Everything you need to know about Okta Identity engine (OIE)

  • Blog

Arun Shrestha

September 21, 2023

Okta is an identity-powered user management platform that specializes in customer and workforce identity use cases. The leading identity platform provider marries user experience and cybersecurity to transform digital identities across industries.  

Okta Identity Engine v. Okta Classic Engine  

Okta Identity Engine (OIE) is the next generation of Okta Classic Engine: Okta’s original identity platform designed to deliver secure, scalable, and easy-to-use identity management solutions for any app. What’s new? More opportunities to build custom implementations, and more flexibility to support every use case. These changes manifest themselves in improved user experiences and security outcomes. Sign us up.  

Upgraded Features 

App Level Policies. App-specific policies make it possible to define security requirements at the application level and evaluate access every time an app is accessed in Okta. It is possible to require a stronger factor for business-critical applications and define separate re-authentication frequencies per factor. These policies are now sharable, making policy management easier when the number of apps grows.   

App Context. The app context available with OIE makes app-level branding possible with the policies configurable at the Okta admin console. The app-specific user experience remains consistent across the authentication and notification workflows.   

Passwordless Authentication. Forget your password. Seriously. Passwordless authentication is exactly what it sounds like: verification of user identity without a password. This feature enables users to authenticate using secure password-alternatives, and passwords are not required for user creation. OIE offers Email Magic Link for seamless access to consumer applications. Stronger authenticators like Okta Verify Push are available when more security is needed; these methods are also sans-password.  

FastPass. Device Context 2.0 unlocks Okta FastPass for passwordless authentication from the registered devices without any external directory or services.  

Device Context 2.0 and FastPass. The device registration in OIE has been simplified, only requiring Okta Verify app download.  The registered device is visible in Okta Universal Directory and is easily manageable. Device Context 2.0 allows Okta to collect device signals from Endpoint security services (CrowdStrike and Microsoft Windows Security Center).   

Progressive Profiling. OIE registration allows minimal input, and instead, collects user information from the user with future logins and sessions. Progressive profiling in OIE is a practical feature for improving user retention and conversion rates from an anonymous user to an identity.  

Flexible Account Recovery. Flexible account recovery allows end-users to leverage Okta Verify Push for a self-service password reset and account unlock. This OIE feature also supports the configuration of an additional MFA factor verification during the recovery process.   

Captcha Integration. OIE supports reCAPTCHA and hCAPTCHA integration for authentication, self-service recovery, and signup flows. Captcha Integration in OIE is simple and adds a security check to prevent spam, fake registrations and denial of service (DoS) attacks.  

Getting Started 

If you already own Okta Classic Engine, there is no additional license cost to have access to the new OIE feature set. That being said, you’ll likely need to invest in upgrade assistance. Here’s how you can get started: 

  • Talk to your Okta representative to identify the complexity of your instance. To save time, money, and resources, we recommend enlisting the help of an expert. 
  • Deploy new OIE feature sets with BeyondID. We’re an Okta Apex Partner, Okta’s most trusted OIE implementation partner, and have successfully migrated dozens of customers. 
  • For simple migrations, you can use our self-service OIE migration tool; It’s quick, easy, and you’ll receive full support from BeyondID’s Service Management team.  

BeyondID is an Okta Apex Partner 

Belonging to the highest tier of Okta Elevate is a testament not only to the success of our long-standing partnership with Okta, but to the success of our Raving Fan philosophy. As a Global Diamond Partner and Delivery Partner of the Year in the Americas, BeyondID was recognized as Okta’s most skilled partner. Now, our Apex partnership shines new light on the stellar customer service that has made BeyondID Okta’s most trusted partner.   

Contact your Okta or BeyondID representative today to learn more about your OIE upgrade.  

Case Studies

CLIENT

Leading University Modernizes Student Identity Management with BeyondID’s Workday SIS Connector

A leading higher education institution partnered with BeyondID to modernize identity management by integrating Workday SIS and Okta.

  • Higher Education
CLIENT

Securing a Credit Union’s Digital Transformation with Okta and Auth0

This case study explores how one leading credit union partnered with us to modernize its digital infrastructure with Okta and Auth0 to deliver seamless, secure experiences across every channel, without losing what made it great.

  • Financial Services
CLIENT

Modernizing Digital Banking Access with BeyondID’s Application Integration Gateway

This case study looks at a recurring banking client that partnered with us to connect legacy infrastructure to a modern Okta-based identity environment.

  • Financial Services
CLIENT

Solving Legacy Identity Integration for a Large Automotive Enterprise

This case study looks at a large automotive enterprise that partnered with BeyondID – A KeyData Cyber Company to modernize workforce identity and create a scalable path for secure access across distributed operations.

  • Automotive
CLIENT

Securing AI Innovation for an Industrial Packaging Manufacturer

This case study looks at how BeyondID – a KeyData Cyber company helped an industrial packaging manufacturer securely adopt AI by modernizing its workforce identity environment, establishing governance for AI agents, and implementing identity controls to support secure, scalable AI innovation.

  • Manufacturing
CLIENT

Strengthening Security and Governance for a Healthcare Technology Platform Through an Okta Tenant Health Check

This case study looks at how BeyondID – a KeyData Cyber company conducted an Okta Tenant Health Check for a healthcare technology organization to assess the health of its production Okta environment, identify security and governance gaps, and provide a structured remediation roadmap aligned to the customer’s broader identity initiatives.

  • Healthcare
CLIENT

Unifying the Shopper Identity Across a Multi-Brand Global Retail Portfolio

This case study looks at a large global retailer with a portfolio of iconic lifestyle brands that undertook a Customer Identity and Access Management (CIAM) transformation powered by Okta to create a unified customer experience layer across all brands.

