diff --git a/ops/services/okta-global/.terraform.lock.hcl b/ops/services/okta-global/.terraform.lock.hcl
new file mode 100644
index 0000000000..43dbb8fd4d
--- /dev/null
+++ b/ops/services/okta-global/.terraform.lock.hcl
@@ -0,0 +1,24 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/okta/okta" {
+  version     = "4.12.0"
+  constraints = "~> 4.12.0"
+  hashes = [
+    "h1:hML18IVRWhf440LY5xbc+CiJId9Z3mEd9+XV/6wsNN4=",
+    "zh:0aa1c9ff16288d02907f6de7cf95157575d42e8226aaf73cb294f501e3060a44",
+    "zh:1f075840438c17d001ac0d3d959d6ba18b92a373569c77e8816733a73af65769",
+    "zh:2bd89dfe8d90a3f634d7aad411b57c8afe3484beb7ddfdf23c9cb1868b119dc6",
+    "zh:4d21908e5fb3ade51f333d72e4c00ffbf7a85a162cca02a022d00a4ab0a584ff",
+    "zh:4ed215934999ca9c6a70ace6e949defdb0a59b75f14da5fd5ba74df52444bb20",
+    "zh:5ecd35baa2dce8791b954e4699c4ba50e9fcf4711b683f510f3cb4c70798c861",
+    "zh:861bb407b4193e8f8c672abded810a58497cefdaead2b0c7e4b510577d6689a8",
+    "zh:98c6a38c8b486cf1593389747c90d5befa99f1e21e757eeb893cf043b2c76f1d",
+    "zh:99361ea9f4ada2d6c99fb8526f9e76fcf7eaf8f2aebb32f44a5e20f371f0c882",
+    "zh:aa46d80e2db6099ba539f71177ecfc76723c9eb8dbe18a0df01cc9f2a5dbd6cd",
+    "zh:c0e5026156497c054beea4b3dcb9231c6fb3b24a9d4583181f17116e258bc97c",
+    "zh:c4750afd96bfddc93973d6b9c756cab4900fd3c5d134795cb4423f1ad45f6bce",
+    "zh:ca521ac7c13113310e29d982d0e5f09169cca0933b285f5eda8419865ffd1040",
+    "zh:d32258b37e1ec9aa5be15b4e9bf2b13f00ec10535d88be811cb88d7e1f082fa8",
+  ]
+}
diff --git a/ops/services/okta-global/_config.tf b/ops/services/okta-global/_config.tf
index cb69267031..a856e3e58c 100644
--- a/ops/services/okta-global/_config.tf
+++ b/ops/services/okta-global/_config.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     okta = {
       source  = "okta/okta"
-      version = "~> 4.3.0"
+      version = "~> 4.12.0"
     }
   }
   required_version = "~> 1.9.6"