Section 8.4 - Register entry
DOC-REF: FRC-MKT-FR2131856836
Okta IDaaS Government High Cloud (GHC)
Okta lists Okta IDaaS Government High Cloud (GHC) on the FedRAMP Marketplace with the status FedRAMP Certified, at High impact, on the Agency path under the Rev5 process. Package FR2131856836, read from the marketplace feed as of September 3, 2026.
Section A. Register entry
What the marketplace records
- FedRAMP package ID
- FR2131856836
- Cloud service provider
- Okta
- Certification status
- FedRAMP Certified
- Impact level
- High
- Certification class
- Class D (High)
- Authorization path
- Agency
- Certification type
- Rev5
- Marketplace phase
- Ongoing Certification
- Deployment model
- Government Community Cloud
- Register snapshot
- September 3, 2026
- Service model
- SaaS
- Independent assessor
- Coalfire Systems, Inc.
- Sponsoring agency
- Executive Office for United States Attorneys
- Certification date
- March 23, 2023
- Status date
- March 23, 2023
- Annual assessment
- September 19, 2011
- Agency authorizations
- 9
- Recorded reuses
- 49
- Business categories
- Collaboration, Cybersecurity & Risk Management, Human Resources, Operations Management, System Administration
- Dependent offerings
- 16
- Milestones on record
- 3
The marketplace carries Okta IDaaS Government High Cloud (GHC) under package FR2131856836 with 21 recorded fields. Its certification date is March 23, 2023. Coalfire Systems, Inc. is named as the independent assessor, with an annual assessment date of September 19, 2011. Executive Office for United States Attorneys is recorded as the sponsoring agency. 8 agencies are listed as having authorized it, among them Bureau of Economic Analysis, Department of Veterans Affairs, Department of the Navy and 5 more, and the feed records 49 reuses of the package. It is delivered as SaaS on a government community cloud, filed under 5 business categories including Collaboration, Cybersecurity & Risk Management, Human Resources and 2 more. 16 other offerings on the register are listed as dependent on this one, among them Andesite Azimuth for Government AAG, Aqua Platform for Government and Bugcrowd for Government (BCGOV).
Section B. Milestones
3 entries in the marketplace event log
Most recent first, as recorded by FedRAMP.
| Date | Category | Recorded |
|---|---|---|
| March 23, 2023 | Status Change | Status changed from PMO Review to FedRAMP Certified |
| September 19, 2022 | Status Change | Status changed from Agency Review to FedRAMP In Process |
| February 17, 2022 | Status Change | Status set to Agency Authorization In Process |
Section C. Cost context
What reaching High costs
Our own published ranges for a provider going through this level. Nothing here is a figure this provider has disclosed.
Cost context
Budget for a High authorization
Our published planning range for a provider pursuing High. It is not a figure any listed provider has disclosed.
Read the FedRAMP High cost guide / annual assessment cost / continuous monitoring cost
Path
Agency Authorization is the route for 578 of the offerings on the marketplace. Our cost pages put it at $800,000 to $2,000,000 over 12 to 18 months for Moderate. Agency authorization cost
Assessment and monitoring
An annual assessment date of September 19, 2011 is on the record, and that assessment recurs for as long as the package stays listed. Annual assessment cost / continuous monitoring cost
Section E. Agencies on the record
8 agencies listed against this package
As published on the marketplace. An agency named here has issued its own authorization to operate; FedRAMP does not issue ATOs itself.
- Bureau of Economic Analysis
- Department of Veterans Affairs
- Department of the Navy
- Executive Office for United States Attorneys
- First Responder Network Authority
- Health Resources and Services Administration
- National Institute of Standards and Technology
- United States Census Bureau
Section F. Dependent offerings
16 listed offerings build on this package
From the marketplace's dependent products view. A provider that inherits controls from a package below it carries a narrower assessment boundary of its own, which is one of the larger levers on authorization cost.
- Andesite Azimuth for Government AAG
- Aqua Platform for Government
- Bugcrowd for Government (BCGOV)
- Ceribell EEG
- Checkmarx One for Government (CXG)
- H2O.AI
- Hypori Government Cloud
- MAXIMUS Cloud
- Movius MultiLine and Movius Decentralized Distributed Secure Communications
- Netskope NewEdge Government.
