Skip to content
CertGPS

Okta Certified Professional

Proves day-to-day Okta administration through six hands-on use cases in a live Identity Engine org, with no multiple-choice questions

IntermediateOkta

The exam

Exam cost
$250
Study time
2-4 months
Passing score
Not published by Okta
Valid for
2 years

Before you book

  • None required
  • Recommended: one year or more in a technical security and identity role
  • Recommended: at least three months of hands-on experience with Okta

What it covers

Security domains

Career

US pay and outlook from the Bureau of Labor Statistics for the closest BLS occupation to each role this certification fits. BLS doesn't report pay by certification, and counts most of these roles only within a wider occupation, so the figures describe that occupation, not the role or the credential.

Where it leads

  1. Okta Certified Professional

    You are here

  2. Certified Information Systems Security Professional

    Expert

    Next step. Places identity and access management inside a broader eight-domain security program

Study guide

Last updated

Okta Certified Professional Study Guide: The Hands-On Exam and a Plan

Okta Certified Professional shows that you can do the daily administration of an Okta tenant: create users and groups, connect an app with single sign-on (SSO), enforce multifactor authentication and work out why someone can't sign in. Instead of multiple-choice questions, the exam gives you six hands-on use cases to complete in a live Okta Identity Engine org in 150 minutes, so preparation means hours at the admin console.

Who it suits, and who should choose another credential

It fits an IT administrator, help desk lead or junior identity and access management (IAM) engineer whose organization runs Okta, and a consultant at an Okta partner early in their career. Okta recommends at least a year in a technical role focused on security and identity, including three months of hands-on Okta work. It is also the first step in Okta's ladder: the Professional certification is a prerequisite for the Okta Certified Administrator, Consultant and Technical Architect certifications.

If your company runs Microsoft Entra ID instead, SC-300 is the equivalent credential and covers identity governance and hybrid identity that this exam doesn't. If you want identity knowledge that isn't tied to one product, CISSP treats identity and access management as one of its eight domains, though it asks for five years of experience and covers much more besides.

The exam at a glance

Okta Certified Professional
FormatSix performance-based, hands-on use cases in a live Okta org
Time150 minutes, no scheduled break
Passing scoreNot published by Okta
Price$250 first attempt; $100 for each retake
DeliveryOnline, proctored by ProctorU (Meazure Learning)
PrerequisitesNone; recommended 1+ years in a security and identity role and 3 months hands-on with Okta
Validity2 years; renew with the Professional maintenance exam or by passing the Administrator or Consultant exam

What the six use cases test

Okta's study guide lists each use case with its share of the exam:

  • Account Creation and User Management: 26%
  • Application Setup with the Okta Integration Network (OIN): 10%
  • Attribute Mapping and Offboarding: 8%
  • Security Enforcement: 38%
  • Troubleshooting: 12%
  • Syslog and Okta Support: 6%

Security Enforcement is more than a third of the score. It asks you to set up an authenticator and an enrollment policy, add a rule to the global session policy, create an authentication policy, configure password policies for self-service recovery and then confirm that a user is actually prompted for the right factors. You check that last step yourself, signing in with Okta Verify on your own phone.

User management at 26% goes further than creating accounts. You'll add a custom attribute, write a group rule, assign a standard administrator role to a group, and build a custom role with a resource set. The application use case covers a Security Assertion Markup Language (SAML) integration from the OIN, provisioning, and confirming the user arrived in the target app.

The exam is Identity Engine only. Okta retired the Classic-era Professional hands-on exam on June 1, 2024, so study material written for Classic Engine policies will mislead you. You're allowed to use the Okta Help Center during the exam, which rewards knowing where things are documented over memorizing them.

How to prepare

You need an Identity Engine org to practice in. Okta's Integrator Free Plan, which replaced Developer Edition orgs in May 2025, is meant for testing integrations and identity flows and will do. Then work through each task in the study guide twice, once following the documentation and once without it.

A practical sequence:

  • Build the directory first: users with a custom attribute, groups, a group rule, and a custom admin role scoped to a resource set.
  • Add a SAML app from the OIN and set up provisioning if the app supports it, then map attributes and deactivate a user to confirm access is removed.
  • Spend the most time on policies. Create authenticator enrollment policies, global session policy rules and app authentication policies, then sign in as test users to see what each combination actually does.
  • Break things on purpose for troubleshooting practice: a user in the wrong group, an expired password, an app missing from the dashboard. Find the cause in the System Log.

Okta's study guide recommends the Okta Professional Series Learning Plan or the Okta Foundations for Administrators instructor-led course, while the exam page names the Administration: Onboarding Learning Plan and Okta Essentials for Administrators; Okta treats them as alternatives. Take the free Okta Professional Performance practice exam before booking, since it runs in the same hands-on format.

If you already administer Okta, put most of your preparation into policies and troubleshooting. If you're new to it, expect most of your time to go to the Security Enforcement and Account Creation use cases, which together make up 64% of the score.

Renewal and next steps

The certification is valid for two years. Okta will notify you of the recertification requirements and timeline. One route is the Okta Certified Professional Maintenance Exam, which costs $100 for the first attempt and nothing for a second. Passing the Administrator or Consultant exam also renews it. If you fail the main exam, you can retake it after 24 hours, then must wait 14 days after each later failure.

Where to go next:

  • Okta Certified Administrator, which needs the Professional certification first and goes deeper into the same console.
  • SC-300 if your organization also runs Microsoft Entra ID.
  • CISSP once you have the experience, for identity as part of the wider security program.

Our view

Because it's performance-based, Okta Certified Professional carries more weight than a multiple-choice vendor exam would, since you can't pass it without having configured policies in a real org. Its limits are scope and portability. It covers one product's admin console at a foundational level, and it lapses after two years. At $250 it's good value for anyone whose job is running Okta, and a sensible first step toward the Administrator certification. If you don't work with Okta, it won't help much.

Sources