Okta, Inc. (OKTA) Earnings Call Transcript & Summary
April 7, 2021
Earnings Call Speaker Segments
Todd McKinnon
executive[Presentation] Hey, everyone. Thanks for tuning into day 2 of Oktane. I hope you all enjoyed yesterday's inside look at the last year of life at Okta. It's definitely a new take on the keynote format and a chance to hear straight from the people building Okta every day. The story of innovation really begins with Okta's platform. Our platform is the foundation to build incredible new products and features while also making those identity capabilities more accessible to everyone in your organizations. Okta's platform approach is core to how we think about identity, but it's also a recognition of the role identity plays in your organizations. All of you want choice in the technology you adopt. It's what enables your organizations to be nimble. It's what keeps your employees happy and productive, and it's what drives your customer experiences forward. It's also what gives you the ability to adapt to whatever changes come your way. In a cloud-centric world, identity has become a true primary cloud, just as important as your other primary clouds like your infrastructure or your collaboration clouds. It's also the secure epicenter of your organization's tech connections. Without security and identity independence, there is no technology choice. And across your organization, that need for technology freedom could not be greater, because today, identity is top of mind from the boardroom to your spare bedroom, reaching people across every business team, whether it's security, IT admins, business units, DevOps or developers, everyone can use the Okta platform to drive business goals. Yesterday, we talked about the Okta Identity Engine, one of our key platform services. It's going to bring all kinds of customization to the access experiences you're building. And along with our other platform services, it makes identity customizable and extensible. For us, creating the best workforce or customer identity platform means offering you a range of options from out of the box configurable solutions to RPIs and SDKs, so that you can build for any use case you dream up. We think every step of the journey should be programmable with a ton of documentation to make auth easy for everyone. That customizability is an especially big deal for customer identity, making it possible for you to deliver on each of the diverse identity use cases your customers need. The potential for customer identity is massive for every organization today. Everyone is moving their business online. And with that push comes the need to not only deliver safe and secure experiences, but to create meaningful ones for your customers. It also means opening up more of our platform to devs for free and allowing you to do some new things with the Okta integration network, so that you can automate how identity impacts security and customer experiences. Our product leaders are really excited to talk you through some of the things we're announcing to bring more choice and access for the teams building cutting-edge digital products. But what you're probably really excited about is the announcement we made just over a month ago: Our plan to join forces with Auth0. The feedback has blown me away. Not only do we share the same vision, our values and how we operate are tightly aligned. We have the same world view when it comes to the role identity plays in empowering the Internet. Each company has its own strengths and expertise, and coming together, we'll give customers more choice to meet every identity need. We are going to maintain and invest in both platforms. And in the background, we'll be integrating our technologies over time to provide even more innovation. Ultimately, the identity challenges all of you face are unique. Each of you have different teams building the experiences that propel your organizations and people forward. We're committed to meeting you where you are and helping all of you find the solution that best addresses your identity use cases. We have a ton of exciting stuff to share with you today, but first, I wanted you to meet Auth0's CEO and co-founder, Eugenio Pace. He's joining Okta and will remain the CEO of Auth0 reporting to me. Welcome, Eugenio.
Eugenio Pace
executiveThank you, Todd. It's great to be here.
Todd McKinnon
executiveIt's great to have you.
Eugenio Pace
executiveYes. Thank you.
Todd McKinnon
executiveSo this is all about identity, 2 companies coming together to build a great solution for customers all around identity. Why is identity important now for companies? What have you seen in terms of how identity applies to different companies, different organizations?
Eugenio Pace
executiveWell, if anything, 2020 has shown us that anything is digital, everything. Education, our health care, our entertainment, everything, it's technology surrounding us. And there's one thing that they have in common is that they all need to know who we are. And so the opportunity is massive. I see that we have a lot of work to do still. And by working together now, we can bring that future that we imagined, fast forward through the present. Instead of waiting 5 years, we can do it in 2 years.
Todd McKinnon
executiveThat's a good point. One of the things for me about identity is how horizontal the opportunity is. As you look inside your customers, what do you see about how identity applies to different roles and responsibilities inside the company?
Eugenio Pace
executiveIt really doesn't matter how you slice and dice this thing. It applies to everything. It's every country, every region, every customer segment, whether in media and entertainment or manufacturing. And inside the company, whether you're a developer building applications, whether you're a designer, or you're a product manager, or you're on the Board, or you're an executive, identity is pervasive. It's universal and needs to be acknowledged in all, in everything.
Todd McKinnon
executiveYes, it's a great point about how identity applies to really every role inside of a company. So we've known each other for a while. About 7 years?
Eugenio Pace
executiveEight.
Todd McKinnon
executive8 years, yes, time flies. And I've admired Auth0 and watched you guys grow. Tell us about, from your perspective, what Auth0 stands for?
Eugenio Pace
executiveWell, the admiration is mutual. I've seen you grow as well and grow your company. And in many ways, you've been an example that we looked up to. And above everything, Auth0, it's about empowering developers. It's about empowering everybody, building applications in the world to make it a better world. And so if you're a builder, if you're creating apps, that's us.
Todd McKinnon
executiveWhat you guys have done, building a product and a community and a brand around developers, is truly impressive, so nice work on that. Looking forward, what excites you most about the innovation we can build together?
Eugenio Pace
executiveWell, what is exciting, first off -- first and above everything, is that we both have the same opinion of the future. We have the same convictions about what's possible. And we can bring that what's possible today. We can do it faster. We can do it more in a global scale, in a way that it would have taken us a longer time to realize. That's exciting.
Todd McKinnon
executiveFast forward the future.
Eugenio Pace
executiveYes.
Todd McKinnon
executiveSpeaking of the future, the future is all about developers. And you guys have done an amazing job building this evangelical base of developers. Tell us the secrets to that success. What have you done to make that happen?
Eugenio Pace
executiveYes, we founded the company with this belief that every company in the planet is a software company, even though they might not call themselves a software company. And if you're a software company, you need software developers. So therefore, every company in the planet needs software developers. And guess what? There's not enough of them. So anything that would make their life easier and simpler and would allow them to build faster, better, more secure applications would be valuable. That was the hypothesis. That's how we built Auth0. And so everything from the first contact, from searching on your favorite search engine for a problem, finding content that will explain how to solve that problem, all the way to tinkering and trying things out, which is how developers like to operate, all the way to actually committing to a contract with us, the entire journey is optimized. And we designed it with that in mind from first contact to long-term commitment. And that shows in our -- in the API design, in the documentation, in the content, in enabling everybody to become an expert without having to be an expert on this domain.
Todd McKinnon
executiveEugenio, what you and the team have accomplished is truly impressive, and I can't wait to work with you on building the future of identity. Thank you very much.
Eugenio Pace
executiveThank you. Looking forward to it.
Todd McKinnon
executiveAs Eugenio and I were saying, we're continuing to push new customer identity technologies and capabilities across both of our platforms. That's because we're never going to stop innovating and some of the things we're announcing on the developer experience side really highlight how we're making it happen. Now I'll turn it over to Ryan, Diya and the rest of the team to share a bit more.
Ryan Carlson
executiveThank you, Todd, and thank you all for being here. I'm really excited to hear from key product leaders in the company about all the innovation in our products, to see that innovation in action through the form of demos. And we're going to start by talking with 2 key leaders in our product organization, Okta's Chief Product Officer, Diya Jolly; and our Director of Developer Relations, Emeka Afigbo. Welcome to you both.
Diya Jolly
executiveThanks, Ryan.
Emeka Afigbo
executiveThank you.
Ryan Carlson
executiveSo Diya, let's start with you. Everybody talks about digital transformation. Obviously, developers are at the center of that, but their needs have changed over the years, specifically enterprise. Tell us how that has happened over the years.
Diya Jolly
executiveYes, of course. So today, software has become an integral part of any organization. Any organization, no matter what they're selling, needs to be able to connect with their consumers digitally to be able to remain relevant and thrive. So developers have obviously become a critical resource in companies, and they're scarce. Developers are the ones that are building new applications, new experiences as well as moving forward innovation in organizations. And while doing all of this, they need to ensure that the technology that they're building is also secure. This is a lot to ask of them: new business requirements, new attack vectors, new technological innovations that they need to keep on top of and implement. So as a result, developers are always looking for tools that make their lives easier, that help them get their projects up and running faster, that help them provide rich documentation and support when they inevitably run into trouble, and that are future-proof from a requirements perspective. And now this is what has really fueled the intense industry focus on developer frameworks, on CICD automation, on micro services that developers can use within their apps and more. So the essence really is that developers just need tools that can work across their tool chains, whether they're working in a hybrid cloud or multi-cloud environment.
Ryan Carlson
executiveCertainly sounds challenging. It's probably only accelerating. If that's the case, what's Okta's vision to make these developers successful?
Diya Jolly
executiveThat's a great question, Ryan. Our vision is not just to provide a world-class set of authentication and authorization services for developers, it's to actually help them also secure the applications they're building, secure their APIs and secure their infrastructure. The goal of the Okta identity platform is to provide a unified platform that reduces the burden on developers, to actually be able to build their apps, to be able to use the services and APIs that they need to get up and running, to be able to test their apps and deploy their apps into production. So now developers can get up and running faster than they could before and they can focus on moving forward their business requirements. This is why we're reimagining the Okta developer platform and the Okta developer experience to speed up time to production across the application development life cycle and also across the entire developer tool chain.
Ryan Carlson
executiveThat's certainly a compelling vision. Emeka, I want to come to you. You've been a developer for a long time. As a developer yourself, what's your view on how Okta is solving these problems?
Emeka Afigbo
executiveYes. Thank you, Ryan. So first of all, I'm excited to say that we announced our Enhanced Developer Edition. And this exposes greater surface area of the Okta identity platform through an expanded free 15,000 monthly active user tier. And what this means is that whether you're a developer building a simple application or a complex application, you can now begin to design, build and deploy all sorts of awesome digital experiences. Secondly, we're announcing a bunch of great integrations into app platforms like Heroku and API gateways like Kong. And what this means for you as a developer is they can directly integrate Okta into your application stack. We're also releasing some new open source tooling, sample code documentation that enables developers to really get up to speed in building the application without needing to know all the nuances of identity before it can become productive with our platform. And thirdly, we are also excited to announce that we've enhanced our developer community with experts in different programming environments. And as a developer, this means that you can then quickly and easily find answers to your questions when you need help, and get active help right in the moment when you need it.
Ryan Carlson
executiveSo that's amazing. So a new 15,000 monthly active user tier that's free, integrations with Heroku and Kong, better documentation and an enhanced community, is that right?
Emeka Afigbo
executiveYes.
Ryan Carlson
executiveThat's amazing. I'm sure people are going to be asking when is it available, and where can developers find this information?
Emeka Afigbo
executiveOh yes, it's available right now as we speak. So all the open source integrations that we're launching, the sample apps, the documentation, everything and the new Developer Edition is available at developers at okta.com like right now. You can literally, as a developer, sign up and start building and deploying your awesome digital experiences. And as we continue to innovate on our identity platform, you're going to be seeing more features and functionality available in the Developer Edition.
Ryan Carlson
executiveI love it. Well, Emeka, Diya, thank you. I want to actually now throw it over to the demo team, so you can see some of the things that Emeka talked about in action. Demo team, take it away.
Danielle Kucera
executiveHey, everyone. I'm Danielle, a product manager here at ATCO Foods, a global grocery company. We've recently decided to launch a new direct-to-consumer brand with a snack delivery service called Munchbox. The launch is ambitious. We want a Munchbox on every single sofa. So we need to get a new app with a great registration and log in experience spun up right away. I've asked my lead developer, Micah, to get going on the prototype.
Micah Silverman
executiveThanks, Danielle. I know intimately that it usually takes months to get something like this developed and into production. And it figures that Danielle lays this on me after she assigned me, no joke, 5 other projects this morning. But it's high visibility, and I want the visibility. All right, I know this is going to be a big effort, and I know the app will need authentication and authorization. I've heard good things about Okta, so let's take a look at what they offer. Looks like a free Okta developer account supports a lot of users and seems to handle a lot of the hard things about building off. It looks pretty simple to sign up and get started with GitHub or Google, so I'll use this for my prototype.
Danielle Kucera
executiveHey, Micah, I hate to be the bearer of bad news, but our execs just moved up our time line by a month and they want to see a prototype next week. Any ideas?
Micah Silverman
executiveWhat? That's crazy. I need to rethink my whole approach to fit these new time lines. Let me grab Brian from our DevOps team and see the best way to model this out and get it into production. Brian, we have this crazy deadline. We've just had another project dropped on our lap. If I have an end-to-end app, will you be able to deploy it to production? It's going to need authorization and authentication and Okta seems to be a great fit. Will that work for our production environment?
Unknown Attendee
attendeeHey, Micah, as long as the app is easy, containerized, then we should be good to go. And using Okta is a no-brainer. We already use it internally for SSO and even to manage access to AWS. So don't worry about it. When it's ready to go to production, I'll take care of it.
Micah Silverman
executiveGreat. Thanks, Brian. It's great to hear that I can use my developer tools to speed up the prototype and know that it will easily translate to our production environment. I'll use JHipster, an application generator, to create a react front end and a spring boot back end. Then I'll deploy the application with Heroku, an application hosting service. And I'll use the Okta add-on to provision and configure an Okta instance on the fly as the authentication service. First, I'll prototype an app with JHipster and set some of the configuration here. I'm choosing Okta as the authentication provider, so I don't have to build off myself. All right, the JHipster app is done. Second, let me deploy this to Heroku. I know I can create an Okta org right from the command line. And the Heroku add-on is doing some basic Okta setup for me, including an admin user and password. And this makes it so I don't have to leave the terminal at all. It's automatically going to create an Okta developer org and assign an API token for easy integration with Munchbox. It will also create a single page app in Okta for Munchbox with all the OAuth config filled in. While that's running, let me take a look at Okta's documentation. There's a sign-in widget here that seems to handle all of the core flows around signing in, so I don't have to build registration, log in and e-mail validation flows for our customers by myself. That will save me a few days' work. That's all done. Now my skeleton application is created, and I'm going to log in as the admin, and I can see that I'm all set. This was great. I didn't need to spend any time implementing login and registration, which means I can focus on building out the different Munchbox pages. All done. And now I'll send it off to Danielle.
Danielle Kucera
executiveMicah, this is great. Look at all of these snacks. I know you're happy that it looks like you spent 100 hours of time on this versus the 10 you actually did because you used Okta. Our execs loved the prototype. They told me at lunch, and they said to ship it. So I'm going to ask Brian how soon he can get this app deployed to production.
Unknown Analyst
analystOkay. So I'm going to take the app that Micah built and deploy it to Amazon's Kubernete service using Terraform, an open source tool that creates and manages infrastructure from config files. The JHipster build already created a container, so all that was left for me to do was to update our Terraform config to include Okta. Don't tell him. While Micah was spending all that time with the business logic for the new Munchbox application, it only took me about 10 minutes to update the Terraform config to include the Okta Terraform provider. To get the deployment started, I'll just run Terraform, apply. We use the Okta Terraform provider to configure the Munchbox Okta production tenant with a new OAuth application and the related resources; the deployment of the app to EKS, the creation of application health checks, the setup of load balancers; and finally, the DNS entries needed for the Munchbox domain. Cool, it looks like Terraform is finished. It only took about 2 minutes to deploy the app and all its dependencies. That's much faster than it used to think just to get access to the Kubernetes cluster. Danielle, you're all set. The new application has been deployed.
Danielle Kucera
executiveLet's take a look. The Munchbox app is live, and the registration page looks great. Okta's developer experience made that entire process go way faster than any identity project they've ever worked on, which is going to make me look great in front of our exec team. And I suppose the team did a stellar job taking this from idea to prototype to production really fast. It kind of makes me feel like we can do anything. Like we really are making the world a better place through more efficient snacking. Hey, Micah, can you jump on those other 5 projects I assigned you in the next hour or so?
Ryan Carlson
executiveThanks, demo team. That was great. Munchbox is certainly a great idea because I know that snacks as a service is a giant market. I wish you all a lot of luck. We're going to continue the conversation here around customer identity, but we're going to have a new voice to the mix. I'm pleased to introduce to the panel, Maureen Little, our Vice President of Strategic Alliances. Welcome, Maureen.
Maureen Little
executiveHey, Ryan.
Ryan Carlson
executiveSo Diya, I actually want to start with you. You can't talk about developers without talking about customer identity, and that landscape has changed a lot. From your perspective, how has it evolved most recently?
Diya Jolly
executiveThat's a great question, Ryan. So in the last year, the digital economy has fast forwarded by nearly 5 to 7 years. Today, every organization, as we discussed, needs to have digital touch points with its customers and customer experiences for their customers to be able to interact with. Now in doing so, they need to be able to bring online and off-line experiences together. They need to be able to stitch together experiences across multiple products and across their partner ecosystem. All of this is extremely complicated. And it's hard, but it's also extremely valuable, because this is the only way to provide a compelling experience for their end customers.
Ryan Carlson
executiveThat's super interesting. Talk more about that complexity. I want to hear more about that.
Diya Jolly
executiveYou can think of the complexity along 3 different vectors. First, the number of tools and technologies that developers have to use is increasing exponentially for them to be able to bring a customer experience to life. Secondly, every day, there are new attacks and attack vectors, and developers have to think about them and keep their application secure. And third, the amount of customer data and information these organizations have to deal with is increasing exponentially. And developers have to build their applications in a way such that they adhere to the compliance and privacy regulations of every region. So if you think about it, building an application and a customer experience now has become much more complicated than it was ever before.
Ryan Carlson
executiveThat certainly does sound complex. Okta's ecosystem, I think, plays a role in helping solve that complexity, doesn't it?
Diya Jolly
executiveYes, it does. When you think about this, Okta has integrated with all the partners that are across the customer experience tech stack. However, over the last 6 months, we've actually deepened our integration with 4 key categories. The first one is the tools and technologies that developers use to build and maintain their apps, so that we can actually help them get to market faster. The second are tools that help assess risk and detect and prevent against fraud so that developers can keep their application secure. Third are downstream systems where customer information needs to flow, like CRM and marketing systems. And fourth are tools that developers use to ensure compliance against regional privacy regulations. Now Okta wants to serve every developer and every customer. So we're adopting a best-of-breed approach so that you can pick the right tools and technologies for your business, for your app and for your organization. In addition, we are taking this a step further. We're also ensuring that we have multiple integration patterns, whether that's low-code, no-code or pro-code, so that any team that touches customer identity, whether it's developers, security, marketing, product development, can actually use the tools that are the most effective for them.
Ryan Carlson
executiveThanks for that detailed explanation. Emeka, I want to come to you. As a long time developer yourself, what Diya just talked about, how is that going to help developers' lives and make it easier for them?
Emeka Afigbo
executiveIt's actually quite exciting, Ryan. So what this means is that as a developer, you can take things like custom scripting and setting up integrations away from your already considerable to-do list, right? And it also means that as a developer, you no longer need to worry about setting up and maintaining different integrations and deployments because this can now be offloaded onto nontechnical teams or less technical teams. So an example of this is that if the business decides that they want to change the way identity flows into, say, a CRM application, this can be handled by either an identity team or an operational team depending on what makes the most business sense, which then leaves the developer to focus on what we think is most important. And that is creating a great customer experience.
Ryan Carlson
executiveWell, that's super clear. Thanks. Time to bring Maureen into the mix. Maureen, you work with a ton of our partners. I want to talk about fraud detection and risk signaling, specifically from the integration standpoint. I'd love to get your take on that.
Maureen Little
executiveWell, when you think about it, Ryan, organizations have to gain consumer trust, no matter what application that consumer comes in, no matter what device. So what they need is to be able to assess the risk coming in from that application. And so the first thing that we decided to do was figure out is that person actually human? Because you want to take that insight and intelligently allow the good consumers who are actually trying to consume content or buy something through, and block the bad guys. So the first step is figure out if they're human. So Okta has partnered with the leaders globally in bot detection, and web application firewall, companies like Fastly, White Ops, F5, PerimeterX. And we're going to expand very, very soon into other kind of risk areas, behavioral data, transactional risk. And our main goal here is we want it to be easy when someone is licensing and using Okta to assess that risk and make that consumer experience seamless.
Ryan Carlson
executiveThose integrations make a ton of sense for security, and for risk and for fraud. But what about the customer experience? I know we have some new customer identity workflow integrations in that area as well. Is that right?
Maureen Little
executiveYes, and actually, we started first thinking about social log-ins. Consumers already have their social log in, so we've expanded access via social log-ins from our existing ones with Apple, Facebook and Google to extend and add more companies that these consumers already use, Amazon, GitHub and others. We're even expanding internationally into international partners like Line and WeChat. But it's more than that. So the Okta integration network is this amazing catalog of tools. And we are expanding into new categories like e-commerce, marketing technology and data providers and just really trying to make that search experience as they're discovering the tools they need access to, way easier. Then finally, we're using workflows because in that real-time consumer experience, they already use big orchestration and e-commerce platforms. And we're going to use workflows to take that data into downstream systems they already use like SendGrid, Mixpanel and HubSpot.
Ryan Carlson
executiveMakes a ton of sense. Integrations for security, integrations for a better customer experience, more integrations, more value. Thanks, Maureen. Diya, I want to come to you. Everything that we heard about, I'm sure people want to know when they could get access to it. So I know you have the answer.
Diya Jolly
executiveThe new integrations for customer identity are available in a new catalog on our Okta integration network. And they're available right now for you to use and browse at okta.com/integrations. Ingesting risk signals is also available from our partners, and it's in early access and available to our customers that use our adaptive multi-factor authentication. The new workflows for customer identity is available as an add-on SKU. And the integrations that Maureen talked about with Mixpanel, SendGrid and HubSpot are available as workflow connectors.
Unknown Executive
executiveExciting stuff. Thanks, Diya. And also thanks, Emeka. Thanks, Maureen. Really appreciate it. Let's turn it back over to the team at Munchbox to see a lot of what you just heard about in action. Demo team.
Micah Silverman
executiveHi, Danielle.
Danielle Kucera
executiveHi, Micah. Aren't you happy to hear from me? So I was chatting with our executive over lunch. And now that they see that we can work so quickly, they want more, and we've got more work to do. First, they want the coolest e-commerce store from out there. I'm sure you remember that our goal is a Munchbox on every single sofa. And they want proof it's the coolest, so we need to connect our analytics system to the registration and log-in experience to prove people are moving through smoothly. So in other words, another low-key project for you. Are you up for it?
Micah Silverman
executiveWow, Danielle, so great to see you. This is a long list of complex requirements, and I can't imagine my team is going to be able to release this in any reasonable amount of time. I guess I got to go learn the HubSpot APIs and how they all work.
Danielle Kucera
executiveBut don't you remember the last time? Use Okta, and this should take you much less time than it normally would. Especially with their new Okta workflows for customer identity product, I've heard it will help you set up these integrations without having to read all of those API docs.
