Share your experience using One Identity Safeguard Authentication Services

We use the solution for compliance with password requirements and enhanced security. It allows us to adhere to various SOX compliance requirements. 

The ease of administration has reduced the amount of time my team spends on access requests for Red Hat servers. It's ability to utilize Active Directory accounts and network passwords to access the servers that have been added to the domain. We have the ability to utilize domain services on older Red Hat Linux servers where the native tool doesn't support earlier versions. 

The solution allows us to utilize command restriction to prevent so much root access from being allowed while also deploying to multiple servers to maintain consistency.

This has greatly reduced my team's time on account management within our Red Hat environment. We were also able to pass some of the routine access requests to our Helpdesk/Desktop Support team to lighten my team's workload. Less password reset and unlock requests have come through to our team since the servers utilized Active Directory accounts for access. Users do not have to remember so many different username and password combinations to access the servers they manage.

We like that we have user accounts and passwords that match our domain so users are not trying to remember 30 different usernames and passwords for various servers. The command restrictions prevent so much root access from being allowed. We are able to utilize GPO to push policy down to multiple servers rather quickly. The product also supports older versions of Red Hat in our environment. This allows us to maintain security on these servers that are already vulnerable due to age until we can fully get them out of the environment. 

Sometimes, policy changes must be forced in by removing and re-applying policies locally on the server. It would be nice to see that the check-in process happens more often and that those changes happen much quicker on its own. 

Since this is tied to Group Policy, seeing some support around Advanced Group Policy Management would be nice. We are tightening security and processes around Group Policy in our domain, but Advanced Group Policy Management does line up with how Authentication Services work without the security and check-in/out process that AGPM has. 

I've used the solution for the last three years. That said, previously, we had used it for a couple of years, many years ago. 

The solution is mostly stable; it has some quirks at times.

Scalability is typically around licensing - buy more, and you can simply add more servers.

Support has always been very helpful. KBs are always easy to find. 

Positive

We only tested the native AD join tool that came out around RHEL 7. We switched to Authentication Services as it offered support for older versions of RHEL where the native solution didn't. 

The initial setup is straightforward.

We did the setup in-house.

ROI is more around manhours saved with administration around user accounts going from locally managed individually to globally managed through AD and applying configuration and policy settings at scale instead of individually. 

Setup is simple, however, the cost can be expensive. 

We did look into the RHEL native AD join tool.

We use the solution for centralized management of PCs and user accounts.

We tried other tools, but sometimes the user interfaces of other tools are a little bit difficult to understand.

The product enables device management. It is one of the reasons why we chose it. We can remotely help people. We can also do installation remotely. We needed LDAP and RADIUS server. The website is pretty straightforward. We have users, devices, and groups. It's easy to understand. It has a small learning curve. The product provides multi-factor authentication. We needed that.

We need more multi-factor authentication possibilities. I opened a ticket for it. However, it is not configurable in JumpCloud.

I have been using the solution for half a year.

I reported an issue. The support person contacted me. However, they didn’t come up with a solution yet. Support is not good enough.

Neutral

We were using internal Linux tools before. They were pretty old. Now, we are migrating to JumpCloud.

The initial setup is straightforward. Many helpful tools are available on the web, and there is a lot of helpful documentation. We will need knowledge of Windows and Linux. The product can be deployed in half a year. Our plan is to deploy it completely by the end of the year.

The solution is pretty expensive. It costs us EUR 250 per user per month. It was a point of hesitation for us. We can get premium support, too.

We also considered Okta. It is more suitable for Windows. If someone wants a tool for Windows, then Okta is pretty good. However, we want a solution for Windows and Linux. We also wanted LDAP. JumpCloud stands out in those things. Okta can do it, but not in the way that we would like it to.

The tool can be improved. I will recommend the solution to others. Overall, I rate the product an eight out of ten.