TrustRadius: an HG Insights company

CyberArk Workforce Identity vs. Okta vs. PingOne from Ping Identity

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    CyberArk Workforce Identity

    Score8 out of 10
    N/ACyberArk Identity is a SaaS-delivered suite of solutions designed to simplify identity and access management in enterprises. CyberArk Identity unifies Workforce Access and Identity Management solutions in a single offering. Workforce Access capabilities include single sign-on, multi-factor authentication, session security, and credential management. Identity Management capabilities include lifecycle management, identity orchestration, and identity governance. With CyberArk Identity,…N/A

    Okta

    Score8.9 out of 10
    N/AOkta is an enterprise grade identity management service, built in the cloud. IT can manage access across any application, person or device. Whether the people are employees, partners or customers or whether the applications are in the cloud, on premises or on a mobile device, Okta helps IT become more secure and maintain compliance. The Okta service provides directory services, single sign-on, authentication, provisioning, workflow, and built in reporting. ment systems.

    $6

    per month per user

    PingOne from Ping Identity

    Score8.8 out of 10
    N/AThe PingOne Cloud Platform from Ping Identity in Denver, Colorado is an identity management and access solution (IAM) for enterprises. Features of the products include single sign-on, multi-factor authentication, user management with directory, provisioning and deprovisioning. The solution is presented as a comprehensive, standards-based platform that allows users and devices to securely access any service, application or API from any device. Designed for hybrid IT…

    $20,000

    per year

    Pricing
    CyberArk Workforce IdentityOktaPingOne from Ping Identity
    Editions & Modules
    No answers on this topic
    Starter
    $6.00
    per month per user
    Essentials
    $17.00
    per month per user
    Professional
    Inquire for pricing
    Per User Per Month
    Enterprise
    Inquire for pricing
    Per User Per Month
    Essential
    $20,000
    per year
    Plus
    $40,000
    per year
    Premium
    Contact Sales
    Offerings
    Pricing Offerings
    CyberArk Workforce IdentityOktaPingOne from Ping Identity
    Free Trial
    YesYesYes
    Free/Freemium Version
    NoNoNo
    Premium Consulting/Integration Services
    YesYesNo
    Entry-level Setup FeeNo setup feeNo setup feeNo setup fee
    Additional Details——Try PingOne for Customers for free. Sign up for a free 30-day trial of PingOne for customers.
    More Pricing Information
    Community Pulse
    CyberArk Workforce IdentityOktaPingOne from Ping Identity
    Considered Multiple Products
    Cyberark
    Chose CyberArk Workforce Identity
    We reviewed Okta and OneLogin while looking at Centrify for our ticketing solution SSO partner. When doing so we looked at it from the aspect of if we wanted to roll this out where we could see the use cases for it and initially it would be in a couple departments then branch …
    Incentivized
    Chose CyberArk Workforce Identity
    We started off using ADFS from Microsoft, which took most of a day to get fully functional and nearly a week to get fully optimized. The documentation was inconsistent with ADFS and there was no real support without opening a Microsoft Premier Support ticket. At the time, if …
    Incentivized
    Chose CyberArk Workforce Identity
    Okta has no Mac management
    Incentivized
    Chose CyberArk Workforce Identity
    OneLogin and Okta provide similar experiences, but OneLogin is less mature than Centrify. Their Mac and Windows management suites are still in a beta phase are cannot be deployed en masse to our user base. Okta is more expensive and does not have the security compliance. …
    Incentivized
    Chose CyberArk Workforce Identity
    Centrify offered us more for our money by being more than just an SSO platform. There were several other features included such as MDM and MFA. This started other initiatives for us and felt the other solutions we evaluated would not have been able to provide.
    Incentivized
    Chose CyberArk Workforce Identity
    Centrify provided both SSO support as well as Mac support; we needed both. Other products had one or the other, but not both.

    This made choosing Centrify a no-brainer as we didn't have to have a wide variety of integrations to do and vendors to manage.
    Incentivized
    Chose CyberArk Workforce Identity
    I think they are quite similar and don't have enough knowledge about one over another.
    Incentivized
    Chose CyberArk Workforce Identity
    Seemed to be the best in breed and the one with deeper Mac integration on the short roadmap. As an Apple Distinguished School, this is obviously very critical to us. Very easy to set up and it has a deep pre-canned application pool for already deployed apps. Very easy for …
    Incentivized
    Chose CyberArk Workforce Identity

    During our evaluation process, Centrify could show in the PoC that they are very flexible and open minded to our ideas. An application integration which was not part of the product catalog has been integrated for free. Furthermore the whole package compared to the …

