Beruflich Dokumente
Kultur Dokumente
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
TABLE OF CONTENTS
Executive Summary ................................................................................................................................................................................................. 2
Disclosures ............................................................................................................................................................................................................. 3
Analysis .......................................................................................................................................................................................................................... 6
Costs .......................................................................................................................................................................................................................... 8
Benefits .................................................................................................................................................................................................................... 9
Flexibility ............................................................................................................................................................................................................. 14
Risk ......................................................................................................................................................................................................................... 14
2012, Forrester Research, Inc. All rights reserved. Unauthorized reproduction is strictly prohibited. Information is based on best available
resources. Opinions reflect judgment at the time and are subject to change. Forrester, Technographics, Forrester Wave, RoleView,
TechRadar, and Total Economic Impact are trademarks of Forrester Research, Inc. All other trademarks are the property of their respective
companies. For additional information, go to www.forrester.com.
Page 1
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Executive
Summary
Okta commissioned Forrester Consulting to examine the total economic impact and potential return on
investment (ROI) enterprises may realize by deploying Okta On-Demand Identity and Access Management
service. The purpose of this study is to provide readers with a framework to evaluate the potential financial
impact of Okta on their organization. For this study, Forrester conducted an interview with one existing Okta
customer. The analysis showed that Okta benefited the organizations IT staff with productivity savings from
automated provisioning and deprovisioning and with reduction of service desk requests due to password resets
and forgotten URLs. Users saw increased productivity because of improved access to applications from any
device in any location. The analysis found that the interviewed organization of 1,100 employees experienced the
risk-adjusted ROI, costs, and benefits shown in Table 1.
Table
1
Three-Year
Risk-Adjusted
Analysis
o Improved user productivity working more due to any device, anywhere. The
interviewed organization estimates that Okta enables single sign-on to critical enterprise applications,
either remotely, while mobile, or on-premises, for important staff, with an estimated productivity
improvement of 25 minutes per week, with an estimated savings of $446,188 per year.
Page 2
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
o Software-as-a-service (SaaS) fees. The interviewed organization reported Okta monthly fees of
$4,950, or $66,000 a year, for 1,100 users.
Figure
1
Financial
Summary
Three-Year
Risk-Adjusted
ROI
$400,000
$300,000
$200,000
$100,000
$0
($100,000) Initial Year 1 Year 2 Year 3
($200,000)
Disclosures
The reader should be aware of the following:
The study is commissioned by Okta and delivered by the Forrester Consulting group.
Forrester makes no assumptions as to the potential return on investment that other organizations will
receive. Forrester strongly advises that readers use their own estimates within the framework provided in
the report to determine the appropriateness of an investment in Okta.
Okta reviewed and provided feedback to Forrester, but Forrester maintains editorial control over the
study and its findings and does not accept changes to the study that contradict Forresters findings or
obscure the meaning of the study.
This study is based on an interview with one company. The customer for the interview was provided by
Okta.
Page 3
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Introduction
From the information provided in the interviews, Forrester has constructed a Total Economic Impact
framework for those organizations considering implementing Okta services. The objective of the framework is
to identify the cost, benefit, flexibility, and risk factors that affect the investment decision.
Interviewed Okta marketing and sales personnel and Forrester analysts to gather data relative to Okta and
the marketplace for cloud-based identity and access management.
Interviewed one organization currently using Okta services to obtain data with respect to costs, benefits,
and risks.
Constructed a financial model representative of the interview using the TEI methodology. The financial
model is populated with the cost and benefit data obtained from the interview.
Figure
2
TEI
Approach
Forrester employed four fundamental elements of TEI in modeling Okta On-Demand Identity and Access
Management service:
1. Costs.
3. Flexibility.
4. Risk.
Page 4
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Given the increasing sophistication that enterprises have regarding ROI analyses related to IT investments,
Forresters TEI methodology serves the purpose of providing a complete picture of the total economic impact of
purchase decisions. Please see Appendix A for additional information on the TEI methodology.
Page 5
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Analysis
Interview
Highlights
The customer interviewed for this study is a global technology solutions company. The interview with the IT
director at the company uncovered the following points (all quotes are from that interviewee):
Okta is integral to the companys cloud-first strategy. The interviewed company indicated
that the adoption of Okta was related to a convergence of a number of strategic and tactical cloud-related
initiatives within the company. To conform to a cloud first, 100% web IT strategy, there was a desire to
adopt packaged cloud applications (sales force automation, productivity suites, expense management, and
reporting) and custom line-of-business applications. This convergence exposed the need for a solution
that Okta provided, which included single sign-on (SSO), multi-factor authentication, active directory
integration, just-in-time provisioning, and administration and reporting:
The aggressive adoption of cloud applications really exposed the need for Okta. We had tactical
reasons that pushed us in the direction of Okta, like adopting different cloud solutions, but we also
needed something more enterprise grade and reliable. And all this made Okta a good fit for us.
