Okta Privileged Access: Zero standing privilege is no longer a myth
summary
Okta Privileged Access claims to remove long-lived credentials by delivering zero standing privilege, a unified identity platform that issues just-in-time accounts on EC2 using ephemeral client certificates (no SSH keys or passwords), vaults and rotates service passwords with automatic remediation, and enforces per-connection transactional MFA for SSH/RDP. It adds AWS entitlements discovery and right‑sizing, session recording, and a secrets vault for static tokens; GA rollout is scheduled for December 1.
AI-written summary · about
chapters (5)
- 0:00Introduction
- 3:26Okta Privileged Access Example
- 7:26Focus Areas
- 12:24Transactional MFA
- 18:03Secret management
related talks
41mJourneys to Zero Trust on AWS
49mZero Trust Security
42mZero Trust security with HashiCorp Vault and AWS (PRT239)
23mZero Privilege Architecture - 3 Years Onward
26mBuilding Blocks of Security: Using passkeys to protect user access
26mHolistic Authentication
18mShifting Authentication at Scale
25mRisk-based authentication and zero trust architecture ZTA