We're good? All right. Appreciate it. Welcome, everyone. Late afternoon here. Appreciate you guys being with us. So please be joined by the Okta team. So we have Eric Kelleher, and we'll get to you in a second and talk about that recent promotion. So glad to have you here and with a new role and be with us. And then Dave Gennarelli with IR. Dave, appreciate you always being supportive.
Thanks for having us.
So Eric, I wanted to let you kind of give yourself an intro and give some background to yourself. This might be some people's first interaction or having conversations with you, so we'd love to just let people kind of know some of your background.
Sure. That's great. My name is Eric Kelleher. I'm recently appointed the Chief Operating Officer for Okta. I've been with the company about eight and a half years. I've been in software as a service since the late 1990s before we called it software as a service. But my background has been in building customer businesses. So I grew up building professional services, introduced the customer success management function to the industry at Salesforce as part of the team that built the Salesforce Enterprise SaaS Playbook. Spent 11 years there until 2013, and then did a quick tour at LinkedIn, standing up a customer success function for their talent solutions business before joining Okta back in 2016. So I've been with Okta through the phases of growth and through some recent quarters that have been growing a little bit less enthusiastically.
But in my tenure at Okta, I've stepped from customer functions into more operating functions. A couple of years ago, I picked up our marketing and communications teams. And now with this appointment, which just started this month, I picked up our go-to-market strat and ops team and our BT teams and our company operation teams as well. So I'm very excited to be here today. I appreciate the invite.
Yeah. So it's a pleasure to see kind of you guys exiting the year with strong execution, starting the year strong on looking at the fiscal 2026. So just curious what you guys were most pleased with when you look back on this quarter.
Let me just start and give you some of that. I think we felt we had a really strong quarter. It was stronger than we expected, and we were really pleased to see the execution, in particular in a go-to-market, in closing out the pipeline of business that we had built for the quarter. We've been working very intently all year in three priorities for the year, so our three corporate priorities last year. Our first was always secure, and we had some work to do a year ago in reestablishing trust and a baseline of security with our customers. We put a lot of work last year into making sure that we restored trust where we needed to. Our second priority was re-igniting growth.
And we put a lot of work into our go-to-market and our strategy and operations, our enablement, our execution, and building pipeline and getting good return on investment on our pipeline. And number three for us was scale. And as we look across our Q4 results, we feel we closed in a strong position. From a security perspective, Q4 was the quarter where we overtook the number one identity brand and brand awareness as Okta, which is exciting for us to see that. We had a number of metrics on our contribution with our partners and our partner engagement, our bookings metrics across the board, and we ran them in our earnings call. We're stronger than we'd expected. So it was great to see all of that.
And then we also saw from a scale perspective, you saw it from a free cash flow perspective and a profitability perspective, we were able to deliver on that front as well. So for us, Q4 really demonstrated our ability to execute from a position of strength, and it sets us up for this year. And we have a lot of we're not done. We have a lot of work to do this year. We're starting FY 2026 with a significant change in our go-to-market to further specialize our sellers and bring them to market. And we're working through the change associated with that, and our guidance reflects what we expect that to take. But we're very confident in our ability to go forward next year. Yeah. So curious for you, Q4.
Dave, anything to add, or?
No, other than as Eric said, it was kind of strength across the board, so not any one particular area that drove it, but pleased to see just the record amount of bookings, over $1 billion total bookings in the quarter, strength in new products, strength in the Auth0 business, record quarter for the Auth0 business, so by and large, yeah, it was one of our better quarters.
Yeah. So I mean, it's great to see strong execution at the end of the year and build on three key levels, a solid quarter as well. I guess just to, I don't know, to discuss the thing that's on everybody's mind, it's just like, how do we get comfort with consistent execution out of Okta? I mean, there's been some challenges, and you guys rightfully acknowledge that. But just what it gives you, or how can you help give investors confidence that we can expect this consistent pace of execution going forward?
Yeah, I think if you look back at our history of hitting and beating, that's been something that we try to guide prudently based upon how we see the business and our ability to execute for growth. I think you just hit on not only was Q4 strong, but we saw good progress in Q3. For us, that demonstrates our ability to build the year towards our goal and land in a position of strength which we executed. We feel good about that as well. And I think as you look across the financial metrics we've shared over the past many quarters, you've seen our free cash flow continue to improve. We've demonstrated we can be profitable. And you've now seen us guide that we are investing into growth to make sure we're getting growth back to where the potential of the market says we should be.
