So CarMax customers come to CarMax for the 2nd most expensive purchase in their life. Because for the over the last 25 years, we've actually been changing how customers buy and sell cars and finance cars. We're selling the new box because we made the car buying process a simple, seamless, and easy for them. Identity is foundational to providing an iconic experience to our customers. It's really through the in identity we can guarantee the safety and security and the trust and confidence the customer might expect.
When they're sharing their information with us or interacting with us.
So HPE's vision is to create a edge to cloud platform as a service our customers are aspiring to get in a public cloud. And our goal is to bring that experience, that simplicity and the ease of use on prem and to drive that. And identity becomes the on for a lot of these things. We are trying to be that global, asset service platform in terms of driving all these services. So for us to be able to map out and make sure their identities and accesses are pretty controlled and privileged is is very, very important.
We have to make sure that we have the right identity structure to be able to scale. So suddenly an application may have 100 users in public cloud tomorrow, they may have 10,000. We basically wanted to bootstrap, everything we have and bring in existing GreenLake customers into the environment within a quarter. And we're able to do that in actually 60 days.
Cengage is the largest US based, education and technology company. Focusing on materials and, learning experiences for higher ed and also K-twelve and continued education It's a hundred and ten year old company that has been building textbooks, great business that had, over time, really just struggled to make it through the digital transformation. By moving to Okta, what has really allowed us to do is take some of our best and brightest engineers who are solving a really gnarly problem and not have to worry about it. And so now those great engineers can now focus on features that are really changing the industry, changing how students learn, changing how we can lower prices for students and make their experience much more valuable for them and, you know, keep these kids in school.
Good afternoon, and welcome to Okta's 3rd quarter fiscal 2021 earnings webcast. I'm Dave Generali, vice president of investor relations at Okta. With me in today's meeting, we have Todd McKinnon, our chief executive officer and co founder, Bill Lache, our Chief Financial Officer, and Frederick Carris, our Executive Vice Chairman, Chief Operating Officer, and co founder. Today's meeting will include forward looking statements pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995 including, but not limited to, statements regarding our financial outlook and market positioning. Forward looking statements involve known and unknown risks and uncertainties that may cause our actual results, performance or achievements to be materially different from those expressed or implied by the forward looking statements.
Forward looking statements represent our management's beliefs and assumptions only as of the date made. Information on the factors that could affect the company's is included in its filings with the SEC from time to time, including the section titled Risk Factors in its previously filed Form 10Q. In addition, during today's meeting, we will discuss non GAAP financial measures. These non GAAP financial measures are in addition to and not a substitute for or superior to measures of financial performance prepared in accordance with GAAP. A reconciliation between GAAP and non GAAP financial measures and a discussion of the limitations of using non GAAP measures versus their closest GAAP equivalents is available in our earnings release.
You can also find more detailed information in our supplemental financial materials which include trended financial statements and key metrics posted on our changes as we discuss our financial performance. And unless otherwise noted, each such reference represents a year on year comparison. And now I'd like to turn the meeting over to Todd McGinnen. Todd?
Thanks, Dave, and thanks, everyone, for joining us today. I hope that you and your families have remained safe and healthy since the last time we spoke. I'm pleased to report that we delivered another strong quarter of financial results. The third quarter, we demonstrated continued strength with total remaining performance obligations, or RPO, growing 53%. Total revenue grew 42%, subscription revenue grew 43% and we generated record quarterly cash flows.
Okta has remained 100% remote since mid March. And we continue to execute at a high level. We're fortunate that the nature of Okta's business allows us to operate successfully in this dynamic work environment. We're also proud of the fact that our solutions help our over 9000 customers securely connect their distributed workforces and strengthen the security and identity posture of their websites and applications. The 3 mega trends that have been driving our business for the past several years, the adoption of cloud and hybrid IT, digital transformation, and 0 trust security, are being accelerated.
Organizations are being forced to evolve their digital strategy to navigate through the pandemic. While their remote work environments remain a critical part of their business. We continue to have success with growing our base of large enterprise customers, In Q3, we added nearly 100 customers with an annual contract value greater than $100,000. And once again, over half of these additions were from new customers. Large enterprise customers now contribute 80% of total annual contract value.
The total number of $100,000 plus customers now stands at 1780, an increase of 34%. And we're seeing our base of customers with bigger ACV expand even faster. For example, our customers with an ACV greater than $500,000 grew over 50%. To 320 customers. Here are just a few notable examples of large enterprise wins and upsells.
Which come from a wide range of industries. DXC Technology, a Fortune 500 IT Services company, serving 6 1000 private and public sector clients became a new Okta Workforce customer in Q3. DXC has complex hybrid IT infrastructure and look to Okta to help the organization reduce costs and improve operational efficiency for its entire workforce by standardizing on a single identity provider while replacing multiple existing legacy systems. DXE plans to migrate its application to Okta to provide a better user experience with secure single sign on, while Okta Access Gateway will help securely integrate on prem applications with its cloud environment. The state of Iowa was an exciting Q3 workforce and customer identity win, where Okta was selected to help accelerate the state's digital transformation initiatives and COVID 19 response.
As the state replaces legacy systems with best of breed tools, it sought a secure cloud based identity solution for its nearly 20,000 employees. Okta's pre built integrations helped the state move quickly. Iowa has successfully deployed Okta for its cloud based applications and will connect its legacy focus their time and resources on supporting their citizens. The state also plans to deploy Okta customer identity to serve its 3,000,000 citizens, providing seamless access to to all state agencies with a single ID and password. We also had a fantastic upsell transaction with a Global 1000 international auto manufacturer that has accelerated its move to the cloud by expanding its deployment of Okta with both workforce and customer identity solutions.