Micah Silverman
executiveLet's see. To make sure our customers have a smooth experience, we need to get their profile information into our CRM system, HubSpot, and Okta does have a prebuilt connector in workflows for HubSpot. Looks like they've already done the hard work on understanding HubSpot's API, so I don't have to write any custom scripts or manage API tokens. I can just use the create contact action as part of a new snacker registration workflow or the create company action for our corporate clients. Now I don't have to learn the HubSpot API.
Danielle Kucera
executiveThat is super exciting, Micah, super exciting. So I was on a casual lunch with our CMO, who is also super excited. And he said that user registration and signings are key KPIs to make sure we're converting customers and driving customer delight. And I honestly think that driving customers delight is just so important these days, don't you? So I want to make sure Okta is integrated with our analytics solution Mixpanel, so we're capturing it all properly.
Micah Silverman
executiveTrue to form, looks like Okta has a connector for that too. So again, I don't need to spend time reading Mixpanel's API documentation, and I can just use the Create Profile icon to pass over the registration information that our execs are interested in. I've created a simple automated flow so that when new snackers register from Munchbox, we create their profiles within Mixpanel and HubSpot's CRM. This ensures that customer records in those systems are always up-to-date and are in sync. Again, Okta has taken away a lot of the custom coding work I usually have to do when building integrations, and it looks like I won't have to do any integration maintenance as Okta just handles that for me. All right, now I'm going to go munch on some snacks.
Danielle Kucera
executiveOh, wow, our marketing team just let me know that Munchbox has really become popular with the TikTok crowd over the past few weeks. Cool. We just launched a limited edition Pokémon Munchbox, and it looks like its popularity has attracted a ton of bots. And our analytics solution, Mixpanel, just let me know that our conversion rate is going down. Last time this happened, our customers got stuck, while bad snackers squeaked through. This is exactly the opposite of what we want. And our exec team is going to kill me. He won't be able to have lunches with them anymore. Micah, can you jump on this and fix it ASAP?
Micah Silverman
executiveSure, Danielle. Okta can help with this fraudulent activity. I see an Okta system log that we're allowing a ton of bad traffic, but there's a few policies I can configure in Okta that will help. We'll use Okta's ThreatInsight, Okta's native capability to detect in automated threats and integrate with our bot mitigation solution, Fastly. This will then feed into Okta's risk engine, so we're adding invisible security to block these bots without impacting legitimate snackers. In fact, I was already integrating our bot detection solution, Fastly, as you can see here. The remaining steps could be done in this admin console, but I prefer to do this via API. So let me pull up Postman, which simplifies interacting with APIs. You can see the end point I'm calling here and the payload that I'm sending to it. Previously, I turned on ThreatInsight on to audit mode to just log the suspicious activity that was occurring. Given this bot attack, I now want to change that to block mode to automatically deny suspicious activity identified by Okta. We'll send that, and you can see here we're getting a 200 OK to indicate that the change has been made. Now I need to create a new risk policy that blocks the high-risk attempts, thereby catching bad snackers and minimizing security blind spots. And I send that and I got the 200 OK as well. Let's head back to the Okta system log, and we can see that it's logged the ThreatInsight changes and added this new risk policy. We can also see signals from Fastly being regularly ingested into Okta, and we can see high-risk requests are now being blocked. I'm so glad I didn't have to defeat these bad snackers myself and was able to rely on Okta and Fastly's expertise to get the job done for me.
Danielle Kucera
executiveThanks, Micah. Looks like the authentication errors are starting to go down, which means my exec lunches are going to go up. Let's check out TikTok and see how people are reacting.
Teju Shyamsundar
executiveOh, hey, everyone. It's Teju, you're one and only average snacker, and I'm back today to review Munchbox's app. Now as you guys know, I've been waiting forever for these Pokémon Munchbox snacks to drop. So today I'm going to review Munchbox's app, and next week I'll review my snacks. Okay, let's go ahead and get started. Now I've already downloaded Munchbox, and the first thing I see here is a snacks special for $5 a month. Definitely want to add that to my cart, and I'm liking what I see so far. And yes, here are those Pikachu snacks I wanted too. I'm going to go ahead and add those to my cart, and I should be ready to check out here. But before I can check out, it looks like I need to create an account. Makes sense. Probably just need to enter my name, e-mail address, password, the usual stuff. So let me go ahead and do that now, name, e-mail. And oh wait, no password. I can just verify my account through my e-mail. Extra points for Munchbox on that one. Okay. So I see an e-mail for Munchbox now, and I'm one step closer to my snacks. Now before I can officially buy my Pokémon snacks, it looks like Munchbox is asking me for my favorite snack types, but I'd really just want to get straight to buying my snacks. I'm going to skip this for now, and I'm ready to check out. Okay, guys. So far, I got to say, 5 out of 5 for Munchbox. Impressed with the sign-up process, the UI, and I'm sure those Pokémon snacks will be great. As you guys know, the deal, don't forget to subscribe, average snacker Teju, and I'll see you next week.
Danielle Kucera
executiveLooks like Teju is a satisfied customer of Munchbox, and so is her TikTok . Thanks to Okta, I was able to ensure a seamless, passwordless customer experience, learn more about snack references during checkout to provide promos in the future, quickly set up e-commerce and analytics to monitor our conversion rates, reduce malicious log-ins with Okta ThreatInsight, and the risk API with our bot detection vendor, Fastly; all while saving hundreds of hours of developer effort.
Micah Silverman
executiveDon't you just love when the PM lists out all of these results like that, as if it was one, their doing, and two, really easy? Normally, this would annoy me more. This time I'll admit I'm ever so slightly humbled. Okta legitimately saved me months of time. I got the visibility I wanted. I'm getting promoted for owning this launch. And I was able to complete the project in less than half the time it would normally take. And now, lots of cheesy snacks.
Todd McKinnon
executiveI never get tired of seeing what the demo team pulls together. It's great to see and hear about all the incredible momentum Okta has when it comes to customer identity. But I'm also really fired up about our workforce identity innovations that will push your businesses forward. Over the last 12 years at Okta, we've seen a fundamental shift in the role identity plays for organizations. It has been heard loud and clear. You require a single solution for every user type and every use case. You need it to work for not just apps, but also infrastructure, containers and databases. And you need to democratize and simplify how users gain resource access, by empowering your business partners to determine requirements rather than centralizing with IT. You heard us talk about it in the documentary, and I'm making it official right now. Okta is breaking into both privileged access management and identity governance administration. These have both been big areas of need for your businesses, and we are not only delivering on those needs. We're doing it in the Okta way: simple, cloud-based delivery, with an emphasis on the features you need and use. I'm thrilled to introduce Okta Privilege Access and Okta Identity Governance. This is huge news for Okta and a really natural evolution for us in our platform and for identity overall. When it comes to Okta Identity Governance, we've reimagined IGA for a cloud-first world where the number of resources accessed by your workforce has dramatically increased and your workforce itself has transformed. For Okta Privileged Access, we're not building a product for the way people used to work and for the way infrastructure used to be. We're building for the way infrastructure is today and will be in the future, cloud deployed and just in time, the way critical infrastructure access should be. Users, resources and access policies are all the areas where Okta excels. One unified identity control plane is the best way to keep your organization secure and compliant while still keeping you nimble and innovative. With Okta Privileged Access and Okta Identity Governance built on our platform, you can have unified visibility across any type of user and any type of resource. For us, taking on more of your complexity and securely simplifying it is a natural step in giving you more freedom to grow and use technology. We're excited to tell you how we're doing it. I'll turn it over to the team to share more details.
Ryan Carlson
executiveAll right, huge news from Todd right there. I'm back here with Diya with a couple of new faces. First, George Kwon and Michael Chou, both Vice Presidents of Product Management, here to talk about these new products. But Diya, I want to start with you. I know you quite well. I know one of the things that gets you really excited is that entering new markets. And we're doing that clearly with IGA and PAM. But let's start first with why is Okta uniquely able to do this?
Diya Jolly
executiveYes, that's a great question, Ryan. If you look at our organizations today, they're struggling basically to meet their security, compliance and workforce productivity goals because they have limited resources. Now they're trying to cobble together point solutions, but these point solutions cannot keep up with the dynamic nature of work and the speed of cloud modernization. Also for many of these organizations, the cost of this cobbling these point solutions together is extremely prohibitive. So what we want to do is we want to provide a unified identity platform that acts as a unified control plane that allows our customers to be able to manage their risk, their security, their policies and also provides visibility across all types of users and all types of resources. And while we do this, we really want to be able to bring the same principles we bought to our identity access management suite of products, which is cloud-first, ease of use and ease of deployment.
Ryan Carlson
executiveThat makes a ton of sense, but I imagine it's more than just a control plane, right?
Diya Jolly
executiveThat's absolutely right, Ryan. We're building our privileged access management solution not just for resources in the past, but for how resources work today. So what we're doing is we're adopting a cloud-deployed just-in-time credential model that works not only for on-prem resources but also for the ephemeral cloud resources of today. And in addition, we're also broadening privileged access management not just for servers but for other resources like Kubernetes clusters, databases, et cetera. On the identity governance side, the Okta Identity Governance product is going to be able to redefine governance for the way it should be in the cloud world. Today, there are numerous applications that customers use, there are numerous types of workforce they have. So different types of users, whether they are your employees or your partners or your contractors, all these people need the right access to the right resources and the right governance to succeed. And with Okta Identity Governance, we are trying to reimagine the identity and governance space for a cloud-first world where organizations have many, many more resources that their workforce has to access. And the definition of the workforce itself has changed. You don't just think about employees now. You think about partners and contractors. All these people need the right access to the right resources and the right governance for them to succeed. With Okta Identity Governance, we're also providing the ability to have self-service access to resources via common tools like Slack. And in addition, we will also provide an approval request for your more sensitive applications, data and tools. And with our workflows tool, we're going to be able to provide you the ability to build customization and automation for your business processes so that you can move your business forward.
Ryan Carlson
executiveIt's super clear. I love it. So I want to turn to you next, George. George, you've actually been here so long. So long in fact, that you launched our now famous Universal Directory product way back when. But I want to hear from you. What can customers expect from the new Okta Identity Governance products?
Unknown Executive
executiveThat's right. I was here when we launched UD. It was a great launch. I think this might be more exciting. Okta Identity Governance is an end-to-end solution for customers to manage who has access to what. It starts with life cycle management, which automates the life cycle of all your users, employees, contractors. It automates provisioning to applications and infrastructure. On top of life cycle management, we're going to introduce a new access request capability, enable self-service for all users requesting any resource, approval workflows, granular admin roles, really allow you to delegate all those access requests to the business. And then on the governance side, we're going to release more reporting, the ability to enforce temporary access policies as well as access certification campaigns, so that you can be successful in all of your compliance and security goals.
Ryan Carlson
executiveThat's awesome. That does sound better than Universal Directory. I didn't think that was possible. I want to talk about what we've done with life cycle management. We have prebuilt integrations, low-code workflows. But specifically around governance, we have a lot of innovation there. Tell us about that.
Unknown Executive
executiveYes, the challenge with self-service and access request is delivering an experience that end users love and are willing to adopt, and getting rid of all the siloed access request processes that are sprouting up in the shadows. So with Okta Identity Governance, we're going to deliver modern end user experiences through mobile and chat. And we're going to make it possible for the business to define their own access requests, rules and approvals, so they adopt a central platform. On the governance side, Okta sits in a unique place in the middle of a directory, access management, identity governance where we can provide unique context and visibility. So we're going to provide a single pane of glass through reporting, and we're going to weave that context into our access request capabilities and access certifications. So we can really streamline the process. No more rubber stamping.
Ryan Carlson
executiveThat makes a lot of sense. So George, sum it up for us. Tell us about Okta Identity Governance and what customers can get from it.
Unknown Executive
executiveOkta Identity Governance is going to help IT teams scale through more automation, delegation, self-service. It's going to drive better security and compliance outcomes, all while making the end-user experience better, making -- getting access to the things you need actually easier. And Okta Identity Governance is going to be for organizations of all sizes, whether you are new to the governance game or whether you've been at it for a while and are looking to modernize. I'm super excited about this launch. I've been talking to so many customers. They've been pushing us in this direction for years. And now I get to look at them in the face and say help is on the way.
Ryan Carlson
executiveVery exciting indeed George, a long time coming. Thanks for that. Michael, I want to turn it to you. You're relatively new to Okta actually. And before we talk about Okta Privileged Access, I'd love to get your take on the things that Okta had built in these 2 areas already in our existing products.
Michael Chou
executiveYes, absolutely. I think what's really impressed me the most, Ryan, is just how much investment Okta has already made in this area. George spoke about this, but with the Okta Identity Governance, this builds on top of our Universal Directory. It builds on top of our workflow capabilities and also life cycle management. But with Okta Privileged Access, now we are leveraging the experience we've had in terms of securing infrastructure with our multifactor authentication product and also our original Advanced Server Access product. So I think with what's really special here is with Okta Privileged Access, our customers are now able to have a centralized control plane to control access to their Linux, their Windows servers, databases and also Kubernetes clusters. Now because identity is at the foundation, only Okta can really automate the life cycle of accounts and also policies end to end and then also insert governance in line auth flows.
Ryan Carlson
executiveSo it sounds like a true end-to-end solution, and it sounds like it's very much better for IT. But one of the things I understand about traditional PAM products is that they're not a great experience for end users. Tell us about what that's like for Okta Privileged Access.
Michael Chou
executiveFor our users, this is actually a really seamless and easy-to-use single sign-on experience, whether they are logging into a monitoring dashboard with their web browser, or they're logging into a Windows server with their local RDP client. But behind the scenes, our customers now have flexible policies for role-based access, attribute-based access and also time-based access to really deliver just in time this privileged access. And to meet the demands of compliance, we audit every single log-in capabilities, and we fully capture all the activity that's coming in your SSH and also RDP sessions. Now with everything tied to identity and unified to a single platform, we've really made it easy for the security teams to compile their reports and to compile their regular audits.
Ryan Carlson
executiveThat's super clear. The Okta Advanced Server Access product has been out there for a while, really successful with customers, a ton of customers are using it. Tell us about how Okta Privileged Access builds on top of what we already have with Okta Advanced Server Access.
Michael Chou
executiveThat's a really good point, Ryan. With our Advanced Server Access product, we've really made it very easy for the users to use. But we've made it even easier to deploy, regardless of whether they're running hybrid cloud or they're running multi-cloud. And we deliver these administrative controls as SaaS, just as you would expect from Okta. Now just as a benchmark, we've had our customers deploy Advanced Server Access to hundreds of thousands of servers. And with other products, they weren't really able to do that. So with Okta Privileged Access, our new product, we're able to help our customers protect even more resource types and layer on even more security and auditability.
Ryan Carlson
executiveThat's very compelling, Michael. Very excited about Okta Privileged Access and Okta Identity governance. I want to know when customers can get their hands on these products. George, let's start with you. When will customers be able to get Okta Identity Governance?
Unknown Executive
executiveYes, Okta Identity Governance will be available in Q1 of 2022. It will be available starting at $9 per user per month, so really excited about that. But to remind you, you can go make use of Universal Directory, life cycle management and workflows today, really implementing a lot of automation to start to solve some of those governance needs.
Ryan Carlson
executiveAnd that's also a great reminder, you don't have to wait to get started. You can start now with a lot of the great capabilities in our life cycle management products.
Unknown Executive
executiveYes, that's right.
Ryan Carlson
executiveSo Michael, I want to come to you next. When can people expect to get their hands on Okta Privileged Access?
Michael Chou
executiveOkta Privileges Access is going to be available in Q1 2022 as well, and pricing starts at $45 per PAM unit per month. But you don't have to wait until then to get started with our Advanced Server Access product. Our customers can secure their server fleet today. And we've made a lot of improvements since the last Oktane for compliance with our SSA session capture. And for our customers that have Windows environments backed by Active Directory, we have a lot of really great improvements coming there as well. We've heard from our customers that servers are the most important resources to protect with privileged access, so we can get you on the right path today.
Ryan Carlson
executiveThat's awesome. 2 new products, Okta Privileged Access, Okta Identity Governance, both coming soon but customers don't need to wait to get started. And actually we talked a lot about these products, but what we want to do next is to show you these products. So let's send it back over to the demo team to see them in action.
Lance Malacara
executiveHello. I'm Lance. I'm a Site Operations Manager here at ATCO Foods. I run a number of IT projects globally, reporting directly to our CIO.
Aaron Yee
executiveHey, what's up, Lance? I'm Aaron, a security analyst responsible for helping our compliance team assemble audit reports for FedRAMP, SOx and PCI DSS.
Lance Malacara
executiveAaron, do you remember when we used to have separate systems for identity governance and privileged access management? It was really hard to execute access requests, meet compliance requirements and control access to sensitive resources in a simple and orchestrated way.
Aaron Yee
executiveYou know what was also hard for me, Lance? Every quarter at audit time, you and all the other app owners called me the fun police because I pestered you all for audit logs. And then I had to spend weeks cleaning your dirty data for the compliance team.
Lance Malacara
executiveWell, that's about to change, Aaron. You see because we are already using the Okta Identity Cloud. I was very pleased to see the new Okta Identity Governance and Okta Privileged Access products, which will help us unify key elements of our IT and business strategy. When it comes to sensitive access, I want a process that is transparent, seamless and agile. The new Okta Identity Governance integrates with our existing collaboration tools such as LAC, making this process incredibly smooth. It is a simple automated experience when users need access to any other app, for example, Zendesk. But don't take it from me. Let me ask Teju, who is new to the team, what does she think about this process? Teju?
Teju Shyamsundar
executiveYou're right, Lance. I'll admit. I definitely came here for the Munchbox snacks, but getting access to systems here at ATCO has been great. Now as a site reliability engineer, I typically need access to various resources like infrastructure and AWS, collaboration tools and some on-prem tools that we use for ongoing maintenance. Now all of those apps were assigned to me on day 1. But let me tell you, the last company I worked with, it took weeks for me to get access to systems, while other full-time employees got access to apps much, much faster. So I was definitely pleased when I came on board here to see everything standardized on Okta and even built into the tools that I use day to day. Now it's great that I can just pop into Slack to create these access requests instead of having to go through clunky old school systems. Now that reminds me, I actually do need to request access to Zendesk to monitors in our internal security tickets. So because Zendesk wasn't assigned to me on day 1, I'm going to go ahead and create a new access request with Okta. Now in the list here, I'll choose access to applications and I'll choose Zendesk in the list, provide a quick justification like ticketing. Now all right, I'm going to go ahead and submit this request and see if it gets approved.
Lance Malacara
executiveI've got an access request. It's from Teju. Okta governance notifies me in real time whatever someone asks for or is granted access to production systems. In fact, Okta just messaged via Slack to let me know Teju's request access to Zendesk. Since all of our site reliability engineers should have access to this app, I'll go ahead and approve access for her.
Teju Shyamsundar
executiveOkay. Great. It looks like my access to Zendesk was approved. That was super quick. And I noticed at the same time that ATCO's Okta review bot just pinged me, asking to recertify my access to Dynatrace. I'm not really sure what this notification is about. I haven't seen it before, but I do still need access to Dynatrace to monitor some of our servers. So I'm going to go ahead and choose Yes here. In the justification, provide another quick justification like I did before, like server monitoring, I think that should be good enough. And we'll go ahead and submit that. But hey, Aaron, since I hadn't seen that notification before, could you tell me what it's all about?
Aaron Yee
executiveSo what you saw was a smarter access review. It automatically prompts users to self-certify their access and is triggered by signals unique to Okta. In your case, Teju, the signal was inactivity. You just hadn't logged into Dynatrace over the past 30 days. This is less fatiguing on reviewers, and it saves time. The other benefit is that Okta captures these self-certification events for audits and it even sends them to me via e-mail. And this is great because I no longer have to pester Lance to get me audit reports ASAP all the time. It's all right here.
Lance Malacara
executiveI appreciate that, Aaron. But you know what, auditing and governance for applications is great, but it's not everything. We also need to ensure we can manage fine grade access policies to infrastructure. Okta Privilege Access helps us manage access to more sensitive resources and adhere to the principle of least privilege. Let's see what that looks like for Teju.
Fatima Boolani
analystOkay, so I confirmed earlier that I do still need access to Dynatrace. And I was even able to connect to Dynatrace directly from Slack, which is cool. But now oh, man, I'm thinking I shouldn't have done that. I just gave myself more work. One of our database server CPUs is running at 0%. I should probably go and fix that. I think this has happened before, and all I need to do is restart SQL on that server. So I'm going to pop back over to Slack now and create a new access request. And this time, I'll choose to access servers. And yes, in the list here, I can see that database server that I need access to. I'll go ahead and request access for about, I think, 3 days should be good enough to do some ongoing monitoring. Provide another justification, like I need to fix stuff. All right, that should be good enough. I'm going to go ahead and submit this. Now that request is fired off. Let's see if it gets approved.
Lance Malacara
executiveI got a new access request. It's from Teju. This looks like Teju wants access to one of our SQL database servers. Let's get her in. I love how this whole process is nicely integrated into Slack. It has helped us achieve widespread adoption of our Privileged Access processes. Among other things, I can see that the server is actually running in production. So before I approve, I do want to make sure I can see all of the role and attributes of this server. Okta connects with our downstream infrastructure providers pooling all the resource stacks required, making it really easy for people like me, to know what are the right policies and what levels of access to apply without having to go through security every time. Here in the Okta dashboard, I can actually see all the information I need about this server. Let's see. It looks like this is a Windows machine running on AWS. It is stacked for sensitive data. And look, it is also stacked for PCI compliance. Because this is a PCI compliance system, I need to make sure that Teju gets access only for a limited time. Slack is also telling me that Teju requested access for only 3 days. This actually complies with our PCI cyber policies, so I'll go ahead and provide access for her as well. One more thing that I love about Okta is the ability to apply time-limited access to privileged systems automatically. This way, Teju can get to this task in her own time, and I do not need to worry about removing access afterwards to meet compliance.
Teju Shyamsundar
executiveOkay. Great. That was super quick. Just like my access request to Zendesk from earlier, my request to that database server got approved. Thanks for that, Lance. So now I'm going to log on to that server directly from Slack. This is a Windows server, so I'll use my local RDP client to log in. That's already nicely integrated with Okta for a single sign-on, so I don't need to enter any additional credentials even for these Windows server domain joint machines. And of course it looks like my actions on the server are going to be recorded. IT is always spying on me. I'll try not to break anything here, but no promises. Okay. So I'm logged on to that server now. I'll go ahead and start-up services. We'll find SQL here, give that a little kick. And okay, that's up and running. And phew, another fire was put out.
Aaron Yee
executiveDoing these audits used to be really painful. Whenever I asked our business app owners for access data, they took weeks to copy this on USB drives or to print it on spreadsheets. Come on, do you still write checks at the grocery store, too? Fortunately, Okta eliminates the manual work of collecting access data and consolidates it under one umbrella. I can see who has access to our applications and infrastructure. For our more advanced compliance requirements, I can even do recordings of what people did in our Linux and Windows servers. So it looks like Okta sent me a report that shows recent access requests. This report also details any privileged actions that users performed. Okta captures all privileged SSH and RDP sessions and then dumps the logs into a Secure S3 bucket in AWS. Now Teju's latest session was on a Windows server. So let's check out that video. All right, I can see Teju in the server. It looks like she's opening up the services app, and from there she's restarting the database. So far, so good. And it looks like she's closed the session. Perfect, nothing suspicious to flag here. So I love how this all came together. Standardizing all of our access and governance needs with Okta has really unified our security posture from off to audit. All of our reports are generated and consolidated in one platform I don't need to pester our team for updates anymore. And from the looks of it, these jokers, I mean dear coworkers, appreciate that.