    Incentivized
    Chose CyberArk Workforce Identity
    Centrify's pricing was much better than their competitors. They also offered a better sign-in/multi-factor experience for our users when doing pilot testing. Their product also included other features like Mobile Device Management that was a nice add-on.
    Incentivized
    Chose CyberArk Workforce Identity
    Centrify offers many more features and much better control.
    Incentivized
    Chose CyberArk Workforce Identity
    To be honest, all four products were fairly similar in much of the architecture and functionality. We found that Centrify offered a bit more in terms of user acceptance, ease of administration, reporting and MDM capabilities.
    Incentivized
    Okta
    Chose Okta
    Internal expertise was with Okta, we also considered total cost of ownership, admin overhead, and deployment/setup time.
    Incentivized
    Chose Okta
    We selected Okta since as I mentioned earlier, speed means a lot to our account. The reason behind that is because it enables us a lot faster and utilize our apps better. Do not get me wrong, PingOne is a great app, its just that the app itself does not have the processing …
    Incentivized
    Chose Okta
    We ended up going with OKTA has it had a wider breadth of services from a security perspective at the time so we felt like we were getting more bang for our buck. Not only were we able to take advatage of SSO for all of our apps but we were able to leverage the device trust …
    Incentivized
    Chose Okta
    Okta is more easier to handle than CyberArk. The webpage is more understandable.
    Incentivized
    Chose Okta
    The industry wide performance and reviews of Okta already made it stand out from the competitors. The customisable pricing model helped us to choose from a variety of models as per our needs. The depth and breadth of features and functionalities covered by Okta made it a …
    Incentivized
    Chose Okta
    Okta had competitive pricing, high ease of use, and a short time to implement. They also have a strong and active partner community which also aids in quick adaption. The technical capabilities of this space are leaning more and more toward standards shared by all, but Okta …
    Incentivized
    Chose Okta
    We evaluated Ping. We were able to secure a pricing package for Okta that aligned with our Accounting team's needs. Other services lacked features, or were too embedded in other ecosystems like Microsoft.
    Incentivized
    Chose Okta
    Okta is the best out of its competitors due to its ease of use, out of the box functionality, and opportunities for customization. It is a good company to work with and strives to be there for its customers. Administration is a breeze and the documentation is quite extensive.
    Incentivized
    Chose Okta
    I worked on Ping Identity Platform already. So Ping platform is an on-prem based solution. We needed to make sure that the servers where the application is hosted is up and running always. Patching needs to completed based on the vendor release. Ping solution needs more manual …
    Incentivized
    Chose Okta
    We briefly looked at Ping, but Okta was simply too good as a fit and they did everything to make the decision simple for us.
    Incentivized
    Chose Okta
    Siteminder---It is an on-premise application which is difficult to integrate with cloud-based applications. As Okta is a cloud application we can integrate both on-premise and cloud applications.
    Ping--It doesn't provide the applications templates which [are] provided by Okta. …
    Incentivized
    Chose Okta
    Preferred Okta's reputation as well as other internal factors (relationships) that led us to work with Okta.
    Incentivized
    Chose Okta
    Okta has the best dashboard for navigation and is very end-user friendly. Easy to navigate and configure applications and SSO and a very effective way of managing end-user issues.
    SSO-wise it is the best product in terms of end-user experience; [it's a] seamless process for the …
    Incentivized
    Chose Okta
    I selected Okta for its robustness of product as well as the clear record of security breaches, which some of its competitors do not have. Ease of use and reliability of the product are things that are unmatched by its competitors.
    Incentivized
    Chose Okta
    Okta has more robust support for Office 365 than Centrify (which we previously used), and it is easier to configure and administrate. It is cloud-based and easier to manage than Microsoft ADFS. It is similar to OneLogin and Ping but we've found the pricing and support options …
    Incentivized
    Chose Okta
    Okta single sign-on provided better functionality with a higher variety of directory integration that was important for our particular organization with multiple user directories being accessed by various departments.
    Cost was another factor for our selection as some other …
    Incentivized
    Chose Okta
    Easier to use. More standard implementation
    Incentivized
    Chose Okta
    Centrify solves several problems in our organization. First, it helps improve our security by creating a secure, easy to use user authentication service across applications that would have previously required separate login credentials. RSA- In a corporate setting I feel this …
    Incentivized
    Chose Okta
    Okta and Ping are similar but the future has been laid out for us by Okta and we believe that that is the correct path for our company and IT team to follow. We try to make sure that we are making progress that we can apply to everything we do and not limit ourselves. We feel …
