Okta Research Partner Program Agreement

29 julio 2026 Tiempo de lectura: ~

This Research Partner Program Agreement (this "Agreement" or "RPPA") is entered into by and between Okta, Inc. ("Okta") and the customer entity executing this Agreement or otherwise participating in the Program ("Participant"). This Agreement is effective as of the date of electronic execution or the date Participant first accesses any Research Materials, whichever is earlier (the "Effective Date").  By executing this Agreement, whether via physical signature, electronic signature, or electronic assent (e.g., click-through or checkbox acceptance), the individual acting on behalf of Participant represents and warrants that they possess the full legal right, power, and authority to enter into this Agreement and to legally bind Participant to the terms and conditions set forth herein. If the individual accepting this Agreement does not have such authority, they must not accept this Agreement and Participant must not access or use the Research Releases.

RECITALS

Recital A: Okta is developing certain pre-release, experimental, and unreleased software, services, features, and capabilities (collectively, the "Research Releases").

Recital B: Okta has established a program designed to test, evaluate, and iterate upon these Research Releases (the "Research Partner Program" or the "Program").

Recital C: Participant wishes to join the Program as a participant of the Program to access, test, and provide feedback on these Research Releases under the terms and conditions set forth herein.

NOW, THEREFORE, in consideration of the mutual covenants contained herein and other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, the parties agree as follows:

1. INCORPORATION BY REFERENCE & PROGRAM GOVERNANCE

1.1 Incorporation of Program Guide

Participant’s day-to-day engagement, feedback submission, and technical cooperation shall be governed by the Okta Research Partner Program Guide (the "Program Guide"), which is hereby incorporated by reference. The Program Guide may be updated by Okta from time to time, and Participant’s continued participation in the Program constitutes acceptance of any such updates.

1.2 Designated Authorized Representatives and Opt-In Governance

To ensure clear technical and administrative governance during Participant's evaluation of Research Releases, Participant shall adhere to the administrative requirements set forth in this Section 1.2.

1.2.1 Designation of Authorized Decision-Makers

Participant shall designate a specific group of users, administrators, or a specific category of users (such as Super Administrators) who are authorized to make binding decisions on behalf of Participant regarding which Research Releases Participant will evaluate, opt-in to, or otherwise enable.

1.2.2 Line of Succession

At Participant's discretion, Participant may establish a clear line of succession within the designated group or category of users defined under Section 1.21. This line of succession (or lack thereof, at Participant's option) ensures continuous, uninterrupted coverage and decision-making authority for all Program operations.

1.2.3 Opt-In and Activation Authority

Only those individuals designated under Section 1.2.1 (or their authorized successors under Section 1.2.2) shall be recognized by Okta as possessing the authority to opt-in to, activate, or otherwise enable selected Research Releases. All such actions must be executed in accordance with the administrative procedures and mechanisms detailed in the Program Guide.

1.2.4 Reliance on Designated Actions

Okta is entitled to rely fully, without independent inquiry or verification, on any electronic opt-in, checkbox assent, configuration change, or activation request initiated by any member of Participant's designated group or category of users.

1.3 Nutritional Facts for Research Releases.

Participant acknowledges and agrees that specific capabilities, limitations, geographic restrictions, data processing locations, and any Research Release-specific Data Processing Addenda will be disclosed in the corresponding Nutritional Facts within the Program Guide or published elsewhere by Okta, for Participant’s comprehensive consideration prior to opting-in to a particular Research Release.

2. DEFINITIONS

2.1 Definition of Nutritional Facts

"Nutritional Facts" means the feature-specific disclosures and operational documentation provided by Okta describing the Research Release’s capabilities, e.g., known limitations, audit parameters, risk profile, geographic restrictions, processing locations, and any Research Release-specific Data Processing Addendum.

2.2 Definition of Feedback

"Feedback" means any suggestions, enhancement requests, recommendations, corrections, comments, evaluations, or other feedback provided by Participant (including its employees or contractors) to Okta relating to the Research Releases or other Okta products and services.

2.3 Definition of Preview Tenant

"Preview Tenant" means a non-production, sandbox, or preview environment provided to or utilized by Participant strictly for testing and evaluation.

2.4 Definition of Production Tenant

"Production Tenant" means an active, live administrative environment utilized by Participant to manage actual human or nonhuman identities, access, and enterprise data in the ordinary course of business.

