Microsoft Entra External ID vs. Tivoli Identity Manager (legacy)

It is not easy to calculate the actual ROI due to the difficult quantification of all factors, but it certainly contributed a lot in protecting, monitoring and controlling access to our system. It also made it much easier to detect vulnerable external users with simple and "easy to hack" passwords they use on multiple apps.

It's probably really best suited if you have a business where you have disparate systems but need a way to synchronize the user account information including the passwords between them. If you just have a Windows Active Directory environment only, there probably is no real need for something like this, but if you do this will help manage them easily.

Incentivized

• One of the things that Microsoft Entra External ID does really well is creating user logins, accounts and profile. It is very easy to create them, manage them and delete them. It is fast and reliant.
• Limit access or authorization feature. We can allow different levels of authorization and access. So that not all the employees would have access to all the data. Only some relaible employees would have access and power to change anything.
• Mutli factor authentication feature is also a really good feature to secure data. Even overseas vendors need MFS to login which gives double protection to our data.

Incentivized

• Fully customizable
• Automate various portions of various applications
• Great at Access Management (but also Release, Change, Event, etc)

Incentivized

• Troubleshooting diagnostic logs effectively requires VS Code
• Group and role management requires additional effort
• The programming model (XML) could use some developer experience love

Incentivized

• Sometimes it feels unresponsive and we have to restart the services.

Incentivized

I find it easy to use. The usability is great. Every department uses it for different purposes. Everyone access information relevant to them. Since we've started to use this we have seen less security incidents.

Incentivized

Besides the random issue where it gets unresponsive and we have to restart the services or reboot the server, it's been really solid. I've only had to contact support 1 time in the 15 years I've used it which is saying more than most other software. The cost of maintenance is also very cheap compared to some of the other software we use.

Incentivized

The best selling points for Azure Active Directory B2C that stand out from the competition are:

• Pricing, both at small and very large scale (and in between), is hard to beat
• The seamless integration with Azure should make Azure Active Directory B2C the first choice of CIAM platform for anyone building on Azure
• Full compatibility with Azure AD's audit log format means Azure Active Directory B2C can be easily integrated into your SIEM tooling

Incentivized

I haven't used anything but Tivoli in this space.

Incentivized

• Having monthly active users billing was cost-effective.
• Helped with the IT support that was already managing the Azure platform of the company; this helped to manage the costs better and optimize them.

Incentivized

• It has helped us all these years to not have to waste time managing users on multiple systems.
• It controls our password policy for our domain.

Incentivized