Starter
USD6
per user per month
Best for: Companies that need SSO and MFA and little else
- Single Sign-On
- MFA
- Universal Directory
- 5 Workflows
- USD 1,500 minimum annual contract
Home / Pricing guides / Identity and Access Management / Okta
Pricing guide, Identity and Access Management
Every Okta Workforce Identity suite in plain numbers, which features sit above Starter, and the costs that sit outside the suite.
The short answer
Okta Workforce Identity costs USD 6 to USD 17 per user per month on annual contracts, with Professional and Enterprise quoted by sales and a USD 1,500 minimum on Starter. A 100-user company pays USD 7,200 a year on Starter or USD 20,400 on Essentials at list price, before negotiation.
Written by Procurement VMS Editorial Team · Reviewed by Michael, Procurement Advisor Expert · Price data dated · 9 minute read
Okta now publishes prices for its Workforce Identity suites, which makes the first number easy to find. The harder question is which suite you need, because the features most companies buy Okta for, such as automated provisioning and adaptive MFA, are not in the cheapest plan.
This guide walks through each suite with prices checked on Okta's official pricing page, plus the costs that sit outside it.
Prices below were recorded on 21 September 2026. The headline figure is the lowest price you can get for that plan. Check the official page before you buy, because vendors change prices without notice.
USD6
per user per month
Best for: Companies that need SSO and MFA and little else
USD14
per user per month
Best for: Teams that want automated joiner, mover, leaver processes
USD17
per user per month
Best for: Mid-size companies standardizing identity, Okta's most popular suite
Custom
per user per month
Best for: Security-led organizations and large enterprises
How billing works
Every Okta Workforce Identity suite is billed annually, and there is no monthly plan. Starter carries a USD 1,500 minimum annual contract, which at USD 6 per user covers about 21 users, so smaller teams pay the minimum regardless of headcount. Professional and Enterprise are priced by sales, and add-on products such as Okta for AI Agents and Advanced Server Access are sold separately on top of the suite.
The tier trap
Starter has only SSO, MFA and 5 Workflows. Automated provisioning and deprovisioning (Lifecycle Management) and Adaptive MFA start at Core Essentials, which more than doubles the per-user price from USD 6 to USD 14.
Read this first. Okta's page lists Core Essentials (USD 14) and Essentials (USD 17) with the same feature summary, and the difference between them was not visible in the text we read, so confirm it on the live page. We combine Professional and Enterprise into one custom row because both read "Inquire for pricing". The 21-user figure is USD 1,500 divided by USD 72 per user per year. Vendr mentions Okta's fiscal fourth quarter without a date. Renewal terms are not published.
Move the slider to see what each plan costs at your size. The figures use the list prices on this page and leave out tax, add-ons and any discount you negotiate.
A hundred users shows how much automated provisioning and governance add to the base price.
| Scenario | Cost per year | Against the headline |
|---|---|---|
| Starter, annual contract (100 users) | USD7,200 | Headline price |
| IT needs automated provisioning, so Core Essentials (100 users) | USD16,800 | +USD 9,600 |
| Essentials, Okta's most popular suite (100 users) | USD20,400 | +USD 13,200 |
Compare the plans side by side. Where a cell says Check page, the vendor's pricing page was not specific enough for us to fill it in.
| Feature | Starter | Core Essentials | Essentials | Professional | Enterprise |
|---|---|---|---|---|---|
| Workflows | 5 | 50 | 50 | Maximum | Maximum |
Features we could not place by plan: SSO, MFA, Universal Directory, Adaptive MFA and Lifecycle Management, Privileged Access and Access Governance, Device Access, Identity Threat Protection, ISPM, Sandbox, API Access Management, Access Gateway, M2M tokens. Check the official page for which plan includes each one.
Pick it if you need SSO and MFA for a small team and will provision users by hand.
Pick it if you want automated joiner, mover and leaver provisioning at the lowest published price.
Pick it if you want Okta's most popular suite with governance and privileged access included.
Pick it if you need identity threat protection, device access, a sandbox or API access management.
Our view
Okta is worth the premium when identity is the backbone of your security program and you will use Lifecycle Management to automate offboarding. For SSO and MFA alone, Starter is reasonable, but companies already paying for Microsoft 365 should price Entra ID before signing.
