CyberArk Workforce Identity vs. HID DigitalPersona vs. Okta

Centrify is a great solution for anyone looking to start using Office 365. It is also a great solution for anyone wanting to provide their users with an SSO solution using OAUTH, Federation, or SAML for any hosted service. If you are looking to use Centrify for MDM but you aren't using a hosted/hybrid email solution such as Office 365, there are better on-premise options that should be explored.

Incentivized

During the onboarding process, remote workers can enroll their fingerprints or create secure PINs. This eliminates the need for complicated passwords and enables them to safely access company resources and critical apps from remote locations. HID DigitalPersona's robust authentication techniques and access control features can assist you in adhering to data security laws.

Incentivized

The cloud-first medium through large enterprises which use multiple technology systems should choose Okta as their best solution because it provides optimal performance. Okta's main advantage exists in its extensive Integration Network, which enables IT departments to implement SSO together with automated lifecycle management across multiple third-party SaaS applications such as Slack and Salesforce and AWS. For fast-growing companies that need to deploy systems quickly while providing users with platform-independent access, this solution serves as their perfect "identity glue."

Okta licensing to small businesses with basic access needs which require access to three applications should use a different product because their low-cost requirements will exceed their expected benefits from the product. The Okta Access Gateway creates operational difficulties for businesses that depend on legacy systems or have extensive "on-premise only" network requirements

Incentivized

• User provisioning is accurate, effective, and fully customizable.
• Custom configuration of applications for SSO and provisioning is easy using fully customizable scripts to address your exact need.
• The user interface is clean and easy to navigate.
• Support is helpful and prompt.

Incentivized

• Speeding up the login process with fingerprint in PIN rather than having to remember a long password. Our IT department has seen a huge decrease in the amount of account lockout and forgot password calls.
• It is highly customizable to meet the needs of remote or on-premises workers. It is all configurable through group policy, so it is very easy to set specific requirements on certain groups.
• Setup was quick and the administration guides are very easy to follow if you need to go back in and adjust things.

Incentivized

• Centralized control of enterprise passwords
• Extensive customization of acceptable password criteria
• One system for Identity and Access Management to learn
• Scalable throughout the university for all central services
• Uniform login experience for students, faculty, and staff
• Single point of response to address termination of access
• Ability to use FastPass for lower priority systems
• Excellent support of multi-factor requirements

Incentivized

• Occasionally, I get logged out of Gmail, sometimes in the middle of an email. I'm not sure why it happens, but I think it has something to do with timing out. Which is strange because I'm on email all day. Not sure why.

Incentivized

• I find that sometimes I have had to delete a users fingerprints and re-add them. There must be something going on where the software believes that the user has changed their fingerprints.
• I have on occasion come across a person where the reader was unable to create fingerprints for that user. It would be interesting to see if the sensitivity of the 4500 reader could be improved on.
• I find that using the DigitalPersona software makes the users ultimately forget their passwords. Maybe every once in a while the software could require the user to type in their Windows password to help them remember it.

Incentivized

• I do have to reset my password quite frequently. However, I don't think there is really a way to improve this, as it's a good security measure.
• It makes me re-sign in a couple of times a day, sometimes if I haven't used my laptop for a couple of hours, and sometimes just randomly throughout the day.
• It doesn't remember my devices, either my laptop or phone. so it always calls that out.

Incentivized

Centrify is central to creating efficiency and safety for our clients and internally. To remove it would cause a massive disturbance in the lives of our employees and our clients.

Incentivized

It is wonderful for multifactor authentication and gives us many options for what we use to authenticate. All of our users use it and it is engrained into our group policies and people would be very disappointed if it went away.

Incentivized

Okta has a passion to provide secure and scalable identity solution. Their passion has come across as advocacy in a way that has deepened my knowledge of the field of authentication. I took identity for granted before but after seeing features such as external authentication I know that Okta can enable my business to reach new heights

I think there are still fundamental enhancements needed to be added to the management consoles and I think there ought to be a Centralized, Windows Based "Thick" Management Application instead of individual utilities which vary from MMCs, Scripts, Wizards, etc.

Incentivized

Some of its features are great and some are slightly complex and not easy without vendor support.

Incentivized

The Okta Identity Cloud advertises 4 9's of reliability and I would go as far to say that it may even do better than that. As a true Global organization that operates in just about every region of the world, we have yet to have an issue with The Okta Identity Cloud that has impacted our business operations.

Incentivized

From my perspective, for the things that my group uses it for, Okta is very fast. It is as least as fast as the local password database methods that it replaces on our campus enterprise services. I do not believe that it slows anything down at all. In fact, not having to think too much about the login, because they all look the same, probably speeds things up somewhat.

Incentivized

The support staff thus far has been very helpful. At times I feel they are driving the process forward without my intervention or constant reminder, which is nice to have in a company for a change. Most support seems to be a hassle but so far Centrify appears to treat your project as their own project.

Incentivized

Extremely poor; I've never encountered such. Professional Services completely dropped us for months. Crossmatch tech support seems like it has 3 techs tops! No response to emails, calls, the absolute worst! I will never recommend DP to anyone.

Incentivized

We've had a few support cases over the years and every case has been handled by the Okta support team beautifully. We received clear answers to questions we had regarding setup and even were provided simple to follow guides on how to setup their product to use with custom applications.

Incentivized

Could use tools to audit license usage at a more granular level as to allow an administrator to free up licenses from users whom seldom use their biometrics to login.

Incentivized

Centrify offered us more for our money by being more than just an SSO platform. There were several other features included such as MDM and MFA. This started other initiatives for us and felt the other solutions we evaluated would not have been able to provide.

Incentivized

We have used One Identity for software tokens. The Defender software tokens were originally included with our bundle and work pretty well for integration into the AnyConnect VPN client with Cisco. All that said, we use the two products for different applications and DP does what it does very well.

Incentivized

Okta is far superior in terms of integrations, user interface, automation, and connectivity. Additionally, Okta offers better support and availability, and a more robust solution across every capacity Entra competes in. Okta simply works, whereas Microsoft Entra has a large overhead that is difficult to use when configuring things.

Incentivized

Being a cloud native application, The Okta Identity Cloud is extremely scalable and easy to setup. By integrating into existing directories and applications via standard techniques and protocols, it is very easy to both initially setup and add additional users as required. Once all the necessary integrations are setup, it's a simple rinse and repeat process to onboard additional users (which can be automated with imports as well)

Incentivized

• CyberArk Workforce Identity provides secure access to on-premises and cloud applications. The platform is highly scalable and works well for companies of any size.
• I can classify and label data. Also keep track of activity in shared applications and data, to know exactly who accesses each of the files.

Incentivized

• I'm happy to say I'm not involved in budgeting or finance, but the financial benefits are easy to state: Less helpdesk time - helpdesk staff don't have to spend time resetting people's passwords.
• Users don't have to wait for Helpdesk to get around to helping them log in.

Incentivized

• Generally saves 1 hour for the various teams, effectively logging in to every application as Okta provides SSO.
• Password management is easier and owned by the user with multiple timely reminders.
• Saved time due to role-wise access creation with only limited application to various team members.

Incentivized