- SentinelOne Singularity Platform High
- Clarity
- Tenable Cloud Security for US Government - Ermetic
- Varonis DatAdvantage Cloud
- Varonis Data Security Platform
- Zimperium Mobile Endpoint Cyber Security
Inheritance is why boundary scope moves a budget more than headcount does. The hidden costs page sets out where scope creeps back in.
Section G. Nearest entries on the register
Comparable offerings
Scored on impact level, path, status, shared business categories and how close the two entries sit in the register's own timeline.
Okta lists 2 offerings on the marketplace. The others are:
- Knox Systems FedRAMP High Managed Platform
Knox Systems
FedRAMP Certified, High impact, Agency path, Rev5, certified March 30, 2026.
- Splunk Cloud Platform for FedRAMP High
Splunk
FedRAMP Certified, High impact, Agency path, Rev5, certified September 13, 2024.
- Elastic Cloud Hosted - High
Elastic Cloud Hosted
FedRAMP Certified, High impact, Agency path, Rev5, certified March 23, 2026.
- H2O.AI
H2O.AI for Government
FedRAMP Certified, High impact, Agency path, Rev5, certified April 16, 2026.
- Riverbed Platform for Government (RP4G)
Riverbed Technology
FedRAMP Certified, High impact, Agency path, Rev5, certified May 19, 2026.
Section H. Description
As published on the marketplace
The provider's own description of the service, reproduced from the FedRAMP feed without edits.
Okta for Government High service offering provides centralized identity and access management capabilities to customers who want to manage access across any application or device, whether they are on-premises in the customer's office/data center or in the cloud. The Okta IDaaS platform is the primary application platform provided to customers. The IDaaS application provides several important features/capabilities, which are listed below. - Universal Directory: Okta Universal Directory provides a single view across all these groups with AD and LDAP directory integrations and out-of-the-box connections with HR systems, CSV files, and third-party IdPs. Integration with Applications: Okta comes with pre-integrated applications that customers can select to allow their users to access them through the Okta Integration Network, either in their enterprise or in a cloud - Okta API Integration: Customers can also integrate their own applications with Okta API - Okta Sign-In Widget (SIW): SIW is the out of the box end user experience that our customers can deploy in an Okta hosted environment. SIW provides configurable user registration, sign in and recovery experience. - Okta Software Development Kit (SDKs): SDKs allow customers to build their own identity experience using Okta as a back end. - Okta Customer Organization Logging: Okta's prebuilt monitoring, logging, and reporting tools make it easy to analyze security posture, user access events, lifecycle management transitions, security risks and other identity-related data. - Okta Admin Dashboard: Okta's Admin Dashboard provides central administration and provisioning of users and the applications they can access. - Adaptive Multi-Factor Authentication (aMFA): Adaptive MFA provides an additional layer of security for access control, which gives Okta customers the ability to create contextual access policies that assess risk factors such as device, network, location, travel, IP, and other context at each step of the authentication process. Single Sign-On (SSO): Okta SSO creates a seamless user experience by providing single sign-on to all the web and mobile applications users need to access. - Okta Verify: Okta Verify is Okta's native desktop and mobile application that can be used for mobile client-based MFA authentication. Okta Verify supports the following authentication mechanisms against a customers' organization: Time-based One-time Password (TOTP), Okta Push Challenge-Response, and Okta FastPass (signed once challenge) - Okta FastPass - NIST 800-63B AAL2/AAL3 authenticator
Next step
What the same authorization would cost you
The worksheet turns an impact level, an existing security posture and an organization size into a line-by-line budget, with the 3PAO fee split out.
Provenance and independence
Source: the FedRAMP Marketplace product feed, produced by the General Services Administration. The feed's own last-change stamp is September 3, 2026; this copy was taken on September 5, 2026.
GSA's disclaimers page states that FedRAMP content about a specific commercial product or service is provided for the information and convenience of the public and “does not constitute endorsement, recommendation, or favoring by the General Services Administration”. A listing here is a record of a certification status, not a judgment about the product.
FedRAMPCost.com is an independent cost reference. We are not affiliated with FedRAMP, the GSA, any provider listed on this page, or any assessment organization, and no provider pays to appear in this register.