Coming October 25: PeerSpot Awards will be announced! Learn more

Azure Active Directory (Azure AD) vs Fortinet FortiAuthenticator comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary
Updated on September 6, 2022

We performed a comparison between Azure Active Directory and Fortinet FortiAuthenticator based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.

  • Ease of Deployment: Users of both solutions say that deployment is simple and easy.
  • Features: Users say both products have good stability, scalability, and security.

    Azure Active Directory users like the solution’s ease of use, single sign on, identity-based authentication, and its privileged access management. Users say the conditional access rules are a little limiting and that provisioning is not intuitive.

    Fortinet FortiAuthenticator users say the solution has an intuitive user interface, is easy to use, and has good integration with other Fortinet products. Reviewers mention that they want to see more integration capabilities with other products, and feel that it could offer more automation.
  • Pricing: Azure Active Directory users mention that the solution has various levels of licenses, with a free basic tier. Fortinet FortiAuthenticator users share mixed reviews on the pricing.
  • Service and Support: Most users of both solutions are satisfied with the level of support they receive.
  • ROI: Azure Active Directory users report a positive ROI. Fortinet FortiAuthenticator users do not mention ROI.

Comparison Results: Based on the parameters we compared, users favor Azure Active Directory over Fortinet FortiAuthenticator because it has a free option and users also report an ROI.

To learn more, read our detailed Azure Active Directory (Azure AD) vs. Fortinet FortiAuthenticator report (Updated: September 2022).
632,611 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"As an end-user, the access to shared resources that I get from using this product is very helpful.""If a company has hundreds of users that already exist in the cloud, and it now wants to enable those same users to be present in third-party applications that their business uses, like Atlassian or GoToMeeting, the provisioning technology can assist in achieving that.""The scalability is quite good.""The single sign-on of the solution is the most valuable aspect.""For some applications, it's not only working for authentication but it's also being used to apply roles for users. From the management perspective, it's much better to have this because in the past we constantly needed to go into the console of the different solutions and create or delete users or modify their roles and permissions. Now, with Azure Active Directory, we can do that from a single point. That makes our management model much easier.""The cloud security part is very valuable. Security is the most important thing in today's world. With Azure Active Directory, there are some features that tell you how you need to improve your security level. It informs you if you set up certain policies, e.g., this is where my users sign in. It tends to let you know if your organization has been breached with this security set up. Therefore, it is easier to know when you have been breached, especially if you set up a Conditional Access policy for your organization.""Being able to use Azure AD means that you can use some of the Azure AD security features like Advanced Password Protection. As well as querying your normal password requirements like lengths and complexity, Azure AD has a feature in which you can put specific words. It can be words to do with your company, words to do with your company location, or words that a lot of your employees would otherwise use. You can disallow them. It's very good at making more obvious passwords, ones they're not allowed to use anymore. That's a good feature.""Conditional Access, Geofencing, and Azure Multi-Factor Authentication are the major security features to secure resources."

More Azure Active Directory (Azure AD) Pros →

"We have not had issues with Fortinet FortiAuthenticator. It is stable.""The initial setup is very easy.""Simple to deploy, simple to use, and user-friendly.""This is a scalable product.""The most valuable features are the performance and ease of use.""I work a lot with Fortinet products and I call the support often. They are very quick to respond and the support is very good.""FortiAuthenticator is really good software that integrates very well with Fortinet products.""Intuitive interface and easy to deploy."

More Fortinet FortiAuthenticator Pros →

Cons
"Sometimes, what one customer may like, another may not like it. We have had customers asking, "Why is Microsoft forcing us to do this?" For example, when you use Exchange Server on-premise, then you can customize it for your company and these customizations are unlimited. However, if you use Exchange Online or with Microsoft 365, then your ability to make modifications is limited. So, only the cloud versus is limited.""Something that can be improved is their user interface""My understanding is, in the future, they will be able to bring everything into one single platform and they are not there yet.""At the free or basic level of service, Azure should provide identity protection features including single sign-on and multifactor authentication.""It doesn't function the same way as an Active Directory inside of an infrastructure, that is, a physical infrastructure. In the cloud, it is all flat. That's one of the disadvantages.""Azure AD does not support legacy authentication protocols, such as NTLM or Kerberos.""Everything should be in one package. There are so many different packages. They need to provide guidance because there are so many features and we don't know how to implement them in our organization.""The technical support could improve by having a faster response time."

