Okta expands into privileged access management and identity governance reporting

Okta today announced it was expanding its platform into a couple of new areas. Up to this point, the company has been known for its identity access management product, giving companies the ability to sign onto multiple cloud products with a single sign on. Today, the company is moving into two new areas: privileged access and identity governance

Privileged access gives companies the ability to provide access on an as-needed basis to a limited number of people to key administrative services inside a company. This could be your database or your servers or any part of your technology stack that is highly sensitive and where you want to tightly control who can access these systems.

Okta CEO Todd McKinnon says that Okta has always been good at locking down the general user population access to cloud services like Salesforce, Office 365 and Gmail. What these cloud services have in common is you access them via a web interface.

Administrators access the speciality accounts using different protocols. “It’s something like secure shell, or you’re using a terminal on your computer to connect to a server in the cloud, or it’s a database connection where you’re actually logging in with a SQL connection, or you’re connecting to a container which is the Kubernetes protocol to actually manage the container,” McKinnon explained.

Privileged access offers a couple of key features including the ability to limit access to a given time window and to record a video of the session so there is an audit trail of exactly what happened while someone was accessing the system. McKinnon says that these features provide additional layers of protection for these sensitive accounts.

He says that it will be fairly trivial to carve out these accounts because Okta already has divided users into groups and can give these special privileges to only those people in the administrative access group. The challenge was figuring out how to get access to these other kinds of protocols.

The governance piece provides a way for security operations teams to run detailed reports and look for issues related to identity. “Governance provides exception reporting so you can give that to your auditors, and more importantly you can give that to your security team to make sure that you figure out what’s going on and why there is this deviation from your stated policy,” he said.

All of this when combined with the $6.5 billion acquisition of Auth0 last month is part of a larger plan by the company to be what McKinnon calls the identity cloud. He sees a market with several strategic clouds and he believes identity is going to be one of them.

“Because identity is so strategic for everything, it’s unlocking your customer, access, it’s unlocking your employee access, it’s keeping everything secure. And so this expansion, whether it’s customer identity with zero trust or whether it’s doing more on the workforce identity with not just access, but privileged access and identity governance. It’s about identity evolving in this primary cloud,” he said.

While both of these new products were announced today at the company’s virtual Oktane customer conference, they won’t be generally available until the first quarter of next year.


By Ron Miller

BeyondID grabs $9M Series A to help clients implement cloud identity

BeyondID, a cloud identity consulting firm, announced a $9 million Series A today led by Tercera. It marked the first investment from Tercera, a firm that launched earlier this month with the goal of investing in service startups like Beyond.

The company focuses on helping clients manage security and identity in the cloud, taking aim specifically at Okta customers. In fact, the firm is a platinum partner for Okta. As they describe their goals, they help clients in a variety of areas including identity and access management, secure app modernization, Zero Trust security, cloud migration and integration services.

CEO and co-founder Arun Shrestha has a deep background in technology including working with Okta from its early days. Shrestha came on board in 2012 as the head of customer success. When he began, the startup was in early days with just 50 customers. When he left five years later just before the IPO, it had over 3500.

Along the way, he gained a unique level of expertise in the Okta tool set, and he decided to put that to work to help Okta customers implement and maximize Okta usage, especially in companies with complex implementations. He launched BeyondID in 2018 with the intention of focusing on systems integrations and managing a company’s identity in the cloud.

“We believe we are becoming a managed identity service provider, so managing anything identity, anything related to cybersecurity. We’re helping these companies by being a one-stop shop for companies acquiring, deploying and managing identity services,” Shrestha explained.

It seems to be working. The last couple of years the company revenues grew at 300% and as it matures, and the growth rates settle a bit, it’s still expected to grow between 70 and 100% this year. The firm has 250 customers including FedEx, Major League Baseball, Bain Capital and Biogen.

It currently has 75 employees serving those customers with plans to grow that number in the next year with the help from today’s investment. As Shrestha adds new employees, he sees building a diverse workforce as a crucial goal for his company.

