Okta Certified Administrator study guide
Okta Certified Administrator · Work through your exam, one topic at a time.
The Okta Certified Administrator is the second tier in Okta's workforce-identity certification ladder, positioned between Professional and Consultant. Okta describes it as validating critical administrative skills such as in-depth user and group management, comprehensive security policies, and advanced troubleshooting - the day-to-day work of someone running a live Okta org rather than merely understanding core features. The Professional credential is a prerequisite, so candidates should already be comfortable with user management, single sign-on, and basic security configuration before attempting it. The exam is closed book unless a study guide says otherwise, and no electronic devices are permitted during testing. Topics on this exam: User and Group Management, Security Policies, Advanced Troubleshooting, and Okta Administrative Configuration. The Okta Certified Administrator study guide has 4 sections and about 1,396 words.
01User and Group Management
This domain tests how Okta represents identities and access: user lifecycle, profile mastering, group rules, app assignment, and group push. Expect scenario questions about why a user is (or is not) in a group, why an app tile appears, and what happens when a rule or source changes.
364 words, about 2 min02Security Policies
This domain tests Okta's policy engine: password, MFA enrollment, global session, authentication (app sign-on), profile enrollment, IdP routing, and authorization-server access policies. Questions often ask which policy fires, in what order, and which factor satisfies a requirement.
344 words, about 2 min03Advanced Troubleshooting
This domain tests diagnosis with evidence: System Log queries, reports, SSO traces, provisioning errors, MFA failures, and API rate limits. Expect 'user cannot access app' scenarios where the answer is a policy, assignment, network zone, or assertion mismatch.
331 words, about 2 min04Okta Administrative Configuration
This domain tests org-level setup and delegation: admin roles, org security, branding, domains, IdPs, network zones, API tokens, and extensibility. Questions focus on least privilege and blast radius.
357 words, about 2 min