The customer has a complex legacy system, and is aiming to enhance its cloud security operations to better protect its business, applications, and infrastructure. Okta's always on capability an SLA of 99.99 percent was key to help deliver a solution capable of scale. Further evidence of our progress with large enterprise companies is demonstrated by looking at the top 25 contracts we booked in Q3 by total contract value. This includes both new and upsell contracts. All 25 were over $1,000,000, and 6 were over $5,000,000 What's more, the average contract size of our top 10 new customers increased more than 60% when compared to Q3 last year.
Well, that's great progress. We believe that we are just getting started, and we still have a significant opportunity to further expand our business with these large organizations. These wins are a key component of the network effects that help drive our platform forward. Customers are turning to Okta because of our neutrality, extensive catalog of integrations, and breadth of products. This in turn generates more and more data insights that can be harnessed to build better products that make our customers more successful.
We believe this network effect Flywheel is now at scale and provides a sustainable competitive advantage for continued market leadership. Speaking and building new products, we made several announcements around product and feature innovations at our 2nd annual Okta showcase event in October. The event itself was a huge success with viewership increasing nearly four times over last year. The innovations we announced helped further advance the leadership position of the Okta Identity Cloud as a modern identity platform. There was a particular emphasis on enhancements we're making to our science solutions and how we're more tightly integrating into every customer flows, which automates complex identity processes by connecting to every part of the customer experience, such as user registration and progressive profile development, and enables enterprises to make identity actions completely programmable without having to write code.
Development teams will use workflows to unlock greater agility and greater customization. We also announced an SDK and API for our devices platform service. This embeddable developer tooling simplifying size and secures passwordless login and omni channel customer experiences. In short, it's now super easy for developers to customize many things including creating a single integration to embed MFA directly into their app. This will simplify the user experience while increasing their overall security posture.
Lastly, we highlighted several upgrades to advance server access or ASA. Including enhancements that speed up the deployment of cloud infrastructure and automate manual provisioning and especially deprovisioning of developer accounts and production environments. One customer that benefited from the enhancements is Zoom. With compliance and security as a priority, Zoom significantly expanded its deployment of ASA. This expansion is a testament to the success of their initial deployment of ASA earlier this year.
Which helped to provide added security, seamless user access, and simplified privilege management at scale to its production and staging servers. Expanding our footprint internationally is a long term priority. Early in Q3, we announced another key component of our global expansion with the opening of our new office in Tokyo and the hiring of our 1st country manager in Japan Takashi Watnabi, with a strong base of customers like Hitachi and NTT data and a growing local team, Okta is making a long term strategic investment in the dynamic Japanese enterprise technology market. Speaking of new hires, despite the COVID environment, we continue to attract world class talent to Okta. In addition to growing our overall headcount by over 20%, we announced 2 new senior leaders in the third quarter, Susan St.
Ledger will be joining Okta as president of worldwide field operations on February 1st, Susan brings nearly 3 decades of experience of building and transforming high growth software and cloud businesses. We also announced our new CIO. Alvina Antar, who brings more than 20 years of experience at high performing IT organizations at both Fortune Fifty Companies and high growth startups. We couldn't be more excited to have these experienced business leaders join Okta to help lead us to continued growth and success. Before wrapping things up, I wanna point out to this audience that we'll be releasing our 7th edition of our businesses at work report on January 28th.
Using data from the Okta integration network, this report takes an in-depth look into how organizations and people work today. I know investors and analysts love this report because it's been great at revealing trends and the fastest growing apps in several industries. Well before they become more commonplace. In summary, it was another very strong quarter for us, driven by continued execution in market momentum. We are broadening and expanding our competitive moat and have maintained very high competitive win rates, whether it's against legacy incumbents big platform players or other point products.
We win because we have the most modern and extensive cloud based platform. Our customers value our independence and neutrality, and our Okta integration network is unmatched in the industry. We're also in the enviable position of being in a market that is coming toward us in the cloud. We're proud of the success we've achieved and we're confident in our ability to maintain the high level of execution because we are just scratching the surface of I'd now like to turn the call over to Bill to walk through our financial results. Bill?
Thanks, Todd, and thank you to everyone for joining us. As a reminder, we have posted an earnings presentation that contains our detailed financial results on our Investor Relations website. I think you'll find it to be a useful summary. And as such, I will only cover some of the highlights in my commentary this afternoon. We had a strong third quarter across the board.
I'll now touch on some of the highlights and then go into our outlook for Q4 and the full year. Turning to our Q3 results. Total revenue increased 42%, driven by a 43% increase in subscription revenue. Subscription revenue represented 95% of our total revenue. RPO or backlog, which for us is contracted subscription revenue, both build and unbilled, that has not yet been recognized, grew 53 percent to $1,580,000,000.
Current RPO, which represents subscription revenue we expect to recognize over the next 12 months also experienced strong growth of 46%. Year over year growth in current RPO is the more meaningful metric when viewed along with subscription revenue and billings growth. Total and current calculated billings grew 44% 42%, respectively. The strength in billings was driven by both new and existing customers and beneficial invoice timing. We expect Q3's beneficial in bus timing, to be a modest headwind to 4th quarter billings growth.
As I mentioned before, billings can be subject to variability caused by invoice dynamics, including timing, which is why current RPO is an important metric as it eliminates these types of variances, which have no impact on revenues. Turning to retention. Our dollar based net retention rate for the trailing 12 month period was 123%, a 2 point increase from last quarter. We have not experienced any degradation in gross retention rates during the pandemic and continue to experience strength with customer upsells, particularly with our enterprise customers, The retention rate may fluctuate from quarter to quarter. And in the current environment, it's possible that fluctuations in retention rates may be more pronounced.
