Okta Workforce Identity
live verifiedOkta · Per-user tiered bundles. $1,500/yr annual minimum across all tiers.
Okta restructured pricing in 2025-26: the older à-la-carte model ($2 SSO + $3 MFA + $4 Lifecycle) no longer exists. New starter at $6/user/mo includes SSO + MFA + basic provisioning. The $1,500/yr minimum effectively prices Okta out of teams below ~21 seats.
1.Year-1 TCO breakdown
Representative buyer: 200 employees, 30 SaaS apps, full SAML + MFA + lifecycle automation, 90-day audit retention.
2.The hidden cost category for this IdP
The $1,500/yr annual minimum is the structural cost trap. Below 21 seats (~$1,500 ÷ $72/seat-year at Core Essentials) the annual minimum dominates and per-user math becomes meaningless. The tier jumps are the second trap — moving from Core Essentials ($14) to Essentials ($17) is a 21% per-seat increase, often triggered by needing a single feature (e.g. workflows). Audit retention beyond 90 days requires quote-only upgrade with multiplier effects on TCO.
3.Migration cost out of Okta Workforce Identity
Migrating from Okta to another IdP runs $80K-$250K typical for a 200-employee + 30-app deployment. Per-app SAML reconfiguration ($1K-$3K per custom app), SCIM connector rebuilds, audit log export, MFA enrollment migration. The Okta-specific complication: many companies use Okta's Workflows for custom automation; reconfiguring those in another IdP's automation framework is the largest single migration cost line.
4.The negotiation lever
Tier upgrade timing. Okta sales pressures upgrades to Professional/Enterprise via 'roadmap calls' that surface compliance or governance features. The lever: bundle upgrade with renewal, negotiate 24-month commit for 15-20% discount, or push back on tier upgrade if the specific feature isn't required by audit/compliance. Don't let sales rep dictate tier — they default to the highest-margin tier.
5.Vendor tier reference
| Tier | Per-user (USD/mo) | Features |
|---|---|---|
| Starter | $6 | |
| Core Essentials | $14 | |
| Essentials | $17 | |
| Professional / Enterprise | Quote | Quote-only — adds advanced lifecycle, governance, identity threat protection |