Okta, Inc. (OKTA) Earnings Call Transcript & Summary
June 3, 2021
Earnings Call Speaker Segments
Jonathan Ho
analystHello, everyone, and thank you for joining us for our virtual Growth Stock Conference. My name is Jonathan Ho, and I'm the cybersecurity technology analyst for William Blair & Company. With us today is Todd McKinnon, the Chief Executive Officer of Okta. Before we begin, I'm required to inform you that a complete list of research disclosures for conflicts of interest is available at our website at www.williamblair.com. Todd, thank you so much for joining us today for our conference. For those that are maybe a little bit less familiar with the company, can you give us a brief overview of Okta and just maybe help level set folks in terms of the background?
Todd McKinnon
executiveJonathan, thanks for having me, and thanks for William Blair for hosting me. It's great to be here and get a chance to speak with everyone. Okta, our vision at Okta is to enable anyone to safely use any technology. So we're really about enabling people and companies to use technology. We do that through our products and platform, which are, we call it the Identity Cloud. And the specific use cases we provide customers is that we help them connect their employees to all the technology they need to be productive at work, their email, their apps, really universally, any technology they need to connect to we'll do that securely with a log in system and with identity management system. And then for our customers, customers, we provide the same capabilities. We help our customers log their customers into their websites and mobile apps and provide the password management, the security, the single sign-on, and that's really the mechanism with which we enable them to use technology.
Jonathan Ho
analystExcellent. Excellent. I guess when we sort of look at Okta and sort of the company's rise to dominance in the identity access management space, with the company evolving over a period of time from kind of a point solution to now a platform provider. Can you help us maybe understand sort of the longer-term perspective. What does that end game for Okta look like as the platform grows and evolves? And how do you -- what are the steps for you to get there?
Todd McKinnon
executiveI like that term dominance, I like that. I like to -- but really, it means that we're providing a lot of value to customers. And I think if you look at the evolution of our company, we're not the first identity management product or system. And I think what we were -- we were fortunate in a couple of ways. One was that with the rise and the -- really what's become the common future of architecture of cloud computing. And also other things that are happening with every company trying to get online and have a better customer experience and then really what happened with mobility and especially in the past year with remote work. All of these trends made the problem that identity management solved really a pressing problem. So you have all these cloud applications, you want to connect to them remotely. You have to do it securely. You have to make sure your customers can log into your new web apps or your mobile applications identity became more important than ever before. And then at the same time, we built this cloud-first identity management platform, the Identity Cloud, that provided a very adoptable and pre-integrated and this complete solution that solved the security and the ease of use. And so there was a really good timing for these trends to come together. That's really driven this market. From really what, 7 or 8 years ago, people said, "How big of a company can you build around identity?" We've never seen a big identity company. They've always been bought when they're smaller, they kind of petered out. But these macro trends, more cloud, more security, more digital transformation, along with, I think, a much better product and platform has really catalyzed our success. But we are -- we believe that we're -- it's still early in our journey, and we're then we're just getting started. And I think when we look at the future, it's really about making sure that the evolution of the future is around Identity is really one of the primary clouds in the enterprise. And what I mean by primary cloud is organizations are going to have thousands and thousands of vendors with the variations of technology that are enabled by different devices, IOT, different types of connectivity, applications, platform -- development platforms. They're going to have thousands of vertical applications, but they're really going to have 5 or 6 key vendors. These are going to be around things like maybe collaboration or infrastructure as a service or ERP, back office, financial data, and we think it's really -- for our future, it's critical that identity rises up to that level. And it is one of the 5 or 6 key platforms that enterprises invest around. And we think it's -- if we do our jobs right, it will have earned that right because it supports tons of use cases around Identity and connects all of the users to all the other platforms. So all the major platforms and all the other thousands of different platforms. So having an independent and neutral primary cloud is something we're very, very focused on over the next 5 to 10 years.
Jonathan Ho
analystAbsolutely. When you think about sort of the broader digital transformation trend, what does that sort of mean? Like how does Okta participate in that in terms of enabling that digital transformation for your customers?