Okta replaced the companys complex and expensive in-house SSO integrations. Prior to
Okta, the interviewed company was using internal resources to build SSO web services to access
applications:
The problem was that it was time consuming, and every time we had to build an integration, we had to
support that integration. Continuation of in-house development to support a web-based strategy would
have been too complex and expensive.Complexity was increasing with support of critical web-based sales
force automation applications, which required failover functionality that the in-house integration couldnt
deliver on reliability, and which decreased user productivity when applications were not accessible. The
company also estimated that it cost about $25,000 per in-house integration, plus ongoing maintenance
costs, and with the growing number of web-based applications that it projected to support, those overall
costs were escalating quickly.
Okta provides users with easy access to applications, self-provisioning, and simplified
password maintenance. Users find clear benefits in having access to all applications in one place with
one (domain) log-in. One stop shopping is perceived as a big benefit. Plus employee self-provisioning of
applications is very well received by users. Users have deployed 787 instances of applications, including a
cloud-based project management application whose use has spread virally via invites and self-
provisioning and led to the company purchasing enterprise licensing for it. Other common self-
provisioned bookmarked sites are for hotel, car, and airline programs in support of employee travel. It
gives IT insights into what salespeople are doing. Further, the ability to put in a password one time to
access to multiple (dozens) applications is a seen as a big advantage.
Okta benefits IT administrators in managing application access and the provisioning and
deprovisioning process. With Okta, IT administrators use dashboards to see if active directories are
healthy, how many people have access to applications, how many applications have been provisioned in
Page 6
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Okta, who the top users are based on usage, and what are the top applications based on usage; they also
receive alerts on repeated unsuccessful log-ins. Having all these web apps managed in a central way is
tremendously beneficial. Further, Okta provides automatic deprovisioning of enterprise applications
when users are deprovisioned in Active Directory and provides workflow (to the help desk) to support
deprovisioning of applications for unsupported applications. The interviewee cited provisioning of users
as another huge benefit, as Okta-supported applications are also simplified. When we roll out a new
application, its very easy for us to provision it to users in Okta. When the company rolled out an
application to its sales organization, it was literally a work of an instant because everyone was already
accustomed to logging into Okta, so the next time they log in, the application icon is available to them, and
there is nothing for them to do. There is no user name or password for them to learn, theres no link they
have to learn. That is incredibly time-saving and efficient it just makes it very easy to roll out a new
application.
Broad user adoption of Okta was driven by web-based collaboration and productivity
applications. Once we made the decision to go with Okta, the core set of enterprise packaged
applications were logical, obvious fits for Okta, said our interviewee. Yet, the real driver of heavy
adoption was the roll-out of enterprisewide cloud content sharing and collaboration tools and web-based
user productivity applications. Everyone in the company accesses these apps via Okta and they are our
primary communication and collaboration system. Some of these applications didnt start as
enterprisewide use, but the adoption of Okta made them easily deployed on an enterprisewide basis.
Framework
Assumptions
Table 2 provides the model assumptions that Forrester used in this analysis.
Table
2
Model
Assumptions
Discount
rate
used
in
present
value
(PV)
and
net
present
value
A1
10%
(NPV)
Page 7
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Organizations typically use discount rates between 8% and 16% based on their current environment. Readers
are urged to consult with their respective companys finance department to determine the most appropriate
discount rate to use within their own organizations.
Costs
This section describes the overall costs for Okta services.
Table
3
Okta
SaaS
Annual
Fees
Okta provides professional services to assist customers to initially configure their applications, but the
interviewed company did not require these services. Further, the interviewed company indicated that initial and
ongoing configuration and deployment of applications in the Okta service took so little time as to not warrant
inclusion of that time in their capex or opex costs.
