Identity Cloud Pricing

Okta Integration Network

Okta ThreatInsight

Stationära och mobila SSO (appar i moln och lokala)

Säkerhetsfråga

Email as a factor

MFA- integration med 3:e part

Group and app access policies

RADIUS-autentisering

PIV card authentication

IdP discovery

Okta FastPass

Custom org URLs (e.g. company.com/login)

Okta sign-in widget

Local language support

Unlimited integrations to AD & LDAP

SIEM integration

Location context

Device context

Network context

Risk-based Authentication

Security questions

Okta Verify OTP

Okta Verify Push

Okta FastPass

Email as a factor

SMS

Voice

U2F

Third-party factors

Faktorer som stöds är Google Authenticator, Duo, Symantec VIP, RSA token och Yubikey

Windows Hello

Apple TouchID

New city, state, or country

New geo-location

Impossible travel patterns

New device

Managed device

Inloggningen kommer från en enhet som är förhandsregistrerad och hanterad via lösningar som VMWare AirWatch, MobileIron, Intune eller JAMF

Device security attributes

New IP

Specifika IP-zoner

Nätverksanonymiserare

Inloggningen kommer från proxy- eller Tor-anslutningar

Okta ThreatInsight

Cloud directory

Unlimited directory integrations (AD/LDAP & apps)

Unlimited custom user attributes and fields

Custom mapping and transformation

Cloud-based LDAP authentication

Auto provisioning / deprovisioning for OIN apps

Directory integration with AD or LDAP

Complete AD synchronization for Office 365

App access and provisioning tied to lifecycle states

Create and deactivate accounts in applications

Manage entitlements

Group discovery, matching, push, and updates

Automations

Policy for automatically suspending, deactivating and deleting users based on date based conditions and triggers.

Access request workflows

Access audit reports

Recent unassignments report

APIs for full customization

Customizable directory for users groups and devices

Manage lifecycle states

Attribute mapping and transformation

Built-in standards-based provisioning (SCIM)

On-prem provisioning SDK

HR-driven IT provisioning (e.g. Workday and UltiPro)

Mastering from select OIN apps (e.g. Salesforce and GSuite)

Mastering from on-premises apps via on-premises provisioning agent

Mastering from CSV Directory

Application and directory integrations

OAuth 2.0 and OIDC compliant

Dynamic client registration

Central access and authorization management

User consent

Customizable scopes and claims

Customizable authorization servers

Supports mixed environments: AWS, Azure, GCP, and on-premises

End-to-end lifecycle management of local Linux and Windows machine accounts

Seamless SSO and MFA authentication built into your SSH and RDP workflows

Backed by a Programmable CA that mints just-in-time, single-use client certificates

Client Application for local SSH and RDP integrations, and dynamic device binding

API allows for custom authentication and management workflows

Number of app integrations

Header-based applications

Kerberos/IWA applications

On-premise applications – such as Oracle E-Business Suite, PeopleSoft, and Sharepoint

Custom web apps, pages, and web portals

Number of policies

Application policies

Custom header variables

Authorization policies

Access Gateway servers

Datacenters

Networks and hosts