Okta IDaaS Regulated Cloud

Okta lists Okta IDaaS Regulated Cloud on the FedRAMP Marketplace with the status FedRAMP Certified, at Moderate impact, on the Agency path under the Rev5 process. Package F1512167750, read from the marketplace feed as of September 3, 2026.

FedRAMP CertifiedRev5Agency path

Section A. Register entry

What the marketplace records

FedRAMP package ID: F1512167750
Cloud service provider: Okta
Certification status: FedRAMP Certified
Impact level: Moderate
Certification class: Class C (Moderate)
Authorization path: Agency
Certification type: Rev5
Marketplace phase: Ongoing Certification
Deployment model: Public Cloud
Register snapshot: September 3, 2026
Service model: SaaS
Independent assessor: Coalfire Systems, Inc.
Sponsoring agency: Executive Office for United States Attorneys
Certification date: April 26, 2017
Status date: April 26, 2017
Annual assessment: July 20, 2011
Agency authorizations: 40
Recorded reuses: 701
Dependent offerings: 141
Milestones on record: 2

The marketplace carries Okta IDaaS Regulated Cloud under package F1512167750 with 20 recorded fields. Its certification date is April 26, 2017. Coalfire Systems, Inc. is named as the independent assessor, with an annual assessment date of July 20, 2011. Executive Office for United States Attorneys is recorded as the sponsoring agency. 37 agencies are listed as having authorized it, among them Administration for Community Living, Agency for Healthcare Research and Quality, Defense Information Systems Agency and 34 more, and the feed records 701 reuses of the package. It is delivered as SaaS on a public cloud. 141 other offerings on the register are listed as dependent on this one, among them LibreView for US Government, Abnormal AI for Government and Accenture Extended Detection and Response (XDR) for government.

Section B. Milestones

2 entries in the marketplace event log

Most recent first, as recorded by FedRAMP.

Event logF1512167750

Date	Category	Recorded
April 26, 2017	Status Change	Status changed from Agency Review to FedRAMP Certified
December 17, 2015	Status Change	Status set to Agency Authorization In Process

Section C. Cost context

What reaching Moderate costs

Our own published ranges for a provider going through this level. Nothing here is a figure this provider has disclosed.

Cost context

Budget for a Moderate authorization

Initial authorization$800,000 to $2,000,000

Continuous monitoring$150,000 to $350,000 a year

Typical timeline12 to 18 months

Control baseline325+ controls

Annual assessment$90,000 to $260,000 a year

Our published planning range for a provider pursuing Moderate. It is not a figure any listed provider has disclosed.

Read the FedRAMP Moderate cost guide / annual assessment cost / continuous monitoring cost

Path

Agency Authorization is the route for 578 of the offerings on the marketplace. Our cost pages put it at $800,000 to $2,000,000 over 12 to 18 months for Moderate. Agency authorization cost

Assessment and monitoring

An annual assessment date of July 20, 2011 is on the record, and that assessment recurs for as long as the package stays listed. Annual assessment cost / continuous monitoring cost

Section E. Agencies on the record

37 agencies listed against this package

As published on the marketplace. An agency named here has issued its own authorization to operate; FedRAMP does not issue ATOs itself.

Administration for Community Living
Agency for Healthcare Research and Quality
Defense Information Systems Agency
Department of Agriculture
Department of Health and Human Services
Department of Homeland Security
Department of State
Department of Veterans Affairs
Executive Office for United States Attorneys
Federal Aviation Administration
Federal Communications Commission
Federal Reserve System
Federal Retirement Thrift Investment Board
Federal Student Aid
Federal Trade Commission
Food and Drug Administration
General Services Administration
Government National Mortgage Association
Health Resources and Services Administration
Immigration and Customs Enforcement
Internal Revenue Service
National Credit Union Administration
National Endowment for the Arts
National Science Foundation
National Telecommunications and Information Administration
Office of Financial Research
Office of Justice Programs
Office of Personnel Management
Office of the Comptroller of the Currency
Strategic Petroleum Reserve
Substance Abuse and Mental Health Service Administration
Surface Transportation Board
U.S. Election Assistance Commission
U.S. International Development Finance Corporation
United States Patent and Trademark Office
Universal Service Administrative Company
Warfighting Acquisition University

Section F. Dependent offerings

141 listed offerings build on this package

From the marketplace's dependent products view. A provider that inherits controls from a package below it carries a narrower assessment boundary of its own, which is one of the larger levers on authorization cost.

Showing 24 of 141. The remainder are listed on the marketplace record for package F1512167750.

Inheritance is why boundary scope moves a budget more than headcount does. The hidden costs page sets out where scope creeps back in.

Section G. Nearest entries on the register

Comparable offerings

Scored on impact level, path, status, shared business categories and how close the two entries sit in the register's own timeline.

Okta lists 2 offerings on the marketplace. The others are:

Okta IDaaS Government High Cloud (GHC) High

Kiteworks Federal Cloud
Kiteworks USA, LLC
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified June 1, 2017.
Knox Systems
Knox Systems, Inc.
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified June 21, 2017.
mLINQS Hosting Service
mLINQS
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified September 8, 2017.
Qualys Cloud Platform
Qualys
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified November 2, 2016.
Beacon
NetComm
FedRAMP Certified, Moderate impact, Agency path, Rev5, certified January 15, 2016.

Section H. Description

As published on the marketplace

The provider's own description of the service, reproduced from the FedRAMP feed without edits.

The Okta IDaaS Regulated Cloud service offering provides centralized identity and access management capabilities to customers who want to manage access across any application or device, whether they are on-premise in the customer's office/data center or in the cloud. The Okta IDaaS Regulated Cloud service provides several important capabilities, including: - Okta Identity Engine (OIE) - Okta Multi-factor authentication (MFA) - Okta Adaptive MFA (AMFA) - Okta Single Sign-On (SSO) - Okta Verify - Okta API Integration - Okta FastPass - NIST 800-63B AAL2/AAL3 authenticator

Next step

What the same authorization would cost you

The worksheet turns an impact level, an existing security posture and an organization size into a line-by-line budget, with the 3PAO fee split out.

Open the Cost Worksheet →More FedRAMP Certified offerings

Provenance and independence

Source: the FedRAMP Marketplace product feed, produced by the General Services Administration. The feed's own last-change stamp is September 3, 2026; this copy was taken on September 5, 2026.

GSA's disclaimers page states that FedRAMP content about a specific commercial product or service is provided for the information and convenience of the public and “does not constitute endorsement, recommendation, or favoring by the General Services Administration”. A listing here is a record of a certification status, not a judgment about the product.

FedRAMPCost.com is an independent cost reference. We are not affiliated with FedRAMP, the GSA, any provider listed on this page, or any assessment organization, and no provider pays to appear in this register.