Identity security capabilities for Okta and Auth0
Every capability here stops a specific kind of attack on sign-in, from phishing to bots and stolen passwords. Pick one to see what it blocks, how Okta and Auth0 do it and how Zelto rolls it out.
All capabilities
Filter by Workforce Identity (WIC) or Customer Identity (CIC). Each card opens a page with the attacks it stops, a before and after view and a typical rollout.
Phishing-resistant MFAPasskeys and security keys (WebAuthn)Sign-in bound to the user's device or security key, so phished passwords and codes are useless.Open the page →Device assuranceOkta Device AssuranceOnly managed, healthy devices get a session - regardless of the credentials presented.Open the page →Threat protectionIdentity Threat ProtectionWatches live sessions for risk signals and ends the ones that go wrong.Open the page →Adaptive policyRisk-based MFA and session rulesRaises the bar when a sign-in or session looks unusual.Open the page →Breached passwordsBreached Password DetectionRefuses passwords already exposed in other breaches.Open the page →Bot detectionBot DetectionStops scripted logins and credential stuffing before they reach accounts.Open the page →IP throttlingSuspicious IP ThrottlingSlows bursts of failed logins from the same address.Open the page →PasskeysPasskeys / WebAuthnNo reusable password to steal, phish or stuff.Open the page →Number challengeOkta Verify number challengeA push approval needs the number shown on the sign-in screen.Open the page →Help-desk verificationHelp-desk identity verificationCallers prove who they are before any reset or enrollment.Open the page →Short-lived tokensSSO-bound sessions and tokensTokens expire fast, and refresh tokens rotate.Open the page →Privileged accessOkta Privileged AccessAdmin rights granted just in time and recorded.Open the page →Identity lifecycleLifecycle ManagementLeavers and movers are reflected in permissions when your HR records the change.Open the page →
Not sure which one to start with?
We look at how your staff and customers sign in today, then we recommend what to do first.