Cisco Duo vs. CyberArk Workforce Identity

Cisco Duois is well suited in all kinds of scenarios where you need to ensure proper security measurements, I think. We can't just rely on our passwords only, as they can be easily stolen through phishing or data breaches thus keeping multi factor authentication is quite essential. I always prefer MFA or at least 2FA for any critical system.

Incentivized

Centrify Identity Service is well suited for nearly any organization, especially ones utilizing Active Directory for user management. It is especially well suited for organizations looking to reduce internal resource use, because it's easy to maintain and manage. Its features also allow you to free up resources previously dedicated to the provisioning and deprovisioning of Office 365/Salesforce users (as well as other applications).

Incentivized

• Speed - it's fast with almost no delay between triggering the MFA request and receiving the notification on an iPhone
• Security - in addition to the added MFA layer, a simple, 4-digit passcode can be added to the authentication request
• Ease of use - it doesn't scare users. It's simple to install, configure, and use.

Incentivized

• Single Sign-on Integration is easy and complete configuration is UI driven with lots of help tips
• RESTFul APIs for Multi-factor Authentication is easy to use and implement. Also, Centrify supports all new Security features for Multi Factor Authentication and hence you can easily select and configure different challenges based on the policies and roles for the user.
• Lots of Built-in reports available for normal day to day auditing.

Incentivized

• Documentation is oftentimes missing key information for proper implementation. This is circumvented by reading third-party guides or contacting support for additional details.
• They do not push Fail-Closed as much as I think they should. Fail-Open is fairly trivial to bypass and it should be made known to the customer during setup how much this will affect overall security.
• More vendor integration is something that is always craved by administrators. There are so many third-parties to integrate with.

Incentivized

• Occasionally, I get logged out of Gmail, sometimes in the middle of an email. I'm not sure why it happens, but I think it has something to do with timing out. Which is strange because I'm on email all day. Not sure why.

Incentivized

There are a lot of competing solutions on the market; however, Duo "just works", and there is little to no learning curve for the new members to be acclimated to it. As long as that continues I see it as the preferred option moving forward

Incentivized

Centrify is central to creating efficiency and safety for our clients and internally. To remove it would cause a massive disturbance in the lives of our employees and our clients.

Incentivized

La interfaz es intuitiva y fácil de navegar, lo que permite a los usuarios administrar sus dispositivos y acceder a las políticas sin problemas. La integración con las aplicaciones SSO y SaaS facilita aún más el proceso de acceso, mejorando la experiencia del usuario.

Incentivized

In the last 5+ years we've been using Duo, there may have been 1 outage that impacted us. We do receive periodic notifications of issues but, for the most part, they impact carriers or functionality that we either don't use, or do not care about.

We do not see any degradation of performance of the protected applications. There are occasional lags in receiving the push but no show stooppers.

Since it’s a reputable company, I have received technical support when needed and I trust that if anything else happens I can contact them with any issues. I haven’t experienced bad customer service and I totally feel supported while using this authentication method. No complains so far and the high rating!

Incentivized

The support staff thus far has been very helpful. At times I feel they are driving the process forward without my intervention or constant reminder, which is nice to have in a company for a change. Most support seems to be a hassle but so far Centrify appears to treat your project as their own project.

Incentivized

There was no in person training but checking the box was the only way I could complete all of the questions.

This was not organized training but the videos that Duo provides to teach you how to install a particular integration are top notch.

Implementation was straight forward and you can isolate different scenarios in order to test new application setup or add to an existing setup. Gui interface is pretty easy to understand and follow. I had no experience with Duo and still manage to easily set up new policies and rules.

Incentivized

Ultimately we ended up going with Cisco Duo because we are a Cisco shop. All of our networking infrastructure, our phones, our wireless environment is Cisco based. It made logical sense to stay with a product that we already have a line of support with. With a smaller support / tech group we depend on outside Cisco support. That support is already here for us, so we stayed with a Cisco product.

Incentivized

We started off using ADFS from Microsoft, which took most of a day to get fully functional and nearly a week to get fully optimized. The documentation was inconsistent with ADFS and there was no real support without opening a Microsoft Premier Support ticket. At the time, if you turned on Multi-Factor Authentication (MFA) for Office 365, it turned it on for everything without any granularity. Our Information Security department said that MFA was a requirement for offsite access to our email systems, but users didn't need MFA when onsite. We looked at Okta, OneLogin, and Centrify at the same time. Centrify was the only one that responded quickly and offered a free POC with support included. We tried to deploy the Okta solution on our own, but ran into issues due to some of our non-standard AD configuration. We never received a return call from OneLogin. The Centrify POC took about 15 minutes to complete for basic functionality and a couple of hours to work out the issues related to our environment. We have been very happy with the Centrify solution and went live with our POC.

Incentivized

So far, the only limits we've encountered were tied to our imagination. Duo's strong list of supported integrations is amazing.

• It's one of those things that only costs money in the sense of you have to convince a leadership team to spend money to save money, right? Like a compromise is far more expensive than duo paying for duo. So specifically it's really just about trying to prevent problems. And so while it costs money and we don't have a direct return on investment that we can point out immediately, I would still always advocate for it just because it keeps security. Paying for security is cheaper than getting compromised essentially.

Incentivized

• CyberArk Workforce Identity provides secure access to on-premises and cloud applications. The platform is highly scalable and works well for companies of any size.
• I can classify and label data. Also keep track of activity in shared applications and data, to know exactly who accesses each of the files.

Incentivized