Okta Certified Professional study guide
Okta Certified Professional · Work through your exam, one topic at a time.
The Okta Certified Professional is the entry-level credential in Okta's certification track. Okta's certification page describes it as showcasing "a firm understanding of Okta's core features, including user management, SSO, and basic security configurations," and lists no prerequisites. It is the first stepping stone toward the Okta Certified Administrator, Consultant, and Technical Architect credentials, each of which requires the Professional as a prerequisite. It suits administrators, implementation partners, and IT staff who are beginning to work with Okta's workforce identity platform and want a verifiable marker of foundational skill. Topics on this exam: User management, Single Sign-On (SSO), and Basic security configurations. The Okta Certified Professional study guide has 3 sections and about 1,064 words.
01User Management in Okta Universal Directory
This domain tests how Okta Universal Directory stores identities and how lifecycle actions, groups, and profile mappings control access. Questions often ask which status a user is in after an import, why a group rule did or did not fire, and how an attribute reaches an app. Every Okta user has a profile in the Universal Directory. Base attributes include login, email, first name, and last name; custom attributes are added in the profile editor and mapped to app profiles.
353 words, about 2 min02Single Sign-On (SSO) Fundamentals
This domain tests how Okta federates authentication to applications and how sign-on policies decide whether a user is allowed, challenged, or denied. Expect SAML, OIDC, SWA, app assignment, and IdP- versus SP-initiated flows. SAML 2.0: Okta is the identity provider (IdP); the app is the service provider (SP). Okta sends a signed assertion to the SP's Assertion Consumer Service (ACS) URL.
344 words, about 2 min03Basic Security Configurations
This domain tests the policies and controls that decide how users authenticate, how sessions are constrained, and how admin access is limited. Expect password policies, MFA enrollment, global session and app sign-on policies, network zones, and admin roles. Password policies set length, complexity, history, age, and lockout. They are assigned by group and evaluated at password set or reset.
367 words, about 2 min