HID DigitalPersona vs. WSO2 Identity Server

During the onboarding process, remote workers can enroll their fingerprints or create secure PINs. This eliminates the need for complicated passwords and enables them to safely access company resources and critical apps from remote locations. HID DigitalPersona's robust authentication techniques and access control features can assist you in adhering to data security laws.

Incentivized

If your systems are using standard authentication models then it is well suited. OpenID Connect, SAML 2.0 etc are all supported.

Incentivized

• Speeding up the login process with fingerprint in PIN rather than having to remember a long password. Our IT department has seen a huge decrease in the amount of account lockout and forgot password calls.
• It is highly customizable to meet the needs of remote or on-premises workers. It is all configurable through group policy, so it is very easy to set specific requirements on certain groups.
• Setup was quick and the administration guides are very easy to follow if you need to go back in and adjust things.

Incentivized

• It's open source so is highly configurable
• WSO2 provides their own paid support which is an essential add-on
• Implementation is straightforward and conforms to all major standards

Incentivized

• I find that sometimes I have had to delete a users fingerprints and re-add them. There must be something going on where the software believes that the user has changed their fingerprints.
• I have on occasion come across a person where the reader was unable to create fingerprints for that user. It would be interesting to see if the sensitivity of the 4500 reader could be improved on.
• I find that using the DigitalPersona software makes the users ultimately forget their passwords. Maybe every once in a while the software could require the user to type in their Windows password to help them remember it.

Incentivized

• Overall, the product works well but does take time and effort to implement in highly complex environments. However, I do not believe this is unique to WS02.

Incentivized

It is wonderful for multifactor authentication and gives us many options for what we use to authenticate. All of our users use it and it is engrained into our group policies and people would be very disappointed if it went away.

Incentivized

I think there are still fundamental enhancements needed to be added to the management consoles and I think there ought to be a Centralized, Windows Based "Thick" Management Application instead of individual utilities which vary from MMCs, Scripts, Wizards, etc.

Incentivized

Extremely poor; I've never encountered such. Professional Services completely dropped us for months. Crossmatch tech support seems like it has 3 techs tops! No response to emails, calls, the absolute worst! I will never recommend DP to anyone.

Incentivized

Could use tools to audit license usage at a more granular level as to allow an administrator to free up licenses from users whom seldom use their biometrics to login.

Incentivized

We have used One Identity for software tokens. The Defender software tokens were originally included with our bundle and work pretty well for integration into the AnyConnect VPN client with Cisco. All that said, we use the two products for different applications and DP does what it does very well.

Incentivized

It's Oracle. Highly expensive and limited options

Incentivized

• I'm happy to say I'm not involved in budgeting or finance, but the financial benefits are easy to state: Less helpdesk time - helpdesk staff don't have to spend time resetting people's passwords.
• Users don't have to wait for Helpdesk to get around to helping them log in.

Incentivized

• WSO2 works well when you need specific user sign-up information and allows you to then tailor the access, for example, to the job role or area of discipline. We use this to tailor the learning offered to a user upon initial login.

Incentivized