Skip to main content
0-Doubt
VendorsQuestionnairesInvestorsNews
0-Doubt — neutral IT/Security research
BrowseProductsMarket reportsResellersCertified analystsInvestorsRFI/RFP questionnairesHow trust worksNothing here is ranked by paymentHelp & FAQAPIPrivacyTermsCookies
  1. Home/
  2. Vendors/
  3. Okta/
  4. Lifecycle Management
  1. Home/
  2. Vendors/
  3. Identity & Access Management/
  4. Lifecycle Management

Lifecycle Management

IGAAI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 44 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~115 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Automated user provisioning and deprovisioning.

by Okta · okta.com · source ↗

Known CVEs (44)3 newAbout this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.

RSS ⇢
  • CVE-2026-78633 ↗MEDIUM 6.5new2026

    The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, resulting in worker-th…

  • CVE-2026-78632 ↗MEDIUM 5.3new2026

    The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryp…

  • CVE-2026-78628 ↗MEDIUM 6.0new2026

    The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checke…

  • …and 41 more · see all on the vendor page →

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Identity & Access Management products

see all →
  • Keeper Security Connection Manager · Keeper Security
  • Keeper Security KeeperPAM · Keeper Security
  • KeeperPAM · Keeper Security
  • Keycloak · keycloak
  • LinuxGuard Platform · LinuxGuard
  • LogicManager User Access Reviews & Third-Party Spend Management · LogicManager
  • LogonBox · LogonBox
  • Lumeus Autonomous JIT Access · Lumeus