Okta is an enterprise grade identity management service, built in the cloud. IT can manage access across any application, person or device. Whether the people are employees, partners or customers or whether the applications are in the cloud, on premises or on a mobile device, Okta helps IT become more secure and maintain compliance. The Okta service provides directory services, single sign-on, authentication, provisioning, workflow, and built in reporting. ment systems.
$2
Per User Per Month
Yubico YubiKeys
Score 9.4 out of 10
N/A
Yubico YubiKeys make the internet safer with phishing-resistant multi-factor authentication (MFA) by providing simple and secure access to computers, mobile devices, servers, and internet accounts. The Yubico YubiKey stops account takeovers at scale by mitigating phishing and ransomware attacks, and delivers users authentication with a simple touch or tap.
N/A
Pricing
Okta
Yubico YubiKeys
Editions & Modules
Single Sign on
$2.00
Per User Per Month
Multi Factor Authentication
$3.00
Per User Per Month
Single Sign on Adaptive
$5.00
Per User Per Month
Multi Factor Authentication Adaptive
$6.00
Per User Per Month
No answers on this topic
Offerings
Pricing Offerings
Okta
Yubico YubiKeys
Free Trial
Yes
No
Free/Freemium Version
Yes
No
Premium Consulting/Integration Services
No
No
Entry-level Setup Fee
No setup fee
Optional
Additional Details
Browse products and price points that make the most sense for your organization on the Okta website.
Okta and Auth0 are similar in a number of ways, but ultimately they serve different cases. Okta is likely the preferred option for scenarios where IT or other admin staff need the ability to control account access for other staff members.
It’s conditional access and Zero Trust policies give us strong security control without complicating user experience and we no longer require on-prem AD set ups, which is a huge plus for us due to its cloud directory capabilities.
The only others services that I use for password storage are my google work account and Apple iCloud. Overall, I'd rank apple the lowest . Gmail is the most convenient in terms of quickly going to a site and having the password prefill. Where Okta is better than Google though, …
We selected Okta since as I mentioned earlier, speed means a lot to our account. The reason behind that is because it enables us a lot faster and utilize our apps better. Do not get me wrong, PingOne is a great app, its just that the app itself does not have the processing …
Okta is worlds better than any other IDP Solution that I have come across. Their documentation on integrations is STELLAR, their support staff is knowledgeable and awesome, their service is reliable and just works.
Okta provides a better user experience and a portal to make things simple not only for the admins but also the customers. Compared to Entra and Duo Okta is light years ahead in innovation and user experience.
Previous to Okta, we did not have a central cloud IdP system, each app had it's own authentication and authorization internally. That led to a fairly messy and divergent situation where every system had a different method and look for authentication and authorization. …
We have no experience with other products. In the past we have considered to implement Google SSO and Apple SSO, we did some partial development, but we never released those changes.
At the time when we moved from ADFS to Okta, Okta was the superior product for are use case. There was no ADFS/SAML connection available for for Citrix Cloud. Now, Entra ID has progressed and is supported by almost every application, we might be moving back to Entra ID.
Not too well. The password store in NetIQ (a.k.a. eDirectory) was FIPS 140 certified. The CAS opensource platform, paired with eDirectory was never hacked and provided true SSO across more than 200 in-house and hosted servers.
We ended up going with OKTA has it had a wider breadth of services from a security perspective at the time so we felt like we were getting more bang for our buck. Not only were we able to take advatage of SSO for all of our apps but we were able to leverage the device trust …
I had the opportunity to use Citrix but it was an "heavy" tool. I prefer Okta here. Regarding MS Active Directory I think is a good too with good features and not hard to use.
We previously looked at Azure AD (now known as Microsoft Entra ID) for our IDP (Identity Provider). Okta has an interface that seems easier to navigate and configure than that of Entra ID. Additionally, the wide range of vendors/software that Okta supports made it an easy …
When compared to other services, The Okta Identity Cloud provides an all-around solution for all your business needs, from security to a centralized identity management platform, and an improved user experience.
My organization uses the Okta Identity Cloud across all of our apps for ease of access. The ability to quickly access everything from a single tile page makes it easy to navigate and operate. Compared to other identity providers, I will always find Okta to be much more user …
With respective to user interface and license cost, we thought The Okta Identity Cloud was better than other tools for use. Their customization of license was another reason for us to go with The Okta Identity Cloud over other tools.