“Diversity is absolutely critical to our long term sustainable success, and it’s also the right thing to do,” he said. He says that building an organization that promotes women and people of color is a key goal of his as the leader of the company and something he is committed to.

Chris Barbin, who is managing partner and founder at lead investor Tercera, says that he chose BeyondID as the firm’s first investment because he believes identity is central to the notion of digital transformation. As more companies move to the cloud, they need help understanding how security and identity work differently in a cloud context, and he sees BeyondID playing a critical role in helping clients get there.

“BeyondID is in a rapidly growing space and has an impressive customer list that represents nearly every industry. Arun and the leadership team have a strong vision for the firm, deep ties into Okta, and they’re incredibly passionate about what they do,” he said.


By Ron Miller

Okta adds new no-code workflows that use identity to trigger sales and marketing tasks

It seems that no-code is the tech watchword of the year. It refers to the ability to create something that normally would require a developer to code, and replace it with dragging and dropping components instead, putting the task in reach of much less technical business users. Today Okta announced new no-code workflows that provide a way to use identity as a trigger to launch a customer-centric workflow.

Okta co-founder and CEO Todd McKinnon says that the company has created a series of connectors to make it easier to connect identity to a workflow that includes sales and marketing tooling. This comes on the heels of the identity lifecycle workflows, the company introduced at the Oktane customer conference in April.

“For this release we are introducing customer identity workflows which are focused on the connectors for all the customer-specific systems, things like Salesforce and Marketo and all the customer-centric [applications] that you’d want to do with your customer identities. And you can imagine over time that we’re going to expose this to more and more areas that will cover every kind of scenario a company would want to use,” McKinnon told TechCrunch.

McKinnon says that last year the company introduced Platform Services, which pulled apart the various pieces of the platform and exposed them as individual services, which bigger company customers could tap into as needed. He says that this is an extension of that idea, but instead of having to get engineering talent to write complex code to tie the Okta service into say Salesforce, you can simply drag the Salesforce connector to your workflow.

As McKinnon describes this using early adopter MLB as an example, say someone downloads the MLB app, creates a log-in and signs in. At that point, if MLB marketing personnel wanted to connect to any applications outside of Okta, it would normally require leveraging some programming help to make it happen.

But with the new workflow tools, a marketing person can set up a workflow that checks the log-in for fraud, then sends the person’s information automatically into Salesforce to create a customer record, and also triggers a welcome email in Marketo — and all of this could be done automatically triggered by the customer sign up.

Okta workflows showing what happens when a person downloads and app and creates an identiy.

Image Credits: Okta

This functionality was made possible by the $52.5 million acquisition of Azuqua last year. As COO and co-founder Frederic Kerrest wrote in a blog post at the time of the acquisition (and we quoted in the article):

“With Okta and Azuqua, IT teams will be able to use pre-built connectors and logic to create streamlined identity processes and increase operational speed. And, product teams will be able to embed this technology in their own applications alongside Okta’s core authentication and user management technology to build…integrated customer experiences.”

And that’s precisely the kind of approach the company is delivering this week. For now, it’s available as an early adopter program, but as Okta works out the kinks, you can expect them to build on this and add other enterprise workflow connectors to the mix as it expands this vision, giving the company a way to move beyond pure identity management and connect to other parts of the organization.


By Ron Miller

As the pandemic creates supply chain chaos, Craft raises $10M to apply some intelligence

During the COVID-19 pandemic, supply chains have suddenly become hot. Who knew that would ever happen? The race to secure PPE, ventilators and minor things like food was and still is an enormous issue. But perhaps, predictably, the world of “supply chain software” could use some updating. Most of the platforms are deployed “empty” and require the client to populate them with their own data, or “bring their own data.” The UIs can be outdated and still have to be juggled with manual and offline workflows. So startups working in this space are now attracting some timely attention.

