Identity Cloud Pricing
Workforce Identity Products
$1,500 annual contract minimum.
Volume discounts for Workforce Identity Products are available for Enterprise customers with 5,000+ users.
Single
Sign-on
Free Trial
SSO
List price $2
per user
per month
Adaptive SSO
List price $5
per user
per month
Integrated access management
Okta Integration Network
Okta ThreatInsight
Desktop and mobile SSO (cloud & on-prem apps)
Security Question
Email as a factor
3rd party MFA integration
Group and app access policies
RADIUS authentication
PIV card authentication
IdP discovery
Customizable user experience
Custom org URLs (e.g. company.com/login)
Okta sign-in widget
Local language support
Directory Integrations
Unlimited integrations to AD & LDAP
Real-time reporting
SIEM integration
Contextual access management
Location context
Device context
Network context
Risk-based Authentication
Multi-factor
Authentication
Contact Sales
MFA
List price $3
per user
per month
Adaptive MFA
List price $6
per user
per month
Multi-factor authentication
Knowledge factors
Security questions
Possession factors
Okta Verify OTP
Okta Verify Push
Email as a factor
SMS
Voice
U2F
Third-party factors
Biometric factors
Windows Hello
Apple TouchID
Contextual access management
Risk-based Authentication
Location context
New city, state, or country
New geo-location
Impossible travel patterns
Device context
New device
Managed device
Network context
New IP
Specified IP zones
Network anonymizers
Okta ThreatInsight
Universal
Directory
Contact Sales
Universal Directory
List price $2
per user
per month
Cloud directory
Unlimited directory integrations (AD/LDAP & apps)
Unlimited custom user attributes and fields
Custom mapping and transformation
Cloud-based LDAP authentication
Lifecycle
Management
Contact Sales
Lifecycle Management
Lifecycle Mgmt
List price $4
per user
per month
Advanced Lifecycle Management
Advanced Lifecycle Mgmt
List price $6
per user
per month
Advanced Sourcing add-on
Advanced Srcing add-on
List price $2
per user
per month
Application and directory integrations
Auto provisioning / deprovisioning for OIN apps
Directory integration with AD or LDAP
Complete AD synchronization for Office 365
Identity lifecycle management
App access and provisioning tied to lifecycle states
Create and deactivate accounts in applications
Manage entitlements
Group discovery, matching, push, and updates
Automations
Workflows
Graphical interface for building identity processes
Conditional & branching logic without code
Flexible triggers (e.g. from Okta, other apps, or scheduled)
Access to library of pre-built connectors
Access to library of pre-built templates
IT authorization
Access request workflows
Real-time reporting
Access audit reports
Recent unassignments report
APIs for full customization
Universal Directory
Customizable directory for users groups and devices
Manage lifecycle states
Attribute mapping and transformation
Built-in standards-based provisioning (SCIM)
On-prem provisioning SDK
Advanced Sourcing
HR-driven IT provisioning (e.g. Workday and UltiPro)
Mastering from select OIN apps (e.g. Salesforce and GSuite)
Mastering from on-premises apps via on-premises provisioning agent
Mastering from CSV Directory
API Access
Management
Contact Sales
API Access Management
List price $2
per user
per month
Application and directory integrations
OAuth 2.0 and OIDC compliant
Dynamic client registration
Central access and authorization management
User consent
Customizable scopes and claims
Customizable authorization servers
Advanced Server Access
Contact SalesAdvanced Server Access
List price starts at $15
per server
per month
Supports mixed environments: AWS, Azure, GCP, and on-premises
End-to-end lifecycle management of local Linux and Windows machine accounts
Seamless SSO and MFA authentication built into your SSH and RDP workflows
Backed by a Programmable CA that mints just-in-time, single-use client certificates
Client Application for local SSH and RDP integrations, and dynamic device binding
API allows for custom authentication and management workflows
Access Gateway
Contact SalesAccess Gateway
List price $3
per user
per month
Okta Single Sign-on and MFA app integrations
Number of app integrations
Header-based applications
Kerberos/IWA applications
On-premise applications – such as Oracle E-Business Suite, PeopleSoft, and Sharepoint
Custom web apps, pages, and web portals
On-premise application policies
Number of policies
Application policies
Custom header variables
Authorization policies
Infrastructure
Access Gateway servers
Datacenters
Networks and hosts
Starter
Up to 5 flows at no cost for Okta customers
*Service protection limits apply
Access to all Okta Workflows connectors
Access to all Okta Workflows templates
Access to all Okta Workflows features, functions
Pay-as-you-go for Developers
Are you a developer looking for a pay-as-you-go option? Check out Auth0 self-service plans starting at $23 per month.
Pricing by plan
Whether you're building a new application or scaling millions of users, our plans have you covered.
