specification: API Commons Plans
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/Plans
provider: Okta
providerId: okta
created: '2026-05-04'
modified: '2026-05-22'
reconciled: true
tags:
  - Identity
  - SSO
  - MFA
  - Workforce
  - Customer Identity
  - AI Agents
description: Okta Workforce Identity per-user pricing plus the Customer Identity (Auth0) base platform. Okta for AI
  Agents and Cross-App Access are positioned as add-ons across SKUs.
sources:
  - https://www.okta.com/pricing/
plans:
  - id: okta-starter
    name: Starter
    type: paid
    description: $6/user/month.
    entries:
      - label: Per user
        name: seat
        type: subscription
        metric: user
        limit: -1
        timeFrame: month
        geo: global
        unit: 1
        price: '6.00'
        userMultiplied: true
    elements:
      - name: Single Sign-On
      - name: Multi-Factor Authentication
      - name: Universal Directory
      - name: 5 Workflows
  - id: okta-core-essentials
    name: Core Essentials
    type: paid
    description: $14/user/month.
    entries:
      - label: Per user
        name: seat
        type: subscription
        metric: user
        limit: -1
        timeFrame: month
        geo: global
        unit: 1
        price: '14.00'
        userMultiplied: true
    elements:
      - name: Adaptive MFA
      - name: Privileged Access
      - name: Lifecycle Management
      - name: Access Governance
      - name: 5 Workflows
  - id: okta-essentials
    name: Essentials
    type: paid
    description: $17/user/month.
    entries:
      - label: Per user
        name: seat
        type: subscription
        metric: user
        limit: -1
        timeFrame: month
        geo: global
        unit: 1
        price: '17.00'
        userMultiplied: true
    elements:
      - name: All Core Essentials
      - name: 50 Workflows
  - id: okta-professional
    name: Professional
    type: enterprise
    description: Inquire for pricing.
    entries:
      - label: Per user (custom)
        name: seat
        type: subscription
        metric: user
        limit: -1
        timeFrame: month
        geo: global
        unit: 1
        price: custom
        userMultiplied: true
    elements:
      - name: Device Access
      - name: Identity Security Posture Management
      - name: Identity Threat Protection
      - name: Sandbox
      - name: Unlimited Workflows
  - id: okta-enterprise
    name: Enterprise
    type: enterprise
    description: Inquire for pricing.
    entries:
      - label: Per user (custom)
        name: seat
        type: subscription
        metric: user
        limit: -1
        timeFrame: month
        geo: global
        unit: 1
        price: custom
        userMultiplied: true
    elements:
      - name: API Access Management
      - name: Access Gateway
      - name: Machine-to-Machine Tokens
  - id: okta-customer-identity-enterprise-base
    name: Customer Identity Enterprise Base (Auth0)
    type: enterprise
    description: $3K/month base platform for customer identity (Auth0). B2C and B2B suites priced separately.
    entries:
      - label: Base platform
        name: base
        type: subscription
        metric: tenant
        limit: -1
        timeFrame: month
        geo: global
        unit: 1
        price: '3000.00'
        userMultiplied: false
    elements:
      - name: Unlimited OIDC & Outbound SAML apps
      - name: Robust Okta APIs
      - name: Enterprise Grade SLAs
addOns:
  - name: Okta for AI Agents
    description: Add-on covering AI agent discovery, registration with mandatory owner, least-privilege scope, monitoring,
      and revocation.
    pricing: custom
  - name: Cross-App Access
    description: OAuth ID-JAG profile for agent-to-app authorization, available via Okta IdP.
    pricing: included-or-add-on
  - name: Identity Threat Protection
    pricing: custom
  - name: Identity Security Posture Management
    pricing: custom
  - name: Device Access
    pricing: custom
  - name: API Access Management
    pricing: custom
  - name: Access Gateway
    pricing: custom
  - name: Privileged Access
    pricing: custom
  - name: Identity Governance
    pricing: custom
  - name: Lifecycle Management
    pricing: custom
  - name: Workflows (additional executions)
    pricing: custom