Okta Classic Engine Preview release notes

Subscribe to RSS

Version 2026.44.0. Deployed on October 28, 2026.

Generally Available Features

High Risk Proxy detection

Admins can now detect and control access from high-risk commercial proxy networks using a new HIGH_RISK_PROXIES service category in Enhanced Dynamic Network Zones. This category is powered by an Okta-curated list of proxy providers that Okta CyberDefense has identified as consistently high-risk, based on correlation with observed attacks such as credential stuffing and rate-limit abuse. Admins can include or exclude HIGH_RISK_PROXIES when configuring Enhanced Dynamic Network Zones, enabling more precise policies, for example, denying access through the global session policy or app sign-in policy for traffic originating from these proxy networks. See Supported IP service categories.

Updated retention period for incomplete app assignment tasks

The retention period for incomplete app assignment tasks is now six months. Okta automatically purges incomplete task records older than six months.

Network zone page localization

Additional text on the Networks page is now translated to French and Japanese.

Okta On-Prem MFA agent version 1.8.8

This version includes security enhancements.

OIN Community Integrations

New apps often launch before Okta has an integration for them, forcing admins to delay rollout or run the app without single sign-on and automated provisioning. Community Integrations close that gap. Okta builds the integration from the application's public APIs and publishes it to the Okta Integration Network at no additional cost. A new integration starts as Community Preview, available to install and test in preview orgs. Once a customer has run it in their own production org, it becomes Community Verified and can be installed in any org. You get a missing integration to test within days, not months, and decide when it's ready for production based on your own testing. See Community integrations.

Generally Available Enhancements

Client credentials OAuth2.0 grant type for SCIM or API Integration Actions-based app integrations

When you create app integrations using the Okta Integration Wizard, you can now use client credentials (tenant-specific client ID and secret) as an OAuth 2.0 grant type for SCIM or API Integration Actions-based app integrations. This helps you simplify and secure the setup and improves user experience by reducing the need for then to manually sign in.

Early Access Features

Incremental imports for Office 365

Admins can now schedule and run incremental imports for Microsoft Office 365 and Office 365 GCC High app integrations.

Multiple entitlement support for On-prem Connector for Generic Databases

The On-prem Connector for Generic Databases now supports importing multiple entitlements within a single app instance. This allows admins to assign users to multiple database-level entitlements without creating separate app instances.

Fixes

  • Some global session policy rules weren't evaluated if a user signed in shortly after being added to a group that was recently added to the global session policy. (OKTA-1265480)

  • When a CSV user import containing entitlement columns included an unparseable cell, the Admin Console displayed a raw code exception instead of a helpful error message. (OKTA-1299822)

  • When requests to the /api/v1/groups API returned more than 1000 users, pagination looped back to the first page instead of advancing to the next. (OKTA-1265598)

  • During provisioning tasks, Office 365 app instances logged misleading customRoles attribute errors in the System Log. (OKTA-1297976)

  • Group rules didn’t automatically assign imported users to target groups based on their app group membership. (OKTA-1300676)

Okta Integration Network

  • Cockroach Labs (SCIM) was updated with a new app logo.

  • Cust (OIDC) is now available. Learn more.

  • Cust (SCIM) is now available. Learn more.

  • Init (API Service) is now available. Learn more.

  • Juno Journey (SAML, SCIM) has a new app name and logo.

  • Provisioning is now available for dbt Cloud. See Integrate dbt Cloud with Okta.

  • Semperis Lightning (API Service) is now available. Learn more.

  • STLabs (API Service) is now available. Learn more.

  • Sumsub IDV (IDV) is now available. Learn more.

  • Thomson Reuters Account (SAML) is now available. Learn more.

  • Tungsten (OIDC) is now available. Learn more.

Documentation updates

RSS feeds for release notes

RSS feeds are now available for Preview and Production release notes so that you can track and receive automated updates on new capabilities and fixes. Click the RSS icon to subscribe.