Hypersocket vs. Univention Corporate Server (UCS)

It has great flexibility with multiple domains, and the ability to sync or not sync passwords between primary and secondary accounts. I'd like to see a more granular set of permissions for the help desk role tied to an OU path rather than a whole directory. You can [create this] by defining multiple directories based on OUs but is less flexible this way.

Incentivized

Univention Corporate Server is well suited:

1. If an Organization would like to use it as a complete Active Directory Server.
2. If an Organization wants to deploy other applications which are important like SSO, Mail Server, 2FA etc., as with one click all these Apps will be integrated magically thus reducing the Admin job considerably.
3. Web based management which will be quite useful for the Admins who are from Windows background only.
4. Univention as a company which has close to 2 decades of experience.

• Self service password resets
• Ability to synchronize a primary account password with secondary accounts
• Flexibility and intuitivness

Incentivized

• Complete replacement for MS Active Directory Server.
• Univention App Center - awesome concept with which Apps can be installed for the Domain.
• App Center can be compared to Google Play Store or Apple Play Store - Organizations can gain tremendous advantages.
• Plethora of Apps which are both free and paid and excellent apps for the Organizations.

• Help-Desk functionality similar to OneIdentity Self-Service Password Manager, as it provides additional users that do not require administrative access to assist with managing end-users who may have locked themselves out of HyperSocket Access Manager by forgetting their own security questions.
• Too many features which become unusable and feel like the payment plans are not flexible since it's an all-in-one product with one price. It is not necessarily a bad thing as most subscription-based pricing forces a buyer to pay more for an integral service that is only available on the highest price-plan. You really do get what you pay for, but we found many of our use-case scenarios limited the product.
• This isn't necessarily against the product, just a personal opinion around Multi-Factor authentication which is always primarily driven mobile devices. Not all companies or end-users have access to a multi-factor device, (or in our case, are allowed to have access to a cell phone while servicing members/clients). This creates a shortfall to allow multi-factor functionality to extend to all users unless there are hardware tokens, which can be miss placed or left out more easily as most users don't treat it the same way they would their personal smartphone.

Incentivized

• As Univention is from Germany, lot of informative articles are in German but English articles are also good but less in number.

One Identity is a great self-service password management system, however, it is limited to just that. As it stacks against the competition, Hypersocket isn't modular, it's an all-in-one which most other systems aren't. One Identity is what we use today for self-service, and migrated to KeePass for users centralized password manager. This probably wasn't the best move but this was all driven by cost and budgetary constraints.

Incentivized

We have evaluated Zentyal and ClearOS but we found out that UCS is more suited to every Organization.

• As with any IT Service or Solution, the investment will always be seen as a sunk cost. The only ROI would be the time and resources spent elsewhere rather than with Password Management through an IT Department or similar department. I found that the time spent on password management was about the same, as many users who are frequently forgetting a password are also forgetting their security question & answers.
• There are some positives, as it was able to help manage the bulk of their non-windows passwords or passwords related to another online service. The centralized password manager doesn't feel like a true single sign-on but for most users, it replaces a hand-written copy they have taped to a monitor.
• It can help with automating some of the active directory workflows with its own user provisioning functionality. Took more time to set up than it was to manage on its own.

Incentivized

• As a partner, we have gained lot of respect from our customers as UCS is rock solid.
• UCS is truly Open Source.
• UCS has surpassed our expectations.