Bitium vs. Forefront Identity Manager (Discontinued)

Best suited for companies that use the same services across multiple teams, services that might require support at one point. For us, it is very easy to share access to either the IT support team or to me, as the Salesforce administrator, and we can easily take care of the issue and then log out without any hassle.

I would not strongly recommend it for single users, who don't need to share access to others.

Incentivized

I think that MIM is great for compliance since it reduces the number of logins that are required by users. Most offices have post-it notes with logins floating around because there are so many to remember or there are "shared" logins. This reduces the number of logins to 1 and you can easily revoke access in one fell swoop. This prevents gaps and holes with terminations and updates to select groups are super simple.

Incentivized

• Sharing access. It's as easy as 1-2-3 with Bitium, no more hassle with sharing the actual password and then changing it, violating company policies, etc.
• Lots of apps supported. In all three years since we are using Bitium, we haven't encountered any app that would not be supported by it.
• Easy to set up strong passwords. Another very easy and intuitive feature: when you are setting up an app, you can ask Bitium to generate an A-level password automatically, that you can therefore use with ease.

Incentivized

• Authentication
• Security
• Identity Management

Incentivized

• Apps crashing. From time to time, some apps stop working in Bitium and they come back only after a while (1, 2, 8 hrs). We don't have a clear explanation for this yet.
• Very tied to Chrome. Bitium is almost 'married' to Chrome, making it unusable in other browsers, which is sometimes problematic.
• Sometimes slow Chrome Add-on. From time to time, the add-on seems so unresponsive that it is easier to go to the web dashboard and log in from there in the app you were looking for.

Incentivized

• For Windows Server 2008 R2 Servers is a great tool to set a codeless provisioning over new objects.
• Can easily integrate with Active Directory and Exchange Servers, improving the identity sync between the final user and the lifecycle management.
• Improvements in the areas of performance, simplified deployment easing the troubleshooting tasks, better documentation knowledge base, and more language support.
• The codeless provisioning provided in FIM can sustain a variety from high demand to mid-size scenarios for account lifecycle management.

Incentivized

It is Microsoft. We are a Microsoft shop, primarily. It integrates deeply with Active Directory making it good for Microsoft Active Directory shops.

Incentivized

• Everyone is now required to have A-level passwords, so the overall level of security has increased a lot.
• Having a secured way of sharing access to different apps, users are now very open to being helped more hands-on by the support teams, not fearing that their credentials might be exposed or later used.

Incentivized

• We see a positive impact simply in the time savings alone. Chasing accounts around is time-consuming and prone to error.
• The cost to us is negligible to the value it provides.

Incentivized