Before turning to expense items and profitability, I would like to point out that I will be discussing non GAAP results going forward. Now looking at operating expenses. Total operating expenses grew 30%, which is higher than forecasted as we increased investment to support our growth plans. The growth in expenses was partially offset by reduced travel and office related expenses. And while we've been successful at hiring and retaining talent, hiring was more backend loaded in the quarter.
Headcount increased 23% to just over 2600 with the increase primarily in our go to market and engineering teams as we continue to invest in strategic initiatives. We achieved profitability again in the 3rd quarter, driven by our stronger than expected revenue performance. It's important to keep in mind that expenses will return to a more normalized run rate when the business environment begins to normalize. We also look to increase our investments in fueling our business globally, which includes increasing headcount within sales and marketing, well as R and D. We generated record cash flow from operations and free cash flow of $43,000,000 $42,000,000, respectively, which yielded a 19.1% free cash flow margin.
Free cash flow was driven by strong billings and collections during the quarter. Collections have continued to be stronger than expected during the pandemic. We ended the 3rd quarter with a strong balance anchored by $2,500,000,000 in cash, cash equivalents and short term investments. Moving on to our business outlook. While there is some continued uncertainty given the pandemic environment, we remain optimistic about the demand for our products and are raising our full year fiscal year 2021 outlook based on our strong 3rd quarter results.
Consistent with our approach throughout this year, Our bias is to reinvest upside in investments to continue innovation of our platform, fuel growth, and further enhance our competitive positioning but we will only do so with opportunities that we believe have a meaningful return. We also expect to see continued variability in cash flow margins due to ongoing fluctuations in working capital, the growth in our enterprise business, and seasonal factors. For the fourth quarter of fiscal 2021, we expect total revenue of $221,000,000 to $222,000,000 representing a growth rate of 32 to 33 percent year over year. Non GAAP operating loss of $2,000,000 to $1,000,000, and non GAAP net loss per share of $0.02 to $0.01, assuming weighted shares outstanding of approximately 131,000,000. For the full year fiscal 2021, we now expect total revenue of $822 to $823,000,000, representing a growth rate of 40% year over year.
Non GAAP operating loss of $2,300,000 to $1,300,000. And non GAAP diluted net income per share of $0.04 to $0.05, assuming weighted shares outstanding of approximately 143,000,000. The higher share count reflects the shift to profitability for the full year. The strength of our business gives us confidence in our ability to execute. While we are in the early phases of financial planning, we would like to provide a preliminary view of our revenue outlook for next year.
We currently estimate total revenue to exceed the milestone of $1,000,000,000 for fiscal year 2022, and be in the range of $1,06,000,000 to $1,070,000,000. Although there is a continued macro uncertainty, We remain confident that the factors that are driving our business in our ability to execute against our long term model. In summary, we are pleased with our 3rd quarter performance. The accelerated tailwinds of cloud, digital transformation, and security position us well to achieve our long term financial targets. We plan to further capitalize on our market leadership position and the tremendous market opportunity ahead of us and look forward to closing out the fiscal year on a strong note.
With that, I'll turn it back over to Tom.
Before we go to Q And A, I wanted to discuss the announcement of Bill's retirement next year and the appointment of our board member and audit committee chair, Mike Corey, to succeed him. Bill has had an incredibly successful career and I couldn't be happier for him to be able to spend more time with his family and friends and his favorite charitable organizations. Sophishly, I'm really bummed because Bill has been such an integral part of growing Okta over the past 7 plus years. Back when we were a young startup and had less than $20,000,000 in revenue, We were incredibly fortunate to land someone and 10 K filing in early March. And then as an advisor through the first quarter of next year, we greatly appreciate everything he's done for Okta, and wish him all the best in his retirement next year.
We're also excited to have a person of Mike Corey's caliber take the CFO reins. Mike has been an invaluable Okta board member and head of our audit committee over the past 5 years and is intimately familiar with our business and strategy. So we know he'll be able to hit the ground running. Over the past 25 plus years, Mike has built a storied career in technology both as an executive and board member in public and private companies. I'll speak for the rest of the executive team and the board.
That we have tremendous confidence in Mike, and we look forward to working with him even more closely in the coming months and years as we continue to scale the business. I know Bill also wants to say a few words before we get to questions. Bill?
I just wanna take a moment to say how thankful I am to have been part of Okta for these past 7 years. This was a difficult decision because I truly believe the future for Okta has never been brighter. And more than anything, I'm gonna miss working with such a talented team. But I'm excited to move on to this next chapter of my life, and I know Octa will be in great hands with Mike, who has really been a mentor to me, from before our IPO, to all our team building, scaling, financings, and investor relations through the current day. I'm looking forward to working with them through the transition.
With now, I'll turn it back to Dave for Q And A. Dave?
Great. Thanks, Bill. To indicate that you have a question, please click on the raise hand icon at the bottom of your screen. And I will announce your name when it's your attorney to ask a question, and you will have to unmute yourself at that time. And in the interest of time, please limit yourself to one question and one follow-up question.
And with that, we'll take our first question from Sterling Auty at JP Morgan.
Alright. Thanks, guys. Bill, let's start with you. Congratulations on 1 heck of a run. You really know how to go out, with the bang.
