Okta - Q1 2024
May 31, 2023
Transcript
Dave Gennarelli (SVP of Investor Relations)
Everybody, welcome to Okta first quarter of fiscal year 2024 earnings webcast. I'm Dave Gennarelli, Senior Vice President of Investor Relations at Okta. With me in today's meeting, we have Todd McKinnon, our Chief Executive Officer and Co-Founder, and Brett Tighe, our Chief Financial Officer. Today's meeting will include forward-looking statements pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995, including but not limited to, statements regarding our financial outlook and market positioning. Forward-looking statements involve known and unknown risks and uncertainties that may cause our actual results, performance, or achievements to be materially different from those expressed or implied by the forward-looking statements. Forward-looking statements represent our management's beliefs and assumptions only as of the date made.
Information on factors that could affect our financial results is included in our filings with the SEC from time to time, including the section titled Risk Factors in our previously filed Form 10-K. In addition, during today's meeting, we will discuss non-GAAP financial measures. Though we may not state it explicitly during the meeting, all references to profitability are non-GAAP. These non-GAAP financial measures are in addition to, and not a substitute for or superior to, measures of financial performance prepared in accordance with GAAP. A reconciliation between GAAP and non-GAAP financial measures and a discussion of the limitations of using non-GAAP measures versus their closest GAAP equivalents is available in our earnings release. You can also find more detailed information in our supplemental financial materials, which include trended financial statements and key metrics posted on our investor relations website.
In today's meeting, we will quote a number of numeric growth changes as we discuss our financial performance, and unless otherwise noted, each such reference represents a year-over-year comparison. Now I'd like to turn the meeting over to Todd McKinnon. Todd?
Todd McKinnon (CEO and CO-Founder)
Thanks, Dave, and thank you everyone for joining us this afternoon. Okta continues to build on its position as the leading independent identity partner. Our two clouds, one Okta strategy has really taken root with our go-to-market team, and our customers and partners love it too. The actions we've taken over the past few quarters to increase efficiency and improve profitability enabled us to deliver strong, non-GAAP operating profit and record cash flow. We achieved these results despite increased pressure in the macroeconomic environment, which we anticipated when we introduced the FY 2024 financial targets last quarter. We continued to take a conservative approach to our business outlook. We're also pleased to have turned the corner on the challenges we faced last year. Attrition in our go-to-market team has significantly decreased over the past three quarters to its lowest level in two years.
The number of fully ramped salespeople is close to a more normalized level as average tenure increases, and we're seeing positive trends in the number of sales reps closing Customer Identity Cloud deals. I'll now cover some of the highlights and achievements in the quarter that we believe position Okta for long-term success. Turning to our Q1 results, we added 450 new customers in the quarter, bringing our total customer base to over 18,000, representing growth of 14%. Like last quarter, new customer growth is an area that we believe has been impacted by the macro environment. We continue to see growth with large customers for both Workforce and Customer Identity, and we are proud to work with some of the most important organizations in the world, such as OpenAI, the US Air Force Recruiting Service, and AIA.
In Q1, we added 150 customers with a $100,000+ ACV. Our total base of $100,000+ ACV customers now stands at over 4,080 and grew 23%. We're also seeing continued strength in customers with over $1 million of ACV. We now have over 300 customers with $1 million+ ACV, which continues to be the fastest growing customer cohort, with growth of over 40%. Here are just a few notable examples of customer wins and upsells in Q1, which come from a wide range of industries. A business line of a Fortune 500 semiconductor company was an exciting new business win in Q1. The company's legacy technology was complex, not adequately secure, and couldn't meet the needs of the business line.
It selected Okta Workforce Identity Cloud to modernize its technology stack to meet industry compliance standards and for Okta's ability to address multiple identity use cases. The business line also selected Okta Identity Governance to manage partner access to critical collaboration applications. We continue to see great cross-selling between Workforce Identity Cloud and Customer Identity Cloud. Two great examples in Q1 were with Indeed and NerdWallet. Indeed, the world's most visited job site, started as a self-service customer and has since leveraged Okta Customer Identity Cloud to power authentication for its corporate customers. This quarter, the company expanded with Okta Workforce Identity Cloud, including Okta Identity Governance, to bolster its security posture and improve the user experience for its approximately 13,000 employees.
NerdWallet, a platform that provides financial guidance to consumers and small and mid-sized businesses, was another great example of cross-selling between our two clouds and a great illustration of how our customers layer on more and more Okta capabilities over time. NerdWallet has been leveraging Okta Workforce Identity Cloud since 2017 to secure access for its employees. Last year, the company added Okta Identity Governance to streamline its compliance processes. In Q1, NerdWallet further expanded with Okta as it re-replaced its homegrown customer identity solution with our Customer Identity Cloud. Okta Identity Governance, or OIG, continues to show strong traction. The initial customer demand is validating the desire for a modern approach to governance, one that is cloud-based and integrates seamlessly with access management. In just the past six months, hundreds of organizations have purchased OIG, including Q1 wins with Indeed, Amplitude, and Australian Football League.
We're really excited about the future of OIG, especially since of the customers that have purchased OIG so far, their OIG spend is typically around 1/3 or more of their total Workforce Identity Cloud spend. It's great to see OIG off to a fantastic start. Never stop innovating is a core Okta value. We continue to make important advancements on that front. We made a number of significant product advancements for our Workforce Identity Cloud in Q1. Advanced phishing resistance is now generally available with Okta FastPass. FastPass gives end users a seamless user experience without passwords. It now protects users against phishing with advanced phishing resistance for the enterprise, covering every user on any device and major operating system. Okta Identity Engine began shipping with every new Workforce customer in early 2022.
We have made great progress in converting existing customers over to OIE. Now over 40% of our Workforce customers are on OIE. Building on this, we recently rolled out self-service OIE upgrades. Customers can automate their upgrade. This self-service option will help accelerate the pace of upgrades, paving the way for even more customers to reap the benefits and power of OIE. More customers on OIE means greater opportunity to upsell our higher value services, also higher retention rates based on customers converting to date. We're now in beta testing with Okta Privileged Access. We're extending the same great secure access management as well as identity governance capabilities to privileged resources. Businesses will be able to easily integrate modern cloud infrastructure, such as AWS, EC2, or Kubernetes, into Okta for centralized policies and controls across the resources their workers need.
Organizations are recognizing the value in the convergence of IGA, PAM, and access management. Okta is in a unique position to address our customers' identity needs with a unified identity solution. We continue to expect general availability of Okta Privileged Access by the end of this year. We're also innovating on Okta's Customer Identity Cloud, which processes billions of logins per month from around the world and provides a unique vantage point to both network traffic and application-level security event data. All of this data enables us to identify patterns and detect anomalies as potential security attacks. We're harnessing that data for Security Center, which is now generally available for Okta Customer Identity Cloud. Security Center is a dashboard delivering real-time insights into potential attacks, allowing for security teams to respond quickly.
In a heterogeneous technology world and an ever-expanding neat number of devices and applications, best-of-breed technology is the future. To help foster best-of-breed, Okta continues to expand our technology partnerships so that our customers can deploy the most innovative solutions while enhancing security, all while retaining freedom of choice. Here are just a couple of our latest technology partnership developments. We've had technology integrations and partnerships with Google for over a decade and have a deep base of shared customers. In the first phase of a new go-to-market alliance announced last month, Google's Workspace global and public sector sellers will now co-sell Okta's Workforce Identity Cloud alongside Google Workspace. This expanded partnership will enable both Okta and Google to reach new customers through a best-of-breed approach to security and productivity.