Page 8
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Table
4
Total
Costs
(Non-Risk-Adjusted)
($198,000
Bt
Okta
SaaS
annual
fees
($66,000)
($66,000)
($66,000)
($164,132)
)
($198,000
TCt
Total
costs
($66,000)
($66,000)
($66,000)
($164,132)
)
Benefits
The next component of this analysis examines the potential benefits associated with the interviewed
organization investing in Okta cloud services. The interviewed customer identified several benefit areas where
they were able to realize tangible value as a result of their investment in Okta. These include:
Page 9
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Table
5
Reduced
IT
Time
Spent
On
Provisioning/Deprovisioning
Percentage
of
provisioning/deprovisioning
C3
10%
per
application
per
year
Number
of
provisioning/deprovisioning
C4
C1*C2*C3
1,320
requests
per
year
Percentage
of
provisioning/deprovisioning
C9
requests
eliminated
due
to
just-in-time
75%
provisioning
and
automated
deprovisioning
Percentage
of
post-Okta
C11
provisioning/deprovisioning
requests
now
60%
handled
by
help
desk
Page 10
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
A further (non-quantified) benefit is that provisioning is done faster, allowing users immediate access to
applications instead of often waiting a day or two for the request to be processed.
Table
6
Improved
Productivity
For
Service
Desk
From
Reduced
Password
Reset
And
Lost
URL
Incidents
Page 11
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Table
7
Improved
Productivity
For
Users
From
Reduced
Password
Reset/Forgotten
URLs
Incidents
Page 12
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Table
8
Improved
User
Productivity
From
Working
More
Due
To
Any
Device,
Anywhere
Total
Benefits
Table 9 summarizes the total benefits (non-risk-adjusted) associated with the purchase of Okta devices.
Page 13
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Table
9
Total
Benefits
(Non-Risk-Adjusted)
Flexibility
Flexibility, as defined by TEI, represents an investment in additional capacity or capability that could be turned
into business benefit for some future additional investment. This provides an organization with the right or
the ability to engage in future initiatives, but not the obligation to do so. There are scenarios in which a customer
might choose to implement Okta services and later realize additional benefits. An example would be if the
interviewed organization had significant end user growth and/or increased the number of enterprisewide,
cloud-based applications via Okta, creating additional benefits and an additional cost per user. As the
interviewed company indicated that it was entering a steady-state after three years in which the number of
users and supported applications is stable, no additional flexibility benefits are calculated in this analysis.
Risk
Forrester defines two types of risk associated with this analysis: implementation risk and impact risk.
Implementation risk is the risk that a proposed investment in Okta may deviate from the original or expected
requirements, resulting in higher costs than anticipated. Impact risk refers to the risk that the business or
technology needs of the organization may not be met by the investment in Okta, resulting in lower overall total
benefits. The greater the uncertainty, the wider the potential range of outcomes for cost and benefit estimates.
Quantitatively capturing investment and impact risk by directly adjusting the financial estimates results in more
meaningful and accurate estimates and a more accurate projection of the ROI. In general, risks affect costs by
Page 14
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
raising the original estimates, and they affect benefits by reducing the original estimates. The risk-adjusted
numbers should be taken as realistic expectations since they represent the expected values considering risk.
Table 10 shows the values used to adjust for risk and uncertainty in the cost and benefit estimates. The TEI
model uses a triangular distribution method to calculate risk-adjusted values. To construct the distribution, it is
necessary to first estimate the low, most likely, and high values that could occur within the current environment.
The risk-adjusted value is the mean of the distribution of those points. Forrester has conservatively used low
risk adjustments to increase cost estimates by 8% and decrease benefit estimates by 17%. Readers are urged to
apply their own risk ranges based on their own degree of confidence in the cost and benefit estimates.
Table
10
Cost
And
Benefit
Risk
Adjustments
Most
Low
High
Mean
likely
Page 15
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Financial
Summary
The financial results calculated in the Costs and Benefits sections can be used to determine the return on
investment, net present value, and payback period for the organizations investment in Okta. These are shown in
Table 11 below.
Table
11
Cash
Flow
Non-Risk-Adjusted
ROI 879%
Table 12 below shows the risk-adjusted ROI, NPV, and payback period values. These values are determined by
applying the risk-adjustment values from Table 10 in the Risk section to the cost and benefits numbers in Tables
4 and 9.
Table
12
Cash
Flow
Risk-Adjusted
ROI 652%
Page 16
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Table
13
In-House
Application
Development
Costs,
For
SSO
G1 Number of applications 8
Gt In-house AD integration costs for SSO G3+G5 $200,000 $20,000 $20,000 $20,000
Additional costs may have been incurred for multi-factor authentication via a point solution and to develop
application connectors, but the interviewed organization did not research or estimate these expenses, and so
they have not been included in the analysis.
Table 14 and Figure 3 show the comparison of Okta costs (opex) to in-house development (capex and opex)
over a three-year period.
