Okta experienced a minor incident on December 14, 2025 affecting okta.com cell 1 and okta.com cell 2 and 1 more component, lasting 9d 3h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- resolved Dec 14, 2025, 11:00 AM UTC
At 12/14/2025 3:00 AM PT, the Okta Engineering team became aware of an intermittent issue with email being sent through Custom Email Domains. This is affecting customers in US Cell 1, US Cell 2, US Cell 3, US Cell 4, US Cell 7, EMEA Cell 9, US Cell 12, US Cell 14, US Preview 3. Our team is actively investigating this issue and working with our third-party vendor to address the issue. We will provide another update within the next 30 minutes, or sooner if additional information becomes available.
- resolved Dec 14, 2025, 04:40 PM UTC
The Okta Engineering team is continuing to work with our third-party vendor and addressing this issue with urgency related to the custom domain email delivery issues.
- resolved Dec 14, 2025, 04:42 PM UTC
The next update will be posted in the next 60 minutes.
- resolved Dec 14, 2025, 05:50 PM UTC
Our Engineering team is continuing to work with the third-party provider on mitigation actions to help resolve this outstanding issue. We are treating the issue with the utmost urgency to restore our services as soon as possible. The next update will be provided within the next 60 minutes or sooner, if additional information becomes available.
- resolved Dec 14, 2025, 06:48 PM UTC
We have identified a potential root cause of this issue, and are currently investigating next steps towards resolution. We will provide the next update in 60 minutes, unless new information becomes available.
- resolved Dec 14, 2025, 07:39 PM UTC
This issue has been successfully resolved as of 11:07AM PDT. All services have been restored. If you continue to see issues, please update your support case for assistance. Additional root cause information will be available within 5 Business days.
- resolved Dec 23, 2025, 02:49 PM UTC
We sincerely apologize for any impact this incident has caused to you, your business, or your customers. At Okta, trust and transparency are our top priorities. Outlined below are the facts regarding this incident. We are committed to implementing improvements to the service to prevent similar future occurrences. Detection and Impact: On December 14, 2025, at 3:01 a.m. PST, Okta detected an issue that prevented email delivery for customers using custom email domains. This affected end-users' ability to receive emails for Multi-Factor Authentication (MFA), password resets, registration activation, account lockout notifications, and other notification emails, such as rate-limit notifications for administrators. Root Cause Summary: Okta has determined that the issue was caused by an unintended configuration change on our Mail Transfer Agents (MTAs). This change incorrectly routed emails from custom domains without proper DMARC sender authentication. As a result, email service providers rejected the emails, causing the delivery failures. Remediation Steps: Upon detection, Okta’s engineering teams immediately began diagnosing the delivery failures. After identifying the incorrect routing, we updated the configuration to ensure emails were sent through the appropriate authenticated channels. Normal email functionality was fully restored after the updated configuration was applied. Preventative Actions: Okta is taking several steps to prevent a recurrence of this issue. We are enhancing our monitoring and alerting for email services and improving our configuration management tools to add further safeguards. Duration (# of minutes):1140