In partnership with Zoom, last month, we announced Okta authentication for end-to-end encrypted meetings for all paid joint customers. This new feature leverages Okta to authenticate a meeting attendee's identity to determine if a meeting guest is who they say they are. Critical to Okta's success over the years has been our indirect channel partners. Historically, Okta turned to partners primarily for reach, and as Okta has grown, we've recognized the need to engage with partners more strategically. Last month, we unveiled our new partner program called Elevate. The program will recognize and reward partners for the full spectrum of value they can deliver to our customers in Okta, from finding, developing, and influencing to delivering, managing, and transacting. The more of these motions a partner offers, the more value they provide to Okta and our mutual customers.
Streamlining operations and accelerating business technology are critical to establishing Okta as a primary cloud. To help drive these initiatives, I've asked Eugenio Pace, co-founder of Auth0, to take on the newly created role of President of Business Operations. Eugenio will turn his attention to the overall growth and operational excellence of Okta, including further accelerating our go-to-market effectiveness and increasing automation across the company. Eugenio has a uniquely deep knowledge of the identity market and is an incredible partner. I've always been proud of our bench talent, with Eugenio's new focus, Shiven Ramji, who has been a senior leader at Auth0 and Okta for nearly four years, will lead Customer Identity Cloud. To wrap things up, we delivered significantly improved profitability and record cash flow in the face of increasing macro-related pressure.
At the same time, we continue to deliver value to our customers and underscore our leadership position through product innovation. Identity is a key building block for zero trust security, digital transformation, and cloud adoption projects, trends that will continue in any macroeconomic environment as organizations look for ways to become more efficient while strengthening their security posture. Over the next decade, identity will become increasingly important, and we firmly believe that the winner will be independent and neutral and will deliver a unified platform covering both customer identity and workforce identity across access management, governance, and privilege access. Okta is the best-positioned company to deliver this to the market and expand on our leadership position, all while delivering profitable growth over the long term. Here's Brett to walk you through more of the Q1 financial results and our outlook.
Brett Tighe (CFO)
Thanks, Todd. Thank you everyone for joining us today. We continue to make meaningful progress on the actions we've taken to drive efficiency in our cost structure. As Todd noted, we're achieving these results while investing in our platform and business to fuel our future growth. As we navigate the increasing pressures of the macro environment, we remain confident that we have set the path of profitable growth for years to come. I'll review our first quarter results and our outlook for Q2 and FY 2024. First, I'll start with some commentary on the macro environment. We're seeing increased macro headwinds on our business, most notably with new business across SMB and enterprise. These impacts were felt in varying degrees on a global basis. Similar to Q4, customers are requesting shorter contract term lengths. Our overall business was weighted more towards upsells versus new business.
We're also seeing smaller average deal sizes as a result, and finally, we continue to experience minor FX headwinds on our top-line metrics, which are incorporated into our reported numbers and outlook. Turning to our Q1 results, total revenue growth for the first quarter was 25%, driven by a 26% increase in subscription revenue. Subscription revenue represented 97% of our total revenue. International revenue grew 23% and represented 21% of our total revenue. RPO, or subscription backlog, grew 9%. Impacting total RPO growth is the general shortening of term lengths of recently signed contracts. Our overall average term length is just over two and half years. Current RPO, which represents subscription backlog we expect to recognize as revenue over the next 12 months, grew 20% to $1.70 billion. Turning to retention.
Consistent with prior quarters, gross retention rates remained very healthy in the mid-90% range. Our dollar-based net retention rate for the trailing 12-month period remains strong at 117%. The sequential downtick in the net retention rate stemmed from a decrease in the upsell rate with both enterprise and SMB customers. Given the current macro environment, customers are not expanding seats at the rate they have in recent years. We believe this trend will persist in this environment. On a positive note, we are seeing strong growth in cross-selling of products. As always, the net retention rate may fluctuate from quarter to quarter as the mix of new business, renewals, and upsells fluctuates. Before turning to expense items and profitability, I'll point out that I'll be discussing non-GAAP results going forward. Looking at operating expenses. Total operating expenses for the quarter were lower than expected.
The better-than-expected profitability is primarily due to the combination of revenue overperformance and better than expected outcomes from spend efficiency measures. Total headcount at the end of Q1 was approximately 5,700. The sequential decrease primarily reflects the restructuring action taken at the beginning of Q1. Q1 free cash flow was a record $124 million, yielding a free cash flow margin of 24%. This includes the cash outlay of approximately $14 million related to the organizational restructuring. During the first quarter, we opportunistically repurchased $366 million of our 2025 convertible debt notes, resulting in a $31 million GAAP-only gain. We will continue to regularly evaluate our capital structure and capital allocation priorities. Our balance sheet remains strong, anchored by $2.37 billion in cash equivalents, and short-term investments.
Before getting into our outlook, I wanted to provide an update on equity dilution. At our Investor Day last November, I indicated that our historic norms for net dilution was in the 2%-3% range, and that we expected that range to be elevated in the near term, primarily related to the change in our stock price. I'm pleased to report that due to changes that we implemented, including changes in our granting practices and slowed hiring, net dilution for FY 2023 finished better than expected at less than 3.5%, and we now believe that dilution for FY 2024 will be back within our historical range. Managing dilution will continue to be a focus area, and we remain committed to further reduction over the long term. Let's turn to our business outlook for Q2 and FY 2024.
Our projections continue to factor in the increased pressure from the macroeconomic environment. As a reminder, we've taken several actions to reduce our cost structure and increase our efficiency as an organization, which will benefit margins this year and beyond. With that as a backdrop, for the second quarter of FY 2024, we expect total revenue of $533 million-$535 million, representing growth of 18%. Current RPO of $1.71 billion-$1.72 billion, representing growth of 14%-15%. Non-GAAP operating income of $36 million-$38 million, and non-GAAP diluted net income per share of $0.21-$0.22. assuming diluted weighted average shares outstanding of approximately 180 million.
For FY 2024, we are raising our revenue outlook by $15 million at the high end of the range. We now expect revenue of $2.175 billion-$2.185 billion, representing growth of 17%-18%. We are raising our outlook for non-GAAP operating income by $25 million to $161 million-$170 million, which yields a non-GAAP operating margin of approximately 7%-8%. Non-GAAP net income per share is raised to $0.88-$0.93, assuming diluted weighted average shares outstanding of approximately 180 million. We are raising our free cash flow margin outlook for FY 2024 to approximately 12% from approximately 10% previously. Lastly, I want to provide a couple of comments to help with modeling Okta.
Similar to years past, Q2 is expected to be the seasonal low for cash flow, and we are applying a static 26% non-GAAP effective tax rate for the fiscal year. To wrap things up, we've taken action to drive efficiencies in our cost structure while investing to fuel our future growth, and we're confident that we are positioning the company for many years of profitable growth. With that, I'll turn it back over to Dave for Q&A. Dave?
Dave Gennarelli (SVP of Investor Relations)
Thanks, Brett. I see that there are quite a few hands raised already, and I'll take them in the order. In the interest of time, please limit yourself to one question, and then you're welcome to queue back up with additional questions. The first question goes to Rob Owens at Piper.
Rob Owens (Managing Director and Senior Research Analyst)
Thanks, Dave, good afternoon, everybody. Was hoping you could help me out a little bit with, there's somewhat a disconnect, I guess, between CRPO and how it's trending and annual revenue. I mean, annual revenue is inching up a point here, you know, 17%-18%, CRPO going the other way. Realizing that a lot of that is subscription revenue that's already, quote, in the bank, trends definitely are pointing the other way. Is that 14%-15% guide, is that somewhat of a low watermark as we kind of contemplate the back half of the year? Thanks.
Todd McKinnon (CEO and CO-Founder)
Hey, Rob, nice to see you. I'll take a shot at it from a big picture perspective. Then, Brett can probably add some details on the guidance. The quarter and the year is off to a solid start. I feel like the customer base is super solid. We're seeing really healthy gross renewals in the same range we've seen for several quarters, indicating that base of customer strength. We're also seeing the momentum in terms of conversations and importance of identity, be really quite strong. The macro is a little bit of a different story. We talked a little bit about the macro headwinds we're seeing to an increasing degree.
