We performed a comparison between CyberArk Identity and Microsoft Active Directory based on real PeerSpot user reviews.
Find out in this report how the two Single Sign-On (SSO) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It has machine learning and can help clients to learn the environment and understand what is happening."
"The initial setup is straightforward. It takes me up to an hour and a half."
"If anyone makes an error, or if an incident occurs by accident, the business will not be harmed as a result of this activity."
"I like the RBAC (Role-Based Access Control). It basically involves defining various roles, and then simply assigning those roles to users."
"The most valuable features of CyberArk Identity are its ability to control access to administrative staff."
"The tool is a very strong and valuable enterprise solution, particularly in ensuring the continuity of service."
"CyberArk Identity is a mature product."
"I found the solution to be stable."
"One noteworthy aspect we discovered is the ability to exercise tight control over systems, specifically Windows PCs. This pertains to the management of policies, usage patterns, and user access on these devices, particularly within the framework of Active Directory which is extremely well thought. This actually works better with on-premises solutions. However, as the global trend shifts towards cloud and hybrid environments, Active Directory and its use is diminishing. Yet, it hasn't entirely lost its relevance and remains a presence that cannot be entirely disregarded."
"Active Directory plays a focal point in security management, encompassing aspects like credential management, lifecycle, dynamic provisioning, and the network infrastructure of customers."
"The scalability of the solution is high...The initial setup of the solution is easy, and I would rate it an eight or nine out of ten on a scale of one to ten, where one being difficult and ten being easy."
"The user-friendliness of Microsoft Active Directory is a valuable feature."
"Active Directory makes managing user policies easier, like when a user wants to share files. We also use it to create and manage our email accounts."
"It is a scalable solution."
"It is a stable solution."
"Technical support is helpful."
"They could improve their UI and make everything more user-friendly."
"The solution's difficulty in gaining skill sets should be improved because it's a vertical product."
"The OpenID features could improve in CyberArk Identity."
"In terms of a governance platform, it's worth noting that CyberArk doesn't offer a particularly strong one."
"More integrations would be better."
"The tool has issues with the third-party SMS gateway. The solution has its own SMS gateway. Integration support is a challenge when we don’t use their SMS gateway. The tool also needs to improve its scalability."
"The product is not cheap, especially if you opt for an on-premise deployment requiring a complex server infrastructure. On the other hand, choosing the software as a service version simplifies infrastructure requirements but necessitates being online all the time."
"The user interface could be improved."
"The solution's price could be better."
"It could be more scalable. We still need another software solution to monitor the network in addition to Active Directory and OpManager, our domain controller. We use SolarWinds."
"If you are using the Active Directory, the main concern is that the policy is restricted to the specific local area network."
"The DNS services could improve in Microsoft Active Directory."
"Microsoft Active Directory fails to provide MFA. MFA, which is also known as multi-factor authentication on top of the password and username, is what I would like to see in the product's future releases."
"Typically, it depends on the customer's situation. If the customer operates in smaller locations where most PCs are in a common location, we usually aim to consolidate the directory infrastructure for easier maintenance. However, for distributed setups spanning multiple countries, configuring multiple sites becomes necessary and more intricate to handle. Our objective is to minimize the number of sites, simplifying operations for IT administrators and reducing errors. Mistakes in Active Directory can be costly for organizations, as disruptions can occur rapidly. Moreover, when it comes to hybrid single sign-on across various applications, Microsoft hasn't put forth significant effort. Single sign-on has become a challenge for many customers who utilize diverse solutions beyond Microsoft products. While implementing single sign-on is relatively straightforward in the Azure cloud, it's considerably more complex when dealing with the local Active Directory. This presents a big challenge for many of our customers."
"I would like to see improvements in the solution’s security filtering feature. It can include machines and filter some users. There is no option to exclude a particular user or system."
"I would like to see more integration with cloud-based applications. This would make it easier to manage users and devices across multiple platforms."
CyberArk Identity is ranked 10th in Single Sign-On (SSO) with 18 reviews while Microsoft Active Directory is ranked 7th in Single Sign-On (SSO) with 36 reviews. CyberArk Identity is rated 8.2, while Microsoft Active Directory is rated 8.6. The top reviewer of CyberArk Identity writes "Allows Linux and Unix administrators to login with single password ". On the other hand, the top reviewer of Microsoft Active Directory writes "A solution that easily merges with cloud-based ADs and provides superior data security". CyberArk Identity is most compared with Microsoft Intune, CyberArk Privileged Access Manager, Microsoft Entra ID, Ping Identity Platform and SailPoint Identity Security Cloud, whereas Microsoft Active Directory is most compared with Ping Identity Platform, Fortinet FortiAuthenticator, Microsoft Entra ID, ManageEngine ADManager Plus and Auth0. See our CyberArk Identity vs. Microsoft Active Directory report.
See our list of best Single Sign-On (SSO) vendors.
We monitor all Single Sign-On (SSO) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
