No more typing reviews! Try our Samantha, our new voice AI agent.

Amazon Cognito vs CyberArk Identity comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 11, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Amazon Cognito
Ranking in Access Management
10th
Average Rating
7.6
Reviews Sentiment
6.5
Number of Reviews
17
Ranking in other categories
No ranking in other categories
CyberArk Identity
Ranking in Access Management
7th
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
29
Ranking in other categories
Authentication Systems (9th), Identity Management (IM) (8th), Authorization Software (3rd), Enterprise Password Managers (9th), User Entity Behavior Analytics (UEBA) (9th), Active Directory Management (6th), Cloud Resource Access Management (3rd), Customer Identity and Access Management (CIAM) (7th)
 

Mindshare comparison

As of May 2026, in the Access Management category, the mindshare of Amazon Cognito is 3.3%, down from 5.8% compared to the previous year. The mindshare of CyberArk Identity is 3.5%, up from 3.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Access Management Mindshare Distribution
ProductMindshare (%)
CyberArk Identity3.5%
Amazon Cognito3.3%
Other93.2%
Access Management
 

Featured Reviews

BM
Staff Software Engineer at Visa
Custom authentication has enabled secure multi-factor logins and unified access across apps
The features or capabilities of Amazon Cognito that I have found the most valuable so far include its seamless operation and the requirement of fewer integrations from the client side. All the features are there, enabling us to create the users, manage the groups, and manage access. Mostly, the access management is very good in Amazon Cognito, I would say. The benefits and positive impacts that Amazon Cognito has had in my experience include the fact that earlier we needed to implement so many things on behalf of the product itself. Now, the go-to-market strategy requires less than a week to complete integrations of the user flow, specifically mentioning that a basic authentication flow could be completed in a week itself. We don't have to care about how we manage the passwords, how we manage groups, and how we manage access management because all those things are there. It's handy, the documentation is very good, and it is easy to integrate. That's the reason I would say that the impact AWS is building on the product is great.
Hariharan Thangasamy - PeerSpot reviewer
Cybersecurity Delivery Analyst at Accenture
Has strengthened privileged access control and improved audit visibility through session monitoring and password rotation
On the identity product side, it is awesome. However, they can improve in the documentation parts. For example, if there is a migration process, I can see the maximum customers are moving from self-hosted to on-premises or from on-premises to the cloud. It would be helpful if they released a generalized document for processes such as migration. A clear overview document would assist us in understanding more about the tool, configurations, and automations to enhance our security. Regarding the initial setup of CyberArk Identity, I faced some challenges. At some points, I could not find proper documentation for deploying, enhancing, or integrating with other components. I could not find the proper documentation in the community portal.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I find most valuable about Amazon Cognito is the single sign-on feature that provides a token for accessing protected APIs."
"What I find most valuable about Amazon Cognito is the single sign-on feature that provides a token for accessing protected APIs."
"The features or capabilities of Amazon Cognito that I have found the most valuable so far include its seamless operation and the requirement of fewer integrations from the client side."
"They offer a permission tool to help us manage multi-factor authentication."
"This is a scalable solution. If our app or general usage increases, this solution can support it."
"What is quite valuable is that we can outsource storage of the credentials to AWS, and they manage it quite securely."
"I rate Amazon Cognito nine out of ten."
"Cognito speeds up our development and saves us time."
"What I like most about CyberArk Identity is the model that is in place."
"I like the RBAC (Role-Based Access Control). It basically involves defining various roles, and then simply assigning those roles to users."
"If anyone makes an error, or if an incident occurs by accident, the business will not be harmed as a result of this activity."
"The best feature of CyberArk Identity is the single sign-on feature that offers quick and one-click access."
"I had one machine that I could not use due to an invalid token. They resolved the problem immediately after I reported it, on the same day, within one hour. It is a very good experience."
"Overall, I would rate CyberArk Identity a nine out of ten."
"The solution helps with auditing, and monitoring, and integrates with Splunk for log analysis. User activity logs are captured in CyberArk Identity and sent to external tools like Splunk for analysis and monitoring."
"I find the CyberArk Identity portal quite intuitive; it has changed a lot over the last year and a half and if you think logically and understand your environment, it is easy to establish a suitable setup for yourself and all your vendors."
 