You you put up the $1,000,000,000 guidance and just give the mic drop. So we really appreciate that. Onto, I'm I'm just gonna ask one question. So last quarter was a very strong upsell cross sell into your existing base. Can you just characterize when you look at the strength in the revenue and the bookings, the quarter, how much of it came from new logos and what you're seeing in terms of the momentum and new logo additions to the business?
Sterling, nice to see you. I think it was, we're I'm very pleased with the quarter across the board. I think it's a little bit more weighted to upsell transactions. I think that's a testament. A couple of things.
One is that A lot of our customers are relatively speaking, just getting started with our products. We tend to do, especially the last few years, we've done a lot of They were not small deals, but in terms of the potential that these customers could use from us, there there was a lot of room to grow. So I think we're benefiting from that to some degree as well. We're also just not a natural part of the motion as we move into more enterprise. There's just, you know, more there's more problems to solve more value to add.
So I think some of the mix will be, more upsells as we move into enterprise. And then also I think a little bit COVID too. It's a little bit, on, on the margin easier to, work on an existing relationship versus build a new one, but, that's really a marginal difference, I
Sounds good. Thanks.
Hey, our next question is from Jonathan Ho at William Blair.
Alright. Let me, echo my congratulations as well on the retirement and, you know, we certainly will miss you. You know, just with the the growth, in the size of the deals, that you've seen, is there any additional color that you can provide on maybe what's driving that upsell? Is this more expansion of use cases or penetration just wanted to get a little bit of additional color, on that piece.
Hey, Jonathan. Nice to see you. Happy to talk a little bit about that. So I think what you're seeing is, as Todd just, said, we're just getting started with a lot of these large organizations. You go back to some of the numbers that, Todd mentioned.
When you look at the top 25 contracts by TTV booked, you know, they were all over a $1,000,000 and 6 of them were over $5,000,000. That just gives you an idea that people are just starting to figure out how they can really take advantage of the service. I think we're also, right in the middle of and it's forming really from a products company to a platform company. And if you look at some of the announcements from showcase where we're really starting to be able to do and and workflows for customer identity and access management. It's giving customers a lot more opportunity to consume more and more of the service Finally, I would just say if you look at, some of the examples of the go live, press release that we put out today, which we always do with earnings.
I think it's always important to talk net new customer wins and and who you're adding in terms of logos. But just as important, if not more so, especially today and today's day and age, you need to talk about customers going being successful with the service. And if you look at that, there's a lot of upselling. People who are getting comfortable with workforce and going to customer identity and access management for starting with basic workflow workforce products and then adding the advanced versions of MFA or single sign on. And I think that's giving us a lot of room to grow and look, we're very happy with the results and it's been, it's been a great quarter and a great year, but I think the next 3, 5 years as we open up platform and provide more solutions for our customers who are gonna continue to be very, very exciting for us.
Excellent. And just as a quick follow-up, Bill, I know billings is less relevant than RPO, but just given your commentary around some of the headwinds that are there, you know, is this how could we be thinking about, you know, that 4th quarter headwind? Is the growth in billings going to be more similar to the prior quarter, or are there any sort of hints that you can give us in terms of that magnitude. Thank you and and congrats again.
Yeah. Thanks, Jonathan. Appreciate that. Yeah, as it relates to billings, like you said, we, we did see some headwinds this quarter. You know, I talked about before how you're gonna see some timing as it relates to invoice timing.
And that's why we, you know, do think current RPO is a really good metric because it does eliminate that timing, which really has no, no, no impact on revenues. However, I know a lot of you, look at billings for modeling purposes. And so as you think about it, you know, that, that headwind that we're talking about as far as the beneficial invoice timing that we saw come into Q3, for next quarter is approximately $6,000,000. So that's how I would think about that. And if you think about the, you know, the, the success we had in billings this quarter, we did have, that beneficial invoice timing, but we also, as we've talked about, had very strong business very strong bookings and very strong performance.
So, you know, previously when we talked to you about how to think about, the delta between subscription revenue and billings growth. We had talked, you know, previously about it, that delta And now we think that delta will probably be narrower, probably in the range of like 3 to 4% for the second half of the year.
Okay. And just a reminder for those, that are on the panel, if you would like to ask a question, please click on the raise hand icon. And our next question is gonna come from shaul at Oppenheimer.
Thank you. Hey, everybody. Congrats on on results and an outlook, Bill. It was a pleasure working with you over the past few years. Good luck going going forward.
You know, total, Freddie, I I wanted to ask about the initial, you know, progress we've been seeing from the, workflow product, the gateway server access. Maybe any initial thoughts you may have about the alliance that you guys announced back in the summer with, proof point, NetScope, and and Kraubs. Right?
Sean, we're the workflow platform service and the advanced life cycle management product and then the customer identity workflow product is a, we're, we're really excited about it. And if and frankly, I think we still have work to do in terms of helping people understand the import of of this
of this
strategy. So the workflows, platform service is a core piece of technology that we've, been working on the past couple of years. It's it's stemmed from an acquisition we did, a few years back from, and and we've turned that into a native Okta product And it's a capability that's generally powerful, generally, but then we've taken it and we've applied it to very powerful specific use cases. And I think these two specific products that are now these use cases that are products really is the story for the future where we're gonna be taking all of these platform services and using and using them to build up products in various areas. So The two products are advanced life cycle management, which is essentially, it's our basic, like, our basic life cycle management product, but you can essentially program in a visual way.
Business analysts can program it in a visual way to do whatever they need to happen when a user joins or leaves the company or changes jobs, which is very powerful. And that's one that's and that product is doing great. It's exceeding our expectations. We're really happy about that. Customer identity workflows is essentially taking that core workflow's platform service and applying it to the customer identity use case.