It's interesting the way it's manifesting itself in the numbers is a little bit of average deal size is a little bit lower. The new customer count is a little lower than we would have expected. Interestingly enough, in terms of a lot of the executional or a lot of the execution metrics we're looking at, whether it's sales force attrition or the amount of sales reps doing a CIC deal, which is two things we've been watching a lot on the go-to-market side over the last few quarters, are getting better and better, that's very positive. Another interesting thing is that the more of the large deals, over $1 million, in customers crossing that $1 million ACV threshold is up over 40%, that's super positive.
I think it's a, you know, a lot of things to be positive about, solid execution, improving execution, but the macro backdrop is just there's a lot of uncertainty around it. That is kind of a high level, how we're looking at the business and color some of our, some of our outlook.
Brett Tighe (CFO)
Hey, Rob, I can add a little bit there. I mean, I think from a current RPO guide perspective, obviously, we've been thoughtful about the macro. I mean, we talked about it over the last few minutes and how it's really been affecting us a little bit more every quarter. Being prudent about that side. I think the other thing I wanna make sure everybody remembers is current RPO does have some residual effect from those FY 2023 execution challenges. It's not the major part of it, but that does also weigh on the growth as we go through this year.
Rob Owens (Managing Director and Senior Research Analyst)
Thanks for the color.
Brett Tighe (CFO)
No problem.
Dave Gennarelli (SVP of Investor Relations)
All right, let's go to Roger Boyd at UBS.
Roger Boyd (Director)
Great, thanks for the question. Maybe just to push a little bit further on macro, I think it sounds like the biggest impact is really just around deal sizes, but I wonder if you could talk about what you're seeing through the first month of May or the first month of Q2 that's really changed, if you think about sales cycles, pipeline, et cetera. How does that kind of factor into the guidance you've laid out? Thanks.
Todd McKinnon (CEO and CO-Founder)
Yeah, the pipeline is solid. It's interesting that if you look at the, like, the analytics we look at over the whole of the business, that's where you get that average deal size, ticking down. When you just have customers with... we just have conversations with customers and the kind of the qualitative aspects of how important identity is and being interested in this approach we have, which is, "Hey, you can get Customer Identity and Workforce Identity and privilege, and governance from one customer." Very positive conversations. Also, more on the qualitative side, we saw a lot of deals, or maybe more than normal.
We always have some deals that slip out of an end of a quarter, but we had more than normal slip out this quarter, and I guess that's not great. On the positive news, we've had many of those close in the first quarter or in the first few weeks of Q2 here. I think what that tells me is that it's, you know, more confidence that, you know, it's really not a question about the value of identity or the long-term strategic nature of what we're selling. It's more of what every company's doing. You know, Okta, we're doing this ourselves internally. We're really asking for scrutiny on every purchase. We're trying to be more efficient. Customers are making sure they're getting ROI. They have a plan for ROI.
There's maybe another level of budgetary approval that we didn't see before. you know, it does slow some things down, but projects are still moving. When I talk to CIOs of some of the biggest customers in the world, they say, "Hey, identity is gonna help me be more secure. It's gonna help me do more, have a more efficient workforce. It's gonna help me transformed digitally, and it's something people are doubling down on and investing in. I think you're seeing solid execution, a lot of, you know, macro uncertainty, but long-term identity is gonna be an important thing, and we're gonna be there to serve the market.
Dave Gennarelli (SVP of Investor Relations)
Great. Next question goes to Josh Tilton at Wolfe Research.
Josh Tilton (SVP of Equity Research)
Can you guys hear me?
Todd McKinnon (CEO and CO-Founder)
Hey, Josh.
Josh Tilton (SVP of Equity Research)
Hey, guys. How are you?
Todd McKinnon (CEO and CO-Founder)
Good.
Josh Tilton (SVP of Equity Research)
Just a quick one for me. I don't, you know, sorry to come back to the macro here.
Todd McKinnon (CEO and CO-Founder)
No worries.
Josh Tilton (SVP of Equity Research)
I just wanted to clarify. Brett, in the same sentence, you kinda said increased macro headwinds, but then you also reverted to similar to Q4. I'm just trying to understand, did the macro actually get worse from last quarter, or did it stay the same?
Todd McKinnon (CEO and CO-Founder)
Yeah, definitely. Yeah. Yeah, it definitely got worse. What I meant by that is there's some similar trends to Q4 in terms of, you know, new business versus upsell mix being much more weighted toward upsells. That's been pretty consistent in terms of us seeing that, right? The contract duration continues to be a little bit lower than what we've historically seen, but some new trends that are coming around are what you heard me talk about around less seat expansions. When I mean seat expansions, I mean both seat expansion on the workforce side of the house and also on the monthly active users side of the house in terms of customer identity. We're seeing it broad-based across both products. The other area that we're kinda seeing it more broad-based is around from a geo perspective or a segment perspective.
There's no one area where you're like, "Wow, it's really affecting it more there." It seems from what we can see in the data and everything that we're looking at, it really does feel much more broad-based at this point than it was maybe in the past or now we're where we said, you know, in the previous couple of quarters ago, we said, you know, it's a little bit more small and medium-sized business. We're seeing it in both enterprise and small and medium-sized business. It definitely got worse over the quarter in terms of Q4 or Q1, sorry.
Josh Tilton (SVP of Equity Research)
Just to finish my question was, if I look at the guidance for the full year that you guys are raising for revenue, does that assume that what you see today gets worse, kind of stays the same? Just maybe how should we think about the CRPO numbers for next quarter or maybe the year-over-year comps with Auth0 in the mix?
Todd McKinnon (CEO and CO-Founder)
Absolutely. It does in fact assume that the macro does get worse, both on the current RPO side and on the revenue side. Obviously, when we think about the guidance, both of them are have got that incorporated. In terms of the compares, I mean, like you heard me say a second ago, there is some residual impact from the execution challenges we had in FY23 in the current RPO guidance. Obviously, we're being thoughtful with how we're thinking about the balance of the year, given what we've seen in the macro and how it's developed over the last few quarters. One thing, quick thing there is, Auth0 was in the comps last year, that should be alike for like there.
Josh Tilton (SVP of Equity Research)
Yeah. Super helpful. Thanks, guys.
Todd McKinnon (CEO and CO-Founder)
Yeah, sure.
Dave Gennarelli (SVP of Investor Relations)
Thanks, Josh. Next up, Adam Tyndall at Raymond James.
Todd McKinnon (CEO and CO-Founder)
Can't hear you, Adam.
Dave Gennarelli (SVP of Investor Relations)
We can't hear you, Adam.
Adam Tyndall (Analyst)
There we go. Hey, Todd, I wonder if you could maybe opine on, you know, kind of a story that's going on with investors. We're seeing the quantitative metrics here. The NRR is in decline, the average deal size that you talked about is ticking down, but you've got more products to sell in each deal, and it leads to this qualitative story of perhaps we're in more of a commoditization cycle for core identity. Okta never been the cheapest. I think you've been, you know, proud of that. Stiff competition, there's kind of this platform consolidation narrative across security broadly. I just wonder if you could maybe talk about that being a premium product with the environment arguably changing.
I wonder if you re-evaluate that premium product strategy. If you could maybe comment on the pricing and environment broadly and how to compete now versus years ago, that would be helpful. Thanks.
Todd McKinnon (CEO and CO-Founder)
Yeah, we hear that narrative as well. It's interesting, we just don't see it in the data. The win rates remain strong. I mentioned the average deal size ticking down a little bit, the unit price we get has stayed consistent. When we look at the data holistically and be rigorous at it, and really something we do culturally, which is check our assumptions and make sure we're seeing the world as it is, we just don't see it.
