The Okta Application Network includes all of the key business applications you need from vendors such as ADP, Big Machines, Cisco, Citrix, Concur, Google, Microsoft, Oracle, Salesforce.com, and Taleo.
You can automatically import users from Active Directory or other applications such as Salesforce.com or Google Apps. Once activated, every user gets a welcome email complete with an overview video that guides them through setup and use.
Once logged into Okta, users gain access to every web application they need, be it in the cloud or behind the firewall.
Once logged in every user can manage account information (username, email, password, etc.) and customize the layout of their homepage.
Okta offers the industry’s most complete, robust and easy to use Active Directory integration. No customization or maintenance required.
Okta intelligently processes AD user imports. Matching algorithms are applied to analyze the users and determine if there is a match to existing Okta users or to accounts that you have imported from other SaaS systems.
Okta's AD integration also allows you to delegate the authentication into Okta, to your on-premise AD Domain Controller. The Desktop SSO functionality also automatically authenticates users with Okta once they login to their Windows network.
The People tab in Okta gives you one view of your users, and is easy to search and sort. You can quickly drill in to individual users and get detailed user, group, and application assignment information and take administrative action.
Groups can be used to assign applications and take other actions across a set of people. Groups can also be mapped to group definitions in other applications or Directories such as Active Directory or Google Apps.
Okta can automatically import users from a variety of directories and applications. You can easily map a user’s profile in Okta to multiple different identities that person has in their SaaS applications.
Once it is properly configured it is very easy to rapidly assign one, or a bundle of applications to one or many users directly from the Applications homepage.
Okta automatically deprovisions in apps that support the functionality; and for those that don't, Okta highlights the accounts still open and guides administrators through the manual deprovisioning tasks required.
Okta records the entire deprovisioning process, timestamping the workflow, the people involved and generating reports that offer a complete audit trail of activity.
IT Administrators receive automated emails detailing all the apps associated with a deactivated employee, which accounts were automatically terminated by Okta, and which ones need to be manually deprovisioned.
The dashboard contains a summary of key usage and activity statistics, notifications of any problems or outstanding work to be completed, as well as shortcuts to the most commonly performed tasks.
Okta supports multiple instances of an application so that if you have different divisions of the company using separate application instances or you have both a test and production version of a SaaS application.
Each individual Application has its own administrative homepage, which provides a summary of the current integration settings across single sign-on and user management as well as a view to recent log activity.
Within the security tab you can manage access policies and administrative privileges for Okta.
The Okta service offers a centralized system log that captures a comprehensive set of activity events across both Okta and the integrated applications.
Okta offers a full reporting experience that spans all integrated applications, no separate reporting solution needed.
The Okta sign-in activity report gives you one central view into login activity for the Okta service that is easy to search and sort.
The pre-canned seat utilization report in the Okta service helps you manage the ROI of your SaaS applications.
Within the settings tab you can customize all the components of Okta that are unique to your company. You can pick a custom theme for the end-user homepage and upload your corporate logo.
The Okta service comes bundled with its own highly secure soft token for multifactor authentication, downloadable from the Apple App Store or Android Market.
Configuration is simple and flexible. Admins enable the feature with a single drop down choice. A single page of options determine security policies. Okta MFA can be rolled out to all connected cloud and web based applications in minutes.
Configuration is easy and completely self service.
Use your phone’s camera and QR code reading to automatically pair devices to the service. No error prone data entry required.
When required, users are challenged for additional credentials, whether soft token, security question, or third party MFA solution.
End users can provision personal and enterprise apps within policy frameworks set by administrators
Personal application usage is anonymously aggregated to enable administrators to get ahead of employee demand for new applications
Administrators can define which apps are available for self service provisioning: personal, enterprise or both