The Okta Identity CloudPricing

Okta Pricing 2022

Security is one the hottest topics in the tech and corporate worlds. One of the first places company data can leak is from employee accounts. This is why many companies have security policies and resources for teams to stay safe. One such is the identity management service Okta.

Okta uses single sign-on (SSO) technology to provide your organization with safe and secure access to information. Employees can manage their accounts with Okta’s end-user dashboard.

How Does Okta Work?

Okta (pronounced as oc-tah) is an identity and access management enterprise that offers services and software centered around protecting your connection to important devices or cloud platforms.

Okta has over 14,000 global brands that utilize their Customer Identity and Workforce Identity products. Their Integration Network allows over 7,000 options with applications that enhance workflow like LinkedIn Learning, Workday, Salesforce and more.

They are a leader in Identity as a Service (IDaaS) and offer software-as-a-service (SaaS) products. You can access Okta Mobile on mobile devices for iOS and Android. There’s also the Okta Verify app if you want to use push notifications, which is essentially pressing a button on your phone or Apple watch instead of entering a text code.

Their products are meant to provide diverse functionality and ease of use while still ensuring proper authentication and end user management. They have a wide range of services, but we’re focusing on their Workforce Identity solutions.

For those looking for a quick overview from the vendor, check out their Youtube channel here.

What is Okta’s Pricing Model?

The Okta pricing subscriptions are based on the number of users and are priced monthly. Their lowest subscriptions are $2 per user and their highest are $15 per user. The table below shows 8 different services and their following plans available.

Okta Single Sign-on

Okta’s Single Sign-on subscriptions have a plethora of advanced capabilities. Both the SSO and Adaptive SSO plans have powerful features like integrated access management, customizable user experience, and directory integrations, and even real-time reporting.

The Adaptive has the added advantage of contextual access management. Contextual access management is about adapting and assessing risk for different locations and devices. Okta has an entire page that goes over the concept in more detail.

You would only need an Adaptive plan if you expect to use different devices and will likely login from different locations. Both of the SSO plans are good for any team that wants just a single authentication method.

If you want more methods that require a user to prove their identity, such as another verification confirmation through a texted code, that you would find a two step or a multi-factor authentication solution (MFA). MFA allows more flexible authentication options and more security since you will be required to sign in a second place where a hacker may not have access, like your phone.

Okta Multi-Factor Authentication

Okta offers MFA authentication services in Adaptive SSO and Adaptive MFA plans. Each plan uses knowledge, possession, and biometric factors. This mean you can use security questions, Okta Verify on your phone, and Microsoft Windows Hello or Apple TouchID (as biometric authentication).

The Adaptive plan again offers contextual access management, although those features again are even more in-depth than in the Single Sign-On plans. Adaptive MFA has geo-location, IP location and specified IP zones. This is great for companies that want to ensure certain countries and states have unquestioned access, or ensure the opposite, that access stays in the country.

Okta Universal Directory

Okta Universal Directory is a service that allows you to connect to one directory for all users and devices. It offers one subscription plan with important features. You will have access to a cloud directory with unlimited integrations and unlimited user attributes and fields. For protection, it comes with cloud-based LDAP authentication.

Remote small businesses and bigger enterprises can definitely utilize this cloud directory to protect sensitive information and give access to authorized users. If you already have a service like this that really works it may not be worth the switch. If you are interested you should contact sales and learn more. All teams could use a secure directory with unlimited users.

Okta Lifecycle Management

The Okta Lifecycle Management service is for application provisioning. This essentially means automating access management for employees rather than manually adding and deleting accounts. This allows you to save time as well as money spent on unnecessary accounts.

All the plans come with application and directory management, identity lifecycle management, information technology (IT) authorization, and real-time reporting. The Lifecycle Management plan only has a few features of the universal directory such as customized directories for individuals and attribute mapping.

The Advanced Lifecycle Management plan has more universal directory features like on-prem provisioning, and built-in standards for provisioning. They also have access to workflows features like access to pre-built connectors and pre-built templates.

The Advanced Sourcing add-on will give your Advance Lifecycle plan advanced sourcing features. These include HR driven provisioning, mastering on-premises apps, and mastering from a CSV directory.

These subscriptions are ideal for anyone that needs to provision and automate account resources. If you don’t have a large volume of employees this service isn’t going to make a major difference, and may not be worth the additional cost.

Okta API Access Management

The Okta API Access Management plan is centered around securing your APIs. For those unfamiliar, an API is an application programming interface. API examples include The New York TImes website, Spotify, and Google Maps.

The product secures the APIs you use to protect you from possible vulnerabilities through those APIs. It comes with dynamic client registration, customizable authorization users, and is OAuth 2.0 and OIDC compliant. This plan is ideal for teams that frequently depend on APIs, this plan is definitely worth considering.

Okta Advanced Server Access

The Okta Advanced Server Access plan focuses on controlling server access for users and teams. It works with multiple cloud computing platforms like Amazon Web Services or Microsoft Azure as well as on-premises clouds. It comes with custom authentication and workflows, and dynamic device binding.

Developers and IT staff would find this account management useful, but non technical teams wouldn’t need managed server accounts.

Okta Access Gateway

The Okta Access Gateway subscription is for account management of hybrid clouds. It comes with SSO and MFA app integrations, on-premises application policies, and infrastructure features. Their SSO and MFA features include working with on-premises apps like Oracle and Sharepoint, and web apps and web portals.

Hybrid companies can benefit greatly from the extra security with this plan. Teams and offices that on-premises databases can certainly use the extra management and protection.

Okta Workflows

Okta’s Workflows subscription plans are designed for codeless automation of identity processes. You can manage complex memberships, apply governance policies, and set alerts. All plans come with the exact same features and are limited by the amount of workflows per user. These features include workflow templates, connectors, and automation functions.

This kind of service is good for large organizations that intricate care for all those changing accounts. The codeless aspect makes it easier and faster to manage membership accounts.

Subscription plans like Okta can get expensive quicker than you think, depending on what you need. If your company does not actually require a complex array of products, maybe something simpler and free would do.

Okta Alternatives

The Google Authenticator app is a free, quick, and easy way to offer 2 step verification. You can enable both 2 step verification on your work computer, and then get the free app on your phone. Google’s 2 step verification sends you a code or allows you to use a physical security key.

For more information about the process you can go here. If you want to install Google Authenticator right now, you can go here to install it on your computer, and to the Google play store to install it on your phone.

This solution is particularly helpful for startups with small remote teams. It can also be a breath of fresh air for larger companies to not have to buy another set of user accounts and protection for 50 to 500 employees. If you enjoy simplicity and trust your employees with personal responsibility, you can just add 2 step verification into your security policies.

If you want to see a more similar platform to Okta, you can look at Duo by Cisco.

More Resources

To learn more about it you can check out this youtube video of a training session below. For anyone that wants to see more identity management software you can see our list with awesome user provided reviews.

If you have used any of the platforms discussed please leave a review to help other buyers make informed decisions.