Lance Malacara
executiveWith all our identity and access management requirements, including governance and privileged access, consolidated into a single platform, we are finally able to streamline access requests, meet compliance and better control access to sensitive resources in a modern way, using modern tools that do not hamper employee productivity, but at pace with business. We are much better off now thanks to Okta.
Ryan Carlson
executiveSo as we get ready to wrap this up, I just want to say a heartfelt thank you to the demo team, to the product experts you saw in the panel, and to everybody behind the scenes who made all this possible with these great product innovations coming your way soon. With that, I want to turn it back over to you, Todd.
Todd McKinnon
executiveI am very proud of the innovation we're bringing you today, from joining forces with Auth0 to launching Okta Privileged Access and Okta Identity Governance. As we roll out these new solutions in the coming months, you'll witness the benefits of incredible extensibility, security network effects and a unified identity solution for every use case you can imagine. Everything the team does is about helping to push your organizations forward, whether that be for your own workers and their productivity and security, or for your customers who rely on your digital experiences to run their lives. I believe that the future is at Okta and that we're on the way to achieving our vision of enabling everyone to safely use any technology. I am extremely proud of what the team has accomplished this year and even more fired up for what's to come. Thank you for tuning in, and thanks for being a part of Okta.
Diya Jolly
executiveWe have so much to look forward to with all of these exciting Okta platform innovations. And it was really cool to hear about all of them from our incredibly talented Okta product leaders. Now it's time for a deeper dive as our breakout sessions are getting underway. And be sure to visit the Okta hubs and Partner Expo to get answers to all of your burning questions. Later today, the remarkable Julia Louis Dreyfus will be performing feats of strength and delighting us all with her wit and insight in a conversation with our very own Sarah Schiff. [Break]
Dave Gennarelli
executiveGood afternoon, and welcome to Okta's Virtual Investor Day. I'm Dave Gennarelli, and I head up Investor Relations here at Okta. We're in the middle of day 2 of Oktane21, so I hope you were able to tune into some of the content so far, which really help set the table for what we have lined up for you this afternoon. Now let's take a quick look at today's agenda. We have a great lineup for you with our CEO, Todd McKinnon, kicking things off. We'll then head directly into a conversation between Todd and Eugenio Pace, the Co-Founder and CEO of Auth0. You'll also hear from Diya Jolly, our Chief Product Officer; Susan St. Ledger, our new President of Worldwide Field Operations; and Mike Kourey, our new CFO. Interspersed throughout that content, we have our Executive Vice Chairman, COO and Co-Founder, Frederic Kerrest, hosting chats with 3 great customers. The content will run for roughly 2 hours, which includes a short break. And after that, we'll have plenty of time for Q&A. And of course, our attorneys would not forgive us if we didn't mention that we will make forward-looking statements in these presentations. So please see all of our risk factors, including the ones in our most recently filed Form 10-K. We have a lot of material to cover. So with that, I'll turn it over to Todd to get things going. Todd?
Todd McKinnon
executiveGood afternoon, and thanks for joining us today. I'm proud of the big, bold moves we're making from innovating across our platform, our new PAM and IGA products, and joining forces with Auth0. The past year has shown that we can grow scale and be more relevant than ever, driving the industry forward even in the face of tough circumstances. Today, I wanted to share how I'm leading the company, the foundation for strength we've built and our long-term growth strategy to become a primary cloud. We have a large addressable market. Our customer base has never been stronger. And our products solve many of the biggest challenges businesses face today. The long-term secular trends, adoption of cloud applications, digital transformation and deployment of Zero Trust security environments are in our favor. Okta is central to both the digital experiences and the new ways of working the world requires that had only been accelerated by the pandemic, and we are growing and investing to capture the large opportunity in front of us. For me, the past year has been a powerful reminder of the ability of people to endure, persevere and of businesses to remain flexible and adaptable. I've seen Okta's core values of transparency, integrity, innovation and customer success at work every single day this year. I'm never more inspired than by stories of our customers, partners and employees as they push the boundaries of what's possible to build and solve big problems. The world has changed, and with it, so have the priorities of people running businesses. Okta increasingly addresses the key top-of-mind areas that CEOs and C-level executives care most about, from driving growth, to reducing costs and future-proofing their businesses. Our solutions to these problems are the reason the world's largest organizations turn to Okta. They have to manage this new environment, implementing an identity solution that meets their complex technology needs. Yesterday, you heard from Lululemon, Farmers Insurance and The Trevor Project about how our commitment to their success drove their organizations forward. Today, you'll hear from Zoom, ENGIE and Fox about how Okta's platform is solving mission-critical business challenges. Our vision is to enable everyone to safely use any technology. We believe that identity is woven into the fabric of every digital experience. Identity is increasingly top-of-mind, from the boardroom to the spare bedroom, reaching people across every business team and critical to the top line business objectives of every organization. This vision is ambitious and long-term and requires a singular commitment to solving identity for the Internet and remaining independent and neutral. I believe that Okta has the potential to be the standard for how digital identity is built on the Internet. What does this mean exactly? 2 concrete things. Every organization uses this standard to validate and protect their workforce and customers, and every digital resource accessed by every person in the world is done via their Okta identity. We are an innovative company and a disruptor, and that disruption begins with the Okta Identity Cloud and the platform we're building. Our unified, extensible and integrated platform is our foundation to build incredible new products and features while also making those identity capabilities more accessible to everyone in an organization. Today, we're providing the foundation for seamless log-in experiences that are totally customizable. It doesn't matter if our customers want out-of-the-box products or to build from scratch with our APIs and SDKs. The Okta platform is able to meet each end of the spectrum and everywhere in between. That's why the Okta platform is made up of core technologies that are flexible, programmable and integrated to everything. By building a platform that is deeply connected to every technology and meets every identity use case over time will push the technology ecosystem, driving even more innovation and security. It is for this reason I'm so passionate about ensuring that Okta's platform enables us to be a primary cloud, able to address and unify large markets. In a cloud-centric world, identity has become even more important and strategic a choice than infrastructure or collaboration clouds. It's the epicenter of an organization's tech connections, and it offers freedom of choice to adopt any technology. Choosing the right set of 5 or 6 primary clouds that serve the most critical business functions in an organization is one of the most important decisions CEOs and C-level executives will make today. And choosing an identity cloud is the most valuable because it facilitates choice and flexibility in all other technology. The announcements we've made over the last couple of days speed us toward this marker of becoming a primary cloud and expanding the problems we can solve for customers. We'll solve 2 new major customer requests with 2 new products: Okta Privilege Access and Okta Identity Governance. Both of these announcements represent further penetration in the workforce identity market. For Okta Privilege Access, we're not building a product for the way people used to work nor for the way infrastructure used to be. We're building for the way infrastructure is today and will be in the future, cloud-deployed and just in time, the way critical infrastructure access has to be. When it comes to Okta Identity Governance, we're reimagining IGA for a cloud-first world, where the number of resources accessed by an organization has dramatically transformed. And just as critically, the potential for customer identity is massive for every organization today. Everyone is moving their business online. And with that push comes the need not only to deliver safe and secure experiences, but to create meaningful ones for customers. That's why I'm so excited that we're joining forces with Auth0. The feedback from our employees, customers and partners has blown me away. Not only do we share the same vision, our values of how we operate are tightly aligned. We have the same world view when it comes to the role identity plays in powering the Internet. Each company has its own strengths and expertise. Coming together will give customers more choice to meet every identity need. Together, we'll accelerate our ability to become a primary cloud. We are going to maintain and invest in both platforms. And in the background, we'll be integrating our technologies over time to provide even more innovation. I have a deep amount of respect for what Eugenio and the Auth0 team have built. And you'll hear more from Eugenio in our Q&A shortly. Over the past year, we believe there has been a meaningful increase in our TAM related to expanded opportunities within enterprise customers as well as our new product introductions that address more use cases. The workforce identity market has grown from 30 billion to 35 billion. In addition, you heard the exciting news that we're expanding into IGA and PAM, which adds another 15 billion for a total workforce TAM of 50 billion. Looking at customer identity, that market has grown from 25 billion to 30 billion. We accelerated our penetration into this market with the complementary platform of Auth0. In total, it's a massive $80 billion market opportunity, and I believe we're still in the early days of what we can accomplish. In the following sessions, you'll hear from Auth0's Co-Founder and CEO, Eugenio Pace. Next, Okta's Chief Product Officer, Diya Jolly, will share our product strategy and road map. Susan St. Ledger, Okta's President of Worldwide Field Operations, will discuss Okta's FY '22 go-to-market strategy and customer centricity. Mike Kourey, Chief Financial Officer, will share our strong foundation for growth at scale, our growing addressable market and long-term financial model. From my Co-Founder and COO, Freddy Kerrest, you'll hear conversations with Okta customers: Harry Moseley, CIO, Zoom; Paul Cheesbrough, CTO and President of Digital Fox; and Claude Pierre, CIO of ENGIE. I'm extremely proud of what the Okta team continues to accomplish and can't wait to drive forward the future of identity. Thanks again for joining us today. Now let's kick things off with a conversation with Eugenio Pace. Now I'm really excited to have joining me the CEO of Auth0, Eugenio Pace. Welcome, Eugenio.
Eugenio Pace
attendeeThank you for having me, Todd. How are you?
Todd McKinnon
executiveExcellent. Excellent. Excited to have you. Excited to have a conversation with you about Auth0 and Okta and more importantly, about this amazing industry we're in. So why is now an important time for identity for organizations?
Eugenio Pace
attendeeWell, as you know better than anybody else, identity is the -- is this connective tissue that connects everything, every application. Everything we interact within our lives needs identity. And we are only scratching the surface because if -- I don't know your experience, but in my personal experience, from the moment I wake up, to the moment I will go to sleep, I know it can be much better than the experience that I get. And when I look at statistics, like only like a 3% penetration or 4% penetration of cloud into the entire world of IT and how critical identity is for that, that gives me an idea of how much we can do and how much more we can do.
Todd McKinnon
executiveSo we've known each other for a while now, and it's been amazing to see the progress and the growth of Auth0. What does Auth0 stand for to you? And what are its values? And then as it relates to Okta, what do you think about our shared vision and values together?
Eugenio Pace
attendeeThat's probably the more exciting -- the most exciting aspect of this partnership because yes, we know each other for a few years now. And I've been an admirer of you as a leader, as an entrepreneur and the company that you built, which is I know how hard it is to do that from personal experience. So I really look up to you and what you achieved as an organization. But I also look at the 2 things that you mentioned, one is the commonalities between the 2 of us, the Okta and Auth0, and the complementary nature of our businesses as well. And so we do have shared values. We call them in a different way, right? We have 3 core values. We give a s***. N + 1 is greater than N and 1 team, 1 score, but when you go 1 level deeper into what they mean, they mean innovation, they mean constant improvement, they mean collaboration, they mean empowering our teams, they mean care. And those are pretty much the same as Okta has listed as their core value. So to me, that's a foundational piece of a successful partnership. But then what we bring, and maybe on the more complementary aspect of our businesses, Auth0's DNA, it's the core DNA, it's around builders and developers, people who are building solutions in the world. We believe, and I'm sure you've heard this many times from me now, we believe in a world that it's a software world. We believe that every company, it's a software company, even though they might not call themselves a software company. But it is because software runs everything. And so our value proposition is that we check the box on a big problem, a problem that it's pervasive, as I mentioned before, but it's also a big distraction from teams. So if you need to -- if you go around building this yourself, not only the solution is not going to be as good as ours, it's going to be weaker. But it also detracts time and resources from what's actually valuable for your business, what makes you unique. And so that's what we are here for. We are here to make every developer in the world productive. Rest assured that this is taking care for them, and they can go on and move on into what's really, really important for their business.
Todd McKinnon
executiveBoth of our platforms have thousands and thousands of customers, and they're really operating at scale. And it's important that we continue to invest in and support both platforms going forward. And today, in this conference, we're talking a lot about the innovation on the Okta side. And you have the same commitment to innovation in the future and helping customers on the Auth0 side. What do you think this joint innovation means for customers and for users?
Eugenio Pace
attendeeAbsolutely. So we are certainly committed to supporting our tens of thousands of customers that we jointly serve. In many cases, we are actually serving the same customer today. But in many ways, our platforms are already integrated. It is possible today, even before we announced this deal among us, it is totally possible for somebody to log in using Okta into an Auth0 protected application. And that's a completely supported, real, we don't have to develop anything that's doable today already. So what it means to me and what really is exciting about partnering with you, it's the -- that we can bring what we imagine the future will look like in 5 years or even beyond that much faster. We can deliver that amazing future in a couple of years as opposed to waiting -- or maybe months, in some cases, as opposed to waiting a long time. In Okta's world, you've been calling this the identity cloud. We don't use those words, we use the identity operating system. It's different labels for actually exactly the same thing, which is this broad universal set of building blocks that our customers can use to deliver more use cases and to build like a comprehensive universal platform that they can use in like a broad range of use cases, whether it's workforce or customer or devices, websites, mobile applications, any kind of app. And we can do it faster, and we can do it more secure. And we can drive innovation and bring innovation to the market in ways that nobody else can in the same level of quality. That's what's exciting.
Todd McKinnon
executiveAuth0 is very strong in terms of revenue mix internationally. How did you achieve that in the relatively early phase of the company?
Eugenio Pace
attendeeWell, if I could tell you that it was very well-planned and I had all that strategy in my mind, but I would be probably lying if I said that. I think it was a little bit of serendipity, frankly. And it's connected to our remote nature, perhaps. When we started the company, I was living as I'm living today in Washington state. And Matias, Co-Founder of the company, was living in South America back then. And we decided to -- I was not going to go back to South America, and he was not going to come to the U.S. And so we decided to make lemonade out of lemons, and say, let's embrace and take advantage of the fact that we are far away, physically far away. Let's hire people everywhere. Let's hire for talent or time zone and for ZIP code, kind of in that order. And one of the side effects of that and maybe the fact that it's being a developer company and being -- everybody being able to go to the website and click on a button and get a trial account instantaneously, without necessarily having to interact with a human, so we have people all over the world and then we have customers trying us out all over the world. All of a sudden, we were -- we found ourselves in a place where 40% of our revenue, it's generated outside the U.S., and/or outside Americas, I would say. And 60% is generated in Americas, most of it in the U.S. So I guess, the other -- another maybe corollary of this, which is obvious in retrospect, identity and access management is not an American problem, right, it's every application in the world. Any industry, it doesn't matter if you're a start-up or a well-established company, if you are like a 200-year-old manufacturing company, finance, education, any dimension, any industry needs to know who their users are. And so there's some universality that makes us like a global offering from day 1.
Todd McKinnon
executiveAfter the transaction closes, you'll continue to be the CEO of Auth0. What are your initial priorities as you continue to lead the team in the organization?
Eugenio Pace
attendeeWell, yes, that's the plan. The plan of record is to continue our journey as we have already a road map, we have a product road map, we have a growth business road map. So the immediate priority is to deliver on that in the short term. And then, obviously, the second priority for us is to find opportunities of acceleration. And so from a technical point of view, there's some very obvious ones that we can think of, although we were going to take the time during the next -- after the deal closes, hopefully soon. We're going to take the time to identify those and do those with thinking about our customers first. What are the things, what are the problems that they're trying to solve. But 2 obvious ones are -- one is around the anomaly detection space. And so today, we use a lot of signals from the world to identify whether that somebody, it's who they say they are, or is a suspicious log-in or not. Now we can combine signals from your platform, from the Okta platform, with ours, and we can make both platforms stronger by having more intelligence into whether it's location or devices or applications that customers are trying to log-in into. We can combine all of that and increase security just by the volume of log-ins that we both collectively process. The other one, it's clearly -- I mentioned this in another session. It is possible today for a company to log in using Okta into an Auth0-protected application. That's completely supported. It happens all the time. We have a lot of customers with that specific use case. We want to make that relationship even easier to onboard. Today, it's done. There's a standard for it. There's some documentation and protocols to enable that federation to happen. But we can make it as simple as a LinkedIn invite for business. And so that's something that I'm particularly excited into the -- in the B2B world, with workforce on the one side and SaaS applications on the other side, where we can make that connection happen better, faster and more secure.
Todd McKinnon
executiveWe've been hearing great feedback from customers and partners in the market about us joining forces. What have you heard on your side?
Eugenio Pace
attendeeYes, it's been the same. And as I said many times before, we have many customers in common actually today. So we already are in places where they're using both platforms. And so in my conversations with existing customers, with prospects and with our developer community as well, maybe a constituency that it's not -- maybe not as familiar with your platform necessarily. We've heard like they all see this opportunity that we can unlock and that we can accelerate by working together. And it's a big problem. It's a problem that it's increasing as more and more systems get online, as our lives become more and more dependent on digital systems to do everything. 2020 was a good proof of that in terms of things that have moved to the digital world. And look, we -- but it's crazy that we still have passwords around us. It's crazy that we still need to deal with that, with not really -- with the technology that we have today or around us, the experience that we can provide to our customers and through them, to their employees or their customers, it's way, way better than it is now. And that's, I think, what everybody sees and what -- that's what they're looking forward to, what's going to happen in the next few months with us together.
Todd McKinnon
executiveWell, thanks for joining us, Eugenio. On behalf of myself and the entire Okta team, I just want to express how excited we all are to get this transaction closed and move forward building something amazing for customers and an amazing company together. So thank you very much.
Eugenio Pace
attendeeVery much looking forward to it. Thank you. Bye.