So when a person registers on your site, you can program it visually to do whatever you need to happen in that registration flow. You can copied over Salesforce.
You can integrate it to
the marketing system. You can, put it in your own proprietary database. You can do a bunch of business logic. So we're we're really excited about about this case and a couple of concrete examples of how this approach of making customers successful. And so, at times, sometimes, especially in large enterprises, relatively small use case off the off the bat, but then that can grow and and mature over time.
And then, Sean, I'll just touch on, your second question there about, of the partnership announcements that we had over the course of the summer. Look, the the megatrends that we're fortunate, to be helping our customers with, right, as you all know, is around the transformation to a hybrid cloud environment, everyone's thinking about digital transformation, and then obviously people thinking long and hard about how they're gonna successfully implement 0 trust as a security measure in this new cloud based world. And, you know, sometimes we get the question, could you possibly could Okta possibly become the biggest security company software security company of all the time, it's possible. But I think one of the things that our customers really, really appreciate is independence and neutrality. Right?
And if you look at the, you know, best of breed is a term that's often thrown around. But what what, the chief security officers want and organizations, in particular, large enterprises, they realize that, the security challenges they face are are big ones. And they they know there's not gonna be one specific vendor that's gonna provide all those solutions. So you reference specifically a great partnership that we have. It's a four way partnership with Netscope, a cloud strike, and proof point, it's going very, very well.
And, not only is it, you know, a lot of times you'll have these marketing, partnerships that are announced. This is a deep product integration. We're actually using the products together. They talk to each other. There's API translation, and you can to enhance the performance of each of the products with the partnership.
It's going very well. Customers are now, it's generally available. Customers are well deployed. We're getting a lot of good results And also, it's obviously an opportunity for us to expand our funnel because organizations like proof point thousands and thousands of customers, that's a big opportunity for us. It's actually those who don't already have Okta.
So, partnerships going very well, and we're we're very excited about what that's gonna, pretend for the time to head.
Thank you so much, Bill. Good luck.
Thank you.
Alright. Our next question comes from Drew Foster at Citi.
Hey, guys. Thanks for taking the questions, and, congrats to the team on a nice quarter and to and to bill in the future retirement. I've got a 2 part question. So your large deal metrics have been really strong this year. And, with Q4 upon us now, how are you feeling about visibility into sort of large deal conversion as you close out the quarter and to the extent that there'll be a swing factor fee of this year relative to prior years.
And related to that, Any color you can provide on the complexion of this year's, q 4 large deal cohort from either a customer or deal demographic perspective relative to what you've seen in prior quarters. And I'm specifically wondering if you're seeing any of your newer products or use cases being considered as part of larger initiatives and, to what extent? Thank you.
Yeah. Absolutely. Thanks, Drew, for the for the questions there. The answer across the mornings, yes. I mean, we're seeing very strong opportunity, not only with our existing customers that you see in the dollar base and that retention that has, like, continued to tick up over the 120% that we think is a very good mark as it is.
Existing customers, large enterprises, you saw the stats that, Todd spoke about earlier, on today's call continue to do very well. In Q4, absolutely. There's a lot of big opportunities for us to work with, not only existing customers, but net new, We're obviously, already a month into the quarter, and, things are going very well. So we're optimistic on not only this quarter, but as you know, large enterprises either relationships that we've started, you know, months and quarters, if not years ago, because you need to build up the time. You need to build up the experience and the comfort level that they have working with you know, frankly a newer company like us.
As we say, we're just getting started and the times ahead are gonna be very exciting. So not only is this quarter looking very good, but all the work we've been doing in the task orders. And in particular, again, I'll point back to customer success when you have organizations like FedEx talking about going live with 80,000 plus employees on hundreds of applications over a weekend. That's stronger, message than anything that we could deliver as a management team because other customers will look at that and say, wow, that's kind of result I want. So not only is Q4 looking very good, but I'm, very optimistic about the first half of next year.
As well. I think the pipeline is looking very, very good. And not only in North America, but again, Internationally, there's a big opportunity talked about opening the Tokyo office. We're gonna continue to accelerate our growth there. We already have great organizations, Siemens, Zurich Insurance, NGP, these are large brand names that have standardized internationally on Okta, but there's a lot more that we can do.
And and I think that the the future quarters are gonna be very, very good from happening as well.
Yeah. I'm really excited about our customer identity, business in the fourth quarter. I was just reviewing, the pipeline last night. And, we have a lot of big opportunities in customer identity. It's a very important part of our strategy.
We're, you know, our future is about this dominant 1st class cloud all around identity. And for us to do that successfully, customer identity is a big part of that. It's a broad it's a much different, use case and distinct use case from workforce identity. It broadens the strategic value of the whole identity cloud. It serves customers in a pressing business need they have to connect more closely with their customers over in the digital channel.
And, we're investing a ton in that opportunity in that market, and it's great to see it, really pay off, not only in the results, but in the future, future quarters ahead.
Thanks so much. Appreciate it.
Hey. Our next question is coming from Taz at Guggenheim.
Yes. Thanks for taking my question. Can you guys hear me okay?
Yeah. It's loud and clear.
So last quarter, you guys gave us some color on how much the, the CIM side of the business grew 1. I think it's a 72% last last quarter. Any more color on how that business performed, this quarter?
It's strong. Yeah. It's in the same in the same ballpark. We don't break it break it out specifically every quarter. We're considering doing that in the future, but for now, it's it's a once in a few every few quarters type of metric for us.