You may be overpaying if
You pay for Essentials but provision users by hand, your contract counts deactivated users, or you already own Entra ID P1 through Microsoft 365 and use Okta only for SSO.
Deactivate and remove leavers, contractors and service accounts before renewal so the contract is sized to real users.
If provisioning is the need, compare Core Essentials at USD 14 with Essentials at USD 17 before accepting the popular tier.
Entra ID P1 lists at USD 7 per user per month and is included in some Microsoft 365 plans. That makes a credible competing quote.
Vendr notes that buyers who negotiate during Okta's fiscal fourth quarter and evaluate alternatives tend to get better outcomes.
Vendr reports that multi-year Okta commitments commonly earn deeper discounts than one-year terms.
Before adding Okta for AI Agents or Advanced Server Access, check whether the need is already covered elsewhere in your stack.
What other buyers report
Vendr reports a median annual Okta contract of USD 44,612 across more than 1,000 deals, ranging from USD 10,819 to USD 226,202, with average savings of about 14 percent off initial quotes. Source
Renewal email you can copy
Fill in the brackets and send it about 90 days before the renewal date. It works best next to your renewal tracker.
Subject: Okta renewal on [renewal date] Hi [account manager], Our Okta [plan] subscription renews on [renewal date]. Over the last 90 days, [active users] of the [paid users] we pay for used it. We would like to renew with [target users] on a [term] term. Before we sign, please send: 1. The current list price and the price you are offering us, line by line. 2. The cap on any price increase at the next renewal. 3. The notice period if we want to cut users or move to another plan. We are comparing this against [alternative] and plan to decide by [decision date]. If you can offer [target discount] percent off list, or a lower price for a longer term, we are ready to talk this week. Thank you, [name] [company]
Free PDF and Excel
A one page summary of every plan, plus an Excel model that adds up your own seat count.
If this vendor does not fit, these are the closest options and what they charge.
| Alternative | Starting price | Pick it when |
|---|---|---|
| Microsoft Entra ID P1 | USD7 per user per month (annual commitment) | You already run Microsoft 365, where Entra ID may be included |
| JumpCloud | USD11 per user per month (SSO package, annual) | You want SSO, MFA and a password manager in one package |
| Microsoft Entra ID Free | Included with Microsoft 365 and Azure | Basic SSO for Microsoft-connected apps is enough |
Identity contracts are sized once, at signing, and trusted ever after. Deactivated accounts, contractors and old service identities all stay in the count until someone reconciles it.
Bottom line. Buy Starter if you only need SSO and MFA, move to Core Essentials or Essentials when you want provisioning automated, and leave Professional for security teams that will use it. Before each renewal, reconcile active users against the contract and bring an Entra ID quote.
Okta Workforce Identity Starter costs USD 6 per user per month, Core Essentials USD 14 and Essentials USD 17, all billed annually. Professional and Enterprise are priced by sales. Starter has a USD 1,500 minimum annual contract, so very small teams pay the minimum.
No. Okta has no free Workforce Identity plan, but it offers a free trial so you can test SSO, MFA and Universal Directory before buying. After the trial, the cheapest option is Starter at USD 6 per user per month billed annually.
Okta does not publish Enterprise pricing. Sales quotes it. Vendr reports a median annual Okta contract of USD 44,612 across more than 1,000 deals, with totals ranging from USD 10,819 to USD 226,202 depending on users and products.
Yes, through negotiation. Vendr reports average savings of about 14 percent off initial quotes. Levers include an accurate user count, a multi-year term, timing near Okta's fiscal year end and a credible competing quote from Microsoft Entra ID.
Okta Workforce Identity is only sold on annual billing, so there is no monthly price to compare. The savings come from choosing the right suite and negotiating term length and user count and not from the billing cycle.
If you already pay for Microsoft 365 or Azure, Microsoft Entra ID Free is included, and Entra ID P1 lists at USD 7 per user per month. JumpCloud's SSO package costs USD 11 per user per month billed annually and bundles MFA and a password manager.
We start from the vendor pricing page and note the date. Where a figure comes from a third party instead, we say so on the page. Procurement VMS is a ratings and comparison site, not a software vendor, and nobody paid for a place in this guide. Spot a number that has changed? Tell us on the contact page and we will check it.
You get a one page PDF and an Excel model with your seat count, the plans above and a renewal checklist.
Choosing software instead of renewing? See the ranked procurement software list.