    Incentivized
    Chose Okta
    We had an investment in Okta already, but we did look at Centrify. While Centrify is nice and capable, there wasn't enough reason to change solutions.
    Ping Identity
    Chose PingOne from Ping Identity
    The Ping products work. They can integrate with any application. They are significantly more reliable. The vendor is responsive and works with us. Other solutions are unreliable, the vendors are inflexible, their solutions are inflexible, and their support is inflexible. These …
    Incentivized
    Chose PingOne from Ping Identity
    PingOne from Ping Identity is the clear winner here. I can say this because the cost of their service is very worth it, and their service offers more than their competitors. In addition to that, this software is still improving daily, which only means that there is still more …
    Incentivized
    Chose PingOne from Ping Identity
    This solution is selected before my time so, not much influence ,but product allow to customized and require decent ping skills to configure the solution. Okta and Other solutions are well suited in this category with some positive and some negative capabilities. it must say …
    Incentivized
    Chose PingOne from Ping Identity
    All contenders were capable, but we had scale concerns with NetIQ's architecture. In the end, what set Ping apart from the others was their level of engagement in understanding our use cases up front during the RFP stage and how they were focused on what we needed more than …
    Incentivized
    Chose PingOne from Ping Identity
    I found both platforms compelling from an ease of use and user experience perspective. The decider for me was cost driven as I had already used Ping to drive a self-service transformation in a prior organization, and I intended to do the same at this one. Okta had issues with …
    Incentivized
    Key User Insights
    Would buy again
    No answers on this topic
    98%
    Would buy again
    129 Answers
    90%
    Would buy again
    9 Answers
    Delivers good value for the price
    No answers on this topic
    99%
    Delivers good value for the price
    103 Answers
    100%
    Delivers good value for the price
    9 Answers
    Happy with the feature set
    No answers on this topic
    98%
    Happy with the feature set
    129 Answers
    100%
    Happy with the feature set
    10 Answers
    Lived up to sales and marketing promises
    No answers on this topic
    100%
    Lived up to sales and marketing promises
    74 Answers
    100%
    Lived up to sales and marketing promises
    6 Answers
    Implementation went as expected
    No answers on this topic
    99%
    Implementation went as expected
    85 Answers
    100%
    Implementation went as expected
    7 Answers
    Features
    CyberArk Workforce IdentityOktaPingOne from Ping Identity
    Identity Management
    Comparison of Identity Management features of CyberArk Workforce Identity and Okta and PingOne from Ping Identity
    Feature
    CyberArk Workforce Identity
    9.0
    3 Ratings
    9% above category average
    Okta
    8.8
    159 Ratings
    7% above category average
    PingOne from Ping Identity
    9.1
    10 Ratings
    10% above category average
    ID-Management Access Control9.03 Ratings9.3146 Ratings9.38 Ratings
    ID Management Single-Sign On (SSO)9.02 Ratings9.4158 Ratings9.710 Ratings
    Multi-Factor Authentication9.02 Ratings9.2154 Ratings9.310 Ratings
    Password Management9.02 Ratings7.9147 Ratings10.06 Ratings
    Account Provisioning and De-provisioning9.03 Ratings8.6133 Ratings8.06 Ratings
    ID Management Workflow Automation9.03 Ratings8.4123 Ratings9.04 Ratings
    ID Risk Management9.03 Ratings8.6116 Ratings8.56 Ratings
    Best Alternatives
    CyberArk Workforce IdentityOktaPingOne from Ping Identity
    Small Businesses
    JumpCloud
    Score9.2 out of 10
    JumpCloud
    Score9.2 out of 10
    JumpCloud
    Score9.2 out of 10
    Medium-sized Companies
    OneLogin by One Identity
    Score9.4 out of 10
    OneLogin by One Identity
    Score9.4 out of 10
    OneLogin by One Identity
    Score9.4 out of 10
    Enterprises
    RSA Access Manager (Discontinued)
    Score10 out of 10
    RSA Access Manager (Discontinued)
    Score10 out of 10
    RSA Access Manager (Discontinued)
    Score10 out of 10
    All AlternativesView all alternativesView all alternativesView all alternatives
    User Ratings
    CyberArk Workforce IdentityOktaPingOne from Ping Identity
    Likelihood to Recommend
    9.0
    (43 ratings)
    8.9
    (200 ratings)
    9.0
    (11 ratings)
    Likelihood to Renew
    10.0
    (2 ratings)
    8.0
    (18 ratings)
    -
    (0 ratings)
    Usability
    -
    (0 ratings)
    9.0
    (1 ratings)
    8.6
    (4 ratings)
    Availability
    -
    (0 ratings)
    10.0
    (4 ratings)
    -
    (0 ratings)
    Performance
    -
    (0 ratings)
    9.0
    (2 ratings)
    -
    (0 ratings)
    Support Rating
    9.0
    (4 ratings)
    10.0
    (12 ratings)
    8.6
    (4 ratings)
    Online Training
    -
    (0 ratings)
    1.0
    (1 ratings)
    -
    (0 ratings)
    Product Scalability
    -
    (0 ratings)
    9.0
    (2 ratings)
    -
    (0 ratings)
    Vendor post-sale
    -
    (0 ratings)
    6.4
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    -
    (0 ratings)
    6.4
