Imprivata OneSign vs. Yubico YubiKeys

It's a very good tool for anyone in the industry who wants to deploy Multi Factor authentication to make their company safe and secure. It is best suited for companies where a majority of the workforce works in the field; and access to company data using internet can be a little risky. Imprivata One-sign will make the connection more secure and safe.

Incentivized

YubiKeys are incredibly effective for protecting against phishing attacks, as they require physical interaction and can't be remotely compromised. They're ideal for safeguarding high-value targets (executives, IT admins, those handling sensitive data), enhancing remote access security, and often help meet industry compliance regulations. However, the initial hardware cost may be a concern for large-scale deployments with many low-risk users. Users prone to losing small items or scenarios involving older, incompatible systems might pose logistical challenges. Nonetheless, YubiKeys remain robust when addressing phishing-based attacks and securing privileged accounts. Consider a targeted rollout balancing security gain against potential hardware costs and user needs.

Incentivized

• Allows admins to enable single sign-on to additional applications without Imprivata services. After a quick training session with Imprivata, most admins are easily able to enable additional apps.
• Works well with many device types including Windows, IGEL, Teradici and many Linux based thin clients.
• High availability and failover. Imprivata's implementation of this was one of the most well thought out and easy to implement of any solutions in our stack. It works very similar to Active Directory, but requires no real config or settings to make it happen. Add an additional appliance and the enterprise is automatically synchronized. If an appliance goes down, client software is aware and automatically switched to another appliance.

Incentivized

• Provides additional factors for authenticating against critical systems.
• Significantly reduces the chance of a successful phishing attempt.
• Can function as your primary credential for passwordless authentication.
• Extremely durable - I've had the same Yubikeys in use for years.
• Cross-platform - can be used on all mainstream operating systems and mobile devices.

Incentivized

• Building the application profiles is not always simple.
• Better application integration with Java would be beneficial.

Incentivized

• I'd feel better if the key were a little more solidly built - it feels a little flimsy
• The design could also use a cap for the connection - I'm nervous having it on my key chain and users have mentioned the same concerns.
• There seems to be some cracks forming in the support for security keys which is starting to mitigate the usefulness across an entire ecosystem.

Incentivized

I give slightly better than average rating because of the complexity in using a Yubikey. It is not as easy as native push notifications for 2FA products, however, it provides much better strength. Rating this higher or lower would be a disservice to people reading this review. If you are in the market for a hardware 2FA tool, Yubikey will be a great asset in your toolbox.

Incentivized

simple to use and keep on hand to deploy/use

Incentivized

its instantaneous!

Incentivized

None of the other toolsets offered Epic integration. I spent 9 months testing other SSO tools and found them to be slow and tied to specific tools and or workflows only. Imprivata OneSign was the only truly universal tool that I could find that was adaptable.

Incentivized

Duo and Yubico YubiKeys actually work very well together. We have chosen to use these two products together to make safe and secure MFA (including Passwordless) available to all users. The ease of use that Duo allows for both OTP import and WebAuthn enrollment makes it possible for modern and legacy applications to be protected by Duo MFA via Yubico YubiKeys as the second factor.

Incentivized

deployment is simple and the complex hardware is made simple.

Incentivized

• Increase in security prevents lost revenue due to fines over security breaches.
• Easier password management allows for smaller tech team.

Incentivized

• It provides security that allows me to feel confident and peace of mind that my account is really hard to hack
• Easy ROI since it would be really expensive if my account were hacked
• It's easy and fast to use, so it doesn't slow me down when traveling.

Incentivized