Identity Cloud Pricing

Browse products and price points that make the most sense for your organization, and then contact sales to get started today.

Workforce Identity Products

$1,500 annual contract minimum.
Volume discounts for Workforce Identity Products are available for Enterprise customers with 5,000+ users.

Single
Sign-on

Free Trial

SSO

List price $2

per user
per month

Adaptive SSO

List price $5

per user
per month

Integrated access management

Okta Integration Network

Okta ThreatInsight

Desktop and mobile SSO (cloud & on-prem apps)

Security Question

Email as a factor

3rd party MFA integration

Group and app access policies

RADIUS authentication

PIV card authentication

IdP discovery

Customizable user experience

Custom org URLs (e.g. company.com/login)

Okta sign-in widget

Local language support

Directory Integrations

Unlimited integrations to AD & LDAP

Real-time reporting

SIEM integration

Contextual access management

Location context

Device context

Network context

Risk-based Authentication

Multi-factor
Authentication

Contact Sales

MFA

List price $3

per user
per month

Adaptive MFA

List price $6

per user
per month

Multi-factor authentication

Knowledge factors

Security questions

Possession factors

Okta Verify OTP

Okta Verify Push

Email as a factor

SMS

Voice

U2F

Third-party factors

Biometric factors

Windows Hello

Apple TouchID

Contextual access management

Risk-based Authentication

Location context

New city, state, or country

New geo-location

Impossible travel patterns

Device context

New device

Managed device

Network context

New IP

Specified IP zones

Network anonymizers

Okta ThreatInsight

Universal
Directory

Contact Sales

Universal Directory

List price $2

per user
per month

Cloud directory

Unlimited directory integrations (AD/LDAP & apps)

Unlimited custom user attributes and fields

Custom mapping and transformation

Cloud-based LDAP authentication

Lifecycle
Management

Contact Sales

Lifecycle Management

Lifecycle Mgmt

List price $4

per user
per month

Advanced Lifecycle Management

Advanced Lifecycle Mgmt

List price $6

per user
per month

Advanced Sourcing add-on

Advanced Srcing add-on

List price $2

per user
per month

Application and directory integrations

Auto provisioning / deprovisioning for OIN apps

Unlimited OIN Apps
Unlimited OIN Apps

Directory integration with AD or LDAP

Complete AD synchronization for Office 365

Identity lifecycle management

App access and provisioning tied to lifecycle states

Create and deactivate accounts in applications

Manage entitlements

Group discovery, matching, push, and updates

Automations

Workflows

Graphical interface for building identity processes

Conditional & branching logic without code

Flexible triggers (e.g. from Okta, other apps, or scheduled)

Access to library of pre-built connectors

Access to library of pre-built templates

IT authorization

Access request workflows

Real-time reporting

Access audit reports

Recent unassignments report

APIs for full customization

Universal Directory

Customizable directory for users groups and devices

Manage lifecycle states

Attribute mapping and transformation

Built-in standards-based provisioning (SCIM)

On-prem provisioning SDK

Advanced Sourcing

HR-driven IT provisioning (e.g. Workday and UltiPro)

Mastering from select OIN apps (e.g. Salesforce and GSuite)

Mastering from on-premises apps via on-premises provisioning agent

Mastering from CSV Directory

API Access
Management

Contact Sales

API Access Management

List price $2

per user
per month

Application and directory integrations

OAuth 2.0 and OIDC compliant

Dynamic client registration

Central access and authorization management

User consent

Customizable scopes and claims

Customizable authorization servers

Advanced Server Access

Contact Sales

Advanced Server Access

List price starts at $15

per server
per month

Supports mixed environments: AWS, Azure, GCP, and on-premises

End-to-end lifecycle management of local Linux and Windows machine accounts

Seamless SSO and MFA authentication built into your SSH and RDP workflows

Backed by a Programmable CA that mints just-in-time, single-use client certificates

Client Application for local SSH and RDP integrations, and dynamic device binding

API allows for custom authentication and management workflows

Access Gateway

Contact Sales

Access Gateway

List price $3

per user
per month

Okta Single Sign-on and MFA app integrations

Number of app integrations

Header-based applications

Kerberos/IWA applications

On-premise applications – such as Oracle E-Business Suite, PeopleSoft, and Sharepoint

Custom web apps, pages, and web portals

On-premise application policies

Number of policies

Unlimited

Application policies

Custom header variables

Authorization policies

Infrastructure

Access Gateway servers

Unlimited

Datacenters

Unlimited

Networks and hosts

Unlimited

Customer Identity Products

Whether you're building a new application or scaling millions of users, our plans have you covered.

Editions

Developer

Priced at $0

per month for up to

Start Free

One App

List price starting at $14K

annually

Contact us

Enterprise

List price starting at $36K

annually

Contact us

Service level assurance

User capacity

Tiers available up to 15K MAUs
Tiers available up to billions of MAUs
Tiers available up to billions of MAUs

Custom applications

5 OIDC Clients and 3 SAML applications
5 OIDC Clients
Unlimited OIDC and SAML applications

Support

Email (For paid accounts only) and Community

Authentication

  • Outbound federation to custom applications
  • Social authentication
  • Group-level password policies
  • Group and application-level sign-in policies
  • Okta ThreatInsight

Authorization

  • 1 authorization server with 1 customizable access policy
  • OAuth 2.0 support
  • Customizable scopes and claims
  • Token revocation