We think that that being the case, we think the right strategy is continue to build the best products for identity use cases broadly and, you know, package them and sell them as we sell them, and make sure that we keep delivering that leadership position to the market. Listen, we're not. I mean, we wanna win, and we're rigorous in our analysis and, we do make sure we look at things with an open mind, that we're executing the best strategy.
We think our strategy and approach, based on all the data and based on what we're seeing, not just quantitatively too, but just qualitatively, with the customer success we're seeing and the traction in our Customer Identity Cloud and the appeal of not just the best core access management product, but also the IGA product, which is really off to a super strong start, and Privileged Access is coming out, and innovations with FastPass. We think we have a winning strategy, and we'll keep executing it.
Adam Tyndall (Analyst)
Is there still an intent to replace Susan, or is the management changes you talked about with Eugenio today, that that is the new strategy? Just to clarify. Thanks.
Todd McKinnon (CEO and CO-Founder)
It's a great. Thanks for asking. Yeah, I am still searching for a go-to-market president. That's a really important search, and in a lot of ways, we have the luxury of making sure we look everywhere and find the a truly amazing candidate. When you look at the people we're talking to, it's there's not a lot of people in the world that have experience taking a company from $2 billion in ARR to $10 billion+, which is where we wanna go over the next several years.
We have, you know, thankfully, the team that's in place is doing a great job, whether that's the Interim Chief Revenue Officer, Jon Addison, or our Marketing and Customer Success executive, Eric Kelleher, who's doing an amazing job, or Eugenio is taking on this role, which is really, really important. It's about how do we make Okta operationally excellent across all dimensions, including, very importantly, the strategy and operations of the growth of go-to-market, which is an important component of that, including the automation projects and the technology, IT projects that have to come together to make that happen. It's adjacent to the president, very important role, but, you know, we're gonna find a great person for that president role, and, you know, I think we're on track to do that.
Dave Gennarelli (SVP of Investor Relations)
Yeah, let's go to Sterling Auty at MoffettNathanson.
Billy Fitzsimmons (Equity Research Senior Associate of Enterprise Software)
Hey, guys, this is Billy Fitzsimmons on for Sterling Auty.
Todd McKinnon (CEO and CO-Founder)
Hey, Billy.
Billy Fitzsimmons (Equity Research Senior Associate of Enterprise Software)
I'll steer away from macro for a sec. How do you both think about Okta opportunity in the generative AI space and the identity opportunity with the emergence of AI applications?
Todd McKinnon (CEO and CO-Founder)
I have a big newsflash for everyone. I think AI is a big deal. And I think it's one of these things that is getting a lot of hype and is probably, you know, still under-hyped. I don't think it's like a, you know, it feels like it's come on all at once, but it's really been a culmination of a lot of important trends in the world, both just like the algorithmic advancements and, you know, what they're doing with originally what was TensorFlow and now the large language models in various domains, or it's the compute power, which everyone knows about, or the key thing, too, is just the data. If you think about the breakout application, it's ChatGPT.
ChatGPT really is relevant because of the compute and because of the algorithms, but really because it was trained on the internet, or 20+ years of the internet, to be that training set for that model. You have to have the data. When we look at our own business, one of our We have AI in our products, and we have for a few years, whether it's threat insights on the workforce side or Security Center on the customer identity side, which look at our billions of authentications and use AI to make sure we defend other customers from, like, similar types of threats that have been prosecuted against various customers on the platform. Those products are great, and they'll get better with better algorithms and more data.
Because we have the strategic advantage of having so much data, we can see the patterns. We'll continue to add more products that take advantage of data and algorithms and compute. That's, I'm really excited about the potential. One of the ideas that we're working on that might not be might be a atypical use case of how someone like us could use AI, is configuring Okta, setting the policy up for Okta across hundreds of applications on the Workforce side, or tens or 20 applications on the Customer Identity side, with very various access policies and rules about who can access them and how they access them.
Be pretty complicated to set up, but we've actually been prototyping using AI to auto-generate that configuration and that policy setup, so a customer doesn't have to start from scratch. They can see what 18,000 plus other customers have done and then apply that quickly to their own configuration, decreasing the errors, increasing the speed to value. That's an idea of, in the products, how it could be maybe a non-obvious use case. Then the other one we're excited about is, if you zoom out and you think, this is a huge platform shift, it's the next generation of technology, so that means that there's gonna be tons of new applications built with AI. It means that there's gonna be tons of new industries created and industries changed, and there's gonna be a login for all these things.
You're gonna need to log on to these experiences. Sometimes it's gonna be machines, sometimes it's gonna be users. That's an identity problem, and we can help with that. In a sense, we're really gonna be selling picks and shovels to the gold miners. In fact, you all know that OpenAI is a customer, and our Customer Identity Cloud is the login for ChatGPT. That's, you know, a very exceptional example of a successful application in the extreme. There's gonna be thousands of these types of applications, and they all need identity, and we're here to serve as that supplier to them. That's another positive trend on our business, I think.
Billy Fitzsimmons (Equity Research Senior Associate of Enterprise Software)
Perfect. Thank you.
Dave Gennarelli (SVP of Investor Relations)
Okay, next up, we have Rudy Kessinger from DADavidson.
Rudy Kessinger (Managing Director and Senior Research Analyst)
Thank you for taking my questions. I guess, you know, coming back to the guide, the CRPO guide, and certainly the implied second half revenue guide, Brett implies growth exiting the year in the mid-teens, if not maybe even the low teens. On the one hand, you're talking about improvement in metrics with the sales force productivity and selling CIC, et cetera. I guess, what more do you have to do to maybe put a stop to the deceleration in growth, even against a more difficult macro, and maybe even potentially re-accelerate growth?
Brett Tighe (CFO)
Sorry, my computer just froze. What was the question?
Todd McKinnon (CEO and CO-Founder)
Yeah, I can take it. I'm happy to take it. I think that First of all, there's, we're always improving and trying to get better. You know, I think, I made the comment that we've made a lot of progress on some of the execution issues we had last year, and talked about sales attrition being healthy and tenure ramping and product, you know, productivity of reps being in terms of selling CIC, being positive. We're still doing a lot of things to improve, and that's across the whole company, by the way. Whether it's operationally improving our efficiency, our effectiveness, building better products, building products faster, better enablement, better go-to-market operations across the board.
We're gonna continue to improve. I think the one, in terms of, like, modeling and going forward, when we see a quarter of some of these trends turn the other way, whether it's mix of new business to upsell, whether it's deal sizes, we mentioned, things like that's when we're really gonna be comfortable that the macro is past us and the business can achieve greater than the guidance we've outlined.
Brett Tighe (CFO)
Yeah, I would just also add to that and, that I would say that we remain committed to this profitable growth concept, right? I mean, we've been talking about this for a while now, and you can see it in this quarter with, you know, the margins that we had, 24% margins on the free cash flow side. 21 point improvement, non-GAAP operating margin was strong as well. That was a huge improvement year-over-year. It's not just, you know, obviously, we wanna grow as fast as we can, but we wanna grow responsibly and profitably as we move forward.
Rudy Kessinger (Managing Director and Senior Research Analyst)
That's helpful. Thank you.
Dave Gennarelli (SVP of Investor Relations)
All right, let's go to Jonathan Ho at William Blair.
Jonathan Ho (Partner of Technology Equity Research)
Oh, great. Hello, good afternoon. Yeah, can you maybe help us understand, where we are with the sales transition, productivity levels, and maybe what's left to be done at this point? You referenced the sales conditions earlier. Thank you.