But we're seeing both health in the in the raw amount of business, but also in the number of companies that are getting started with that platform. Or or that use case of our platform. So, in addition, just the the Rob dollars of of bookings, we also look at the, the starts in the in the projects that are going, and that's, you know, portends very well for the future. It's it's important. I mean, every we talk about COVID and and, you know, what it's for the business and headwinds and tailwinds and all that stuff.
But the big, a big truth is that it's it's really, really made every company serious about their online strategy. I mean, it's something they've all known they've had to do, and they've been thinking about, you know, hey, we gotta get online. We gotta change. You gotta adapt. It's a digital world.
But, COVID has made it very clear that they need to act now, and we're starting we're seeing that in the what's going on in our business as well.
Yep. That's very helpful. And then one final for Bill. Bill, you have you had strong growth in in billings, strong growth in current RPL. If I'm doing my math right on your full RPO bookings.
Looks like that was, a bit lighter versus, versus last quarter. Any comment on duration was was duration a headwind, for, total bookings in total RPO this quarter?
Yeah. We did de decelerate moderately, as you talked about, Taz. But we're been very comfortable and very, pleased with the growth of our business. You know, as we look at, average deal size, the average deal size, especially in the enterprise, increased significantly. We've talked about the growth in our greater than 100,000 customers.
We added nearly 100 of those and that grew 34% year over year. The base of our large customers, which we talked about, which is those customers within annual contract value greater than $500,000 grew over 50%. And then as we've talked about, we also saw 2 point increase in our net retention rate. So we saw, you know, all our top line metrics really, really strengthen And in addition to that, you know, since the pandemic, has started, we've actually seen a bit of an uptick in our average contract length. So I think when you're looking at implied bookings, which I think is the calculation you're looking at, you're gonna see some fluctuations quarter to quarter, like we did in, in Q1 and Q3 too.
But we're very pleased with, the top line growth and especially in the enterprise with both deal size and, as I said, we're, we're even seeing a bit of an uptick in, in, in term length, during the pandemic, during this period.
Got it. Very helpful, Frank. Thanks, Will.
Yeah. Our next question is coming from Hamza Fodderwala at Morgan Stanley.
Hey, guys. Thank you for taking my question. So I I wanted to touch base on the, Dianne business. You talked about a pretty strong pipeline going into Q4. I'm wondering, you know, we we're also seeing, in addition to that market opportunity, a number of, you know, private vendor, again, the state with the similar developer centric approaches to you guys.
So how do you think about differentiating yourself as a market leader in this space going forward.
Yeah. Absolutely. Thanks for the question, Hamzah. Nice to see you. Oh, I think that, the first thing is you have to think about when people are talking about customer identity and access management.
This is not just you know, the employees is important, and it's all about security, and it's about reducing costs and getting out there. When you're talking about customizing an access measure, this is at the revenue line. And this is top line growth of the company. So this is not something that you wanna, that a a lot of times what we hear from our customers and prospects is this is, you know, the lifeblood of the business is what's gonna drive revenue. It can't be down for, you know, an hour, much less than minutes.
So they're really looking to what what we hear a lot from our customers is they're really looking to, vendors who can provide security, reliability, perform and not just in terms of, like, of TDS that you're gonna ship around, there's some stats you're gonna put on the website. Again, the metrics that, customers are willing to stand behind and talk about the results that they're getting. So, you know, we're we're very happy with the four nines of reliability that we offer on the entire platform with no reception, no asterisk. We're the only ones in the industry to do that for customer identity and access management. We're the only ones to have a FedRAMP, moderate service HIPAA compliant, following all the regulations that you need around the world.
And then if you just look at the size and scale deployments of organizations like Major League Baseball, north of 50,000,000 consumers deployed, Albertsons, a major fortune 500, retailer, obviously, with 27 different brands. The ways that they standardize, the experience for customers and they do that at scale reliably and securely. I don't think that's not negotiable, really, for any of these companies because, obviously, if your website or your app goes down, I mean, that's a CEO and board level conversation, and that's not something that people are looking to mess around with. So, look, there's these are big markets. We, you know, we estimated earlier this year at, analyst say that the customer identity and access management market is $25,000,000,000.
It's probably spent every year already on that. So are there gonna be upstarts that are gonna go after certain pieces of it? Absolutely. Are there things that we need to continue to do to accelerate and invest in the platform? You bet.
And we're making big investments there. But we're also looking for great partnerships, around fraud, around, fraud prevention, around, botnets. And then, obviously, we have Octaventures where we've been making some very interesting investments, in promising customer identity and access management solutions that are gonna help bolster our solutions. So you're absolutely right. Huge opportunity, one we're really focused on, and one that I think is gonna be very exciting in the times ahead.
Yeah. It's a great question. I'll and I'll just follow on to reiterate one point is that this category is early, in its potential, which means that it's there's a lot of definition and filling out of the category to be done. And in my conversations with customers, what I've noticed is that they want someone that can help them do that, help help formulate the category, invest in the category to the level we can, buy companies and round out the solutions like we can. So it's an area we're very serious about, helping to find that category, and it's gonna be It's gonna be fun to do, and it's gonna be, I think, pretty beneficial to customers and to our company.
That's helpful. And my congrats to Bill as well.
Thank you. Thanks, man.
Yeah. Our next question is from Eric Heath at KeyBank.
Hey, guys. Congrats on the quarter. Thanks for taking the question, and, Bill congrats on a great run as well. Question for Todd or Freddie. So where are we with customers kind of reacting to COVID and the initial work from home remote access demand versus the next phase of customers tackling digital transformation and looking to rearchitect their security posture for more of a 0 trust framework.