They were very similar in scope and application. Our IT team made the final call in moving forward with The Okta Identity Cloud as I believe the integration with The Okta Identity Cloud was more aligned with our current systems in place as well as our future systems roadmap. …
We used to use something from Okta that has I think a passwordless authentication or readily get a notification that's an alternative, but it's software, not hardware. That's the other thing I would say. We have tried nothing else on the hardware side. Its hardware token, ease …
Yubico YubiKeys has been a leader in the security key market, and I think they have a new product we just read about two days back and they can store up to a hundred private keys now. So I think this is what it distinguishes them from the market, apart from this, whatever …
If you compare it to authenticator apps, I'd say it's much more easy to set this up for the individual user. Well, it's Swedish. It's also very well documented. There are a lot of guides on how to use them and I have a lot of faith in the security posture of Yubico and how the …
I've never really used any other physical keys, I mean I've used multifactor authentication from Google Authenticator or Duo, but never another physical key, so this is my first experience with that.
I have used the tokens that display a little six-digit code that rotates, but I feel that's just like my phone does that, so why would I have a separate device for that? This at least provides a physical thing I have to either insert or tap to use. I think they're not …
I have tested the Google Titan Keys. I found Yubico YubiKeys to be a bit more durable and last longer. I've already had a few Google Titan Keys that have just gone out. They just stopped working. So the Yubico YubiKeys are a bit more lightweight and easier to fit on a key ring. …
I prefer Yubico YubiKeys because sometimes logging in with pass keys on an iPhone you have to do kind of two handshakes. One is the QR code and then doing a face ID. So that's an extra step versus the Yubico YubiKeys, which I can just put in and scan with my finger.
We have thought about just trying another competitor for due diligence but have not explored that option yet. We went with Yubico YubiKey due to hearing about it at a conference and decided to start experimenting with the solution. We are pretty decided on what we are going …
They offer ways to store passwords or MFA support, but most need a root password. In addition, LastPass and 1Password do not have much support for MFA. This results in a lack of MFA support. For Okta, although it offers MFA and SSO, the OTP can be very annoying to have as I do …
It has extensive compatibility and rich feature set of integrating with a wide array of core systems and SaaS platforms. Daily I utilize Okta's user-friendly central hub to simplify access the numerous applications we utilize within my company (Google Workspace, Slack, Zoom, Salesforce, Microsoft Office 365, among many others.)
When I used it as an engineer for a software company a few years ago, I would be able to continue doing work on the train ride into and out of the office. So that was an extra hour, two hours a day that I was able to access our systems and still be able to continue to work. So that was a lot of fun. Well, I don't know if stay fun, but it was nice to be able to have the access, not have to be connected directly to the corporate network.
Okta handles lockouts and password changes very seamlessly. Most end users no longer have to contact our IT department to reset their password or unlock their account.
Okta does MFA (Multi-Factor Authentication) very well with the use of their own app, Okta Verify. We utilize this for VPN connections and having MFA or 2FA has strengthened the security of our internal network.
Okta's administration GUI is easy to use, and easy to set up. Adding applications to the organization is easy and requires very little work to deploy.
Users can utilize Okta to store passwords securely and safe on their own account. They also can one click login to personal sites if they use Okta to store their password.
Okta's support system is very knowledgeable and quick to respond to issues. We've had a few cases that were resolved within hours and that helps immensely when working with end users.
I think the best thing is it has a lot of capacity and it's very, very secure. It can store a lot of private keys versus all the other products. We have reviewed a few other products, but Yubico YubiKeys gives a lot more capabilities than some of the other security key brands.
It can be about access control because either right now it's just you have access or you don't have access. I think there can be a use case where you are allowed a particular set of servers and not a particular set of servers. I think maybe it's there or we don't use it, but I haven't seen that. I think I've used Yubico YubiKeys at two companies and I haven't seen that. Maybe that's something that can be added.
Okta has a passion to provide secure and scalable identity solution. Their passion has come across as advocacy in a way that has deepened my knowledge of the field of authentication. I took identity for granted before but after seeing features such as external authentication I know that Okta can enable my business to reach new heights
As for implementing YubiKey its simple so I don't see us using anything else as we have experienced no issues so fare. Adding these to our environment is still new for us currently but in the transition phase I only see us buying YubiKey. It is highly rated and well known and cost is reasonable so no need to find another solution.
