CyberArk Privileged Access Management vs. WSO2 Identity Server

The system is great for enterprise or larger IT departments or teams where temporary or full access may be given using privileged IDs. Requirements for needing local admin access is also eliminated which can help with specific Windows workstation related tasks. It can be very useful when working with remote teams or contractors who may need temporary access to a system when required.

Incentivized

If your systems are using standard authentication models then it is well suited. OpenID Connect, SAML 2.0 etc are all supported.

Incentivized

• Managing local administrator accounts for Windows Servers
• Managing local root accounts for Unix Servers
• Managing service accounts for Windows Servers
• Managing IIS Application pool passwords for Windows web servers.

Incentivized

• It's open source so is highly configurable
• WSO2 provides their own paid support which is an essential add-on
• Implementation is straightforward and conforms to all major standards

Incentivized

• GUI - right now everything is on one page/dashboard. Some level of folder/Safe type view would be great
• More options when storing passwords - especially for network based passwords
• Better integrations with vendors like Cisco so that admins dont need to really get the password from the vault (think Last Pass type add on)

Incentivized

• Overall, the product works well but does take time and effort to implement in highly complex environments. However, I do not believe this is unique to WS02.

Incentivized

I think CyberArk is a great product and there are many different modules to incorporate. There are many great feature sets available right out of the box and you feel safer just implementing some of the basics. The more features you implement the better the product performs. There are definitely some implementation hurdles, but typically they are too difficult to figure out.

Incentivized

I've been an engineer and architect in the Identity space for many years and CyberArk is the #1 tool I've found to help me secure accounts and credentials. I've architected CyberArk and built the implementation from the ground up twice in previous roles and found it here upon my arrival at my current job. I wouldn't want to have to live without it as it helps me sleep at night

Incentivized

It is known as one of the safest products in the market. It has good support and is also available as on-premise. You can run it virtually on VMWare (and probably on other hypervisors as well). You can have a second instance on bare metal and that makes it a very safe system.

Incentivized

It's Oracle. Highly expensive and limited options

Incentivized

• A positive impact is passing SOX audits when it comes to privileged account management. Making sure we are compliant with password expiration policies and complexities.

Incentivized

• WSO2 works well when you need specific user sign-up information and allows you to then tailor the access, for example, to the job role or area of discipline. We use this to tailor the learning offered to a user upon initial login.

Incentivized