Diya Jolly
executiveHi, everyone. I'm super excited to be here with all of you today. You've had a chance to hear from Todd and Eugenio. Now what I would like to do is take you through Okta's product strategy. But before we do that, it's really important to understand this concept of primary cloud that Todd just teed up and how identity has become a primary cloud for all organizations. So let's take a few minutes to do that. Organizations used to lead with business strategy and technology decisions used to be an afterthought. The choice of technology didn't significantly impact the business outcome one way or the other. However, with digital transformation becoming key to powering a company's growth, every business executive I have talked to now considers technology as a critical enabler of achieving their business strategy. CEOs are leading a technology to be a primary growth driver for them in 2021 and beyond. The technologies that truly enable growth for organizations are the ones that have become primary clouds for organizations today. And primary clouds are a foundational part of today's technology strategy across organizations, large and small. Let's look at one example. More than a decade ago, infrastructure was not strategic to the growth of an organization. It was considered a cost center that was slow to innovate and more often than not was considered a bottleneck to innovation. Infrastructure decisions were largely left to mid-level managers and practitioners. Cloud infrastructure changed all that. Today, an increasing number of organizations receive Infrastructure as a Service to be a growth enabler through benefits such as faster time-to-market, better customer experience, rapid innovation and more. Now Infrastructure as a Service is a primary cloud that powers virtually every digital touch point and experience. Just like infrastructure, historically, identity wasn't a strategic priority for organizations. Workforce identity was considered a tactical technology project managed by mid-level IT practitioners looking after active directory. It was perceived to be a heavyweight effort that did not scale and limited innovation and growth. And customer identity was an afterthought, often developed in-house by development teams lacking specialization and identity. But in the last couple of decades, disruptive technologies such as cloud, mobile, social and IoT as well as the move to highly personalized products and services have transformed the dynamics of the digital world. These digital disruptions have marked a new era for us in both our personal and professional lives. Think about how your own life has changed over the last 15 years or so, both at work and at home. We have observed a dramatic increase in the number of digital touch points we engage with daily. Now take a minute to think about the role identity plays in each of these digital touch points. It's ubiquitous. Our workforce needs to be able to work from anywhere and needs instant access to tools, whether that's an office, a spare bedroom or a coffee shop. As consumers, if we experience any friction in our digital engagement, it often leads us to abandon the engagement. This in turn leads to lost revenue for the organization that we were engaging with. Identity is a common control point in every one of our digital journeys. It drives the experience, it enables security, it safeguards privacy. As a result, the traditional view of identity has faded. Identity has dramatically transformed into a primary consideration, just like infrastructure or CRM. This is because identity helps deliver higher productivity, consistent and frictionless experiences and secure access. Let's look at how identity became a critical growth enabler for one of our customers. Today, Ally Financial is on a transformational journey with Okta. They work with over 18,000 auto dealerships across the U.S. and transact billions of dollars every month. Before Okta, the experience these dealers had was very manual and required a lot of call center interactions to support their transactions. This created a lot of friction in the dealers' experience with Ally, high call center costs and lost time in revenue. With the Okta Identity Cloud, they are able to deliver a secure and frictionless experience to their dealers. Now the dealers can transact seamlessly, administer their own passwords, render new credentials for identity and more, all from one place, without the friction of interacting with a call center. The Ally Financial example is not a one-off. Companies, large and small, are leveraging identity as a foundational element of their business and technology strategy. And it is because of this example and so many others like it that, today, identity has become a primary cloud. And Okta has played a pivotal role in shaping the journey of identity as a primary cloud. The Okta Identity Cloud has helped our customers lead with identity to transform their business. Let's take a quick look at a couple of examples to show how identity is ubiquitous across workforce and customer experiences. For example, identity touches every aspect of experience for an employee. Let's take a typical workforce experience and the ways Okta orchestrates an employee access. A new employee joins the marketing department and authenticates into an Office 365 app for the first time. In the background, Okta starts detecting risk for that authentication. That means not only using Okta's device for us to verify that her phone is a managed device, but also relying on Okta Hooks to retrieve third-party threat feed data that provides more risk signals. While the employee only experienced a simple log-in, Okta, behind the scenes, provisions an Office 365 account just in time and automates access to the right license and role appropriate for the specific user. Beyond that provisioning, Okta workflow triggers other actions for the new employee, like an automated company e-mail tailored to new employees joining the marketing department. Lastly, Okta gathers data about the user's behavior and authentication attempts and feeds it into user behavior analytics tools like Splunk through previewed Okta integrations to ensure higher ongoing security. So on the surface, it's a log-in attempt, but underneath, identity is the center of the employee experience. This is identity as a primary cloud, one unified cloud for SaaS, on-prem and cloud native apps. Secure and frictionless employee experience is just one of the ways that our customers like FedEx, Entity, Albertsons and thousands more are leveraging the power of the Okta platform. Let's take a look at it from a customer identity perspective, where Okta is just as integral. A customer is considering whether she wants to buy exercise equipment and lands on a prospect equipment site. As she is browsing for a little while, she's prompted to create an account by just using her e-mail, no need to increase the friction by dealing with a password and account details. In the background, an Okta workflow triggers a Marketo-enabled marketing campaign to kick off. She finds the perfect set of weights and adds a few items to the cart, but ends up getting distracted. Thanks to the e-mail registration, she gets a Marketo-generated e-mail reminding her about the items in her cart. She comes back, and using just her e-mail address, she's able to get an e-mail link to easily authenticate without any friction. Back in her account, she goes to the cart and begins to complete the checkout process. The CrossFit site is using Okta for more than just registration and authentication. They want to make sure high-value transactions have a second layer of protection for customers. Her cart value is above a certain dollar value, so she's prompted for MFA before she completes her transaction. While all of this is going on, Okta orchestrates multiple downstream back-end processes that are triggered based on her evolving identity. For example, Okta is orchestrating how identity flows into the CRM system, which updates the user from a prospect to a customer. Okta also pushes the new customer's identity into the customer success system, assigning the new customer a virtual trainer to hit her fitness goals. These are just a few specific examples where the automation and integration capabilities of Okta opened up so many more. Once again, identity is more than just logging in, it touches every aspect of the customer journey. Thousands of our customers, including MGM Resorts, CarMax, Major League Baseball and more, leverage Okta's capabilities of progressive profiling, marketing integrations, step-up authentications and many others to deliver a differentiated front-door experience for their customers. We talk about how primary clouds address a broad set of critical needs in an organization, which allows them to address huge primary markets. It is this characteristic that also allows primary cloud technologies to broaden into many more large adjacent markets. To explain what I mean, let's take Salesforce as an example. Salesforce started with their core cloud-delivered CRM offering with Sales Cloud. They then broadened into the TAM for service and support software with Service Cloud. Subsequently, they've broadened into the TAM for marketing software through Salesforce Marketing Cloud. And more recently, they've broadened their time yet again to commerce-based software via Salesforce Commerce Cloud. As you've heard from Todd earlier, there is a significant TAM across workforce and customer identity. But there is a massive future TAM represented by the adjacent markets of identity governance, privileged access, Zero Trust network access, privacy and consent management and more in front of us. This is really very exciting. Okay. Now let's talk about where we are going in the future. Because identity truly is a primary cloud, the breadth of use cases that identity touches is infinite, and the adjacent markets are numerous and large. A product or even a set of products will never be able to address all these use cases to become the growth enabler identity needs to be for organizations. At Okta, we firmly believe that the only answer to this is a platform approach, an identity platform that not only provides the core identity foundation but also the tools that empower our customers and partners to innovate and build solutions on top of Okta. This is why my team is acutely focused on continuously enhancing the value and capabilities of the Okta Identity platform for our customers. I think about our platform across 3 core pillars. First, it's unified. Our platform consists of a set of modular components called Okta Platform Services, which can be combined to unlock new use cases, products and resource types. This uniquely positions us and our customers to get to market faster in new business areas and to serve emerging use cases. And it gives us a leg up over competitors with disjointed platforms. It's extensible. Every organization has unique needs and even the most robust suite of identity products can't solve them all. So a flexible platform approach enables our customers and partners to extend and build on top of Okta, beyond the use cases that we can solve today. We do this through our no-code, low-code and pro-code capabilities. And finally, it's integrated. Every organization has and continues to build an ecosystem of tools, applications and infrastructure that helps them grow, new SaaS applications, developer tool chains, analytics engines, infrastructure as core, et cetera. We have built a platform with over 7,000 integrations to enable customers to take an identity-first approach. It is our maniacal focus on these 3 pillars that allows us to truly deliver a platform that allows an identity primary cloud that is a growth enabler for our customers. And the customer success stories that we have, whether it is Ally, FedEx, CarMax or others, prove that our strategy is working and benefiting our customers. Earlier today, we made some key product announcements that will further strengthen our customers' ability to solve large new pain points using the Okta Identity platform. We announced that we are entering 2 new markets, the identity governance market and the privileged access management market, with 2 new products, Okta Identity Governance and Okta Privilege Access, in the first quarter of 2022. The existing solutions in these markets were deployed during the legacy identity era and don't scale to today's challenges of hundreds of resources, ephemeral infrastructure, a global and remote workforce that also faces increased security threats. We believe that using our existing Okta platform and cloud-centric approach, we can transform these markets the same way we did for Access Management. As we broaden into Privileged Access Management, we want to make sure that we don't just build for the way infrastructure used to be, but how it is today. Therefore, we are adopting a cloud-deployed just-in-time user-based credential model that is built not just for on-prem, but also for today's cloud-based dynamic resources. And we won't only restrict ourselves to servers, but also extend to secure other privileged resources such as Kubernetes clusters, databases and more. The new Okta Privileged Access product will join Okta Advanced Server Access as part of our Privileged Access product portfolio. Customers will be able to pay more to upgrade from Advanced Server Access to Okta Privileged Access to avail of our full suite of Privileged Access capabilities. With Privileged Access, customers will have access to enriched functionality like SSH and RDP session capture, attribute-based access controls and new resource types, including databases and containers. When it comes to Okta Identity Governance, we are reimagining identity governance for a cloud-first world. where the number of resources accessed by an organization's workforce has dramatically increased. And the workforce itself has transformed. It's not just traditional employees, it's contractors, it's partners and all of those unique user types that need access to the right resources and the right governance to succeed. Okta Identity Governance will make an organization more secure and more efficient by giving it self-service access via popular tools like Slack, to its most common resources and apps while still providing the right amount of approval for more sensitive apps, data and tools. All of this will be underpinned by customizable and automated business workflows that keep your teams working on pushing the business forward. The new Okta Identity Governance product will join our Lifecycle Management products as part of our governance product portfolio. Customers will be able to pay more to upgrade from their investment in Lifecycle Management or Advanced Lifecycle Management to Identity Governance and will benefit from new functionality, including access request and certification and enriched reporting capabilities. Extensibility of our platform is our second pillar, and it is a really important pillar to allow our customers to be able to solve all their use cases on top of Okta. In addition to building the correct APIs, a key thing that defines extensibility of a platform is the developer experience on top of the platform. How can developers quickly and easily build their apps, their integrations, their use cases using the Okta platform and on top of the Okta platform? That is why, over the last year, we've put a tremendous amount of effort in reimagining the Okta developer platform and the Okta developer experience to speed up time-to-production for developers. We have launched new SDKs, new sample apps, new guides and new best practices for developers. We've built a guided developer onboarding flow as well as step-by-step instructions for developers to get their apps and their integrations up and running. And we've also invested in enhanced developer support across key developer communities like GitHub, Stack Overflow, et cetera, and ensure coverage for every language in every geography. We are also adding to our existing library of open source tools, with tools that make it much simpler for developers to use Okta with popular app platforms, for example, Heroku, and API gateways, for example, Kong. All these changes were made available to developers a few weeks ago, and the feedback from them has been overwhelmingly positive. Finally, you all have heard the big news about Auth0 and hear Todd and Eugenio's conversation. This is very exciting for all of us. The combination of Okta and Auth0 allows us to provide customer identity solutions for developers and organizations of all types. And it accelerates our penetration of the 30 billion TAM for the SIEM market. Additionally, we share the same vision and the same values, and how we operate is tightly aligned. We are going to maintain and invest in both platforms indefinitely, and in the background, we'll be integrating our technologies over time to provide even more innovation. And finally, the third core pillar of our platform is integrations. As I discussed earlier with my CrossFit example, getting a customer experience up and running requires bringing together multiple different tools and technologies in the customer experience stack, like marketing tech stacks, commerce tech stacks, analytic tech stacks and more. This is extremely hard and time-consuming, but it is very important for organizations to do well, to build a seamless end-to-end experience for their customers. To solve this pain, we are deepening the Okta integration network for customer identity with purpose-built customer identity integrations across 40-plus partners from multiple different categories: social log-in, marketing, e-commerce, CRM and data and analytics platforms and many more. While doing this, we are adopting a best-of-breed approach that will allow organizations that use Okta to choose the technologies that are best suited for them. One additional key component of the customer experience is technology to assess risk, respond to fraud and mitigate the risk of account takeover attacks. After all, users and their credentials are soft targets for threat actors. The solutions customers use to safeguard the customer experience are fragmented and often very difficult to implement with an in-place identity solution. Bringing web application firewalls, bot detection capabilities and fraud solutions together with identity is far harder than it needs to be until now. We took our customers' feedback and are launching our risk ecosystem API to ingest third-party signals into our risk engine. We are launching this capability in early access, along with deep integrations with leading providers like Fastly, F5 and more. And now our customers can get a unified view of the security posture of their users across a wide range of risk categories. Last year, we launched our no-code workflows platform service to help with the orchestration of business processes for our workforce customers. Earlier today, we announced the general availability of workflows for customer identity. This will unlock new and valuable use cases throughout the B2B and B2C customer identity life cycle. During customer registration and identity creation, organizations can easily automate an ID proofing flow for their B2C customers and accomplish identity verification through one of our partners like Evident ID. This will allow a higher level of assurance, but at the same time, will allow a frictionless registration experience. With workflows, organizations can now automate the sync of customer identities into their marketing, CRM and analytics stack to ensure a 360-degree view of the customer without needing to write custom integration code. Customers can also simplify administrative operations like notification, reporting and privacy and data deletion requests through workflows. This reduces the volume of tickets, error-prone manual work and custom core and frees up resources to be employed in more strategic business areas, providing pre-integrated no-code experiences to parties. Critical customer experience flows is extremely valuable to our customers, and the feedback from the early access of our product has been resoundingly positive. As excited as I am about what we've talked about this morning, it's worth recognizing the groundwork we've laid at Okta for future innovation. Our focus on having a unified, extensible and integrated platform goes beyond just the ability of our customers and partners to customize and extend us. Today, we have partners that are building businesses from the ground up on the Okta platform. Productive is a great example of this. They have leveraged in an identity foundation delivered through the Okta platform to build an enterprise SaaS management platform. This is just the beginning. We see a future with a robust ecosystem of third-party products that need identity and are built directly on top of the Okta platform. These different categories of third-party apps will further drive the flywheel effect for Okta. And it will provide our customers even more value through the Okta platform. We are in the midst of very exciting times to experience the next technology revolution, shaping the future of every organization. and identity is at the center of this. Thank you for joining me today, and I look forward to sharing more as we continue on this exciting journey for Okta. And now I would like to pass it over to Freddy for our first customer conversation. [Presentation]
J. Kerrest
executiveAll right. Well, thank you all very much for joining us. I'm thrilled to be here this morning with our first guest, and that is Harry Moseley, the Global CIO of Zoom. Zoom, for those of you who might have been living under a rock for the last year, is a Global 2000 video communication company, that it has obviously experienced explosive growth. Harry, welcome. I'm thrilled to have you here. Thank you very much for joining us today.
Harry Moseley
attendeeFreddy, I'm thrilled to be here, and it's been a hell of a year. And as we were just saying in the preamble, great vaccinations are here and the light at the end of the tunnel. We just don't know how long the tunnel is.
J. Kerrest
executiveI can't wait to get out of the tunnel. So let's start a little bit just with a quick overview. Tell us a little bit more about yourself and about Zoom and about all the transformation that you brought there and your time at Zoom.
Harry Moseley
attendeeYes. So it's been a hell of a journey. I joined Zoom a little over 3 years ago after a terrific career working as the CIO for KPMG, the US firm, Blackstone, Credit Suisse and UBS. And I joined Zoom 3 years ago, we were 800 people. Now we're north of 4,000 people. We're processing in excess of 3 trillion annualized meeting minutes a year. We're hosting over 300 million daily meeting participants and maintaining our Net Promoter Score, customer satisfaction and service levels. And so it's truly a -- the way I characterize it is it's testimony, if you will, of the architecture that our founder and CEO put in when he built Zoom 10 years ago, Eric Yuan, a terrific guy, a terrific leader and a terrific technologist. And it's just been truly a transformative year, I think, for the planet, for enterprises around the world, every industry, every country, governments around the world and education as well. So we're now supporting 125,000 schools in 25 countries. So really glad to be here with you, Freddy.
J. Kerrest
executiveThat's amazing. Congratulations on all that success, and thank you for all the hard work at Zoom, certainly. So as the Global CIO of Zoom, you've seen, what I think the understatement might be, a massive shift in technology within not only your own company, but as you said, a lot of the different organizations in the private and public sectors that Zoom supports. With the pandemic and the shift to remote work, it's brought on a completely new set of challenges for organizations of every shape and size. How do you see your role as CIO changing today? And what's your vision for IT at Zoom going forward?
Harry Moseley
attendeeYes. So clearly, sort of as I reflect back on the last 3 years, every year has been different. God knows what's in front of us. So continuing to focus on the mission and the vision, mission and the vision that we established, that Eric established when he founded Zoom, which is -- so our mission is all about empowering people to do more. So -- and that's not sort of -- that's not "more meetings", that's empowering people to do more, whether it's bankers to help their clients, whether it's professional services to help their clients, medical practitioners to help their patients. And it's all about the sort of the consequences of helping all those people, that they can accomplish more. And our vision is clearly about sort of making that virtual event, that virtual experience as good, if not better, than the in-person event. And so we've been very focused on that, obviously, and continuing to focus on that. So when you think about -- and I'm sure you're thinking about this at Okta. When you think about artificial intelligence and IoT and ML and AR and VR and 5G, all these things are sort of -- we're only kind of like just barely scratching the surface of what they can do. And I think that in this new hybrid model that we believe, and many other organizations and surveys have clearly indicated as well, is "here to stay". I think that we're in for a very exciting technological future, if anything else.
J. Kerrest
executiveYes, absolutely. Well, that's great. As we -- as you and I were talking about, just off camera previously, the first time you and I met was a dozen years ago, when I think it was just me and Todd and a trick duck in a garage, so we made a little bit of...
Harry Moseley
attendeeThat's a great PowerPoint presentation...
J. Kerrest
executiveAnd a great PowerPoint. I think the quote, for those of you who are going to be watching this, was when I walked out of the room, Harry, you said that -- he and his colleague said, "Well, that was a great presentation, but we don't know what Frederic was actually talking about." So I'm glad to know that we made a little bit of progress over the last dozen years. And finally, you and I have had a chance to start working together a couple years ago when Zoom became -- first became a customer of ours. Tell me a little bit about how identity fits into your technology strategy. And then when you initially looked for an identity solution after you got your feet set at Zoom, what ultimately made you select Okta?
Harry Moseley
attendeeYes. So clearly, identity and access management has been a key topic since time began in the technology world, right? What's fundamental is that people should have access to data and access to the tools that they need to get their job done. And so as people join an organization, they mature in the organization, their roles change in the organization, the portfolio of applications change in the organization, at a time when you're 10 people in the room, but when you're thousands of people spread across all continents, spread across all geographies, and people are moving and joining the firm, you really need a sophisticated solution like Okta to actually manage it. And you think about the different devices we've got and the different operating systems that we've got. And so Okta -- there's lots of choices out there, but Okta really -- there's a phrase they say about Zoom, Freddy, and you know this too, "You know Zoom, it just works". Okta, it just works. It's kind of like I use it a dozen times a day. It's fantastic.
J. Kerrest
executiveThat's great, buddy. Yes. No, I greatly appreciate that. I know that you have very much that modern approach to application and infrastructure portfolio and obviously have such a broad swath of employees and contractors. So it's been great getting to work with you guys as you've been deploying the Okta service. Obviously, you started just with some enterprise identity management around for your employees, but now you're starting to do some automations throughout the workflows and things like this. As you started your journey with Okta's workforce products, now you've recently expanded to some of our newer products, Advanced Server Access is one of those. Why did you select Okta for securing your identity infrastructure? How do you think about that? And then what value do you see in using a unified platform like Okta across multiple different use cases?
Harry Moseley
attendeeWe -- as a user, right, we -- "We were using it for identity and access management for our employees", and so it was just a natural progression and so to pull it into our server infrastructure. We went from early days, hundreds, to thousands and then now like tens of thousands of servers running in 19 colos around the world. And then you have more engineers and you've got more DevOps, resources, et cetera. And sort of "managing this is extraordinarily complex" as -- and it started with sort of manually setting up some rules, replication of those rules. That got us so far than we did. We went to LDAP. And so -- and one of the big -- one of the most important things that we've always said about security is it's like -- it's the trust and verify, right? So the security officer establishes the rules of the road and tell -- and gives it out and then verifies that the rules are being followed. But with identity and access management, you now have like a complete separation, right, because you've got the onboarding with the profiles, you set up the profile, you set up the access for those profiles. That's done by one group. You've got a second group who are administering the profiles, and now you've got a third group who are enforcing the profiles. So you've got like all these separations. And then on top of that, you've got sort of the fact that if somebody does log on to a server without going through the process, without going through the normal protocols, then we get alerted. And that's like super awesome, and you create a ticket and document why they had to do that and so on and so forth. So absolutely, a natural extension. And it's like having one common platform. It's similar to like a Zoom, right? It's kind of like you do this all the time. You do one-on-one meetings, you do group meetings, you do large meetings, you do webinars because you know you're important. It's just easy, right? It's kind of like -- and you get used to how it works.
J. Kerrest
executiveYes. And not only that, I love it when you guys bring out new features and functions. Sometimes, I'm not the first to figure them out. I remember when you brought out the blurred background some weeks ago. And I got on a number of meetings, and people had this blurred background. I couldn't find it, for the life of me, in the settings. I actually had to call our CMO. He's like, "Do you have the latest version?" And of course, I didn't. So all the innovation that's coming in the Zoom platform is fantastic. I personally really enjoyed also watching Zoom's incredible growth this past year. I've been fortunate to get to know Eric, the founder and CEO, a little bit over the years. And what you guys are doing is phenomenal, and I'm really excited to see what's coming next for your company. How do you think about the future of identity for Zoom and what is next for you as you think about that infrastructure and security road map?
Harry Moseley
attendeeYes. So as I said, identity is critical. So security is critical, making sure not only the right people have access to the data and the solutions. But we're going to continue to sort of continue this -- the program that we've been on in the future as we have in the past. So it's hard to sort of predict the future. I mean if we go back 18 months ago, I remember January of 2020 being on a flight back from Zurich after Davos and sort of reading the newspaper about COVID-19, and then like 6 weeks later, we shut the office down, and then 7 weeks later, the world. So it's hard to predict what's coming next. But clearly, we are hopeful for more continued growth at Zoom. Work, as you know, in -- [ dealing ] with Amazon and Oracle, and so we'll -- I expect that we'll see sort of more experiences in that vein.
J. Kerrest
executiveThat's awesome. Well, look, Harry, thank you very much, as always, for taking time out of your busy schedule to chat with us. I've really enjoyed the conversation and appreciate the story. Of course, we appreciate your insight and look forward to more partnership in the future going forward with Zoom and Okta.
