Admin FAQs: Okta Personal for Workforce

ℹ️ For End-user FAQs related to Okta Personal, use this link.

Managing Okta Personal for Workforce for your organization

Enterprise Admin General FAQs

What is Okta Personal?

Okta Personal is a consumer password manager. We are building the next generation of identity software, and password management capabilities are just step one of our journey.

Okta Personal lets you:

Set up and sign in without master passwords
See all your apps in one place — with a familiar UI
Securely store, save, generate, and autofill passwords
Store and autofill non-passwords such as payment information, addresses, and notes
Sync across unlimited number of devices
Share passwords with those you trust
Import from other password managers

for FREE!

What is Okta Personal for Workforce?

Okta Personal for Workforce is a set of features that integrates Okta Personal* -- Okta’s consumer password manager -- with the Okta Workforce Identity Cloud. Features include:

End-user interface entry points to encourage employees to save personal apps outside of work tenant and
Personal app migration to move any existing personal apps from work accounts (admins must enable 'app migration' feature)
Account switcher to allow employees to use personal and work apps seamlessly while keeping them separate.
Domain blocking settings for admins to prevent specific domains from being migrated from the work environment.

*All data associated with an Okta Personal account is owned by the end user, not the enterprise organization

To see it in action, watch our demo videos.

Demo 1: End-user interface entry points and account switcher:

Demo 2: Personal app migration

What is the benefit of Okta Personal for Workforce?

Okta Personal for Workforce allows you to:

Provide a free personal password manager to your organization's end users
Maintain enterprise security hygiene by removing personal data from work tenants
Encourage users to keep work and personal apps separate.

Does Okta Personal work the same way Okta enterprise works?

Okta Personal is a consumer password manager that consumer themselves own and manage, while Okta for work is an enterprise SSO solution that the organizations own and manage.

What is the difference between Okta Personal and Okta Personal for Workforce?

Okta Personal is a personal password manager that is free and available for anyone (regardless of Okta use at work) to sign up and use.

Okta Personal for Workforce is a set of features that integrates Okta Personal to Okta’s workforce offering - at no cost to WIC customers. to WIC. These features include:

End-user interface updates to encourage personal security hygiene
App migration of personal apps from enterprise environment
Account switcher between work and personal Okta accounts
Domain blocking settings (for admins)

Why is Okta building Okta Personal for Workforce?

Since the line between our work and personal lives has blurred, it is common for employees to use personal apps while logged into their work accounts. Unsecured personal accounts make it easier for social engineering attacks to be more successful in work accounts.

Educating employees and giving the tools to improve personal security can carry over to the workplace, and by doing so, elevate enterprise security. To make the user experience more secure, private, and familiar, we have introduced Okta Personal for Workforce -- so that people see Okta as their own…not just as part of their companies.

Is Okta Personal for Workforce GA?

Read more about the upcoming GA changes.

How can I learn more?

Go to our website to learn more and find resources. If you have any questions or feedback, please email [email protected].

GA changes to your organization

Please see our GA blog post for the latest FAQs

Managing Okta Personal for Workforce for your organization

Can I use Okta Personal as an enterprise password manager?

Okta Personal for Workforce is NOT an enterprise password manager. We currently do not offer enterprise features such as audit, permissions, and management of your end users' Okta Personal accounts.

How do I change my admin settings?

After GA, you may change your org preferences or disable Okta Personal for Workforce at any time through the Okta Admin Console > Customizations > Okta Personal.

How can I check out and test the features?

Follow the Get Started Guide. You can test Okta Personal by signing up for a free Okta Personal account. You can test Okta Personal for Workforce features from your Okta Admin Console.

Features include:

End-user interface updates to encourage personal security hygiene
App migration of personal apps from enterprise environment
Account switcher between work and personal Okta accounts
Domain blocking settings (for admins)

Who can enable Okta Personal for Workforce for my organization?

These Okta Admin roles can view and edit Okta Personal for Workforce settings for their organization:

Super Admin
Org Admin
Custom Admin with 'Manage Customizations' permissions

As an admin, can I see how many or which employees have created an account?

No, as an admin, you do not have any visibility into the employee / end user accounts and data associated with these accounts.

Can my end users link their Okta Personal and Okta work accounts together?

Yes, if you enabled this feature in your Okta Admin Console settings.

The accounts are separate from one another, but we have several features that allow your end users to seamlessly use and switch between their Okta work and Okta Personal accounts.

Use the same Okta Browser Plugin to switch between accounts
Move personal apps from the Okta work account to a free Okta Personal account to decouple personal data from work environment
Switch between work and personal accounts seamlessly from their work end user dashboard, while keeping the accounts separate

*Available only if the org admin enable these features in the organization.

When an employee leaves the company, do I need to do anything to roll over their Okta Personal account?

No, you don't have to do anything. Any user who created an Okta Personal account will continue to have access to this account after they leave the company, assuming the user signed up for the Okta Personal account using their personal email and not their work email (all users should create Okta Personal accounts with their personal email).

If Okta Personal for Workforce is enabled and a user leaves the company, what is the expected process to manage their accounts?

You don't have to do anything, unless you want to be proactive about getting users to migrate personal apps prior to leaving the company. Okta does not send in-product reminders to migrate personal apps during the deactivation process. If you want to be proactive, you many consider sending communication outside of Okta's product in any offboarding process you currently have.

Can I get a product demo?

Most features are in the Get Started Guide. If you still have questions, please reach out to our team at [email protected] about demo requests.

Managing your end users

As an admin, can I manage my employees' Okta Personal accounts?

No, as an admin, you do not have visibility into the employee / end user accounts and data associated with these accounts — only those who created the account can see their own data. Okta Personal are personal accounts your employees/end users sign up for, and they can take with them after leaving the company.

If you turned on Okta Personal for Workforce features, you have admin controls on certain functionalities that involve end user's work accounts as part of their Okta Personal experience:

End user ability to see Okta Personal entry points in their work dashboards
End user ability to migrate personal apps saved in their work accounts from the enterprise environment into an Okta Personal account
Admin ability to block certain domains from being migrated as part of personal app migration described above

Can a user create an Okta Personal account even if I disabled Okta Personal for Workforce in my org?

Yes, a user can choose to sign up for their own Okta Personal account (as this is a personal account separate from work) even if you disable Okta Personal for Workforce settings. However, they will NOT have access to admin-managed features such as Personal app migration and account switcher.

As an admin, can my team help my users reset Okta Personal passwords?

No, as an admin, you do not have any visibility into the employee / end user accounts and data associated with these accounts.

What if my end users need help with their Okta Personal accounts?

If your end users need help, please ask them to contact our support team at [email protected].

Do my end users retain access to Okta Personal after leaving the company? Is it still free?

Yes, your end user's Okta Personal account is personal data — and they will retain access to their Okta Personal account even after leaving the workplace. Okta Personal remains free of charge.