Okta pricing 2027: real cost per user, hidden fees and what mid-market teams pay

This guide is for IT and finance leads at 50 to 500-person companies who are budgeting a first Okta Workforce Identity contract or a 2027 renewal. If you are pricing Auth0 or Okta Customer Identity for your own app, this is not the page you need.

Okta Workforce Identity costs $6 per user per month for the Starter suite, $14 for Core Essentials and $17 for Essentials, billed annually with a $1,500 minimum contract, according to Okta's pricing page on 28 September 2026. Professional and Enterprise suites are quote-only. For a 250-person company, that means $18,000 to $51,000 a year at list price, before add-ons, premium support and currency effects.

Prices and plan contents checked on okta.com on 28 September 2026. Okta can change them at any time: confirm them in your own quote.

How much does Okta cost per user in 2027?

Okta Workforce Identity pricing starts at $6 per user per month and reaches $17 per user per month for the most complete suite with a public price. Okta sells Workforce Identity as suites, priced per user, per month and billed annually. The Professional and Enterprise suites have no public price: Okta asks you to contact sales.

Okta Workforce Identity is the product family for employees and contractors: single sign-on (SSO), multi-factor authentication (MFA), user directory, lifecycle management and governance. It is priced separately from Okta Customer Identity (the former Auth0 platform for your own customers' logins), which starts at $3,000 per month on an annual contract.

What each Okta Workforce Identity suite includes

The table below reproduces Okta's own plan comparison. "Add-on" means you can buy the capability on top of the suite at a price Okta does not publish.

Two lines in that table decide most mid-market budgets. Lifecycle Management, the module that creates and removes accounts in connected apps when people join or leave, is not in Starter. Identity Governance, which covers access requests and access reviews, is only included from Essentials upwards. Okta notes that its Identity Governance add-on bundles Access Governance, Lifecycle Management and Workflows, and that Access Governance is not sold on its own.

Which Okta prices in other guides are out of date?

Several Okta pricing guides still circulate plan contents and prices that Okta's own page contradicts. The two most common errors are listed below, checked against okta.com/pricing on 28 September 2026.

The practical rule: build your budget from the suite prices and ask Okta to quote every add-on in writing. A per-product price found in a blog post is not a basis for a 2027 budget line.

How much do Okta Professional and Enterprise cost?

Okta does not publish Professional or Enterprise pricing: both suites are sold on a custom quote. What the plan table does tell you is where the floor sits and what drives the quote up.

• The floor is Essentials at $17 per user per month. Professional includes everything in Essentials, so a quote below that level would be unusual at list price.
• Professional adds device and threat capabilities: Device Access, Identity Threat Protection, Identity Security Posture Management (2 integrations) and unlimited Workflows.
• Privileged Access changes unit at the top: Essentials includes 2 Privileged Access admins, while Professional and Enterprise include 0.5 resource unit per license.
• Enterprise adds API and on-premise access: API Access Management, Access Gateway for on-premise apps and Secure Partner Access for external users.

For a 50 to 500-person company, the useful question is rarely "how much is Enterprise pricing?". It is "which Professional capability do we need, for how many users, and is there a cheaper way to get it?". Ask Okta to price the capability as an add-on on Essentials and as part of Professional, then compare the two totals.

What does Okta cost a 100, 250 or 500-person company?

A 250-person company pays between $18,000 and $51,000 a year for Okta Workforce Identity at list price, depending on the suite, and up to $58,650 with Silver support. The table applies Okta's published prices to three mid-market headcounts. It is the calculation most "okta pricing calculator" searches are looking for.

Method: users × monthly list price × 12. Silver support is applied at 15% of the subscription only where annual spend falls in the $20,000 to $200,000 band. Excludes add-ons, services, taxes and negotiated discounts.

Three thresholds matter when you read this table:

• The $1,500 minimum: below 21 users on Starter, you pay $1,500 a year whatever your headcount.
• The $20,000 support line: under $20,000 of annual subscription, Basic support (online, 24 hours a day, five days a week) is included. Above it, Okta positions its paid Silver plan.
• The $200,000 line: above it, the Gold plan at 25% of ARR is required.

How to calculate your total cost of Okta

Your total cost of Okta is the suite price for every user, plus add-ons, support, services and the SaaS upgrades needed to connect your apps. A simple formula keeps the budget honest:

• Subscription: users × suite price × 12, or $1,500 if that is higher.
• Add-ons: each quote-only capability, priced in writing.
• Support: 0% on Basic, 15% on Silver, 25% on Gold.
• Services: migration and setup work, from Okta or a partner.
• Connected apps: the extra cost of SaaS plans that include SSO or SCIM.
• Currency margin: for buyers who budget in euros or pounds.

Worked example: a 250-person company on Core Essentials pays $42,000 a year in subscription. Silver support adds $6,300, which brings the total to $48,300 before any add-on, service or connected-app upgrade. That is the figure to put next to any alternative, not the $14 headline.

