Okta experienced a major incident on December 3, 2025 affecting okta.com cell 7 and Core Platform, lasting 54d 7h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- resolved Dec 03, 2025, 01:15 PM UTC
At 12/3/2025 5:15 AM PT, the team became aware of an issue with connectivity to our Core Platform service affecting customers in US Cell 7. During this time, users may be experiencing intermittent issues within our system. Our team is actively investigating this issue and to mitigate the issue. We will provide another update within the next 30 minutes, or sooner if additional information becomes available.
- resolved Dec 03, 2025, 01:57 PM UTC
At 12/3/2025 5:15 AM PT, the team became aware of an issue with connectivity to our Core Platform service affecting customers in US Cell 7. During this time, users may be experiencing intermittent issues within our system. Our team is continuing to actively investigate and mitigate the issue. We will provide another update within the next 30 minutes, or sooner if additional information becomes available.
- resolved Dec 03, 2025, 02:32 PM UTC
At 12/3/2025 5:15 AM PT, the team became aware of an issue with connectivity to our Core Platform service affecting customers in US Cell 7. During this time, users may be experiencing intermittent issues within our system. Our team is actively investigating this issue and to mitigate the issue. We will provide another update within the next 30 minutes, or sooner if additional information becomes available.
- resolved Dec 03, 2025, 03:02 PM UTC
At 12/3/2025, 5:15 AM PT, the team became aware of an issue with connectivity to our Core Platform service affecting customers in US Cell 7. Users may continue to experience intermittent issues within our system. We are actively working on mitigation efforts and will provide an update in the next 60 minutes.
- resolved Dec 03, 2025, 03:50 PM UTC
Our service is seeing recovery following successful mitigation efforts with our provider. We continue to closely monitor system stability. Our next update will be in 30 minutes, or sooner if new information is available.
- resolved Dec 03, 2025, 04:24 PM UTC
We are continuing to monitor the situation. We will provide another update within the next 30 minutes, or sooner if additional information becomes available.
- resolved Dec 03, 2025, 04:58 PM UTC
An issue impacting the core authentication service for customers in Okta Cell US7 has been resolved. Additional root cause information will be available within five business days.
- resolved Dec 10, 2025, 07:51 AM UTC
We sincerely apologize for any impact this incident has caused to you, your business, and your customers. At Okta, trust and transparency are our top priorities. Outlined below are the facts regarding this incident. We are committed to implementing improvements to the service to prevent future occurrences of this incident. Detection and Impact: On December 2nd, 2025, at 10:22 PM PT, Okta was alerted to a substantial increase in request traffic by Okta’s external monitoring as well as our Cloud Service Provider in US Cell 7 for custom domains. (Wave 1). Later, on December 3rd, 2025, at 4:48 AM PT, Okta was again alerted to a substantial increase in network traffic in US Cell 7 for custom domain supporting resources, and the traffic pattern was not detected by the Cloud Service Provider. (Wave 2). During these times, customers who utilize customized domains experienced outage errors or intermittent slowness when attempting to access the service. Root Cause Summary: Okta determined the root cause was a substantial increase in request network traffic volume, which resulted in errors and slow response times accessing the cell. Remediation Steps: Wave 1: At 10:36 PM PT, Okta Engineering initiated response procedures based on the observed service impact. Per operating procedures, the Cloud Service Provider’s system initiated mitigating actions. At 11:04 PM PT, Okta Engineering observed that the network traffic load had been mitigated and returned to normal processing levels. Wave 2: At 5:20 AM PT, traffic for Enhanced DR customers with custom domains was redirected to the rescue cell. At 5:27 AM PT, Okta Engineering scaled out infrastructure resources in an attempt to minimize the impact during this time. At 5:56 AM PT, Okta further scaled out the infrastructure, but saw only minimal recovery. The Cloud Service Provider applied similar restrictions, which partially mitigated the traffic flood. At 6:20 AM, Okta took additional measures to isolate the custom domain resource stack and began moving custom domains to this new stack in coordination with our support teams. Upon further examination of the issue by Okta and after gaining an understanding of the new network flows, at 7:04 AM PT, the Cloud Service Provider updated the mitigations and immediately observed a return to normal processing levels. Preventative Actions: To prevent similar incidents from recurring, Okta Engineering is collaborating with our Cloud Service Provider to understand better and analyze their overall alert triggering logic and review the processes associated with this event. We have also implemented additional protections in conjunction with our Cloud Service Provider. Duration (# of minutes): Wave 1: Total Duration (Minutes): 42 minutes Actual Time: 10:22 PM - 11:04 PM PT Wave 2: Total Duration (Minutes): 136 minutes Actual Time: 4:48 AM - 7:04 AM PT