I think, You know, we're I think the initial rush to figure out work from home is probably, you know, a quarter behind us. I think we're into this new normal now where people are optimizing, you know, their their reactionary things they did and their back to more of a, like, a, thinking about the future. And I think that sometimes that means just deployments of identity for workforce, right, not every workforce identity deployment is is to react to work from home. A lot of it is just, you know, the normal, putting in new apps, wanting to be more flexible, independent of COVID, and we're certain certainly seeing that. But on the customer identity side, I think you're you're seeing that the impetus and the capitalization from COVID really starting to materialize, because of what I said before, the, you know, everyone now knows that they need to do something, and those projects take time.
Even when they do happen, sometimes they happen small and then build up over over a period of quarter. So, I think that's well underway, and I'm excited about for that specific dynamic, I'm really excited about the next few quarters as that plays out.
And I would just add that in the large enterprise, CXO leaders who've either been in industry for a long time and or have been inside their organizations for a long time and built up a lot of political capital. Realize that this is one of those technology leapfrog moments where they're having challenges getting into their data centers on prem infrastructure they now realize as does the rest of their organization is very hard to manage and maintain when you can't go touch it and feel it every day. And so they're really looking to ways that they can, move to these cloud solutions that offer the service, the platform, the reliability, security they need from day 0 from the first time they turn it on. And I think that's gonna be, very exciting. You're gonna see some big transformation projects in the times ahead.
Again, from these large companies and these, experienced leaders who know that this is a moment they can take advantage of.
Great. And maybe just to expand a little bit on the prior question, could you provide an update on the competitive landscape? Maybe if you can segment it out between workforce and consumer and any changes relative to Microsoft?
Yeah. It's, it's something we look at a lot, and we think about it a lot. And There's no change. It's been interesting. The last, really, you know, since I'd say that overall competitively for Okta, we've gone through very early in our history, we were competing to define the category and workforce with, you know, smaller vendors.
At the time there were startups, there were bigger than startups. And then we were able to, through hard work and, you know, being through to our vision, we were able to differentiate ourselves from those competitors. And then, you know, the environment was materially different back, I think, in 2014 when Microsoft decided to compete with us with their Azure Active Directory product. And we were all nervous about that when that happened, but turns out that what they were doing moving everyone into cloud with Office 365 was the best thing that ever happened to Okta. You know, it was kind of, you know, it was, I guess, a little bit annoying to have a direct competitor, but the macro catalyst for the market was was, you know, very powerful for us.
And I think that dynamic with Microsoft is largely unchanged. I mean, I know they've talked a lot about what they're doing and they've tried to improve their product. You know, we're we're investing obviously heavily in our product to stay ahead of them. So that competitive dynamic is is pretty consistent over the last 5, 6 years. I think the reason why is because, and this is not just Microsoft, but with every big platform, that now that they've seen our success, they wanna have success and identity as well.
I think we have a very different worldview. We think this should be its own independent platform. We think that you can't bolt on identity to another platform because identity's gotta be a neutral router. It's gotta be able to you know, log you securely and connect you and provision you equally to any platform or any application. Any device It can't be able to hold into one platform.
You know, I I often joke, you know, imagine being the product manager at Microsoft working on the some of their competing products. And you come up with this great idea to to really connect people to AWS. Right? You you get fired. I'd be like, what are you doing to connect people to AWS?
It's a 0 and a 0 only or, you know, so I think it's just a philosophical thing. And then you merit, you pair that with the the fact our product is just superior and better and has more functionality. I think you see the competitive environment there The last thing I'll add on that too, a lot of our success now is is, you know, replacing legacy. So it's been pretty interesting. In the legacy identity markets, you've seen You've seen CA basically exit the business.
You've seen some of the other players that were traditionally big, whether it's, IBM or others. They're essentially not investing at all. And customers are on these products. They've been on these products for 15 years and the maintenance is coming to an end and they have to do something. And that's that's catalyzing move to the cloud as much as anything else.
Thanks.
Our next question is coming from Keith Bachman at BMO.
Hi, guys. This is, Dan on for Keith. Thanks for thanks for taking my question. I wanted to ask about Okta insights and the usage trends you're seeing there. Can you maybe talk about any growth in data volumes and also, how customers are using the insights?
Thanks.
Yeah. Absolutely. Thanks for the question, Dan. For those of you who are not, that familiar with, the insights product and, actually the suite of products that that we have there, that we've been building for quite some time and the customers are really trying to take advantage of I think that's a great example of how being, the premier independent, and neutral, vendor and the primary vendor for, for identity as cloud service really plays, into products like insights. Right?
We have 94100 plus enterprise customers deployed at scale the amount of data that we now see inside, the network across users, as you can imagine, when we see in the various actor behaving poorly against one of our customers, we can instantly protect north of 9000 customers. And we do that every every single day. So the insights products are very and so we started doing this. We started getting a lot of insight. We were able to help customers, and then we said to ourselves, well, there must be ways that we can actually provide this data back to customers.
The first way that you saw was, the public business is the work report that we've, had out for a number of years now, that provides a lot of insight to your where you can understand what your peers might be using, in a new category that you're trying to use. But now we also have, insights as a customer usable so that they can figure out whether you're an end user, how you might be able to optimize your experience, whether it's on your dashboard products you use most often will automatically shift to the natural position you would use them. Whether it's, as IT or security, you can get insight across your entire, either it's employee based or customer base on how they're doing things, what might be happening, and obviously getting that signal from all the noise when something is going, not according to plan when you might have a security incident or you might have a breach or you might have some behavior from an IP range or a geography that you wouldn't expect. You can do something about that in real time, and we'll alert you to that. So those products are doing very well.
