Why Upgrade to Okta Identity Engine?

Upgrading to the Okta Identity Engine (OIE) is necessary to access advanced features like phishing-resistant MFA, passwordless capabilities like FastPass, Okta for AI Agents, Identity Threat Protection, and future product innovations.

Unmatched Security


Defend against modern threats with phishing-resistant authenticators, per-user risk-scoring, and enhanced assurance policies.

Greater Flexibility & Control


OIE enables app-level enrollment policies and advanced identity management through a more powerful, customizable policy framework.

Improved User Experience


Reduces unnecessary friction and providing more intuitive authentication flows.

Future-Proof Your Organization


All new Okta innovation, including AI-driven features, is built exclusively on OIE. Upgrade to access the latest Okta capabilities.

What's new in Identity Engine

Capabilities unavailable in Classic Engine — unlocked immediately after upgrading.

Flexible Auth Policies
Apply policies across multiple apps by assurance level. Step up auth automatically when risk is detected
CAPTCHA & Bot Protection
Native hCAPTCHA and reCAPTCHA support across registration, sign-in, and recovery flows
Universal Logout
Terminate all active sessions across every connected app with a single action — critical for incident response
Passwordless Authentication
FastPass, Email Magic Links, and passkeys for frictionless, password-free sign-in across all apps
Native Device Assurance
Enforce OS version, screen lock, jailbreak detection, and more — without third-party MDM for basic checks
Okta for AI Agents
Brings every AI agent into your identity security fabric, allowing you to see, manage, and govern AI at scale

What this means for your identity use cases

Whether you're securing your workforce or building customer-facing experiences, Identity Engine unlocks capabilities purpose-built for your use case.

Okta Workforce Identity

For empowering and protecting your modern workforce.

  • Okta FastPass — Phishing-resistant, passwordless sign-in using Okta Verify on all devices (including Windows and macOS)
  • Native Device Assurance & Device Trust — Enforce OS version, screen lock, jailbreak detection, and managed device requirements across all devices
  • Flexible Authentication Policies — Define access assurance levels across multiple applications via shared policies
  • Okta Identity Threat Protection — Continuous risk evaluation across active sessions*
  • Okta Device Access — Extend Okta authentication policies to your desktop login on macOS, Windows, and more
  • Enhanced OAuth Support — Protect your AI use cases with Cross App Access and Interclient SSO allowing secure access experiences for any authentication use case

Okta Customer Identity

For building frictionless and secure customer experiences.

  • Passwordless Accounts — Remove passwords entirely from customer sign-up and sign-in
  • WebAuthn & Passkeys — Standards-based authentication across web and native
  • Flexible Authentication Policies — Define access assurance levels across multiple applications via shared policies
  • Bot Detection & Threat Protection — Stop automated attacks before they reach your users
  • Profile Progression — Progressive profiling with integration extensibility
  • Okta Identity Threat Protection — Continuous risk evaluation across active sessions*
  • Third-party Admin Governance — Delegate admin access with scoped permissions*
  • Enhanced OAuth Support — Protect your AI use cases with Cross App Access and Interclient SSO allowing secure access experiences for any authentication use case

* May require an additional product license.

Ready to Upgrade to Okta Identity Engine?
Find steps and resources to support you along the way
Navigate