Hello Martin!

Thank you for raising the case with Okta. Cristian here with the Support Team.

In regard to your question, there is no one-side-fits-all answer to whether you should have one or three instances of the Server. It depends on the specific needs and constraints of your customer's project.

In order to make an informed decision that align with your customer's objectives, resources and security requirements, please take into consideration the bellow factors:

• Isolation of Environments: If each individual working environment needs to be isolated and independent of each other, having three separate instances of the STS might be a reasonable choice, as this ensures that changes or issues in one environment will not affect the others.
• Maintenance and updates: Maintaining multiple instances of the STS can be more complex and require more effort in terms of updates, patches, and overall maintenance. If they are all the same but connected to different database versions, you might want to consider whether the differences between the database versions necessitate separate STS instances.
• Resource utilization: If one instance can handle the authentication load for all three API deployments efficiently, it might be more resource-effective to have a single instance. However, if each API environment has significantly different authentication needs or usage patterns, separate instances might be necessary to ensure performance and security.
• Scalability: If you anticipate a significant increase in the number of clients or requests, having separate instances can provide a better scalability control, as you can allocate resources independently to each environment.

Best regards,

Cristian Lazar

Okta Global Customer Care