2.5 Definition of Research Materials

"Research Materials" means any software, code, documentation, APIs, SDKs, user interface designs, functional specifications, telemetry tools, or other materials provided by Okta to Participant in connection with the Program.

2.6 Definition of Research Releases

"Research Releases" means those pre-release, experimental, and unreleased software, services, features, and capabilities described in Recital A.

3. LICENSE GRANT, SCOPE, & RESTRICTIONS

3.1 Limited License

Subject to the terms of this Agreement, Okta hereby grants Participant a non-exclusive, non-transferable, non-sublicensable, revocable, limited license to access and use the Research Materials and Research Releases solely for internal testing, evaluation, and feedback purposes.

3.2 Strict Restrictions

Participant shall not, and shall not permit any third party to, engage in any of the restricted activities set forth in this Section 3.2.

3.2.1 Reverse Engineering

Participant shall not reverse engineer, decompile, disassemble, or attempt to derive the source code of any Research Release.

3.2.2 Commercialization

Participant shall not sublicense, sell, rent, lease, distribute, or otherwise commercially exploit the Research Materials or Research Releases.

3.2.3 Modifications

Participant shall not modify, adapt, translate, or create derivative works of any Research Release or Research Materials.

3.2.4 Benchmarking

Participant shall not conduct benchmark testing or competitive analysis of the Research Releases, nor shall Participant disclose the performance, speed, or results thereof to any third party.

3.2.5 Security Bypass

Participant shall not bypass, disable, or attempt to circumvent any security controls, licensing mechanisms, rate limits, or usage boundaries established by Okta.

4. DEPLOYMENT ENVIRONMENTS & RISK CATEGORIZATION

The Program structures access to Research Releases based on distinct environment types and associated risk levels, as described in this Section 4 and the Program Guide. Participant agrees to adhere strictly to the parameters set forth in this Section 4.

4.0.1 Public Sector and Federal Government Restrictions.

Notwithstanding any other provision herein, Federal and Public Sector customers are expressly excluded from participating in any Research Releases deployed in Production Tenants. Any participation by such entities in Production Tenants would require a bespoke, time-boxed testing agreement to ensure compliance with federal procurement laws and specific legal and compliance sign-offs from Okta.

4.1 Preview Only (Low Risk)

4.1.1 Environment Limitation

Participant may deploy and evaluate Research Releases strictly within a non-production Preview Tenant.

4.1.2 Data Restrictions

Participant is strictly prohibited from uploading, syncing, or processing any Personal Data (as defined in the Research Release Data Processing Addendum) or live sensitive operational data within the Preview Tenant. Participant shall use solely dummy, synthetic, or mock data.

4.1.3 Opt-In Mechanism

Activation within a Preview Tenant is enabled upon general opt-in during Program enrollment or via a designated electronic administrative interface.

4.2 Production Case-by-Case (Moderate Risk)

4.2.1 Environment Limitation

Participant may deploy designated Research Releases in a Production Tenant only upon explicit, feature-specific authorization.

4.2.2 Conditions for Activation

Access to and deployment of a Case-by-Case feature requires fulfillment of the sub-conditions set forth below.

4.2.2.1 Nutritional Facts Delivery

Okta will deliver the feature-specific Nutritional Facts via publication to the Program Guide or other mechanism defined in the Program Guide.

4.2.2.2 Opt-In and Consent

Participant's Super Administrator or authorized decision-maker (designated in Section 1.2.1) must provide explicit electronic opt-in and consent per the procedure or mechanism set forth in the Program Guide.

4.2.2.3 Approvals

Both Okta Legal and Okta Product teams must provide formal internal sign-off.

4.2.3 Data Restrictions

Participant shall not process highly regulated data categories (including but not limited to Cardholder Data/PCI-DSS, Protected Health Information/HIPAA-regulated data, and biometrics) through the Research Release unless expressly authorized in writing by Okta. Participant acknowledges that, as per Section 11 of the Research Release Data Processing Addendum, Customer shall not submit, disclose, or otherwise make available to Okta any Personal Data that is defined as special, sensitive, or highly regulated. Any processing of such prohibited data shall constitute a material breach of this Agreement and the DPA, and Participant shall be solely liable for all resulting claims, damages, or regulatory penalties.

