Platform and signals from third-party tools integrated into an organization's security stack. The Okta Platform's AI-driven continuous risk and policy evaluations deliver real-time identity threat assessment and automated remediation.
Identity Security Posture Management: Identity Security Posture Management (ISPM) helps organizations fortify their security measures and safeguard their digital assets with greater efficiency. ISPM highlights critical identity security issues like admin sprawl, MFA bypass, and local accounts, and prioritizes them based on risk severity for effective remediation.
Identity Governance and Administration (IGA)
Lifecycle Management: Lifecycle Management enables IT organizations or developers to manage a user's identity throughout its lifecycle, from onboarding to offboarding. It automates IT processes and ensures user accounts are created and deactivated at the appropriate times, including the workflow and policies needed to power those processes, and helps ensure compliance requirements are met as user roles evolve and access levels change.
Okta Workflows: Designed to enable IT and security teams to move faster, more accurately, and more cost-effectively as they scale, Okta Workflows enables the building of identity-related business processes with minimal or no code, such as automating user onboarding and provisioning, creating just-in-time authorization for software development and IT processes, automating identity-centric security responses, and orchestrating customer data across backend systems.
Okta Identity Governance: Okta Identity Governance provides a unified identity access management and identity governance solution focused on improving an organization's security and compliance posture, helping customers to mitigate everyday security risks, and improve IT efficiency. Okta Identity Governance includes governance capabilities relating to access requests, access certifications, and access reporting. Through these capabilities, Okta Identity Governance simplifies and automates the process of requesting and approving access to applications and resources.
Privileged Access Management
Advanced Server Access: Advanced Server Access offers continuous, contextual access management to secure cloud infrastructure. Organizations can continuously manage and secure access to on-premises Windows and Linux servers and across leading Infrastructure-as-a-Service vendors, including AWS, Google Cloud Platform, and Microsoft Azure. Advanced Server Access enables the company's customers to centralize access controls in a seamless manner to better mitigate the risk of credential theft, reuse, sprawl, and abandoned administrative accounts.
Okta Privileged Access: Okta Privileged Access enables organizations to reduce risk with unified access and governance management for on-premises and cloud privileged resources, for better visibility, compliance, and security for critical applications, resources, and infrastructure requiring privileged access.
Auth0 Platform Product Offerings
Universal Login: Universal Login is a standards-based login infrastructure with centralized feature management and configuration for websites and applications that can be integrated with a wide range of social media login credential providers, enterprise login services, and customer-provided databases. Universal Login enables the company's customers to provide a consistent login experience across many different applications and devices.
Attack Protection: Attack Protection is a suite of security capabilities that protect the company's customers from different types of malicious traffic, including bots, breached passwords, suspicious IP addresses, and brute force attacks. Attack Protection enables the company's customers to minimize risks associated with the ever-growing volume of identity-targeted attacks.
Adaptive MFA: Simple-to-use and adaptable MFA that minimizes friction to end users. When using Adaptive MFA, the company's customers leverage risk-assessment algorithms that present MFA challenges only to select authentication attempts that require additional validation.
Passwordless: Passwordless authentication enables users to log in without a password and supports a variety of different login methods, including advanced device biometrics such as passkeys.
Machine to Machine: Machine to Machine provides standards-based authentication and authorization with non-interactive devices and applications.
Private Cloud: Private Cloud is a deployment option that allows the company's customers to run a dedicated cloud instance of the Auth0 Platform. Private Cloud capability supports multiple cloud providers.
Organizations: Organizations enable the company's customers to support a large number of partners or customers of their own with independent configurations, login experiences, and security options.
Actions and Extensibility: Actions and Extensibility allow the company's customers to create customized identity flows that address their unique requirements through a drag-and-drop interface to add pre-built partner integrations and their own custom logic across an authentication flow.
Enterprise Connections: Enterprise Connections enable Enterprise Federation using pre-built integrations with commonly used enterprise identity systems.