Susan St. Ledger
executiveThank you for joining us today. For those of you who don't know me, I'm Susan St. Ledger, President of Worldwide Field Operations at Okta. I've been in tech my entire career, starting as a computer scientist at the National Security Agency and then embarking on 3 incredible high-growth journeys: joining Sun Micro Systems when it was $1 billion, going to $22 billion; Salesforce at a little over $100 million to $8.5 billion; and most recently, at Splunk, from $675 million to $2.35 billion. I am a self-proclaimed high-growth junkie. And I can't imagine being at a company that was anything but high growth, leading me to why I joined Okta. Todd and I spent a lot of time talking about the market opportunity. And I definitely bought in to his vision of identity as a primary cloud. He made me think about identity differently. Think about your day. Whether you're consuming information, streaming a video, executing a wire transfer or simply trying to access your corporate applications and data, you expect every single one of those interactions to be on-demand and tailored to you. Todd and Freddy recognized that identity was at the core of every interaction between people and technology, which makes this a very large market that will continue to grow. Add to that the tailwinds of the 3 mega trends that we're seeing, cloud and hybrid IT; digital transformation; and security. And now you've got a mega market, one that I cannot wait to pursue. Customer centricity is equally as important. And Okta definitely embraces this principle through our core value of love our customers. I'll be speaking more about that in just a little bit in my FY '22 go-to-market strategy. Lastly, I feel very privileged to be asked to lead another high-growth journey at a company as amazing as Okta. Okta's growth over the past few years has been very impressive, growing revenue to $835 million in FY '21 with a 40% CAGR over the last 3 years, but it's really just the beginning. As Todd explained earlier, in a cloud-centric world, identity has become an even more strategic choice than infrastructure and collaboration clouds. It's the epicenter of an organization's tech connections and offers freedom of choice to adopt any technology. Understanding our customers will help you understand why identity has emerged as a primary cloud. Throughout my presentation today, I will highlight the agility, time to value and the flexibility experienced by our customers who have centralized their identity framework on the Okta Identity Cloud. One of the keys to being a primary cloud is the extensibility of our identity platform. As you heard from Diya earlier today, our platform continually unlocks new opportunities for both workforce and customer identity. Customer identity is the fastest-growing part of our business, even prior to joining forces with Auth0. And in my personal opinion, customer identity market may be underestimated at $30 billion because it's not well understood. Workforce is much better understood because the population of knowledge workers is understood, and it's a market replacement. If you think about customer identity, every human being can have many customer identities. Think about how many different digital services you're subscribed to as a customer. Add to that the fact that it is a market creation opportunity because most companies have no idea how much money they spent over the years cobbling together customer identity solutions in many different ways. But with the explosion of the digital economy and the demand for digital experiences, they are now searching for more secure, standardized and scalable solutions with a faster time to value. Customer identity solutions have a huge role to play in determining which companies survive and thrive in this new reality. Joining forces with Auth0 will further our ability to address even more use cases for customer identity, making our platform even more extensible with their developer-led approach. The Auth0 developer-led approach is very complementary to the Okta approach. Shift left has been driven by the explosion of native cloud micro services. And with the advent of a femoral resources, it's critical for developers to build their applications with core services like identity and security. In addition to great technology, Auth0 long mastered the art of remote work, which will be greatly complementary to Okta's pioneering of the dynamic work environment. And lastly, I'm super excited about the international traction that Auth0 brings to the table. 40% of Auth0's revenue comes from international markets. There are many synergies with Auth0 and Okta's overall go-to-market strategy. The go-to-market strategy for FY '22 is very straightforward. We're going to continue to build on the success to date, which makes a ton of sense because we're only 2% penetrated in workforce and 1% penetrated in customer identity. The foundation of our go-to-market strategy is definitely customer success. I learned in 2004 at Salesforce that high-growth Software-as-a-Service starts with anchoring on customer success. Okta anchored on customers from day 1. Love our customers is in the Okta DNA. When new customers buy Okta, they're taking the first step in their road map to modernize our infrastructure. We ensure that first step is fast and high value, and then we continue to build wins with them along their road map as they expand with us. From that anchor on our customers, our strategy then focuses on 3 key pillars: new logo acquisition, expanding with existing customers and international growth. Lastly, I'm excited about the innovations announced by the product team, allowing us to enter into adjacent markets like PAM and IGA, which will continue to increase our TAM. As you know, capturing a large TAM is about having technology that everyone needs. I experienced the store my time at both Splunk and Salesforce, and it's very clear to me that everyone needs Okta. Looking at the breadth of Okta customers and the use cases is demonstrable proof that everyone needs Okta. Let's take a look. I was impressed to see the team convert so many great new logos in FY '21, over 2,000, despite the COVID headwinds. We added incredible new logos like LVMH and Equifax as workforce customers; Alaska Airlines and Crate & Barrel as customer identity; and State of Iowa and Parsons as Okta Access Gateway customers. Landing new logos is critical to our success because they become expansion opportunities for years to come. Speaking of expansion, FY '21 did not disappoint. This is where love our customers really comes into play. As evidenced by our strong net retention rates, 121% as of Q4, customer success leads to expansion. You heard earlier from Freddy and Harry about the critical role that Okta played in Zoom's explosive growth, which led to an incredible expansion opportunity for Okta. Even more impressive is the breadth of customers that have landed and expanded with Okta. We land and expand with legacy companies and digital natives alike. For example, 188-year-old McKesson is a great example of a mature company that needed to modernize. They were at the bleeding edge of understanding the value of a unified identity framework for their employees, suppliers and customers. This unified identity framework allowed them to quickly adapt to the needs of the remote workforce while, at the same time, securing McKesson's supply manager platform to take the hassle out of medical supply ordering for customers like CVS and Walmart. Remote workforce and B2B supply chain are very common use cases we solve with Okta. Let's take a look at a digital native company, Kiwi.com, which is a European travel website. They have experienced rapid growth with greater than 3,000 employees, millions of users and billions of searches. But their customer service employees were experiencing tremendous friction, trying to get access to a variety of apps in order to do their jobs. Kiwi.com selected Okta as a critical part of their zero trust strategy to securely and seamlessly access the technology needed for the employees to do their jobs more quickly, improving annual productivity by over 6,700 hours. Streamlining customer care is a common use case with Okta. And our land and expand motion includes SMB, enterprise and Global 2K customers alike. GitLab is an incredibly successful SMB customer. They had a remote work strategy from their inception, and there are over 1,300 employees today across 67 countries. They embarked on an 8-month journey with Okta to secure more than 120 cloud apps as a critical part of their zero trust strategy to allow their employees to work wherever and however they want it. Trusting Okta led to a 90% reduction in identity compliance costs and 35% reduction in employee onboarding. Shifting to look at the Global 2000. We have tremendous upside. We are only 25% penetrated in a cohort that delivers 6x the company average ACV. Let me share a couple of examples of our success within the Global 2000. T-Mobile initially deployed Okta to one of the largest retail fleets in any industry, simplifying access to retail point-of-sale applications for tens of thousands of employees. Next, T-Mobile put Okta at the center of their customer experience strategy. With over 200,000 customer-facing T-Mobile representatives, they needed to streamline their customer care process. They needed to eliminate the need for their representatives to toggle between applications with separate login credentials, which was creating friction for employees and customers alike. Given the success in retail and customer experience, it was no surprise that T-Mobile then called on Okta to help them with their merger with Sprint to onboard 30,000 employees to ensure success day 1. FedEx is another great example. FedEx relies on Okta as a critical part of their zero trust strategy to quickly and securely deploy applications to its workforce of over 500,000. In early 2020, Okta helped FedEx deploy 5 critical cloud applications in 36 hours to enable their essential workers to deliver during the pandemic. FedEx quickly expanded and now has well over 350 SaaS applications with Okta and many, many more to come. Our land and expand motion clearly spans all verticals. Another great example is a health care tech company called athenahealth. athena called on Okta to help them provide secure, cohesive, personalized patient experiences across 8,000 patient portals and 4 million patient accounts, not to mention over 160,000 providers. Protecting patient data was a top priority. So they leverage Okta's HIPAA-compliant cell to meet those requirements. Once they had the strong identity foundation in place, they were quickly able to launch a telehealth solution in response to COVID-19. Like so many other customers, athenahealth recognized that once that strong identity foundation is in place, it frees them to focus on key innovations and improve the health of patients and productivity of its providers. As you can see, we have landed and expanded in legacy and digital natives, SMB and enterprise across all verticals and the Global 2000. Since expansion is such a big growth lever for us, I want to share a few customer examples that show the various journeys that customers have taken with Okta on their expansion round. Thus far, we've covered customers in a wide range of industries, but I would be remiss if I didn't talk about public sector. This is a state agency who landed with us with $1 million opportunity and expanded to $4.6 million all in a span of 1 year. Despite COVID, they realize that they must continue to serve their millions of residents with a remote workforce. They replace their custom build identity system with Okta workforce and Okta customer identity in order to secure access for 8,000 employees and millions of residents. The continued expansion came from onboarding contractors, additional employees and additional digital services for their residents. Next up, identity proofing fraud prevention for COVID loans and unemployment benefits, which is a use case we've solved for several other state agencies already. Remote workers and digital citizen services became an imperative for many federal, state and local agencies. Add the SolarWinds' crisis to that and you have the perfect storm for agency modernization. The second customer journey I'll share with you today is a Global 2000 tech company with a lifetime value spend of $17 million. They're a highly acquisitive company focused on optimizing for M&A agility. They called on Okta to provide a single source of identity for all SaaS applications. They started with Okta in FY '13 to secure its workforce. But through continuous M&A, they expanded on both workforce and customer identity. They had 3 criteria: day 1 access, reducing IT burden and providing seamless experience for end users for both workforce applications and B2B portals. The modernization journey for this customer continues. They're constantly looking at new ways to enhance the digital experience for their customers. M&A agility is a highly repeatedly use case for Okta. It's clear that everyone needs Okta, regardless of their size, age or industry. Now that I've covered customer success and our land and expand motions, let me touch on international expansion. We currently operate in 60 countries, but of course, we've tiered our markets to guide our investments and our route to market choices. For example, U.K., France, Germany, Japan and ANZ are key international markets for us. We've made investments in employees, real estate, marketing and partnerships and complete support infrastructure. However, the demand outside of our top markets is indicative of the broad-based horizontal opportunity that exist. We serve those other markets through partners. They are made up of regional resellers, distributors and integrators. We're also investing in global distribution partners. For example, we recently launched our global partnership with Amazon Marketplace to drive increased awareness in lead generation and accelerate the deal velocity from SMB to enterprise. And while we're investing to expand our international market reach, we're also investing to ensure we can effectively serve our large global customers. As an elite AWS technology partner, Okta is now able to co-sell with AWS' over 9,000 sales reps to the Global 2000. AWS recognizes Okta as an identity leader with an expansive application integration network and our ability to quickly and securely migrate on-prem workloads to the cloud. Okta's product leadership position and our partnership enables AWS to differentiate themselves in the marketplace versus other public cloud service providers. In addition, we continue to invest in our growing global systems integrators network. We recognize that they are at the center of digital transformation for so many of our customers. PwC, Deloitte and Accenture have all accelerated their Okta practices this year, all with high double-digit growth. We're seeing these investments pay off at mutual customers, including those shown here, and we're still in the early days. Of course, none of what I've talked about is possible without a great team. The key to my success my entire career has been hiring and developing exceptional talent. I'm excited to share that we recently hired 2 exceptional leaders who have deep experience in driving revenue and brand growth. I've been fortunate enough to work with both of these leaders in prior companies. Steve Rowland, our new CRO, brings 20-plus years of experience joining us from Splunk. Steve is not only an exceptional sales leader but he's a business leader who brings operational excellence with a deep commitment to customer success. I'm confident he will help us accelerate our penetration into the growing identity market. Kendall Collins is our new CMO. He's a 2-time CMO from Salesforce and AppD, where he led the cloud computing rebrand, the transition to multiproduct and global expansion. With the acquisition of Auth0 pending, Kendall is well positioned to help Okta win the hearts and minds of developers and CXOs alike. In addition, both Steve and Kendall are experienced global leaders who will accelerate our growth in global markets. I'm thrilled with the caliber of talent we're attracting and the strength of our existing Okta team. Okta is a destination company. With that, let's bring it back to my key priorities for this fiscal year. In closing, I'm very bullish on the opportunity that we have at Okta. The 3 megatrends I mentioned earlier, cloud and hybrid IT, digital transformation and security, are definitely tailwinds. And while we're all hopeful that the pandemic is nearing the end, the way in which companies work and how they serve their customers has changed forever. These megatrends will continue at an accelerated pace. I am excited about the team and the opportunity to lead another high-growth journey at a company as amazing as Okta. I look forward to working with so many of you once again and meeting those of you that I haven't engaged with in my past. Thank you, again, for your time today. And now I'd like to pass it back to Freddy for another great customer conversation.
J. Kerrest
executiveWell, thank you very much, Paul, for being here. We're thrilled to have you. Obviously, Fox is a Fortune 500 news, sports, entertainment company. Tell us a little bit more about the company and about your role and how both of those have changed over the past 2 years.
Paul Cheesbrough
attendeeWell, Freddy, firstly, thank you. It's always a pleasure chatting to you and the Okta team. But our relationship with Okta goes back quite a long way, but I think the kind of concurrent theme with working with Okta is being transformation and media as an environment and being a technologist inside a media company throughout my career has been very, very focused on driving transformation initially in the enterprise, which is where the disruption occurred with kind of computing and the shift towards software-as-a-service and cloud-based platforms, and we were very early adopters of Okta during that time. But more recently, obviously, very focused on direct-to-consumer and are really making sure that our digital services and our content reach consumers however they want to receive the service itself. So streaming is a kind of key growth area for us, and we've really started to evolve the relationship with Okta into that space as well.
J. Kerrest
executiveYes. That's great. As you mentioned, Fox has been a long-time customer of Okta, as I still remember the breakfast that you and Todd and I had many, many years ago in San Francisco and you kind of looked us both in the eye and said, "Are you guys for real? And is this thing serious?" So you took a big gamble on us, and I'm glad that it paid off. Your first foray with Okta was obviously to help secure your workforce, so employees, contractors, consultants, partners. How does Okta help support Fox's zero trust strategy?
Paul Cheesbrough
attendeeWe know the initial relationship and the problem we were trying to solve when we had that breakfast, Freddy, was really reducing friction for the employees. So as we were deploying these cloud-based tools, authentication into those tools was complex and you brought that solution to the market around single sign-on and just reduce that friction, and it made the employees' life much, much easier and better, especially on a Monday morning when they came into work to log in. That evolved pretty quickly, and I think we see you as a highly strategic partner now on the security aspect of our business here on the front line defense. You see a lot of activity, not just through our own business but through all the businesses that you support, and you can give us a really kind of strong aspect of security, and you've really kind of facilitated the zero trust model that we've moved towards and moved away from that hard line perimeter on the edge into something that strengthened depth, ran all the platforms. And I think without Okta, we just couldn't have done that and done it in a way where employee satisfaction and the friction of the employees' kind of experience is minimal, which, again, you've got to balance those 2 things together. But we're very, very forward-leaning on Zero Trust. We have been for a number of years, and our security team have been working closely with Okta to evolve that, and we've been very, very pleased with the platform.
J. Kerrest
executiveThat's great. And I know the most recently, as Fox Corporation has spun off as an independent company, it also gave you an opportunity to rethink your infrastructure and how you reimagined building a company, frankly, without active directory at the core, right?
Paul Cheesbrough
attendeeYes. Well, we did this big transaction with Disney 2 years ago, almost to the day, actually, Freddy, we closed it. And a big decision that we had when we spun the current Fox company out of that transaction was to leave our legacy systems behind, and we were fairly aggressive on that front. And part of what we left behind was AD alongside our financial systems, a lot of the old, horrible sort of clients server legacy. So I can sit here now today, and we've completed the projects where we've stood a lot of greenfield applications with cloud partners. And we are now truly zero legacy in AD. Getting rid of AD has been a big part of that, and we've managed to clean up the architecture for the enterprise through that. And again, just going back to the security point, security has really been a central part of the consideration there. And we're in a very strong place now, Freddy.
J. Kerrest
executiveYes, that's great. So switching from the workforce side, you also recently purchased Okta for customer identity. So how is Okta supporting your customer identity needs? And why did you decide to replace the homegrown solution that you previously had with Okta for the go-forward strategy?
Paul Cheesbrough
attendeeWell, again, this is a conversation, Freddy, you and I and Todd have had for a while, I think there's been a big opportunity here. And the piecemeal solutions that have been out there on the consumer side are scalable but they've not really been industrial-grade. And given that identity is your business, we feel, again, not just that we're buying a solution from you, but we're in a partnership with you, and there's a lot of road to run around features, functions and really the power of the platform on the consumer side, taking what you've learned on the enterprise side and applying it but also putting additional building blocks and things like the or Auth0 transaction that you're in the midst of at the moment, or a big signal of intent to customers like us that you're serious about the consumer side. And we made the commitment a few months ago, as you know, Freddy, to work with you on that front. And just to give you some highlights of the sorts of things we're looking at doing. So if any of you have tried to log in on your kind of TV screens into streaming product, you know it's a painful process. We're working with Okta to kind of really make that a lot simpler whilst retaining security as part of that. And then across all of our FOX products having one single platform at the center of it so our consumers can seamlessly move, not just between products, but between devices. And from an engineering point of view, this stuff is not that simple or easy, unlike the enterprise where you can control a lot of the variables, the consumer landscape is a lot more mixed. So we're excited about the partnership. We're kind of in the beginning of it, but a lot of the power of what we see on the enterprise side is already delivering value on the consumer side, Freddy.
J. Kerrest
executiveYes, that's great. And we thank you very much for the partnership over the years. As you mentioned, certainly, you've had a big impact and say on our product road map, as we think about the customers' perspective and getting that feedback. I know that some of the things that is top of mind for you is not just security, but also performance, reliability, resiliency, throughput. You have these big bursting events that were top of mind as well. So I'm glad that we were able to work with you on that. And as this audience has heard throughout the day, we believe, obviously, that identity is becoming a primary cloud and identity facilitates choice and flexibility, which you just talked about, while also enhancing security, which is important for all of our customers. What does choice and flexibility really mean to you as you think about it at Fox, Paul?
Paul Cheesbrough
attendeeWell, I think the -- I mean, there's a couple of angles to that, Freddy. If you think about our employees really treating them as consumers of technology, best-of-breed is something that we've been very, very forward-leaning on. So we've never, really, as we've evolved into the cloud, thought about single vendor solutions across the piece. We've gone very, very deep with individual partners and brought those together. So a really simple example is we use Slack for collaboration. We use Office 365 for email. We use Box for file management. We use Zoom for video conferencing and so on, and Okta is that umbrella that brings that together into a cohesive experience. And without Okta, frankly, that would have been a very piecemeal experience. So as a purchase of a technology, Okta allows that flexibility to really plug those solutions together and to give employees that kind of single starting point in a secure but also a usable way to kind of do their work. And identity is at the center of that, and it carries into those apps and those products in a really coherent way. And I think, again, it's the tip of the iceberg around what you're doing on the identity side, but there's a huge amount of potential that we see, especially in the workplace with Okta at the center of that. Security is one piece, but I really do think analytics, there's a whole kind of breadth of things that I think you're placed incredibly well to evolve into.
J. Kerrest
executiveWell, let's touch on that very quickly to wrap up our conversation here. We've talked a lot today about some of the value that we've been fortunate to help you with at Fox through the years. First, on the workforce side. Now most recently on the customer identity side. But let's talk also about the future, right, and how you're thinking about the future of identity for Fox. You mentioned a couple of things there around security, around continuous improvement for the identity experience and around frontline positioning in your ecosystem for your employees. What are some of the other things that are top of mind? And what are you looking forward to with identity at Fox?
Paul Cheesbrough
attendeeSo I'd love identity to be something that goes everywhere with you but sits more in the background than in the foreground. So if you think about a lot of the payments and e-commerce systems on the web at the moment, think about Affirm or Stripe or companies like that, they're able to take a lot of the friction around purchasing out of that purchasing process but at a very, very high level of security in the background. And I truly think that the evolution of Okta, it can be much more of a kind of background process from an identity point of view where it goes everywhere with you without kind of interfering in the user experience. And for us, both on the consumer side and on the employee side, that's kind of a win-win because if you take the friction out of that experience on the front, which Okta have done a great job around already, I think there's a lot of technology evolutions with how you use data, how you use predictive. And a lot of your product team are already looking at this, but how you use predictive analytics on understanding whether someone has the right to access a product or an app as a background process, it's a huge amount of opportunity there whilst maintaining that kind of security aspect of what you do.
J. Kerrest
executiveYes. That's great. Well, Paul, thank you very much for the partnership over the years with Fox. We greatly appreciate it. Thank you very much for taking time out of your busy schedule to chat with us today. I know that this has been very insightful for me and probably for a lot of the audience. So thank you for taking time, and it's great to see you as always.
Paul Cheesbrough
attendeeThanks, Freddy. I appreciate the time. [Break][Presentation]
J. Kerrest
executiveClaude, it is great to see you. Thanks all for being here today. How are you?
Claude Pierre
attendeeI'm fine. I'm fine. Great to see you as well.
J. Kerrest
executiveGreat. I can't wait to come and see you in person sometime soon, this year, as promised. So I'm very excited, everyone, to be joined here Claude Pierre, the Deputy CIO of ENGIE. ENGIE is a global 500 energy and services company. They have over 170,000 employees around the world. So Claude, perhaps you can just start by telling us a little bit about the company and about your role there.
Claude Pierre
attendeeYes. So you're right. ENGIE is a world energy player and the world leader in the energy transition. So ENGIE is a big group, more than 170,000 employees, as you mentioned. We operate 24 business units in 70 countries. ENGIE is focusing its strategy on renewables, networks and customer solutions. I've been the CIO -- Deputy CIO at ENGIE for over 5 years. In my role, I'm responsible for what we call the digital foundations and I'm responsible for cybersecurity as well.
J. Kerrest
executiveThat's great. So as the Deputy CIO of ENGIE, you've seen tremendous growth in the past few years across all the different business units. With so many users across the globe, what is your approach to technology and that digital foundation, as you talked about? How do you think about that? And what does that mean at ENGIE?
Claude Pierre
attendeeWhat does that mean? Over the past few years, we have been very focused on leveraging technology to transform the group, which is a very large group with a long history. Introducing new ways of working based on digital tools. We have been moving from a siloed organization with a very fragmented IT landscape to a global distributed organization sharing common tools. To achieve this and to achieve this transformation at scale, we have chosen to build brand-new digital foundations on top of the legacy systems and to make the new common tools available to the whole group through this digital foundation. And as we further develop the common tools, the legacy ones locally got redundant and then decommissioned. So the key component in this transformation is our digital foundations. It's key for addressing our needs and it's key also for the future. They have been built on the cloud, on the cloud only. It's a cloud-only solution. And it combines various transversal services serving the whole group in all geographies, as we say, from Santiago to Shanghai. And it delivers network services, security services and, of course, identity and access services, which enable any users from any business units, whatever the location is, whatever the underlying technology is to access the common tools from anywhere with any device with a consistent and secure user experience. This is the way we approach the transformation of the group through the technology.
J. Kerrest
executiveThat's fantastic. I love it. So that's almost like a perfect Okta customer proposition. So it works out great. So you've been a customer for almost 5 years now. I was thinking back to the first times that I got to come to Paris and meet you and spend time with you and your team. What initial challenges were you looking for when you thought about an identity solution, right? You didn't go out and you said, "Well, we're just looking to find identity." You had specific ideas of what kind of solution and how you're going to do that. I remember that very well. And what were some of the key criteria that went into your decision when you decided to partner with Okta beyond just being able to work with me, of course? What were some of the other key decisions that you had there?
Claude Pierre
attendeeYes. It was 5 years ago. We started our journey, and we started our journey with Office 365. Our key challenge was to deliver to our 24 business units consistent and reliable global solution, Office 365 being the most emblematic, of course. We had, at that time, a double challenge, I would say, because on one hand, the IT landscape was very fragmented, very diverse, and we had no control of it. And on the other hand, the leadership team gave us 6 months to deploy a global collaboration platform across all the geographies. So we had to make sure that the solution would be accessible by our users from any site, whatever the local infrastructure is. Microsoft-based or not, connected to the corporate network or not, it has to work. And this relates directly to the other challenge that we had about identity and access management, how to make the system accessible from any users in a secure way, with a great user experience, and make it accessible to any employee, whatever business unit he works for. And of course, as we are global, around the globe, it has to be reliable, 24 hours a day, 7 days a week. It has to be always on and it has to be secure, of course. So this is -- these are the key challenges we were facing at that time. And this is why we looked at an identity and access management tool. And we looked at Okta, and there are -- I would say that Okta made some key success factors that we were looking at, at that time. The first one was to be a neutral or independent platform, which means able to connect to any technology and to be a kind of agnostic platform as our landscape was very diverse. The second important point was the customer centricity of the team because we had some specific challenges to integrate various environments. And we needed to -- Okta to develop some additional features. And the Okta team and the Okta management team, you, Frederic, and the support team were very efficient in delivering those functionalities on due time to allow us to go live at the planned date. And the last important key element that we are looking at was the ability of the system to work 24 hours a day, 7 days a week, to be always on, as mentioned, as we needed to -- we started with Office 365, but we had to deploy the solution across the whole application portfolio. And here, we are talking about 600-plus application with some critical business apps. So this is why we found with Okta, the -- I would say, the key partner to help us in this journey.
J. Kerrest
executiveYes, that's great. I remember it like it was yesterday, 5 years have gone very quickly. I'm glad that we got started that way, and I'm glad that the partnership has gone so well over the years. You began the journey, obviously, as you just mentioned, with Okta for ENGIE's workforce. So really thinking about those 160,000, now 170,000 users, I think we tried to deploy 600 applications to get going, which went very well. And then now you're starting to expand from the employee side over to the customer identity for both partners and suppliers. So that was kind of the second step. And actually, just recently, you're starting to implement Okta for consumer-facing applications. So can you describe a little bit what led you to expand your use of Okta? Obviously, you had a certain amount of success and the level of comfort and support in the product and the platform and the company. But you started with your employee set, you went to suppliers and partners. And now you're obviously going to the customer-facing piece. What value have you seen from using a unified platform to address all of these multiple use cases?
Claude Pierre
attendeeYes, we are engaging with the next step with Okta. And as you mentioned, we are now starting to expand the use of Okta to our B2C market and starting with the French market, where we are a leader there. And just to give you an idea on the magnitude of the project, we are -- we serve in France 11 million of customers in the B2C market. And we are dealing with different type of customers. Of course, there are different segments, different type of services. And each has a different digital experience today. So one of our key driver to expand Okta, the first one was to unify the customer experience across all the customer portals, all the customer apps in an efficient and secure way. But it was key for the business in order to improve the customer experience. But the other challenge that we are facing was related to security. So we currently have different in-house identity management systems, and this leads to security challenge, of course, as you can imagine. So we needed really to improve the security in a world where the threats are bigger and bigger. And in a zero trust world, we really need to rely on a solid platform for identity and access management. So after having success with Okta for the B2E, for the B2B for us, it was very logical to go to Okta for B2C, and it was a consistent improvement. And so this was a very easy decision to make. It was just extending Okta, as we are very happy with what Okta has been delivered over time. And as mentioned before, we have really realized that Okta is always on. It's a no-brainer, I would say. So the decision was very easy to make. And we are sure that it will bring us lots of value for the customer experience and for the security.