4.3 Production Blanket (High Risk / Exceptional)

4.3.1 Environment Limitation

The Production Blanket tier is reserved strictly for strategic Participants under a mutually executed, specialized Exhibit attached hereto. Under this tier, Participant accepts the automated deployment of all qualifying Research Releases within its Production Tenant without requiring per-release, individual approvals.

4.3.2 Compliance Boundaries

Any data processed within the Production Blanket environment is subject to strict automated cleanup controls, including an automatic deletion cycle for designated research telemetry, in compliance with Okta's SOC2, PCI-DSS, and HIPAA boundaries.

4.3.3 Sign-Off Requirements

Execution of a Production Blanket authorization requires a comprehensive, one-time legal review and explicit, written risk acknowledgment signed by Vice-President level leadership (or above) of both Okta and Participant.

5. INTELLECTUAL PROPERTY & FEEDBACK ASSIGNMENT

5.1 Ownership

As between the parties, Okta retains sole and exclusive ownership of all right, title, and interest in and to the Research Releases, Research Materials, and all modifications, enhancements, and derivative works thereof, including all intellectual property rights therein. No license is granted to Participant except as explicitly set forth in Section 3.1.

5.2 Irrevocable Feedback Assignment

Participant may, from time to time, provide Feedback to Okta. Participant hereby irrevocably and unconditionally assigns to Okta all right, title, and interest in and to any and all Feedback, including all intellectual property rights therein. Okta shall be free to use, disclose, reproduce, license, distribute, and exploit the Feedback without any obligation, royalty, attribution, or restriction of any kind. Any such Feedback is provided ‘as-is’ and without any representations or warranties of any kind.

6. CONFIDENTIALITY

6.1 Confidential Information

Participant acknowledges that the Research Releases, Research Materials, the existence of the Program, unreleased product roadmaps, user interface designs, security protocols, telemetry data, and any performance evaluations are the highly sensitive Confidential Information of Okta.

6.2 Duty of Care

Participant shall protect Okta's Confidential Information with at least the same degree of care it uses to protect its own highly confidential information (but in no event less than a reasonable standard of care). Participant shall not disclose Okta's Confidential Information to any third party and shall restrict access solely to those employees who have a critical need to know to facilitate testing and are bound by written confidentiality obligations no less restrictive than those herein.

6.3 Survival

The obligations of confidentiality set forth in this Section 6 shall survive the expiration or termination of this Agreement for a period of five (5) years, or indefinitely with respect to source code, security protocols,  unreleased product designs, and other trade secrets.

7. PRIVACY, SECURITY, & TELEMETRY

7.1 System Telemetry

Participant acknowledges and agrees that the Research Releases may contain automated telemetry, logging, and performance monitoring tools designed to collect system usage data, clickstreams, error logs, and performance metrics. Okta uses this data strictly to monitor service health, debug technical issues, and improve product capabilities.

7.2 Usability Session Recordings

To improve user experience design, Okta may conduct user interviews and usability tests. Subject to receiving Participant’s explicit consent at the time of the session, Okta may record audio, video, or screen sharing during these sessions, in addition to the system telemetry described in Section 7.1. All such recordings are the sole property of Okta and shall be processed in accordance with the Okta Privacy Policy: https://www.okta.com/legal/privacy-policy/.

7.3 Data Protection Compliance

To the extent that Participant uploads, imports, or processes any personal data within the scope of the Program, Okta shall process such data in compliance with applicable privacy laws and the Research Release Data Processing Addendum (the "DPA") attached to or incorporated into this Agreement. This DPA is modified as necessary by the data retention parameters set forth in Section 4.3 and may be superseded or amended by any Research Release-specific Data Processing Addendum for an individual Research Release, as detailed in the corresponding Nutritional Facts.

7.4 Research Release-Specific DPA

Notwithstanding Section 7.3, each individual Research Release may include a Research Release-specific Data Processing Addendum ("RR-Specific DPA") as further detailed in its Nutritional Facts. Such RR-Specific DPA would supersede the DPA referenced in Section 7.3 solely for that particular Research Release. RR-Specific DPAs may be updated from time to time. If Participant objects to an update to an RR-Specific DPA, Participant shall, at its sole discretion, cease using the affected Research Release by deactivating the corresponding feature flag in the Research Release Admin Console or other such self-serve mechanism, or by contacting Okta with a request to turn the Research Release off. It is the Participant's responsibility to stop using any Research Release to which it objects to the corresponding RR-Specific DPA.