Fine-Grained Authorization: Fine-Grained Authorization helps customers manage complex authorization scenarios efficiently, and reduces latency and downtime as their systems and user bases grow.
Auth for GenAI: A suite of features that enable developers to build chatbots and AI agents into their applications easily and securely.
Through the company's broad and deep product offerings that support a wide range of workforce and customer identity use cases, the company delivers multiple critical business outcomes for its customers. These include boosting their cybersecurity posture, reducing IT spending, addressing regulations, reducing fraud, increasing new customer conversions, creating frictionless customer experiences, and helping technical teams deliver products to market faster.
Technology
The company focuses on engineering an intuitive and comprehensive platform to solve complex identity management and security challenges. The company's cloud architecture is multi-tenant, encrypted, and third-party validated. The company's service also allows it to integrate into its customers' on-premises components and hybrid configurations.
Differentiated Administration, User and Developer Experience
The Okta Platform and Auth0 Platform offer administrators and users a consistent, easy-to-use, consumer-like experience across the company's product offerings. The company's technology integrates with industry-leading browsers and mobile applications to provide seamless access to nearly any web or native mobile application. The company also heavily leverages operating system management and security technologies across desktops, laptops, and mobile devices to provide a transparent, but secure experience for users across a range of devices. These integrations allow the company to seamlessly deliver identity, access, security, and management use cases that previously required significant custom development to achieve.
Robust Security
The company's approach to security spans day-to-day operational practices from the design and development of its software to how customer data is segmented and secured within its multi-tenant platform. The Okta Platform and its features are updated regularly, and along with continuous security testing, there are periodic security reviews that provide audited and verifiable security checkpoints to ensure the quality of its source code. A number of the company's Okta Platform product offerings have attained multiple certifications, including SOC 2 Type II Attestations, CSA Star Level 2 Certification, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, and comply with many other international security frameworks. Certain Okta Platform offerings maintain multiple agency Federal Risk and Authorization Management Program (FedRAMP) Authorities to Operate and are compliant to operate at Department of Defense Impact Level 4. Certain Okta Platform offerings maintain minimum security requirements in alignment with the Security Rule of the Health Insurance Portability and Accountability Act (HIPAA). The Okta Platform also supports FIPS 140-2 encryption requirements.
Scalability and Uptime
The company's technical operations and engineering models are designed around the concept of an always-on, highly redundant, and available platform that the company seeks to upgrade without customer disruption. The company's product offerings and architecture were built entirely in and for the cloud, with availability, resiliency, and scalability at the center of the design. The company has zero planned downtime, including during its maintenance windows.
The company's proprietary architecture includes redundant, active-active-active availability zones with cross-continental disaster recovery regions, real-time database replication, and geo-distributed storage. If one of its systems goes down, another is quickly promoted. The company's architecture is designed to scale both vertically by increasing the size of the application tiers and horizontally by adding new geo-distributed cells.
The Okta Platform and Auth0 Platform are monitored not only at the infrastructure level, but also at the application and third-party integration level. Synthetic transaction monitoring allows the company's technical operations team to detect and resolve issues proactively.
Okta Integration Network and Auth0 Marketplace
The Okta Integration Network contains over 7,000 integrations with cloud, mobile, and web applications, IoT devices, and IT infrastructure providers, including AWS, Atlassian, DocuSign, Google, Microsoft Office 365, NetSuite, Oracle, Palo Alto Networks, Proofpoint, Salesforce, SAP, ServiceNow, Slack, Splunk, VMware, Workday, Zendesk, and Zoom. The company's patented technology allows its customers to seamlessly connect to any application or type of device that is already integrated into its network. In addition, customers can extend the benefits of the Okta Integration Network by creating their own integrations to both cloud and on-premises proprietary applications.
