CyberArk Identity vs Fortinet FortiAuthenticator vs Symantec Siteminder comparison

Cancel
You must select at least 2 products to compare!
CyberArk Logo
932 views|783 comparisons
94% willing to recommend
Fortinet Logo
5,329 views|3,738 comparisons
92% willing to recommend
Broadcom Logo
1,605 views|1,220 comparisons
93% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between CyberArk Identity, Fortinet FortiAuthenticator, and Symantec Siteminder based on real PeerSpot user reviews.

Find out what your peers are saying about Microsoft, Cisco, Auth0 and others in Single Sign-On (SSO).
To learn more, read our detailed Single Sign-On (SSO) Report (Updated: April 2024).
769,599 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The solution helps with auditing, and monitoring, and integrates with Splunk for log analysis. User activity logs are captured in CyberArk Identity and sent to external tools like Splunk for analysis and monitoring.""I found the solution to be stable.""The tool helps with authentication. It acts as an MFA for any kind of privileged access that occurs in our organization.""The most valuable features of CyberArk Identity are its ability to control access to administrative staff.""CyberArk Identity is a mature product.""The initial setup of CyberArk Identity was straightforward.""The user self-service program and the Office 365 provisioning service feature are the most valuable. It is a very easy and feature-rich solution that gives priority to the users and security.""The user identification is simplified, and managing user privileges, whether adding or revoking them, is also quite straightforward when utilizing CyberArk SaaS."

More CyberArk Identity Pros →

"The solution is easy to learn and makes it easy for our users to add FortiToken. It's very easy to integrate if you have other Fortinet devices.""The product is stable and reliable.""The solution's most valuable aspect is that it easy to install. The user experience is very good.""It reduces the need for network administrator intervention by allowing the user to perform their own registration and resolve their own password problems and issues.""The solution is very easy to manage.""It is very stable. We have never had any issues with this solution.""It integrates very tightly with the rest of the Fortinet ecosystem.""Enables easy integration, allowing for 2FA with our VPN."

More Fortinet FortiAuthenticator Pros →

"It provides the breadth and the width to provide solutions for the different kinds of technologies which we have.""IWA is an out-of-the-box feature. The SAML-based federation is standard for all tools. However, CA Single Sign-On has made the federation configuration way too simple and handy to set up and use.""SAML is the best thing we're using right now because there is no need for creating an external account.""It's agent-based. It's convenient to deploy and integrate.""It is very scalable. We have a very large customer base: 75 million customers.""A valuable feature of Siteminder is the way it handles bulk traffic. The features it has, in terms of routing the traffic and load balancing, are good.""As our identity model continues to mature, probably the Federation is most valueable.""Symantec Siteminder Is both scalable and stable."

More Symantec Siteminder Pros →

Cons
"The solution could be easier to use and I found it to be very complex involving many steps.""The solution's difficulty in gaining skill sets should be improved because it's a vertical product.""CyberArk Identity could improve by having the ability to better manage the network, such as Cisco. There seem to be some issues in this area.""They can include the Mobile Device Management (MDM) feature.""They could improve their UI and make everything more user-friendly.""There is room for improvement in documentation. The documentation could be more specific about the changes needed to achieve specific goals.""In terms of a governance platform, it's worth noting that CyberArk doesn't offer a particularly strong one.""The OpenID features could improve in CyberArk Identity."

More CyberArk Identity Cons →

"The technical support team is bad.""The customization capability of Fortinet FortiAuthenticator is not very flexible.""If you want some other FortiAuthenticator from one site to another site, you should have requirements, but really if you have authentication and directory or another solution, you should change the password of the authenticator between the solution and the directory and other things. So transfer of data and other information should be simpler.""I would like to see some email options for Fortinet FortiAuthenticator.""It does the job I paid for, but the graphical interface could be improved.""A better integration with other vendors.""Other features that would improve the product are a single sign-on where people can use their Gmail ID to log-in, etc.""Fortinet FortiAuthenticator's initial setup process could be easier."

More Fortinet FortiAuthenticator Cons →

"I think they need to integrate some of the newer types of authentication into the product. I'm not seeing the innovation when it comes to biometrics in the product.""We would like to the OAuth be more stable, more issues being fixed rather than not.""We are finding some compatibility issues. We're still working with CA on them.""I would like to see a move towards the newer technologies, which is what we are doing right now. I think that's in the roadmap that's coming, in the 12.8 and 14 releases, but we would like to have it sooner than later.""Better documentation. I went through some sessions on single sign-on for version 12.7.""The initial setup was complex, painful. But that is to be expected of any new setup. When you're a big bank like us, any kind of migration to a new product is hard. I expect it to be painful, and it was painful. But it's not something that you can avoid.""The Federation part of CA Single Sign On, it's a bit complex to implement because it involves the SSL certificates, exchange of certificates, and lot of technical details. The documentation misses some important parts of this, so that's the reason it took some time for us to go live.""Some of the new protocols, like OAuth 2.0, could be improved."

