Auth0 vs. Microsoft Entra ID

Auth0 is very well suited for situations where a JSON web token can be used for authorizing APIs, websites, and mobile devices. It's especially useful if the JWT validation can happen at a gateway layer. It's especially useful if you only need to verify the user's email address or mobile number as the passwordless login is easy to implement.

Incentivized

That one is tough. It's just easy to integrate the sign-on portion with other products from other companies. Like BluePoint or Podint. It's very easy to integrate the user information with others. Using Android ID to register an application with other companies' applications.

Incentivized

• Overall we had very good experience with Auth0. It supports industry standard language or technology for integration. Very good performance.
• It's nice to work with Auth0's APIs and they are flexible.
• The management and configuration dashboard is useful and easy to deal with.

Incentivized

• The first thing is that it's a really good platform to make a whole inventory of your hardware and software that you already have in the organization. It's very simple. It's very easy to look at what you have in the whole organization. And after that, start applying, for instance, some policies, some solutions in terms of zero trust access using MFA as a second form of authentication. So, these are the ways we use the MTIV platform.

Incentivized

• Auth0 can be somewhat limiting if you want a lot of control over the design of your authentication flow. Custom branding can be done, but it may be limited depending on how you plan to integrate.
• The Auth0 API documentation has proven confusing at times; a single API endpoint's behaviour will change based on inputs and configured settings (e.g. offline_access). Consequently fields that are advertised as being returned in a response might not be there or have different values if you miss a key detail and it can be difficult to debug when this happens. All information required is available in the documentation but requires some digging.
• The toggle to switch tenants feels a bit odd, it works, but I've had a few instances where I didn't realize I was on a staging tenant looking for something that was on the production tenant. Not a big deal, just something to watch out for.

Incentivized

• The only area I would suggest is the name change. Microsoft rebrands a lot, but the apps do the same things, and it gets confusing. If you spend five years learning Microsoft Entra ID or its previous name, and then they change it, you have to adjust. Rebranding app names inside Microsoft Entra ID can be confusing, and the migration is slow. They're trying to upgrade things, but communication has improved a little.

Incentivized

For our purposes, Auth0 is still one of the best valued RBAC platforms in the market.

Incentivized

Entra ID is a vital part of our Identity management/administration. With the integrations it has to other Microsoft products, setup and configuration is a breeze. Additionally, Microsoft has been around a long time and have the resources to ensure this product is stable and secure for many years to come. We know it will evolve with time to provide us what we need as technology changes.

Incentivized

Like in my case, it helps me build a better business by requiring authentication and better login features, as they are needed quickly. It helps me save time by not having to create it from scratch and provides better role-based login and access. One of my most helpful features is SSO (Single Sign On). If the user wants Microsoft-able SSO, Auth0 provides an all-in-one.

Incentivized

Simply because of what I mentioned earlier, the feature set sort of keeps changing and they do a lot of, they integrated with a lot of the other tools and so for users who are not as well seasoned, it may be a little bit more complicated for them to begin working within the tool.

Incentivized

There has been a handful of outages but they have been either minimal or rarely severe

Incentivized

I could probably rate this a 10 but I'm always conservative on giving out perfect scored bt performance has not been a problem for us using Entra ID.

Incentivized

There isn't a clear method to get a hold of support when trouble arises if you're on their standard plan. You can file a support ticket and they generally are responsive. I've often been able to find similar questions to the questions I've had when it comes to support in their ticket history, however, some have been closed without a satisfactory conclusion for the original poster.

Incentivized

Microsoft has offered Azure Active Directory as a solution for a couple of decades now, so they have seen and anticipated almost any issue that an organization may face and can therefore help. The cloud offering of Azure Active Directory offers some additional "self healing" or monitoring services that can minimize the need for a service call. However, as with most large companies supporting a fast growing market, there may be some gaps in service knowledge (and particularly processing) from the front line / tier one staff as they follow a corporate script at first contact.

Incentivized

Most training was internally produced

Incentivized

Make sure you use a good partner. Our implementation was a bit longer and more problematic than we expected. Our partner got it done, but, in my opinion, some of their inexperience and staffing issues were evident.

Incentivized

Auth0 is non-evasive and does not require software download. It is user friendly, seamless, and doesn't require additional actions on the part of the user. IBM Trusteer is none of these things and is based on a technology stack that cannot scale in the same way as Auth0. We believe Auth0 provides a superior solution and is well suited for our own technology stack.

Incentivized

My dad was a sales engineer for a competitor, which is SalePoint Identity IQ or whatever they're calling it this year. They complement each other well. It's just that with each new year, with each new iteration, there are more duplicative capabilities. So I've seen some organizations saying, "Well, now I can do things like access reviews, onboarding, offboarding, and identity workflows, all within just Microsoft Entra ID." The solution is that you get out of it what you put into it. If an organization is willing to invest in SalePoint, there are more granular capabilities that I've seen success with, but I would say the core, like 70- 80%, Microsoft Entra ID is able to cover it with not nearly as much identity investment performance. I think you get to functional capabilities faster with something like Microsoft Entra ID.

Incentivized

Scalability is pretty trival for Entra ID. It's not difficult to manage a few or many accounts.

Incentivized

• Development time has been allocated to the more core parts of our business.
• We are confident in the security of our user's accounts and their data.
• Auth0's login flows are customizable which means that we don't have to worry about users being confused when logging in/changing their passwords, and we didn't event have to spend that much time configuring this. (Full in-house development for login could take weeks to get right.)

Incentivized

• I don't know. I think we could not do without it. Also, because we have limitations in other systems, like our HR system, which cannot store externals. So for us, Microsoft Entra ID is the master data where we keep everyone connecting to our network. So it's difficult to quantify. It's simply indispensable.

Incentivized