# okta

Source: https://startwithidentity.com/vendors/iam/okta/
Last updated: 2026-08-01
License: content by Start with Identity. Cite the source URL.

---

## Overview

Okta is the reference workforce identity platform and the vendor most enterprises benchmark others against. It also owns [Auth0](https://startwithidentity.com/vendors/ciam/auth0/), which it runs as a separate developer-focused customer identity product. Okta's strength is breadth and neutrality: it integrates with almost everything and favors no single ecosystem, which is the main reason heterogeneous enterprises pick it over a stack-native option like [Microsoft Entra](https://startwithidentity.com/vendors/iam/microsoft-entra/).

On 30 July 2026 Okta [signed a definitive agreement to acquire Permiso Security](https://startwithidentity.com/blog/2026-07-30-okta-signs-definitive-agreement-to-acquire-permiso-security/), reportedly for just under 200 million dollars, to give the platform native [ITDR](https://startwithidentity.com/guides/fundamentals/what-is-itdr/) across human, non-human, and agentic identities. Until it closes, treat post-authentication detection as a roadmap item rather than a shipped Okta capability.

## What it is good at

The Okta Integration Network is the largest pre-built app catalog in the category, with thousands of connectors covering SSO and automated provisioning. SAML and OIDC federation are best in class, lifecycle automation from HR sources is mature, and adaptive MFA plus FastPass passwordless are strong. Universal Directory handles messy multi-source identity well, and the support and partner ecosystem is deep. For a vendor-neutral workforce front door, it is hard to beat.

## Where it falls short

Authorization beyond role and group assignment is thin compared with a dedicated [fine-grained engine](https://startwithidentity.com/vendors/authorization/). The platform is SaaS only, so strict on-prem or air-gapped requirements rule it out. Pricing is per-feature and modular, so a realistic deployment (SSO, MFA, lifecycle, governance, device trust) stacks several SKUs and gets expensive. The October 2023 support-system breach also pushed many customers to harden their Okta configuration, and tenant security hygiene is now a real operational task.

## Pricing

Per-user, per-month, billed by module. Published list pricing exists for core SKUs, but real enterprise deals are quote-based and the line items add up. Model the full bundle, not just SSO, with our [TCO calculator](https://startwithidentity.com/tools/tco-calculator/).

## Best for, and who should look elsewhere

Choose Okta when you want the most neutral, broadly integrated workforce platform and you are comfortable with SaaS. Look elsewhere if you are deeply Microsoft-centric (Entra is usually cheaper and tightly integrated), if you need on-prem deployment, or if deep authorization is the priority.

## Bottom line

The safe, capable default for mid-to-large enterprises that value integration breadth and neutrality over bundled cost savings.