Oracle Enterprise Single Sign-On Suite Plus vs. Symantec VIP

Good if you want a temporary solution to too many passwords.

Incentivized

Symantec VIP is best suited in environments where you need two factor authentication. As explained before, Symantec VIP is super easy to use and manage for our users across our entire organization. If you have your users using a virtual private network, Symantec VIP is the way to go; no doubt about it!

Incentivized

• Flexible to work with most web sites and thick clients
• Avoids users having to type their passwords repeatedly
• Fairly performant

Incentivized

• The UI is intuitive and simple to use and navigate. When generating a secure token to be used for VPN access, all the navigation is clear and intuitive. There is no confusion when our users use Symantec VIP.
• Every generated token expires after 30-60 seconds, thus providing an extra layer of security and reducing any risk of someone re-using a token or pin to gain unauthorized access into our system.
• The app is super responsive and has no lag and little to no latency. Everything loads quickly and is super speedy.
• Our department can opt for a 6 digit code which we can use while logging in on different sites and SSO access can be easily set up and achieved with this tool.

Incentivized

• This tool is essentially a hack, making the user experience pretty weak. For example, we use it in an application which has a box to type your password. Every time you enter some data, ESSO steals the focus and types your password into the box, even if you aren't about to submit the form requiring the password.
• This tool creates a 2nd CN in the directory and this broke some of our applications which were only expecting a single CN per user in the directory. Why can't it use a traditional database instead?
• This tool caused performance issues with Putty. It would peg our CPUs at 100% if the user had Putty running. It took a very long time to resolve the issue.

Incentivized

• when setting a token to a phone call, the phone calls often take a minute + to call the user.
• When Symantec's VIP app is removed or reinstalled on a phone, the credential ID will change, and that dictates a call to the helpdesk to allow the user access.
• Temporary security codes while handy, must be set to expire immediately to stay secure.

Incentivized

Great vendor support, along with a great product solution

Incentivized

There's no substitute for properly developed applications that delegate authentication to an external system like Active Directory or a cloud identity provider. That way, the issues with screen scraping and constantly-breaking integration are solved permanently.

Incentivized

The Symantec VIP solution has a more easy implementation process, which makes implementation faster. The Prove Of Concept of the solution presents the best results compared with Duo. The final price charged was cheaper. Consultants that participate in the process get show to us in a more clear manner all scenarios where we can use the Symantec VIP.

Incentivized

• We spent a lot of time implementing it on different applications. However, because it uses screen scraping, every time our apps upgraded, it broke the integration with ESSO, so we had to keep fixing the integration. After a few years, we have stopped integrating new apps with it due to this headache.

Incentivized

• It was as easy to implement and manage as promised, so that definitely saved us time and frustration.
• It allowed us to improve on our existing PHI and PII security measures.
• Allowing secure access from remote locations, especially smart phones, was a huge plus.

Incentivized