Discounts exist, but Okta does not publish them. On Reddit, a user in r/okta advised not to rule Okta out "before getting the final offer" because steep discounts are possible. Budget at list price and treat any discount as upside.

Which hidden fees push the Okta bill above list price?

Six costs sit outside the per-user price: the annual minimum, suite-wide upgrades, unpriced add-ons, premium support, the SSO tax in your other apps and implementation services. None of these hidden costs appears in the headline "$6 per user". Reviewers say the same thing: G2's summary of Okta pricing reviews notes that "per-user, per-feature costs escalate quickly, especially when adding modules like Adaptive MFA, Lifecycle Management, or Privileged Access" (G2).

1. Annual minimum and upfront billing. Every Workforce Identity suite is billed annually, with a $1,500 minimum. You commit to a year of licenses, not a monthly plan.
2. Suite-wide upgrades. Okta's FAQ explains that "all products share the same number of subscriptions" inside a suite. If only your IT team needs governance, you still upgrade every user: for 250 people, Starter to Essentials adds $33,000 a year at list price.
3. Add-ons without a public price. Device Access, Identity Threat Protection, extra Privileged Access, API Access Management, Access Gateway and Okta for AI Agents are quote-only on the lower suites. Ask for each one in writing before you sign.
4. Premier Success Plans. Okta's October 2025 datasheet prices Silver at 15% of ARR for customers spending $20,000 to $200,000, and Gold at 25%, required above $200,000. Silver adds 24/7 support and a one-hour response target on the most severe incidents.
5. The SSO tax in your other SaaS. Okta only connects to an app's SSO or SCIM provisioning if that app offers it on your plan. Many vendors reserve SSO for enterprise tiers, a practice tracked on ssotax.org. Those upgrades land on other budget lines, but they are part of what Okta really costs you.
6. Implementation and professional services. Okta does not publish service prices. Capterra's summary of 83 reviews lists professional services among the reasons costs rise (Capterra).

Why do European buyers pay more than the list price suggests?

European buyers budget Okta in euros but Okta prices it in US dollars, and EU security rules push them towards the higher suites. Okta's French, German and UK pricing pages all show prices in dollars, down to the minimum contract ("1 500 dollars" in French, "1.500 US-Dollar" in German), as checked on 28 September 2026.

That has two consequences for a finance team. First, a euro budget set in autumn can move with the exchange rate before the invoice arrives. Second, a multi-year deal fixes the dollar price but not your euro cost. None of the three top-ranking independent Okta pricing guides we reviewed on 28 September 2026 (AccessOwl, authentik, MetaCTO) mentions euros, VAT, GDPR or NIS2.

The compliance side matters more. Article 21(2) of the NIS2 Directive lists the risk-management measures that essential and important entities must take, including "human resources security, access control policies and asset management" (point i) and "the use of multi-factor authentication or continuous authentication solutions" (point j), according to the official text of Directive (EU) 2022/2555. Mapped against Okta's plan table, those two lines point to different suites.

NIS2 does not name a product or a suite. But if your auditor expects evidence of periodic access reviews, the Okta answer is the Essentials suite for every user, or a governance layer on top of a lower suite. The NIS2 compliance checklist for IT teams lists the other measures to cover.

How much are unused Okta licenses costing you already?

Every unused Okta license costs between $72 and $204 a year at list price, depending on your suite. Workforce Identity is priced per user and billed annually, not per monthly active user. The license count in your contract is the count you pay for, whether or not each account signs in.

If you already run Okta, the renewal question is not only "what will next year cost?". It is also "how many of this year's licenses belong to people who left, contractors whose project ended, test accounts or duplicates?". That cost is already on your books. The only moment to stop paying for it is before the renewal quantity is fixed.

Reviewers on TrustRadius put it simply: "costs increase quickly as the organization expands". Growth adds licenses automatically. Nobody removes them automatically unless offboarding is wired to your HR data and your identity provider.

To find the gap, compare three lists: your Okta users by status, your HR headcount and the license quantity on your Okta order form. Deactivating a user in Okta revokes their app assignments and sessions, but it does not change the number of licenses you signed for. Corma's Okta integration lets you track what each Okta license is actually used for, flags unused or redundant licenses and reminds you before the renewal date.

When does Okta make sense for a 50 to 500-person company?

Okta makes the most sense when you need a dedicated identity provider across many apps and can use most of what your suite includes. It makes less sense when you only need SSO and MFA on top of Google Workspace or Microsoft 365, or when a single team's needs force the whole company onto a higher suite.

The question "from what size on does Okta make sense for organisations?" comes up regularly. In one r/IdentityManagement thread, a practitioner answered that Okta "might be overkill if you have fewer than 300 employees and primarily use Google Workspace". At the small end, a five-person startup in r/okta found the $1,500 annual commitment too high for its size.