More Symantec Siteminder Cons →

Pricing and Cost Advice
  • "We find that the pricing and licensing of this solution is adequate, as compared to the other competitors in the market."
  • "There is an initial license and then there is a subscription needed."
  • "I would rate the tool’s pricing a seven out of ten. The product’s pricing is expensive and is on a yearly basis. You will need to pay around 10,000 GBP for 500 users."
  • "The pricing of CyberArk Identity is competitive."
  • "There could be some additional costs apart from the licensing costs of the solution when you want to develop connectors in CyberArk Identity."
  • "In terms of pricing, BeyondTrust and CyberArk tend to be more expensive, with CyberArk receiving an eight out of ten, in this regard."
  • "CyberArk Identity is an expensive solution."
  • "It's not that affordable compared to Delinea or other products. They're less expensive and allow more customization. For the cost, it is expensive."
  • More CyberArk Identity Pricing and Cost Advice →

  • "I would start off with a VM including the base license and scale according to the number of users you need to authenticate."
  • "You can pay as you go with them. You purchase a base license and add to it as needed."
  • "The product could be more competitively priced."
  • "It costs more to license the high-availability option."
  • "The licensing structure is cost-effective for us compared to some of the other solutions that have recurring monthly costs."
  • "FAC is an affordable solution for Middle Range (200E/400E) and also needs a package of mobility agents (2,000) perpetual."
  • "The cost of the license could be less expensive. The license is paid on a yearly basis."
  • "We pay for licensing on a yearly basis."
  • More Fortinet FortiAuthenticator Pricing and Cost Advice →

  • "The price is quite comparable to the other enterprise-level solutions in that market."
  • "I recommend conducting a PoC on every available product before choose one."
  • "CA solutions are generally expensive but for the customer the ROI is big."
  • "Symantec Siteminder is expensive; they could definitely do better on the price."
  • "The licensing is fair for this solution."
  • "Siteminder is a little costly. You pay for licensing, and they offer packages, so if you have less users, then you have to buy different products at different prices. If you have more of a user base, then the package is different. They also include other features—for example, if you have a database and you're using Siteminder, then it's good to use a Semantic-specific database, but if you are using less, then you have to purchase the database separately. Whereas if you are going for a bigger license, then it comes within the package. It depends on which plan you are using."
  • "The pricing is reasonable."
  • More Symantec Siteminder Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Single Sign-On (SSO) solutions are best for your needs.
    769,599 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The integration capabilities, ability to integrate CyberArk into the overall IBB strategy of our current clients.
    Top Answer:Their pricing is obviously a lot higher than many vendors in the marketplace but their service is also unmatched.
    Top Answer:In terms of general user feedback, the more security you put in front of a user, the more they complain. So usability… more »
    Top Answer:The price is fine. I rate the pricing an eight and a half out of ten.
    Top Answer:The security space is changing. The product must provide passwordless and seamless connectivity. If a particular user is… more »
    Top Answer:It's agent-based. It's convenient to deploy and integrate.
    Top Answer:It doesn't have a feature for... or maybe it has, but for modern authentication, like OAuth or OIDC. We haven't utilized… more »
    Ranking
    9th
    Views
    932
    Comparisons
    783
    Reviews
    12
    Average Words per Review
    462
    Rating
    7.8
    5th
    Views
    5,329
    Comparisons
    3,738
    Reviews
    26
    Average Words per Review
    434
    Rating
    8.2
    15th
    Views
    1,605
    Comparisons
    1,220
    Reviews
    1
    Average Words per Review
    298
    Rating
    8.0
    Comparisons
    Also Known As
    Idaptive
    FortiAuthenticator
    Single Sign-On, SiteMinder, CA SSO, Layer7 SiteMinder
    Learn More
    Overview

    CyberArk Identity is a versatile identity management solution suitable for a wide range of enterprises. It is designed to enhance enterprise security and improve user experience. Its focus on security, compliance, and operational efficiency, combined with positive user feedback, makes it a strong contender in the identity management space.

    CyberArk Identity offers a robust suite of features to manage user identities and access privileges. It focuses on securing access to resources across various environments, including cloud and on-premises applications. Its capabilities include single sign-on (SSO), multi-factor authentication (MFA), lifecycle management, and privileged access management. These features are engineered to streamline access control, enhance security, and ensure compliance with regulatory standards.

    • Single Sign-On (SSO) simplifies user access by providing a single authentication point for multiple applications.
    • Multi-Factor Authentication (MFA) adds an extra layer of security by requiring additional verification methods.
    • Lifecycle Management automates user account provisioning and deprovisioning, aligning with HR processes and compliance requirements.
    • Privileged Access Management secures and monitors access to critical systems and data by privileged users.

    According to our user interviews, CyberArk Identity is praised for its reliability and user-friendly interface. IT professionals highlight the ease of integration with existing systems, while business executives appreciate the visibility it provides into access and identity management across the organization. Users also commend the responsive customer support, which is crucial for enterprise-level solutions.

    IT Professionals found that CyberArk Identity's focus on multi-layered security significantly reduced the risk of data breaches and unauthorized access. With a centralized dashboard and automation features, you can streamline identity and access management tasks, saving time and reducing complexity. Finally, it helps meet various compliance requirements.

