Reviews

My main dislikes revolve around Okta's capabilities, particularly in comparison to more robust solutions. Okta is considered IGA Lite because it is not a full-fledged IGA solution. While ease of implementation is straightforward, it struggles in areas like complex access certifications or granular controls for governance. We will need to do some work to make Okta fit our specific needs, as these were known missing features during evaluation, and I am seeing that come true. For access reviews, it's not as robust, and it cannot handle very complex access certifications with multiple conditions across multiple identity sources. Its controls are not as granular; they tend to be broad, and anything specific needs to be custom-coded. I wish the tool had more advanced access certification capabilities, perhaps reaching a B-plus level rather than its current C-plus/B-minus level. It is also less capable of handling as many Boolean questions, which is other products sweet spot. From a customization perspective, external custom code is required for some packages, and while reimagining workflows from our previous tool to Okta is a minor inconvenience, the concern is how future vendor upgrades will impact this custom code, potentially leading to more coding or loss of functionality. Another specific pain point is the lack of capability for complex password checking, such as searching for keywords or maintaining a bad word list for passwords, which is something we need as an entertainment company. Finally, I believe Okta might be trying to get too broad and deep at the same time by moving into IGA and ISPM (Identity Security Posture Management) after acquiring companies like Sparc. They haven't fully fleshed out the ISPM function or defined a serious direction, making me wonder if the same lack of focus applies to the IGA space, considering its less feature-rich offering and unclear product roadmap.

August 28, 2025