CyberArk Privileged Account Security vs The Okta Identity Cloud

• Automatically discover new servers on the network and take control of the local admin password by vaulting it and ensuring nobody knows the password. A different password on every server.
• Automatically roll the password in a configurable manner - after each use, after a certain period of time, etc.
• Track and govern sensitive account usage by ensuring only properly authorized users can access the vault and obtain the credentials and then monitor usage.

Read full review

• Okta handles lockouts and password changes very seamlessly. Most end users no longer have to contact our IT department to reset their password or unlock their account.
• Okta does MFA (Multi-Factor Authentication) very well with the use of their own app, Okta Verify. We utilize this for VPN connections and having MFA or 2FA has strengthened the security of our internal network.
• Okta's administration GUI is easy to use, and easy to set up. Adding applications to the organization is easy and requires very little work to deploy.
• Users can utilize Okta to store passwords securely and safe on their own account. They also can one click login to personal sites if they use Okta to store their password.
• Okta's support system is very knowledgeable and quick to respond to issues. We've had a few cases that were resolved within hours and that helps immensely when working with end users.

Read full review

• GUI - right now everything is on one page/dashboard. Some level of folder/Safe type view would be great
• More options when storing passwords - especially for network based passwords
• Better integrations with vendors like Cisco so that admins dont need to really get the password from the vault (think Last Pass type add on)

Read full review

• Session cookies have been frustrating. Rather than having an expiration date, they are activity based. Some applications will reject assertions is the Okta session is too old, so having a perpetual cookie messes things up. The option to change this is something that is desired.
• Connections to Active Directory are excellent, but there is little control over syncing. It’s either manual or every hour. Change based syncing would help simplify things.

Read full review

• Decreased the probability of an external cyber attack to privileged accounts..
• Management can control privileged account life cycle management more effectively
• Recording privileged sessions allows our organization to play back exactly the point of a breach or malicious behavior
• Automated system to manage and verify passwords, as privileged accounts are constantly created and deleted
• Automatic PWD change functionality will substantially decrease probability of PWD theft or misuse.

Read full review

• We have streamlined so many processes and reduced the time to complete many tasks for IT.
• We have automated many tasks to remove the issue with human error.
• We have opened up a ton of functionality with the application integrations that are available.
• The feature sets for Okta allow for more creative and diverse solutions to existing issues.
• User experience has benefited greatly from the Single Sign On experience.

Read full review