CyberArk Privileged Access Management vs. Microsoft Entra ID

The system is great for enterprise or larger IT departments or teams where temporary or full access may be given using privileged IDs. Requirements for needing local admin access is also eliminated which can help with specific Windows workstation related tasks. It can be very useful when working with remote teams or contractors who may need temporary access to a system when required.

Incentivized

It is well suited for creating and updating and deleting employee attributes through Azure AD provisioning. But there can be some scenarios such as installation of provisioning agent documentation can be improved with proper screenshots. This will help consultants better in further implementations in future. The integration perspective is good but still the documentation available has scope of improvement.

Incentivized

• Automatically discover new servers on the network and take control of the local admin password by vaulting it and ensuring nobody knows the password. A different password on every server.
• Automatically roll the password in a configurable manner - after each use, after a certain period of time, etc.
• Track and govern sensitive account usage by ensuring only properly authorized users can access the vault and obtain the credentials and then monitor usage.

Incentivized

• Microsoft Entra ID's biometric authentication improves security and streamlines user access through facial recognition and fingerprint scanning, which are reliable and practical.
• Users can easily confirm their identities using biometrics, smart cards, or PINs, increasing security without disrupting business operations.
• Microsoft Entra ID provides us with a thorough security comprehension by allowing us to effectively manage user identities, regulate access entitlements, and track authentication events.

Incentivized

• GUI - right now everything is on one page/dashboard. Some level of folder/Safe type view would be great
• More options when storing passwords - especially for network based passwords
• Better integrations with vendors like Cisco so that admins dont need to really get the password from the vault (think Last Pass type add on)

Incentivized

• Support has been less responsive than we'd like. Sometimes, responses/callbacks can take days.
• There seem to be some credential conflicts with users who had "personal" accounts in the past using the same email address.
• Would like more options for chat-based troubleshooting, rather than phone or email.

Incentivized

It has been an essential tool and we have had very few problems using it. Nothing comes close that I have seen, though given how well it has worked out for us I really don't look very hard. The value is extremely high when you consider you get Microsoft Entra ID and the rest of the Microsoft 365 platform for one price.

Incentivized

Easy rollout across organizations, accessible from any device securely, and easy integration with Microsoft products and its services. Microsoft technical consulting services and team helps an organization to connect all dots which make Organization IT professionals' life easier. Easy to use hence adaption is faster and no major training needs to conduct for users.

Customer support and technical support have always been great when we require assistance. Especially when we come across issues that we're not familiar with.

Incentivized

Microsoft has offered Azure Active Directory as a solution for a couple of decades now, so they have seen and anticipated almost any issue that an organization may face and can therefore help. The cloud offering of Azure Active Directory offers some additional "self healing" or monitoring services that can minimize the need for a service call. However, as with most large companies supporting a fast growing market, there may be some gaps in service knowledge (and particularly processing) from the front line / tier one staff as they follow a corporate script at first contact.

Incentivized

Make sure you use a good partner. Our implementation was a bit longer and more problematic than we expected. Our partner got it done, but, in my opinion, some of their inexperience and staffing issues were evident.

Incentivized

It is known as one of the safest products in the market. It has good support and is also available as on-premise. You can run it virtually on VMWare (and probably on other hypervisors as well). You can have a second instance on bare metal and that makes it a very safe system.

Incentivized

Microsoft seems to be the better service for cloud identity syncing and is still a leader in this realm. Their service is reliable, and we use it with all of our clients. Compared to Okta, the cost is more affordable and they include a lot of services in the Microsoft licensing plans. This makes it the better option for most cases.

Incentivized

The features are getting addresses per requirements and their value for Money. The proposed ROI and actual ROI build confidence.

Microsoft Professional Services' technical knowledge is appreciable as consultants design the solution as per customer requirements. Mapping of features per user specifications and assisting Customer IT engineers to implement so they can manage and administer the services.

• Decreased the probability of an external cyber attack to privileged accounts..
• Management can control privileged account life cycle management more effectively
• Recording privileged sessions allows our organization to play back exactly the point of a breach or malicious behavior
• Automated system to manage and verify passwords, as privileged accounts are constantly created and deleted
• Automatic PWD change functionality will substantially decrease probability of PWD theft or misuse.

Incentivized

• I believe that the reduction in requests for lost access passwords has been considerably reduced by 20%.
• There has been an increase in the productivity of each user who has used Entra ID; what these types of programs do is act as a motivator for users so that they can work more comfortably and avoid procrastinating.

Incentivized