Thus, Craft, the enterprise intelligence company, today announces it has closed a $10 million Series A financing round to build what it characterizes as a “supply chain intelligence platform.” With the new funding, Craft will expand its offices in San Francisco, London and Minsk, and grow remote teams across engineering, sales, marketing and operations in North America and Europe.

It competes with some large incumbents, such as Dun & Bradstreet, Bureau van Dijk and Thomson Reuters . These are traditional data providers focused primarily on providing financial data about public companies, rather than real-time data from data sources such as operating metrics, human capital and risk metrics.

The idea is to allow companies to monitor and optimize their supply chain and enterprise systems. The financing was led by High Alpha Capital, alongside Greycroft. Craft also has some high-flying angel investors, including Sam Palmisano, chairman of the Center for Global Enterprise and former CEO and chairman of IBM; Jim Moffatt, former CEO of Deloitte Consulting; Frederic Kerrest, executive vice chairman, COO and co-founder of Okta; and Uncork Capital, which previously led Craft’s seed financing. High Alpha partner Kristian Andersen is joining Craft’s board of directors.

The problem Craft is attacking is a lack of visibility into complex global supply chains. For obvious reasons, COVID-19 disrupted global supply chains, which tended to reveal a lot of risks, structural weaknesses across industries and a lack of intelligence about how it’s all holding together. Craft’s solution is a proprietary data platform, API and portal that integrates into existing enterprise workflows.

While many business intelligence products require clients to bring their own data, Craft’s data platform comes pre-deployed with data from thousands of financial and alternative sources, such as 300+ data points that are refreshed using both Machine Learning and human validation. Its open-to-the-web company profiles appear in 50 million search results, for instance.

Ilya Levtov, co-founder and CEO of Craft, said in a statement: “Today, we are focused on providing powerful tracking and visibility to enterprise supply chains, while our ultimate vision is to build the intelligence layer of the enterprise technology stack.”

Kristian Andersen, partner with High Alpha commented: “We have a deep conviction that supply chain management remains an underinvested and under-innovated category in enterprise software.”

In the first half of 2020, Craft claims its revenues have grown nearly threefold, with Fortune 100 companies, government and military agencies, and SMEs among its clients.


By Mike Butcher

SaaS earnings rise as pandemic pushes companies more rapidly to the cloud

As the pandemic surged and companies moved from offices to working at home, they needed tools to ensure the continuity of their business operations. SaaS companies have always been focused on allowing work from anywhere there’s access to a computer and internet connection, and while the economy is reeling from COVID-19 fallout, modern software companies are thriving.

That’s because the pandemic has forced companies that might have been thinking about moving to the cloud to find tools what will get them there much faster. SaaS companies like Zoom, Box, Slack, Okta and Salesforce were there to help; cloud security companies like CrowdStrike also benefited.

While it’s too soon to say how the pandemic will affect work long term when it’s safe for all employees to return to the office, it seems that companies have learned that you can work from anywhere and still get work done, something that could change how we think about working in the future.

One thing is clear: SaaS companies that have reported recent earnings have done well, with Zoom being the most successful example. Revenue was up an eye-popping 169% year-over-year as the world shifted in a big way to online meetings, swelling its balance sheet.

There is a clear connection between the domestic economy’s rapid transition to the cloud and the earnings reports we are seeing — from infrastructure to software and services. The pandemic is forcing a big change to happen faster than we ever imagined.

Big numbers

Zoom and CrowdStrike are two companies expected to grow rapidly thanks to the recent acceleration of the digital transformation of work. Their earnings reports this week made those expectations concrete, with both firms beating expectations while posting impressive revenue growth and profitability results.


By Ron Miller

Okta COVID-19 app usage report finds it’s not just collaboration seeing a huge uptick

Okta released a special COVID-19 edition of its app usage report today, and you don’t need a Ph. D. in statistics to guess what they found. Indeed, Zoom surged 110% on the Okta network, leading the way in usage growth just as you would expect, but another whole class of tools besides collaboration also saw huge increases in usage.