Todd McKinnon (CEO and CO-Founder)
Hey, Jonathan. Just to catch people up, we're really that's three quarters into a big change on the clarifying of the positioning of the Workforce Identity Cloud and the Customer Identity Cloud. We did that in Q2 of last year. kind of announced it revealed to the world in November or so into Q4. This is really, the end of Q2 here is really the third quarter since it was publicly launched, kind of the fourth quarter since it was since we started working on it internally. That was a big milestone behind us, and we will look at evidence of that as We look for evidence that that is resonating.
One thing is just the qualitative conversations with customers, conversations with analysts in the market, industry analysts, et cetera, et cetera. Those are all going very well. Quantitatively, what we look at is, we look at, you know, the numbers I've mentioned over and over. It's how many sales reps have done Customer Identity Cloud deals. That's the big new product suite. Doing a deal in there is, it demonstrates familiarity and capability to do it. It portends the future of being able to do more. That one's been trending positively and is really in a healthy place. That's a positive thing. That being said, the tuning of go-to-market and the running of the go-to-market machine on a global basis is something we're always improving.
Whether it's, you know, better top-level, more effective campaigns in terms of driving demand generation, whether it's just operationally, how we're prosecuting leads to opportunities, how the sales team is taking those opportunities and all the kind of the blocking and tackling of sales, the sales funnel and the sales machine, we're continuously improving that. I think. The big changes we made last year with that clarifying of the Workforce Identity Cloud and the Customer Identity Cloud, positioning, and, you know, some of the changes we talked through at that time. I guess it's a tale of two things. It's getting those big rocks behind us, while also continuing to make sure the go-to-market machine is humming as effectively as it can.
Remember, you have a team that's every quarter, it's, the retention is strong or the attrition is low, you have more ramp, and they've done more deals, and they've had more capacity to do more deals, and they're getting more and more productive, which is a positive signal.
Brett Tighe (CFO)
I would add one comment to that, Jonathan, which is, the CIC trend that Todd talked about in terms of participation in the field is getting better. The other thing that we saw in the quarter, which was a real strength, was cross-selling across all products. Like whether it was like, you know, more WIC products to a WIC customer or a WIC customer buying CIC, it was actually one of the fastest growing areas we had in the company and was definitely accretive to growth in the quarter. We're very excited about that trend, 'cause that really shows you're getting a go-to-market organization that has a breadth of understanding of how to pitch the value and how to deliver value to our customer base.
Jonathan Ho (Partner of Technology Equity Research)
Thank you, gentlemen.
Dave Gennarelli (SVP of Investor Relations)
Okay, next we'll go to Ray McDonough at Guggenheim.
Ray McDonough (Director of Software Equity Research)
Great, thanks. This is Ray McDonough in for John DiFucci. Maybe for you, Todd, you know, how important is bringing IGA and PAM together to help maybe accelerate or ramp adoption of IGA? I know it's early with the product, but do you see any delay or hesitancy in customers' purchasing attention around IGA, just waiting for the full release of PAM to put those two solutions together?
Todd McKinnon (CEO and CO-Founder)
Yeah, it's a really insightful question. I, we don't. We actually. The IGA has, or OIG, Okta Identity Governance, which is our IGA product, has surpassed every goal we've had for it. Hundreds of customers using it. It's surpassed the expectations in terms of, you know, we originally thought it'd be more of a mid-enterprise. It's provided value to some of the largest companies as well. Another surprising thing is, we thought it would be more, "Hey, Greenfield, you don't have any IGA solution. This would be your first one." We're seeing it be deployed alongside of some of the other solutions in the market, which is, was a little bit unexpected, a positive thing. Also, even a few times, it's replacing solutions, which surprised me. I didn't think that...
I thought people, once they had something installed, they wouldn't replace, particularly the on-premise product with the more of the modern new product that we have. Those are all positive trends. I actually think I don't think that people are waiting at all for the integration between to go with IGA, for the integration between IGA and Privilege. I do think that the flip will be true. I think that the fact that Privilege has integration to IGA will accelerate Privilege, 'cause that's something that hasn't happened before. Privileged access management was really around the admin accounts and dealing with those things in somewhat of a silo.
What we're doing is you can have the same kind of access certification, the same kind of, the same kind of reporting and visibility across all your resources that, you know, servers, Kubernetes, and you get the governance capabilities with that. I think there'll be a tailwind there, where we're not seeing the hesitancy the other way to. I think, you know, there could be an upside, but we're just not seeing a lot of people waiting to go with IGA because of the privilege not being there quite yet.
Ray McDonough (Director of Software Equity Research)
Sounds. Thanks.
Todd McKinnon (CEO and CO-Founder)
Yeah.
Dave Gennarelli (SVP of Investor Relations)
Next, we'll go to Adam Borg at Stifel.
Adam Borg (Managing Director)
Awesome. Thanks so much for taking the question. Maybe just on the federal vertical, you know, you guys recently talked about the Okta for U.S. military. That seems like an interesting announcement. Talked about a growing partnership with Carahsoft. Maybe how to think about the federal opportunity more broadly, and where are you investing the most there? Thanks.
Brett Tighe (CFO)
Yeah, Oh, go ahead, Todd.
Todd McKinnon (CEO and CO-Founder)
Oh, yeah, I was gonna say, it's a really important vertical for us, and we've had you mentioned the dot military, the instance for the, for the DoD, which is the military instance. Also, we achieved FedRAMP High recently, and these are all huge tailwinds to that important business for us. The government is. It's not just federal, by the way, it's the state and local as well. Some of our sizable opportunities over the last two quarters and over the next few quarters are actually with states. States doing big transformation projects. Yeah, we have a big goal and target on federal this year.
It's something we invested a lot in, and we're very excited about the potential for that to, you know, achieve and even overachieve its targets.
Brett Tighe (CFO)
I would just add to that in the sense that if you remember last time we spoke, for FY 23, Federal specifically, was the fastest growing segment we had across the company. That's direct result of the focus we put out on FY 23. I think that's created a lot of momentum for us as we're gonna move through this year. I mean, you saw the US Air Force Recruiting Service sign on for us as a customer. We definitely are excited about the opportunity in the long run.
Adam Borg (Managing Director)
Awesome. Thanks a lot.
Dave Gennarelli (SVP of Investor Relations)
Okay, let's go to Stefan Schwarz at Wells Fargo.
Stefan Schwarz (VP of Equity Research)
Hey, I'm on for Andy Nowinski. Thanks for taking my question. Just a quick one. You mentioned the PAM is in beta. Any early customer or feedback from that?
Todd McKinnon (CEO and CO-Founder)
Yeah, the, it's pretty early. It was released, I think into beta, like, six weeks ago. Yeah, they're digging in, and they're. A lot of these customers are, they were, they were familiar with the roadmap. They've really kinda, tone or honed their evaluation to be really in the sweet side of the product, which is, you know, dynamic environments that use a lot of containers, use a lot of cloud instances, want to control those types of environments with the same types of access management primitives, like passwordless, like, anti-phishing access management capabilities that the core Okta platform provides. They're really kind of perfect fits for this. It's off to a very good start. It's early.
We expect that the next wave of customers will be much broader, and it'll also be, you know, customers that maybe weren't as hand-selected. We'll get a lot of good signal out of this next wave as well.
Stefan Schwarz (VP of Equity Research)
Got it. Just real quick, any timing on when you might see the next wave of customers?
Todd McKinnon (CEO and CO-Founder)
I would, instead of the exact time on that, I would focus on the fact that we're on track for the end-of-the-year GA.
Stefan Schwarz (VP of Equity Research)
Got it. Thank you.
Dave Gennarelli (SVP of Investor Relations)
Okay, next up is Joe Gallo from Jefferies.
