CyberArk Workforce Identity vs. HID DigitalPersona

Centrify is a great solution for anyone looking to start using Office 365. It is also a great solution for anyone wanting to provide their users with an SSO solution using OAUTH, Federation, or SAML for any hosted service. If you are looking to use Centrify for MDM but you aren't using a hosted/hybrid email solution such as Office 365, there are better on-premise options that should be explored.

Incentivized

We are in the medical profession, so we need a highly secure system for usage. HID is really helpful if an organization is working with or dealing with very sensitive and confidential data. It has great authentication methods, such as biometric login and smart cards, and one can choose OTP as well for authentication.

Incentivized

• User provisioning is accurate, effective, and fully customizable.
• Custom configuration of applications for SSO and provisioning is easy using fully customizable scripts to address your exact need.
• The user interface is clean and easy to navigate.
• Support is helpful and prompt.

Incentivized

• Speeding up the login process with fingerprint in PIN rather than having to remember a long password. Our IT department has seen a huge decrease in the amount of account lockout and forgot password calls.
• It is highly customizable to meet the needs of remote or on-premises workers. It is all configurable through group policy, so it is very easy to set specific requirements on certain groups.
• Setup was quick and the administration guides are very easy to follow if you need to go back in and adjust things.

Incentivized

• Occasionally, I get logged out of Gmail, sometimes in the middle of an email. I'm not sure why it happens, but I think it has something to do with timing out. Which is strange because I'm on email all day. Not sure why.

Incentivized

• I find that sometimes I have had to delete a users fingerprints and re-add them. There must be something going on where the software believes that the user has changed their fingerprints.
• I have on occasion come across a person where the reader was unable to create fingerprints for that user. It would be interesting to see if the sensitivity of the 4500 reader could be improved on.
• I find that using the DigitalPersona software makes the users ultimately forget their passwords. Maybe every once in a while the software could require the user to type in their Windows password to help them remember it.

Incentivized

Centrify is central to creating efficiency and safety for our clients and internally. To remove it would cause a massive disturbance in the lives of our employees and our clients.

Incentivized

It is wonderful for multifactor authentication and gives us many options for what we use to authenticate. All of our users use it and it is engrained into our group policies and people would be very disappointed if it went away.

Incentivized

I think there are still fundamental enhancements needed to be added to the management consoles and I think there ought to be a Centralized, Windows Based "Thick" Management Application instead of individual utilities which vary from MMCs, Scripts, Wizards, etc.

Incentivized

The support staff thus far has been very helpful. At times I feel they are driving the process forward without my intervention or constant reminder, which is nice to have in a company for a change. Most support seems to be a hassle but so far Centrify appears to treat your project as their own project.

Incentivized

Extremely poor; I've never encountered such. Professional Services completely dropped us for months. Crossmatch tech support seems like it has 3 techs tops! No response to emails, calls, the absolute worst! I will never recommend DP to anyone.

Incentivized

Could use tools to audit license usage at a more granular level as to allow an administrator to free up licenses from users whom seldom use their biometrics to login.

Incentivized

Centrify offered us more for our money by being more than just an SSO platform. There were several other features included such as MDM and MFA. This started other initiatives for us and felt the other solutions we evaluated would not have been able to provide.

Incentivized

We have used One Identity for software tokens. The Defender software tokens were originally included with our bundle and work pretty well for integration into the AnyConnect VPN client with Cisco. All that said, we use the two products for different applications and DP does what it does very well.

Incentivized

• CyberArk Workforce Identity provides secure access to on-premises and cloud applications. The platform is highly scalable and works well for companies of any size.
• I can classify and label data. Also keep track of activity in shared applications and data, to know exactly who accesses each of the files.

Incentivized

• I'm happy to say I'm not involved in budgeting or finance, but the financial benefits are easy to state: Less helpdesk time - helpdesk staff don't have to spend time resetting people's passwords.
• Users don't have to wait for Helpdesk to get around to helping them log in.

Incentivized