Most Okta work sits in three places: Universal Directory, the sign-on and MFA policies, and the provisioning link to each application. Okta is delivered only as a cloud service, so where its data is hosted is a question for your security office early in the programme. Sign-on policies are then mapped to the authentication expectations in NCA's Essential Cybersecurity Controls in Saudi Arabia and the UAE Information Assurance Regulation.
Delivery starts with the HR system as the profile master in Universal Directory, and the Okta AD agent bridging any on-premises directory. Okta Workflows carries the joiner, mover and leaver logic that standard provisioning cannot, such as mailbox hand-over or licence clean-up, and every flow is exported and tested in an Okta preview org before it reaches production.
Okta Workforce Identity and related product names may be trademarks of their respective owners.