Todd McKinnon
executiveWell, I think our 2 big market segments, one of them is workforce identity, which is helping our customers, employees and partners and contractors log in to all the technology they need to be productive in. And when you talk about digital transformation, in some cases, people are talking about just modernizing the tools for their workforce, particularly in a lot of knowledge workers have had, obviously, digital tools for a while now, but what's happening with -- I mentioned all of these new types of vertical applications. In a lot of cases, you're getting companies that are getting digital tools to every employee and every contractor and every partner for the first time. So maybe it's a blue-collar worker or it's different use cases that didn't have -- didn't need core collaboration apps, but they -- there's a new application that can make them super productive. And participate in a more seamless way in the business process of our customers. So that's -- this modernizing technology, whether it's just a simple like on-premise to cloud for a knowledge worker or connecting and getting nonknowledge workers in the workflow for the first time, we help our customers do that and do it securely. On the usual -- but the majority of the time, people say digital transformation, are talking about the products and services. So it's the car company that's building the mobile app and the website to connect with their customers and disintermediate their supply chain so that they compete more effectively with Tesla. And that's happening in every industry, especially -- we talk a lot about COVID from the workforce side and enabling people to work remotely and having to do that securely. But it's having just as big of an impact on the customer identity side, where we participate, which is companies are reinventing themselves to make sure they can directly connect to consumers that are more online than ever that are -- they're not going to the retail store, they're looking first for the online version of that. And then the second choice is, everyone is seeing the charts of how e-commerce has accelerated through COVID. So we can help them by solving the identity challenges of that. And all of these customer-facing interactions have an identity component. You have to log that person onto the site of the mobile app, you have to make sure it is who they say they are. It's a verified identity. It's authenticated correctly. The security risks are taken into account, and we help the customers -- we help our customers do that for their customers.
Jonathan Ho
analystAbsolutely. Absolutely. And maybe talking a little bit about sort of this customer-facing opportunity. The acquisition of Auth0 appears to be pretty complementary to your own homegrown solution. Can you help us understand maybe what the differences are between selling to DevOps teams and infrastructure teams? And maybe what makes Auth0's product a little bit more suited for that type of channel?
Todd McKinnon
executiveOur total addressable market is $80 billion, and it's broken down $50 billion in the workforce identity market and then $30 billion is this customer identity and access management market. So it's a very -- just quantitatively, it's a big percentage of our TAM. Now I think even more than the quantitative part, qualitatively, when you think about this concept of building this primary cloud and really in the next 5 or 10 years, rise at this level where a big enterprise is going to spend $20 million, $30 million, $40 million a year on one of these primary clouds. You have to cover a broad set of use cases for that customer. And if you look at, broadly speaking, like they have their workforce people and then they have customer and so you got to cover both of those sides to have -- to really have the -- to earn this right to be one of these primary cloud. So that's why customer identity is so important to us strategically. Now when you break down that $30 million of TAM, there's really some subsegments in there that market. There's one segment of it, which is more of a -- they want more of a preconfigured solution. They're offering a service to their customers, but it's -- they want something that plugs in quickly. They don't have to write a lot of code, it maybe integrates with out of the box, SaaS applications that they're using to provide that customer service and so that's part of the market. And the second part of the market is really the developer-led applications built from scratch. The developers want to control every pixel on the screen, every bite. And that's -- and so doing customer identity for those types of developers for that type of user and for those types of requirements is a separate segment. So what we've done with Auth0, who is from the beginning of their company has focused exclusively on the developer, we've combined both of those, and it really gives us the clear leadership position in this $30 billion of TAM. The -- in terms of you asked a question about the buying cycle. The buying cycle between those 2 parts of the market are -- it's literally -- or it's as you would expect, the developers that are building solution, it's more of a try. It's more of a building the prototype, put the API calls into the app from the beginning. And then later on, you sell to the development executives or the -- in case it's the CSO that's overlooking the compliance of that application. The subset that market is more preconfigured, it usually starts from a tops down sale. And that's traditionally where Okta has done very well. So I think these things coming together are very complementary, as you mentioned, and we're -- it's a very important part of our strategy, and we're excited about bringing this to the market as one integrated solution.
Jonathan Ho
analystThat makes a ton of sense. I mean just maybe delving a little bit deeper into that integration process. I mean how do you sort of assure customers that are buying one side or the other that they're not buying a product that will be considered superseded by the other platform over time? How do you sort of take the best of both worlds and sort of come up with a product road map?
