{"version":"0.2.0","built_at":"2026-10-10T20:58:14.188Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","product":{"id":"PR-190","name":"Okta","vendor":"Okta, Inc.","category":"Identity and access management","description":"A cloud identity service that authenticates workforce and customer users, federates to applications and automates account lifecycle across connected systems. Sold as per-user subscriptions by product and feature tier.","website":"https://www.okta.com","license_model":"subscription","deployment":["saas"],"aliases":["Okta Workforce Identity","Okta Customer Identity","Auth0"],"csdm_note":"One Business Application for the tenant and, because nearly every other Application Service depends on it, a dependency relationship from each federated application to Okta's Application Service.","product_capabilities":[{"id":"PC-190.10","name":"Universal Directory","description":"A cloud user and group store that merges profiles from HR systems and on-premise directories into one identity.","business_capability_ids":["BC-760.20.10"],"maturity":"core"},{"id":"PC-190.20","name":"Single Sign-On","description":"Federated login to SaaS and on-premise applications through SAML, OpenID Connect and a pre-built integration catalog.","business_capability_ids":["BC-760.20.20","BC-780.50"],"maturity":"core"},{"id":"PC-190.30","name":"Adaptive Multi-Factor Authentication","description":"Factor enrollment and risk-based policies that step up authentication by device, network and behavior.","business_capability_ids":["BC-760.20.20","BC-760.40"],"maturity":"core"},{"id":"PC-190.40","name":"Lifecycle Management","description":"Automated provisioning and deprovisioning of accounts in downstream applications driven by HR or directory events.","business_capability_ids":["BC-760.20.10","BC-320.40","BC-360.60"],"maturity":"strong"},{"id":"PC-190.50","name":"Identity Governance","description":"Access requests, periodic certifications and separation-of-duties reporting over the entitlements Okta manages.","business_capability_ids":["BC-760.20.30","BC-140.40"],"maturity":"partial"},{"id":"PC-190.60","name":"Privileged Access","description":"Vaulted credentials and session control for server and infrastructure accounts.","business_capability_ids":["BC-760.20.40"],"maturity":"emerging"},{"id":"PC-190.70","name":"Customer Identity","description":"Registration, login, social identity and consent flows embedded in customer-facing applications, including the Auth0 platform.","business_capability_ids":["BC-760.20.20","BC-460.40","BC-1330.10"],"maturity":"strong"},{"id":"PC-190.80","name":"Workflows","description":"No-code automation that reacts to identity events and calls connected systems.","business_capability_ids":["BC-770.40"],"maturity":"partial"}]}}