Auth0, Okta deliver on Australian Government standards

An independent evaluation of the Auth0 and Okta Identity platforms has demonstrated that Okta continues to meet the high bar for security required by Australian Government agencies.

In late 2024, Okta’s flagship platforms were evaluated by CyberCX, an IRAP-accredited assessor. The assessment reviewed controls as recommended in the Australian Government’s Information Security Manual (ISM) up to the PROTECTED classification level.

The Information Security Registered Assessors Program (IRAP) helps Government agencies validate that security controls used by technology service providers are effective for the storing, processing and transmission of information up to the PROTECTED classification level. 

PROTECTED is a classification for government information where such information, if exposed, has the potential to damage the national interest, organisations or individuals. 

CyberCX has now delivered detailed assessment reports for both the Okta and Auth0 platforms. These reports, which provide Australian Government agencies an in-depth understanding of Okta’s security controls, are now available to Australian government agencies via the Okta Trust Center.  

The scope of Okta services assessed during this evaluation was significantly larger than prior years. While Okta’s core IDaaS (Identity as a Service) platform has been evaluated against ISM criteria for several concurrent years, the scope of the 2024/25 assessment included the adjacent Okta products listed below, as well as a dedicated assessment of the Auth0 platform.

Okta is now well positioned to support government agencies with stringent compliance requirements.

Want to learn how Okta's IRAP-assessed solutions can support your organisation’s security needs? Contact us or visit the Okta Trust Center for more details.