J. Kerrest
executiveThat is great. I'm very glad to hear the success that we're continuing to have together. We're obviously very proud of our partnership with ENGIE. I thank you and the entire team for all the work that we've done over the years together. It's really been a pleasure, and I'm always thrilled to hear about the different ways that we continue to be able to add value for your organization. To wrap up the conversation, I mean we've already talked here about the B2E part, the employees, the B2B part with your partners, the B2C part with end customers, but there's even more in the future. How are you thinking about the future of identity at ENGIE? You've obviously taken such big steps over the last 5 years, but I know that's not the end for you. There's a lot more beyond that.
Claude Pierre
attendeeYes. We'll make sure that the B2C project will be a success, and I'm quite confident about it, and it should be live in the end of this year. But this is not the last step because we are in, I would say, in an open world where interaction are key. We have to interact with our employees, with our customers, with our partners. And in this digital world, we also have to interact more and more with things, with meters, with sensors. So we are continuing to expand the identity and access management to all the other things we have to interact with. And this could be the next step for us, machine-to-machine or Internet of Things. This is the next move that we are considering at ENGIE.
J. Kerrest
executiveThat's awesome. The next frontier, I love it. Well, look, Claude, thank you very much for taking time out of your busy schedule to chat with us. We greatly appreciate it. And thank you also for sharing some of the ENGIE story, which is always great to hear. We're grateful for the partnership over the years, and we look forward to many more great years working with ENGIE and Okta.
Claude Pierre
attendeeThank you, Freddy. My pleasure.
J. Kerrest
executiveThank you. [Foreign Language]
Michael Kourey
executiveThank you, Freddy, for that terrific conversation with ENGIE. And hello, everyone. It's great to be here with you today. It's been about a month since I officially started as the CFO at Okta, and I'm more excited than ever about the growth opportunity in front of us. Before I get into business content, I thought it would be helpful to highlight some of the reasons why I'm so excited about joining Okta as CFO, which I'm sure aligns closely with why you're excited about the company as well. First, as you heard from Todd and our other executives today, identity is becoming a primary cloud. Okta is a customer-first, cloud-first platform that is helping customers, large and small, with their workforce and customer identity demands. And with this strong foundation, Okta is recognized as a global leader in this space. Second, with this backdrop, Okta has the opportunity to grow into a multibillion-dollar revenue company over the next few years. In fact, I liken joining Okta to joining Google in 2003 or Salesforce in 2010. With the pervasive need for identity and Okta's unparalleled solution and growing customer footprint, we believe there are significant tailwinds in the business as well as numerous growth vectors. Third, the team is exceptional. I've had a unique view of the business as Okta's Audit Chair over the past 5 years, and I've now had the pleasure of working much more closely with Todd, Freddy and the entire management team at an operational level. I'm continually impressed with not only their operational acumen but also Okta's culture of authenticity, transparency and the winning DNA that's at the core of this company. I'm delighted to be joining at such an exciting time for Okta and look forward to presenting at many more investor days to come. Now let's get into the core content. In my presentation today, I'll be highlighting 3 key points. First, Okta has built a strong foundation for growth and at scale. We've demonstrated we can execute for our customers and other stakeholders across all the key facets of the business. And we're building on this foundation as we go from approximately $1 billion revenue company this year to a multibillion-dollar revenue company over the next few years. Secondly, the markets in which we participate are huge. We have multiple growth vectors as we broaden and deepen our solutions in the identity market. Thirdly, while we have a massive addressable market in front of us, we are focused on ensuring that our investments have a great financial return. As I'll elaborate upon later, the financial profile for our business is very attractive. I'll start by discussing the strong foundation we've built. Here are just a few of the company's important financial accomplishments. One, revenue grew 43% last year, reflecting the robust demand for our products and Okta's continued solid execution. Two, RPO growth is very strong, with total RPO growing 49% as we exited FY '21. Three, our dollar-based net retention was 121% last quarter and has been above our historical range of 115% to 120% for the past 4 quarters. Four, our non-GAAP gross margin was 78%, increasing over 100 basis points year-over-year. Five, our free cash flow margin was just over 13%, up over 700 basis points versus last year. And while our spend was lower in FY '21 due to the pandemic, this demonstrates how much operating leverage is in our model. And finally, sixth, we ended FY '21 with over 10,000 customers with record customer growth of 600 in the fourth quarter and an increase of over 2,000 customers for the year. This is a great start and provides a strong foundation, but it's just the beginning. Before I dive into more detail regarding our business, I'd like to highlight one key metric that may be relatively new to some investors. I know most of you are experts on RPO, but for those of you who are newer to SaaS or cloud subscription software models, I'll briefly discuss RPO and why we think it's the more meaningful metric for us when viewed alongside revenue and billings. RPO provides the most complete picture of backlog as it includes all contracted, noncancelable customer subscription dollars, both billed and unbilled. Current RPO, the portion of RPO that will be recognized as revenue in the next 12 months, is also important. Current RPO removes the effects of billings duration and timing variances and also removes the effect of contract duration. Lastly, while there are many positive attributes of RPO, it can be impacted by the timing of renewals. For example, even when we know that the renewal is coming, if it hasn't been contracted and signed, it won't yet show up in RPO. Nevertheless, overall, RPO and current RPO provide a more predictable and consistent view of our business. And as we noted in our last earnings call, we believe that on an organic basis, excluding Auth0, current RPO growth, a key leading indicator, will outpace subscription growth throughout fiscal year 2022. Speaking of guidance, as you have seen in our press release this morning, we reiterated our Q1 and full year FY '22 guidance. As a reminder, these numbers are organic and do not include anything from the acquisition of Auth0. We'll provide you more detail regarding the combined company's outlook in our first earnings call after the transaction closes. With that, let me discuss the second reason why I'm so excited about Okta, the large addressable markets and the multiple growth vectors that we have within them. As you heard earlier from Todd, Freddy, Diya and Susan, identity is becoming a primary cloud driven by the 3 macro trends that have been and will continue to drive our business going forward, continued cloud adoption and hybrid IT, digital transformation and zero trust security. These factors have only been accelerated by the pandemic and are driving Okta's massive TAM opportunity. Over the past year, we believe there has been a meaningful increase in our TAM. The workforce identity market was $30 billion last year. However, increased use cases within enterprise customers have expanded our reach to a broader segment within our target companies resulting in our TAM increasing to $35 billion. In addition, you heard the exciting news that we're expanding into IGA and PAM, which adds another $15 billion of market opportunity for a total workforce TAM of $50 billion. Looking at customer identity, we had previously estimated this market at $25 billion. However, due to increased utilization driven by customers' digital transformations, we estimate that the market opportunity is now $30 billion. Of course, we're also excited about the prospect of accelerating our penetration into this market with a complementary platform of Auth0, and I'll get into that a little bit later. All in, we're looking at a massive $80 billion market opportunity, and we're just scratching the surface. We have 4 key growth vectors that we believe will enable us to capture this large market opportunity: innovation in our platform and network, our land and expand model, international expansion and our growing partner channel. First, let's take a look at innovation in our platform and the network effects that it creates as customers leverage the benefits of the Okta Identity Cloud, which spans across both workforce and customer identity. One example that highlights the value of our platform is Okta ThreatInsight. This feature aggregates data across Okta's customer base and uses this data to detect malicious IP addresses that attempt credential-based attacks. With more integrations, more customers and more users, we're able to capture more signals and detect more malicious activity, providing greater protection for the benefit of all of our customers. Over time, this growing customer base helps Okta become the identity standard that connects all the different pieces of applications and technology together. This platform, the network is one of the main drivers of the other 3 vectors of growth for Okta. We've been successful with the second vector of landing and expanding with our customers, which is reflected in our dollar-based net retention rate. I mentioned earlier that the net retention rate was above our historical range of 115% to 120% for the past 4 quarters. This strong rate is grounded in high-growth retention, coupled with strong upsell and expansion across our products' end markets. We're very proud of this result, especially when taking the pandemic into account. With our new products and offerings, we believe we will continue to execute well on our land and expand opportunity. Our base of large customers continues to grow rapidly as well. This is a result of both our focus on landing new large enterprise customers, where the initial lands are getting bigger, and our successful expansion strategy. We now have almost 2,000 customers with an ACV of greater than $100,000. Notably, both our $500,000 and $1 million ACV customer cohorts grew over 50% last year. We've made great progress with large enterprise customers, and at the end of Q4, 25% of the Global 2000 were Okta customers, up from about 20% last year. Looking forward, we clearly have the opportunity to further penetrate this customer category and also expand in the 25% of the Global 2000 where we're already present. And as Susan highlighted earlier, with an average annual contract value for Okta's Global 2000 customers at approximately 6x our company average, further penetration of this customer category represents another significant growth opportunity for us. Susan gave you a deep dive into a couple of real customer land-and-expand examples. To further illustrate this point, I think it would be helpful to give another example of how our land-and-expand motion works. Many of you recall this slide from prior Investor Days as it's a useful illustration of how successful Okta's land-and-expand motion is. This chart shows our top 25 customers in order of their initial purchase date. They span a wide range of industries [indiscernible] biotech and healthcare. This is a result of financial services and manufacturing. The [ grade ] shows when the initial customer purchase was made. The multiple purple boxes indicate when there was an incremental increase in ACV from the prior quarter. As you can see, there are many purple boxes. Lastly, the green box indicates the quarter in which the customer exceeded $1 million of annual contract value. The customers that we landed back in FY '14 and FY '15 took 12 to 13 quarters to reach the $1 million milestone. Notice that more recently, we are consistently landing customers with an ACV of greater than $1 million from the very beginning. And even after we hit these $1 million milestones, we still have significant upsell opportunities with these customers. International is the third growth vector. With 16% of our revenue coming from international locations, this represents a significant growth opportunity for us and the reason it's a key focus area. Here's a perfect example of how big the opportunity is. I mentioned earlier that we count about 25% of the Global 2000 as customers. Of those roughly 500 customers, 61% of them are located in the Americas, while only 35% of all companies in the Global 2000 are located in the Americas. Conversely, just under 20% of our Global 2000 customer base is in the Asia Pacific region, while 40% of the Global 2000 are there. In key markets such as the U.K., France, Germany, Japan and Australia, New Zealand, we will continue to invest in expanding our direct go-to-market motion. In other regions, we'll partner with resellers, distributors and integrators to expand our reach. As we invest more in these international regions, we expect our extended global reach to be yet another growth tailwind. Our partner ecosystem is our fourth growth vector. Today, we operate in 60 countries with partners including regional resellers, distributors and integrators supporting our international strategy outside of our key markets. We're investing in partnerships to ensure we're able to effectively serve our large and expanding global customer base. As Susan mentioned earlier, we're an elite AWS technology partner and are able to co-sell with AWS's over 9,000 sales reps. We also continue to invest in our growing Global Systems Integrator network. These GSIs are at the center of digital transformation for many of our customers. PwC, Deloitte and Accenture accelerated their Okta practices last year, and we believe we are still in the early days of these relationships. Now let me talk a little about Auth0. There are many reasons why we are so excited about the pending acquisition. I'd like to highlight just a few of the compelling and significant synergy opportunities. First, the acquisition accelerates our penetration of the large, mostly greenfield, $30 billion CIAM market. Combined, Okta and Auth0 will be able to offer customers greater value. For example, the combination of security data will enable our products to provide more in-depth signals enhancing the value of threat insights. Additionally, together, we will be able to cover the spectrum of buyer personas from the thriving developer community to the C-suite. Second, Okta and Auth0 have complementary products. Auth0's developer focus results in the diverse toolkit that customers use to build apps the way they want with a high level of customization. This complements Okta's enterprise-focused products, which are geared more towards CIOs and CSOs whose requirements include scale, easily accessible support and certifications such as HIPAA and FedRAMP. Third, Auth0 has established a strong international presence and generates approximately 40% of their business outside the U.S. Together, we can leverage each other's strength in international distribution to further expand our reach. Fourth is the tremendous cross-selling opportunity. The vast majority of Auth0's business is focused on customer identity, so there's a large opportunity to sell our workforce products into their customer base. And fifth, Auth0 can be introduced into Okta's robust channel network, enabling even further reach and momentum with customers worldwide. All this synergy is additive to Okta's strong organic motion, and we look forward to sharing more about the combined company's financial outlook following the close of the acquisition. Looking to our financial profile, the future has never been brighter for Okta. While we can't provide a combined company financial model until after the transaction closes, I want to give you more insight into how we think about our long-term financial profile, which is built upon 3 pillars: one, high growth in a recurring subscription business; two, profitable customer economics; and three, disciplined capital allocation. I've already discussed Okta's high-growth subscription business. I'll now provide more insight into our customer economics. We have attractive customer economics and margins in our land-and-expand model. Looking at the contribution margin for the cohort of customers that became new customers in FY '18, the initial land has a lower contribution margin due to the investments we made to acquire these customers. However, that contribution margin significantly improves in year 2 and beyond. One reason for the improvement is our high level of customer retention. Another reason is that there are multiple opportunities for us to expand and grow our relationships with customers, whether it's new products or expanding usage within an organization, which you heard about in detail today. This is reflected in our strong dollar-based net retention rate. That is an attractive and fast ROI business model and why we believe investing to acquire new customers generates a significant long-term, highly profitable benefit. Looking at our capital allocation priorities, our goal is to invest in the business while maintaining a strong balance sheet. At fiscal year-end, we had just under $2.6 billion of cash and equivalents. Our investment methodology remains consistent with prior years. We'll continue to make investments both organically and inorganically that will extend our platform and product leadership. We'll also invest in key customer-facing roles and innovation to support what we believe can become a multibillion-dollar business. I'd like to now give you some additional detail of where we plan to invest in FY '22 and beyond as we scale the business to become the next iconic cloud company. As we mentioned during our earnings call last month, FY '22 is an investment year. The customer demand for our products is strong, and we have focused investments across a few key areas to capture this large market opportunity. The first investment area is go-to-market. In addition to expanding our quota-carrying sales capacity, we're adding to our strong customer success teams to ensure we maintain our excellent retention rates. This includes expanding our sales engineering teams to assist in the further adoption of Okta's solution within large enterprise customers. Second is international expansion. We'll be expanding our global footprint, which includes growing our sales and customer success teams globally as well as supporting infrastructure in many of our current and new international offices. The third area is innovation. We will continue to invest in product and engineering talent as well as build out our cloud infrastructure to support the strong growth that we are seeing and anticipate. And the fourth investment area is growth at scale. This includes back-office and finance solutions that deliver increased efficiency in support of our strong growth over the coming quarters and years. In fact, all of the investments we're making are to further enable our ability to capture the fast-growing demand for Okta's workforce and customer identity platform. Now let's talk about long-term growth against the backdrop of our large market opportunity. As you've heard throughout today's presentations, we are building Okta for long-term durable growth. The new PAM and IGA offerings that we announced earlier today increased our opportunity even further and continue to build on our leadership position in the cloud identity market. We have a well-defined vision, market-leading products and a pipeline of innovations to further fuel future growth. We also have a world-class go-to-market team that we're expanding both domestically and internationally. All of this is aimed at the $80 billion TAM that we are just beginning to penetrate. This is a tremendous market opportunity for us to execute against, and we're confident that, on an organic basis, we can achieve our current target of a 30% to 35% revenue CAGR for FY '20 to FY '24. On top of Okta's strong organic growth, the addition of Auth0 will accelerate our growth to greater than 35%. Again, we'll share a more detailed financial view of the combined company on the first earnings call after the transaction closes. The modern identity market is still in its early stages. As the industry leader, Okta is well positioned to build on our leadership position through innovation, customer success and our expanding global reach. Part of building the company for long-term durable growth is ensuring that we are an exemplary corporate citizen. To this point, we are committed to continuing our progress on the environmental, social and governance front. Last year, we formally launched our ESG program and centralized information and disclosures on our new ESG web page. We also conducted our first greenhouse gas emissions inventory to benchmark where we stand today and where we want to be in the future. Lastly, we released our first diversity and inclusion report as we aim to provide transparency in this key area. And we just announced that Okta is committed to achieving 100% renewable electricity for our global real estate footprint by 2022. This is a critical step in our journey to reduce greenhouse gas emissions and take long-term action on climate change. We'll continue to share our progress on ESG topics as we go forward as this is a key priority for the company. As you've heard throughout the presentations today, we believe identity is becoming a primary cloud, and Okta has built a strong foundation as the leader in identity. We'll finish this year with over $1 billion in revenue, and we believe we are still in the very early stages of this market. I'll conclude by reiterating the 3 key takeaways from today. We've established a strong foundation for growth at scale. We have large addressable markets with multiple growth vectors. And we have a very attractive long-term financial profile. With that, thank you for joining Okta's Investor Day. I'll now turn it back over to Dave, who will open things up for Q&A. Dave?
Dave Gennarelli
executiveOkay. Great. Well, welcome, everybody, to the Q&A portion of Investor Day. I hope you all had a chance to tune in to the Oktane content this morning where we shared a lot of exciting news. So for this session, we have all the executives that you just heard from. And before we start taking questions, I want to cover a couple of ground rules to help with the Q&A process. And the first one is to make sure you rename yourself in the Zoom tool with your name and your firm name. And to do that, you simply click on the Participants button at the bottom of the screen, hover over your name, click on More and then select Rename. And then to indicate you have a question, please click on the Raise Hand icon at the bottom of the screen. I'll announce you when it's your turn to ask a question, and you'll have to unmute yourself at that time. [Operator Instructions] And with that, we'll get underway and start taking questions.
Dave Gennarelli
executiveSo first up, I see Ittai from -- Ittai Kidron from BofA. Ittai. We just had to get him moved over to -- Will, can you promote Ittai to a panelist?
Ittai Kidron
analystAll right. Can you hear me now?
Dave Gennarelli
executiveLoud and clear. Sounds great.
Ittai Kidron
analystAll right. Very good. Guys, thank you very much for today. It was fantastic. A lot of great information. I had -- and of course, congratulations on the announcement. It's very exciting. And I had a question with regards to the 2 announcements of PAM and IGA. Will it be fair to think that your first opportunity of upselling into those categories would come from existing Advanced Server Access customers and Lifecycle Management customers? And maybe you can tell us -- I know you have 10,000 customers, but maybe you can tell us how many of those specific product customers do you have, so we can think about the immediate opportunity there.
Todd McKinnon
executiveYes. We're really excited about PAM and IGA. As you heard in the presentations, it's a $15 billion TAM added to our TAM from these products. And the genesis of these products -- first of all, it comes from customers. Customers have been asking about these categories for many years. And as you mentioned, we have a nice foothold and a nice start in each of these categories with our Advanced Server Access product as a foothold and a step into the PAM market. And then our Advanced Lifecycle Management product with our step into the -- in the past, our step into the IGA product. But these are new products, so they really round out these critical use cases for customers. On the PAM side, it's all about additional types of resources, so containers and databases and the advanced security checks you need on those kind of critical resources. On the IGA side, it's about full workflows around attestation, reporting and broad comprehensive reports on governance. And then the other thing that's important here is that we're fitting into the way these customers want to work in a modern world, whether that's a highly dynamic cloud-based infrastructure or that's a lightweight governance process that doesn't like slow down or bog down the pace of business. So we're -- these are customer-driven. We found, in the past, all of our best innovations, whether it was customer identity or others, have been when they've come from things that were broadly requested from customers. So it's big news. It's really going to help customers. And we're excited to get after it and have success with customers with these products.
Ittai Kidron
analystVery good. Tom, maybe you can talk about what percentage do you think of your installed base could these solutions apply to. If you need a certain maturity from a security and identity standpoint, you probably need to be a company of a certain size as well. So how do you think about the applicability of these solutions to your existing installed base, which is -- ranges from small to large?
Todd McKinnon
executiveI think they are applicable to every customer. I mean, every customer has privileged accounts. Every customer needs some type of Identity Governance. I would say Privileged Access probably tends to be more applicable to smaller customers, but not exclusively. I mean, every company wants to make sure their governance requirements are met and that they can do it in a flexible, easy way.
Michael Kourey
executiveAnd Ittai, I would just add to that. One thing that I think is very interesting here is this is another very good example of how modern cloud solutions can actually expand applicability. I think if you look at traditional, I don't know any governance and attestation, it's been very heavyweight, very on-premise, a lot of services very tricky to maintain and upgrade a long time. I think what you're actually going to see with modern IGA products starting with ours is you're going to see the applicability, it's going to go much further downstream. You're going to have mid-market companies. Even small companies are going to get a lot of benefit just from understanding what happened, the governance and the attestation parts. And so I think it's actually going to expand the market for our modern cloud solution.
Dave Gennarelli
executiveOkay. Next up, we'll go to Michael Turits at KeyBanc.
Michael Turits
analystSo 2 questions, one for Mike, one for Todd. First for Mike, just a clarification, the 35% with Auth0, is that 35% now, that's the CAGR? Is that the out-year? And around that, there was a news article talking about over 30% growth in each of the next 3 years. So I just want a clarification on these long-term guides. And then I have one for Todd.
Michael Kourey
executiveYou bet. That's a great question. Thanks for asking it. Yes, so we will grow 30% plus for the next few years.
Michael Turits
analystOrganically?
Michael Kourey
executiveOrganically. And our range organically is 30% to 35% on the CAGR for '20 to '24. But yes, we are stating that we will grow 30% plus each year. That's organically. With Auth0, we're saying that we'll be growing over 35%, so greater than 35% with Auth0. And that would be -- you're going to hear a lot about all that once we have closed the deal and we do our first guide with Auth0. So that's our long term...
Michael Turits
analystThat 35% is in each of the next 3 years, you're saying?
Michael Kourey
executiveWe haven't given that level of guidance yet. That's a great question. It's not a bad inference. So I'll just leave it at that for today, if you don't mind.
Michael Turits
analystAnd then, Todd...
Todd McKinnon
executiveI think -- I do think it's important to be clear though, 30% to 35% range organically is each of the next 3 years. The inorganic part is the stuff we're going to get to later.
Michael Kourey
executiveThat's correct, which is greater than 35%. That's right. Thank you, Todd.
Michael Turits
analystAnd then, Todd, for you. Just -- I mean, the 2 platforms, what -- I think you said that you would be maintaining both of them and investing in both of them indefinitely. So why? Is it not something you should be bringing together? Is it efficient economically? Does it make sense for customers? Why are you keeping 2 separate platforms?
Todd McKinnon
executiveWell, first thing to understand about these companies and these platforms is they're complementary. There's some overlap, but starting from developers like Auth0 has and building from the CIO, the CSO down results in some things that look similar. But the details and the differences on the surface are significant. So it's not like there's redundant functionality across the board. There's some redundancy. But by and large, they're distinct complementary platforms. So -- and by the way, they're both at scale. Auth0, the Okta CIAM business is about 1/4 of our revenue, growing very quickly. And on the Auth0 side, at the end of this year, it's going to be $200 million plus in ARR. So they're both at scale, both in tremendous customer success. But that doesn't mean we won't integrate them. We're very excited about the capabilities and the potential to integrate these 2 platforms and get synergy. One great example is that's really easy to grok for customers and for companies is combining our threat data with their threat data. We call it ThreatInsights. Auth0 has a similar capability. We can combine those quickly and get better experiences for all customers across both platforms by doing that integration. And the examples like -- of this type of integration go on and on. So we really get the best of both worlds with complementary platforms and combinations of integrations that can really take us a long way. And Eugenio is joining us here today, and he can give his perspective on this as well.
