We have concluded our investigation into the January 2022 compromise of our third-party vendor. At the outset of our investigation, we focused on a five-day window of time, between January 16 and 21, when the third-party forensic firm, engaged by our vendor Sitel, indicated that the threat actor had access to their environment. Based on that…

This update was posted at 8:50 AM, Pacific Time. ++ On March 22, 2022, nearly 24 hours ago, a number of screenshots were published online that were taken from a computer used by one of Okta’s third-party customer support engineers. The sharing of these screenshots is embarrassing for myself and the whole Okta team.  In this post, I want to provide…

This update was posted at 6:31 PM, Pacific Time. ++ As we shared earlier today, we are conducting a thorough investigation into the recent LAPSUS$ claims and any impact on our valued customers. The Okta service is fully operational, and there are no corrective actions our customers need to take.   After a thorough analysis of these claims, we have…

In late January 2022, Okta detected an attempt to compromise the account of a third party customer support engineer working for one of our subprocessors. The matter was investigated and contained by the subprocessor. We believe the screenshots shared online are connected to this January event. Based on our investigation to date, there is no…

Customer expectations are higher than ever. UX stats show, 88% of online shoppers say that, after having a bad user experience, they wouldn’t return to a website. Customers expect a tailored digital experience that’s secure, but also allows them access to the applications they need—from whichever device is nearby.  To that end, your application's…

Last year, global translation and localisation company Welocalize added an extra layer of authentication to its client portal by teaming up with Okta. Now, Welocalize is delivering an easy-to-use portal experience that also meets its clients’ stringent information security (infosec) and data security needs. That extra layer is Okta Single Sign-On,…

When nationwide lockdowns forced organisations across Asia Pacific into remote working arrangements in 2020, many anticipated a smooth return to the workplace within a matter of months. Instead, a combination of unrelenting COVID-19 outbreaks across the region, along with a new-found appreciation of the business value of hybrid working, has…

Australia’s Customer Data Right (CDR) is a set of rules and obligations that give consumers greater control over their own data. While the banking industry was first to be subject to the CDR, the energy sector is now making the move. The Government says Open Energy, the energy sector's branding for the CDR, will help consumers find and switch to…

Okta's Digital Identity Forum Asia is happening on October 6th and explores the role that identity plays in helping companies harness digital identity to transform and scale their businesses. I’m so excited to play a part in this gathering of thought leaders. Ahead of the event, here’s a preview of my thoughts on the topic of decentralised…

There were several reasons I chose to join Okta five months ago. Back in 2010, I witnessed Okta’s founders Todd McKinnon and Frederic Kerrest gamble on a forward-thinking idea for cloud identity. Since then, Identity-as-a-Service has become a massive category that includes customer identity, workforce identity, and machine identity. Identity today…