No more typing reviews! Try our Samantha, our new voice AI agent.

Azure Key Vault vs Microsoft Entra Workload ID comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Azure Key Vault
Ranking in Microsoft Security Suite
20th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
52
Ranking in other categories
Enterprise Password Managers (1st), Certificate Management Software (1st), Secrets Management Tools (2nd)
Microsoft Entra Workload ID
Ranking in Microsoft Security Suite
31st
Average Rating
8.0
Reviews Sentiment
4.6
Number of Reviews
3
Ranking in other categories
Identity and Access Management as a Service (IDaaS) (IAMaaS) (20th)
 

Mindshare comparison

As of August 2026, in the Microsoft Security Suite category, the mindshare of Azure Key Vault is 2.6%, up from 0.9% compared to the previous year. The mindshare of Microsoft Entra Workload ID is 0.9%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite Mindshare Distribution
ProductMindshare (%)
Azure Key Vault2.6%
Microsoft Entra Workload ID0.9%
Other96.5%
Microsoft Security Suite
 

Featured Reviews

Rajthilak BS - PeerSpot reviewer
Associate Vice President (Data Security & Protection - Confidential AI) at Standard Chartered Bank
Have addressed compliance challenges but still struggle with seamless integration of certificate issuance between environments
In terms of Azure Key Vault improvements, we have to compare the competitor. If we consider AWS, our bank has Microsoft PKI, which is a Microsoft product, for the entire digital certificate infrastructure. Even in the cloud, when it is AWS, the internal certificates are MS PKI. When we had a problem, users had to come to on-premise to get a certificate and import it to AWS Certificate Manager and assign it. We wondered why we could not issue the certificate directly from the cloud for cloud users. There was a simple way in AWS. They have a Private Certificate Authority (PCA) and Amazon Certificate Manager. Private Certificate Authority issues certificates to Amazon services. They also provide Amazon Certificate Manager to store and deploy certificates. These are two neat components - one is an issuer and another is storage and deployment solutions for certificates. With PCA, I can directly enable it and get certificates from AWS itself. AWS can issue SSL/TLS certificates if you enable it directly. If you consider Azure, it is not very clear. Even the naming convention, Key Vault, might not suggest that this is a PKI or certificate manager. You cannot issue certificates directly. They have app certificates and did not have a clear-cut certificate management solution in the cloud when I worked at that time. I am not sure whether they have updated Azure Key Vault as a full-fledged PKI solution now. From what I saw, it was not a full-fledged PKI solution. We are not majorly using Azure Key Vault because it is only for storing secrets. If some solutions can provide guidance on how we can maximize leverage, we can immediately look forward to doing that. We already have some business problems we want to solve. While our primary focus is AWS, many of the services such as ADO are running on Azure, and the secondary services are growing bigger.
reviewer2772159 - PeerSpot reviewer
Postdoctoral Researcher at a financial services firm with 10,001+ employees
Have experienced ongoing challenges integrating with existing workflows despite strong foundational capabilities
I don't know how I would assess the impact of AI-powered threat detection for us. It has helped with security operations in general; I'm being very cagey here, Damian. You can understand why. Where I work, there is a directory services team. There is a security team. The security team may have several different departments in there. I think they are behind the times. That's about as far as what I would say. We may have the modern firewalls and detections and all the rest of it, but I think from a modern way of working, which the identity is a user which is any device, any place, anywhere, from anything, okay, securely, they're not quite up with that concept, in my opinion. The review rating is 8.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It helps me increase my security posture and assists with regulatory and compliance requirements."
"The solution uses the encryption technique to store the secret information data that uses EPCE. There is also one feature that monitors Azure Key Vault."
"This is a very user friendly solution and the security level is very high."
"The GUI was quite easy for me to use."
"The initial setup is very straightforward. It only took a few minutes."
"Technical support is helpful."
"I find the simplicity of key management to be the most valuable feature. Key management has always been a difficult function to do, especially in the cloud premises. Azure Key Vault provides you with a mechanism for managing keys, without having to worry about protecting secrets is valuable."
"The most valuable aspect of the product is its ability to keep our admin password accounts for keys and a lot of our high-value assets."
"I would evaluate the customer service or technical support with Microsoft for Entra products as well; we are a strategic partner, so we're one of 500 companies that can talk to them directly."
"We have various options available with Microsoft Entra, such as B2B cross-tenant guest member accesses, and we can invite users and perform activities from that area, while we are also dealing with Azure IaaS, infrastructure as a service, which has different IAM platforms existing with resources or subscriptions."
"The product enables organizations to synchronize users to Microsoft 365 products."
 

