Okta

// FIG. 04 · Capability coverage

Each tile is an L1; the bar is how many of this product's capabilities realize something beneath it. Our judgment, not a vendor claim.

Product capabilities · 8

• PC-190.10

  Universal Directory

  core

  A cloud user and group store that merges profiles from HR systems and on-premise directories into one identity.

  • BC-760.20.10Identity Lifecycle
• PC-190.20

  Single Sign-On

  core

  Federated login to SaaS and on-premise applications through SAML, OpenID Connect and a pre-built integration catalog.

  • BC-760.20.20Authentication
  • BC-780.50Digital Employee Experience
• PC-190.30

  Adaptive Multi-Factor Authentication

  core

  Factor enrollment and risk-based policies that step up authentication by device, network and behavior.

  • BC-760.20.20Authentication
  • BC-760.40Infrastructure & Endpoint Protection
• PC-190.40

  Lifecycle Management

  strong

  Automated provisioning and deprovisioning of accounts in downstream applications driven by HR or directory events.

  • BC-760.20.10Identity Lifecycle
  • BC-320.40Onboarding
  • BC-360.60Separation & Offboarding
• PC-190.50

  Identity Governance

  partial

  Access requests, periodic certifications and separation-of-duties reporting over the entitlements Okta manages.

  • BC-760.20.30Access Governance
  • BC-140.40Compliance Monitoring & Testing
• PC-190.60

  Privileged Access

  emerging

  Vaulted credentials and session control for server and infrastructure accounts.

  • BC-760.20.40Privileged Access Management
• PC-190.70

  Customer Identity

  strong

  Registration, login, social identity and consent flows embedded in customer-facing applications, including the Auth0 platform.

  • BC-760.20.20Authentication
  • BC-460.40Personalization & Lifecycle Engagement
  • BC-1330.10Digital Storefront
• PC-190.80

  Workflows

  partial

  No-code automation that reacts to identity events and calls connected systems.

  • BC-770.40Process & Task Automation