As Okta wrote in the report, “We see growth in two major areas: collaboration tools, especially video conferencing apps, and network security tools such as VPNs that extend secure access to remote workers.”

These plumbing tools might not be as sexy as the collaboration tools or boast triple digit growth like Zoom did, but they are seeing a substantial increase in usage as company IT departments try to bring some order to a widely distributed workforce.

As Okta pointed out in the report, bad actors have been looking to take advantage of the situation, as they tend to do, and these folks do love to sew some chaos.

Image Credit: Okta

The biggest winners here beyond collaboration tools were VPN businesses with Palo Alto Networks GlobalProtect and Cisco AnyConnect coming in at 94% and 86% usage increases respectively. But they weren’t the only tools growing, as Okta reported the Citrix ADC load balancing tool and ProofPoint’s security training apps also showed strong gains.

It’s probably not surprising that these kinds of tools are seeing an increase in usage with so many employees working from home, but it is interesting to see which vendors are benefiting from the move.

It’s also worth noting that Okta can point to a clear demarcation date when usage began to tick up. It’s easy to forget now, but March 6th was the last day of “normal” app usage before we started to see usage of these tools start to surge.

Image Credit: Okta

While reports of this kind are somewhat limited because of the focus on a particular set of customers and the tools they use, it does give you a sense of general trends in technology involving 8,000 Okta customers and 6,500 app integrations.


By Ron Miller

Okta launches Lifecycle Management Workflows to make building identity-centric processes easy

Okta, the popular identity and access management service, today used its annual (and now virtual) user conference to launch Lifecycle Management Workflows, a new tool that helps IT teams build and manage IFTTT-like automated processes with the help of an easy to use graphical interface.

The new service is an extension of Okta’s existing automation tools. But the key here is that IT teams and developers can now easily build complex identity-centric workflows across a wide range of applications. With this, these teams can easily automate an onboarding process where setting up a new Okta account also immediately kicks off processes on third-party services like Box, Salesforce, ServiceNow and Slack to set up accounts there. The same goes for offboarding workflows and username creation. A lot of companies still do this manually, which is not just a hassle but also error-prone.

“Adopting more technology is incredibly beneficial for enterprises today, but complexity is a significant side effect of a changing technology ecosystem and workforce. There is no better example of the potential challenges it can create than with lifecycle management,” said Diya Jolly, Chief Product Officer at Okta. “Okta’s vision of enabling any organization to use any technology goes deeper than just access; it’s about improving how organizations use technology. Okta Lifecycle Management Workflows improves the efficiency and security of enterprises through its simple user experience and broad applicability, keeping organizations secure, and efficient without requiring the complexity of writing code.”

Okta, of course, had lifecycle management features before, but now it is also putting its acquisition of Azuqua to work and using that company’s graphical interface and technology for making it easier to create these automation processes. And while the focus right now is on processes like provisioning and de-provisioning accounts, the long-term plan is to expand Workflows with support for more identity processes.

As Okta also stresses, administrators can also manage very granular access across the supported third-party tools like assigning territories in Salesforce or access to specific group channels in Slack, for example. For temporary employees, admins can also set up automatic de-provisioning workflows that revoke access to some tools but maybe leave access to payroll services open for a while longer. There are also built-in tools for automatically managing conflicts when two people have the same name.

“Millions of people rely on Slack every day to make their working lives simpler, more pleasant, and more productive,” said Tamar Yehoshua, Chief Product Officer at Slack, one of the early adopters of this service. “Okta Lifecycle Management Workflows has significantly increased efficiency for us by automating the provisioning and de-provisioning of users from applications in our environment, without us ever having to write a line of code.”

