CyberArk Privileged Access Management vs. One Identity Identity Manager

I always recommend CyberArk based on my experiences at several different jobs and industries. It does a great job of helping you create all kinds of use cases and approval flows for accessing and using privileged accounts. It also does a great job securing local admin passwords on servers. End-users of the system are able to quickly and easily start utilizing the more secure method of obtaining credentials in minimal time with minimal overhead/tax on their work time.

Incentivized

Well-suited: Companies with .NET or windows technology as a core. Companies with AD as main Directory Services Less appropriate: Companies with lot UNIX boxes Companies looking to support applications with many different connectors.

Incentivized

• storing password safely
• storing passwords in one central place
• "remembering" a password for a whole team and/or single persons
• securing access to certain passwords by groups or team

Incentivized

• Audit Trace History: Out of the box enables important field to trace and give you flexibility to expand them thru configuration settings.
• Provisioning to Active Directory: Synchronization Editor gives you flexibility to define what and when needs to be on sync.
• Web Portal: Latest version is more user friendly and support mobile devices.

Incentivized

• The initial product cost is a little on the higher side, which might turn off small & medium enterprises.
• As it talks about security, it has a lot of hardware/software requirements for the initial setup, which might make the rollout timeline a little lengthy.
• Product should be easy to customize based on different industry's needs.

Incentivized

• Web Designer: Hard to implement a new form from scratch.
• Rest API: Make more methods available.
• Connector: More connectors required like SNOW, Workday,etc.

Incentivized

I've been an engineer and architect in the Identity space for many years and CyberArk is the #1 tool I've found to help me secure accounts and credentials. I've architected CyberArk and built the implementation from the ground up twice in previous roles and found it here upon my arrival at my current job. I wouldn't want to have to live without it as it helps me sleep at night

Incentivized

Manage Engine's Password Management solution can accomplish the same features however, their system is cumbersome and not as user friendly to operate. It is however great for small teams. Pleasant Solutions Password Manager Pro can accomplish some of the same things, but the web browser interface is not user friendly at all

Incentivized

Selected due windows base technology, easy to deploy and AD connector.

Incentivized

• A positive impact is passing SOX audits when it comes to privileged account management. Making sure we are compliant with password expiration policies and complexities.

Incentivized

• Positive impact because we now disable users immediately from the authoritative source.
• Positive impact due our integration with EPIC.

Incentivized