Supportability for DNSSEC in Okta Organizations
Apr 6, 2026
Okta Classic Engine
Okta Identity Engine
Custom URL Domains
Overview
Okta supports Domain Name System Security Extensions (DNSSEC) across specific Federal SKUs. This includes partial support for Okta for Government Moderate and full compliance for Okta for Government High and Okta for US Military.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Customize domain and email address
Solution
Which Okta organizations support DNSSEC?
The regulated cells for Okta for Government Moderate partially support DNSSec by setting the custom domain CNAME value to
Okta supports DNSSEC in all of our Federal SKUs:
<subdomain>.okta-dnssec.com instead of <subdomain>.okta.com:Okta supports DNSSEC in all of our Federal SKUs:
- Okta for Government Moderate
- Okta for Government High
- Okta for US Military
The following two cells are already DNSSEC compliant:
- Okta for Government High
- Okta for US Military
