We performed a comparison between Amazon Cognito and CyberArk Privileged Access Manager based on real PeerSpot user reviews.
Find out in this report how the two Access Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The solution is proto connective and integrates well with other AWS services."
"The most valuable features of Amazon Cognito are the pre and post-token generation, and the different Cognito triggers. It has lots of functionality and flexibility."
"Cognito speeds up our development and saves us time."
"The federation is one of the most efficient features as the pricing is competitive."
"One of the key benefits of this software is its ease of integration with a wide range of applications, including mobile apps and web applications. This simplifies the process of integration, and it can be seamlessly incorporated with Azure, Kubernetes, and other software systems."
"They offer a permission tool to help us manage multi-factor authentication."
"The most valuable features of Amazon Cognito are OTP validation and email validation."
"This is a scalable solution. If our app or general usage increases, this solution can support it."
"It is scalable."
"AIM has been a great help in automating password retrieval which removes the need for hard-coded credentials."
"We like it for the ability to automatically change passwords. At least for my group, that's the best thing."
"The product is an important security measure against credential theft. It ensures session isolation and password rotation including pushing passwords to the endpoints."
"It enables companies to automate password management on target systems gaining a more secure access management approach."
"The central password manager is the most valuable feature because the password is constantly changing. If an outsider threat came in and gained access to one of those passwords, they would not have access for long."
"The flexibility of integrating with other technologies is important because of a lot of applications - a lot of COTS products - are not supported when we are bringing the application IDs. The CyberArk platform provides a lot of opportunities to do customization."
"The ability to develop and deploy applications with no stored secrets is very valuable."
"Amazon Cognito’s UI needs improvement while onboarding new users."
"Amazon Cognito could improve by simplifying the configuration."
"In a future release, we would like to have different methods to validate the characteristic of a user. For example, we would like to use biometric data to analyze the behavior of users."
"I believe this product could improve by enriching user profiles."
"The secure authentication of Amazon Cognito has benefited our company. We were previously using legacy signup systems."
"Cognito triggers can improve by providing more direct use cases rather than giving a white paper. A white paper is not at all interesting, it has too many details. It would be a benefit to provide a smaller document that is summarized. The smaller version would bring microdata, macro data is not helpful."
"The MFA related to the solution's side is nonexistent."
"The ease and simplicity of integration could be improved when using this solution. When using Okta, scope is a single endpoint with a parameter as a scope. In the Cognito for each scope, there is a separate endpoint."
"When something comes out, it's generally airtight and works as advertised. However, sometimes they are a little bit slow to keep up with what's coming out. In 2017, for example, they released support for Windows Server 2016, which had been out for a year or so."
"The product is very vaulting-focused. I'd love to see it expanding its capabilities a bit further into areas like just-in-time elevation, and access with non-vaulted credentials."
"I would like to see better usability for non-technical people."
"The initial setup has room for improvement to be more straightforward."
"This product needs professional consulting services to onboard accounts effectively based user profiles."
"Over the past seven years, I have seen a lot of ups and downs with the product."
"There is some stuff that we still have not fully integrated, which is our AIM solution. We are having all types of issues with it. I have been working with Level 3 support on it, but otherwise, from a functionality perspective, everything has been working except for the AIM solution."
"The web access piece needs improvement. We have version 9.5 or 9.9.5, and now we have to upgrade to version 10."
More CyberArk Privileged Access Manager Pricing and Cost Advice →
Amazon Cognito is ranked 5th in Access Management with 8 reviews while CyberArk Privileged Access Manager is ranked 1st in Privileged Access Management (PAM) with 142 reviews. Amazon Cognito is rated 7.6, while CyberArk Privileged Access Manager is rated 8.8. The top reviewer of Amazon Cognito writes "Good integration with AWS services but not feasible for B2C because MFAs are nonexistent". On the other hand, the top reviewer of CyberArk Privileged Access Manager writes "Lets you ensure relevant, compliant access in good time and with an audit trail, yet lacks clarity on MITRE ATT&CK". Amazon Cognito is most compared with Auth0, Microsoft Entra ID, Cloudflare Access, Okta Workforce Identity and WSO2 Identity Server, whereas CyberArk Privileged Access Manager is most compared with Cisco ISE (Identity Services Engine), Microsoft Entra ID, Delinea Secret Server, WALLIX Bastion and One Identity Safeguard. See our Amazon Cognito vs. CyberArk Privileged Access Manager report.
See our list of best Access Management vendors.
We monitor all Access Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.