For the full comparisons, read Okta vs Microsoft Entra ID for mid-size companies, the list of Okta alternatives for mid-market IAM, or the Corma vs Okta side-by-side comparison.

How to negotiate your 2027 Okta renewal

Start 120 days before your renewal date, fix your real license count first, then negotiate suite, support and price caps separately. Most leverage disappears in the last few weeks, when switching is no longer credible.

1. Four months out: count real users. Export Okta users by status, compare with your HR headcount and deactivate leavers. Your renewal quantity should reflect people, not accounts.
2. Challenge the suite. Because suites are unified, ask which capabilities each group really uses. If only IT needs governance, price a governance layer against a company-wide Essentials upgrade.
3. Price support on its own. Silver costs 15% of ARR. If your team rarely opens urgent tickets, Basic support may be enough below $20,000 of spend.
4. Get every add-on quoted. Device Access, Privileged Access, Identity Threat Protection and Okta for AI Agents have no public price. Put each one in the order form or leave it out.
5. Ask for a renewal cap in writing. In a r/sysadmin thread from October 2023, one admin reported a 30% price increase on an Okta renewal quote. A single report proves nothing about your contract, but it is a reason to cap uplifts on multi-year terms, as suggested in a r/sysadmin thread on SaaS negotiation.
6. Bring a credible alternative. A priced comparison with Entra ID or a mid-market IAM platform is the strongest argument in any renewal call.

The same method applies to every large SaaS contract. Our guide to SaaS vendor renewal management covers calendars, notice periods and negotiation templates.

How Corma helps you control Okta costs or replace part of Okta

Corma is a European IAM and SaaS management platform that works either with Okta, to cut license waste and add governance, or instead of Okta's upper suites for 50 to 500-person companies. Corma connects natively to Okta, Microsoft Entra ID, Google Workspace and JumpCloud.

• License visibility: see which Okta and SaaS licenses are active, underused or assigned to people who left, before each renewal.
• Joiner, mover, leaver automation: zero-touch onboarding and offboarding across your apps, so leavers stop costing money.
• Access reviews: structured campaigns, audit trails and audit-ready reports for ISO 27001, SOC 2 and NIS2 evidence.
• SaaS spend control: track what each subscription costs, including enterprise tiers bought only to unlock SSO.
• EU by design: data hosted in the EU, GDPR-native, ISO/IEC 27001:2022 certified, and recognized in the 2025 Gartner® Magic Quadrant™ for SaaS Management Platforms.

"We are using Corma to have full visibility on all our tools, licences and users. This saves us money but also time around manual tasks like access reviews."Alex Reintjes, IT Support Engineer, Robovision

"On the finance side, we are using Corma as a SaaS Management solution to track expenses, identify cost savings potential and stay on top of all our tools."Stefan Schaper, Finance Manager, Brevo

Explore Corma's IAM platform to see how access, lifecycle and license data sit in one place.

Frequently asked questions

Is there a free version of Okta?

Okta has no free Workforce Identity plan. The Starter suite offers a free trial, and the Okta Integrator Free Plan lets developers explore Okta's APIs and SDKs for up to 10 monthly active users. Paid Workforce Identity suites start at $6 per user per month with a $1,500 annual minimum.

Does Okta Workforce Identity charge per active user?

No. Okta Workforce Identity suites are priced per user, per month and billed annually. Monthly active user pricing applies to Okta Customer Identity, not to employee licenses. You pay for the license quantity in your contract, so unused licenses keep costing money until you reduce the count at renewal.

Can you pay for Okta monthly?

Not for Workforce Identity. Okta bills every Workforce Identity suite annually and requires a $1,500 minimum annual contract. Okta Customer Identity also requires an annual contract, starting at $3,000 per month for its Enterprise base platform.

Can you buy a single Okta product without a suite?

Yes. Okta states that almost all of its products can be purchased individually or added to any suite, but it does not publish individual product prices. Inside a suite, extra licenses are normally added for the whole suite, with exceptions for Workflows, Okta Privileged Access and machine-to-machine tokens.

How much does Okta support cost?

Basic support, online 24 hours a day and five days a week, is included for paying customers under $20,000 of annual subscription spend. Okta's Silver Premier Success Plan costs 15% of annual recurring revenue for customers spending $20,000 to $200,000, and the Gold plan costs 25% and is required above $200,000.

Who is Okta's biggest competitor for mid-market teams?

For workforce identity at 50 to 500 people, the alternatives most often compared with Okta are Microsoft Entra ID, which many Microsoft 365 plans include, JumpCloud, Google Workspace's built-in SSO and European IAM platforms such as Corma. The right choice depends on your main productivity suite, your compliance needs and how many apps you must provision.

What to do before you sign or renew

Okta's list price is only the starting point. Budget the suite your most demanding team needs for every user, add 15% if you need Silver support, get every add-on quoted and convert the dollar total into euros with a margin. Then check how many of the licenses you would renew are already unused.