More Azure Active Directory (Azure AD) Cons →

"I would like to see more security features in reference to identity login or identity identification.""Lacks a simplified two-factor authentication process.""The price of the solution could improve, it is expensive.""We would like to see Linux-based operating systems be able to integrate with FortiAuthenticator to get two-factor authentication running on them. as well. This is a shortcoming that I have faced a few times already.""I would like to see more support from Fortinet with tech support people who have as much expertise on the authenticator as they do on their firewalls.""There are some protocols, such as SHA and SHA-2, that are not supported.""The integration with other products, for example, some SAML authentications, would make it more flexible.""The speed of deployment on the cloud could be improved. It took a few days when it should have been just two days"

More Fortinet FortiAuthenticator Cons →

Pricing and Cost Advice
  • "This product is sold as part of the enterprise package and our licensing fees are paid on a yearly basis."
  • "MFA and P2 licenses for two Azures for fully-enabled scenarios and features cost a lot of money. This is where Okta is trying to get the prices down."
  • "We are a non-profit organization, so we get good prices from Microsoft for their products. It is working well, but it could be cheaper. For the type of organization we are, it would be good if they could give a little bit more and be more generous like Google, which has completely free services. Microsoft has free versions or web services called Office 365 E1, which is free for use, but we want to have it with more qualified clients."
  • "We pay about $35 per user."
  • "I think we're on the E3 — I think it was about 35 dollars per user."
  • "We got a good deal. If you get rid of all the products providing features that Azure Suite can provide, then it makes sense cost-wise."
  • "Microsoft has a free version of Azure AD. So, if you don't do a lot of advanced features, then you can use the free version, which is no cost at all because it is underpinning Office 365. Because Microsoft gives it to you as a SaaS, so there are no infrastructure costs whatsoever that you need to incur. If you use the free version, then it is free. If you use the advanced features (that we use), it is a license fee per user."
  • "Make sure that you get the most out of your Office 365 licenses for Azure AD. If you have additional concerns for users who don't have an Office 365 license, consider Azure AD Premium P1 and P2. Be aware that you have to evaluate your license usage beforehand."
  • More Azure Active Directory (Azure AD) Pricing and Cost Advice →

  • "The licensing structure is cost-effective for us compared to some of the other solutions that have recurring monthly costs."
  • "FAC is an affordable solution for Middle Range (200E/400E) and also needs a package of mobility agents (2,000) perpetual."
  • "The cost of the license could be less expensive. The license is paid on a yearly basis."
  • "We pay for licensing on a yearly basis."
  • "The pricing is fair."
  • "I rate the price of Fortinet FortiAuthenticator a three out of five."
  • "Between paying them to help with the configuration, the box itself, and the support, it came to like $12,500, including a three-year service agreement."
  • "When we buy the Fortinet FortiAuthenticator device there is a comparison between price and security."
  • More Fortinet FortiAuthenticator Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Single Sign-On (SSO) solutions are best for your needs.
    632,611 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:It has things like conditional access. For example, if someone is accessing sensitive information, then we could force them to do multi-factor authentication. Therefore, we can stop access if it is… more »
    Top Answer:Pricing-wise, they offer a stepladder approach. You can start with the lowest level features, then start increasing based on new requirements.
    Top Answer:Compared to what we can do on-prem, Azure AD lacks a feature for multiple hierarchical groups. For example, Group A is part of group B. Group B is part of group C. Then, if I put someone into group A… more »
    Top Answer:Hi, The NAC can operate without the 802.1x mechanism on the switch side. Also, I think you are making a very wrong comparison on the basis of the class it belongs to(FortiNac vs FortiAuthenticator).… more »
    Top Answer:First you have to buy the unit, then you have to buy the license for it. I think we have a 100-user license. The price depends on the model. We have a FAC 300, which channels X number of users, so if… more »
    Ranking
    1st
    Views
    23,978
    Comparisons
    18,481
    Reviews
    97
    Average Words per Review
    918
    Rating
    8.7
    2nd
    Views
    12,923
    Comparisons
    9,186
    Reviews
    13
    Average Words per Review
    515
    Rating
    7.5
    Comparisons
    Also Known As
    Azure Active Directory
    FortiAuthenticator
    Learn More
    Overview


