Avatier Identity Anywhere vs. JumpCloud

Avatier is very well suited for large organizations that struggle with Service Desk getting swamped with password resets or unlocks. Giving end users the power to self service their issues is well worth the investment. In my environment, I even created Slackbot responses that triggered the Avatier site when a user said "reset password" or "locked out."

Incentivized

JumpCloud is least suited in situations where you have few devices, but lots of users. JumpCloud heavily focuses on the "One-User-One-Device" type of use, and does lack some of the features things like Active Directory is better suited for when having multiple users accessing one machine. Their Powershell APIs are fantastic and getting only more powerful. Lots of features are hidden behind these APIs, so admins not as familiar with Powershell would have more issues leveraging these tools. BYOD deployments are amazing, especially for macOS devices that are using Apple Business Manager and can leverage Zero Touch deployments. It is especially good at handling mixed systems, whereas other options, such as Jamf, are really suiting only for macOS, or Intune is more suited for Windows; JumpCloud managed to handle both systems well.

• It allows users to reset their passwords on their own.
• It allows our users to request access to VPN and shared drive on their own.
• It allows us to terminate accounts quickly and easily.

• User Management - The ability to control our users and set password/polices is made easy in the JC console
• Device Management - Using JC each user is assigned to their own device with only the rights to do their job - When elevated rights are required, this is done simply via the JC console for the period of time required
• SSO - Using JC's SAML SSO integrations we are building out our SSO offering and this is making for a much simpler daily user experience

Incentivized

• Ability to create ad hoc reports in the app
• Use of biometrics is one that has been improved recently that was not great
• Managing connector settings in bulk can be tedious

Incentivized

• SSO via OpenID - Opening up their SSO from just SAML to including OpenID (OAuth) would allow us to make more use of the service and to also incorporate it into some internal testing suites
• Time Limited User Elevation - The ability to time limit a users elevation of privileges would be a great addition
• Extending device management to include LPA - Least Privilege Access is becoming a bigger ask from our external auditors - Being able to do this via JC would be amazing

Incentivized

It's simple. I like how JumpCloud keeps things simple. Similar to Apple's ecosystem, they give you what you want with some extra features and bells and whistles but it doesn't take a large instruction manual to use it. They have the support system and KB articles to back up their product and learn about a feature and how to implement it

Incentivized

We have their premium support. Not only is the support great, but our SAM / Account manager directs any questions or updates to the proper channels and gets us the needed info and solution quickly. Due to this, we find JumpCloud to exceed our expectations and puts us at ease that our Foundation Tech Solution is VERY reliable.

Incentivized

Being responsible for choosing the product after a POC and pilot we found the process to be simple and effective

Incentivized

Avatier’ s modules were extremely easy to use and showed the immediate benefit that we would be able to use in our organization. Also the ability for our organization to implement true access governance vs. our homegrown solution will provide us with an exceptional opportunity to be able to keep our organization ever opportunity to stay secure

Incentivized

• The main positive is the number of calls into our help desk or LAN team have gone down to a few calls a week; instead of the masses going to them on a daily basis.

• Very easily add, or disable employee logins
• Reduce "password fatigue" by being able to reduce password expiration requirements, and having single sign on
• Higher security and visibility of security issues
• Reduced onboarding time from days to minutes
• Enabled easy reassignment of user accounts to another user via groups when employees leave
• Quick securing of terminated users, or otherwise compromised accounts
• Reduced user disablement time from previous manual methods requiring days, to literal minutes