Joe Gallo (SVP and Software Research Analyst)
Hey, guys. Thanks for the question. Todd, you've mentioned CIAM being a key focus area this year. Just any quantitative or qualitative update on the performance of CIAM versus Workforce? Then maybe just a quick update on the sales force's comfortability selling CIAM. Thanks, guys.
Todd McKinnon (CEO and CO-Founder)
Yeah, the one. It is something importantly we watch, and I mentioned a couple of times that, you know, just kinda qualitatively as I have conversations with customers. You know, I talk to a lot of customers, and I'm in a lot of both being the executive sponsor for big accounts for Okta, but also working with deals and new customers. It's still a relatively small number, given the number of, you know, 18,000+ customers and the number of deals we do in a quarter. I do like to compare the actual quantitative aggregate data with my qualitative data. Qualitatively, the interest is, you know, pretty similar across both.
There's big customer identity customers, there's, you know, important workforce customers that want us to, you know, are going through strategic transformations and wanna make sure that we're gonna be there to support them for massive rollouts and huge investment in Okta. When you look at the aggregate number, the one that's really important is just the number of sales reps doing these CIC deals, and that's just the more at bats, more repetition. That's gonna lead to, I think, a really balanced business going forward, and a go-to-market organization that can sell both products at scale.
The one thing I will say in terms of qualitative as well, or quantitative as well, is that the macro impacts we're talking about, whether we say, you know, smaller than average or decrease in the average deal size, or it's the tilt toward upsells versus new business, these are across both use cases. These are consistent across Workforce and Customer. You might wanna, you know, one of the ideas we had is it would be impacting one more than the other, we don't see that. It's consistent across, it's consistent across that, which is also a reason why, you know, when you think about market dynamics or pricing or competitive, the two businesses have very different competitive sets.
It's interesting that all these trends we track are impacting both the same, which also gives us, you know, confidence that it's macro-related. You know, just, I just would add to that in the sense that, you know, you, if you heard my comment a second ago around how cross-selling across the business, whether it's intercloud or intercloud, was really good. One of the bright spots in that was the cross-selling of CIC into other types of customers. That's another good, positive sign inside what we're seeing in the execution of the organization.
Joe Gallo (SVP and Software Research Analyst)
Thanks.
Dave Gennarelli (SVP of Investor Relations)
Next, we'll go to Fred Havemeyer at Macquarie.
Fred Havemeyer (Head of US AI & Software Research)
Yes. Thank you very much for taking the question, and I'm sorry to return the conversation back to macro.
Todd McKinnon (CEO and CO-Founder)
No worries, Fred. No worries, no worries at all.
Fred Havemeyer (Head of US AI & Software Research)
Well, thank you. I'm hoping to get a better picture or more intuitive understanding about kind of where the macro headwinds are originating. Wanted to ask, if you could elaborate about just is this something that could be coupled, perhaps, to layoffs and hiring freezes that are ongoing, ubiquitous across a whole range of markets? Or is this something perhaps more related to just general cost controls within organizations, or is it something completely different?
Todd McKinnon (CEO and CO-Founder)
I would say it's a mix of both of what you just said. When you look at the Workforce Identity Cloud, you heard me talk about seat expansions. Well, the seat expansions are really our customers' employees, right? They don't have as many as they expected, so they're not gonna buy more, or maybe they have less than they had when they originally contractually agreed with us. That's happening also, by the way, on the CIC side, the Customer Identity Cloud side as well. We're seeing the commitments to and expectations around their own websites or their own customer-facing applications being a little less so. We're seeing that component, we're also seeing, if you look at contract durations, seeing how they're a little bit shorter than normal.
I think people are just being more thoughtful about the uncertainty out there in the macro. That's all the quantitative we can see. There's also the qualitative that we hear from the field of, you know, budgets being reduced a little bit or, you know, hey, the CFO and procurement being a little slower to close deals because they wanna be thoughtful about how they enter into contracts. We're seeing a variety of those things, of what you just said, Fred. I think you've got it spot on.
Fred Havemeyer (Head of US AI & Software Research)
Great. Thank you for the context.
Todd McKinnon (CEO and CO-Founder)
No problem.
Dave Gennarelli (SVP of Investor Relations)
Okay, let's go to Shrenik Kothari at Baird.
Shrenik Kothari (Senior Research Analyst)
Hey, yeah, thanks for taking my question. On the positive side, I know Brad mentioned that you guys have seen strong growth in cross-sell across products. I'm assuming it's both Customer Identity as well as IGA beginning to move the needle in terms of ACV. I mean, since you guys mentioned about the future of Identity Governance, you guys are seeing almost 1/3 or more of the total kind of Workforce Identity Cloud spend going to OIG. Just wondering, and I think you touched upon it in terms of essentially the majority of the business still being greenfield, the replacements are also, in terms of your ability to win in RFPs, is exceeding your expectations?
Can you provide some more color there? Has there been more replacements, compared to last quarter, in terms of the mix, how that's trending? Thanks.
Todd McKinnon (CEO and CO-Founder)
Yeah, I think it's a really good, some really good questions there. I'll separate the kind of aggregate statistics of the healthy cross-sell and upsell numbers. This is inclusive of, you have a Workforce, you add multi-factor. You have single sign-on, you add advanced multi-factor or governance. There's upsell products within Workforce. It's also cross-sells within Workforce. It's also cross-sells where you have Workforce and you buy a Customer, or you have Customer and you buy Workforce. That's just in the data holistically. IGA, it's off to a strong start, but it's still, it's only in the hundreds of customers. It's very optimistic, but it's not really moving that needle yet.
We think it will over time. But it is off to a very fast start. I think, one thing that, just to clarify what I said, I think that our assumption was that it would be more greenfield. It's a very, it's a modern IGA, it's super integrated with access management. It covers all the basic use cases and all the integrations, that a customer that is more cloud-centric and modern in their technical architecture would want or need. I thought it'd be more greenfield. The surprising thing is that it's being installed next to legacy deployments.
Even though they chose a legacy vendor, for whatever reason, they couldn't expand it fast enough, they didn't get the value, or it didn't get as broad as they wanted to, they're putting Okta Identity Governance next to it for kind of, and surrounding it in that. I don't. We have seen a couple replacements, but I think full rip-outs of an IGA solution are going to be relatively rare. I think once people get these things installed, they work, and they don't touch them. We also think there's a big opportunity to. I mean, the IGA market right now is not that big. We think with a great product like Okta Identity Governance, we can make it much, much larger, and that's why these early trends are super exciting.
Shrenik Kothari (Senior Research Analyst)
Got it. Thanks a lot.
Dave Gennarelli (SVP of Investor Relations)
Next up, let's go to Scotiabank.
Joe Vandrick (Equity Research Associate Director)
Hey, this is Joe Vandrick on for Patrick Colville. Can you hear me okay?
Todd McKinnon (CEO and CO-Founder)
Hey, Joe. Loud and clear.
Joe Vandrick (Equity Research Associate Director)
All right. Going back to the governance product, adding an incremental 33% or so to customer spend for those who adopt it, should we expect a similar uplift for customers who adopt PAM once that's rolled out? Thanks.
Todd McKinnon (CEO and CO-Founder)
Yeah, I think that that's realistic. We wanna see it in the market and contribute that because that one-third increase is based on looking at customers in the market, hundreds of customers. When we look at PAM right now, we see kind of the pricing of it, and we model it out, we think it could be that, contribute that much, but we wanna see it actually before we're as confident as what we're seeing in Okta Identity Governance.
Joe Vandrick (Equity Research Associate Director)
Okay,
Dave Gennarelli (SVP of Investor Relations)
let's go to Madeline Brooks at BofA.
Madeline Brooks (Equity Research Associate of TMT)
Hey, guys. Can you hear me okay?
Dave Gennarelli (SVP of Investor Relations)
Loud and clear. Yep.