User management

  • Secure user store with customizable user attributes
  • User lifecycle states (e.g. activated, suspended, deactivated)
  • Attribute mapping and transformation
  • Registration as a service

Basic multi-factor authentication

  • Okta Verify

Customizable email templates and domains

(paid accounts only)

Customizable sign-in and registration widget

Developer

Start Free

Priced at $0

per month for up to

Service level assurance

User capacity

Custom applications

Support

Authentication

  • Outbound federation to custom applications
  • Social authentication
  • Group-level password policies
  • Group and application-level sign-in policies
  • Okta ThreatInsight

Authorization

  • 1 authorization server with 1 customizable access policy
  • OAuth 2.0 support
  • Customizable scopes and claims
  • Token revocation

User management

  • Secure user store with customizable user attributes
  • User lifecycle states (e.g. activated, suspended, deactivated)
  • Attribute mapping and transformation
  • Registration as a service

Basic multi-factor authentication

  • Okta Verify

Customizable email templates and domains

Customizable sign-in and registration widget

One App

Contact us

List price starting at $14K

annually

Service level assurance

User capacity

Custom applications

Support

Authentication

  • Outbound federation to custom applications
  • Social authentication
  • Group-level password policies
  • Group and application-level sign-in policies
  • Okta ThreatInsight

Authorization

  • 1 authorization server with 1 customizable access policy
  • OAuth 2.0 support
  • Customizable scopes and claims
  • Token revocation

User management

  • Secure user store with customizable user attributes
  • User lifecycle states (e.g. activated, suspended, deactivated)
  • Attribute mapping and transformation
  • Registration as a service

Basic multi-factor authentication

  • Okta Verify

Customizable email templates and domains

Customizable sign-in and registration widget

Enterprise

Contact us

List price starting at $36K

annually

Service level assurance

User capacity

Custom applications

Support

Authentication

  • Outbound federation to custom applications
  • Social authentication
  • Group-level password policies
  • Group and application-level sign-in policies
  • Okta ThreatInsight

Authorization

  • 1 authorization server with 1 customizable access policy
  • OAuth 2.0 support
  • Customizable scopes and claims
  • Token revocation

User management

  • Secure user store with customizable user attributes
  • User lifecycle states (e.g. activated, suspended, deactivated)
  • Attribute mapping and transformation
  • Registration as a service

Basic multi-factor authentication

  • Okta Verify

Customizable email templates and domains

Customizable sign-in and registration widget

For more information about our API rate limits, visit our documentation.

Add-Ons

Inbound Federation

Contact Sales

List price starting at $8,000

annually

Inbound SAML support from an external identity provider

Just-in-time provisioning into Universal Directory and group assignments

SAML attribute ingestion into Universal Directory

Directory Integration

Contact Sales

List price starting at $21,000

annually

Active directory or LDAP user authentication

AD / LDAP user synchronization and import

AD or LDAP mastered profiles

AD or LDAP password reset

API Access Management

Contact Sales

User-driven flows

List price starting at $7,000

annually
priced by MAU

Machine-to-Machine

List price starting at $5,000

annually
priced by tokens

Unlimited OAuth 2.0 authorization servers

Support for unlimited API resource domains

Unlimited access policies

Support for user-driven flows

Support for non-human driven flows (client credentials grant type)

Multi-factor Authentication

Contact Sales

MFA

List price starting at $7,000

annually

Adaptive MFA

List price starting at $13,500

annually

Okta Verify OTP

Okta Verify Push

Security question (as a second factor)

Email

Voice

SMS

Third-party multi-factor support

Policies based on:

  • Users
  • Groups
  • Applications
  • Network zones

Advanced policies based on:

  • New city, state, or country
  • New geo-location
  • Impossible travel patterns
  • New device
  • Managed device
  • New IP
  • Network anonymizers
  • Risk-based Authentication

SSO Integrations

Contact Sales

List price starting at $1,500

annually

Access to pre-built app integrations in the OIN

Outbound federation (SAML, OIDC) to OIN applications

Custom SAML assertion attributes to OIN applications

Lifecycle Management

Contact Sales

List price starting at $8,000

annually

Deprovisioning workflow

AD group-based provisioning and deprovisioning

Attribute-level mastering

Group membership rules

Access request workflow

Provision and deprovision Okta users and groups into AD / LDAP

Provision and deprovision Okta users and groups into OIN, SCIM and on-prem integrations

Workflows for Customer Identity

Contact Sales

List price starting at $17,000

annually

Graphical interface for building identity processes without code

Conditional & branching logic

Flexible triggers (e.g. from Okta, other apps, or scheduled)

Access to library of pre-built connectors

Access to library of pre-built templates

Access Gateway

Contact Sales

List price starting at $7,000

annually

Okta Single Sign-on and MFA app integrations

Number of app integrations

Unlimited

Header-based applications

Kerberos/IWA applications

On-premise applications – such as Oracle E-Business Suite, PeopleSoft, and Sharepoint

Custom web apps, pages, and web portals

On-premise application policies

Number of policies

Unlimited

Application policies

Custom header variables

Authorization policies

Infrastructure

Access Gateway servers

Datacenters

Networks and hosts

DynamicScale

Contact Sales

Production

Supports seasonal or sustained high-capacity traffic in Production environments

Testing

Supports traffic spikes for testing purposes in Preview environment

Guaranteed higher rate limits on specific endpoints

Tiers from 5x to 1,000x the default rate limits
Tiers from 5x to 1,000x the default rate limits

Valid for

One year, recurring
One month, non-recurring