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    CyberArk Workforce IdentityOktaPingOne from Ping Identity
    Likelihood to Recommend
    Cyberark
    Centrify is a great solution for anyone looking to start using Office 365. It is also a great solution for anyone wanting to provide their users with an SSO solution using OAUTH, Federation, or SAML for any hosted service. If you are looking to use Centrify for MDM but you aren't using a hosted/hybrid email solution such as Office 365, there are better on-premise options that should be explored.
    Incentivized
    Read full review
    Okta
    Should be well-suited for a SaaS business organisation as they have a lot of internal applications and need a role-based authentication system between the various teams, improving security and audit log system to account for any breaches. It integrates well with internal applications such as Salesforce and Oracle. Best when need of SSO.
    Incentivized
    Read full review
    Ping Identity
    Really like [this] solution, it fits our requirements 100%. There are unlimited possibilities to extend the product, either by creating additional adapters or selectors. We really like the policy management level in PingFederate. It's extremely helpful when we can specify customer journey per many different requirements like user location, application type etc. As well, both StepUp and TopDown authentication flows were implemented [easily].
    Read full review
    Pros
    Cyberark
    • User provisioning is accurate, effective, and fully customizable.
    • Custom configuration of applications for SSO and provisioning is easy using fully customizable scripts to address your exact need.
    • The user interface is clean and easy to navigate.
    • Support is helpful and prompt.
    Incentivized
    Read full review
    Okta
    • Centralized control of enterprise passwords
    • Extensive customization of acceptable password criteria
    • One system for Identity and Access Management to learn
    • Scalable throughout the university for all central services
    • Uniform login experience for students, faculty, and staff
    • Single point of response to address termination of access
    • Ability to use FastPass for lower priority systems
    • Excellent support of multi-factor requirements
    Incentivized
    Read full review
    Ping Identity
    • Based on open standards, we can use as much or as little of the Ping suite as we like, depending on which other technologies we've already implemented.
    • Continuous innovation and product enhancements have ensured their products continue to meet our rapidly evolving needs.
    • Ping Identity has been an outstanding partner, starting with the RFP process and continuing to this day, years after the sale. They are focused on our success at every level of the company and are highly responsive to our needs, issues, and product suggestions.
    Read full review
    Cons
    Cyberark
    • Occasionally, I get logged out of Gmail, sometimes in the middle of an email. I'm not sure why it happens, but I think it has something to do with timing out. Which is strange because I'm on email all day. Not sure why.
    Incentivized
    Read full review
    Okta
    • I do have to reset my password quite frequently. However, I don't think there is really a way to improve this, as it's a good security measure.
    • It makes me re-sign in a couple of times a day, sometimes if I haven't used my laptop for a couple of hours, and sometimes just randomly throughout the day.
    • It doesn't remember my devices, either my laptop or phone. so it always calls that out.
    Incentivized
    Read full review
    Ping Identity
    • PingID has some limitations when used as the MFA for some LDAP implementations. You need to use it as a RADIUS password credential validator to solve for some of those limitations, which in turn causes challenges with our ephemeral cloud deployment model of PingFederate.
    • The basic logon services within PingFederate are adequate and well-documented, but simple features like disabling user input after entering credentials would help with some of the additional customization required to support real world failure modes.
    • PingCentral authorization models and configuration remain unpolished compared to other products, and now the features seem to be shifting toward onboarding PingAccess and PingDirectory over improving baseline administrative functionality/operations.
    Incentivized
    Read full review
    Likelihood to Renew
    Cyberark
    Centrify is central to creating efficiency and safety for our clients and internally. To remove it would cause a massive disturbance in the lives of our employees and our clients.
    Incentivized
    Read full review
    Okta
    Okta has a passion to provide secure and scalable identity solution. Their passion has come across as advocacy in a way that has deepened my knowledge of the field of authentication. I took identity for granted before but after seeing features such as external authentication I know that Okta can enable my business to reach new heights
    Read full review
    Ping Identity
    No answers on this topic
    Usability
    Cyberark
    No answers on this topic
    Okta
    Some of its features are great and some are slightly complex and not easy without vendor support.
    Incentivized
    Read full review
    Ping Identity
    Ping's solutions are a powerful tool, but with that comes the need for skills to operate them. It's not easy for inexperienced engineers to run. From the end-user perspective, it is fully customizable and can be as seamless as you need.