Madeline Brooks (Equity Research Associate of TMT)
Great. Thanks so much for taking the question. just one clarifying question, and then one quick follow-up. I guess on the CRPO guide, you know, if I'm thinking about the impact from Auth0 and the integration last year, can you just give us some parameters on how large that is? I mean, 1% impact is very different from 5% impact.
Brett Tighe (CFO)
You mean, like, the impact associated from the Customer Identity Cloud selling last year?
Madeline Brooks (Equity Research Associate of TMT)
Right, just some of the selling issues, how that's reflected in CRPO growth this year.
Brett Tighe (CFO)
Got it. Look, I couldn't give you the exact percentage. I mean, obviously, it creates a headwind for us, both on revenue and CRPO, because we didn't execute as well as we want. Obviously, as you've heard today, we feel like we've turned the corner on a lot of those execution issues, and we've actually had quite a nice quarter, both top line and bottom line. Yeah, I can't give you an exact number.
Madeline Brooks (Equity Research Associate of TMT)
Okay, got it. No worries. On the customer side too, I mean, I know you said that there's no you guys aren't seeing an impact, a difference from macro impact on that, but given that customer is a little bit more of a transformational project, if we think forward as to how the year is gonna go, are you know, forecasting any slowdown on the customer side because of that? If you look forward, too, Brett, you mentioned that you are having a little bit more conservative going forward. Where is that conservatism coming from? Is it still assuming you're gonna see similar impacts on both product lines?
Todd McKinnon (CEO and CO-Founder)
Exactly.
Brett Tighe (CFO)
Yeah, the guidance right now assumes it gets worse in both product lines because we are seeing the impact in both product lines. That's really how we're thinking about it going forward.
Madeline Brooks (Equity Research Associate of TMT)
Great. Okay, thank you.
Dave Gennarelli (SVP of Investor Relations)
Let's go to Keith Bachman at BMO.
Keith Bachman (Senior Research Analyst)
Good afternoon. Thank you. I wanted to ask Brett for a second, if you could talk a little bit about the net retention rate. It's the latest 12 months number, you know, presumably this quarter was a pretty big step down on a quarter-over-quarter basis. How should investors be thinking about the net retention rate as we look out over the next couple quarters? Related to that, you've talked about IGA and PAM, and presumably some other products, being interesting to customers. If the macro just stays the same or maybe gets a little bit worse, if we think over the next two quarters-four quarters, how might these products really be able to help the mix or the upsell, if you will?
What I think investors are really struggling with is the CRPO guide is candidly deemed to be disappointing, but the larger question is, you know, is that 14%-15%, is that the bottom, or does it get worse from here?
Brett Tighe (CFO)
Yeah. In terms of net retention rate, you know, the decline quarter-over-quarter from 120 to 117, you know, like we spoke about previously, we did expect the number to decline.
Keith Bachman (Senior Research Analyst)
Yeah.
Brett Tighe (CFO)
They were for two reasons. If you remember last time I talked about macro worsening, and we've basically spent most of this call talking about macro worsening. It definitely, kind of, played out like we thought it was. You can see it through the seed expansion, stats that we've talked about today. The other thing we talked about is why we thought it was gonna drop throughout FY 2024, was around FY 2023 customer adds. We didn't add as much new business and new customers in FY 2023, thus makes it less customers to upsell into in FY 2024. Both of those obviously came to fruition.
117 is where we landed, the thing that I wanna make sure everybody is very clear on is that the gross retention rate has remained stable in that mid-90% range, we do expect that to continue throughout the balance of FY 2024. In terms of those two other factors, which basically influence your upsell rate, the upsell rate is basically the difference between net retention rate and gross retention rate. We do believe that there's a continued headwind through the year, we do believe we tick down from here in terms of net retention rate through the balance of FY 2024.
To your question on OIG and PAM, yes, obviously, we're actively working that to have those offset those seed expansions. I mean, OIG off to a great start, as you heard Todd talk about. The numbers are still small. We all need, you know, hundreds of customers versus 18,000+ customers.
Keith Bachman (Senior Research Analyst)
Right.
Brett Tighe (CFO)
Right? Then PAM is only going GA at the very end of the year. We'll see the effect from PAM more likely in 25 and 26. That's how I would think about net retention going forward.
Todd McKinnon (CEO and CO-Founder)
Yeah, the other thing too, is that when you think about the products to potentially upsell, the Customer Identity or Workforce Identity, selling Workforce Identity to someone that has Customer or Customer that has someone into Workforce, is way bigger impact than PAM.
Keith Bachman (Senior Research Analyst)
Right
Todd McKinnon (CEO and CO-Founder)
And IGA at this point.
Brett Tighe (CFO)
Yeah.
Todd McKinnon (CEO and CO-Founder)
That could change next year or 2026, but for this year, the big upsell opportunities are selling the other cloud.
Keith Bachman (Senior Research Analyst)
Okay. Just to finish off, though, is there anything you wanna say about the CRPO growth? I mean, can you say this is the bottom, or is it just too hard to call at this point?
Brett Tighe (CFO)
We'll update you as we go. Obviously.
Keith Bachman (Senior Research Analyst)
Okay
Brett Tighe (CFO)
It's a fluid macro environment, we don't wanna get too far out in front of ourselves at this point.
Keith Bachman (Senior Research Analyst)
Okay, thank you.
Dave Gennarelli (SVP of Investor Relations)
I know we're a little bit past the top of the hour, we'll go into overtime a little bit more here, try to get to a few more questions. Next, let's go to Gabriela Borges at Goldman.
Gabriela Borges (Managing Director and Senior Software Equity Research Analyst)
Hi, thank you. I want to stay on the topic of net retention. Brett, could you remind us what percentage, or how do you think about net retention split between upsell? If you look back over the past couple of years, how much does seat count growth or classic upsell contributed to net retention versus how much is cross-sell today?
Todd McKinnon (CEO and CO-Founder)
That was what I was saying earlier, which is seat expansion definitely was a headwind to growth and also headwind to net retention in Q1. We do expect that to continue to be a headwind as we move forward, given our lens on macro and what we're seeing. Cross-sell had a nice quarter, like you've heard us say, but it's really that seat expansion, you know, is really what we're seeing is, when I say seats, to be very clear, it's both seats on the Workforce side and MAUs on the Customer side. We're seeing it in both sides of the business, and we do believe that continues to be a headwind throughout the balance of FY 2024.
Gabriela Borges (Managing Director and Senior Software Equity Research Analyst)
Is there a way to think about what the typical magnitude of contribution would be in a normal year from classic upsell, seat count...
Todd McKinnon (CEO and CO-Founder)
It's been-
Gabriela Borges (Managing Director and Senior Software Equity Research Analyst)
MAUs?
Todd McKinnon (CEO and CO-Founder)
It varies from year to year, but it's been a mix between the two. It hasn't been like 90/10, one or the other, right? It's been a mix between the two.
Gabriela Borges (Managing Director and Senior Software Equity Research Analyst)
Okay. Thank you.
Dave Gennarelli (SVP of Investor Relations)
Yeah, let's go to Eric Heath at KeyBanc.
Eric Heath (VP and Equity Research Analyst)
Thanks, Dave. Just a question for you. I mean, Microsoft last week, at their Build conference, announced kind of a new program or new product around CIAM. Just curious to get your initial thoughts there on kind of that product and maybe how that may alter the competitive landscape, if you will.
Todd McKinnon (CEO and CO-Founder)
Yeah, I didn't pay attention to it. I'm not familiar with that announcement, so I can't comment on that specifically. I do know that it's just they've tried customer identity stuff in the past. It's pretty different than their Workforce Identity pitch, which is kind of like get identity as part of your email. The whole focus of their identity program really is to be identity for email, and then, by extension, be identity for security. It's just a pretty different motion than customer identity and having a great developer experience and having the integrations that you have to have on the customer identity side.