8. DISCLAIMER OF WARRANTIES

8.1 General "AS IS" Disclaimer

THE RESEARCH RELEASES AND RESEARCH MATERIALS ARE EXPERIMENTAL AND PRE-RELEASE IN NATURE. THEY ARE PROVIDED TO PARTICIPANT "AS IS" AND "WITH ALL FAULTS," WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. OKTA DOES NOT WARRANT THAT THE RESEARCH RELEASES WILL OPERATE UNINTERRUPTED, SECURELY, OR ERROR-FREE.

8.2 Master Subscription Agreement (MSA) Equivalent Warranty Disclaimer

TO THE MAXIMUM EXTENT PERMITTED BY LAW, OKTA MAKES NO REPRESENTATION OR WARRANTY AND SHALL HAVE NO INDEMNIFICATION OBLIGATIONS WITH RESPECT TO A RESEARCH RELEASE OR ANY RESEARCH MATERIALS. OKTA DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING OUT OF COURSE OF DEALING OR USAGE OF TRADE.

8.3 Attestation and Certification Impact and Optionality

THE USE OF ANY RESEARCH RELEASE MAY IMPACT THE ATTESTATION OR CERTIFICATIONS OF OTHER OKTA OFFERINGS, THE RISK AND LIABILITY OF WHICH REST SOLELY ON THE PARTICIPANT. ALL RESEARCH RELEASES ARE OPTIONAL AND THE PARTICIPANT AND THEIR AUTHORIZED REPRESENTATIVES MUST ONLY OPT-IN OR OTHERWISE ENABLE A RESEARCH RELEASE AFTER CAREFUL CONSIDERATION OF THE NUTRITIONAL FACTS SET FORTH IN THE PROGRAM GUIDE, which will specifically detail any data processing, geographic restrictions, or processing locations relevant to that Research Release.

8.4 Commercial Availability Disclaimer

FOR RESEARCH RELEASES THAT ARE AVAILABLE IN BETA, PRE-GA, PREVIEW, EARLY ACCESS, OR SIMILAR NON-GENERALLY AVAILABLE STATUS, OKTA HAS NO OBLIGATION TO EVER MAKE SUCH RESEARCH RELEASES GENERALLY AVAILABLE. IF OKTA ELECTS TO MAKE A GENERALLY AVAILABLE VERSION OF A RESEARCH RELEASE, SUCH GENERALLY AVAILABLE VERSION MAY HAVE DIFFERENT FEATURES, FUNCTIONALITIES, TECHNOLOGIES, CONFIGURATIONS, AND DOCUMENTATION FROM PRIOR RELEASES.

8.5 Data and Configuration Loss Disclaimer

ANY DATA AND CONFIGURATIONS ENTERED INTO THE RESEARCH RELEASES MAY BE PERMANENTLY LOST UPON TERMINATION OF THE RESEARCH RELEASES OR DISCONTINUATION OF PARTICIPATION IN THE PROGRAM.

8.6 Exclusion of Service Level Agreements and Support

Research Releases are provided without technical support (except as Okta may choose to provide in its sole discretion) and are excluded from any Service Level Agreements (SLAs) or operational uptime commitments made by Okta under any other customer agreement. While traditional technical support is excluded, Okta will engage with Participant during scheduled program meetings to gather feedback and address Research Release-specific inquiries, but not as on-demand technical support.

8.7 Public Sector and Government Moderate Exclusions

Research Releases are excluded from: (i) any Health Insurance Portability and Accountability Act (HIPAA) or other standards applicable to Okta for Government Moderate offerings; and (ii) any authorizations granted under the FedRAMP program or by the U.S. Department of Defense.

9. LIMITATION OF LIABILITY

9.1 Waiver of Consequential Damages

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL OKTA BE LIABLE TO PARTICIPANT OR ANY THIRD PARTY FOR ANY INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE, EXEMPLARY, OR CONSEQUENTIAL DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF DATA, LOSS OF PROFITS, BUSINESS INTERRUPTION, OR COST OF COVER, ARISING OUT OF OR IN CONNECTION WITH THIS AGREEMENT OR THE USE OF THE RESEARCH RELEASES, REGARDLESS OF THE THEORY OF LIABILITY (CONTRACT, TORT, OR OTHERWISE), EVEN IF OKTA HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

9.2 Liability Cap and Fallback

OKTA SHALL HAVE NO LIABILITY OF ANY TYPE WITH RESPECT TO ANY RESEARCH RELEASES OR RESEARCH MATERIALS, UNLESS SUCH EXCLUSION OF LIABILITY IS NOT ENFORCEABLE UNDER APPLICABLE LAW, IN WHICH CASE OKTA'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE PROGRAM, OR ANY RESEARCH RELEASES SHALL NOT EXCEED ONE THOUSAND DOLLARS ($1,000.00 USD). THE EXISTENCE OF ONE OR MORE CLAIMS SHALL NOT ENLARGE THIS LIMIT.