But again, more customers come to the service. It's a great example of the network flywheel. That product gets those products get better and better as we get more users and customers on the platform.
Hey. Our next question comes from Ben Bollin at Cleveland Research.
Evening. Thank you. I appreciate you, taking the question. 2 items. One is, could you give us an update on what you're seeing from an origination perspective of business from channel opportunities versus direct.
And maybe talk a little bit about what role you see the channel playing for net new versus upsell to the pre existing. And then, an additional question would be, totally separate subject, but any thoughts on the incrementality of spend for identity from customers deploying technologies such as SD WAN or Sassy and how you see that, you know, translating to spend and maybe what that tale of opportunity looks like into future quarters. Thanks.
Yeah. Absolutely. Thanks for the question, Ben, for the questions, rather. I'll I'll take the first one first. On the, channel side of the house, we're we're very bullish on what the channel can possibly provide us.
You know, we've, when you're a small company and you're getting, up and running and getting going, you're 5 company, even when you start to go public or think about the public markets, a lot of times it's a direct sale just because there's such quick iteration between you and the based, understanding what customers need. And obviously, if you're in a business like ours where it's all about innovation, it's about transforming legacy industry that's been around for 30 years no innovation and bringing a completely new model to market on a global scale, you need to have that, primary information, translation with your customer. Hard to explain to a channel how to even do that because you're learning yourself. The channel has started to do very, very well over the last few years. Think a couple quarters ago, we talked about how half of the new bookings that quarter had come from the channel.
Not saying we update, every single quarter, but it's continuing to do very, very well. And now it's not only your traditional system integrators, resellers, distributors, very good partnerships we have, whether it's at the global level with Accenture and KMT and, Chrysler HouseCoopers and Deloitte, whether it's, regional security vendors that are out there and how very strong practices like Optiv, or whether it's the large scale distributors like SHI, and Insight, we have very good partnerships there. But actually if you see the press release we put out today, we're starting to get really good channel distribution opportunities through technology vendors. And obviously, starting with AWS is a fantastic one. Our introduction through AWS marketplace is something that I think is, really revolutionary for us as a company and for AWS.
There's a brand new set of products they're putting out around Control Tower, which allows people with more and more complicated AWS environments manage those environments more intelligently from a security perspective. We're the only identity vendor that's in there that's part of that. Also now, as you know, many customers have these large contracts with, AWS, where they might be purchasing a certain set of AWS services But over time, they can buy anything from the marketplace, and that fulfills some of the requirements they have in those contracts. So now any AWS customer can go on a marketplace and purchase Okta, workforce, or customer identity and access management. And by the way, AWS sales reps get pumped for that.
That is brand new partnership just out of the box. In fact, I know they're having their reinvent team out tomorrow. Andy Jassy is gonna be talking about this on the main stage. These are the kinds of opportunities where you wanna talk about the quarters ahead and the years ahead. I mean, you all know the results AWS has, but you also all know how early we are in the migration public cloud.
These are the kind of distribution opportunities that I really think can have a significant effect, and and, frankly, be impactful to the business, in the short term. And obviously, the term. So we're very bullish on all those. Your second question was around, Sassy and kind of convergence of of, the security landscape and what that might mean for us. Look, we have very strong partnerships.
We talked about a few earlier. Still have very strong partnerships with some of the leading, vendors out there like Cloudflare, a very complimentary solutions with Zscaler, a lot of joint customers that are leveraging, again, product to product integration, not just a bunch of architecture, but actually having the product sending signal to each other and making each product smarter, that is certainly something that's only gonna accelerate, right, as people get rid of on prem firewalls, whether it's actually physical or virtual appliance, it doesn't really matter. They're gonna move to public cloud, and that means they're gonna need more. Of a primary identity cloud. And I think that's a huge opportunity for us to help our customers.
Okay. We're gonna take one last question. We've got Joshua Tilton from Berenberg.
Hi. This is
Hey, Joshua.
I think it's only I think it's only fitting that whatever you ask, I'm gonna have Bill answer it the final earnings call is gonna do.
Okay. This is actually Andrew Smith on for Josh, but, Just one from me. So as organizations continue to move to the cloud, have you seen the number of deals where the CISO is the primary decision maker or purchaser of first products increase this year, or maybe put another way if you could ballpark what percentage of your workforce deals are security driven deals? Thank you.
Yeah. Thanks. I I would say that, you know, over, really over the last few years, we've seen, new deals, where the CECO is very involved because obviously there is, a high degree of security needs. And, you know, for us, as identity, which is really when you think about it, that central perimeter for security, it's, it's more and more important. And I think that's, you know, certainly what we're seeing, we're also seeing that you know, there there are a number of reasons why folks wanna use us both for workforce and Siam, and certainly among those is, in addition to, you know, being able to do it scale and to do it efficiently is security.
And, you know, the fact that we are an identity separate platform where we've got, all these different, partnerships and, you know, as, as Freddie said, deep integrations with other security products, it really is a reason why companies are looking to us for that.
Okay. Well, that does it for today. But before you go, I just wanted to let you know that we'll be attending 3 virtual conferences over the next 2 months will be at the UBS Global TMT Conference on December 9th, Goldman Sachs Technology And Internet Conference on January 12th, and the Needham Growth Conference on January 14th. So we hope to see you at one of those events.
So that's it for today.
And if you have any follow-up questions, you can email us at investor@octa.com. Thanks for joining.