HID DigitalPersona (formerly Crossmatch) provides a comprehensive multi-factor authentication solution. The vendor’s value proposition is that their solution frees users from cumbersome login activities while making it easy for an IT Team to secure access to their networks, data and applications.
$3.75
per user per month
SecurID
Score 9.0 out of 10
N/A
SecurID, a company and solution suite from RSA, is an identity and access management suite supporting access management, authentication, and identity governance.
$2
per year per user
Pricing
HID DigitalPersona
SecurID
Editions & Modules
HID DigitalPersona
$3.75
per user per month
Cloud
$2
per year per user
Cloud Plus
$4
per year per user
Cloud Premier
$6
per year per user
Offerings
Pricing Offerings
HID DigitalPersona
SecurID
Free Trial
Yes
Yes
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
No
Entry-level Setup Fee
Required
No setup fee
Additional Details
—
—
More Pricing Information
Community Pulse
HID DigitalPersona
SecurID
TrustRadius Insights
HID DigitalPersona
SecurID
Highlights
Research Team Insight
Published
HID DigitalPersona and RSA SecurID Suite are both user authentication and identification products. Both software allow for multifactor authentication, including physical and biometric identification methods.
RSA SecurID Suite may be more scaled for enterprises, based on greater flexibility to integrate with a larger range of cloud applications. HID DigitalPersona may provide more functionality for midsize and large businesses with its deep integration with Active Directory environments and cross-application password management.
Features
HID DigitalPersona and RSA SecurID Suite both provide multifactor authentication capabilities for businesses. However, they each have unique specializations that standout.
HID DigitalPersona deploys on Windows Active Directory. This functionality enables simple password management across applications and networks. It also provides effective biometric authentication, such as fingerprint recognition.
RSA SecurID stands out for its support for remote authentication and access. RSA enables remote access through convenient end-user setup and heavy investment in integration with cloud-based applications.
Limitations
Both products have distinct strengths, but they also come with some weaknesses.
HID DigitalPersona users have struggled with the implementation process, particularly in certain network environments or browsers. Post-implementation, some users have not received sufficient support from the vendor when troubleshooting or scaling up their deployment.
RSA SecurID users have experienced some problems with mobile device authentication, both from administrative and end-user experiences. The biometric authentication has also been lacking for some users.
Pricing
HID DigitalPersona is priced separately for the software and the hardware for biometric authentication. The hardware can range from $50-100 per reader, and the software’s pricing is available by quote from the vendor.
RSA SecurID offers some features, such as multifactor authentication, in a free trial for new users. Hard tokens are frequently priced between $1-2 per month. Other authentication tokens and software pricing is available by quote from the vendor.
Features
HID DigitalPersona
SecurID
Identity Management
Comparison of Identity Management features of Product A and Product B
During the onboarding process, remote workers can enroll their fingerprints or create secure PINs. This eliminates the need for complicated passwords and enables them to safely access company resources and critical apps from remote locations. HID DigitalPersona's robust authentication techniques and access control features can assist you in adhering to data security laws.
Works well in a large organization with many employees and devices but may not work so well in smaller organizations due to alternatives that are cheaper and are already provided (such as Microsoft's Azure MFA). Using the soft token is easy and convenient. For a large environment, It has allowed us to have a single app used for authentication for all of our various users, and using the soft token is easy and convenient.
RSA SecurID allows me to access network files from remote locations (hotels, other businesses, working from home). This allows me greater productivity and helps me with a work-life balance as I can work later at night or not get so backed up when I'm traveling.
RSA SecurID keeps information secure by limiting access to network files
RSA SecurID is easy to use with a soft token - one less item to carry around in my travel bag
Multiple domains - DigitalPersona struggles with multiple domains. Since the solution is licensed per domain, migrating users between domains can be troublesome to keep licensed. Additionally, migrating to a new domain removes the AD leaf objects that store all digital persona information, essentially wiping out and credentials or other stored information.
Password change - DigitalPersona can be confusing to update when a stored password for a website is updated. The password is entered, and then the user is redirected to the websites password change page. Users must then authenticate with a Digital persona credential again before being prompted by Digital Persona to update the password. If the user is allowed to change the password manually through the websites page, this will lead to what is stored in Digital Persona being out of sync with the new password, and eventually account lockouts.
Terminal Server - DigitalPersona has performance issues when utilized on a high-traffic terminal server. Often it causes big CPU spikes as well as hanging sessions upon disconnect.
It is wonderful for multifactor authentication and gives us many options for what we use to authenticate. All of our users use it and it is engrained into our group policies and people would be very disappointed if it went away.
Long story short, does the job. Can use company credentials to setup and access the account for SecurID. Easy to setup and implement. Doesn't have a high learning curve.
I think there are still fundamental enhancements needed to be added to the management consoles and I think there ought to be a Centralized, Windows Based "Thick" Management Application instead of individual utilities which vary from MMCs, Scripts, Wizards, etc.
Using it very frequently, it's important that its straight forward and I do not have to go through unnecessary hoops to achieve something seemingly simple. Can setup using the company credentials and do not have to setup up a separate account. Setup was fast and easy. GUI is very straight forward and quick.
Extremely poor; I've never encountered such. Professional Services completely dropped us for months. Crossmatch tech support seems like it has 3 techs tops! No response to emails, calls, the absolute worst! I will never recommend DP to anyone.
Their support for onboarding and set-up is quite good. The only issues we tend to have are obtaining new user devices. These need to be planned ahead of time.
Could use tools to audit license usage at a more granular level as to allow an administrator to free up licenses from users whom seldom use their biometrics to login.
We evaluated Cisco DUO but ultimately chose HID because of their support for biometrics. With DUO every user would have to have the authentication app on their personal phone and pull it out each time they had to log in. We definitely did not want this for our frontline staff as it would slow the process way down
RSA SecureID is still widely deployed and the de facto industry standard for 2nd factor authentication. Microsoft Azure offers alternative 2nd factor auth but the price was too high. We are still testing Citrix NetScaler offering with CloudBridge for 2nd factor auth and SMS code to user mobile device so it is yet to be seen as a viable alternative to RSA.
Provides a quick one finger authentication\log-on.
Logging onto a machine that is used by several other users, such as in retail is no problem because the DigitalPersona software does a switch user function instead of logging out the other user.
One negative that was apparent immediately after installing the DigitalPersona software was that users very easily forgot their Windows passwords because of the one finger log-on.