Todd McKinnon
executiveIt's a great question. It's something we're very focused on. The acquisition of Auth0, it closed only about a month ago. So we've had a month of working together closely sharing data and analyzing the opportunity. And the good news is that there's lots of good news. All of the assumptions we made pre-deal have been validated, particularly on the complementary nature of the customer bases. And there is a decent amount of shared customers, but they're shared customers in a way that's complementary. You'll see a different group, one group using Auth0 for customers. Another group using Okta for customer identity, but for a different initiative and then maybe workforce identity as well. So all that pre -- the theories about the deal, pre-deal, have been validated. So that's one thing that's very positive. The second thing is that -- and this is -- gets to your question about communicating with customers and about -- and the expectations going forward. It's important for people to understand, well, the 2 products, Okta customer identity and Auth0 customer identity. If you zoom out enough, they look similar. When you get close to the details, they're actually quite different. And the details on how you use them and the way the APIs work and what they -- what their strengths and weaknesses are. And so we've got to explain that to customers, first of all. Because if customer is concerned about supporting both solutions, they probably don't understand how complementary they are. And once we explain that to them, and they get the idea of how critical they both are to our strategy to have the best solution in the SIEM market and the build of this primary cloud. It becomes more clear that we're going to invest and maintain a little bit of both of them going forward. Once you clear that, there are a lot of obvious ways that we can integrate these things. Like one example that's really important for people to understand is that both services get a valuable amazing amount of threat data. People trying to attack from certain IP addresses. So one of the obvious integration is you can combine that threat data, and make both platforms more defensible because they're leveraging the threat data from the other platform. So that's one area of obvious synergy. There's many more of these as well, whether it's -- we have a low-code workflows platform service. That's -- it's very straightforward for Auth0 platform to be able to call that. And then -- and there are other areas where we can call there. So it's -- there's a lot of synergy there that we're going to be communicating to customers about how the platforms are integrated going forward.
Jonathan Ho
analystThank you for the additional color on that. When we think about sort of the typical customer that's buying the CIMS platform and enterprise workforce from the same vendor, what are sort of the synergies that they're looking for, like, to me, it's always seemed like these are pretty different use cases. People don't use the same directory necessarily between their customers and their enterprise. Why are people sort of buying this together? Why does it make sense for them to be bought together?
Todd McKinnon
executiveI think, I think so -- especially on the customer identity side, it's a newer market. Especially then -- we're doing workforce identity in a new way, but it's a market that's been around for a while. There's legacy software companies that did workforce identity. Customer identity is a newer market. And a lot of the -- in the past, a lot of it's been -- they built their own. So they were building an app, and they were just use open source tools where they would implement the password reset flow and the directory and so forth. So particularly, when you think about why someone would use the same vendor, the first question is why they would use a vendor, right? And I think that's -- when you -- the first thing you have to if you want people to use a vendor, you have to make it really, really easy and really flexible. And that's why having the breadth of both the configuration based approach from Okta SIEM and the Okta Customer Identity or the developer approach from Auth0 basically gives them a lot of flexibility. So the first hurdle of does the vendor have a solution that meets my requirements in a way that's much easier and much more conducive to how I want to work than building it myself. So that's the first hurdle. And then the second hurdle is just -- there's just a like a familiarity with the vendor, there's a confidence in the reliability. There's a contract element. Those are just natural. There are just some natural synergies there. And then over time, I think as the market matures and it becomes more of a -- it's clear that you should buy this type of market. Then I think that we will have more of the direct concrete benefits of having one vendor, whether it's the example of sharing the threat data that I mentioned before, whether it's other ideas we have about how you could make it like a concrete demonstrable advantage to use workforce and customer identity from the same vendor beyond just the whole SIP platforms, trusted vendor, reliability and admin console and those kind of things.
Jonathan Ho
analystThat makes a ton of sense. Okta has recently emphasized more the PAM and GRC markets, which historically, the view seems to be that these were maybe smaller opportunities relative to your core TAM opportunities. Yes, I guess why are these becoming more relevant now? And does the -- like are we seeing the TAMs grow larger for these markets? Or is a multiproduct suite, it's something that's more desirable now. I'm just trying to get a sense of why emphasize this more now versus historical periods?