  • Retail
CLIENT

Migrating Echo Global Logistics’ Portfolio from OneLogin to Okta to Improve Security

Echo Global Logistics needed a robust identity solution to upgrade its security posture and enhance its environment.

  • Transportation
CLIENT

Genesys: Accelerating Identity Modernization with Okta for Secure Customer Experiences 

To modernize identity across its vast and complex IT landscape, Genesys partnered with Okta and BeyondID for a strategic, phased transformation.

  • Technology
CLIENT

Airbnb: Securing a Global Workforce with Okta 

As a leader in the hospitality industry, Airbnb needed an identity platform that could secure its vast environment and scale with its continuous expansion.

  • Hospitality
SEE MORE

Need help
getting started?

Get a clear view of your identity security posture
Get in touch
SAP

AUTHORIZED PARTNER

Workforce Identity

Modern Identity experiences for your customers.

Secure by Design

Built with security, privacy and compliance in mind.

Global Scale

Trusted by thounsands of organizations worldwide.

SAP

WORKFORCE IDENTITY & ACCESS MANAGEMENT (WIAM)

Secure, scalable customer identity for modern applications

BeyondID connects SAP environments with the systems and applications organizations rely on every day. Our Connectors simplify integration between SAP and your broader identity ecosystem, enabling seamless access, automated identity processes, and stronger governance across the enterprise.

What this connector enables

Provisioning & De-Provisioning

Implementation Support

Compliance Assurance

Workday

AUTHORIZED PARTNER

Workforce Identity

Modern Identity experiences for your students, faculty, and staff

Secure by Design

Built with security, privacy and compliance in mind.

Global Scale

Trusted by thounsands of organizations worldwide.

Workday Student SIS

WORKFORCE IDENTITY & ACCESS MANAGEMENT (WIAM)

Secure, scalable workforce identity for Education

BeyondID’s Workday SIS–Okta Connector is a pre-built integration accelerator designed to automate the student identity lifecycle, from enrollment through graduation. Built on SCIM 2.0, it simplifies provisioning, reduces manual processes, and closes security gaps.

What this connector enables

Academic Data Enrichment

Automated Full & Incremental Sync

Academic Unit Filtering

Okta

AUTHORIZED PARTNER

Identity Security

Modern Identity experiences to secure every identity, everywhere.

Secure by Design

Built with security, privacy and compliance in mind.

Global Scale

Trusted by thounsands of organizations worldwide.

OKTA

IDENTITY & ACCESS MANAGEMENT (IAM)

Secure every identity across your organization

BeyondID brings award-winning Okta expertise to help organizations get more from their identity investment. As an Okta Apex Partner and multi-year Partner of the Year, we combine certified expertise, proven architecture, and proprietary solutions to solve complex identity challenges.

What We Deliver with Okta

Identity Security for All Identities

Managed Identity Services

Identity Modernization & Optimization

AUTHORIZED PARTNER

Workforce Identity

Modern Identity experiences for your organization

Secure by Design

Built with security, privacy and compliance in mind.

Global Scale

Trusted by thounsands of organizations worldwide.

Application Integration Gateway (AIG)

WORKFORCE IDENTITY & ACCESS MANAGEMENT (WIAM)

Secure, scalable workforce identity for modern applications

Modernize identity without disrupting the systems your business depends on. BeyondID’s Application Integration Gateway (AIG) connects legacy and modern environments to simplify migrations, unify identity data, and accelerate time to value.

What this connector enables

Seamless Migration

Virtual Directory

Unified Profile

Epic

AUTHORIZED PARTNER

Workforce Identity

Modern Identity experiences for Healthcare

Secure by Design

Built with security, privacy and compliance in mind.

Global Scale

Trusted by thounsands of organizations worldwide.

EPIC

WORKFORCE IDENTITY & ACCESS MANAGEMENT (WIAM)

Secure, scalable workforce identity for Healthcare

BeyondID’s Epic–Okta Provisioning Connector automates workforce identity management between Okta and Epic, streamlining account provisioning, updates, and deactivation while syncing identity changes across connected systems.

 

What this connector enables

Provisioning

User Sync

 Support

AWS

AUTHORIZED PARTNER

Workforce Identity

Modern Identity experiences for your organization

Secure by Design

Built with security, privacy and compliance in mind.

Global Scale

Trusted by thounsands of organizations worldwide.

AWS

WORKFORCE IDENTITY & ACCESS MANAGEMENT (WIAM)

Secure, scalable workforce identity for modern applications

BeyondID Professional Services Units provide flexible, on-demand access to certified identity experts. From strategy to optimization and ongoing support, prepaid consulting hours help organizations get more from their Okta and Auth0 investments.

What this connector enables

Secure authentication for web and mobile applications

Customizable login and identity flows

Centralized workforce identity management

AUTHORIZED PARTNER

Customer Identity

Modern Identity experiences for your customers.

Secure by Design

Built with security, privacy and compliance in mind.

Global Scale

Trusted by thounsands of organizations worldwide.

Auth0

CUSTOMER IDENTITY & ACCESS MANAGEMENT (CIAM)

Secure, scalable customer identity for modern applications

BeyondID helps organizations design, implement, and optimize Auth0 to deliver secure authentication, seamless user experiences, and enterprise-grade scalability. From greenfield deployments to complex migrations, we ensure your CIAM platform is built to grow with your business.

What this connector enables

Secure authentication for web and mobile applications

Customizable login and identity flows

Centralized customer identity management

Search the Site