security

  Static API tokens have long been used to call external APIs and access the resources of third parties such as software vendors. As API standards have evolved, OAuth 2.0 emerged as the option offering more robust security, greater flexibility, and a better developer experience. Let’s explore the advantages of moving away from static tokens in…

Security. It’s a hard business. I’m not just talking about the endless patching, monitoring, and training. The constant sprint to remediate when a new CVE (Common Vulnerability and Exposures) notification drops, or the lingering fears that you’ll be called back to the office on your downtime to deal with a crisis.  No, it’s hard because it’s not a…

When it comes to technology, there’s no arguing that the trend of the year is artificial intelligence (AI). AI is discussed simultaneously as the answer to — and the source of — all our problems. I know from my years of experience serving public sector organizations that it can be overwhelming when a new trend comes along. Suddenly, everywhere you…

As the digital landscape evolves, the need for robust security measures becomes increasingly critical. Organizations are constantly exploring innovative ways to ensure secure access to their systems and data. In this pursuit, Okta has taken a significant step forward by integrating its device assurance policies with Google's Device Trust Connector…

When employees have the opportunity to work remotely or in a hybrid arrangement, they take it. As a result, endpoints such as laptops, phones, and other devices, can be located from anywhere in the world as potential points of enterprise vulnerability. Oftentimes, device security standards are not up to date. And as organizations increasingly…

Our teams have been heads down and focused on delivering capabilities that empower our customers to continue to provide seamless customer experiences and power their SaaS ambitions. As we are now halfway through the calendar year, I wanted to reflect on the capabilities we have delivered and give you a glimpse of what's to come next.  Unveiling…

Hello there. I’m Jon Lehtinen, Senior Director of the Okta on Okta team at Okta. As an Identity advocate in large enterprises for nearly 20 years, I understand and appreciate the satisfaction of swapping war stories with fellow practitioners. So, I love leading the Okta on Okta team. But, despite the allure of constantly repeating our company name…

Nearly two decades ago, the U.S. Homeland Security Presidential Directive 12 (HSPD-12) established a new identity policy for federal employees and contractors. Its goal was a strong, government-wide approach to secure both physical and logical access. Today, the Personal Identity Verification (PIV) and Common Access Card (CAC) standards are…

In this article, we will cover some of the characteristics of FIDO2 WebAuthn, which give it an edge over other authenticators (factors). We will also dive into the usage and growth of WebAuthn from Okta’s perspective, along with some of the challenges we are trying to solve for customers here at Okta. WebAuthn (Web Authentication) is one of the…

Okta’s product release cadence At Okta, there are 12 monthly releases for General Availability of new features and there are weekly releases for Early Availability of new features, security patches, bug fixes, and non-customer-facing backend changes.      Every release train spans a three-week window wherein the deployment to the Dev-Test…