Similarly, the Auth0 Marketplace is a trusted catalog of integrations that enables application teams to easily assemble complete identity solutions. The Auth0 Marketplace connects customers with service providers and builders who solve integration use cases and implement integrations with the Auth0 Platform.
Customers
As of January 31, 2025, the company had more than 19,650 customers, including more than 4,800 customers with an annual contract value greater than $100,000. The company's customers span nearly all industry verticals and range from small organizations with fewer than 100 employees to companies in the Fortune 50, with up to hundreds of thousands of employees, some of which use its platforms to manage millions of their customers' identities.
Sales and Marketing
Sales
The company sells directly to customers through its direct inside and field sales force and also indirectly through its extensive ecosystem of channel partners. The company also offers a self-service approach for developers to sign up for free trials of its Auth0 Platform, which may transition to paid offerings. The company often leverages its expansion sales model to generate incremental revenue, often within the term of the initial agreement, through the addition of new users and the sale of additional product offerings. In many instances, the company finds that initial customer success with its platforms results in key internal decision-makers expanding their deployments, for example, from initial use for workforce identity to expanded use for their customer identity needs.
The company's sales organization is structured to address the specific needs of its target markets and is divided by geography and customer size, and in some cases, by industry vertical. The company's direct sales force is supported by its sales engineers, security team, cloud architects, professional services team, and other technical resources.
Nearly all of the leading cloud application providers are the company's partners, and many of them drive further customer acquisition for it through co-selling arrangements, building its offerings directly into their products, and product demonstrations running on its technology. The company also partners with several of the large technology companies that are driving the movement to the cloud. In addition to these technology partners, the company leverages its channel partners, including system integrators, traditional value-added resellers (VARs), and Government VARs, to broaden the range of customers it reaches.
Marketing
The company's most valuable marketing features its customers and their successes and is informed by a deeply data-driven approach, giving it insights into the efficacy of its efforts. The company's marketing efforts focus on promoting its industry-leading product lines, establishing its brand, generating awareness, creating sales leads, and cultivating the Okta Communities.
A centerpiece of the company's marketing strategy is its annual customer conference, Oktane, which features customers sharing their success stories, new product and feature announcements, and hands-on product labs. The company also hosts a number of other events where it engages with both existing customers and new prospects, as well as delivers product training.
Customer Support and Professional Services
As part of the company's customer-first strategy, the company is focused on customer success and offers several programs to help its customers maximize their success with its product offerings.
Customer Support and Training Services
The company offers three tiers of support, each of which builds upon the previous tier. The company provides 24/7 support for the highest support tiers, as well as access to Customer Success and Technical Account Managers. The company also provides on-demand access to a robust online digital community and customer success hub, where its customers can find answers to common use cases, information about product features, and interact with its experts and industry peers.
Professional Services
The company's professional services team provides assistance to customers in the deployment of its Okta Platform and Auth0 Platform and includes identity and security experts, customized deployment plans, SmartStart, which provides a quick path to implementation, and Okta Expert Assist, in which the company provides its customers with recommendations and best practices designed to improve their security posture.
Okta Community
The company has created the Okta Community, an online community available to all of its customers that enables them to connect with other customers and partners to ask questions and find answers.
Intellectual Property
As of January 31, 2025, the company had 74 issued patents in the United States and 81 issued patents granted outside of the United States that expire between 2030 and 2044 and cover various aspects of its product offerings.
The company has registered Okta and Auth0 as trademarks in many jurisdictions throughout the world to protect its brands. The company also has filed other trademark applications pending in various jurisdictions throughout the world. The company has also registered other trademarks in the United States, including The World's Identity Company and Oktane.
The company is the registered holder of a variety of domestic and international domain names that include Okta, Auth0, and similar variations.
Competitors
The company's principal competitor is Microsoft.
History
The company was founded in 2009. It was incorporated in January 2009 as Saasure, Inc., a California corporation, and was later reincorporated in 2010 under the name Okta, Inc. as a Delaware corporation.