This new feature is part of Okta’s new Platform Services, which the company also debuted today and which currently consists of core technologies like the Okta Identity Engine, Directories Integrations, Insights, Workflow and Devices. The core idea behind Platform Services is to give Okta users the flexibility to manage their unique identity use cases but also to give Okta itself a platform to innovate on. One other new product that sits on top of the platform is Okta Fastpass, for example, which allows for passwordless authentication on any device.


By Frederic Lardinois

Box is now letting all staff work from home to reduce coronavirus risk

Box has joined a number of tech companies supporting employees to work remotely from home in response  the outbreak of the novel coronavirus, known as COVID-19.

It’s applying the policy to all staff, regardless of location.

Late yesterday Box co-founder Aaron Levie tweeted a statement detailing the cloud computing company’s response to COVID-19 — to, as he put it, “ensure the availability of our service and safety of our employees”.

In recent days Twitter has similarly encouraged all staff members to work from home. While companies including Amazon, Google, LinkedIn and Microsoft have also advised some staff to work remotely to reduce the risk of exposure to the virus.

In its response statement Box writes that it’s enacted its business continuity plans “to ensure core business functions and technology are operational in the event of any potential disruption”.

“We have long recognized the potential risks associated with service interruptions due to adverse events, such as an earthquake, power outage or a public health crisis like COVID-19, affecting our strategic, operational, stakeholder and customer obligations. This is why we have had a Business Continuity program in place to provide the policies and plans necessary for protecting Box’s operations and critical business functions,” the company writes.

In a section on “workforce resilience and business continuity” it notes that work from home practices are a normal part of its business operations but says it’s now extending the option to all its staff, regardless of the office or location they normally work out of — saying it’s doing so “out of an abundance of caution during COVID-19”.

Other measures the company says it’s taken to further reduce risk include suspending all international travel and limiting non-essential domestic travel; reducing large customer events and gatherings; and emphasizing health and hygiene across all office locations — “by maintaining sanitation supplies and encouraging an ‘if you are sick, stay home’ mindset”.

It also says it’s conducting all new hire orientation and candidate interviews virtually.

Box names a number of tools it says it routinely uses to support mobility and remote working, including its own service for secure content collaboration; Zoom’s video communication tool; the Slack messaging app; Okta for secure ID; plus additional unnamed “critical cloud tools” for ensuring “uninterrupted remote work for all employees”.

Clearly spying the opportunity to onboard new users, as more companies switch on remote working as a result of COVID-19 concerns, Box’s post also links to free training resources for its own cloud computing tools.


By Natasha Lomas

Good news for enterprise startups: SaaS helped kill the single-vendor stack

In the old days of enterprise software, when companies like IBM, Oracle and Microsoft ruled the roost, there was a tendency to shop from a single vendor. You bought the whole stack, which made life easier for IT — even if it didn’t always work out so well for end users, who were stuck using software that was designed with administrators in mind.

Once Software-as-a-Service (SaaS) came along, IT no longer had complete control over software choices. The companies that dominated the market began to stumble — although Microsoft later found its way — and a new generation of SaaS vendors developed.

As that happened, users saw a way to pick and choose software that worked best for them, as they were no longer bound to clunky enterprise software; they wanted tools at work that worked as well as the ones they used in the consumer space at home.

Through freemium models and low-cost subscriptions, individual employees and teams started selecting their own tools, and a new way of buying software began to take hold. Instead of buying software from a single shop, consumers could buy the best tool for the job. This in turn, led to wider adoption, as these small groups of users led the way to more lucrative enterprise deals.

The philosophical change has worked well for enterprise startups. The new world means a well-executed idea can beat an incumbent with a similar product. Just ask companies like Slack, Zoom and Box, which have shown what’s possible when you put users first.


By Ron Miller

Early stage privacy startup DataGrail gets boost from Okta partnership

When Okta launched its $50 million Okta Ventures investment fund in April, one of its investments was in an early stage privacy startup called DataGrail. Today, the companies announced a partnership that they hope will help boost DataGrail, while providing Okta customers with a privacy tool option.