Page 17
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Table
14
TCO:
Okta
Compared
With
In-House
Development
TCt Okta SaaS annual fees ($66,000) ($66,000) ($66,000) ($198,000) ($164,132)
($200,000
TCt
Total
costs
($20,000)
($20,000)
($20,000)
($260,000)
($249,737)
)
Figure
3
TCO:
Okta
Compared
With
In-House
Development
(Three-Year
Analysis)
($250,000)
($200,000)
OPEX
($150,000)
CAPEX
($100,000)
($50,000)
Okta In-House
$0
Source:
Forrester
Research,
Inc.
Page 18
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
Managed via an intuitive, consumer web UI, Oktas functionality spans directory services, single sign-on, strong
authentication, provisioning, workflow, and analytics. Built on a secure, reliable, SOC2 Type II audited platform
that operates at Internet scale, Okta delivers identity management from the cloud but for a hybrid IT world. Okta
integrates with all of the applications, directories, identity systems, devices, organizations, and people that you
need to integrate with whether those integrations are in the cloud or behind a firewall.
Enterprises are using Okta to increase security, improve user productivity, reduce IT costs, and ensure
compliance.
The Okta team has built, deployed, and supported market-leading, on-demand and enterprise software.
Page 19
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
The TEI methodology consists of four components to evaluate investment value: benefits, costs, risks, and
flexibility.
Benefits
Benefits represent the value delivered to the user organization IT and/or business units by the proposed
product or project. Often product or project justification exercises focus just on IT cost and cost reduction,
leaving little room to analyze the effect of the technology on the entire organization. The TEI methodology and
the resulting financial model place equal weight on the measure of benefits and the measure of costs, allowing
for a full examination of the effect of the technology on the entire organization. Calculation of benefit estimates
involves a clear dialogue with the user organization to understand the specific value that is created. In addition,
Forrester also requires that there be a clear line of accountability established between the measurement and
justification of benefit estimates after the project has been completed. This ensures that benefit estimates tie
back directly to the bottom line.
Costs
Costs represent the investment necessary to capture the value, or benefits, of the proposed project. IT or the
business units may incur costs in the form of fully burdened labor, subcontractors, or materials. Costs consider
all the investments and expenses necessary to deliver the proposed value. In addition, the cost category within
TEI captures any incremental costs over the existing environment for ongoing costs associated with the
solution. All costs must be tied to the benefits that are created.
Risk
Risk measures the uncertainty of benefit and cost estimates contained within the investment. Uncertainty is
measured in two ways: 1) the likelihood that the cost and benefit estimates will meet the original projections,
and 2) the likelihood that the estimates will be measured and tracked over time. TEI applies a probability
density function known as triangular distribution to the values entered. At minimum, three values are
calculated to estimate the underlying range around each cost and benefit.
Flexibility
Within the TEI methodology, direct benefits represent one part of the investment value. While direct benefits
can typically be the primary way to justify a project, Forrester believes that organizations should be able to
measure the strategic value of an investment. Flexibility represents the value that can be obtained for some
future additional investment building on top of the initial investment already made. For instance, an investment
in an enterprisewide upgrade of an office productivity suite can potentially increase standardization (to
increase efficiency) and reduce licensing costs. However, an embedded collaboration feature may translate to
Page 20
Forrester
Consulting
The
Total
Economic
Impact
Of
Okta
On-Demand
Identity
And
Access
Management
Service
greater worker productivity if activated. The collaboration can only be used with additional investment in
training at some future point in time. However, having the ability to capture that benefit has a present value that
can be estimated. The flexibility component of TEI captures that value.
Appendix
B:
Glossary
Discount rate: The interest rate used in cash flow analysis to take into account the time value of money.
Although the Federal Reserve Bank sets a discount rate, companies often set a discount rate based on their
business and investment environment. Forrester assumes a yearly discount rate of 10% for this analysis.
Readers are urged to consult their respective organization to determine the most appropriate discount rate to
use in their own environment.
Net present value (NPV): The present or current value of (discounted) future net cash flows given an
interest rate (the discount rate). A positive project NPV normally indicates that the investment should be made,
unless other projects have higher NPVs.
Present value (PV): The present or current value of (discounted) cost and benefit estimates given at an
interest rate (the discount rate). The PV of costs and benefits feed into the total net present value of cash flows.
Payback period: The breakeven point for an investment. The point in time at which net benefits (benefits
minus costs) equal initial investment or cost.
Return on investment (ROI): A measure of a projects expected return in percentage terms. ROI is
calculated by dividing net benefits (benefits minus costs) by costs.
Table
[Example]
Example
Table
Page 21