Todd McKinnon
executiveWell, I think that the requirements for privileged access management, and the requirements for identity governance and administration, which is I think kind of a subset of global risk and compliance, or GRC. The requirements are important requirements that have been around for a long time and that have -- that should result, I think, in a big market. I think one of the problems has been, I think the products have been -- I think the products have been complex enough in nature that they've limited the size of the market. You hear a lot of customers that the implementation costs and the complexity doesn't clear the bar of the ROI they need. So I think that's constrained the market a little bit. I think in a lot of ways, the identity market was similar. When we started, the market was much -- I remember early days of Okta, Gartner told us the identity market was a few hundred million dollars. And they kept kind of saying that and they would kind of get wind of our revenue and then raise the market size a little bit above ours. And then -- so I think effectively, we grew the market. And I think that similar dynamic in the IGA market and the PAM market, that I think with a better product that's built in a modern way, and it's tightly integrated to the Okta core, we can make these markets bigger. And while it doesn't mean that there's other companies like SailPoint and CyberArk, great companies, have really established these markets in their current form, but we believe that the market should be a lot bigger. And that by building a better product, more modern approach, more flexible, we can expand the market for everyone, and we think we'll take a big chunk of it as well.
Jonathan Ho
analystAbsolutely, absolutely. I mean, I guess one thing that has been coming up a lot in our conversations is that when we think about the TAMs that you're tackling, these are some very, very large numbers out there, especially relative to the size of the company today. I mean, I guess one of the concerns that investors have is that it seems like there's at least a worry that the core of the company is starting to slow in terms of growth. And so I guess the question is, what keeps either the market from growing even faster or Okta from growing any faster? Is there anything that's sort of gaining your growth, especially in that core workforce side of the business today?
Todd McKinnon
executiveOne thing that to understand about the business model is, we have to invest in the go to market. So we have to generate -- because -- and if you think about the dynamics I've talked about, this concept that identity is a primary cloud and that it's a first-class -- it should be a first-class presence in customers' environments. That's still not accepted universally. So if you talk to 10 CIOs, you probably get 2 or 3 that would have that world view like we do. Now 1 or 2 of them probably would be Okta customers. We've helped influence that. But it's still -- there's still -- we still have some convincing to do. If you look around the world, in large enterprise, medium sized enterprise, so that takes investment. So the level to which we invest, our growth has followed pretty predictably over the last 10 years and it continues right up to this day. So I'm very confident of that. So that's one element of it. That's very important. The other element is that the product does have to -- the more it can expand and address more of these use cases. Whether it's customer identity, whether it's privileged access management, whether it's a identity governance, it makes that messaging easier because it's just more clear. It's like, "Oh, obviously, yes, this thing is so important. It does my customers and it's -- does my privilege access and my core identity, my multi-factor and it does my governance, and my auditors love it." So it kind of -- it's like a virtuous cycle on that. Spreading this message and espousing this world view to everyone. And then the last thing I'll say, these -- the macro trends that we've talked about, Jonathan, whether it's more cloud adoption, more apps, more requirements for working remotely, more flexible, the preeminent concern of security on everyone's mind. The concept of industry parlance like zero trust and having to have a zero trust environment. I was recently on the phone with a large 3-letter agency in the government and they were reacting to -- they're a big Okta customer, and they want to be even bigger. And they were -- the reason they wanted a call with me is because they're reacting to the presidential executive order about zero trust security and multifactor authentication and that was from the Biden administration. It basically says every part of the federal government has to move to zero trust, which means strong identity, multifactor, strong authentication across the board, which is -- it's kind of a very symbolic, big statement of what's been going on all over the place in private companies as they've realized this over the last few years and that's a big catalyst. So the more that happens, the more these unfortunate cybersecurity issues like SolarWinds, these all go after -- they get in different ways. They maybe get through a firewall or they get in there with malware, but they inevitably go after the identity system. They -- because they know if they get in there and they get to the identity system, then they can further attack laterally and it's kind of the -- it traditionally has been the weakest spot. So the better people can -- the more people can have strong identity systems it protects them from these cyber attacks. So all these things together, they've catalyzed the market and fueled our success. So to the degree to which they'll continue, we'll continue to have success.
Jonathan Ho
analystAbsolutely, absolutely. I think as that awareness rises and as we see more initiatives from the government, that only drives sort of the laggards into the market that maybe haven't considered security as much as they should or taking on the zero trust approaches. One thing that I did want to understand a little bit better is what you're seeing out there in terms of adoption on a geographic basis? Like do you like -- I mean, from our checks, we see North America as being ahead of the curve. And maybe EMEA not so far behind and perhaps APAC a little bit behind as a region as well. I just want to get a sense from you how do you think about sort of the ability to expand Okta beyond sort of the core North American opportunity as well.