    Fortinet FortiAuthenticator is the primary secure point of approved access into the Fortinet network, authorizing users, reviewing access permissions, and relaying the information to all Fortigate devices for comparison with identity-based protocols. Fortinet FortiAuthenticator is a top-ranked authorization and SSO solution.

    Appropriate secure access is fundamental to every role in an enterprise ecosystem. It is an integral function of every organization to ensure that every access and privilege is secure and to mitigate any possible risk to an organization. Approved users should only have access to the necessary information when they need it, from the appropriate location(s) to safeguard an organization's security at all times.

    Fortinet FortiAuthenticator is available as an appliance, virtual machine, or in the cloud.

    Fortinet FortiAuthenticator Methods

    • FSSO: FortiAuthenticator Single sign-on user will easily identify users and assign role or group access based on preset identity-based protocols. FortiAuthenticator integrates well with third-party LDAP or active directories, is very flexible, and combines these methods to provide effective security.

    • Active Directory Polling: Active directory access is securely identified by consistent polling of domain controllers. As users log in, username, IP address, and other details are logged into the database and can be shared across devices as directed by FortiAuthenticator protocols.

    • FortiAuthenticator Portal and Widgets: If a user system does not support AP polling, or for other reasons it is not feasible, FortiAuthenticator offers a unique secure authentication portal. Users can be manually authenticated and, to diminish the effect of numerous logins, an intuitive set of widgets is available to integrate into an organization's ecosystem that will automatically grant access to users when they access the organization's intranet homepage.

    • RADIUS Accounting Login: For organizations that use RADIUS authentication, RADIUS Accounting is available for user identification. This process will prompt user access information (IP and group, etc.) and eliminate the need for multiple levels of authentication.

    Reviews from Real Users

    Ernesto C., Presales Engineer at a comms service provider, shares,

    ”Key Features and Benefits

    1. Two-factor/OTP Authentication with FortiToken: Enforce user-based policies. Fortitoken is available in soft and hard versions for flexible usage. Most Valuable in Mobile Phones App for OTP.
    2. Integration with LDAP and AD: This solution integrates with existing enterprise systems and technologies from diverse vendors of user information management systems.
    3. LPAD/AD/RADIUS/SYSLOG/KERBEROS/REST API/FSSO and Web Portals: There is flexible integration with these services.
    4. It is usable in network, WAN, wireless, and VPN Scenarios.
    5. The domain and guest-users support are good.”

    Ibrahim M., Senior Network & Security Engineer at a tech services company, relates, "The initial setup is a valuable point on Fortinet products. Most of the time, putting the theory into practice on the devices is quite friendly and straightforward. As long as you can read English you can find your way around the solution and make it work. This is a high value point on Fortinet - the way everything is laid out in the web UI is user-friendly and quite straightforward. The UI is quite simple."




    Symantec® SiteMinder is designed to secure the modern enterprise through a unified access management platform that applies the appropriate authentication mechanism to positively identify users; provides single sign-on and identity federation for seamless access to any application; enforces granular security policies to stop unauthorized access to sensitive resources; and monitors and manages the entire user session to prevent session hijacking. Finally, Symantec SiteMinder is battle-tested and has been deployed in the largest IT environments in the world.

    Sample Customers
    MLB, Citi, Pfizer, SulAmerica, GE Capital, Shiseido
    Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
    British Telecom, CoreBlox, DBS, HMS, Itera ASA and Simeo
    Top Industries
    REVIEWERS
    Financial Services Firm30%
    Computer Software Company30%
    Insurance Company10%
    Consumer Goods Company10%
    VISITORS READING REVIEWS
    Financial Services Firm16%
    Computer Software Company14%
    Insurance Company8%
    Manufacturing Company7%
    REVIEWERS
    Computer Software Company28%
    Comms Service Provider16%
    Healthcare Company8%
    Transportation Company4%
    VISITORS READING REVIEWS
    Computer Software Company20%
    Comms Service Provider10%
    Government8%
    Manufacturing Company7%
    REVIEWERS
    Financial Services Firm39%
    Comms Service Provider7%
    Healthcare Company7%
    Retailer7%
    VISITORS READING REVIEWS
    Financial Services Firm35%
    Insurance Company11%
    Computer Software Company9%
    Manufacturing Company6%
    Company Size
    REVIEWERS
    Small Business53%
    Midsize Enterprise11%
    Large Enterprise37%
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise14%
    Large Enterprise64%
    REVIEWERS
    Small Business57%
    Midsize Enterprise26%
    Large Enterprise17%
    VISITORS READING REVIEWS
    Small Business31%
    Midsize Enterprise19%
    Large Enterprise50%
    REVIEWERS
    Small Business8%
    Midsize Enterprise4%
    Large Enterprise88%
    VISITORS READING REVIEWS
    Small Business12%
    Midsize Enterprise6%
    Large Enterprise82%
    Buyer's Guide
    Single Sign-On (SSO)
    April 2024
    Find out what your peers are saying about Microsoft, Cisco, Auth0 and others in Single Sign-On (SSO). Updated: April 2024.
    769,599 professionals have used our research since 2012.