    Azure Active Directory (Azure AD), part of Microsoft Entra, is an enterprise identity service that provides single sign-on, multifactor authentication, and conditional access to guard against 99.9 percent of cybersecurity attacks.

    Azure Active Directory (Azure AD) is a cloud-based identity and access management service. This service helps your employees access external resources, such as Microsoft 365, the Azure portal, and thousands of other SaaS applications. Azure Active Directory also helps them access internal resources like apps on your corporate intranet network, along with any cloud apps developed for your own organization.

    Azure AD is intended for:

    • IT admins: As an IT admin, use Azure AD to control access to your apps and your app resources, based on your business requirements. For example, you can use Azure AD to require multi-factor authentication when accessing important organizational resources. You can also use Azure AD to automate user provisioning between your existing Windows Server AD and your cloud apps, including Microsoft 365. Finally, Azure AD gives you powerful tools to automatically help protect user identities and credentials and to meet your access governance requirements.
    • App developers: As an app developer, you can use Azure AD as a standards-based approach for adding single sign-on (SSO) to your app, allowing it to work with a user's pre-existing credentials. Azure AD also provides APIs that can help you build personalized app experiences using existing organizational data. 
    • Microsoft 365, Office 365, Azure, or Dynamics CRM Online subscribers: As a subscriber, you're already using Azure AD. Each Microsoft 365, Office 365, Azure, and Dynamics CRM Online tenant is automatically an Azure AD tenant. You can immediately start to manage access to your integrated cloud apps.

    Fortinet FortiAuthenticator is the primary secure point of approved access into the Fortinet network, authorizing users, reviewing access permissions, and relaying the information to all Fortigate devices for comparison with identity-based protocols. Fortinet FortiAuthenticator is a top-ranked authorization and SSO solution.

    Appropriate secure access is fundamental to every role in an enterprise ecosystem. It is an integral function of every organization to ensure that every access and privilege is secure and to mitigate any possible risk to an organization. Approved users should only have access to the necessary information when they need it, from the appropriate location(s) to safeguard an organization's security at all times.

    Fortinet FortiAuthenticator is available as an appliance, virtual machine, or in the cloud.

    Fortinet FortiAuthenticator Methods

    • FSSO: FortiAuthenticator Single sign-on user will easily identify users and assign role or group access based on preset identity-based protocols. FortiAuthenticator integrates well with third-party LDAP or active directories, is very flexible, and combines these methods to provide effective security.

    • Active Directory Polling: Active directory access is securely identified by consistent polling of domain controllers. As users log in, username, IP address, and other details are logged into the database and can be shared across devices as directed by FortiAuthenticator protocols.

    • FortiAuthenticator Portal and Widgets: If a user system does not support AP polling, or for other reasons it is not feasible, FortiAuthenticator offers a unique secure authentication portal. Users can be manually authenticated and, to diminish the effect of numerous logins, an intuitive set of widgets is available to integrate into an organization's ecosystem that will automatically grant access to users when they access the organization's intranet homepage.

    • RADIUS Accounting Login: For organizations that use RADIUS authentication, RADIUS Accounting is available for user identification. This process will prompt user access information (IP and group, etc.) and eliminate the need for multiple levels of authentication.

