Okta vs. Tivoli Identity Manager (legacy)

It has extensive compatibility and rich feature set of integrating with a wide array of core systems and SaaS platforms. Daily I utilize Okta's user-friendly central hub to simplify access the numerous applications we utilize within my company (Google Workspace, Slack, Zoom, Salesforce, Microsoft Office 365, among many others.)

Incentivized

It's probably really best suited if you have a business where you have disparate systems but need a way to synchronize the user account information including the passwords between them. If you just have a Windows Active Directory environment only, there probably is no real need for something like this, but if you do this will help manage them easily.

Incentivized

• Okta handles lockouts and password changes very seamlessly. Most end users no longer have to contact our IT department to reset their password or unlock their account.
• Okta does MFA (Multi-Factor Authentication) very well with the use of their own app, Okta Verify. We utilize this for VPN connections and having MFA or 2FA has strengthened the security of our internal network.
• Okta's administration GUI is easy to use, and easy to set up. Adding applications to the organization is easy and requires very little work to deploy.
• Users can utilize Okta to store passwords securely and safe on their own account. They also can one click login to personal sites if they use Okta to store their password.
• Okta's support system is very knowledgeable and quick to respond to issues. We've had a few cases that were resolved within hours and that helps immensely when working with end users.

Incentivized

• Fully customizable
• Automate various portions of various applications
• Great at Access Management (but also Release, Change, Event, etc)

Incentivized

• The user interface of Okta is basic and needs improvement. There's some learning curve for new users.
• One time integration effort is high for the initial setup. Took us around 3 weeks.
• Okta times out pretty quick making us login multiple times in the day.

Incentivized

• Sometimes it feels unresponsive and we have to restart the services.

Incentivized

Okta has a passion to provide secure and scalable identity solution. Their passion has come across as advocacy in a way that has deepened my knowledge of the field of authentication. I took identity for granted before but after seeing features such as external authentication I know that Okta can enable my business to reach new heights

Some of its features are great and some are slightly complex and not easy without vendor support.

Incentivized

The Okta Identity Cloud advertises 4 9's of reliability and I would go as far to say that it may even do better than that. As a true Global organization that operates in just about every region of the world, we have yet to have an issue with The Okta Identity Cloud that has impacted our business operations.

Incentivized

From my perspective, for the things that my group uses it for, Okta is very fast. It is as least as fast as the local password database methods that it replaces on our campus enterprise services. I do not believe that it slows anything down at all. In fact, not having to think too much about the login, because they all look the same, probably speeds things up somewhat.

Incentivized

Their support team has always been extremely responsive and more than willing to go above and beyond the call of duty. They've done screen shares between our help desk staff and end users to work through issues. They are quick to respond and genuinely care about getting issues resolved. Couldn't be happier.

Besides the random issue where it gets unresponsive and we have to restart the services or reboot the server, it's been really solid. I've only had to contact support 1 time in the 15 years I've used it which is saying more than most other software. The cost of maintenance is also very cheap compared to some of the other software we use.

Incentivized

Previous to Okta, we did not have a central cloud IdP system, each app had it's own authentication and authorization internally. That led to a fairly messy and divergent situation where every system had a different method and look for authentication and authorization. Cross-remembering what password went with what was a constant problem for the Service Desk, who had to know how to manipulate all of the various local password systems.

Incentivized

I haven't used anything but Tivoli in this space.

Incentivized

Being a cloud native application, The Okta Identity Cloud is extremely scalable and easy to setup. By integrating into existing directories and applications via standard techniques and protocols, it is very easy to both initially setup and add additional users as required. Once all the necessary integrations are setup, it's a simple rinse and repeat process to onboard additional users (which can be automated with imports as well)

Incentivized

• The initial investment (CapX) on Okta seemed like a lot for our organization (with a limited IT budget), but the investment was 100% worthwhile. We were impressed with how easily/quickly it was up and running in our environment.
• Implementing Okta into our environment has greatly increased our security posture by granting us MFA and SSO. Having MFA helps to lower our Cyber Security Insurance premiums greatly as well.
• As with most IT Security tools, the costs of prevention far outweigh the costs of a compromise. Calculate the costs of a breach and then compare it to the costs of Okta, you will find Okta is an exceptional value for what it offers. Additionally, the ability to automate tasks saves a ton of time/money for us. For example, the integration with our HRIS system means that when HR terminates an employee, we can have Okta automatically disable their accounts and all SSO applications assigned to them. Previously this was a slow and manual process performed by our Service Desk technicians (at an hourly rate).

Incentivized

• It has helped us all these years to not have to waste time managing users on multiple systems.
• It controls our password policy for our domain.

Incentivized