Okta Privileged Access Platform release notes

Learn about new features, enhancements, and fixes in the latest version of the Platform release.

See the Okta Support website for the list of supported operating systems with End of Life (EOL) dates.

Current release

Version: 2026.01.0

Deployment date: January 21, 2026

Release summary

The following releases are now in Preview:

Password rotation for SaaS app and Okta service accounts

Admins can now enable automatic password rotation for SaaS apps and Okta service accounts within their security policies. This feature allows for immediate rotation upon resource assignment or the flexibility to skip the initial rotation. See Security policy.

Previous releases

Version: 2025.12.0

Deployment date: December 16, 2025

Release summary

Okta Privileged Access supports thirty new SaaS apps

Okta Privileged Access now supports thirty new SaaS apps, including ServiceNow, Jira Server, SAP, and Palo Alto Networks. See Supported SaaS apps.

New local group management options for AD accounts

Okta Privileged Access policy rules now provide granular control over the local group membership of Active Directory (AD) accounts on target hosts. Admins can configure the policy to grant or revoke local admin rights, or select a Do Nothing option to prevent Okta Privileged Access from modifying any local groups. See Add rules to a policy.

Version: 2025.10.2

Deployment date: October 22, 2025

Release summary

The following releases are now in Production:

Session recording for Active Directory accounts

You can enable session recording through the Okta Privileged Access gateway using an Active Directory account rule. See Add rules to a policy.

Version: 2025.10.0

Deployment date: October 08, 2025

Release summary

The following releases are now in Production:

Exclude symbols in project password policy

Password complexity settings for servers, SaaS app service accounts, Okta service accounts, and Active Directory accounts have been updated. You can now exclude specific symbols from Okta Privileged Accesspasswords, preventing rotation failures in systems that restrict certain symbols. See Projects.

Auto-generate passwords for SaaS apps

Okta Privileged Access users can now use the password generator feature to update the password for their unmanaged SaaS apps. See Okta Privileged Access user guide.

Version: 2025.9.1

Deployment date: September 19, 2025

Release summary

The following releases are now in Preview:

Auto-generate passwords for SaaS apps is EA

Okta Privileged Access users can now use the password generator feature to update the password for their unmanaged SaaS apps. See Okta Privileged Access user guide.

The following releases are now in Production:

Okta-managed Active Directory accounts is EA

You can now set up Active Directory (AD) account rules to import users managed by Okta. Enabling an AD account allows active users to sign in to Okta and access their SSO apps through the End-User Dashboard. Admins and users can rotate passwords via Okta Privileged Access, with synchronization occurring between the AD server and Okta. You can also filter account names or Okta group memberships when configuring AD account rules with user management capabilities enabled. See Active Directory account rules.

Version: 2025.9.0

Deployment date: September 08, 2025

Release summary

The following releases are now in Preview:

Okta-managed Active Directory accounts is EA

You can now set up Active Directory (AD) account rules to import users managed by Okta. Enabling an AD account allows active users to sign in to Okta and access their SSO apps through the End-User Dashboard. Admins and users can rotate passwords via Okta Privileged Access, with synchronization occurring between the AD server and Okta. You can also filter account names or Okta group memberships when configuring AD account rules with user management capabilities enabled. See Active Directory account rules.

Version: 2025.08.3

Deployment date: August 27, 2025

Release summary

The following releases are now in Production:

Active Directory Remote Desktop Protocol (RDP) support is EA

This EA feature enables security admins to grant RDP access to Windows servers with Active Directory credentials. Once provisioned, users can connect through the Okta Privileged Access client. Security admins can configure MFA, approval requests, or checkout processes. Gateways aren't currently supported for RDP connections using Active Directory credentials. See Active Directory account rules.

Version: 2025.08.2

Deployment date: August 21, 2025

Release summary

The following releases are now in Preview:

Active Directory Remote Desktop Protocol (RDP) support is EA

This EA feature enables security admins to grant RDP access to Windows servers with Active Directory credentials. Once provisioned, users can connect through the Okta Privileged Access client. Security admins can configure MFA, approval requests, or checkout processes. Gateways aren't currently supported for RDP connections using Active Directory credentials. See Active Directory account rules.

Version: 2025.08.1

Deployment date: August 13, 2025

Release summary

The following releases are now in Production:

Active Directory rotate password configuration

This EA feature enhances flexibility for Okta Privileged Access admins and users in managing password rotation. Resource admins can disable initial password rotation for discovered Active Directory (AD) accounts. Security admins can set policies that grant end users the ability to rotate their passwords. See Active Directory account rules.

Version: 2025.08.0

Deployment date: August 13, 2025

Release summary

The following releases are now in Preview:

Active Directory rotate password configuration

This EA feature enhances flexibility for Okta Privileged Access admins and users in managing password rotation. Resource admins can disable initial password rotation for discovered Active Directory (AD) accounts. Security admins can set policies that grant end users the ability to rotate their passwords. See Active Directory account rules.

The following releases are now in Production:

Search capability for Okta Privileged Access secrets

Okta Privileged Access users can now search secret folders and secrets. See Add rules to a policy.

Version: 2025.06.0

Deployment date: June 04, 2025

Release summary

The following releases are now in Production:

  • You can now schedule the password rotation frequency for all projects up to a maximum of 400 days.

Version: 2025.05.3

Deployment date: April 29, 2025

Release summary

The following releases are now in Production:

  • Cloud infrastructure entitlements feature is no longer supported in Okta Privileged Access.

Version: 2025.04.2

Deployment date: April 10, 2025

Release summary

The following releases are now in Production:

  • If users failed to meet the MFA requirement for Okta Privileged Access and enrollment was disabled, clicking the Okta Privileged Access tile incorrectly redirected them to the team creation screen.

Version: 2025.04.0

Deployment date: April 02, 2025

Release summary

The following releases are now in Production:

Manage Active Directory accounts in Okta Privileged Access

This feature allows management of Active Directory (AD) account passwords through Okta Privileged Access using the Okta AD agent. Okta Privileged Access admins can set discovery rules for accounts in specific organizational units (OUs) and create policies for user access, ensuring passwords are rotated upon check-in or on a schedule. Users with access can view their assigned accounts and retrieve passwords. To enable this feature, contact Okta Support. See Manage Active Directory accounts.

Version: 2025.03.1

Deployment date: March 26, 2025

Release summary

The following releases are now in Preview:

Manage Active Directory accounts in Okta Privileged Access

This feature allows management of Active Directory (AD) account passwords through Okta Privileged Access using the Okta AD agent. Okta Privileged Access admins can set discovery rules for accounts in specific organizational units (OUs) and create policies for user access, ensuring passwords are rotated upon check-in or on a schedule. Users with access can view their assigned accounts and retrieve passwords. To enable this feature, contact Okta Support. See Manage Active Directory accounts.

Version: 2025.03.0

Deployment date: March 12, 2025

Release summary

The following releases are now in Production:

  • Password rotation history is now supported in SaaS and Okta accounts.

Version: 2025.02.3

Deployment date: February 26, 2025

Release summary

The following releases are now in Production:

  • The Okta Privileged Access policy now supports the MFA conditional for SaaS and Okta accounts.

Version: 2025.02.0

Deployment date: February 19, 2025

Release summary

The following releases are now in Production:

Fixes
An unused team setting related to SCIM usernames has been deprecated

Release notes retention policy

Okta maintains release notes online for a period of 12 months following a release.

Contact Okta Support to request archived documentation for releases outside this window.