RSA Access Manager (Discontinued) vs. WSO2 Identity Server

The RSA was originally brought in for 2-factor authentication, which was used in conjunction with our internal Active Directory. This allowed us to secure our remote user connections and our internal user connections for PCI access. Later we tied it into ISE for secure wireless access.

Incentivized

If your systems are using standard authentication models then it is well suited. OpenID Connect, SAML 2.0 etc are all supported.

Incentivized

• Used in conjunction with our Active Directory for 2-factor authentication
• The virtual RSA token for multiple devices makes it easy to avoid needing a physical device
• The ability to leverage real-time analytics to identify when step-up is required

Incentivized

• It's open source so is highly configurable
• WSO2 provides their own paid support which is an essential add-on
• Implementation is straightforward and conforms to all major standards

Incentivized

• The support for new LDAP version(389-DS)

• Overall, the product works well but does take time and effort to implement in highly complex environments. However, I do not believe this is unique to WS02.

Incentivized

The solution is stable and well supported.

It's Oracle. Highly expensive and limited options

Incentivized

• To be compliant with the Security Standards about the 2FA

• WSO2 works well when you need specific user sign-up information and allows you to then tailor the access, for example, to the job role or area of discipline. We use this to tailor the learning offered to a user upon initial login.

Incentivized