Investment Memorandum · Preview
For informational purposes only. Not investment advice.
Okta, Inc.
OKTA
May 27, 2026
Okta, Inc. (NASDAQ: OKTA) is the leading independent enterprise Identity & Access Management (IAM) platform, serving 19,000+ customers with 40% cloud-native IAM market share. The company operates two primary products — Workforce Identity and Customer Identity (Auth0) — and offers 7,000+ integrations. Fiscal year ends January 31. FY2026A revenue was $2.919B (+12% YoY), with reported FCF of $863M and true FCF (ex-SBC) of ~$283M. Net cash stands at ~$2.13B (13.8% of market cap). On April 30, 2026, Okta GA'd Auth0 for AI Agents, targeting the machine identity TAM estimated at 10–20x the human identity market.
▲ Bull Case
- ◆Auth0 for AI Agents (GA'd April 30, 2026) addresses a machine identity TAM that is 10–20x the human identity market (45 machine identities per human user), currently priced at $0 in the stock — representing a near-free call option on the fastest-growing identity surface area in enterprise security.
- ◆True FCF positive and accelerating: $283M FY2026A → $520M FY2028E (+85% over two years), at a 29.6x FY2028E true FCF multiple — reasonable for a 10%+ revenue grower with 30%+ FCF margins, making the 2.3% implied terminal growth rate provably too pessimistic unless NRR collapses to 100%.
- ◆Cheapest enterprise security valuation in the peer group at 4.2x NTM Revenue and $2.13B net cash providing 13.8% of market cap in downside protection, with every comparable security peer trading at 2x+ higher multiples for the same or lower FCF margins — maximum pessimism already embedded in the price.
▼ Bear Case
- ◆NRR declining from 125% (FY2022) to 108% (FY2026) with no confirmed stabilization floor; if NRR continues to 103–104%, all revenue growth must come from new logos and the implied terminal growth rate of 2.3% becomes a self-fulfilling prophecy rather than market mispricing.
- ◆Microsoft Entra ID structural overhang: bundled pricing with Azure/M365 creates an increasingly difficult competitive environment in Workforce Identity, particularly in Microsoft-heavy enterprises — the precise scope of displacement is unquantifiable without earnings transcripts and management commentary.
- ◆FY2027 revenue guidance of only ~8% growth is the slowest in the enterprise security peer group, and any guidance cut below $3.10B on May 28 earnings would confirm the bear thesis of permanent deceleration, likely driving a 15–25% drawdown from current levels.
“The central debate is whether Okta's NRR deceleration (125% → 108%) represents a temporary post-breach normalization and product-mix maturation, or a structural decline driven by Microsoft Entra displacing Workforce Identity at scale. Bulls argue the 4.2x NTM revenue multiple already discounts a near-zero-growth terminal state and that Auth0 for AI Agents provides a credible re-acceleration path as machine identities multiply. Bears contend that 8% FY2027 revenue guidance with no visible NRR floor, combined with Microsoft's bundling advantage in Azure-heavy shops, makes Okta a value trap rather than a value opportunity. A secondary debate exists around whether reported 30% FCF margins are economically real given ~$580M annual SBC (true FCF margin is ~10% of revenue in FY2026), and whether Auth0 for AI Agents can generate material ACV before competitive alternatives from CyberArk, Ping, or Microsoft emerge.”
- ◆Q1 FY2027 earnings (May 28, 2026): Revenue vs. $752M guidance and any FY2027 full-year guidance raise above $3.15B
- ◆Auth0 for AI Agents first disclosed ACV or pipeline metrics (Q2–Q3 FY2027)
- ◆NRR stabilization or re-acceleration above 108% confirmed over two consecutive quarters
- ◆Share buyback announcement leveraging $2.13B net cash balance
- ◆Any large enterprise AI platform partnership (hyperscaler, SI, or ISV) leveraging Auth0 for AI Agents at scale
- ◆Q1 FY2027 FY guidance cut below $3.10B on May 28, 2026 (2 days away) signaling accelerating NRR deceleration
- ◆NRR declining below 104% for two consecutive quarters, eliminating net expansion as a growth driver
- ◆Second major security breach within 3 years of the October 2023 incident — existential for enterprise trust in an IAM vendor
- ◆Microsoft Entra ID publicly naming 3+ Fortune 500 Okta displacements within any 12-month period
- ◆Auth0 for AI Agents fails to reach $50M ARR by January 31, 2028 combined with revenue growth remaining at or below 8% in FY2028
Full Memo Continues
5 more sections, locked
- ●Valuation Range & DCFBase/bull/bear fair-value range, WACC, terminal growth, sensitivity to revenue + margin assumptions.
- ●Risk/Reward AssessmentPosition-sizing framework with explicit upside/downside skew and entry conditions.
- ●Management & Capital AllocationMulti-year capital-allocation track record, incentive alignment, and management readout.
- ●Monitoring FrameworkWhat to watch each quarter — leading indicators and inflection signals tracked by the analyst.
- ●Unresolved QuestionsOpen analyst questions and follow-up research items — the depth signal.
For Agents — $2 per memo
Call the JSON API with a Stripe Shared Payment Token. No account, no signup — just pay and call.
GET /api/v1/research/OKTA/memo Authorization: Bearer spt_...
Fund managers — coverage subscriptions launching soon. See marginofinsight.com.