Enterprise

What Okta’s CEO learned from Marc Benioff

Fresh from spending $6.5 billion on Auth0, Todd McKinnon says the key to winning is a compelling long-term vision. In his case, it's making identity management a "primary cloud."

What Okta’s CEO learned from Marc Benioff

Okta CEO Todd McKinnon said identity needs to be an independent service.

Photo: David Paul Morris/Getty Images

Todd McKinnon learned two things from Salesforce CEO Marc Benioff as the two were building the seminal enterprise SaaS company: the cloud is inevitable, and don't be afraid to dream big.

Now CEO of Okta, which helps companies verify that the employees accessing their corporate networks are the real deal, McKinnon is doubling down on those principles with the biggest acquisition in the 12-year-old company's history, paying $6.5 billion for Auth0. Auth0 is the flip side of Okta's identity-management coin, offering a service that helps third-party software developers build log-in technology into their own applications and services.

Okta investors were skeptical about the size of the deal, sending Okta shares down more than 6% Thursday. But McKinnon thinks that with Auth0, Okta has a big opportunity to turn identity management into as fundamental a part of modern business software as infrastructure services from companies like AWS or customer-relationship management services from companies like, well, Salesforce.

"[Co-founder Frederic Kerrest] and I started Okta 12 years ago because we saw the need for a modern identity solution for a company's workforce that would scale and grow with the burgeoning adoption of cloud applications," McKinnon said on a conference call Wednesday after the deal was announced. "Importantly, it had to be independent and neutral from the big platform companies who want to sell you other applications as well, the opposite of best of breed."

Later, in an interview with Protocol, McKinnon expanded on the thinking behind the Auth0 deal and explained why, despite those comments, many of the so-called "best of breed" enterprise software companies are either looking for acquisitions to build out their product portfolios or joining forces with big platform companies.

This interview has been edited for clarity and brevity.

How did this deal come together?

Ever since Auth0 popped on the scene back in 2013, I've been following the company. I always thought it was super interesting what they were doing because remember, in 2013 identity was not really something that people thought could build a big company. And then these guys left Microsoft as developer evangelists and started building this totally developer-focused platform for identity.

I think in the last year what changed was on both of our sides, customer identity businesses got to be pretty big sizes. Ours is a couple hundred million dollars [a year in revenue], theirs is getting close to that. If you look at what's going to happen over the next 10 years, there's going to be four or five really big, important major clouds in companies. And we need to make sure identity is one of those clouds. Identity can't be subsumed by infrastructure, can't be subsumed by cloud collaboration; it needs to be independent. And the way to do that is to cover a lot of use cases.

When you drill into that business, it became clear that the biggest growth inhibitor in that business are people building their own service. So by offering a complete solution that would satisfy the CIO, the CISO, the CTO and the developer — which is what Auth0 is world-class at — that's how we thought we could catalyze the market.

We've been talking about this whole best of breed versus platform thing in SaaS for a long time now, and it's interesting that you're continuing to talk about that in sort of in the same way you always have, just as you just made the biggest deal in company history to acquire another application provider. It seems like you are also recognizing that you need to offer more than just your core product in order to attract buyers. How do you square that?

You've got to simplify and reduce the variables in some way: You're not going to have 50 versions of everything. So you can still have best of breed while standardizing things like endpoint protection.

That's where this concept of the primary cloud comes in; it's fixing some of the variables or simplifying the problem just enough so you have a chance.

You're still going to have thousands of vendors, but you're not going to have 5,000 vendors. You're going to centralize around these core concepts, whether it's infrastructure, whether it's collaboration, whether it's CRM, and we think that identity is going to be one of those.

Are you more worried about Microsoft or are you more worried about Salesforce?

Identity being an independent cloud is the worry or the focus, right? I think that it's extremely unlikely that any one of these major companies is going to build an independent identity cloud. The risk is that they'll all just do enough, and that no one will build a compelling enough alternative to [a good-enough product and identity] can kind of just be consumed or subsumed conceptually into these other clouds.

I think the bigger riddle is that we don't execute on our vision and broaden the use cases enough and make [identity] strategically compelling for the buyers, and allow it to be this stuff inside of Amazon and the stuff inside of Salesforce and the stuff inside of Google that is good enough. Which would be a travesty, because [those offerings are] not going to be good enough.