So as I said, one of the things we've learned this year is one of the steps we took in Go-To-Market this year was to partially specialize a segment of our sales organization. We took our small business sales team in North America and separated into a group of hunters focused on new logo acquisition and a group of farmers focused on cross-selling and upselling. And that change that we invested in throughout the year ended up in us having a very strong performance in that segment in Q4 as well. And we're taking that further by further specializing by product line and by buyer coming into this year. So we're confident in our ability to manage through change and to lead through change and to deliver.
We're also confident in our ability to forecast and guide based on what we expect the cost of that change to be and how we execute this year.
Yeah. Great. So let's talk about a lot of the expansion opportunity here because it's really exciting what you guys are doing and to see you go execute against this broader platform opportunity in several different ways. So big picture, where do you think we are in terms of customers' willingness and ability to adopt the platform and actually have these swim lanes start to blur in identity?
We see a strong readiness in customers. In fact, we didn't set out to build what we are now calling a unified identity platform, a unified secure identity fabric. That wasn't Okta's initial design. Okta's initial design was specifically to focus on access management and be the best in business at access management. And what's happened over the years is our customers have pulled us into these other areas. They've pulled us into privileged access, and we brought a product to market called Advanced Server Access to service that market. They've pulled us into governance, and we started with a product called Lifecycle Management. We then added a product called Workflows to start to service that. Even then, this was three, four years ago, our strategy was to partner with SailPoint and Saviynt as full-stack governance systems. But what's happened is our customers have had success with Okta.
They've had success with all of our products, and they've asked us to Oktify these adjacencies in a way that they could administer them in a fashion where they know that they're secure, they know they can get great time to value, they know they can get ROI, and they know that they can trust the partner they're working with in those areas, and so that's what's led us to bring what we now have, Okta Identity Governance and Privileged Access to market. You heard us talk in Q4 about the success we've had with identity governance. It's now two years in the market. We have just crossed 1,300 customers. I mentioned SailPoint. It took SailPoint about 10 years to get to the same customer milestone. We feel pretty good about our ability to build our footprint into that space, and the feedback from the customers has been really validating.
We have now, in the deals where we're attaching governance to workforce deals, it's about 30% of the contract value, and we've had success up market probably faster than we initially would have expected. As customers who are having great success with our workforce suite are asking us to add governance to that suite to help them secure identity, and we expect privileged access to follow. It's earlier. It's a year newer than governance. Its first year looks very similar to the path that we saw for governance as well, so we're optimistic on that front.
Yeah. That's great. So I mean, I think a lot of people are excited about IGA and what that can mean for growth for this year. So where are you finding success? It feels like from a logo perspective, maybe it's mid-market. And to me, I think of mid-market as probably a pretty decent greenfield opportunity. It's surprising kind of the brand name logos you talk to, and they say, "Hey, we run on spreadsheets." And somebody mentioned they use Alteryx and Glue to kind of do some lifecycle stuff on stuff. So it's still surprising how greenfield it is. So maybe speak to the greenfield opportunity and where you're finding success in the enterprise segment. Is this full displacements? Is this certain workloads, certain environments? Is it in some way a wrapper around existing solutions? So just many facets to talk about.
I would say we're not seeing a huge volume of outright replacements of existing on-prem stack for governance, as an example. I think where we tend to get involved is more as an extension of the existing Okta suite, which is what we expected, and where we do compete head-to-head with larger on-prem systems or transitioning to SaaS systems, as in the case of the two companies we talked about, it tends to be as an adjacent purchase, so customers that are using the Okta platform for access management that are considering adding governance, they might look at two of us head-to-head, but we're not seeing outright replacements as a go-to-market play we're processing at volume yet. I expect we will get there. Again, we're relatively early in the journey at two years in, but we're very optimistic.
We mentioned in our earnings call we've crossed 1,300 customers, as I said. That business is now a $100 million ARR business just for that product, and the two related technologies we have that do governance-related work are Lifecycle Management and Workflows. We've had them in market for several years, and combined, they're an additional $300 million of ARR, so right there in the governance space, we today have a business that's doing about $400 million in ARR, which gives us credible capabilities to compete with full-stack offers as well.
Yeah. Dave, are we talking about growth of that IGA business in totality?
