Okta

Serverless extensibility

• Forget about having to host your environment and worry about performance, maintenance, and security. Your code is stored and runs on infrastructure owned and maintained on our platform.

Flow editor

• Visually drag and drop Actions to build custom Identity flows. No need to rewrite your code to reorder and reconfigure functions.

Drafting and version control

• Draft, review, and test custom code and flow configurations within a single user interface. Save your changes without having to commit to production.

Testing and debugging

• Quickly determine causality by tracking state changes. Each Action is uniquely tagged and can be traced for contextual information on why it failed.

Automation

• Replace custom code with powerful, flexible if-this-then-that logic.

Connectors

• Explore our catalog of pre-built connectors, or connect to any API to handle your unique, complex identity automation.

Templates

• Find templates for solutions to common use cases and for inspiration on how to unlock more value from Okta Workflows.

What you can do with Workflows

• Enable anyone in your organization to automate + innovate - Enable anyone to automate identity-based processes and drive innovative new user experiences with a low/no-code interface and extensible platform service.
• Enhance and Simplify Extensibility - Automate any identity-centric process with if-this-then-that logic by connecting to any API and stringing together actions across multiple APIs.
• Deliver operational sustainability + security - Eliminate manual processes and utility custom scripts or code, which can be tedious, resource-intensive, and prone to manual errors.

Security that works past the front door

• Step-up authentication allows you to require stronger authentication when accessing restricted areas of an application while allowing wide access to non-sensitive areas.

Secure and enjoyable user experiences

• MFA can block 99.9% of account hacking attacks, but organizations shy away from it due to concerns about user friction. Adaptive MFA allows you to present a challenge only when a login is deemed risky, balancing security and the user journey.

Maximize UX and security with WebAuthn

• Phishing-resistant WebAuthn mitigates account hacking issues while ensuring a smooth user authentication experience. Users can easily enroll all their WebAuthn-capable devices with progressive enrollment, eliminating the need for complex password requirements.

Flexible authentication factors

• Despite having a range of needs, most users still have to authenticate using one method in most instances — passwords. We support a number of different authentication factors, including WebAuthn, Push, and Ubikey, giving businesses and users the flexibility they need to authenticate how they want.

Push notifications with Guardian

• Push notifications are one more tool in your authentication toolbox for reducing barriers without sacrificing security. With Guardian, there’s no need for SMS or manual codes. Authentication can be accomplished simply with one touch.

Email magic links

• Simplify authentication by letting customers go from their inbox directly to your app — like magic (but fewer rabbits and hats).

One-time passcodes (OTP)

• Use SMS and email OTPs on their own or as a second factor for passwordless logins. Okay, you got us, we know this is technically a password (but it’s only a one-time thing).

Social logins

• Let customers authenticate with their preferred social login credentials. We support over 40+ social login options and any OAuth2 provider, so you can meet your customers wherever they are.

Passkeys

• Get faster, easier, and more secure logins with passkeys. It’s phishing-resistant FIDO authentication with a great user experience and they’re the key to the passwordless future.

Identity providers

• Support for over 40+ social login providers out of the box, perfect for building B2C apps.
• Configuration of any enterprise connection, including Active Directory, LDAP, ADFS, SAML, and more with just a few lines of code.
• Consolidation of duplicate accounts across various providers with account linking.

Ease of use

• The freedom of writing your code once and integrating any configured connection.
• A universal login flow for a secure and consistent SSO login experience.
• Custom domains to leverage and maintain your brand presence during the login flow.
• Lock, a web and mobile login widget, seamlessly integrates sign-in for an embedded authentication experience within our application.

Management

• Centralized provisioning and de-provisioning of user accounts.
• Support for coarse-grained and fine-grained authorization protocols to manage permissions.
• Advanced analytics to leverage actionable data for personalized targeting and user growth.
• Powerful logs for auditing and debugging.

Certifications

• Standards-based protocols including OpenID Connect, OAuth 2, and LDAP.
• Compliance with leading organizations including SOC2, GDPR, HIPAA, and others.

Social login

• Let customers authenticate with their preferred social login credentials, paving the way for a seamless and fast authentication experience.

User experience

• Frictionless and flexible authentication options allow customers to interact with the digital world in a manner that best suits them.

Branding

• No code customization options that help reinforce and promote a consistent brand experience across all channels and applications.

Single sign-on

• Orchestrate an uninterrupted authentication experience, across multiple applications, with a single set of login credentials.

Security

• Defend your application from bot attacks and detect anomalies based on suspicious IPs, breached credentials, and user context.

Enhance productivity and reduce costs

• No button pushing, no waiting - Automate access from creation to deletion. Get your employees up and running fast with the resources they need, and free up time for your IT team to work on bigger projects.
• Quick and secure de-provisioning - Automated access management doesn’t just save you time—it also saves you money. Quicker de-provisioning means you’ll recuperate software licenses and save on costs. And don’t even get us started on the money you’ll save by not getting hacked through a still-active account.

Enable anyone in your organization to automate + innovate

• Enable anyone to automate identity-based processes and drive innovative new user experiences with a low/no-code interface and extensible platform service.

Enhance and Simplify Extensibility

• Automate any identity-centric process with if-this-then-that logic by connecting to any API and stringing together actions across multiple APIs.

Deliver operational sustainability + security

• Eliminate manual processes and utility custom scripts or code, which can be tedious, resource-intensive, and prone to manual errors.