Amazon Cognito vs. Omada Identity Suite

Well Suited

1. B2C mobile and web apps with a high number of users.
2. Cheaper and cost-effective.
3. If the other pieces of the infra are already using AWS services like Lambda, S3, Pinpoint, etc.

Not Suited For:

1. Advanced use-cases (Biometrics based authentication) Email, and other MFA channels.
2. For any use-cases needing SCIM.
3. Customized flows of SSO, and MFA will need a layer on Lambda and other AWS services.

Incentivized

Omada is with very good and user-friendly interface.
There are various access management best practices available and recommended to
choose and configure easily.
The system works smoothly and is very reliable.
The Omada product team is frequently enhancing it and listens to customer
feedback.
There are out of the box integration capabilities with the most popular systems
on the market

Incentivized

• Strong integration with React.js and client-side applications
• Easy to bridge Cognito identities with the rest of the AWS ecosystem
• Easy to store user profile data directly in Cognito rather than having to build additional services/endpoints
• Easy integration with AWS Lambda to extend and add sophistication to the service

Incentivized

• Omada has very reliable integration capabilities with wide range of system.
• Omada's application performance is stable and without any problems since its implementation back in 2022.
• Omada's UI is very intuitive for onboarding new application or policy group.

Incentivized

• SCIM implementation is not present.
• B2B SaaS use-cases are very hard to configure. More suitable or B2C use-cases.
• Needs more recipes, plugins, SDK's.
• 2FA with Email as an OTP channel is not supported.
• 2 FA using biometrics is not available; can be customised using lambda.

Incentivized

• In Omada there is no convenient way to track or monitor the progress and status of authorization requests that are raised by other users or even for mine.
• There is no way to extend the validity of multiple Contractor/External user accounts by line manager and have to extend them one by one.
• Without custom development there is no way to create parallel access approval workflows.

Incentivized

Amazon Cognito is easy to use and implement if you don't need to implement custom policies. But if your security team requires something outside the box, then implementation becomes complicated and you risk wasting time. There is no option for customizable regex for passwords, which is a major deficiency. The standard password policy, allow to choose the length of the password, if it should contains at least one number, one special character, one uppercase letter and one lowercase letter.

Incentivized

Omada is with very good and user-friendly interface.
There are various access management best practices available and recommended to
choose and configure easily.
The system works smoothly and is very reliable.
The Omada product team is frequently enhancing it and listens to customer
feedback.
There are out of the box integration capabilities with the most popular systems
on the market

Incentivized

Community support is excellent, many times even better and quicker then the offical AWS support. I really cannot recommend community support enough! Apart from that the service is relativily easy to use and does not have a huge learning curve. Examples are easy to follow and will help you start using the service.

Incentivized

They are ideal tools to create a secure and unique login experience for our applications. Thanks to its API authorization, Amazon Cognito ensures connections to applications that are secure.It is easy to use and provides easy access to files and applications that you need to complete your goal.

Incentivized

Omada is
providing the desired functionalities that meet our needs as a standard
features. The only custom development that we have identified that is going to
be needed is related to a very specific process that would require development
with any other solution that we might go for.
The product appears to be highly configurable and is more than we
expected from such product. Standard
functionality to maintain Business roles from the user interface and
also to
do a mass changes to business roles via CSV uploads.Integration
with SAP GRC for SOD compliance.

Incentivized

• Amazon Cognito has had a positive impact on our business by allowing us to develop services that require user sign-up and sign-in more rapidly. Not only do we not need to build or maintain these features, but Cognito's implementation is also better than what we would be justified in building ourselves.
• Amazon Cognito makes user management easy. This reduces the time we have to spend supporting users. Non-technical product managers can even use the AWS Console to manage users without requiring support from developers.
• Amazon Cognito is likely more secure than what would be built in-house; a portion of our attack surface is now managed by Amazon.

Incentivized

• Omada has allowed introduction of self-service access requests by end-users.
• Since we moved from SAP IDM to Omada, we were able to onboard all local and global applications to Omada.
• The intuitive administration of Omada features allowed us to reduce the technical external consultants involvement.

Incentivized