Talk to the growth of that?
Yeah.
So yeah, it's been one of our fastest growing. When we talk about the new product bucket, so that's growing over—that comprised over 20% of our total bookings in Q4. So that's an acceleration even off of Q3, where that bucket was about 15% of total bookings. And then think about Q4 as our biggest volume quarter of any given year. So yeah, the strength of that, and it's really the other products that are within that bucket, like Privileged Access, Identity Threat Protection with Okta AI, Identity Security Posture Management, Fine Grained Authorization. So all those actually had meaningful contribution as well. Identity governance is easily the biggest component, but those other ones actually had really strong performance as well.
Yeah. So 20% this quarter, 15% prior quarter. Anything about a year ago, just to help people understand?
So a year ago, they were all fairly small. So the growth rate is pretty considerable. So it felt like the actual contribution to bookings is probably a better metric to measure the success.
Gotcha, well, one thing I thought that was really interesting and important what Todd said on the earnings call Monday, the go-lives seem to be quick go-lives because I think that's a big thing in IGA is the amount of GSI dollars that are needed and the time, and people spend a decade trying to implement IGA, so I think quick go-live is a big thing, so can you talk quantitatively and qualitatively what you're seeing in terms of go-live and how quickly customers are getting successful?
Yeah. And what I mentioned earlier, that what our customers have asked is for us to help Oktify the governance space. That's a big part of it. A big part of our value proposition since we were founded. Because we're cloud-native, we're only in the cloud, it's relatively quick to provision us. And our entire design as a company for our stack has been helping people get time to value quickly, get live quickly, and get value, and then add more capabilities over time. So that has been our approach to governance as well. So today, we have customers that are deploying. Of the 1,300 customers, we have customers that have gone live in a couple of weeks. We have customers that have gone live in a handful of months. We don't have any years-long or 10-year-long deployments. Our product's only two years old.
So we feel very, the feedback we're getting from our customers is very much in line with their expectations that when they make the investment with us, they want to solve a problem now, get a system up and running quickly, and get value. And they want the ability to add more complexity to that over time, which is kind of inverted from the historical model of designing an on-prem governance system where you spend, as you said, years or 10 years with the GSI to get it designed properly, stood up properly. And then once it's deployed, it's already too complex for you to figure out how to administer and too expensive for you to figure out how to maintain. We have SaaSified that entire approach to solving governance. So we think that's a big reason why we're seeing the success that we're seeing right now.
Yeah. I mean, I think that's an opportunity you guys came up with SSO MFA and filled a big void with a cloud-based prescriptive out-of-the-box solution. I think that's what IGA still needs. So maybe adjusting topics a little bit, and we can kind of tackle this in two parts, but just would love to get your perspective on what customers are thinking about asking for and how you're positioning Okta when it comes to non-human identities, agentic AI. I know we covered some of this on the earnings call, but I'd love to just hear your perspective a little bit at a high level. We don't have to get too technical on.
Yeah, it's still very early for the space overall and for everyone. Todd talked about how we're thinking about this on the earnings call on Monday, but I think a couple of broad comments that are relevant in understanding Okta as a company. One is our seat-based pricing model. All of our workforce identity stack is seat-based. Historically, it's been limited based on the number of humans you have. Adding agents into the mix adds new opportunity for us to think about how we price our products, and some companies are looking at pricing on an MAU basis, which right now is our intent for our first offer that's coming out in Auth for Gen AI, which releases early access later this month. That will be priced on an MAU basis for early access, but we expect during that period to explore additional pricing models.
And is there a transaction-based pricing model, or is there a user-based pricing model that might make sense, or an agent-based pricing model in that case? So we don't have a defined economic model for exactly how we approach pricing. We want to get some data from customers and usage before we lock in a particular pricing model for that. But we think it's opportunity for us, and certainly for all the vendors that are in this space.
So, in terms of thinking about the parts of the portfolio, the platform that you think benefit, I mean, if we think about the four big pillars, is it CIAM? Because that's where all of Gen AI sits. But what about the rest of the portfolio, do you think? Is there any particular area that you'd call out, like, "Hey, this is the opportunity where we see best position to target agents or non-human IDs"?
