CyberArk Workforce Identity vs. Okta

Centrify Identity Service is well suited for nearly any organization, especially ones utilizing Active Directory for user management. It is especially well suited for organizations looking to reduce internal resource use, because it's easy to maintain and manage. Its features also allow you to free up resources previously dedicated to the provisioning and deprovisioning of Office 365/Salesforce users (as well as other applications).

Incentivized

It has extensive compatibility and rich feature set of integrating with a wide array of core systems and SaaS platforms. Daily I utilize Okta's user-friendly central hub to simplify access the numerous applications we utilize within my company (Google Workspace, Slack, Zoom, Salesforce, Microsoft Office 365, among many others.)

Incentivized

• Single Sign-on Integration is easy and complete configuration is UI driven with lots of help tips
• RESTFul APIs for Multi-factor Authentication is easy to use and implement. Also, Centrify supports all new Security features for Multi Factor Authentication and hence you can easily select and configure different challenges based on the policies and roles for the user.
• Lots of Built-in reports available for normal day to day auditing.

Incentivized

• Okta handles lockouts and password changes very seamlessly. Most end users no longer have to contact our IT department to reset their password or unlock their account.
• Okta does MFA (Multi-Factor Authentication) very well with the use of their own app, Okta Verify. We utilize this for VPN connections and having MFA or 2FA has strengthened the security of our internal network.
• Okta's administration GUI is easy to use, and easy to set up. Adding applications to the organization is easy and requires very little work to deploy.
• Users can utilize Okta to store passwords securely and safe on their own account. They also can one click login to personal sites if they use Okta to store their password.
• Okta's support system is very knowledgeable and quick to respond to issues. We've had a few cases that were resolved within hours and that helps immensely when working with end users.

Incentivized

• Occasionally, I get logged out of Gmail, sometimes in the middle of an email. I'm not sure why it happens, but I think it has something to do with timing out. Which is strange because I'm on email all day. Not sure why.

Incentivized

• The user interface of Okta is basic and needs improvement. There's some learning curve for new users.
• One time integration effort is high for the initial setup. Took us around 3 weeks.
• Okta times out pretty quick making us login multiple times in the day.

Incentivized

Centrify is central to creating efficiency and safety for our clients and internally. To remove it would cause a massive disturbance in the lives of our employees and our clients.

Incentivized

Okta has a passion to provide secure and scalable identity solution. Their passion has come across as advocacy in a way that has deepened my knowledge of the field of authentication. I took identity for granted before but after seeing features such as external authentication I know that Okta can enable my business to reach new heights

Some of its features are great and some are slightly complex and not easy without vendor support.

Incentivized

The Okta Identity Cloud advertises 4 9's of reliability and I would go as far to say that it may even do better than that. As a true Global organization that operates in just about every region of the world, we have yet to have an issue with The Okta Identity Cloud that has impacted our business operations.

Incentivized

From my perspective, for the things that my group uses it for, Okta is very fast. It is as least as fast as the local password database methods that it replaces on our campus enterprise services. I do not believe that it slows anything down at all. In fact, not having to think too much about the login, because they all look the same, probably speeds things up somewhat.

Incentivized

The support staff thus far has been very helpful. At times I feel they are driving the process forward without my intervention or constant reminder, which is nice to have in a company for a change. Most support seems to be a hassle but so far Centrify appears to treat your project as their own project.

Incentivized

Their support team has always been extremely responsive and more than willing to go above and beyond the call of duty. They've done screen shares between our help desk staff and end users to work through issues. They are quick to respond and genuinely care about getting issues resolved. Couldn't be happier.

We started off using ADFS from Microsoft, which took most of a day to get fully functional and nearly a week to get fully optimized. The documentation was inconsistent with ADFS and there was no real support without opening a Microsoft Premier Support ticket. At the time, if you turned on Multi-Factor Authentication (MFA) for Office 365, it turned it on for everything without any granularity. Our Information Security department said that MFA was a requirement for offsite access to our email systems, but users didn't need MFA when onsite. We looked at Okta, OneLogin, and Centrify at the same time. Centrify was the only one that responded quickly and offered a free POC with support included. We tried to deploy the Okta solution on our own, but ran into issues due to some of our non-standard AD configuration. We never received a return call from OneLogin. The Centrify POC took about 15 minutes to complete for basic functionality and a couple of hours to work out the issues related to our environment. We have been very happy with the Centrify solution and went live with our POC.

Incentivized

Previous to Okta, we did not have a central cloud IdP system, each app had it's own authentication and authorization internally. That led to a fairly messy and divergent situation where every system had a different method and look for authentication and authorization. Cross-remembering what password went with what was a constant problem for the Service Desk, who had to know how to manipulate all of the various local password systems.

Incentivized

Being a cloud native application, The Okta Identity Cloud is extremely scalable and easy to setup. By integrating into existing directories and applications via standard techniques and protocols, it is very easy to both initially setup and add additional users as required. Once all the necessary integrations are setup, it's a simple rinse and repeat process to onboard additional users (which can be automated with imports as well)

Incentivized

• CyberArk Workforce Identity provides secure access to on-premises and cloud applications. The platform is highly scalable and works well for companies of any size.
• I can classify and label data. Also keep track of activity in shared applications and data, to know exactly who accesses each of the files.

Incentivized

• The initial investment (CapX) on Okta seemed like a lot for our organization (with a limited IT budget), but the investment was 100% worthwhile. We were impressed with how easily/quickly it was up and running in our environment.
• Implementing Okta into our environment has greatly increased our security posture by granting us MFA and SSO. Having MFA helps to lower our Cyber Security Insurance premiums greatly as well.
• As with most IT Security tools, the costs of prevention far outweigh the costs of a compromise. Calculate the costs of a breach and then compare it to the costs of Okta, you will find Okta is an exceptional value for what it offers. Additionally, the ability to automate tasks saves a ton of time/money for us. For example, the integration with our HRIS system means that when HR terminates an employee, we can have Okta automatically disable their accounts and all SSO applications assigned to them. Previously this was a slow and manual process performed by our Service Desk technicians (at an hourly rate).

Incentivized