Microsoft Entra External ID vs. One Identity Identity Manager

It is not easy to calculate the actual ROI due to the difficult quantification of all factors, but it certainly contributed a lot in protecting, monitoring and controlling access to our system. It also made it much easier to detect vulnerable external users with simple and "easy to hack" passwords they use on multiple apps.

Well-suited: Companies with .NET or windows technology as a core. Companies with AD as main Directory Services Less appropriate: Companies with lot UNIX boxes Companies looking to support applications with many different connectors.

Incentivized

• One of the things that Microsoft Entra External ID does really well is creating user logins, accounts and profile. It is very easy to create them, manage them and delete them. It is fast and reliant.
• Limit access or authorization feature. We can allow different levels of authorization and access. So that not all the employees would have access to all the data. Only some relaible employees would have access and power to change anything.
• Mutli factor authentication feature is also a really good feature to secure data. Even overseas vendors need MFS to login which gives double protection to our data.

Incentivized

• Audit Trace History: Out of the box enables important field to trace and give you flexibility to expand them thru configuration settings.
• Provisioning to Active Directory: Synchronization Editor gives you flexibility to define what and when needs to be on sync.
• Web Portal: Latest version is more user friendly and support mobile devices.

Incentivized

• Troubleshooting diagnostic logs effectively requires VS Code
• Group and role management requires additional effort
• The programming model (XML) could use some developer experience love

Incentivized

• Web Designer: Hard to implement a new form from scratch.
• Rest API: Make more methods available.
• Connector: More connectors required like SNOW, Workday,etc.

Incentivized

I find it easy to use. The usability is great. Every department uses it for different purposes. Everyone access information relevant to them. Since we've started to use this we have seen less security incidents.

Incentivized

I really enjoy how simple it is to connect this Active Directory with other Microsoft Products to collaborate with colleagues and clients.

Incentivized

Selected due windows base technology, easy to deploy and AD connector.

Incentivized

• Having monthly active users billing was cost-effective.
• Helped with the IT support that was already managing the Azure platform of the company; this helped to manage the costs better and optimize them.

Incentivized

• Positive impact because we now disable users immediately from the authoritative source.
• Positive impact due our integration with EPIC.

Incentivized