We see the CIAM, the Auth0 platform for customer identity use cases with Auth for Gen AI as the first area, which is why we're early accessing that first, but we see applicability across the board, so you can imagine from a workforce standpoint, you have a customer support rep who you authenticate through workforce identity access management, well, that person might in the future have multiple agents that are also acting on their behalf and doing work on their behalf. They will then need a solution to authenticate each of those agents to make sure the code is what it says it is, and they will then also need fine-grained authorization that will designate not only that they know the agent is who they say it is, but also that the agent is able to do the things that it's trying to do.
That combination of authentication and authorization is something that Okta has solved really well in our stack today. The opportunity becomes even larger when we start expanding beyond just humans that are taking action.
Well, do you have a premium model to this? Because how are you thinking about pricing this and seeding the market out there? So as developers are building that.
We have not announced a pricing model yet. So we're going to be exploring methods that we think are most successful for us. We do have a freemium model, if you will, for our customer identity business today, where you can start with a free trial, self-service and then grow up into an enterprise pricing plan over time. So that may be an approach that makes sense for us here. We'll find it out in the early months.
Yeah. I want to talk about the specialized sales force a little bit and just want to understand better just why you're confident in this move, maybe in terms of what this looks like in practice for fiscal 26, some of the changes you're making, and some of the data points that you have, because you have some instances of specialization already. Data points or what you've seen be successful and why you're confident that you can do this in other respects.
Yeah, I think it's a great question. And one of the questions we've been getting is our guidance for this year, given Q4, is it conservative? How does that appear? And the cost of change is really one of the key drivers for why our guidance is where it is right now. We are putting a lot of effort into taking our sales organization and pulling it apart to have it focus on two distinct buying personas with the two parts of our technology stack, our Okta platform selling to IT and security and our Auth0 platform selling to developers. And we're very confident that that direction is the direction that's going to accelerate sales productivity for us. Some of the data that we're looking at on that is just we know that focus matters.
We've spent the past couple of years taking sellers that had been successful in those platforms, pulling them together and asking everyone to sell everything to everyone, and what we've seen over the past couple of years as we look at our sales productivity numbers is that that has not resulted in the kind of growth that we know we have the potential to achieve, and in addition to that, during those two years, our products have been accelerating their pace of innovation. If you look back before two years, we were in a period where both Okta and Auth0 were replatforming. We were taking Okta from what we called its classic stack into what's now the Okta Identity Engine, the current architecture. Auth0 went from its legacy stack into what's now its current architecture called Layer0 .
So there was a period where we were focused on architectural changes, not so much feature innovation and product innovation for customers. We're through that now. And so we have sellers, ask them to sell everything while we have two R&D teams that are accelerating their pace of innovation and bringing more product to market while we're asking our sellers to focus on two distinct personas in a CIO, CISO, and a developer with very different buying motions and very different priorities. We are very confident from everything that we've seen that focusing on the buyer with the stack is going to be the right move for us over time. And so we've designed that specialization as the primary investment we're doing this year. You asked about existing examples where we've tested specialization.
This year, we had a similar but a distinct need that we were attacking, which was we were looking at America's commercial business. We had seen our pace of new logo acquisition start to decline as a percentage of bookings. And what we had seen is as our product innovation had picked up, it had gotten easier for salespeople to sell new products to their current customers than it was to go out and prospect for net new logos to bring into the business. So this year, we specialized that segment of our team to have a team of hunters that were bringing in new logos and a team of farmers to cross-sell and upsell. And as you saw in our Q4 results, we felt very strongly with how that team ended out the year and building into that.
So we're confident that last year's work built to the strength of close. The strength of close surprised us. It was bigger than we expected, which was great, but we are confident in the playbook that we have in place and where we're going, and the sales specialization is a really important strategic investment this year.
Right. So security organization, developer organization makes a ton of sense. Within workforce, is there bifurcation between IGA, PAM, Access Management?
No. So where we bifurcate there is our presale specialists, our sales engineers. So when we need specialists that are deep in domain expertise, we'll bring in technology specialists in those areas. But there will be one account owner for customers in IT and security across that entire portfolio.
Got it. And then we also talked about some packaging changes. So maybe talk about what the point of friction is that maybe you can alleviate with some of the packaging that you're rolling out.
You're talking about suites. We've been out.
Suites.
