Okta Aerial release notes

2026.08.3

Group-assigned Aerial member role enables managed org access

Users assigned the Aerial Member role through a group assignment can now request and receive access to connected managed orgs.

2026.03.3

Fixes

When users created access request conditions in the Aerial Console, selecting Require requester to specify duration caused an internal server error. (OKTA-1134014)
Some users couldn't add managed orgs to their account. (OKTA-1135081)

2026.03.0

Org groups and cross org admin access

Previously, access request conditions for managed orgs could only be applied to all managed orgs using a template app, or a single org from the Aerial org's Admin Console. Now, you can create org groups and apply access request conditions to one or more managed orgs all from within the Aerial Console. This helps you define precise rules for access, streamlining governance, and improving usability. See Create an org group.

Aerial member role available in EA

Previously, all users were invited as Aerial Owners with super admin privileges. Now, they can be invited as Aerial members, providing lower-scope permissions. This enhances security by distinguishing true owners from members who need access for specific tasks, ensuring tighter control over Aerial workflows. See Aerial members.

Cross-org access 2FA authentication policy is self-service EA in Preview

Aerial admins have faced issues when trying to access downstream managed orgs due to sign-on policy mismatches between their Aerial and managed orgs. To eliminate these conflicts, Okta now supports a dedicated, high-priority 2FA authentication policy rule specifically for Aerial admins performing cross-org sign-in attempts. The new policy bypasses the existing managed org admin dashboard sign-on policy requirements, ensuring reliable and secure admin access across connected Okta environments. This feature is self-service in Preview on managed orgs.

Okta Aerial is now Generally Available

Okta Aerial allows you to manage multiple Okta orgs from a single, centralized account. The Aerial account lives outside of your other orgs and can manage any Production or Preview org that's linked to the Aerial account. Each Aerial account has a dedicated Aerial org where you can invite Aerial admins who can request and be granted access to connected orgs in your environment. See Okta Aerial.

Okta Aerial is now available in Early Access

Okta Aerial allows you to manage multiple Okta orgs from a single, centralized account. The Aerial account lives outside of your other orgs and can manage any Production or Preview org that's linked to the Aerial account. Each Aerial account has a dedicated Aerial org where you can invite Aerial admins who can request and be granted access to connected orgs in your environment. See Okta Aerial.