Cons

"The ease and simplicity of integration could be improved when using this solution. When using Okta, scope is a single endpoint with a parameter as a scope, but in Cognito, for each scope, there is a separate endpoint."
"I believe this product could improve by enriching user profiles."
"Amazon Cognito could be improved by making it easier for us to add more data to the token, allowing customization of JWT."
"The MFA related to the solution's side is nonexistent."
"I think Amazon Cognito provides less flexibility to customize at the moment."
"The setup and configuration can be complex, especially for advanced use cases."
"Amazon Cognito could improve by simplifying the configuration."
"Cognito has the possibility to render the login screen and all the customer flows related to managing the account. Still, it's useless in an international setup. They are unable to localize these screens, so we had to write our own screens and just use the Cognito API."
"The product is not cheap, especially if you opt for an on-premise deployment requiring a complex server infrastructure. On the other hand, choosing the software as a service version simplifies infrastructure requirements but necessitates being online all the time."
"CyberArk Identity is kind of expensive."
"They could improve their UI and make everything more user-friendly."
"They can include the Mobile Device Management (MDM) feature."
"When you translate the page from one language to another, it can be a difficult process. The translation isn't always good, and it may have a completely different name. I've noticed this in the English to Spanish translation."
"To enhance the product, they can consider improving the user interface of the software and possibly the customer support team. Sometimes, there is a delay in handling my inquiries via email, which could be addressed for better service."
"The reporting functionality is somewhat complicated."
"They can include the Mobile Device Management (MDM) feature."
 

Pricing and Cost Advice

"The product is relatively inexpensive compared to other tools."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a five out of ten."
"The price of Amazon Cognito is low. The pricing model is based on the users."
"The price of the solution depends on the number of users using it."
"The pricing is bad so I rate it a two out of ten."
"The price of Amazon Cognito is expensive. We are on an annual subscription."
"We pay $600 monthly per user for licences and there are no other additional costs."
"The pricing of this solution is good compared to other solutions on the market."
"In terms of pricing, BeyondTrust and CyberArk tend to be more expensive, with CyberArk receiving an eight out of ten, in this regard."
"There could be some additional costs apart from the licensing costs of the solution when you want to develop connectors in CyberArk Identity."
"It's not that affordable compared to Delinea or other products. They're less expensive and allow more customization. For the cost, it is expensive."
"CyberArk Identity is an expensive solution."
"The solution is cheap and I rate its pricing an eight out of ten."
"Their pricing is obviously a lot higher than many vendors in the marketplace but their service is also unmatched."
"We find that the pricing and licensing of this solution is adequate, as compared to the other competitors in the market."
"The pricing of CyberArk Identity is competitive."
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
894,738 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
11%
Computer Software Company
8%
Manufacturing Company
7%
Financial Services Firm
6%
Financial Services Firm
15%
Manufacturing Company
10%
Computer Software Company
8%
Construction Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise5
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise4
Large Enterprise10
 

Questions from the Community

What do you like most about Amazon Cognito?
The most valuable feature of the solution is its swift authentication.
What is your experience regarding pricing and costs for Amazon Cognito?
I am aware that the pricing of Amazon Cognito is not managed by me directly but is managed by some other teams, specifically the DevOps teams. As far as I know, it is based on how many users we hav...
What needs improvement with Amazon Cognito?
I think Amazon Cognito provides less flexibility to customize at the moment. It is very tightly coupled with its own services, so it does not provide customization according to what the client need...
What is your experience regarding pricing and costs for CyberArk Identity?
I am not certain about CyberArk Identity's exact pricing model. For comparison, Okta was around five dollars per user. CyberArk Identity offers good discounts to some clients, which influences thei...
What needs improvement with CyberArk Identity?
We do not specifically use the password vaulting feature of CyberArk Identity. The centralized user dashboard of CyberArk Identity has not been that important for us. If it would be possible to sha...
What is your primary use case for CyberArk Identity?
It's not being purchased through AWS, but we're using CyberArk Identity as a SaaS solution. I think it's running on AWS, but we bought it directly from CyberArk.
 

Also Known As

No data available
Idaptive
 

Overview

 

Sample Customers

Expedia, Intuit, Royal Dutch Shell, Brooks Brothers
MLB, Citi, Pfizer, SulAmerica, GE Capital, Shiseido
Find out what your peers are saying about Amazon Cognito vs. CyberArk Identity and other solutions. Updated: April 2026.
894,738 professionals have used our research since 2012.