What did you learn specifically from Salesforce about not just the way that tech is evolving, but about management and the way companies should be run?

If I were to rank the lessons just in impact, the No. 1 would be just this baptism by fire in SaaS and cloud.

When we started, it was very clear to us that cloud was going to take over the world. And people think that's really prescient right now. It's not, really; we were just at Salesforce.

It was so clear that there was a better way to build tech and the customers had a better experience. And once people got over that reticence that it wasn't on your own server, it was just going to be a better way to do it.

The second management lesson was learning from Marc Benioff specifically: He was so good at painting the long-term vision that seemed a little grandiose and crazy, but had a way of catalyzing people toward it.

I remember when I first met Marc, we were in this meeting together and he was talking about the future and the vision for Salesforce, and how it was going to move from being a contact database to be this operating system in the cloud that was going to let anyone build any application and database. And it sounded crazy. He was very compelling, but it sounded super aggressive and long term.

But then he snapped out of it. He just said, "Now, I know we don't do that today, Todd, but this is where we're going." And so it was this combination of super-compelling, long-term vision and a reality and execution of what's happening in the business. That was a really good lesson for me, because before that, I was pretty practical and tended to see the engineering side of things and the logical reality of where we were, and really learned to dream big at Salesforce.

Needless to say, this past year has seen ridiculous changes in terms of the way that people work, and who knows how quickly we'll all go back to anything resembling what we were doing before. From your perspective into the way that people are accessing corporate resources, have there been a couple of things that might have changed temporarily, and things that might have changed permanently?

Everyone's known that they needed to transform their company to have a better online presence. For a small business owner, that's like, get a store on Shopify, or get on Instagram or something. For a large enterprise, it's really about figuring out how to rethink your value chain: Should you be selling to distributors? Or should you be doing it better online, direct to customers?

I think that pandemic really pushed some of those conversations and made some hard decisions, and I think that's permanent. You're not going to see people just drop off their online presence that they've built up because no one could come to their retail store for a year. Or whether that's a shoe manufacturer or shoe company that is used to selling through mall channels, and now is going much more online: I think those value-chain disruptions or changes are very permanent.

On working in tech, I talked to tons of customers where they kind of thought that VPNs were dead, because they liked the SaaS apps and their people could log into them without a VPN? People's VPNs are falling over during the pandemic. They had these VPN concentrator systems in their data center and they just stopped working, because they had 100 times the employees every day going through the VPN.

I think that it's really been the last nail in the coffin of this network architecture that's, "We're going to put stuff in the data center, and we're going to put stuff in the offices, and then we're gonna build a wall around that and let people in with discretion." I think that's been totally blown up and the [new] world is some stuff in the data center, fewer things in the office, and it's got to be the zero-trust world where you treat everyone that's logging into any of these things as if they're coming in from the internet, and you have to authenticate them and have identity policies.

Fintech

Judge Zia Faruqui is trying to teach you crypto, one ‘SNL’ reference at a time

His decisions on major cryptocurrency cases have quoted "The Big Lebowski," "SNL," and "Dr. Strangelove." That’s because he wants you — yes, you — to read them.

The ways Zia Faruqui (right) has weighed on cases that have come before him can give lawyers clues as to what legal frameworks will pass muster.

Photo: Carolyn Van Houten/The Washington Post via Getty Images

“Cryptocurrency and related software analytics tools are ‘The wave of the future, Dude. One hundred percent electronic.’”

That’s not a quote from "The Big Lebowski" — at least, not directly. It’s a quote from a Washington, D.C., district court memorandum opinion on the role cryptocurrency analytics tools can play in government investigations. The author is Magistrate Judge Zia Faruqui.

Keep Reading Show less
Veronica Irwin

Veronica Irwin (@vronirwin) is a San Francisco-based reporter at Protocol covering fintech. Previously she was at the San Francisco Examiner, covering tech from a hyper-local angle. Before that, her byline was featured in SF Weekly, The Nation, Techworker, Ms. Magazine and The Frisc.