    Incentivized
    Read full review
    Reliability and Availability
    Cyberark
    No answers on this topic
    Okta
    The Okta Identity Cloud advertises 4 9's of reliability and I would go as far to say that it may even do better than that. As a true Global organization that operates in just about every region of the world, we have yet to have an issue with The Okta Identity Cloud that has impacted our business operations.
    Incentivized
    Read full review
    Ping Identity
    No answers on this topic
    Performance
    Cyberark
    No answers on this topic
    Okta
    From my perspective, for the things that my group uses it for, Okta is very fast. It is as least as fast as the local password database methods that it replaces on our campus enterprise services. I do not believe that it slows anything down at all. In fact, not having to think too much about the login, because they all look the same, probably speeds things up somewhat.
    Incentivized
    Read full review
    Ping Identity
    No answers on this topic
    Support Rating
    Cyberark
    The support staff thus far has been very helpful. At times I feel they are driving the process forward without my intervention or constant reminder, which is nice to have in a company for a change. Most support seems to be a hassle but so far Centrify appears to treat your project as their own project.
    Incentivized
    Read full review
    Okta
    We've had a few support cases over the years and every case has been handled by the Okta support team beautifully. We received clear answers to questions we had regarding setup and even were provided simple to follow guides on how to setup their product to use with custom applications.
    Incentivized
    Read full review
    Ping Identity
    Really good customer support, we always receive what we need. Sometimes instead of [a] solution (which have to be developed) we are receiving [a] work around, which is helping ad hoc. Then after time [needed for support to] develop fix we are receiving full fix or we [are] just waiting for new version of the product where our "bugs" are fixed.
    Read full review
    Alternatives Considered
    Cyberark
    Centrify offered us more for our money by being more than just an SSO platform. There were several other features included such as MDM and MFA. This started other initiatives for us and felt the other solutions we evaluated would not have been able to provide.
    Incentivized
    Read full review
    Okta
    Okta is far superior in terms of integrations, user interface, automation, and connectivity. Additionally, Okta offers better support and availability, and a more robust solution across every capacity Entra competes in. Okta simply works, whereas Microsoft Entra has a large overhead that is difficult to use when configuring things.
    Incentivized
    Read full review
    Ping Identity
    PingOne from Ping Identity is the clear winner here. I can say this because the cost of their service is very worth it, and their service offers more than their competitors. In addition to that, this software is still improving daily, which only means that there is still more to come, and their Developers are giving their fair share of service to keep their software the best.
    Incentivized
    Read full review
    Scalability
    Cyberark
    No answers on this topic
    Okta
    Being a cloud native application, The Okta Identity Cloud is extremely scalable and easy to setup. By integrating into existing directories and applications via standard techniques and protocols, it is very easy to both initially setup and add additional users as required. Once all the necessary integrations are setup, it's a simple rinse and repeat process to onboard additional users (which can be automated with imports as well)
    Incentivized
    Read full review
    Ping Identity
    No answers on this topic
    Return on Investment
    Cyberark
    • CyberArk Workforce Identity provides secure access to on-premises and cloud applications. The platform is highly scalable and works well for companies of any size.
    • I can classify and label data. Also keep track of activity in shared applications and data, to know exactly who accesses each of the files.
    Incentivized
    Read full review
    Okta
    • Increased user productivity - not fighting with IT all the time!
    • Though there could be a bit more on the 'lost/broken phone' front, the self-service eliminates time that would typically be spent waiting for IT support/admins.
    • An Okta account under a certain domain allows proper access from the get-go, and under certain apps (such as our HRIS), adding members is easy.
    • Improved security - deactivating Okta removes all account access across multiple platforms instantly for leavers.
    Incentivized
    Read full review
    Ping Identity
    • The TCO for our deployment of Ping will be over a million dollars/year less to operate compared to the systems it replaces.
    • Moving the organization to federated protocols allows greater flexibility in our cloud migration strategy and zero trust designs.
    • Operating with federated protocols internally facilitates M&A and divestiture activities.
    Incentivized
    Read full review
    ScreenShots

    CyberArk Workforce Identity Screenshots

    Screenshot of Admin PortalScreenshot of Identity LoginScreenshot of SWS PortalScreenshot of UBA PortalScreenshot of User Portal