I give slightly better than average rating because of the complexity in using a Yubikey. It is not as easy as native push notifications for 2FA products, however, it provides much better strength. Rating this higher or lower would be a disservice to people reading this review. If you are in the market for a hardware 2FA tool, Yubikey will be a great asset in your toolbox.
The Okta Identity Cloud advertises 4 9's of reliability and I would go as far to say that it may even do better than that. As a true Global organization that operates in just about every region of the world, we have yet to have an issue with The Okta Identity Cloud that has impacted our business operations.
We have not experienced any issues with availability which is very important when you are dealing with a company that holds the keys to the gate. We have had more issues with availability from our SaaS providers before with authentication but that was on their end. YubiKey has worked every time for us over the course of the last 6 or so months we began testing phase.
From my perspective, for the things that my group uses it for, Okta is very fast. It is as least as fast as the local password database methods that it replaces on our campus enterprise services. I do not believe that it slows anything down at all. In fact, not having to think too much about the login, because they all look the same, probably speeds things up somewhat.
We have not seen any lag in loading pages and getting into systems or sites. In comparison to other 2FA and MFA options it is actually faster most of the time to authenticate due to not having to type in. We require users to have long passwords and when there is an option given for password less they jump on it with excitement. As we explore going password less on their PC's the YubiKey is going to make their lives a lot easier to access the resources they need.
Their support team has always been extremely responsive and more than willing to go above and beyond the call of duty. They've done screen shares between our help desk staff and end users to work through issues. They are quick to respond and genuinely care about getting issues resolved. Couldn't be happier.
I figured it all out on my own with the excellent product documentation provided by Yubico. I even managed to produce a backup YubiKey in case I lost my frequently used one. This was crucial when I temporarily lost the original.
Previous to Okta, we did not have a central cloud IdP system, each app had it's own authentication and authorization internally. That led to a fairly messy and divergent situation where every system had a different method and look for authentication and authorization. Cross-remembering what password went with what was a constant problem for the Service Desk, who had to know how to manipulate all of the various local password systems.
We used to use something from Okta that has I think a passwordless authentication or readily get a notification that's an alternative, but it's software, not hardware. That's the other thing I would say. We have tried nothing else on the hardware side. Its hardware token, ease of use, easy integration, more reliance on an external device like a phone or something. If your phone gets lost, then you are worried about your multifactor, no problems with this device.
Being a cloud native application, The Okta Identity Cloud is extremely scalable and easy to setup. By integrating into existing directories and applications via standard techniques and protocols, it is very easy to both initially setup and add additional users as required. Once all the necessary integrations are setup, it's a simple rinse and repeat process to onboard additional users (which can be automated with imports as well)
For us I feel like the ease of deployment has made this product very appealing, overall this will make the scalability very easy for us to push out once we roll out to our users and the management tools that we have looked at will make the admins like me happy as it is clear and easy to use. The rollout process looks to be very straight forward from the demos that we have looked at regarding the enterprise tools.
The initial investment (CapX) on Okta seemed like a lot for our organization (with a limited IT budget), but the investment was 100% worthwhile. We were impressed with how easily/quickly it was up and running in our environment.
Implementing Okta into our environment has greatly increased our security posture by granting us MFA and SSO. Having MFA helps to lower our Cyber Security Insurance premiums greatly as well.
As with most IT Security tools, the costs of prevention far outweigh the costs of a compromise. Calculate the costs of a breach and then compare it to the costs of Okta, you will find Okta is an exceptional value for what it offers. Additionally, the ability to automate tasks saves a ton of time/money for us. For example, the integration with our HRIS system means that when HR terminates an employee, we can have Okta automatically disable their accounts and all SSO applications assigned to them. Previously this was a slow and manual process performed by our Service Desk technicians (at an hourly rate).
I think it's the flexibility in being able to let users pick the type of authentications that they want to use. Some are comfortable with the touch device on the physical Yubico YubiKeys. Others prefer the mobile app. So it provides flexibility for our users to choose how they want to authenticate without running a file of our security requirements.
