CyberArk Privileged Access Management vs. Okta

The system is great for enterprise or larger IT departments or teams where temporary or full access may be given using privileged IDs. Requirements for needing local admin access is also eliminated which can help with specific Windows workstation related tasks. It can be very useful when working with remote teams or contractors who may need temporary access to a system when required.

Incentivized

We have been extremely pleased with how Okta has increased our security posture. We had an immediate need to implement MFA for our organization. We have over 30 companies under our umbrella and we were able to implement Okta in a short time with relative ease. As you can imagine, having that many companies offers unique challenges because each company isn't a carbon copy of the others. Okta offered us the granularity needed to tailor the implementation for all of our lines of business. We have a relatively small IT Department for the number of companies/employees we have. Despite the limited resources in IT, we are able to get Okta going quickly and have been very pleased with the software.

Incentivized

• Automatically discover new servers on the network and take control of the local admin password by vaulting it and ensuring nobody knows the password. A different password on every server.
• Automatically roll the password in a configurable manner - after each use, after a certain period of time, etc.
• Track and govern sensitive account usage by ensuring only properly authorized users can access the vault and obtain the credentials and then monitor usage.

Incentivized

• RBAC is simple, straight forward and easy to manage
• Integrations of Social Login are simple to configure and the Auth0 documentation shows step by step how to configure it
• Rules/Hooks provide customization to the Auth0 flow, making it a great solution to define how we allow our users to login into our applications

Incentivized

• GUI - right now everything is on one page/dashboard. Some level of folder/Safe type view would be great
• More options when storing passwords - especially for network based passwords
• Better integrations with vendors like Cisco so that admins dont need to really get the password from the vault (think Last Pass type add on)

Incentivized

• The user interface of Okta is basic and needs improvement. There's some learning curve for new users.
• One time integration effort is high for the initial setup. Took us around 3 weeks.
• Okta times out pretty quick making us login multiple times in the day.

Incentivized

Okta has a passion to provide secure and scalable identity solution. Their passion has come across as advocacy in a way that has deepened my knowledge of the field of authentication. I took identity for granted before but after seeing features such as external authentication I know that Okta can enable my business to reach new heights

Some of its features are great and some are slightly complex and not easy without vendor support.

Incentivized

The Okta Identity Cloud advertises 4 9's of reliability and I would go as far to say that it may even do better than that. As a true Global organization that operates in just about every region of the world, we have yet to have an issue with The Okta Identity Cloud that has impacted our business operations.

Incentivized

The Okta Identity Cloud performance is very good and there is never any reports from the user community or from the IT administrative team of slow response or sluggishness. In addition, integrations with other systems does not slow them down and everything works seamlessly. The only other feedback is that once in a while there is a slight delay in receiving a second factor on a mobile device but this is likely due to a phone endpoint issue and not the The Okta Identity Cloud service.

Incentivized

Customer support and technical support have always been great when we require assistance. Especially when we come across issues that we're not familiar with.

Incentivized

There isn't a clear method to get a hold of support when trouble arises if you're on their standard plan. You can file a support ticket and they generally are responsive. I've often been able to find similar questions to the questions I've had when it comes to support in their ticket history, however, some have been closed without a satisfactory conclusion for the original poster.

Incentivized

It is known as one of the safest products in the market. It has good support and is also available as on-premise. You can run it virtually on VMWare (and probably on other hypervisors as well). You can have a second instance on bare metal and that makes it a very safe system.

Incentivized

With respective to user interface and license cost, we thought The Okta Identity Cloud was better than other tools for use. Their customization of license was another reason for us to go with The Okta Identity Cloud over other tools.

Incentivized

Being a cloud native application, The Okta Identity Cloud is extremely scalable and easy to setup. By integrating into existing directories and applications via standard techniques and protocols, it is very easy to both initially setup and add additional users as required. Once all the necessary integrations are setup, it's a simple rinse and repeat process to onboard additional users (which can be automated with imports as well)

Incentivized

• Decreased the probability of an external cyber attack to privileged accounts..
• Management can control privileged account life cycle management more effectively
• Recording privileged sessions allows our organization to play back exactly the point of a breach or malicious behavior
• Automated system to manage and verify passwords, as privileged accounts are constantly created and deleted
• Automatic PWD change functionality will substantially decrease probability of PWD theft or misuse.

Incentivized

• Customer experience has been a big win for us. Extremely minimal issues reported.
• We did not have a PAM in place at all until The Okta Identity Cloud
• Relatively easy to deploy. No major downtimes to deploy was a nice bonus.