Find out in this report how the two Single Sign-On (SSO) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
The return on investment includes operational efficiency gains, security risk reduction, compliance with regulations, improved user experience, productivity benefits, reduced overhead, and better security posture.
We have achieved significant time efficiencies with AWS IAM Identity Center.
The solution is really time-saving since I don't need to create users in each server or system manually, and user access control is streamlined.
AWS provides immediate solutions and assistance whenever needed, especially if issues arise that cannot be handled internally.
They are prompt, keep you updated, and provide excellent assistance.
AWS offers better assistance plans for their services.
Support documents are available on the internet in every language.
If you purchase retail, the support will be more difficult because they will assess the priority or rating from the customer.
Sometimes support takes long to engage and resolve, extending over weeks or even months.
AWS Identity Center successfully supports scalable deployments, allowing additional resources as the company grows.
The scalability of AWS IAM Identity Center is excellent.
It can handle both a small number of users and a bigger number of users efficiently.
Microsoft Active Directory scales effectively; I don't foresee any issues with that at all.
There can be issues if there is an outage on AWS's side, which could prevent logging in because your region might be down, affecting the Identity Center's availability.
It offers 99.96% uptime.
Stability-wise, it is functioning well without any outages or crashes.
If you meet the installation requirements from Microsoft, it will be very stable.
With multiple domain controllers, stability is ensured.
I've been working with Microsoft Active Directory for over 3 years, and we've had no problems.
Having a lot of users on one instance is hard to configure, so I hope for more flexibility and ease in configuration.
Enhancements could include automation tools or a centralized dashboard for managing roles and policies across multiple accounts, simplifying the process.
When configuring it with third-party tools, like Active Directory, the naming convention of permission sets requires careful attention, which can be confusing.
Exporting and verifying group memberships require command line scripts, which isn't simple.
There are some features that need improvements in terms of ease of use and frequency of updates.
Sometimes, it can be overly complicated, and when you apply Group Policy in an Active Directory environment, sometimes those settings apply and sometimes they don't.
AWS IAM Identity Center is available as a free service by default.
It is not that expensive, rated at three out of ten for costs.
Pricing for AWS IAM Identity Center is very affordable, rated at two out of ten with one being cheap.
For the cloud solution in our region, the pricing of Microsoft Active Directory is very high.
I consider Microsoft Active Directory expensive because if you buy this thing bundled with the Windows Directory Server, you get five user licenses for about a thousand euros, or a little bit less than this.
The pricing, setup cost, and licensing with Microsoft Active Directory is straightforward; you just buy the server and then have to buy the user CALs.
It provides the least privilege-based access control, which limits users to only the operations they need to perform without interfering with unrelated configurations.
These features allow for excellent micro-level control over resources, ensuring specific permissions are granted.
Its valuable features include granular access control, allowing precise control over who can access specific AWS resources and under what conditions using JSON-based policies.
To assess the impact of Microsoft Active Directory's centralized domain management on security protocols and access permissions, Microsoft Active Directory itself has constraints with security because when we have a solution such as SSO or Single Sign-On, which makes it easier for users to log in, some parts have security openings.
One valuable feature is the centralized creation of IDs.
I can control all the devices in my domain by just changing the group policies in one place.
| Product | Market Share (%) |
|---|---|
| AWS IAM Identity Center | 2.4% |
| Microsoft Active Directory | 3.1% |
| Other | 94.5% |
| Company Size | Count |
|---|---|
| Small Business | 3 |
| Midsize Enterprise | 3 |
| Large Enterprise | 4 |
| Company Size | Count |
|---|---|
| Small Business | 20 |
| Midsize Enterprise | 7 |
| Large Enterprise | 20 |
AWS IAM Identity Center is the recommended service for managing your workforce's access to AWS applications or your multiple AWS accounts (or both). It is a flexible solution that can be used to connect your existing identity source or help you create users in AWS. IAM Identity Center can be used alongside your existing AWS account access configurations.
Active Directory stores information about objects on the network and makes this information easy for administrators and users to find and use. Active Directory uses a structured data store as the basis for a logical, hierarchical organization of directory information.
This data store, also known as the directory, contains information about Active Directory objects. These objects typically include shared resources such as servers, volumes, printers, and the network user and computer accounts.
Security is integrated with Active Directory through logon authentication and access control to objects in the directory. With a single network logon, administrators can manage directory data and organization throughout their network, and authorized network users can access resources anywhere on the network. Policy-based administration eases the management of even the most complex network.
We monitor all Single Sign-On (SSO) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