    Reviews from Real Users

    Ernesto C., Presales Engineer at a comms service provider, shares,

    ”Key Features and Benefits

    1. Two-factor/OTP Authentication with FortiToken: Enforce user-based policies. Fortitoken is available in soft and hard versions for flexible usage. Most Valuable in Mobile Phones App for OTP.
    2. Integration with LDAP and AD: This solution integrates with existing enterprise systems and technologies from diverse vendors of user information management systems.
    3. LPAD/AD/RADIUS/SYSLOG/KERBEROS/REST API/FSSO and Web Portals: There is flexible integration with these services.
    4. It is usable in network, WAN, wireless, and VPN Scenarios.
    5. The domain and guest-users support are good.”

    Ibrahim M., Senior Network & Security Engineer at a tech services company, relates, "The initial setup is a valuable point on Fortinet products. Most of the time, putting the theory into practice on the devices is quite friendly and straightforward. As long as you can read English you can find your way around the solution and make it work. This is a high value point on Fortinet - the way everything is laid out in the web UI is user-friendly and quite straightforward. The UI is quite simple."




    Offer
    Learn more about Azure Active Directory (Azure AD)
    Learn more about Fortinet FortiAuthenticator
    Sample Customers
    Azure Active Directory is trusted by companies of all sizes and industries including Walmart, Zscaler, Uniper, Amtrak, monday.com, and more.
    Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
    Top Industries
    REVIEWERS
    Financial Services Firm17%
    Computer Software Company11%
    Manufacturing Company11%
    Energy/Utilities Company7%
    VISITORS READING REVIEWS
    Computer Software Company21%
    Financial Services Firm11%
    Comms Service Provider10%
    Government7%
    REVIEWERS
    Comms Service Provider14%
    Healthcare Company14%
    Transportation Company7%
    Marketing Services Firm7%
    VISITORS READING REVIEWS
    Comms Service Provider21%
    Computer Software Company19%
    Government8%
    Manufacturing Company5%
    Company Size
    REVIEWERS
    Small Business30%
    Midsize Enterprise13%
    Large Enterprise57%
    VISITORS READING REVIEWS
    Small Business19%
    Midsize Enterprise15%
    Large Enterprise66%
    REVIEWERS
    Small Business52%
    Midsize Enterprise33%
    Large Enterprise15%
    VISITORS READING REVIEWS
    Small Business30%
    Midsize Enterprise21%
    Large Enterprise49%
    Buyer's Guide
    Azure Active Directory (Azure AD) vs. Fortinet FortiAuthenticator
    September 2022
    Find out what your peers are saying about Azure Active Directory (Azure AD) vs. Fortinet FortiAuthenticator and other solutions. Updated: September 2022.
    632,611 professionals have used our research since 2012.

    Azure Active Directory (Azure AD) is ranked 1st in Single Sign-On (SSO) with 99 reviews while Fortinet FortiAuthenticator is ranked 2nd in Single Sign-On (SSO) with 15 reviews. Azure Active Directory (Azure AD) is rated 8.8, while Fortinet FortiAuthenticator is rated 7.6. The top reviewer of Azure Active Directory (Azure AD) writes "With multi-factor authentication, we've seen a marked decrease in the number of threats we've seen come through". On the other hand, the top reviewer of Fortinet FortiAuthenticator writes "A reasonably priced solution that can be scaled toward different functionalities and offers flexible SMS messaging". Azure Active Directory (Azure AD) is most compared with Google Cloud Identity, Auth0, Okta Workforce Identity, AWS Directory Service and SailPoint IdentityIQ, whereas Fortinet FortiAuthenticator is most compared with Fortinet FortiToken, Cisco ISE (Identity Services Engine), Duo Security, Microsoft Authenticator and CyberArk Privileged Access Manager. See our Azure Active Directory (Azure AD) vs. Fortinet FortiAuthenticator report.

    See our list of best Single Sign-On (SSO) vendors.

    We monitor all Single Sign-On (SSO) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.