For smaller companies Atlassian crowd is great, however, we grew to a size where we were getting rate limited so we needed to scale up. What we ended up migrating to was the non-cloud solutions for Atlassian products. This allowed us to hit our scale without being rate limited. However, at a smaller scale, this product would work great.
This tool is essentially a hack, making the user experience pretty weak. For example, we use it in an application which has a box to type your password. Every time you enter some data, ESSO steals the focus and types your password into the box, even if you aren't about to submit the form requiring the password.
This tool creates a 2nd CN in the directory and this broke some of our applications which were only expecting a single CN per user in the directory. Why can't it use a traditional database instead?
This tool caused performance issues with Putty. It would peg our CPUs at 100% if the user had Putty running. It took a very long time to resolve the issue.
Overall, support is good, you get quick responses from Atlassian's official support system, and documentation is decent enough for you to find what you need.
Atlassian Crowd is just much easier to set up, plus most of our systems we use are from Atlassian, they work with Atlassian Crowd out of the box without much effort, so it ended up being the natural choice for us.
There's no substitute for properly developed applications that delegate authentication to an external system like Active Directory or a cloud identity provider. That way, the issues with screen scraping and constantly-breaking integration are solved permanently.
New systems are tough when it comes to an ROI, as a dollar amount for saving time on a sign-in can be tough to track. Like most new systems that makes things slightly easier to execute as an end user or manage or support, it really might come down to the existing structure of how a company manages its users.
The positives are always with the end user, which I have to say, Crowd was able to accomplish.
We spent a lot of time implementing it on different applications. However, because it uses screen scraping, every time our apps upgraded, it broke the integration with ESSO, so we had to keep fixing the integration. After a few years, we have stopped integrating new apps with it due to this headache.
