BeyondTrust Privileged Identity (Legacy) vs. Cross Identity

It is very well suited to manage local passwords on machines. It fails at managing accounts located in the directory. It treats a directory as a "system" as a result of your settings for the "system" ends up being global. It makes for a very complicated rights structure. Rights have to be assigned on a per accounts basis.

Incentivized

Password reset is where they perform well. The product is very economical compared to other SSO vendors But even with this price, there is a lot of improvement that is needed. The management is poised to make changes but the engineers at Cross Identity need to take their job more seriously in my opinion.

Incentivized

• Manage local accounts of workstations and servers.
• The web interface is easy for users of RED to use.
• The shared password list is a very nice feature that allows users to store credentials that have to remain static.

Incentivized

• Not as slick as CyberArk
• Training is free, but could use a lot of improvement
• Documentation needs refinement

Our experience with Cross Identity has not been very good, particularly recently, we are in the middle of many issues, outages etc. The management has given us all kind of assurances but we are still waiting for the results to start show.

Incentivized

Support is not appropriate. I mean the product support ad managed services both. It would be great if they can introduce a more coherent project governance structure. Advise to management, please encourage your engineers to take their job little more seriously. The product is full of bugs and have not been tested thoroughly.

Incentivized

CyberArk and ERPM are direct competitors. Great thing about ERPM is the ability to integrate with Sailpoint out of the box. Add to that the lower overall cost of the product.

• Lower cost than competitors
• Ease of usr means easy to get staff up to speed on the product
• Very painless rollout, meaning less time troubleshooting issues