

ForgeRock and AWS Identity and Access Management (IAM) are key players in identity and access management, each addressing distinct business needs. AWS IAM may have an advantage for businesses integrated into the AWS ecosystem due to its seamless compatibility.
Features: ForgeRock supports diverse identity standards and offers dynamic access controls, OpenIDM, and extensive consumer and workforce identity management. AWS IAM is known for its integration with AWS services, policy-driven permissions, and scalable access controls.
Room for Improvement: ForgeRock could enhance its user interface, reduce complexity for deployment, and improve cost efficiency. AWS IAM might benefit from broadening its support beyond AWS, improving documentation, and enhancing user management features.
Ease of Deployment and Customer Service: ForgeRock requires expert deployment but supports various environments; AWS IAM simplifies deployment for AWS users with strong integration and support connected to AWS services.
Pricing and ROI: ForgeRock involves higher initial costs potentially offset by advanced features, while AWS IAM offers competitive, predictable pricing within the AWS ecosystem, optimizing ROI for AWS-centric businesses.
I believe AWS provides significant ROI by reducing infrastructure costs and improving scalability and business agility.
AWS Identity and Access Management ensures security and allows for scalable application deployment.
It saves time by not requiring extensive manual setup.
On a B2B level, it opened up the market for TomTom to sell its services in a more efficient way to car companies.
We can use a Linux image from ForgeRock with different systems, applications, websites, and mobile apps to create various types of access for users.
I can definitely see that fewer employees are needed compared to using different SaaS applications.
Responses from AWS engineers aren't always direct, so when urgent issues occur, I manage them immediately and prioritize solutions.
The service is straightforward, and I haven't encountered much complexity.
We haven't needed to contact technical support as the IAM tool is intuitive and configured on our end.
The support portals offer comprehensive documentation, troubleshooting guides, and community forums that have been helpful for resolving common issues independently.
For standard support tickets, response times were very decent, and the support team was helpful in identifying configuration issues, especially with authentication trees, token settings, and directory replications.
The customer support is very flexible and supportive, particularly in the area of automation and customer deployments.
Scalability in AWS is significantly easier compared to on-premise solutions.
I implemented centralized and scalable solutions to improve larger setups.
The system's scalability could be enhanced to support larger organizations and better integrate with existing applications.
The access management layer is stateless, so I can scale horizontally by adding more nodes behind a load balancer as traffic increases.
The platform provides flexible authentication trees, enabling us to design custom MFA flows tailored for different user groups and risk profiles.
We scaled up with ForgeRock. My team received an award for implementing it for a 60 million customer base, which was the largest implementation at that time.
It was initially tough to identify the cause, yet by simplifying user management and utilizing group roles, I have managed to solve these issues.
AWS Identity and Access Management is designed to keep networks secure by ensuring only authorized users can access necessary data.
AWS Identity and Access Management is very stable.
ForgeRock supports integration with legacy systems in our organization by offering a wide range of connectors and APIs.
ForgeRock is very stable because it manages access, authentication, and authorization effectively.
If AWS could provide an option to automatically create templates based on desired access requirements, it would be extremely beneficial, especially for documentation and troubleshooting purposes.
AWS Identity and Access Management needs improvement in the prevention of unauthorized access to sensitive data and models.
The user activity tracking in AWS Identity and Access Management should be enhanced to provide detailed descriptions of user activities.
ForgeRock needs to focus on low-code, no-code solutions that allow for drag-and-drop functionality with good orchestration.
It would be better if they were available for support whenever the customer needs it, especially during migration or go-live time periods.
The main area is complexity. ForgeRock is extremely flexible, but the learning curve can be steep.
Initial setups do not require significant capital expenditures, making it advantageous for organizations to utilize AWS services.
Azure is often chosen for cost-efficiency.
While it offers good value for money, a reduction in costs would be appreciated by any organization.
The pricing, setup cost, and licensing are very straightforward, which is a good success.
One has to spend considerable time trying to understand the different modules and different needs for those modules on the licensing front.
The solution enables differentiation in tasks, such as managing cross-account access, setting service roles, and integrating corporate directories for temporary AWS access.
Its role-based access control enhances security by allowing me to assign specific permissions to users, which helps in managing access and maintaining cost control.
Specific permissions can be given to users, allowing tailored access to instances and S3 buckets.
Centralized management makes the biggest difference because it allows us to define, update, and enforce security and compliance rules from a single location.
ForgeRock positively impacts our organization as we manage a large number of users with ease, providing a standard IAM solution that simplifies our processes.
ForgeRock has positively impacted my organization by allowing us to migrate from the older system to the newer ForgeRock component, enabling us to go live with many products across geographies, enhancing security as it is all cloud-based, and with the company taking care of availability, it has reduced costs for the company.
| Product | Mindshare (%) |
|---|---|
| ForgeRock | 3.7% |
| AWS Identity and Access Management | 0.8% |
| Other | 95.5% |

| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 1 |
| Large Enterprise | 3 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 5 |
| Large Enterprise | 18 |
AWS Identity and Access Management offers comprehensive security controls like role-based access, MFA, and password management. It streamlines user permissions and integration with AWS services, focusing on efficiency and security with features such as flexible access options and global usability.
Organizations rely on AWS Identity and Access Management to manage secure authentication and authorize access across AWS services. This service supports cross-account scenarios and corporate directory integration, providing a secure, scalable, and efficient platform. Despite its strengths, improvements could be made with a graphical interface for permission management, better workload handling, and enhanced documentation. It offers robust policy-based controls and adapts to global usage without frequent updates.
What are the key features of AWS Identity and Access Management?
What benefits should be considered when evaluating AWS Identity and Access Management?
Industries implement AWS Identity and Access Management to manage user permissions and access policies across AWS services, focusing on secure authentication and authorization within teams. It is crucial for identity creation, role management, and policy controls in sectors like IT, healthcare, and finance, supporting diverse account structures for compliance and security.
ForgeRock is a comprehensive open-source identity and access management solution designed to meet the unique needs of your users and workforce. With ForgeRock you can orchestrate, manage, and secure the complete lifecycle of identities in any cloud or hybrid environment. ForgeRock allows you to set up bot detection, identity proofing, and risk-based authentication.
With ForgeRock, you can define access policies and automate the management of the identity lifecycle all from a central, easy to use, and graphical dashboard. ForgeRock Access Management allows you to build safe authentication using options like passwordless and usernameless logins, single sign-on, biometrics, contextual analytics, and behavioral authentication. When threats appear, you can swiftly change how your users access your most sensitive applications and provide users with secure access to the applications, systems, and resources they need on demand.
ForgeRock Benefits and Key Features
Reviews from Real Users
ForgeRock stands out among its competitors for a number of reasons. Two major ones are its robust identity and access tools and its being easy to manage and scale with one central dashboard.
PeerSpot users note the effectiveness of these features. A technology solutions leader at an outsourcing company writes, “We need it for multiple clients, multiple implementations. Not all of them are necessarily a multi-tenant solution. We need a very versatile solution that can do a lot of work, but from a single instance that we can centralize authentications and we don't duplicate the efforts and that's where ForgeRock seems to do better.”
Mohamed B., a cyber security consultant at a tech company, writes, "Their access management solution, OpenAM, is most valuable because it meets the needs of a lot of users. ForgeRock secured our system so that it is accessed only by authorized people, and it implemented the SSO."
We monitor all Identity Management (IM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.