We're rolling out something called Okta Suites for people that are buying the Okta platform components, so subsets of the SSO, MFA, Universal Directory, Lifecycle Management, Workflows, OIG, Privileged Access, all those Identity Threat Protection, ISPM, all of those technologies live in this Okta platform, and one of the areas of feedback we've gotten from customers is that it's a complicated product catalog to navigate, and one of the data points we've realized as we've looked at our sales execution is the complexity of that catalog has slowed down deal velocity, and so through those conversations and conversations with customers and analysts, we've realized that there's value for us in simplifying the bundling of products into suites that customers can subscribe to. We believe it will help transaction velocity.
We also believe it will help us with renewals and helping customers get less myopically focused on individual line items and more focused on the big picture of how Okta is helping them solve their identity problems. Early feedback from the design of the suites has been very positive. So we're optimistic those will contribute this year as well.
Makes sense. And then another thing, I don't even know if you guys mentioned it, but partners was, I think, a standout.
Partners were huge.
Partner contribution.
70% of our deals in Q4 were partner influenced. 18 of our top 20 deals were partner influenced. We've seen really great traction with partner contribution. That's something we expect to continue as well.
I mean, what's changed internally? Because I think it may not have been so symbiotic with the partner community in years past, but I mean, the GSIs are really contributing, and I think it's really coming to bear, and we're hearing it externally too.
I think two things to talk about there. And Dave, you might have something to add as well. One is the GSIs have been more active this year. And a big part of that that I hear in conversations with customers is their GSIs typically were involved in on-prem solutions, many of which have gone private and have roadmaps that are less certain for the moment. And so they've got to figure out how to navigate that. And the GSIs need to bet on a future partner that they have confidence. They're leaning into the cloud. So we're having larger customers working with larger SIs, having larger Okta conversations. That's been something that's been very material to our success at market. And then in addition to that, in mid-market and down-market as well, we've had great success with AWS Marketplace.
As a channel for people transacting through the marketplace, we crossed in Q4, we crossed $1 billion in commerce on that platform in just the first four years that we've been listed. We were named the AWS Marketplace Partner of the Year. We've had great success. We've had success down-market through commerce channels. We've had success up-market with the GSIs. We need to continue both of those. There's still sustained execution that's required for us to capitalize on those opportunities. We are optimistic that we're trending in the direction towards SaaS, towards identity in the cloud, and towards the platform we're building.
Yeah. And the last thing I wanted to make sure we touch upon, because I think it's really important. And again, talking about the earnings call, enterprise seems like the place where you're really focused. So help us understand or get the same amount of conviction that the enterprise segment does have a lot of growth opportunity. Where do you see that? Is it new logos? Is it just you're underpenetrated in your existing install base? Just big picture of what gets you excited about the enterprise side.
So yes. So it's not just enterprise. It's also Strat and PubSec. And what we're seeing is identity has never been a more strategic investment for firms to make. And as you look at cyber threat activity in the market right now, over 80% of attacks start with compromised credentials. And so serious companies are prioritizing securing identity more than they ever have. And so the program of making a bet on Okta and investing in Okta to address that problem has never been more important. So we see new logo opportunity with new companies that are upgrading legacy tech that they've outgrown so that they can attack that problem. And we also see opportunity with existing customers who are buying into our expanded portfolio as we continue to bring more products to market.
For us, both in enterprise and in Strat, that's why we talked about our success in large customers, greater than 100K. Our million-dollar customers have now grown to over $1 billion in ARR. We've had across the up-market segment, we're seeing that kind of sustained success.
I mean, are we talking core workforce access management opportunity, or are we talking the contribution in the enterprise where there's a lot of white space to be had in IGA, PAM, CIAM?
I'm sorry.
Core workforce, like access management. Is there a lot of headway to go there, or you think the contribution in that area?
We think both. We think there's an upsell opportunity with the core workforce products and with more companies and more seats within the companies that are already in our portfolio. We have a sizable percentage of Fortune 500 and a sizable percentage of Global 2K, but we're not wall to wall in those organizations, so there's upside there, and then we additionally have a lot of cross-sell opportunity with the new products that we're bringing to market in those accounts.
Awesome.
It's a confluence of the technologies we have. So those bigger companies generally are much more complex. They have a mishmash of different identity systems. They've bolted together over the years. So they're bringing in Okta to modernize and simplify their platform. So it doesn't happen in one fell swoop. So it's the land and expand strategy that we have that brings us in, kind of whether it's a proof of concept or maybe putting us into a particular environment, and we earn the right to expand that business over time and it's been very successful.
Awesome. Well, I think.