Forefront Identity Manager (Discontinued) vs. Microsoft Entra ID

I think that MIM is great for compliance since it reduces the number of logins that are required by users. Most offices have post-it notes with logins floating around because there are so many to remember or there are "shared" logins. This reduces the number of logins to 1 and you can easily revoke access in one fell swoop. This prevents gaps and holes with terminations and updates to select groups are super simple.

Incentivized

Overall, the Microsoft Entra ID platform is best utilized by people looking to have one platform that manages all interactions between other platforms. The Microsoft Entra ID platform allows for a seemless SSO integration, and can also integrate with Intune for MDM. Additionally, and probably the most easy to understand integration, is the integration with Active Directory, and controls associated with that.

Incentivized

• Authentication
• Security
• Identity Management

Incentivized

• Application integration is really good for single sign-on and managing identity overall. The correlation with Active Directory on-prem is really good, so we can manage it in a single place. It's easy to manage the users and integrate other Microsoft products. It is the base of everything else.

Incentivized

• For Windows Server 2008 R2 Servers is a great tool to set a codeless provisioning over new objects.
• Can easily integrate with Active Directory and Exchange Servers, improving the identity sync between the final user and the lifecycle management.
• Improvements in the areas of performance, simplified deployment easing the troubleshooting tasks, better documentation knowledge base, and more language support.
• The codeless provisioning provided in FIM can sustain a variety from high demand to mid-size scenarios for account lifecycle management.

Incentivized

• I'm not quite sure what they could do to improve, but I guess they can make it more user-friendly. It's very directed at admin staff, and perhaps there could be some better self-service features so that the admins don't have to do everything. We can let the users do some more of the work. Perhaps that'd be a good one.

Incentivized

MSFT Entra ID has been essential for managing our geographically dispersed team. We're confident that it will scale with us as grow, and we'll be able to take advantage of additional security and ID management features as they become necessary. Being able to centrally manage our user access from anywhere with a small support team is such a relief.

Incentivized

Because there are things you can improve somewhere. Sometimes you set up something that the Microsoft Manager doesn't work with. It could be a security boundary. And then let me say the basic security boundary is not set up as we would like, though. I think it's a better approach to set it up at a different level to be highly secure, and then we can change it whenever we need it because not many people are aware of some of the functionality. A user can create a security group and create the Microsoft Entra ID. Guests can invite guests in the beginning, which is extremely hard to track later, especially if we have pre-tier and we do not send the diagnostics data anywhere else. But within the enterprise environment, it's quite okay because most companies don't go with the security defaults because we do have a premium license. So probably, I hope we are sending data somewhere else. This is why nine. Maybe information about new changes or new functionality that are coming could be better. Because when we have to go to the Microsoft admin portal to get the message information, which is extremely hard because most admins don't do that. And there are lots of notifications. So going through them and identifying the risk and overall functionality, especially the new ones, is extremely hard.

Incentivized

There has been a handful of outages but they have been either minimal or rarely severe

Incentivized

I could probably rate this a 10 but I'm always conservative on giving out perfect scored bt performance has not been a problem for us using Entra ID.

Incentivized

I have not needed to engage support for anything at this time. I have been able to find the answers either online or in a knowledgebase. I tried to skip the question but it would not let me, so I rated a 9 based on other interactions with Microsoft support I have had

Incentivized

Most training was internally produced

Incentivized

Make sure you use a good partner. Our implementation was a bit longer and more problematic than we expected. Our partner got it done, but, in my opinion, some of their inexperience and staffing issues were evident.

Incentivized

It is Microsoft. We are a Microsoft shop, primarily. It integrates deeply with Active Directory making it good for Microsoft Active Directory shops.

Incentivized

We've done stuff with Okta for Identity and Duo. Those would probably be the two big ones that I would say that people would recognize and stuff. There's some other smaller players we've talked to, but those are the two big ones that we play with. We're still using it. So, because it was integrated into everything we've already done, it just made it almost indispensable.

Incentivized

The features are getting addresses per requirements and their value for Money. The proposed ROI and actual ROI build confidence.

Scalability is pretty trival for Entra ID. It's not difficult to manage a few or many accounts.

Incentivized

Microsoft Professional Services' technical knowledge is appreciable as consultants design the solution as per customer requirements. Mapping of features per user specifications and assisting Customer IT engineers to implement so they can manage and administer the services.

• We see a positive impact simply in the time savings alone. Chasing accounts around is time-consuming and prone to error.
• The cost to us is negligible to the value it provides.

Incentivized

• So I would say all of that, especially when we look at deploying our Federation, or I would say our SSO stuff now, helps out tremendously with that. When we deploy applications to specific users, we can control that. That's a great option as well. So I would say we got a good ROI on that.

Incentivized