Todd McKinnon
executiveYes, it's really important. It's about 16-ish -- about 16% of our revenue. And it needs to -- the international is more than 16% of the economy, so we need to continue to grow that, and we will as we invest there. I think we have, to some degree, focused on North America because there's been so much opportunity there, and we're broadening that. We're investing. It's -- there's some difference in channels and the importance of channel partners, but it's a pretty horizontal world in terms of the problems we solve. It's not like you have geographical differences in language or business processes that make identity not important. It's an international universal thing to a large degree. So we're optimistic about that. The other thing I'll mention there, too, is Auth0 is -- has about -- traditionally been -- had a very healthy international mix, about 40% of their revenue has been international. So that will give us some international coverage. In addition to just the -- when you combine the revenue streams, the real exciting thing is that given that they have customers internationally as we get the cross-sell working. So for example, we have this, which is really a precursor to our advanced TAM product, which is called Advanced Server Access. There's a natural synergy with the buyer of Auth0 because Advanced Server Access is usually sold to administrators or development folks that need to log into a lot of server, Linux servers and want to secure them. Well, Auth0 is sold to developers that are building things on Linux servers. So think about the cross-sell opportunity, you're cross-selling into a base that's more mix of international. It helps -- besides just combining the revenues, it helps the international growth going forward, which is -- so that's one example of how we'll get some boost there.
Jonathan Ho
analystAbsolutely. Absolutely. One of your largest competitors or quasi competitors is Microsoft. And for many years, you've competed with Azure Active Directory, they at least recently have had a number of reliability issues. Are you starting to see customers give up on Microsoft because of the numerous outages they've had? Is there sort of the ability to push back against their Azure AD for free, bundling with some of their products? Just want to get a sense for how you think about some of the issues around Microsoft?
Todd McKinnon
executiveSo I think -- as I've said a couple of times so far, long term, we -- there's other vendors that have versions of what we sell, they are in our markets to others to one degree or the other. But for us, all of our focus is on making sure that everyone understands this concept of a primary cloud. And how important it is that people understand the flexibility and the choice that neutral impartial primary cloud to hand your identity, what kind of flexibility that gives you. If it's Microsoft or if it's another big platform, they're not going to give you an identity system in a mutual way route you to the other choices for their platform. And they're just -- that's not how they work. They want you to go to all their stuff and consume their stuff. So that's -- at a high level, that's the competitive dynamic that we work on the most, like people understand the importance of this primary cloud and this neutrality. Specifically to Microsoft, I think that, yes, like when they can't keep their service running, that definitely helps heighten the risk there and the alternative and the value of other alternatives. And then another thing that helps is the security breaches that they're having. Whether it's the exchange vulnerabilities or the -- in the SolarWinds attack, there was a product from Microsoft called Active Directory Federation Services that was used as a vector in the attack to take over the identity systems. So I think that not only just the neutrality part, but the trust in your security to one vendor is giving people some pause. So yes, that being said, we'll keep working hard, building great products, making sure we build a brand and a culture in our company that is known for helping customers with -- what in a lot of cases is a complex area. And then -- and for many companies I talked to, the biggest value of someone like Okta is, we're really focused on this. And when you try to get this bundled in with as one line item and some other big agreement, it's hard to get experts, and it's hard to get people that really can help you solve these complex challenges in a scalable and predictable way, and that helps us a lot as well.
Jonathan Ho
analystAbsolutely. Absolutely. Well, unfortunately, we've reached the end of our allotted time. And so I want to thank you, Todd, for coming on and answering some of our tough questions. And so I hope you enjoy the rest of the conference. And take care, everyone. Thank you.
Todd McKinnon
executiveThank you. I appreciate it.
Read the full transcript via the API
You're viewing the first half of this call. Get the complete Okta, Inc. transcript — plus 251,000+ transcripts from 12,000+ companies, speaker segments, AI summaries and full-text search — through the EarningsCalls.dev API.
Get the API View API docs →This call discussed
For developers and AI pipelines
Programmatic access to Okta, Inc. earnings transcripts and 251,000+ others is available through the
EarningsCalls.dev REST API. Plans from $24.99/month — full transcripts, speaker segments,
full-text search, and the recently-added /api/v1/transcripts/recent polling endpoint for ETL pipelines.