One App
List price starting at $14K
annually
Enterprise
List price starting at $36K
annually
Service level assurance
User capacity
Custom applications
Support
Authentication
- Outbound federation to custom applications
- Social authentication
- Group-level password policies
- Group and application-level sign-in policies
- Okta ThreatInsight
Authorization
- 1 authorization server with 1 customizable access policy
- OAuth 2.0 support
- Customizable scopes and claims
- Token revocation
User management
- Secure user store with customizable user attributes
- User lifecycle states (e.g. activated, suspended, deactivated)
- Attribute mapping and transformation
- Registration as a service
Basic multi-factor authentication
- Okta Verify
Customizable email templates and domains
Customizable sign-in and registration widget
One App
List price starting at $14K
annually
Service level assurance
User capacity
Custom applications
Support
Authentication
- Outbound federation to custom applications
- Social authentication
- Group-level password policies
- Group and application-level sign-in policies
- Okta ThreatInsight
Authorization
- 1 authorization server with 1 customizable access policy
- OAuth 2.0 support
- Customizable scopes and claims
- Token revocation
User management
- Secure user store with customizable user attributes
- User lifecycle states (e.g. activated, suspended, deactivated)
- Attribute mapping and transformation
- Registration as a service
Basic multi-factor authentication
- Okta Verify
Customizable email templates and domains
Customizable sign-in and registration widget
Enterprise
List price starting at $36K
annually
Service level assurance
User capacity
Custom applications
Support
Authentication
- Outbound federation to custom applications
- Social authentication
- Group-level password policies
- Group and application-level sign-in policies
- Okta ThreatInsight
Authorization
- 1 authorization server with 1 customizable access policy
- OAuth 2.0 support
- Customizable scopes and claims
- Token revocation
User management
- Secure user store with customizable user attributes
- User lifecycle states (e.g. activated, suspended, deactivated)
- Attribute mapping and transformation
- Registration as a service
Basic multi-factor authentication
- Okta Verify
Customizable email templates and domains
Customizable sign-in and registration widget
Pricing by product
Inbound Federation
Contact SalesList price starting at $8,000
annually
Inbound SAML support from an external identity provider
Just-in-time provisioning into Universal Directory and group assignments
SAML attribute ingestion into Universal Directory
Directory Integration
Contact SalesList price starting at $21,000
annually
Active directory or LDAP user authentication
AD / LDAP user synchronization and import
AD or LDAP mastered profiles
AD or LDAP password reset
API Access Management
Contact SalesUser-driven flows
List price starting at $7,000
annually
priced by MAU
Machine-to-Machine
List price starting at $5,000
annually
priced by tokens
Unlimited OAuth 2.0 authorization servers
Support for unlimited API resource domains
Unlimited access policies
Support for user-driven flows
Support for non-human driven flows (client credentials grant type)
Multi-factor Authentication
Contact SalesMFA
List price starting at $7,000
annually
Adaptive MFA
List price starting at $13,500
annually
Okta Verify OTP
Okta Verify Push
Security question (as a second factor)
Voice
SMS
Third-party multi-factor support
Policies based on:
- Users
- Groups
- Applications
- Network zones
Advanced policies based on:
- New city, state, or country
- New geo-location
- Impossible travel patterns
- New device
- Managed device
- New IP
- Network anonymizers
- Risk-based Authentication
SSO Integrations
Contact SalesList price starting at $1,500
annually
Access to pre-built app integrations in the OIN
Outbound federation (SAML, OIDC) to OIN applications
Custom SAML assertion attributes to OIN applications
Lifecycle Management
Contact SalesList price starting at $8,000
annually
Deprovisioning workflow
AD group-based provisioning and deprovisioning
Attribute-level mastering
Group membership rules
Access request workflow
Provision and deprovision Okta users and groups into AD / LDAP
Provision and deprovision Okta users and groups into OIN, SCIM and on-prem integrations
Access Gateway
Contact SalesList price starting at $7,000
annually
Okta Single Sign-on and MFA app integrations
Number of app integrations
Header-based applications
Kerberos/IWA applications
On-premise applications – such as Oracle E-Business Suite, PeopleSoft, and Sharepoint
Custom web apps, pages, and web portals
On-premise application policies
Number of policies
Application policies
Custom header variables
Authorization policies
Infrastructure
Access Gateway servers
Datacenters
Networks and hosts
DynamicScale
Contact SalesProduction
Supports seasonal or sustained high-capacity traffic in Production environments
Testing
Supports traffic spikes for testing purposes in Preview environment
Guaranteed higher rate limits on specific endpoints
Valid for
Starter
Up to 5 flows at no cost for Okta customers
*Service protection limits apply
Access to all Okta Workflows connectors
Access to all Okta Workflows templates
Access to all Okta Workflows features, functions