Character Limits for Various Okta Features and Fields

Okta enforces specific character limits across various features and fields, including application names, user identities, and passwords. Administrators use this reference to ensure data entry complies with Okta system constraints.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Management and Monitoring

What are the character limits for various Okta features and fields?

Review the following list to determine the maximum character limits for specific Okta features, fields, and password configurations.

• Username: minimum 5 characters, maximum 100 characters
• Application name: maximum 100 characters
• Identity first name: maximum 50 characters
• Identity last name: maximum 50 characters
• Authorization Server name: maximum 50 characters
• Policy name: maximum 50 characters
• Rule name: maximum 50 characters
• User email: maximum 100 characters
• Application Integration Wizard:
  • Login URL: maximum 255 characters
  • Redirect URL: maximum 512 characters
• Password for Okta-sourced users:
  • Okta does not enforce a maximum password length limit.
  • Okta only stores the first 72 characters of the password and does not prevent saving a password with more than 72 characters.
• Password for Secure Web Authentication (SWA) applications:
  • The maximum length for a SWA password depends on the third-party password policy in place. For example, if GitHub enforces a 128-character maximum length, 128 is the maximum limit when entering a password in Okta.

NOTE: This does not apply to accounts that authenticate to Okta using credentials that a third-party service validates, such as Delegated Authentication to Active Directory (AD), Lightweight Directory Access Protocol (LDAP), or Social Authentication.