Eugenio Pace
attendeeTo what Todd said, the beauty of Software as a Service, as you know, is that the implementation details are up to us. If the customer consumes an Experian, how we solve the problem is really our problem. And that's what we're going to be focused on. There's many, many possibilities of integration. The threat intelligence and being able to combine signals from both platforms gives us a better chance to protect our customers' customers, our customers' employees as well. But there's a few others that come to mind which are obvious, which actually, in some cases, we deliver today because we already have customers that are using both platforms. It is completely possible today to logging into an Auth0 protected application using an Okta originated identity. And that's something completely supported. Now can we make it easier? Of course, we can make it really, really easy. And that's what we would like to focus on.
Dave Gennarelli
executiveGreat. Next off, we're going to Rob Owens at Piper.
Robbie Owens
analystThanks, Dave, and good afternoon, everybody. Todd, I think throughout your history, we've talked a lot about the appropriate time to pivot and when we might start to see some of these swim lanes [indiscernible]. And obviously, you're going to start splashing water in the pool at this point just to continue the analogy. So why here? Why now? Is there something in the market? Are you at a scale where you think it should happen? I mean, if we look at your customer count, it's been impressive, but it's still only at 10,000. There's a long ways to go. So why would you add that risk at this point in time?
Todd McKinnon
executiveWell, I think that the main reason is that the platform is ready to support it. We've been working really hard on our platform, these basic capabilities that give us a great launching point in these 2 new categories of IGA and PAM. So that's a big important reason. The second reason I would say is customer demand. These trends we've been talking about, cloud adoption, the customer experience moving online, every customer -- every company having to get in touch with their customers online and identity being such a key part of that and security, these are really washing over every organization in the world. And along with that comes not only the core requirements we've met, identity access management, customer identity, but also these governance requirements in these most -- and even more pointedly I would say, in terms of like everyone trying to be a digital business are these Privileged Access requirements. So every company is trying to get online. That means critical resources and servers and databases and containers. And the time is right to make it clear to the market that there's a better way to do this. There's a better way to do this privileged account than some -- Privileged Access Managements for these privileged accounts than some of these legacy technologies, and we're here to support them to do that. So I think those 2 reasons, Rob, which is a pretty insightful question you asked.
Robbie Owens
analystGreat. And then second for Freddy, as you think about the partner network -- and I think you guys were early to go after the GSIs and be very strategic and look at identity as a strategic area. Although it's still early, products aren't coming out until the first part of next year. What's been the early response from that partner network?
J. Kerrest
executiveYes, absolutely. Good question. Nice to see you, Rob. Thank you for the question. I will certainly answer that. I just want to add a little bit to the previous answer that Todd gave around why now is the time. I would just say it's also not a step function. It's not like we're going from 0 to 1 and now introducing these products. If you think about Advanced Server Access, it's been out for a couple of years. It's done very, very well in the market. So Okta Privileged Access is going to integrate Advanced Server Access, and there's going to be more for customers to buy. So it's a natural transition to where we're going. Same is true for IGA. If you think about what governance and attestation actually is, it's Lifecycle Management, so provisioning, deprovisioning, change your role, change your profile. It's entitlement management, it's a workflow engine, and it's reporting. As you know, we GA-ed workflows last year. That product did extremely well in hundreds of enterprise customers now, well deployed. So you add in all the Lifecycle Management stuff we're doing, you add that in, you can see how when you add just a reporting layer or a fine-grained entitlement on top of that, you're naturally getting into an IGA product. And so what I would just add to what Todd said is that second piece. Customer has been asking us for it. I mean, they are saying, look, IGA -- first of all, in a cloud world, you could argue that every access is Privileged Access just because of what you can do now. But in particular, on IGA, they're saying, look, IGA is second order of data. It's derivative data of core identity information and access information. If I have all my access information in the public cloud already, why am I going to take all the reporting off that, bring it back on-prem to do heavy-duty reporting and then hand it over to my auditors? It doesn't make sense. And as you know, because we've been talking for years now, we are in the very early stages of these megatrends. I mean, the switch to hybrid IT, which is going to become cloud, is going to happen for 5, 10, 20 years. And as it starts to move more and more, you're going to get more of that data in the cloud, so it's a natural place to do these things. Then finally, when it comes to the GSIs, as you said, we have invested early. We've seen a lot better traction earlier on in our Lifecycle than we did at Salesforce at the same time, and I know because I was there. But what I would say again is we're just getting started. But you look at what PAM and IGA are, now we're starting to really broaden out what can be done with the platform and integration. That means bigger deployments at bigger customers. That means more opportunity for GSIs. And if you look, we are continuing to invest in our professional services or organizations as expert services, but that percentage of revenue from PS as overall is going down slightly because we're really pushing a lot of services out. Now there's hundreds of certified consultants from Accenture, from Deloitte, from PwC and the list goes on, and they are experts in all of this. So it's going to be a big opportunity for us. And in particular, international, you heard Susan mentioned in her prepared remarks just a little bit ago, the focus on international. I mean, there's no better way to get into these large organizations around the world and with these partners. So...
Dave Gennarelli
executiveAll right. Next question from Hamza Fodderwala at Morgan Stanley.
Hamza Fodderwala
analystMaybe first question for Todd and Freddy. Just when you think about you guys breaking into Privileged Access Management versus Identity Governance, where do you see the more immediate opportunity? And where do you think would be more easier to break into? And then the second part is, what does this mean for your partnership with SailPoint on the governance side?
Todd McKinnon
executiveI think they're both very interesting and exciting. If you just look at the kind of the first step in each of these respective markets, we've talked about the Advanced Lifecycle Management and then the Advanced Server Access. Advanced Lifecycle Management has more of -- it's been around longer and it's -- or the Lifecycle Management has been around longer. So it's more of a foothold, more customers than Advanced Server Access. So I think that's probably a good indication of maybe the short-term uptake. But we're very excited about both. And one of the -- the thing about both these products is that the market is dynamic and evolving quickly. So we're excited to see how it plays out in the market with customers having success with them. I think one of the things about partnerships in general is that it's in our DNA. We have -- we innovated and we brought to market, 10 years ago, this concept of this integration network. And companies like SailPoint are in there, and we'll continue to partner with them. SailPoint is a good company. They have a lot of successful customers. So I think we'll continue to partner with them. But we think we can do this in a modern way that's going to be the exact right of -- the balance between every bell and whistle and every feature and function than traditional vendors have taken to the space and meeting the minimum requirements in a modern cloud way. And we think we can do a great job. It's integrated to our platform. And we do this with other companies, too. There's multifactor solutions that are -- that we partner with, but we have our own multifactor solution. So there's precedent for us to be successful in this model.
Diya Jolly
executiveYes, that makes sense, and I'll jump in as well. I agree with Todd. I don't think we have to choose. We're in both -- we have Advanced Server Access. We have Lifecycle Management. We have a ton of customers on them. We've got Workflows that, honestly, if you think about it, goes across both products. You need access requests in both products. You need access certification in both products. And Workflows will be barring this. So really, I don't think there is a -- we have to choose. Our demand is very, very high with -- there are a bunch of customers that we have that are using Advanced Server Access that would love the capabilities on databases and Kubernetes clusters that already have been working with us and designing that and the features and functionality we need. Same on Lifecycle Management. So given the state our platform is in, these are not super hard to light up, and the demand from the customers is there.
Dave Gennarelli
executiveGreat. Next question from Matthew Parron at JPMorgan.
Matthew Parron
analystIt's Matt on for Sterling. I believe when you guys had originally launched the Advanced Server Access solution, that was primarily geared towards the cloud virtual servers. I'm curious as to -- you talked about databases and containers and servers. Which part of the PAM market will you kind of not try to address? Where do you see your focus being relative to some of the other players in the market?
Diya Jolly
executiveThat's a good question. So our Advanced Server Access doesn't just work for -- it works across on-prem. It works for servers posted in the cloud, virtual machines, et cetera. So it goes across both, and that's the way we built it, Linux, Windows, et cetera. We are going to broaden into databases, both production databases as well as databases that BI databases, that BI tools touch. And we're also going to broaden in the Kubernetes clusters. Our resource covers will look very similar. I think the way to think about this is we're bringing a modern approach to the market, which is more just-in-time credentials than having necessarily shared credentials where you use a vault. And we will partner with companies that -- at least in the near term, we will partner with companies that actually have a vault and for resources that need shared credentials. So I think of it that way, which is we want to bring a cloud-forward, user-based view, which is what our customers are asking us. And that's the lens we're taking versus the resource lens.
Matthew Parron
analystGot you. That's very helpful. And then just 1 follow-up maybe for Mike. So with regards to margins, I know you guys are not commenting on Auth0, but given the expansion into kind of these adjacent -- 2 adjacent markets, I noticed you guys didn't really guide to a longer-term margin framework. How should we think about how you kind of play around with the investments in the different buckets in the business going forward?
Michael Kourey
executiveYes. Great question, Matt. Thank you. So first of all, we are very rule-of-40-focused with a bias to growth. And with this huge $80 billion TAM now with IGA, with the expansion of core workforce, the expansion CIAM, I mean, it's toe in the water. Like Susan said, we're a couple of percent penetrated in workforce. And even with Auth0, once it closes, we'll be just under a couple of percent, and CIAM as well. So big opportunities there. We guided, of course, as you recall in the last call, that in FY '22, we're making investments in [ AEs and SCs ], full sales capacity, marketing capacity, CSMs and of course, a lot in the area of product and dev. So huge opportunity. We're making some real tangible investments because the opportunity is there, quite candidly. And so that's what we're doing. So that's why we guided the way we did for FY '22. And by the way, when Bill gave that guide, this was very much in our road map and thought through at that point in time. As far as -- kind of as we get out to the midterm here, we do continue to believe that 20% to 25% FCF margin is the right objective. So the exact timing, we'll go through things post Auth0 closing, that kind of puts it all together. And as both Todd and I touched on, that takes the growth rate over 35%. That's what's going to happen. So that's the way to think about it. So it's a balance. There is operating leverage in the model. If you look at FY '21, we did a 13% operating leverage with FCF margin. So it's there. It's a decision. We're making these proactive decisions as we go. But with the growth opportunity, the way it is here in FY '22, we're leaning in.
Dave Gennarelli
executiveGreat. Thanks, Mike. Next, we're going to go over to Alex Henderson at Needham.
Alex Henderson
analystI have just a clarification question to start with, if I could. The commentary about 30% to 35%, going above 35% with Auth0, is that a pro forma calculus? Or is that a -- above 35% would then be the growth rate, with that being somewhat of an inorganic calculus because of the obvious benefit of bringing in that additional revenue upfront?
Todd McKinnon
executiveI didn't know there's going to be calculus on this call.
Michael Kourey
executiveThat's a great question. So when we gave that guidance, that includes -- [indiscernible] announced this, but just to be clear for everybody, that is net of the expected deferred revenue haircut. So that's one thing to keep in mind. Clearly, in this year, it's TBD as to exactly when it closes. We continue to expect Q2. And yes, that's a -- it's a compare. It's not pulling, right? So it's a compare against an FY '21 that didn't have Auth0 in it at all. This year will be a partial year. So that's also true from that perspective. But that is -- as Todd followed up on me at the beginning, we expect that over 35% growth rate in those subsequent years as well. So in this year, there is -- it is a close year, but that we also expected going forward.
Alex Henderson
analystSo -- thanks for all the great content today. It seems like this presentation today was extremely shifted left much more so than previous years and specifically addressing a lot of DevOps and coder-centric type of technology integrations. And in that context, you mentioned HashiCorp a number of times. Obviously, one of the premier companies in the shift left movement, code as infrastructure arena and talked about integration with it. But on the other side of the coin, they have a vaulting technology. Somewhat addressed this a little bit with a prior question from Morgan Stanley, but to -- they're pretty much an integrated real-time realization of identity as well. So how do you compete with the vaulting product of HashiCorp? And simultaneously, are you partnering more with the Terraform side? Does it matter? How does all of that boil out? Is it a cooperation competition situation or what?
Diya Jolly
executiveYes. So we actually partner very closely with HashiCorp. Both on the Terraform side, we have official integrations that we work with them on so that you can configure a bunch of organizations in Okta, et cetera. On the vault side, as you're bringing up, I already bought this up, we're not looking to go to shared credentials. There are a number of partners, HashiCorp, with their vault being one of the premier ones, that we partner with. On the other side, they don't have an identity provider, right? So they use us as an identity provider. So it's actually a very seamless partnership. And what you see is we're both very, very deeply integrated in each other's solutions. And it's a very -- it's not by chance. It's very proactive because we work with them so much.
Susan St. Ledger
executiveI'll just add to that, Diya. So I happen to be on the HashiCorp Board. So I can attest to you the partnership and how bullish both companies are on continuing to expand that partnership.
Todd McKinnon
executiveAlex, did we answer your question about the growth rates in the calculus?
Alex Henderson
analystIt sounds like you're assuming that you're going to continue to grow 35% or better even when that's in the base.
Todd McKinnon
executiveThat's correct. Over 35% when in the base. That's a good summary. Thank you.
Dave Gennarelli
executiveAll right. Let's go to Andy Nowinski at D.A. Davidson.
Andrew Nowinski
analystSo I just had 2 questions on the new solutions. So I think you said that customers can upgrade from Advanced Server Access and Lifecycle Management to the new solutions. So I'm wondering if you could just give any more color on the revenue uplift that you might see on a per user basis when they upgrade.
Diya Jolly
executiveYes. So as we said, our Advanced Lifecycle Management has basic -- has capabilities for servers as well as they have capabilities for access. But we have a bunch of customers that want more advanced capabilities like SSH and RDP session capture. They want attribute-based controls. They want, obviously, more resources we've talked about. And those are the customers that are going to upgrade. From a revenue capture perspective, I think these are products you would upgrade to. So if you have Advanced Server Access and you want all these capabilities, you would have to upgrade to these capabilities and [ debut additional SKUs you'd buy ]. On the Identity Governance side, as we said, we're doing a lot of the provisioning, deprovisioning capabilities, the entitlements, all that stuff. But really, what you're missing today is things like access request, making that easier. What I talked about in my presentation was we're doing things like how do you provide self-service access with the right level of intelligence so that you don't increase the risk but also provide deeper access request for things that are more sensitive. So access request is one. Certification is another. Reporting is another. And if you want those suite of capabilities, you basically end up buying that product in that SKU -- in that portfolio. Does that answer your question?
Andrew Nowinski
analystI guess. Are you offering any sort of bundles when customers buy all 3 solutions or any incentives to buy all 3 upfront?
Diya Jolly
executiveYes. So regular pricing, if you buy -- if you have -- if you -- you're asking about pricing structure, it will be if you buy the whole portfolio, you get a bigger discount, basically, as with -- as the rest of our structure works for the rest of our pricing. So it's not very different.
Dave Gennarelli
executiveOkay. Next up, we have Brian Essex at Goldman.
Brian Essex
analystMaybe just to follow on to Andy's question, kind of similar but maybe to put a finer point on it. Potentially for a customer that does not currently have IGA and PAM, is it 2x lift, 75% lift to pricing, what you might have on an ASP per customer base?
Diya Jolly
executiveYes. That's a great question. So on PAM, it is $45 per user per PAM unit. The way a PAM unit is defined is a different set of bundles of servers and databases and Kubernetes clusters, and we can go into detail there, but it's not as relevant. On IGA, if you want to buy this new capability, it's -- or these new set of capabilities, it's $1.09 per user, on top of the existing Advanced Lifecycle Management and Lifecycle Management.
Brian Essex
analystGot it. Brilliant.
Todd McKinnon
executiveYes. And the like-for-like there is per user per month. So...
Brian Essex
analystGot it. Got it. They're very, very helpful. And then maybe just a follow-up, too, on the IGA side. Where are you seeing the most demand? Is this similar to what SailPoint might say, that you have these legacy customers that want to pursue digital transformation efforts and some of the legacy vendors are bottlenecks to that transformation process? Or are they looking for other cloud-native alternatives, particularly at the lower end of the market where there may not be something scalable, cloud-native to address that platform?
Todd McKinnon
executiveI think it's both. I think there are some companies that are using legacy solutions that will want to move off them and use something more modern. But I also think there's a big market for net new, especially on the Privileged Access side. If you look at our success, we think the success with Advanced Server Access will be an indicator of this. A lot of these customers we've had with Advanced Server Access didn't have an existing Privileged Access product. And now that we've rounded it out, I think you're going to -- you could see that trend be even stronger. So net new customers to the market didn't want to go ever with the legacy technology leaning big into first our -- prior to our Advanced Server Access, now with our Privileged Access product. A good example is Zoom. It's a big customer with who you saw the interview with the CIO there at Zoom. They were never going to install a Privileged Access product from a legacy vendor. That was -- that Advanced Server Access was a net new purchase for them, not replacing an existing vendor. There's a lot of company -- Zoom is obviously a standard exception, but there's a lot of companies that are building software, wanting to be more modern and are looking for -- to cover these critical accounts in this big security issue with a modern solution.
J. Kerrest
executiveI would just add, though, even in speaking with Fortune 500 companies, I mean, I think it's going to be very similar to what has happened over the last 5 years with our access management -- our core access management products with [indiscernible] Lifecycle Management, UD, MFA, which is effectively, look, they've been running Oracle. In that analogy, they've been running Oracle or IBM, TIM and TAM or Oracle Identity and Access Manager, and they're running that on-premises for all their legacy infrastructure. And when we talk to them, they say, look, that thing is fine, but it's just running, it's doing maintenance. And like what I really need is I need you to help me solve these key modern critical projects that are high value, high importance, high security, get them up and running quickly, 1 quarter, 2 quarters, 3 quarters, which we do. And that allows us to go back and talk to these CIOs and CTOs and CSOs and say, how is that experience? They say, it's phenomenal. Great. Now let's talk to you about the plan to rip and replace your Oracle and your IBM over the next 12, 24 months. I think it's going to be very similar, for example, with IGA. They're going to have their legacy IGA on-premises product that's running for a bunch of mainframes and a bunch of other things they need to do, but they have all these modern products. They're not going to plug that legacy on-premise infrastructure into Workday and ServiceNow to figure out how they're going to actually do IGA in those products. But they have to because those things are starting to become critical into their infrastructure. What they're going to do is they're going to use our products. They're going to integrate all that stuff. It's going to go very quickly. And then they're going to turn on, they're going to say, that's great. Now show me the road map to turn the lights off on the old legacy on-premise infrastructure. And I think that's a very similar path. And again, we're not making that up. It's a good experience that we have over the years doing that, and I think we're just going to be expanding out the footprint inside these large organizations.
Dave Gennarelli
executiveAll right. Next, let's go over to Josh Tilton at Berenberg.
Joshua Tilton
analystAll right. So the first one is kind of a follow-up on the pricing for the new IGA and PAM offerings. I know they're not out yet, but do you guys have any indication on maybe the relative attractiveness to what companies are paying for their incumbent solution or other cloud and PAM/IGA solutions that exist today?
J. Kerrest
executiveI don't know all the details around the license management and how they're doing procurement around on-premise to software. I assume it's largely perpetual, and it's largely recurring maintenance, as you've seen with a lot of these legacy on-prem products. I know that some of the legacy vendors in both PAM and IGA have tried to move into the cloud because they realized that, that's where the future is going. It seems as though they're having some tough times doing that. And it's very hard, right? When you have such a core center of gravity that's focused on this on-prem product and maintenance and doing upgrades to it, it's hard to get this other motion going with the cloud, which is why we've taken the opposite approach, obviously, over the last decade. Cloud-centric, cloud-focused, we're going to where the future is. I'm a hockey guy. We're going where the puck is going, not to where it was. And then over time, we're going to make sure that we can integrate all the existing on-prem infrastructure so they can bring it along with them. And when they want to turn the lights off, we're going to give them the full suite of what they can do in the modern world as well.
Joshua Tilton
analystAnd just as a quick follow-up. There have been a lot of announcements pretty recently, the acquisition of Auth0, and you're going to develop new IGA and PAM solutions. So can you kind of just walk us through what the decision was to acquire in customer identity but maybe develop in-house in PAM and IGA? Why not acquire somebody in those markets as well?
Todd McKinnon
executiveYes. The CIAM market is a big, strategic, important market for us. And I think that the -- one of the reasons why we're so excited about the combination with Auth0 is because it's really -- the TAM we talk about is really a couple of different submarkets. There's the CIO-, that CSO-led market Okta is really good at talking. And then what's become clear is that the developer market is somewhat distinct and somewhat complementary. And when you start with a developer focus like Auth0 has from the inception of their company, you end up with a pretty different product and a pretty different go-to-market motion on how to capture it. And that's why we're so excited about the combination. And Eugenio is here to add color on that side.
Eugenio Pace
attendeeYes. Even for us, with all the progress that we made, we are also scratching the surface on what's possible with developers. We only touched like single-digit percentage of all the developers around the world, right? So our focus has been -- always been -- has always been on the -- empowering developers to build faster, more secure and to essentially address the huge opportunity cost, which is the time that now it's being wasted on building stuff that we can do better for them, so they can focus on what's really important, which is their own apps.
Joshua Tilton
analystOne of the -- yes, it's very well said. One of the analogies that I used internally to talk to the team about this and as we were thinking about our approach here was helpful was the following analogy. So if you look at Oracle relational database and you look at MongoDB, you could say, oh, they're both databases. Why would -- they're not complementary. It's just zero-sum database is a database of database. But they're actually quite different. If you're a developer or you're a user or a systems administrator, at a high level, you store data in them, you query them, you back up the data. But in the details, they're pretty different. A document database is pretty different than our relational database. And so they're quite complementary. And they're 2 valuable platforms that can address different use cases in the same bigger market, which is data management. That's -- I think it helps -- it's not perfect, but it's a helpful analogy to understand that along the surface, yes, they're both identity management products and platforms. But the details matter a lot. And when you get into the details, it's -- they're quite complementary and can give customers a good amount of choice and flexibility and value. And I think your question is like kind of why now, why did you buy, realizing that over the last few years is really the reason there. And also the reason why I'm pumped up about to close the transaction, hopefully, soon and move forward, building something great for customers together.
J. Kerrest
executiveAnd Josh, just following on, on the last part of your question there, hey, why not do some M&A in IGA and PAM? I mean, I think it's, first of all, a follow-on to what I said earlier, which is we've been building basically these products for the last 2 years. And people are looking at ASA from the side and saying, is that a modern PAM product? And they're looking at Lifecycle Management and Workflow and saying, when can I replace my SailPoint legacy on-prem infrastructure? So we just had to say, yes, we're doing it. Here's when it's coming. Frankly, it's a huge sigh of relief. I mean, I know that when I talk to customers in the coming days, they're going to be like, finally, thank you. Now I at least know what to put into my road map. So that's the first thing is we've been building it. Second of all is, remember, we are an organic product and engineering development company. I mean, that's what we are, that is what our core is. We have this amazing opportunity with Auth0 to partner and make the world better and get in front of customers even more quickly, which Eugenio's and his team have done a fantastic job of doing. But our core -- at our core, we are an organic product and engineering company. And that's why you see how all these products are doing. I mean, when we GA something, doesn't have a whole bunch of bugs in it, it takes off. So what I would say is we're not done. There are certainly going to be things that we'll continue to look at. As we enhance our IGA and PAM offerings, as we look at other adjacencies, there's a ton to do in customer identity and access management. We have nothing planned right now. Obviously, we have our hands full with Auth0 and making sure that, that integration transaction is widely successful, which I have no doubt they will be. But those products are already off and running. As we find things that would make sense to enhance them, we will also take advantage of those opportunities, though.
