Okta AI Footnotes
What Okta's AI features do with your data, as Okta publishes it. Checked October 31, 2026. Okta in the Directory.
Agent access
Okta Open Source MCP Server (self-hosted, for Okta's management APIs): generally available in Production per Okta's 2026.02.0 release notes (February 2026). The stage shown is for this server. A second official server, the Okta Managed MCP Server (hosted by Okta), is in Early Access in Production per the 2026.08.1 release notes (August 2026), not generally available. source, source 2, source 3, source 4, source 5, source 6 · checked October 31, 2026
Stage: generally available. Authentication: Open Source server: OAuth 2.0 Device Authorization Grant for interactive use or Private Key JWT for headless use, with tools loaded by granted OAuth scopes. Managed server (Early Access): OIDC with PKCE for interactive users, within existing OAuth scopes.
AI-generated summaries in Security Access Reviews
Okta Identity Governance
| On by default? | On by default: the Enable users to generate AI summaries setting is enabled. source · checked October 31, 2026 |
|---|---|
| How an admin turns it off | Admin Console > Identity Governance > Settings > Governance AI, then turn off Enable users to generate AI summaries. Other security access review features keep working; summaries from closed reviews become unavailable. source, source 2, source 3 · checked October 31, 2026 |
| Trains on customer data? | No. The model is trained by its provider, not by Okta, and does not train on Customer Data as defined in Okta's Master Subscription Agreement (model card dated December 19, 2025). source, source 2 · checked October 31, 2026 |
| Retention | Not published as of October 31, 2026 |
| Where data is processed | Not published as of October 31, 2026 |
| Model providers | Anthropic Claude Sonnet 3.7, hosted by AWS through Amazon Bedrock rather than on Anthropic's infrastructure (model card last updated December 19, 2025). source, source 2 · checked October 31, 2026 |
| Price | Not published as of October 31, 2026 |
Governance Analyzer recommendations
Okta Identity Governance
| On by default? | On by default: Enable Governance Analyzer recommendations is enabled, though reviewers see recommendations only if the campaign's Recommendations option is also on. source, source 2 · checked October 31, 2026 |
|---|---|
| How an admin turns it off | Admin Console > Identity Governance > Settings > Governance AI, then turn off Enable Governance Analyzer recommendations. Existing recommendations become unavailable; Governance Analyzer insights keep working. source · checked October 31, 2026 |
| Trains on customer data? | No. Okta's in-house binary classification model is trained on Okta Identity Governance usage data, not on Customer Data as defined in the Master Subscription Agreement (model card dated February 12, 2026). source, source 2 · checked October 31, 2026 |
| Retention | Not published as of October 31, 2026 |
| Where data is processed | Not published as of October 31, 2026 |
| Model providers | Okta's own model; no third-party model provider. source · checked October 31, 2026 |
| Price | Not published as of October 31, 2026 |
Identity Threat Protection with Okta AI
Okta Workforce Identity (Professional and Enterprise suites)
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | Not published as of October 31, 2026 |
| Trains on customer data? | No. Okta's in-house model trains on historical usage data, telemetry and synthetic data, not on Customer Data as defined in the Master Subscription Agreement (model card dated September 30, 2025). source, source 2 · checked October 31, 2026 |
| Retention | Not published as of October 31, 2026 |
| Where data is processed | Not published as of October 31, 2026 |
| Model providers | Okta's own gradient boosted trees model; no third-party model provider. source · checked October 31, 2026 |
| Price | Included in the Professional suite and above, which are listed as inquire for pricing. Identity Threat Protection is also listed among the capabilities that can be added to any suite. source, source 2, source 3, source 4 · checked October 31, 2026 |
Log Investigator
Okta Workforce Identity Cloud
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | Not published as of October 31, 2026 |
| Trains on customer data? | Not published as of October 31, 2026 |
| Retention | Not published as of October 31, 2026 |
| Where data is processed | Not published as of October 31, 2026 |
| Model providers | Google is the sub-processor for Log Investigator's generative AI, described as non-training generative AI services, with data centers in the USA. source, source 2 · checked October 31, 2026 |
| Price | Not published as of October 31, 2026 |
Compliance
- HIPAA: Okta's BAA covers the products Okta designates as eligible to receive PHI in its documentation (the HIPAA Service). Okta does not name its AI features in that scope. source · checked October 31, 2026
- FedRAMP: Okta lists Identity Threat Protection and Okta Identity Governance as authorized in Okta for Government High (FedRAMP High) and Okta for US Military, with Okta Identity Governance for Okta for Government Moderate covered by a footnote; the Managed MCP Server is marked n/a in all three. AI-generated summaries in Security Access Reviews and Governance Analyzer are not available in the compliance cells. source, source 2, source 3, source 4, source 5, source 6 · checked October 31, 2026
Not published by Okta as of October 31, 2026
- An Okta EU AI Act statement (Okta is not on the European Commission's GPAI Code of Practice or AI Pact signatory lists checked on 2026-10-31)
- Retention period for AI summaries, Log Investigator prompts and outputs
- Region where LLM inference runs for Security Access Review summaries
- Whether Okta has an assistant that connects to outside MCP servers
- Default state, admin control and current release stage of Log Investigator
- A list price for Okta Identity Governance AI features (Okta lists Essentials at 17 USD per user per month with Access Governance; the AI features' plan is not stated)
- Whether Okta's AI features fall within the HIPAA Service designated in Okta's documentation
Changes
No changes recorded since the first check on October 31, 2026.
How this page is made, and how to send a correction: method.