I think, I don't know the specifics, but it's just a pretty different world, and I think that's why we're pretty unique to have such scaled businesses in both. By far the biggest customer identity vendor, you know, it's important to bring both to customers, but one of the reasons why it's so valuable as a company perspective, to be that vendor, is because you have to really build two muscles to do it successfully, which is what we've done.
Eric Heath (VP and Equity Research Analyst)
Thanks, Todd.
Dave Gennarelli (SVP of Investor Relations)
Let's go to Brian Wilcox at Cleveland.
Brian Wilcox (Research Associate)
Great, thanks for taking the question. Could you talk about the contribution you're seeing from Cloud Marketplace transactions and how you think about that channel longer term, given we're hearing many customers are using it as a way to work down cloud, excess cloud commits?
Todd McKinnon (CEO and CO-Founder)
Yeah, we're definitely seeing that as well. The AWS Marketplace has been pretty successful for us. It's still relatively small in terms of our overall, our partner channels, but it's growing quite rapidly, and the same thing, it sounds like you've heard, we hear as well. Customers, like, they can spend their enterprise credits that they've purchased, they can spend it on Okta through the marketplace. That's pretty compelling to them. I think there's a, there's a bigger reason why Amazon is a, is a really good partner for us, and customers use the marketplace. That's because if a customer has Okta, that means that they're more likely to use, you know, a choice of cloud providers versus being locked into one.
That's, I think that's why it resonates to, not just Amazon, but a lot of the partners that we have, whether it's, we talked about the Google announcement, the Zoom announcements. One of our big, you know, value props is our independence and our neutrality, and some of that's just the way we build features and how they're not beholden to kind of shuttling certain technology to customers, but it's also the ecosystems and the partners' ability to work with us, whether it's Google Workspace, or, you know, Amazon or Zoom we talked about, or the hundreds and hundreds of other big-scale technology vendors that have an interest in there having be choice in an ecosystem. We're a ready and willing, and capable partner for them.
Brian Wilcox (Research Associate)
Thanks.
Dave Gennarelli (SVP of Investor Relations)
Let's go to Matt Hedberg at RBC.
Matt Herdberg (Managing Director and Software Research Analyst)
Hey, thanks, guys. There's been a lot of talk about better cross-sell and upsell within your base versus new logos. I'm curious, Todd, you know, when you look at the new logo side, you know, how do you think, you know, we could start to unlock the broader legacy identity access management replacements? Like, there's hundreds if not billions of dollars out there on the legacy side, seemingly waiting to be sort of like unlocked.
Todd McKinnon (CEO and CO-Founder)
Yeah, it's, I think I've said this before for folks that have listened to the calls, and I've had the pleasure to meet and talk to. I think the biggest opportunity for Okta is really, is really, the mass, which is coming, the mass movement of people to do security and identity from the cloud. Whether that's on the workforce side, where the default in, especially large organizations, the default is just to kind of do it in their own data center and do it on premise, do it in their own office. You know, they think about the old world of local area networks and VPNs. On the customer identity side, it's just to kind of build it yourself.
The good news and the bad news is that the good news is that it's changing. I guess the bad news is that I think in cases, maybe people being more conservative with technology investments and so some questions about the macroeconomy can slow down some of that big change that would lead them up to a place where they've chosen so much modern SaaS applications or so much cloud infrastructure, or so much security stack outside of their own firewall, that now they're gonna choose a cloud-based identity provider. They might be in some cases, more reticent to do that in a macro environment that's maybe softer.
What that means is that our strategy is really, we look for companies and we look for opportunities that are going through change, whether it's they are adopting apps or they're adopting cloud infrastructure, or they're maybe doing M&A, merging things together, divesting things, something that's a catalyst for change, and that's when we do very well. I think, how do you unlock that? Well, one thing you do is you keep having success with customers, and you keep building great products, and you keep building a company that can help customers when they're ready. The other part of it is just, it's kind of inevitable. I mean, it's gonna change. Technology's gonna move forward, companies are gonna make these investments, and we're gonna be there to provide the identity solution when they do.
Dave Gennarelli (SVP of Investor Relations)
Okay, maybe we can get these last two quickly. We'll go to Peter Weed at Bernstein.
Peter Weed (Senior Analyst)
Thank you. You know, one of the things that I'm kind of taking out of some of your guidance and numbers here is. Look, I get that, you know, some deals slipped into the next quarter that you had anticipated to get in this quarter, it looks like you have yourself kind of re-accelerating a bit into the next quarter, and actually even more in the second half of this year. It's modest, obviously, but hopefully those are conservative and might imply that you've got some optimism for re-acceleration. What's giving you that sense of optimism and continuing to kind of raise your full-year guide and perhaps quarter-over-quarter acceleration in the second half?
Todd McKinnon (CEO and CO-Founder)
I mean, I think for us, when we're thinking about the guidance, I mean, I don't think we're getting overly aggressive here. I think we're obviously being prudent with the environment and, you know, we've seen some good execution in the quarter, we're obviously balancing that off with the effect from the macro. That's really how we're thinking about the guidance.
Dave Gennarelli (SVP of Investor Relations)
Yeah, let's take our last question from Param Singh.
Param Singh (Senior Analyst)
Yeah, hi, thank you. Yeah, this is Param Singh, on for Shaul Eyal, and thank you so much for squeezing me in. You know, firstly, I wanted to get a sense of between the Customer Identity Cloud and the Workforce Cloud, how much of a cross-sell opportunity still exists? I mean, just trying to get a sense of, out of the 18,000 customers, how many use both? I had a quick follow-up.
Todd McKinnon (CEO and CO-Founder)
I think the opportunity is huge. I think just the Customer Identity and Workforce Identity, if our existing 18,000 customers had both fully, you know, all the products in both clouds, would power success for many quarters.
Param Singh (Senior Analyst)
Okay.
Brett Tighe (CFO)
I would say, I would actually say years.
Todd McKinnon (CEO and CO-Founder)
Yeah, many quarters, 12+.
Param Singh (Senior Analyst)
Is there any way to quantify that? You know, like 15%, 20%, 50%?
Todd McKinnon (CEO and CO-Founder)
It's interesting, so we've done some work on this. The tricky part about it is trying to uniformly, across 18,000 customers, quantify the customer identity side of it. Because you know, it's not like Workforce, where you can say how many employees, making assumptions about partners and contractors, and then look at the spend. With customer identity, you have to kind of make a leap about, you know, when's the next ChatGPT, or how much digital transformation are these industries gonna go through broadly? It's a little bit harder to calculate, but we know enough to know that it's, if we execute, we have a big opportunity.
Param Singh (Senior Analyst)
The real quick follow-up was, do you think you're right-sized with the restructuring you had in the first quarter, or do you think there's some more opportunity here to trim fat here and there?
Todd McKinnon (CEO and CO-Founder)
We think the plan is in terms of the guidance and the profitability and the profitable growth, we think it's a good plan. You know, we're always.
Param Singh (Senior Analyst)
Do you think you're right-sized at this time?
Todd McKinnon (CEO and CO-Founder)
We think it's a good plan, yeah.
Param Singh (Senior Analyst)
Okay.
Todd McKinnon (CEO and CO-Founder)
Um...
Param Singh (Senior Analyst)
Thank you so much.
Todd McKinnon (CEO and CO-Founder)
Yeah, sure.
Dave Gennarelli (SVP of Investor Relations)
Well, great. We appreciate everybody attending again today. Before you go, I wanted to let you know that we'll be attending the Mizuho Technology Conference virtual event on June 12th. We'll also be participating in several bus tours this June. We hope to see you at one of those events. That's it for today's meeting. If you have any follow-up questions, you can email us at-