Auth0 vs. SecurID

Auth0 is very well suited for situations where a JSON web token can be used for authorizing APIs, websites, and mobile devices. It's especially useful if the JWT validation can happen at a gateway layer. It's especially useful if you only need to verify the user's email address or mobile number as the passwordless login is easy to implement.

Incentivized

Works well in a large organization with many employees and devices but may not work so well in smaller organizations due to alternatives that are cheaper and are already provided (such as Microsoft's Azure MFA). Using the soft token is easy and convenient. For a large environment, It has allowed us to have a single app used for authentication for all of our various users, and using the soft token is easy and convenient.

Incentivized

• Overall we had very good experience with Auth0. It supports industry standard language or technology for integration. Very good performance.
• It's nice to work with Auth0's APIs and they are flexible.
• The management and configuration dashboard is useful and easy to deal with.

Incentivized

• RSA SecurID allows me to access network files from remote locations (hotels, other businesses, working from home). This allows me greater productivity and helps me with a work-life balance as I can work later at night or not get so backed up when I'm traveling.
• RSA SecurID keeps information secure by limiting access to network files
• RSA SecurID is easy to use with a soft token - one less item to carry around in my travel bag

Incentivized

• Auth0 can be somewhat limiting if you want a lot of control over the design of your authentication flow. Custom branding can be done, but it may be limited depending on how you plan to integrate.
• The Auth0 API documentation has proven confusing at times; a single API endpoint's behaviour will change based on inputs and configured settings (e.g. offline_access). Consequently fields that are advertised as being returned in a response might not be there or have different values if you miss a key detail and it can be difficult to debug when this happens. All information required is available in the documentation but requires some digging.
• The toggle to switch tenants feels a bit odd, it works, but I've had a few instances where I didn't realize I was on a staging tenant looking for something that was on the production tenant. Not a big deal, just something to watch out for.

Incentivized

• The Android application cannot be easily returned to the original code (if you chose to move to the next code).
• If misconfigured, it can lock an administrator out of a server.
• The look and feel of the RSA control center status bar application have a dated feel.

Incentivized

For our purposes, Auth0 is still one of the best valued RBAC platforms in the market.

Incentivized

Long story short, does the job. Can use company credentials to setup and access the account for SecurID. Easy to setup and implement. Doesn't have a high learning curve.

Incentivized

- integration and ease of implementation - great over all product support specially for passkey biometric authentication -Auth0 is very reliable to use their API integration for security
verification. It provides best API to integrate our website and application
with Single Sign In option and two step verification option. Sales and technical teams are always there to provide support

Incentivized

Using it very frequently, it's important that its straight forward and I do not have to go through unnecessary hoops to achieve something seemingly simple. Can setup using the company credentials and do not have to setup up a separate account. Setup was fast and easy. GUI is very straight forward and quick.

Incentivized

There isn't a clear method to get a hold of support when trouble arises if you're on their standard plan. You can file a support ticket and they generally are responsive. I've often been able to find similar questions to the questions I've had when it comes to support in their ticket history, however, some have been closed without a satisfactory conclusion for the original poster.

Incentivized

Their support for onboarding and set-up is quite good. The only issues we tend to have are obtaining new user devices. These need to be planned ahead of time.

Incentivized

Auth0 is non-evasive and does not require software download. It is user friendly, seamless, and doesn't require additional actions on the part of the user. IBM Trusteer is none of these things and is based on a technology stack that cannot scale in the same way as Auth0. We believe Auth0 provides a superior solution and is well suited for our own technology stack.

Incentivized

RSA SecureID is still widely deployed and the de facto industry standard for 2nd factor authentication. Microsoft Azure offers alternative 2nd factor auth but the price was too high. We are still testing Citrix NetScaler offering with CloudBridge for 2nd factor auth and SMS code to user mobile device so it is yet to be seen as a viable alternative to RSA.

Incentivized

• Development time has been allocated to the more core parts of our business.
• We are confident in the security of our user's accounts and their data.
• Auth0's login flows are customizable which means that we don't have to worry about users being confused when logging in/changing their passwords, and we didn't event have to spend that much time configuring this. (Full in-house development for login could take weeks to get right.)

Incentivized

• We are pleased with our implementation of RSA Authentication Manager. The deployment process went smooth without many issues.
• Administration and troubleshooting are very easy using the GUI console.
• There is enough good quality documentation, training, and online forums are available for our team to refer to in case of any technical issues.

Incentivized