Okta pricing 2026: plans and costs
An Identity and Access Management (IAM) platform typically costs $3–$20 per user per month for standard workforce identity management.
Compared to: Microsoft Entra ID · Ping Identity · JumpCloud
- Other IAM platforms with free trials include Duo, JumpCloud, Okta, Ping Identity, and CyberArk.
- Other IAM platforms with publicly listed pricing include Okta, Microsoft Entra ID, Ping Identity, and OneLogin, while platforms such as SailPoint and CyberArk generally require custom quotes.
- If you're building a business case, I can also help develop an IAM pricing benchmark and financial model comparing Okta, Microsoft Entra, Ping Identity, SailPoint, and CyberArk.
Quick pricing summary
- Starter: $6 user/month, billed annually
- Core Essentials: $14 user/month, billed annually
- Essentials: $17 user/month, billed annually
- Professional: Custom (user/month)
- Enterprise: Custom (user/month)
- Worth noting: Workforce Identity suites billed annually. Customer Identity Enterprise base platform starts at $3K/month; B2C and B2B suites are inquire for pricing. Some matrix cells for Identity Threat Protection, Lifecycle Management and Identity Governance were ambiguous in source and omitted.
Plans
Starter
- Single Sign-On
- Multi-Factor Authentication (MFA)
- Universal Directory
- 5 Workflows
Core Essentials
- Single Sign-On
- Adaptive MFA
- Universal Directory
- 5 Workflows
Essentials
- Everything in Starter
- Adaptive MFA
- Privileged Access
- Lifecycle Management
- Access Governance
- 50 Workflows
Professional
- Everything in Essentials
- Device Access
- Privileged Access
- Identity Security Posture Management
- Identity Threat Protection
- Sandbox
- Maximum Workflows
Enterprise
- Everything in Professional
- API Access Management
- Access Gateway
- Identity Security Posture Management
- Machine-to-Machine Tokens
What you get on each plan
| Feature | Starter | Core Essentials | Essentials | Professional | Enterprise |
|---|---|---|---|---|---|
| Single Sign-On (SSO) | ✓ | ✓ | ✓ | ✓ | ✓ |
| Adaptive MFA | Add-on | ✓ | ✓ | ✓ | ✓ |
| Device Access | Add-on | Add-on | Add-on | ✓ | ✓ |
| API Access Management | Add-on | Add-on | Add-on | Add-on | ✓ |
| Secure Partner Access | Add-on | Add-on | Add-on | Add-on | ✓ |
| Access Gateway | Add-on | Add-on | Add-on | Add-on | ✓ |
| Universal Directory | ✓ | ✓ | ✓ | ✓ | ✓ |
| Privileged Access | Add-on | Add-on | 2 Privileged Access admins | 0.5 Resource Unit/license | 0.5 Resource Unit/license |
| Identity Security Posture Management | — | — | Add-on | 2 integrations | 50 integrations |
| Workflows | 5 flows | 5 flows | 50 flows | Maximum | Maximum |
Hidden costs & add-ons
| Cost driver | Price | When it applies |
|---|---|---|
| Okta for AI Agents | Contact sales | Any suite |
| Device Access | Contact sales | Starter, Core Essentials, Essentials |
| API Access Management | Contact sales | Starter, Core Essentials, Essentials, Professional |
| Secure Partner Access | Contact sales | Starter, Core Essentials, Essentials, Professional |
| Access Gateway | Contact sales | Starter, Core Essentials, Essentials, Professional |
| Premier Success Plans | Contact sales | All suites |
Okta pricing vs alternatives
| Brand | Entry price | Free plan | Model | Best for | |
|---|---|---|---|---|---|
| Okta | $6 per seat / mo | No · 30-day trial | Per seat | — | |
| Microsoft Entra ID | — | — | — | — | Compare → |
| Ping Identity | — | — | — | Large enterprises and government bodies managing customer, workforce, partner and AI agent identities at scale | Compare → |
| JumpCloud | $9 per seat / mo | No · 30-day trial | Per seat | IT teams, from startups to enterprises and MSPs, that manage mixed-OS device fleets and want identity and device management in one platform. | Compare → |
| CyberArk | — | — | — | Enterprises that need to secure privileged access for human and machine identities. | Compare → |
List prices as published on www.okta.com/pricing/. Totals are worked examples, not quotes.