Delinea Secret Server vs. Snow Atlas

I would recommend Delinea to any organization or colleague, as I have used it to support our shared services model, as well as a dedicated model for people support to customers, for privileged access management. Delinea has provided us with effective methods for handling unnecessary login attempts to the customer infrastructure. Additionally, the connection thread is available in the audit trail for review, which is a valuable feature to have.

Incentivized

Assessing Compliance Assessing Renewal requirements

Incentivized

• Password Management: Its entire purpose, really. Secret Server stores passwords in an incredibly easy to use way. They can be organized in groups, they contain all the information about the site or system the password is used for (including URLs for websites), and even a notes field. You can set up specific policies for expirations and complexity, and Secret Server can even generate strong passwords for you. Using a password is simple, too, since you can just click a button to add it to your clipboard; you don't even have to unmask the password.
• Security: The passwords are stored encrypted in a SQL database, and the application requires an authenticated login. This could be local, but we tie it into Active Directory. Each folder of passwords has groups assigned (in our case, again, AD, but you can make them local groups) with different permission levels, so we can compartmentalize passwords. Desktop technicians don't have access to network switch passwords, etc.
• Easy Setup: It took me about an hour to get the server running, from spinning up the VM to importing our old password list. It took a little longer to organize the passwords into proper folders, and then assigning groups, but it was easy to do.
• Personal Passwords: Each user also gets a personal folder, where they can keep their own, unshared passwords. This is nice for sites or systems with individualized logins (e.g., a firewall, VPN, etc.)
• Favorites: Secret Server lets you tag passwords as "favorites" so you can easily find ones you use constantly. The search feature is nice, but this is nicer.

Incentivized

• Visibility of traditional desktop and web based applications
• Reminders when agreements and annual renewals are coming up in the next 90, 60, 30 days
• Helps us identify similar application types, where they are being used, so we can better understand the capabilities they provide businesses
• Provide usage trends over time to inform renewals and compliance
• Reclaim software that is note in active use

• Personally I would prefer an app instead of a website.
• Can be too many options. Sometimes I just want to add a secret quickly.
• Can be slow to adopt until you get used to how it works.

Incentivized

• SaaS connectors are not always kept up to date usually when Publishers make changes to their Portal API's. Appears to be little active monitoring on Flexera/Snow Atlas' side unless a customer reports an issue with the data being returned. Fixes are normally implemented as as quickly as possible, depending on whether it is considered a Bug Fix or a Feature Enhancement.
• Users - Snow on SAM - No ability to add or bulk import manually. Completely reliant on AD Discovery or Entra ID Discovery
• Users - SaaS module - No ability for bulk update of Users for things line 'Online only' or 'Qualified' user accounts. This is an issue in larger companies where you have thousands of SaaS Users being reported through connectors like Microsoft E365.
• SaaS module Dashboard does not allow for filtering of insights to a specific Publisher.
• Not all Back end SMACC functionality form Snow License Manager have been exposed to the front-end access, as Snow Atlas does not allow customer Administrators access to the back end or SQL databases.
• If you are migrating from on-prem Snow License Manager to Atlas, migration tools have not been created by Snow and will require a Project to handle your migration. Without Migration tools, we had to use a Managed Service Partner who had to manually create a lot of their own scripts to retrieve data that cannot be downloaded via reports and imported into Atlas. Any attachments documentation on Agreement or License Records has to be manually re-attached/uploaded to the relevant Agreement/License records in Atlas as the migration was performed.

Incentivized

Provides the much needed visibility to contain spend and rationalise software

My rating is purely based on the configurational activities, as feature-wise delineation has all the features that are very beneficial for customers, though the implementation is a bit more manual work, which can be reduced with a low-code platform. Along with that, we can have a better UI to have intuitiveness and can manage the platform for shared customers in a better way. Overall, it is a very good tool for PAM.

Incentivized

Atlas is easy to navigate, it looks reasonably similar to the on prem version we were using previously

Incentivized

I actually haven't had to work with support. I have spoken to a colleague of mine who has worked with support and has been pleased.

Incentivized

Front line support staff done always understand the issue you are explaining or the need to escalate to back end/higher up areas for resolutions and can often require use of the Escalate function or emailing to your Account/Customer Success Manager. That said, once an issue properly is understood, it is handled well.

Incentivized

We should have spun up a Project to manage the implementation. Snow indicated to us the ease in which Snow Atlas could be implemented, however this did not factor in that we were migrating from their on-prem product Snow License Manager hosted through a Managed Servicer Partner. For a clean installation, your implementation can be quick and likely not require a Project. If you are migrating from another products or are a company that can have lots of stakeholders, fingers in the pie, hurdles/business processes that need to be adhered to, definitely use a Project to perform your implementation.

Incentivized

There were not very many solutions that provided the entire package of taking an account from creation and deactivating it when no longer needed, as well as providing the discovery of unknown service accounts. Other solutions like RoboForm and LastPass did not offer the ability to manage your service accounts and added layers of complication to ensure security.

Incentivized

This is my 1st software license tool that I've used.

Incentivized

• It has increased our security profile within our organization
• it has made implementation of complex password policies easier to achieve
• It has assisted with the hardening of the infrastructure by automatically proecting our service accounts and rotating passwords regularly

Incentivized

• Made it a lot easier to determine annual Microsoft renewal numbers and only renew what we needed reducing costs
• Helps us identify potential software that can be rationalised reducing costs
• Helps us identify unapproved software and people aware of the the risks