Okta

Single Sign-On

Single Sign-On allows users to access all authorized applications with just one login, reducing the burden of password management.

Universal Directory

Synchronizes with various account directories to centrally manage users, groups, and device attributes as a unified source of identity truth.

Access Gateway

Supports integration with on-premises applications using mechanisms like Kerberos and Header authentication, extending SSO capabilities to legacy systems.

Lifecycle Management

Automates the creation, updating, and deactivation of accounts and permissions through provisioning and workflow automation during onboarding, transfers, and offboarding.

Privileged Access

Centrally manages and audits high-privilege accounts accessing Windows/Linux servers and critical systems, reducing the risk of privilege abuse.

Device Access

Provides login and Push authentication control for Windows and Mac devices, ensuring only trusted devices can sign in.

Identity Governance

Supports auditing, identity inventories, and access request workflows, enhancing visibility and governance of identities and permissions.

Workflows

Automates identity-related tasks and notifications based on specific conditions and timing via a low-code automation engine, reducing manual operations.

API Access Management

Secures access to APIs and microservices by providing customizable Scopes, Claims, and multiple Authorization Servers.

MFA / Adaptive MFA

Supports over 16 multi-factor authentication methods (including FIDO2, Passkeys, Push, and OTP), with the ability to adjust authentication strength based on risk context.

Adaptive SSO

Dynamically determines whether to allow, step-up authentication, or block logins by combining context such as IP, device, and geolocation with risk assessments.

Identity Threat Protection

Integrates threat detection and risk assessment, supporting next-gen security protocols and connecting with various security products for continuous verification and collaborative defense.