DataGrail CEO and co-founder Daniel Barber says that with the increase in privacy legislation from GDPR to the upcoming California Consumer Protection Act (and many other proposed bills in various states of progress), companies need tools to help them comply and protect user privacy. “We are a privacy platform focused on delivering continuous compliance for businesses,” Barber says.

They do this in a way that fits nicely with Okta’s approach to identity. Whereas Okta provides a place to access all of your cloud applications from a single place with one logon, DataGrail connects to your applications with connectors to provide a way to monitor privacy across the organization from a single view.

It currently has 180 connectors to common enterprise applications like Salesforce, HubSpot, Marketo and Oracle. It then collects this data and presents it to the company in a central interface to help ensure privacy. “Our key differentiator is that we’re able to deliver a live data map of the customer data that exists within an organization,” Barber explained.

The company just launched last year, but Barber sees similarities in their approaches. “We we see clear alignment on our go-to-market approach. The product that we built aligns very similarly to the way Okta is deployed, and we’re a true  partner with the industry leader in identity management,” he said.

Monty Gray, SVP and head of corporate development at Okta, says that the company is always looking for innovative companies that fit well with Okta. The company liked DataGrail enough to contribute to the startup’s $5.2 million Series A investment in July.

Gray says that while DataGrail isn’t the only privacy company it’s partnering with, he likes how DataGrail is helping with privacy compliance in large organizations. “We saw how DataGrail was thinking about [privacy] in a modern fashion. They enable these technology companies to become not only compliant, but do it in a way where they were not directly in the flow, that they would get out of the way,” Gray explained.

Barber says having the help of Okta could help drive sales, and for a company that’s just getting off the ground, having a public company in your corner as an investor, as well as a partner, could help push the company forward. That’s all that any early startup can hope for.


By Ron Miller

Okta wants to make every user a security ally

End users tend to get a bad rap in the security business because they are often the weakest security link. They fall for phishing schemes, use weak passwords and often unknowingly are the conduit for malicious actors getting into your company’s systems. Okta wants to change that by giving end users information about suspicious activity involving their login, while letting them share information with the company’s security apparatus when it makes sense.

Okta actually developed a couple of new products under the umbrella SecurityInsights. The end user product is called UserInsights. The other new product, called HealthInsights, is designed for administrators and makes suggestions on how to improve the overall identity posture of a company.

UserInsights lets users know when there is suspicious activity associated with their accounts such as a login from an unrecognized device. If it appears to involve a stolen password, he or she would click the Report button to report the incident to the company’s security apparatus where it would trigger an automated workflow to start an investigation. The person should also obviously change that compromised password.

HealthInsights operates in a similar fashion except for administrators at the system level. It checks the configuration parameters and makes sure the administrator has set up Okta according to industry best practices. When there is a gap between the company’s settings and a best practice, the system alerts the administrator and allows them to fix the problem. This could involve implementing a stricter password policy, creating a block list for known rogue IP addresses or forcing users to use a second factor for certain sensitive operations.

HealthInsight Completed tasks

Health Insights Report. Image: Okta

Okta is first and foremost an identity company. Organizations, large and small, can tap into Okta to have a single-sign-on interface where you can access all of your cloud applications in one place. “If you’re a CIO and you have a bunch of SaaS applications, you have a [bunch of] identity systems to deal with. With Okta, you narrow it down to one system,” CEO Todd McKinnon told TechCrunch.

That means, if your system does get spoofed, you can detect anomalous behavior much more easily because you’re dealing with one logon instead of many. The company developed these new products to take advantage of that, and provide these groups of employees with the information they need to help protect the company’s systems.

The SecurityInsights tools are available starting today.