9.3 Participant's Liability for Users

NOTWITHSTANDING ANYTHING TO THE CONTRARY IN THIS SECTION 9 OR SECTION 8, PARTICIPANT WILL BE FULLY LIABLE FOR ANY DAMAGES CAUSED BY ITS USERS' OR ADMINISTRATORS' USE OF THE RESEARCH RELEASES.

10. TERM & TERMINATION

10.1 Term

Participation in any individual Research Release is designed to run for a period of approximately four (4) to eight (8) weeks, but no longer than ninety (90) days from provisioning, unless otherwise specified in the Nutritional Facts or in writing by Okta or terminated earlier in accordance with this Section 10.

10.2 Termination for Convenience

Either party may terminate Participant’s participation in the Program, or access to any specific Research Release, at any time, for any reason or no reason, immediately upon written notice (email notification to suffice).

10.3 Effect of Termination

Upon expiration or termination of this Agreement or any specific Research Release license, the operational consequences set forth below shall apply immediately. The provisions set forth in Sections 5, 6, 8, 9, 10, and 11 shall survive expiration or termination of this Agreement.

10.3.1 Cessation of Rights

Participant’s right to access and use the relevant Research Release and Research Materials shall immediately cease.

10.3.2 Destruction of Materials

Participant shall immediately delete and destroy all copies of the Research Materials in its possession, custody, or control.

10.3.3 De-provisioning

Okta reserves the right to immediately and remotely disable, de-provision, or remove any Research Release capabilities from Participant’s Preview or Production Tenants.

11. GENERAL PROVISIONS

11.1 Governing Law

This Agreement shall be governed by and construed in accordance with the laws of the State of California, without regard to its conflict of laws principles. Any legal action or proceeding arising under this Agreement shall be brought exclusively in the federal or state courts located in San Francisco County, California.

11.2 Export Compliance

Participant shall comply with all applicable export control laws and regulations of the United States and other relevant jurisdictions. Participant represents and warrants that it is not located in any embargoed country or region (including but not limited to Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine) or listed on any U.S. government denied-party list, and will not permit any user to access or use the Research Releases in violation of applicable trade and export laws.

11.3 Entire Agreement

This Agreement, including the incorporated Program Guide (as may be updated pursuant to Section 1.1), and any mutually signed Addenda, constitutes the entire agreement between the parties regarding the subject matter hereof and supersedes all prior or contemporaneous agreements, understandings, or communications, whether written or oral, regarding the Program or legacy "Beta" terms.

11.4 Severability & Waiver

If any provision of this Agreement is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect. The failure of either party to enforce any right or provision under this Agreement shall not constitute a waiver of such right or provision.

 

EXHIBIT A

PRODUCTION BLANKET TIER ADDENDUM

This Production Blanket Tier Addendum (this "Addendum") is entered into by and between Okta, Inc. ("Okta") and the customer entity executing this Addendum ("Participant") and is effective as of the date of mutual signature below. This Addendum is incorporated into and made a part of the Okta Research Partner Program Agreement ("RPPA" or the "Agreement").

A.1 Purpose and Scope

This Addendum governs Participant’s enrollment in the "Production Blanket" tier of the Research Partner Program. Under this high-risk and exceptional tier, Participant elects and authorizes the automated deployment of all qualifying Research Releases within its active Production Tenants without requiring separate, feature-by-feature authorizations, per-release approvals, or individual electronic opt-ins.

A.2 Technical and Operational Governance

To manage the deployment of Production Blanket Research Releases, the parties agree to the operational procedures set forth below.

A.2.1 Program Guide Centrality

All automated deployments and scheduling under the Production Blanket tier shall be managed in accordance with the procedures, notification matrices, and technical criteria detailed in the Program Guide.

