The successor to AWS Single Sign On, AWS IAM Identity Center is used to centrally manage workforce access to multiple AWS accounts and applications. It helps users to securely create or connect workforce identities and manage their access centrally across AWS accounts and applications. AWS states that IAM Identity Center is the recommended approach for workforce authentication and authorization on AWS for organizations of any size and type.
N/A
Symantec VIP
Score 9.6 out of 10
N/A
Symantec Validation and ID Protection Service (VIP) is presented as a
user-friendly, cloud-based strong authentication
service that enables enterprises to secure access to networks
and applications without impacting productivity. Also included with VIP Enterprise two-factor authentication is Symantec VIP Access Manager, a single access point to protect cloud and on-premise web apps via Single Sign-On (SSO).
IAM plays a pivotal role in our organization, addressing the unique needs of our diverse workforce, which includes full-time employees, part-timers, contractors, and client engineers who access our workloads. This multifaceted solution offers us unparalleled control over access, ensuring that each individual has precisely the permissions they need and nothing more. IAM's robust security features guarantee the protection of our valuable resources and sensitive data. As our organization expands, IAM effortlessly scales with us, adapting to changing requirements, and helping us maintain our commitment to top-tier security and efficient access management.
Symantec VIP is best suited in environments where you need two factor authentication. As explained before, Symantec VIP is super easy to use and manage for our users across our entire organization. If you have your users using a virtual private network, Symantec VIP is the way to go; no doubt about it!
The UI is intuitive and simple to use and navigate. When generating a secure token to be used for VPN access, all the navigation is clear and intuitive. There is no confusion when our users use Symantec VIP.
Every generated token expires after 30-60 seconds, thus providing an extra layer of security and reducing any risk of someone re-using a token or pin to gain unauthorized access into our system.
The app is super responsive and has no lag and little to no latency. Everything loads quickly and is super speedy.
Our department can opt for a 6 digit code which we can use while logging in on different sites and SSO access can be easily set up and achieved with this tool.
Make it easier for users to assume roles securely, especially in cross-account settings. This might involve simplifying the process of switching roles in the management console or creating a command for AWS CLI that supports smoother role assumption.
Policy testing tools will be invaluable for administrators when they are creating policies. If this tool is able to assess the impact of enforcing a policy it will help greatly in preventing policy misconfigurations that lead to unintended consequences.
Better user interface, AWS should simplify the IAM interface to encourage new users.
when setting a token to a phone call, the phone calls often take a minute + to call the user.
When Symantec's VIP app is removed or reinstalled on a phone, the credential ID will change, and that dictates a call to the helpdesk to allow the user access.
Temporary security codes while handy, must be set to expire immediately to stay secure.
It gets easier with time, initially, it can be overwhelming for a fresher. Once you're used to working with roles and policies and know when and where it is required eventually it becomes easy
AWS Identity and Access Management (IAM) excels over Google Cloud IAM with its granular control, extensive service integration, and robust security features. AWS IAM provides fine-tuned access policies, versatile role delegation, and a wide array of services. Its adaptability and extensive toolset make it the preferred choice for businesses of all sizes.
The Symantec VIP solution has a more easy implementation process, which makes implementation faster. The Prove Of Concept of the solution presents the best results compared with Duo. The final price charged was cheaper. Consultants that participate in the process get show to us in a more clear manner all scenarios where we can use the Symantec VIP.
AWS IAM Identity Center has significantly bolstered our security posture by ensuring that only authorized personnel access our resources. This enhanced security has protected us from potential data breaches or unauthorized use of resources, mitigating risks and potential costs associated with security incidents.
While IAM brings long-term cost savings, there might be initial implementation and training costs. It's important to factor these costs into the ROI equation.
If your organization isn't used to such fine-grained access control, there might be resistance to adopting IAM. Overcoming this resistance might require additional training costs.