By Ron Miller

Learn how enterprise startups win big deals at TechCrunch’s Enterprise show on Sept. 5

Big companies today may want to look and feel like startups, but when it comes to the way they approach buying new enterprise solutions, especially from new entrants, they still often act like traditional enterprise behemoths. But from the standpoint of a true startup, closing deals with just a few big customers is critical to success. At our much-anticipated inaugural TechCrunch Sessions: Enterprise event in San Francisco on September 5, Okta’s Monty Gray, SAP’s DJ Paoni, VMware’s Sanjay Poonen and Sapphire Venture’s Shruti Tournatory will discuss ways for startups to adapt their strategies to gain more enterprise customers (p.s. early-bird tickets end in 48 hours — book yours here).

This session is sponsored by SAP, the lead sponsor for the event.

Monty Gray is Okta’s senior vice president and head of Corporate Development. In this role, he is responsible for driving the company’s growth initiatives, including mergers and acquisitions. That role gives him a unique vantage point of the enterprise startup ecosystem, all from the perspective of an organization that went through the process of learning how to sell to enterprises itself. Prior to joining Okta, Gray served as the senior vice president of Corporate Development at SAP.

Sanjay Poonen joined VMware in August 2013, and is responsible for worldwide sales, services, alliances, marketing and communications. Prior to SAP, Poonen held executive roles at Symantec, VERITAS and Informatica, and he began his career as a software engineer at Microsoft, followed by Apple.

SAP’s DJ Paoni has been working in the enterprise technology industry for over two decades. As president of SAP North America, Paoni is responsible for the strategy, day-to-day operations and overall customer success in the United States and Canada.

These three industry executives will be joined onstage by Sapphire Venture’s Shruti Tournatory, who will provide the venture capitalist’s perspective. She joined Sapphire Ventures in 2014 and leads the firm’s CXO platform, a network of Fortune CIOs, CTOs and digital executives. She got her start in the industry as an analyst for IDC, before joining SAP and leading product for its business travel solution.

Grab your early-bird tickets today before we sell out. Early-bird sales end after this Friday, so book yours now and save $100 on tickets before prices increase. If you’re an early-stage enterprise startup you can grab a startup demo table for just $2K here. Each table comes with four tickets and a great location for you to showcase your company to investors and new customers.


By Frederic Lardinois

Okta unveils $50M in-house venture capital fund

Identity management software provider Okta, which went public two years ago in what was one of the first pure-cloud subscription-based company IPOs, wants to fund the next generation of identity, security and privacy startups.

At its big customer conference Oktane, where the company has also announced a new level of identity protection at the server level, chief operating officer Frederic Kerrest (pictured above, right, with chief executive officer Todd McKinnon) will unveil a $50 million investment fund meant to back early-stage startups leveraging artificial intelligence, machine learning and blockchain technology.

“We view this as a natural extension of what we are doing today,” Okta senior vice president Monty Gray told TechCrunch. Gray was hired last year to oversee corporate development, i.e. beef up Okta’s M&A strategy.

Gray and Kerrest tell TechCrunch that Okta Ventures will invest capital in existing Okta partners, as well as other companies in the burgeoning identity management ecosystem. The team managing the fund will look to Okta’s former backers, Sequoia, Andreessen Horowitz and Greylock, for support in the deal sourcing process.

Okta Ventures will write checks sized between $250,000 and $2 million to eight to 10 early-stage businesses per year.

“It’s just a way of making sure we are aligning all our work and support with the right companies who have the right vision and values because there’s a lot of noise around identity, ML and AI,” Kerrest said. “It’s about formalizing the support strategy we’ve had for years and making sure people are clear of the fact we are helping these organizations build because it’s helpful to our customers.”

Okta Ventures’ first bet is Trusted Key, a blockchain-based digital identity platform that previously raised $3 million from Founders Co-Op. Okta’s investment in the startup, founded by former Microsoft, Oracle and Symantec executives, represents its expanding interest in the blockchain.

“Blockchain as a backdrop for identity is cutting edge if not bleeding edge,” Gray said.

Okta, founded in 2009, had raised precisely $231 million from Sequoia, Andreessen Horowitz, Greylock, Khosla Ventures, Floodgate and others prior to its exit. The company’s stock has fared well since its IPO, debuting at $17 per share in 2017 and climbing to more than $85 apiece with a market cap of $9.6 billion as of Tuesday closing.