A.2.2 Notice and Opt-Out

While deployments are automated, Okta will provide advance notice to Participant's designated administrators (as designated in Section 1.2.1 of the RPPA) of upcoming Production Blanket releases as outlined in the Program Guide. Participant retains the right to temporarily opt-out of or disable a specific release via the administrative control panel or by submitting a written request to Okta within the timeframe specified in the Program Guide.

A.3 Compliance, Security, and Telemetry Cleanup Controls

Participant acknowledges that high-risk production testing requires advanced telemetry and data retention policies.

A.3.1 Compliance Boundaries

Any data processed within the Production Blanket environments remains subject to Okta’s standard security controls. However, to maintain alignment with Okta’s SOC2, PCI-DSS, and HIPAA audit boundaries, specialized research telemetry and associated logs will be transiently processed and not persistently stored within typical production storage systems. Such telemetry and logs, if requiring temporary storage for processing, will be handled in isolated, compliant research-specific storage environments designed to delete data as disclosed in the Nutritional Facts for the corresponding Research Release, and will not contain sensitive categories of Personal Data (PCI, PHI, biometrics) which are explicitly prohibited from processing in these environments.

A.3.2 Telemetry Retention and Deletion

All research-specific telemetry and telemetry logs generated during the testing of Production Blanket releases are subject to strict automated cleanup controls. Okta will enforce a deletion cycle for all such designated telemetry data as disclosed in the Nutritional Facts for the corresponding Research Release.

A.4 Specialized Risk Allocation and Indemnification Waiver

Participant explicitly acknowledges the heightened risk profile associated with the Production Blanket tier.

A.4.1 High-Risk Environment Acknowledgment

Participant understands that the automated deployment of pre-GA, experimental software directly into live Production Tenants presents inherent risks to system stability, identity workflows, and active user access. Participant accepts full operational and financial responsibility for electing this automated tier.

A.4.2 Impact on Core Attestations and Certifications

Participant acknowledges that the active use of pre-GA Research Releases in a Production Tenant may temporarily impact or invalidate the compliance certifications, regulatory attestations, or service level agreements (SLAs) applicable to Participant's other generally available Okta offerings. Participant assumes all risks, liabilities, and consequences resulting from such impact.

A.4.3 No Okta Indemnification

To the maximum extent permitted by applicable law, Okta’s indemnification obligations under any Master Subscription Agreement, customer agreement, or other contract between the parties shall not apply to any claims, damages, or liabilities arising from or related to Participant's participation in the Production Blanket tier or the automated deployment of Research Releases thereunder.

A.5 Executive Sign-Off and Execution

Due to the significant risk allocation shift, this Addendum requires authorization from executive leadership.

A.5.1 VP-Level Requirement

This Addendum is only valid and binding when executed via written signature by authorized representatives of Vice President-level (or above) of both Okta and Participant.

A.5.2 Integration with RPPA

Except as explicitly modified by this Addendum, all terms, conditions, disclaimers, and limitations of liability set forth in the RPPA remain in full force and effect.

EXHIBIT B

PREVIEW ONLY TIER ADDENDUM

This Preview Only Tier Addendum (this "Addendum") is entered into by and between Okta, Inc. ("Okta") and the customer entity executing this Addendum ("Participant") and is effective as of the date of mutual signature below. This Addendum is incorporated into and made a part of the Okta Research Partner Program Agreement ("RPPA" or the "Agreement").

B.1 Purpose and Scope

This Addendum governs Participant’s enrollment in the "Preview Only" tier of the Research Partner Program. Under this conservative risk tier, Participant and its authorized representatives elect and agree that they shall only be permitted to access, opt-in to, or otherwise enable Research Releases within Participant’s non-production, sandbox, or Preview Tenants.

B.2 Production Deployment Lockout

Participant is strictly prohibited from deploying, activating, or evaluating any Research Releases within any of its active, live Production Tenants, regardless of whether a specific Research Release is technically available, offered, or configured for production environments by Okta.

B.3 Administrative Restrictions and Enforcement

To enforce the environmental lockout, the parties agree to the structural protocols set forth below.

B.3.1 De-provisioning Controls

Okta reserves the right to administratively block, restrict, or hide any configuration options, opt-in interfaces, or feature toggles relating to Research Releases within Participant's active Production Tenants.

B.3.2 Opt-In Interface Limitations

Participant’s designated administrators (as designated in Section 1.2.1 of the RPPA) shall only be presented with opt-in and enablement capabilities within the administrative controls of designated Preview Tenants.