Cons

"I would rate the stability of Microsoft Azure Key Vault an eight out of ten. We use the solution in the data science field. If there is some outage, we did not notice any prolonged outage which would affect our business significantly while working with it."
"Azure needs to provide versions of Key Vault that are suitable for different sizes of companies."
"While the solution already does a great job of managing keys, the solution could probably look at maybe expanding more into mobile devices and endpoints."
"It would be great if Azure allowed more third-party vendors into the ecosystem."
"Currently, our company has to add the secrets manually, one by one, in Azure Key Vault, which is a tedious process."
"The integration with Thales HSM is complex and is not out-of-the-box. Uploading the keys was quite a tedious process."
"One of my previous clients was one of the big banks here in the Netherlands and the EU courts have stated that Microsoft Azure Key Vault is not, according to their perspective, secure due to the fact that Microsoft has access to Key Vault."
"Users should be able to segregate the passwords."
"In my opinion, Microsoft Entra Workload ID can be improved in several ways."
"Integration with existing IAM solutions has not helped our identity management processes; it's all of the things that are in front of Directory and Entra, such as SalePoint and other toolsets, give us one of the worst identity experiences I think I've ever come across, which is why I'm trying to change it."
"Integration with other products must be made easier."
 

Pricing and Cost Advice

"You don't need to pay for a license for Azure Key Vault. It is billed on a pay-as-you-go basis."
"There are no extra costs beyond the standard fees, beyond maybe data transfer charges. It's $0.025 per 10,000 data transactions, so it is quite cheap."
"The product is neither cheap nor expensive."
"The pricing is decent. It has a pretty low price. It is a straightforward cost based on usage."
"The cost of the Azure Key Vault is very high and the pricing model is based on the number of keys that you store and retrieve."
"The product is affordable, in my opinion."
"Currently, the tool's monthly licensing costs are around 1,800 USD for all the environments combined, including the production and pre-production environments."
"Azure is cheaper than CyberArk... CyberArk is good, but it's quite expensive."
Information not available
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Manufacturing Company
9%
Computer Software Company
8%
Government
6%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise11
Large Enterprise27
No data available
 

Questions from the Community

Which is better - Azure Key Vault or AWS Secrets Manager?
Azure Key Vault is a SaaS solution. You can easily store passwords and secrets securely and encrypt them. Azure Key Vault is a great solution to ensure you are compliant with security and governanc...
What needs improvement with Microsoft Azure Key Vault?
Based on my three years of experience, I believe there have been no updates to Azure Key Vault. I think the product needs upgrades in terms of access control and certification improvements. While A...
What needs improvement with Microsoft Entra Workload ID?
In my opinion, Microsoft Entra Workload ID can be improved in several ways.Particularly about Microsoft Entra Workload ID, I think they still could improve categorization, which still has some room...
What advice do you have for others considering Microsoft Entra Workload ID?
I'm a consultant and not using the products myself, but rather in a capacity more as a consultant or reseller.I am not familiar with remote access products by ManageEngine. I do not use ManageEngin...
What is your primary use case for Microsoft Entra Workload ID?
I'm working on that area while still looking for a new solution or already using ManageEngine Password Manager or Microsoft Entra ID.I've been dealing both with ManageEngine and Microsoft. I am mos...
 

Also Known As

Microsoft Azure Key Vault, MS Azure Key Vault
No data available
 

Overview

 

Sample Customers

Adobe, DriveTime, Johnson Controls, HP, InterContinental Hotels Group, ASOS
Information Not Available
Find out what your peers are saying about Azure Key Vault vs. Microsoft Entra Workload ID and other solutions. Updated: June 2026.
909,725 professionals have used our research since 2012.