By Kate Clark

Okta brings identity management to server level

Since it was founded in 2009, Okta has been focused on protecting identity — first for individuals in the cloud, and later at the device level. Today at its Oktane customer conference, the company announced a new level of identity protection at the server level.

The new tool, called Advanced Server Access, provides identity management for Windows and Linux Servers, whether they are in a datacenter or the cloud. The product supports major cloud infrastructure vendors like Amazon Web Services, Microsoft Azure and Google Cloud Platform, and gives IT the ability to protect access to servers, reduce the likelihood of identity theft and bring a level of automation the server credential process.

As company founder and CEO Todd McKinnon points out, as every organization becomes a technology company building out their own applications, protecting servers becomes increasingly critical. “Identity is getting more and more important because there is more technology and zero trust in the network. You need to manage identity not just for users or devices. We are now applying our identity [experience] to the most critical resources for these emerging tech companies, their servers,” he said.

McKinnon explained that developers typically communicate with Linux servers via the SSH protocol. It required logging in of course, even before today’s announcement, but what Okta is doing is simplifying that in the same it simplified logging into cloud applications for individuals.

People’s roles change over time, but instead of changing those roles at the identity layer to allow access to the server, in a typical shop the development or operations team creates an admin account with a superset of permissions and simply shares that. “That means the admin account has all the permissions, and also means they are sharing these credentials,” he said. If those credentials get stolen, the thief potentially has access to the entire universe of servers inside a company.

Okta’s idea is to bring a level of automation to the server identity management process, so that users maintain their own individual credentials and permissions in a more automated fashion, even as roles change, across the entire server infrastructure a company manages. “It’s continuous, automatic, real-time checking of the state of the machine, and the state of the user and the permissions that makes it far more secure,” he said.

The tool is continuously monitoring this information to make sure nothing has changed such as another machine has taken over, avoiding man-in-the-middle attacks. It’s also making sure that there is no virus or malware, and that the person who is using the machine is who they say they are and has access at the level they are using it.

Okta went public almost exactly two years ago, and it needs to keep finding ways to expand its core identity services. Bringing it to the server level as this new product does moves the idea of identity management deeper into a technology stack, and McKinnon hinted the company isn’t done yet.

“You might not think of server access is an identity opportunity, but the way we do it will make it clear that it really is an opportunity, and the same can be said for the next several innovations we will have after this,” he said.


By Ron Miller

Okta to acquire workflow automation startup Azuqua for $52.5M

During its earnings report yesterday afternoon, Okta announced it intends to acquire Azuqua, a Bellevue, Washington workflow automation startup for $52.5 million.

In a blog post announcing the news, Okta co-founder and COO Frederic Kerrest saw the combining of the two companies as a way to move smoothly between applications in a complex workflow without having to constantly present your credentials.

“With Okta and Azuqua, IT teams will be able to use pre-built connectors and logic to create streamlined identity processes and increase operational speed. And, product teams will be able to embed this technology in their own applications alongside Okta’s core authentication and user management technology to build…integrated customer experiences,” Kerrest wrote.

In a modern enterprise, people and work are constantly shifting and moving between applications and services and combining automation software with identity and access management could offer a seamless way to move between them.

This represents Okta’s largest acquisition to-date and follows Stormpath almost exactly two years ago and ScaleFT last July. Taken together, you can see a company that is trying to become a more comprehensive identity platform.

Azuqua, which had raised $16 million since it launched in 2013, appears to have given investors  a pretty decent return. When the deal closes, Okta intends to bring its team on board and leave them in place in their Bellevue offices, creating a Northwest presence for the San Francisco company. Azuqua customers include Airbnb, McDonald’s, VMware and Hubspot,

Okta was founded in 2009 and raised over $229 million before going public April, 2017.


By Ron Miller