UserLock vs. WSO2 Identity Server

UserLock is well suited to easily managing MFA for users of various levels to improve security hardening in a granular manner. It's open ended implementation of the IIS module is good for web authentication of all sorts of sites. Reporting of user's access and notifying of multiple logons is great.

Incentivized

If your systems are using standard authentication models then it is well suited. OpenID Connect, SAML 2.0 etc are all supported.

Incentivized

• Easy to setup and install for the most part
• Easy to onboard users
• Logging and reporting of user's access to devices really good

Incentivized

• It's open source so is highly configurable
• WSO2 provides their own paid support which is an essential add-on
• Implementation is straightforward and conforms to all major standards

Incentivized

• Implementing the agent in IIS scenarios could be easier and more guided
• IIS upgrade agent upgrade process could be improved upon
• An overall summary of applied permssions for a particular user would be useful

Incentivized

• Overall, the product works well but does take time and effort to implement in highly complex environments. However, I do not believe this is unique to WS02.

Incentivized

sorry was quite some time ago and can't remmber specifics but cost was a big factor and this was a very competitively priced product at the time.

Incentivized

It's Oracle. Highly expensive and limited options

Incentivized

• Sometimes does not unlock task manager access when it pops up with MFA prompt, can be a pain to have to undo
• It's great value for money compared to more high end products
• Generally reliable and has improved security hardening

Incentivized

• WSO2 works well when you need specific user sign-up information and allows you to then tailor the access, for example, to the job role or area of discipline. We use this to tailor the learning offered to a user upon initial login.

Incentivized