The financial technology transformation is driving competition, creating consumer choice, and shaping the future of finance. Hear from seven fintech leaders who are reshaping the future of finance, and join the inaugural Financial Technology Association Fintech Summit to learn more.

Keep Reading Show less
FTA
The Financial Technology Association (FTA) represents industry leaders shaping the future of finance. We champion the power of technology-centered financial services and advocate for the modernization of financial regulation to support inclusion and responsible innovation.
Enterprise

AWS CEO: The cloud isn’t just about technology

As AWS preps for its annual re:Invent conference, Adam Selipsky talks product strategy, support for hybrid environments, and the value of the cloud in uncertain economic times.

Photo: Noah Berger/Getty Images for Amazon Web Services

AWS is gearing up for re:Invent, its annual cloud computing conference where announcements this year are expected to focus on its end-to-end data strategy and delivering new industry-specific services.

It will be the second re:Invent with CEO Adam Selipsky as leader of the industry’s largest cloud provider after his return last year to AWS from data visualization company Tableau Software.

Keep Reading Show less
Donna Goodison

Donna Goodison (@dgoodison) is Protocol's senior reporter focusing on enterprise infrastructure technology, from the 'Big 3' cloud computing providers to data centers. She previously covered the public cloud at CRN after 15 years as a business reporter for the Boston Herald. Based in Massachusetts, she also has worked as a Boston Globe freelancer, business reporter at the Boston Business Journal and real estate reporter at Banker & Tradesman after toiling at weekly newspapers.

Image: Protocol

We launched Protocol in February 2020 to cover the evolving power center of tech. It is with deep sadness that just under three years later, we are winding down the publication.

As of today, we will not publish any more stories. All of our newsletters, apart from our flagship, Source Code, will no longer be sent. Source Code will be published and sent for the next few weeks, but it will also close down in December.

Keep Reading Show less
Bennett Richardson

Bennett Richardson ( @bennettrich) is the president of Protocol. Prior to joining Protocol in 2019, Bennett was executive director of global strategic partnerships at POLITICO, where he led strategic growth efforts including POLITICO's European expansion in Brussels and POLITICO's creative agency POLITICO Focus during his six years with the company. Prior to POLITICO, Bennett was co-founder and CMO of Hinge, the mobile dating company recently acquired by Match Group. Bennett began his career in digital and social brand marketing working with major brands across tech, energy, and health care at leading marketing and communications agencies including Edelman and GMMB. Bennett is originally from Portland, Maine, and received his bachelor's degree from Colgate University.

Enterprise

Why large enterprises struggle to find suitable platforms for MLops

As companies expand their use of AI beyond running just a few machine learning models, and as larger enterprises go from deploying hundreds of models to thousands and even millions of models, ML practitioners say that they have yet to find what they need from prepackaged MLops systems.

As companies expand their use of AI beyond running just a few machine learning models, ML practitioners say that they have yet to find what they need from prepackaged MLops systems.

Photo: artpartner-images via Getty Images

On any given day, Lily AI runs hundreds of machine learning models using computer vision and natural language processing that are customized for its retail and ecommerce clients to make website product recommendations, forecast demand, and plan merchandising. But this spring when the company was in the market for a machine learning operations platform to manage its expanding model roster, it wasn’t easy to find a suitable off-the-shelf system that could handle such a large number of models in deployment while also meeting other criteria.

Some MLops platforms are not well-suited for maintaining even more than 10 machine learning models when it comes to keeping track of data, navigating their user interfaces, or reporting capabilities, Matthew Nokleby, machine learning manager for Lily AI’s product intelligence team, told Protocol earlier this year. “The duct tape starts to show,” he said.

Keep Reading Show less
Kate Kaye

Kate Kaye is an award-winning multimedia reporter digging deep and telling print, digital and audio stories. She covers AI and data for Protocol. Her reporting on AI and tech ethics issues has been published in OneZero, Fast Company, MIT Technology Review, CityLab, Ad Age and Digiday and heard on NPR. Kate is the creator of RedTailMedia.org and is the author of "Campaign '08: A Turning Point for Digital Media," a book about how the 2008 presidential campaigns used digital media and data.

Latest Stories
Bulletins