CyberArk Workforce Identity Formerly Idaptive Next-Gen Access vs Microsoft Enterprise Mobility + Security

• Implementation of the Centrify solution for federation with Azure/Office 365 takes about 15 minutes versus the several hours it can take to stand up other solutions.
• Mobile Device Management (MDM) has granular controls for administrators yet is very easy for our users.
• I have been in the IT field for over 20 years, and the technical support at Centrify is by far the best I have ever encountered.
• Granular Multi-factor Authentication (MFA) works perfectly and is easy to set up and maintain.
• If you ever have to re-federate with Azure/Office 365, it only takes a few minutes, which is amazingly fast in comparison to other solutions we have tried in the past.
• Establishing SAML assertions is well documented and easily accomplished. If you do run into any issues, Centrify technical support will assist you.
• Centrify is excellent about proactively sending communications regarding problems and maintenance releases.
• The Centrify Identity Service solution is constantly being updated and improved to not only bring new features/innovations, but also to make sure that everything is kept safe against the latest security threats.
• As a customer, I truly get the impression that my business is important to Centrify and they try to be a good business partner.
• Centrify listens to suggestions regarding the product development. This is true for suggestions regarding the admin/user interface as well as requests for new features.

Read full review

• Azure AD Single Sign-On -- this is my favorite feature of EMS + Security. It is easy to setup and MS has simple instructions for most popular cloud services.
• InTune -- the changeover from the old InTune Client/Silverlight Portal has been painful, but once you get Win10 devices setup with InTune, management is a breeze.

Read full review

• Occasionally, I get logged out of Gmail, sometimes in the middle of an email. I'm not sure why it happens, but I think it has something to do with timing out. Which is strange because I'm on email all day. Not sure why.

Read full review

• InTune deployment via Hybrid Azure AD. The instructions seem very simple but there are lots of little areas you can get tripped up and there is little logging to see where you've gone wrong.
• Advanced Threat Protection anti-impersonation. It is WAY too sensitive. Users emailing themselves from personal accounts get their mail sent to quarantine just because the name/label of the personal account matches their Office 365 mailbox name/label? HUH???
• Licensing. Typical of Microsoft, what you're actually getting and details of licensing are confusing.

Read full review

• CyberArk Workforce Identity provides secure access to on-premises and cloud applications. The platform is highly scalable and works well for companies of any size.
• I can classify and label data. Also keep track of activity in shared applications and data, to know exactly who accesses each of the files.

Read full review

• SSO setup through Azure AD has saved IT staff countless hours of lost passwords, multiple password resets, offboarding departed staff accounts, etc.
• Anti malware/phishing policies have prevented active malware/phishing campaigns.

Read full review