Microsoft Entra External ID vs. WSO2 Identity Server

It is not easy to calculate the actual ROI due to the difficult quantification of all factors, but it certainly contributed a lot in protecting, monitoring and controlling access to our system. It also made it much easier to detect vulnerable external users with simple and "easy to hack" passwords they use on multiple apps.

If your systems are using standard authentication models then it is well suited. OpenID Connect, SAML 2.0 etc are all supported.

Incentivized

• Single sign-on simplifies access to your apps from anywhere
• Strong authentication for your customers using their preferred identity provider.
• Integrating with social accounts such as Facebook or Google+

Incentivized

• It's open source so is highly configurable
• WSO2 provides their own paid support which is an essential add-on
• Implementation is straightforward and conforms to all major standards

Incentivized

• Troubleshooting diagnostic logs effectively requires VS Code
• Group and role management requires additional effort
• The programming model (XML) could use some developer experience love

Incentivized

• Overall, the product works well but does take time and effort to implement in highly complex environments. However, I do not believe this is unique to WS02.

Incentivized

Each one of these alternatives has pros and cons. PingOne from Ping Identity states they "help deliver the secure and seamless customer experience to win battles for customer acquisition, retention, revenue, loyalty, and trust." While that may be the case, they did not fit our needs. We have a complex system and it did not seem to fit into our business.

Incentivized

It's Oracle. Highly expensive and limited options

Incentivized

• Having monthly active users billing was cost-effective.
• Helped with the IT support that was already managing the Azure platform of the company; this helped to manage the costs better and optimize them.

Incentivized

• WSO2 works well when you need specific user sign-up information and allows you to then tailor the access, for example, to the job role or area of discipline. We use this to tailor the learning offered to a user upon initial login.

Incentivized