Dave Gennarelli
executiveAnd next, we're going to go to Gray Powell at BTIG.
Gray Powell
analystSo yes, I guess, with Auth0 operating as a separate company underneath Okta, just how do you manage the 2 separate sales teams and just make sure that like an Okta rep that's focused on customer identity isn't actually competing against an Auth0 rep and just that everybody plays nicely together?
Eugenio Pace
attendeeWell, first, maybe start with this. First of all, we are in this period of time where the transaction is not closed. So we are actually operating as we were like before we announced this. And we don't control when it's going to done. Hopefully, it's going to be done soon. And by that time, we will be working together. But in the meantime, we serve like 2 different audiences, really. And we work -- we have different and complementary go-to-markets as well. I think we mentioned as well that we also have like a different geography coverage as well. Auth0 has 40% of its revenue outside the U.S. and 60% in the U.S. So there's many things that we need to figure out. And that's what Susan and the rest of my team are working on as soon as we close.
Susan St. Ledger
executiveFor sure. I'll just jump in on that. So one thing for sure is we'll be very prescriptive with the customers based upon their requirements, about which solution is best for them. As Eugenio talked about, there are 2 very different approach. One is a very low-code approach. One's a very pro-code approach. And so we'll make sure that we just lean in on our customer requirements. And in most cases, I think they're going to be pretty clear. There are certain things that -- like the private instance that Auth0 brings to bear. It's something that I think is going to be very exciting for many of our customers. There are things we're further ahead in FedRAMP. So in terms of the government market, that will be a clear Okta lead. And so there are all of those things that we're already thinking about, but we'll get together post close and really make sure that we're clear with, based upon customer requirements, what we should be leading with, with our customers. We're not going to confuse them.
Todd McKinnon
executiveYes. One of the things, I'll jump in here quickly, pops into my mind is that this -- first of all, this integration is -- we're -- take it -- we know it's going to be a lot of hard work, and we have a lot of focus on making sure it goes extremely well. We don't underestimate the amount of work it takes. The guiding premise is that these are 2 high-growth companies. So the first order of business is making sure we both continue to grow rapidly. And then the second order of business is the integration and the sales integration and the product integration when it makes sense and making sure it's all done under the framework of customers being successful. So yes, I'm excited to...
Eugenio Pace
attendeeAnd maybe to add some color. Our quarter ends in -- Q1 for us ended in March. And we announced this deal at the beginning of March. So it was a good test to see how our customers would react to our proposal. And well, we had a fantastic quarter. We beat ourselves -- our plan by 10%. And every single customer I spoke with, with regards to the future and our future together saw this as an immensely positive thing, which is awesome to see.
Dave Gennarelli
executiveOkay. Next question from Jonathan Ho at William Blair.
Jonathan Ho
analystI just wanted to start with one question for Diya. When we think about Okta as a primary cloud platform, what do you think has to happen in order for us to see more sort of standardization on a single cloud provider? And maybe what largely stands in the way of seeing that penetration rate of 2% becoming a bit higher?
Diya Jolly
executiveI think -- so a couple of things, and we've talked about this in our -- in -- a little bit, which is really the provider or the [ clear ] that can help companies stitch together their basic back -- organization stitch together their basic back-end ecosystem of tools, et cetera, both on the customer identity side as well as the workforce side, is the -- going to be the provider of choice, right? Because identity flows through everything. And really, our job is not just to provide an authentication and authorization service, but our job is really to help our customers bring together this stitching of identity across the different solutions so that they can bring together the experiences that they need for their employees, their workforce as well as their customers. And I think our approach of being multi-cloud, of being neutral across what tools and -- open and neutral across what tools our customers use, our Integration Network, the extensibility we are building on our platform that allows them to customize, make it more flexible, that's the approach that I think that's going to work.
Todd McKinnon
executiveYes, Jonathan, we call it primary cloud, making sure identity is a primary cloud. We talked about that a lot in the presentations we just went through. And that really, at a high level, informs our whole platform strategy, whether it's more integrations, as Diya mentioned, whether it's breaking the product into these platform services that can be reused and flexible, whether that's making the whole system more extensible and customizable and whether that's building new products like PAM and IGA. It's how do we solve more of these use cases? How do we make sure that the Identity Cloud and identity specifically is elevated to the status of primary cloud because it's that critical for customers. It's going to drive choice across all of their technologies, thousands and thousands of technologies, and the other 5 or 6 major clouds like collaboration or infrastructure or data that they're going to inevitably settle on.
Jonathan Ho
analystMakes a ton of sense. You also referenced the Fastly partnership that was announced today. Can you talk a little bit about what this could mean from a go-to-market and lead gen perspective as well?
J. Kerrest
executiveYes. I mean there's -- as you saw, the -- we continue to build on the Okta Integration Network, which is the premier catalog and is a great example of what Todd was just talking about, just really making sure that we have the best integration to everything that's out there. We started that as an application catalog a decade ago. It's become an integration catalog because of all the pieces of technology. And what you're seeing is more and more of the leading organizations of modern technology providers, Fastly is a great example, are really leaning in, in terms of how we can do more jointly for our customers. We outlined a number of different groups that we have improved across the Okta Integration Network, both on the workforce identity access management side as well as the customer identity and access management side, and you're just going to see more and more of this in the time ahead. Diya, you can maybe talk about some of the reasons that we were specifically working with Fastly and why they leaned in and kind of how that works similar to some of the HashiCorp commentary you gave earlier.
Diya Jolly
executiveYes. That -- thanks, Freddy. So exactly the same way, a bunch of our customers came to us and said they're working with Fastly, they're working with F5, [ human ], et cetera, and said, "Hey, we're having to stitch you guys together. You -- Okta has one set of threat information. Fastly has another set of threat information." And basically, we both got a ton of demand across the board on our side and connected with each other and realized that we could partner together and build a solution that was way better, that was integrated because we both see different events and different data that help us lead to the threat conclusion that we make. So that's essentially what happened.
Dave Gennarelli
executiveGreat. I want to sneak in a question from the buy side that came in. The question is, on IGA, how will you approach the more complex setup required at the enterprise level to get the right access across all users and applications, both in the cloud and on-prem? I've heard that it takes 6 to 12 months or longer with SailPoint. Will you outsource that to partners or do it internally?
J. Kerrest
executiveYes. I like the sneaky buy side, getting their question in via Dave. Anyway, I'm happy to answer that. So certainly, I think this is another perfect example of how legacy integration infrastructure in the past, in this specific case, IGA, so governance, where they're pulling in different data about login information, authentication requests across their different systems, how the legacy on-prem version, it took 6 to 12 months just to get the servers up and running. In our case, we actually already have the service running. As Todd said though, I want to be really clear, we're not going to spend the next 5 years replaying every bell and whistle that the legacy on-prem providers have created in IGA. And frankly, our customers are asking us exactly to do exactly that. Don't start rebuilding all of the different bells and whistles. I don't use many of them. And in fact, if you do that, I'm just going to end up staying with my legacy processes and my legacy ways of doing things. And half the reason that these large organizations are so excited about coming to work with us, of course, they're using our products. They get up and running, you see the ROI, the TCO, the time to value. It's not by accident we can get these kinds of customers to come and talk to you about their case studies. But also, they're looking for innovation. They're asking us to come in and help them understand what the future looks like. Where is the road map? How should IGA work? What do I really need to do? Look, their auditors are changing at the same time. Auditors are not sure what to do in this modern cloud world. So we are certainly not going to start by replicating every bell and whistle that a SailPoint or the other on-prem providers have had. And in fact, you can see what we're already doing with our workload connectors. I think that's a perfect example. GA, the workflow, about 16, 18 months ago now, I mean, it's flown off the shelf like hotcakes, and people are really using it end-to-end for Identity Governance across their entire systems. If you just put a nice little reporting engine on top of that, you have a modern IGA solution. So the final piece about that was, are you going to do it with partners or internally? We're going to continue to do exactly what we've done, which is we're going to invest to make sure that we have expert services. At the end of the day, when you go talk to a FedEx or an ENGIE or you go down the list of these large organizations, T-Mobile, that trust us with all their identity infrastructure, they're going to want to know that someone from Okta, who is an expert on the topic, is overseeing what's going on. That being said, not only the GSIs, which we touched on earlier, there are starting to be some boutique security and identity SIs out there that are developing both regionally and practice-wide that are focusing entirely on Okta. They're starting to build around Okta. Same kind of thing we saw at Salesforce 10, 15 years ago with Appiro and Bluewolf and Astadia and Model Metrics and all these other guys. This is starting to happen now at Okta, and those folks are deep into identity. They've been doing it for 25 years. A lot of cases, they built the original products, so they know exactly where we're coming from. But I think the opportunity is huge going forward. People want that modern road map, and that's what we're very excited to deliver. The final thing I'll just say is, again, with cloud, you don't -- we're not in the big bang business. The reason we have dollar-based net retention of north of 120% quarter after quarter after quarter is because our business is about getting these customers up and running, making them successful. And then they -- we become their trusted partner by virtue of the success they're having with us and they ask us to do more and more. Same thing is going to happen with IGA. Yes, do you have 50 things plugged into your legacy IGA provider? Probably. Are those 50 critical? Probably not. There's probably 5 that matter. So we'll nail the first 5 and then we'll slowly get the road map to ship them off the rest and it's going to be the natural same motion that we've had today. We're going to continue to build fantastic relationships with these large organizations and I'm thrilled about this.
Todd McKinnon
executiveAs you can tell, Freddy was a vocal proponent of us entering this market.
Dave Gennarelli
executiveAll right. Next, we're going over to Keith Bachman at BMO.
Keith Bachman
analystSusan, I wanted to come back to you, if I could. I understand when we're talking about Auth0 and Okta, the customers can decide. But I want to be more focused on my question is, will there be a consolidated go-to-market effort between the 2 organizations? In other words, will there be one global account manager? For a firm like Bank of Montreal, we have a lot of the companies, ForgeRock, Okta, Auth0 calling on us. I'm just trying to understand, well, if R&D is kept separate, but will the go-to-market all be unified between the 2 companies?
Susan St. Ledger
executiveSo it will be a collaborative approach, Keith. It's not -- I'm not going to say that there's going to be one person, but it will be a collaborative approach. And we have a lot to obviously work out come day 1. But as I said, the key is going to be focused on customer requirements, customer success and make sure that we have an incentive plan in place that will allow the team to work that way.
Keith Bachman
analystOkay, okay. Then maybe my follow-on question is on the financial side. So we've talked about the TAM increasing as a result of the inclusion of PAM and IGA, and the growth rate improved from something like 30% or north to 35% or north. Should we infer then that the net retention rate will also get a bump during this process as you have a richer opportunity to sell into your installed base?
Michael Kourey
executiveClearly, Auth0, themselves, they already have a great net retention rate, as you know. We also have a great retention rate. So -- I mean these are 2 first-class companies coming together. And as far as guidance [ on a bump ], et cetera, all those kinds of things, we'll contemplate and discuss in the earnings call following the closure of the combination. But they're in very good shape as well with both their gross and net retention as we are.
Todd McKinnon
executiveI will just add that we do think there's a lot of upsell opportunity with our new products and between Auth0 and Okta. So there's the numbers and the guidance and the expectations, but we do think there's a big upsell opportunity.
Dave Gennarelli
executiveAnd I'm going to go next to a question that came in through the Zoom tool. How do you see Okta -- how does Okta see the device management partnerships like CrowdStrike integrate more with a newly expanded risk engine? Will ThreatInsight be allowed to integrate with threat intel from partners?
Diya Jolly
executiveYes, absolutely. I mean that's the whole purpose of the risk engine. So we're building -- that's essentially what we have announced today. And then what we are also building in -- is in beta right now is the ability for us to be able to use our devices, SDK and device platform. They exchange signals directly from the phone and then feed it -- or sorry, directly from the device and feed it into the threat intelligence. So for companies like CrowdStrike, other EDR vendors, there won't just be one part to integrate. There will be multiple parts to integrate, and we'll be able to feed all of this into our risk engine to be able to get much better risk analytics than any one of us could alone.
Dave Gennarelli
executiveExcellent. All right. Next, let's go to Gregg Moskowitz at Mizuho.
Gregg Moskowitz
analystSo first, a clarification for Diya, if I may. So once Okta Privilege Access is GA, is ASA going to be superseded? Or do you expect to continue to sell it as a more slimmed down offering? And then for Mike, can you say what customer identity represented as a percentage of ACV exiting fiscal '21 and how fast it's growing? I believe it was at a 23% of total as of the end of fiscal '20.
Michael Kourey
executiveYes. I can start that real quickly and then we go to the other part of the question. Yes. So what we reported is that Q4 is 25% of the business at the end of Q4 of FY '21 and we're in Q1. So we will periodically give that breakout.
Diya Jolly
executiveOn the -- on your question around ASA and Privileged Access Management, we think of it as a suite, as a portfolio. So you can start with Advanced Server Access and start with basic access management. And as you get more and more sophisticated and need more privilege capabilities, you buy the additional SKUs in the portfolio to upgrade to the functionality you need.
Dave Gennarelli
executiveAnd next, we're going to go to Shaul Eyal at Cowen.
Shaul Eyal
analystCongrats to everyone, continue. Great to see you, Freddy, Todd, Mike, Dave. I think my question is for Susan. Many of us here on the call vividly recall the great achievements that you had at Splunk. If I'm not mistaken, I think we actually met during the Analyst Day 2017, maybe '16. And again, we're really talking about after that, 2, 3 quarters after that, with the entire product messaging, the go-to-market strategy [indiscernible]. Aside from the great TAM opportunities, which we can see at Okta, without a doubt at Splunk, what do you see areas that you believe you could be importing some of Splunk's best practices into the Okta and Auth0 platform right now?
Susan St. Ledger
executiveSure. As you said, Shaul -- thank you, Shaul. Thank you for the nice comments, first of all. As you said, it really is about the market opportunity, so that's -- and Todd being a great, great salesperson. He's not -- he doesn't -- he says he's not on the go-to-market side but he really is. But -- so I will definitely be leveraging a lot of what I learned there, and quite frankly, a lot of what I learned at Salesforce. While you don't -- not everything is the same at each company, the net of it is that high-growth motion is something that is highly repeatable when you have this type of market opportunity. And so it's really about coming up with the repeatable motions, it's about hiring great talent and it's about running an incredibly interconnected go-to-market strategy across all the different functions. I can already tell you that Diya has become my best friend, just like Tim was at Splunk. And I think that is the -- that's the magic. It's really about bringing that cohesive approach to go-to-market, not just a sales-led approach.
Dave Gennarelli
executiveOkay. Next, we'll go to Taz at Guggenheim. Taz?
Imtiaz Koujalgi
analystI have a clarification to start off with. The GA for PAM and IGA, you said Q1 '22. I believe that's Q1 calendar '22, right, not Q1 fiscal '22?
Todd McKinnon
executiveYes, it's 3 quarters from now.
Imtiaz Koujalgi
analystAnd then for Mike, you're investing more in sales. You're investing more in -- you have more TAM now with the IGA and PAM products. But then if you look at your midterm CAGR guide of 30% to 35%, that's not changing from what you gave us last -- at the last Analyst Day. Any more color on why, given the investments, given the increased TAM, you don't think the top line momentum should be higher now?
Michael Kourey
executiveWell, clearly, it's a bigger opportunity. When we gave that -- when we had that discussion, this was in our thinking as far as -- for our forward guidance, albeit at a modest level. So yes. Does this give us more growth vectors, more upside? Certainly, it does. But at this point, we're guiding the 30% to 35% organically and the greater than 35% with Auth0.
Imtiaz Koujalgi
analystGot it. And then the second question, I'm just trying to get a sense of the deal sizes for CIAM versus workforce. If I look at Auth0 today, the run rate -- I think the ARR is $200 million but they have about 8,000 customers, which is similar to what Okta has at a much bigger run rate. So it looks like the average deal size for CIAM or Auth0 is a bit lower than what Okta has today. Any more color on if that's driven by pricing being different, deal sizes being different because customers are smaller? Any more color on the different deal sizes between Okta and Auth0 would be helpful.
Eugenio Pace
attendeeYes. Maybe just on our side, we have 10,000 paying customers, of which 20% of those are enterprise customers. These are customers with more than like a year contract, minimum, typically 2, 3 or more years. Our ratio between total contract and annual revenue, it's about [ 2.7 ] perhaps [ 2.6 ] for us. So it's not uncommon to see customers in that range committing to longer-term contracts. The other 80% of our customer base, paid customer base is what we call self-service customers. These are customers that pay with a credit card on demand as you go month by month. And they go anywhere between $30 per month, all the way to maybe $1,000 per month. For enterprise customers, the minimum contract, it's $25,000 of ARR. We also have 20,000 nonpaying customers because our go-to-market is primarily premium. So that's kind of like the top of the funnel for us. So overall, we have 30,000 customers that use our system in production, 20,000 free, 10,000 paid, 2,000 enterprise. Makes sense?
J. Kerrest
executiveAnd then, Taz, I'll just add on the Okta side and nice to see you, thanks for the question. I'll just add on the Okta side, it's a very broad range. I mean you have examples of smaller organizations that will -- take Major League Baseball, right? Centrally, Major League Baseball is not the 32 teams. It's just central Major League Baseball, so it's 1,000 employees or something like that. They're a giant customer identity and access management customer of ours. Why? Because there's 60 million consumers every year who log in to stream MLB games, whether it's the World Series or the playoffs or anything else. So that's an example of a smaller business that is actually a giant CIAM customer. Then I'll flip it around, and you got to remember that when we talk about the market opportunities -- and we get that question a lot, we haven't gotten it here. But just to remind people, people always say, "Well, which one is bigger?" First of all, I don't know. They're both tens of billions of dollars, okay? And they're both growing fast. Secondly, we're barely penetrating either one. But what I would also say is you take an organization like McKesson, Fortune 8. We've talked about them on previous earnings calls. Now McKesson's got -- McKesson ships 1/3 of all drugs, pharmaceutical drugs in the -- in North America every day. So large organization. They've got 100,000, 125,000, something like that, employees, okay? They have standardized on workforce, on Okta -- on the Okta Identity Cloud for their workforce identity access management, Universal Directory, Single Sign-On, Lifecycle Management, MFA and some of the newer products as well. So that's great. But the only -- and as we come up with newer products, IGA, PAM, perfect examples, and they're starting to use ASA so that will be a natural upsell to the conversations earlier. As we come up with new products, they're going to buy them. But they only have one workforce. Now that workforce of 125,000 employees, so there's 125,000 seats of each of these products that we're going to come out with, but they have N number of customer identity and access management initiatives. They have supply chains. They have B2B. They have B2C. They have B2B2C because they have N patients. They have N clinicians. They have business partners who distribute the drugs, each of those is a CIAM opportunity. So there, you've got a Fortune 8 company where it's a -- obviously, a very large organization in terms of revenue. And they've got N number of CIAM opportunities. Each of those might be smaller but when you roll them up, it could be a big opportunity. So I wouldn't say there's one stamp fits all. I would say there's a lot of opportunity out there. And frankly, again, if you look at the macro tailwinds that we're riding here of hybrid IT, everyone's got to move to cloud, but digital transformation, the most overused term in the industry by far, what it really means is everyone just needs a better interaction with their customers, partners, vendors, suppliers, small company, big company, a public institution, private organization, anywhere in the world, this is across geographies, and that's why we're so excited about this opportunity of working with Auth0.
Dave Gennarelli
executiveOkay. We have time for 2 more questions. The first one's another online question. It's from Jackie Glynn at Glynn Capital. Given the tremendous new product flow in Auth0 coming on board, how do you think about net retention rates? And should those end up north of where they are sustainably from today?
Michael Kourey
executiveYes, great question, thank you. And thank you for conveying that Dave. Yes. Clearly, again, as I mentioned earlier, we have 2 companies with great net retention rates. We have these organic launches of these new products. And yes, that is a tailwind going forward. We're certainly very early on all of these activities, so we're not guiding something different today. But we're very happy with where we are from the gross and net retention. As you know, it's 121% last quarter. We also know that Auth0 operates at over 120%, and we do have these tailwinds for upsells. So yes, we're excited.
Dave Gennarelli
executiveExcellent. Okay. Final question for this afternoon. Back to Michael Turits at Keybanc.
Michael Turits
analystSo I just really wanted to make sure that I'm clear, given the number of questions there have been about what happens with the sales integration. Todd, how much do these -- do you guys really stay as separate organizations? And how much do you become one organization? And if you can tell me where that happens in each functional area, I think that would be a great clarification.
Todd McKinnon
executiveI applaud your ability to get back in the queue. It's impressive.
Michael Turits
analystI don't know how it happened but whatever.
Todd McKinnon
executiveI look at this in a couple of phases. It really starts when the transaction closes, that's phase 1. And I think, like I said, the first year or so, the priority is both teams need to hit their plans, grow, grow, grow. I think they'll -- and how we actually integrate over that period will be -- probably on the go-to-market side, it will be the most integration and the most collaboration. As Susan mentioned, the first thing is just some basic communication and collaboration and clarity for the customers that might be involved in a deal with both companies. And then on product, there'll probably be very little integration as they have road maps and they have things they're working on both sides for the first year. I would imagine that over the course of that year, the sales teams will figure out how to integrate more closely, more quickly. But we don't know. We haven't figured out the integration. And the priority is going to be maintain growth, maintain a great customer experience, maintain their -- respective cultures of both teams. So the first year will be largely independent. I think we will make a lot of progress on our plans. And as we get through the close and into some of the analyst communications and some of our opportunities to speak, we'll have more details as we get through that first year in terms of how we're doing the integration because we do think the integration is very, very important. And the execution on that integration is a key driver in how this works out over the next 5 or 10 years. So we're laser-focused on making sure it's effective.
Dave Gennarelli
executiveAll right. Well, that's it for this afternoon's meeting. We appreciate you attending. Now there's more Oktane content tomorrow so tune into that. And if you have any follow-up questions from today, you can e-mail us at [email protected]. And that's it for our show. Thanks for tuning in. Bye.
Todd McKinnon
executiveGoodbye, everybody.
Dave Gennarelli
executiveBye-bye.
Todd McKinnon
executiveThank you.
This call discussed
For developers and AI pipelines
Programmatic access to Okta, Inc. earnings transcripts and 32,000+ others is available through the
EarningsCalls.dev REST API. Plans from $24.99/month — full transcripts, speaker segments,
full-text search, and the recently-added /api/v1/transcripts/recent polling endpoint for ETL pipelines.