Every category where a model named Okta for a mid-market B2B company. Share is first choices across the direct, paraphrase, budget and scale prompts; rank is within every product named in that category.

Category	Function	Share	Rank	Negative rate	Labels	Quadrant
Workforce identity and SSO	Identity and access	17%	2 of 48	42%	36	criticized challenger
Multi-factor authentication	Identity and access	9%	3 of 78	12%	49	accepted challenger
Identity governance	Identity and access	0%	63 of 77	50%	6	under 10 labels · led by Lumos at 20%
Customer identity and access management	Identity and access	0%	70 of 74	67%	3	under 10 labels · led by Auth0 at 22%
Zero trust network access	Network and edge	0%	60 of 71	0%	1	under 10 labels · led by Cloudflare One at 35%

Movement

This is the first edition on this tier, so no move can be computed for Okta yet. From the next edition this section shows, per buyer segment, whether its share moved by more than the measured noise floor.

By model

How each model treated Okta across every prompt where it was named for a mid-market B2B company. Twelve models, six prompts per category.

Model	First choice	Alternative	Mention	Negative	Labels
Claude Haiku 4.5	2	1	5	2	10
GPT-5.4 mini	1	1	2	3	7
Gemini 3.5 Flash	1	2	0	4	7
Perplexity Sonar	2	4	1	1	8
Grok 4.1 Fast	3	2	1	2	8
Mistral Small	4	2	1	1	8
DeepSeek V4 Flash	2	3	0	1	6
Llama 4 Maverick	1	1	3	1	6
Qwen 3.7 Flash	3	1	4	4	12
Kimi K2	1	4	1	2	8
GLM 4.7 FlashX	0	1	2	3	6
MiniMax M2.5	3	3	1	2	9

By framing

Which of the six questions produced the naming. By model says how often; this says asked what. The first-choice count on the right carries the marks of the models that produced it.

FramingLabels by classFirst choices

Direct55 labels16

Paraphrase65 labels19

Comparative42 labels15not counted in share

Budget-constrained47 labels3

Scale-constrained56 labels8

Negative41 labels2not counted in share

First choiceAlternativeMentionNegative306 labels in all, every segment counted; 46 of the 63 first choices count toward share, since the comparative and negative framings do not. The bar is one segment per label class, to scale within the framing.

What the models said for it

Verbatim evidence the judge attached to positive labels.

“Okta Workforce Identity Cloud: The gold standard for vendor-neutral, best-of-breed SaaS environments. Highly powerful and scales infinitely, though it can get expensive.” Gemini 3.5 Flash · Workforce identity · scale prompt · first choice

“Okta is the best overall workforce identity platform due to its comprehensive features, scalability, and integration capabilities.” Mistral Small · Workforce identity · direct prompt · first choice

“Best for enterprises wanting a best-of-breed, vendor-neutral identity platform... Okta leads in third-party integrations” Mistral Small · Workforce identity · comparative prompt · first choice

“If you need a flexible, cross-platform solution with adaptive security, Okta Adaptive MFA is the top recommendation.” Mistral Small · MFA · direct prompt · first choice

And against it

Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.

“Verdict: Avoid if you are a small startup or SMB. Cautious if you are a large enterprise” DeepSeek V4 Flash · CIAM · negative prompt · hard negative

“Avoid Okta if budget is a primary concern” Kimi K2 · Workforce identity · budget prompt · hard negative

“it has had past security incidents, and its governance and lifecycle capabilities often require additional modules. Pricing can also become complex as deployments scale” Mistral Small · Workforce identity · negative prompt · soft negative

“Caution: While Okta remains a major player, the repeated security incidents suggest systemic issues with their security posture.” Kimi K2 · Workforce identity · negative prompt · soft negative

Named alongside

The products named in the same answers as Okta, over the 306 answers that named it. Took the first choice instead counts the answers where the other product was the first choice and Okta was named but was not.

ProductSame answerTook the first choice insteadHead to head

Microsoft Entra ID238 of 30663Compare →

Cisco Duo136 of 30650Compare →

Ping Identity109 of 3060Not in the top three

JumpCloud90 of 30626Not in the top three

OneLogin57 of 3065Not in the top three

Auth053 of 3067Not in the top three

YubiKey52 of 3065Not in the top three

SailPoint33 of 3065Not in the top three

RSA SecurID25 of 3060Not in the top three

WorkOS22 of 3066Not in the top three

A head-to-head page exists where both products are in a category's top three. The other rows are the same fact without a page behind them, so they link to the product instead.

What carried it into the answer

The sites and pages cited by the answers that named Okta. A fact about retrieval, not a lever on the model.

Citations exist only for the models that return a source list, four of the twelve in this edition, so these counts come from 234 of the 306 answers that named Okta and are not a share of its labels.

Domains cited

startwithidentity.com123

rippling.com72

okta.comYour site70

securityboulevard.com68

expertinsights.com67

siit.io53

decryptiondigest.com46

miniorange.com45

g2.com44

techrepublic.com37

555 of the 625 domain citations in answers naming Okta came from somebody else's page.

Pages cited

rippling.com/blog/mfa-providers65

expertinsights.com/identity-and-access-management/the-top-multi-factor-authentication-mfa-41

securityboulevard.com/2025/12/top-12-identity-and-access-management-platforms36

startwithidentity.com/articles/top-6-workforce-identity-platforms36

startwithidentity.com/rankings/best-iam-for-smb35

decryptiondigest.com/blog/enterprise-mfa-platform-comparison-2026-duo-okta-microsoft-ping-34

encomputers.com/2024/05/best-multi-factor-authentication-small-businesses33

startwithidentity.com/rankings/best-iam-platforms33

Pages are listed as the models cited them.

Names read as Okta

What the judge wrote, as written, with how often. The vendor table decides that these count as Okta; a claim can dispute any of them.

Okta Adaptive MFA 22Okta MFA 3Okta Identity Cloud 1Okta Workforce Identity 1Okta Workforce Identity Cloud 1

Is this your product?

Claim this page

Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Okta's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Okta, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.

It does not get any change to labels, shares or verdicts, any preview, or any say over which quotes appear. A verification link goes to your work email; an address at okta.com is approved on the spot, any other address is reviewed by hand.

Your name and company appear on the claimed page, or the company alone if you ask below. A title and a LinkedIn address appear there too if you give them, and are left off if you do not. Your email address is never published.