CyberArk Workforce Identity vs. ManageEngine ADManager Plus

Centrify Identity Service is well suited for nearly any organization, especially ones utilizing Active Directory for user management. It is especially well suited for organizations looking to reduce internal resource use, because it's easy to maintain and manage. Its features also allow you to free up resources previously dedicated to the provisioning and deprovisioning of Office 365/Salesforce users (as well as other applications).

Incentivized

The interface has really improved and modernized over the years. It integrates perfectly with Active Directory and can do just about anything you can imagine. It's speedy, too—large tasks don't take long at all. I've used this product for many, many years (over a decade) and have rarely needed support, but when I have reached out for assistance, they've been helpful. The price is fantastic for what you get. It can seem like a one-trick pony at first, but the more you use it, the more you realize what else you can do with it. ADManager Plus is chock-full of tools that you'd think Microsoft would include out of the box, but after 25+ years of Active Directory, it's clear they have no interest in doing so. ADManager Plus fills all the gaps left by Microsoft. Simple mass imports with automatic OU assignments, mass changes to existing accounts, etc. Some of this can be done through PowerShell, sure, but this makes it easy.

Incentivized

• Single Sign-on Integration is easy and complete configuration is UI driven with lots of help tips
• RESTFul APIs for Multi-factor Authentication is easy to use and implement. Also, Centrify supports all new Security features for Multi Factor Authentication and hence you can easily select and configure different challenges based on the policies and roles for the user.
• Lots of Built-in reports available for normal day to day auditing.

Incentivized

• It is very good in the bulk user creation. With this tool, we can create a number of users in just a few minutes rather than following a long old process.
• It is good for bulk user account modification. You can select a lot of users and make changes as per the requirements.
• ManageEngine ADManager Plus is helping us a lot in the report generation of user accounts, passwords, groups, and other reports that are helping us a lot.
• This tool also helps us with mailbox creation and shared mailbox creation

Incentivized

• Occasionally, I get logged out of Gmail, sometimes in the middle of an email. I'm not sure why it happens, but I think it has something to do with timing out. Which is strange because I'm on email all day. Not sure why.

Incentivized

• They need to improve their report in terms of modification, like you will not get a lot of customization options in the report.
• In the password report if you are applying filter in Days since password last set and selecting the password change date from day 0 and again you want to select the Account status as Enable then you cannot do this.
• If you have more than 1 domain and you are trying to modify users in both domains in a single attempt, you cannot do this.

Incentivized

Centrify is central to creating efficiency and safety for our clients and internally. To remove it would cause a massive disturbance in the lives of our employees and our clients.

Incentivized

We are very satfisfied with the software and when time permits, we hope to explore additional features we are not using. It has a lot of we ae not currently using due to staffing shortages.

Incentivized

It is very easy to use and provides so many functions we can do in Active Directory that's laid out in a nice UI. The bulk management and reporting features allows us to make changes and gather information from AD infinitely more effective that if we just used AD and PowerShell commands.

Incentivized

Yes, it loads very quickly and moving between pages is very fast

Incentivized

The support staff thus far has been very helpful. At times I feel they are driving the process forward without my intervention or constant reminder, which is nice to have in a company for a change. Most support seems to be a hassle but so far Centrify appears to treat your project as their own project.

Incentivized

This is one of their lacking points... Every time I have needed support the first thing they want to see is our log files. And then it can take days or weeks to hear back from them and sometimes you have to follow up yourself or they will just close your request. If you can actually get someone on the phone or a sessions scheduled to troubleshoot, sometimes you'll be lucky enough to solve your problem. We used to have a major new hire automation running in ADManager and it broke after updating the software. We went back and forth with them for a month or so and they were not able to resolve the issue, I ended up writing a PowerShell script and scheduling it to do the work that was being done before. This also allowed me to make the automation better than ADManager allowed.

Incentivized

We started off using ADFS from Microsoft, which took most of a day to get fully functional and nearly a week to get fully optimized. The documentation was inconsistent with ADFS and there was no real support without opening a Microsoft Premier Support ticket. At the time, if you turned on Multi-Factor Authentication (MFA) for Office 365, it turned it on for everything without any granularity. Our Information Security department said that MFA was a requirement for offsite access to our email systems, but users didn't need MFA when onsite. We looked at Okta, OneLogin, and Centrify at the same time. Centrify was the only one that responded quickly and offered a free POC with support included. We tried to deploy the Okta solution on our own, but ran into issues due to some of our non-standard AD configuration. We never received a return call from OneLogin. The Centrify POC took about 15 minutes to complete for basic functionality and a couple of hours to work out the issues related to our environment. We have been very happy with the Centrify solution and went live with our POC.

Incentivized

We decided to use ManageEngine ADManager Plus due to the compatibility it had with our systems. We run a hybrid environment and ManageEngine ADManager Plus was the system that fit into our infrastructure the best. It also provides the most opportunity for growth in the way we want and does not require us to build on systems we are not yet ready to implement.

We are currently deploying on 1 department

Incentivized

• CyberArk Workforce Identity provides secure access to on-premises and cloud applications. The platform is highly scalable and works well for companies of any size.
• I can classify and label data. Also keep track of activity in shared applications and data, to know exactly who accesses each of the files.

Incentivized

• The built-in reports and queries are invaluable. You simply won't have this information in a vanilla AD environment.
• The ease that you can access the information you need about your environment is outstanding. You can access the information you need quickly so you can make better decisions on managing your business.
• The ability to easily designate techs with limited access is great. This offloads menial administration duties from your higher level techs so your not paying high level folks to do redundant tasks.

Incentivized