Try our new research platform with insights from 80,000+ expert users

CyberArk Identity vs Microsoft Entra External ID comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 27, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.2
CyberArk Identity boosts resource efficiency and security, achieving up to 85% savings and enhancing strategic focus for users.
Sentiment score
3.6
Users faced challenges with Microsoft Entra External ID but saved costs and time compared to traditional, on-premises solutions.
I have seen over 30% return on investment due to the improvement in operational efficiencies through automation, which enhances productivity.
It has led to cost savings as well as time savings because I can use a single solution for all applications.
Companies can leverage it for setting up external identities without needing to develop their own solutions.
In terms of return on investment, prior to using this product, our company managed our own mail server with all internal authentication happening on premises, resulting in a ROI in the thousands every year.
 

Customer Service

Sentiment score
6.5
CyberArk Identity's support is praised for effectiveness but needs improvement in response times and engineer expertise consistency.
Sentiment score
4.6
Microsoft Entra External ID support varies; response times, documentation, and regional differences affect user satisfaction and solution accessibility.
They resolved the problem immediately after I reported it, on the same day, within one hour.
They respond immediately when requests are raised, and they are always available for priority one tickets.
I received prompt responses and support, which I would rate as very good.
Companies without a Microsoft license for Entra ID or Azure portal cannot add Azure AD B2C, creating logistical issues for some of my clients who are unable to evaluate the platform.
The support for business applications, infrastructure support, and Entra has been mostly positive with highly skilled technicians.
The documentation is very thorough, reducing the need for support.
 

Scalability Issues

Sentiment score
7.3
CyberArk Identity is praised for scalability and adaptability, suiting various enterprise sizes despite occasional performance lags.
Sentiment score
6.0
Microsoft Entra External ID offers scalable security for large enterprises, with distinct policies and strong performance despite some latency issues.
We can use it on different phones and computers, demonstrating its scalability.
When delving deep into the concepts, there is a lot to address and learn, especially when facing real-time scenarios.
You can scale it out pretty easily, and you can implement it very small.
This is one of EID's weak points compared to Azure AD B2C, which offers customizable authentication options, including attribute and password combinations.
End-user workloads experience increased latency in a cloud environment compared to on-premises resources.
Microsoft Entra External ID is quite scalable, and I would rate its scalability between eight and nine out of ten.
 

Stability Issues

Sentiment score
7.9
CyberArk Identity is praised for stability and reliability, rated highly by users for consistent performance with minimal issues.
Sentiment score
4.8
Microsoft Entra External ID is highly stable, reliable, and smooth, with minor rare issues, and positive user feedback.
We no longer have our data infiltrated by unauthorized persons, and tracking actions within the system has become very easy.
When you have it in the cloud, you have CyberArk every time you need it.
With a stable network, due to the redundant data centers across the globe, it is a lot easier to use as a SaaS solution.
I'd rate the stability of the Microsoft Entra External ID as a 10.
The stability of this solution is very good.
I have not encountered any stability issues with Microsoft Entra External ID.
 

Room For Improvement

CyberArk Identity needs enhanced reporting, integration, ease of use, federation capabilities, onboarding, and intuitive user interface.
Microsoft Entra External ID needs improved support, integration, pricing, security, UI, and customization for medium-sized businesses.
It would be helpful if they released a generalized document for processes such as migration.
Integration or deployment is extremely difficult for CyberArk Identity.
There's a need to enhance network performance.
This is particularly challenging during enterprise agreement renewals, as it's difficult for customers to review costs leading to lengthy negotiations.
Enhanced customizable login options and the ability to use attribute password logins are critical features that are required for Microsoft Entra External ID to gain dominance in the authentication market.
I would like to see a more detailed alert system that provides a summary of why alerts are generated, who is generating them, and the reasons behind it.
 

Setup Cost

CyberArk Identity pricing is higher but competitive, offering robust services appealing to larger companies needing strong security management.
Microsoft Entra External ID pricing is complex, potentially costly, but scalable, benefiting from Azure expertise and existing subscriptions.
Regarding pricing, it can be quite a lot for small companies.
The pricing is acceptable.
If I am not going fully cloud, there are additional resources I will need to purchase, such as spinning more VMs or acquiring an HSM device to encrypt the vault.
Regarding pricing, the cost seems high for single sign-on, especially for external applications like Oracle.
Microsoft's pricing is complex and difficult to fathom due to a range of different licensing options.
The cost can be a factor for Microsoft Entra External ID, but in general, it offers a scalable and efficient solution compared to deploying individual solutions.
 

Valuable Features

CyberArk Identity enhances security and operations with robust integration, SSO, MFA, and user-friendly features for improved team productivity.
Microsoft Entra External ID enhances security, management, and user experience through integration, single sign-on, and adaptive authentication features.
It impacts zero trust security strategies. It prevents lateral movements in the organization.
The two-factor authentication is very important, but the fact that every account is being regenerated every time we use it is the most important security feature for us.
It is the most powerful access management system.
It is crucial for hybrid environments, especially for integrating existing on-site infrastructures with cloud-based Active Directory, such as in Office 365 implementations.
EID unifies workforce users with external business partners, which is a very strong feature.
The detailed monitoring and reporting in Microsoft Entra External ID support compliance efforts effectively.
 

Categories and Ranking

CyberArk Identity
Ranking in Customer Identity and Access Management (CIAM)
6th
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
29
Ranking in other categories
Authentication Systems (10th), Identity Management (IM) (8th), Authorization Software (3rd), Enterprise Password Managers (6th), User Entity Behavior Analytics (UEBA) (9th), Access Management (6th), Active Directory Management (6th), Cloud Resource Access Management (3rd)
Microsoft Entra External ID
Ranking in Customer Identity and Access Management (CIAM)
4th
Average Rating
7.6
Reviews Sentiment
5.5
Number of Reviews
16
Ranking in other categories
Identity and Access Management as a Service (IDaaS) (IAMaaS) (8th), Microsoft Security Suite (21st)
 

Mindshare comparison

As of October 2025, in the Customer Identity and Access Management (CIAM) category, the mindshare of CyberArk Identity is 3.6%, down from 3.6% compared to the previous year. The mindshare of Microsoft Entra External ID is 8.4%, up from 4.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Customer Identity and Access Management (CIAM) Market Share Distribution
ProductMarket Share (%)
Microsoft Entra External ID8.4%
CyberArk Identity3.6%
Other88.0%
Customer Identity and Access Management (CIAM)
 

Featured Reviews

Hariharan Thangasamy - PeerSpot reviewer
Has strengthened privileged access control and improved audit visibility through session monitoring and password rotation
On the identity product side, it is awesome. However, they can improve in the documentation parts. For example, if there is a migration process, I can see the maximum customers are moving from self-hosted to on-premises or from on-premises to the cloud. It would be helpful if they released a generalized document for processes such as migration. A clear overview document would assist us in understanding more about the tool, configurations, and automations to enhance our security. Regarding the initial setup of CyberArk Identity, I faced some challenges. At some points, I could not find proper documentation for deploying, enhancing, or integrating with other components. I could not find the proper documentation in the community portal.
Suresh Kumar Subramaniyan - PeerSpot reviewer
Has supported secure access but still lacks full coverage for external identity challenges
The user experience is acceptable, but Microsoft Entra External ID is not a full-fledged IGA solution. We use different products for complete Identity Governance Administration. Microsoft Entra External ID is suitable for small-scale enterprises implementing identity lifecycle management since most have Active Directory. However, there are several challenges. The out-of-the-box connector has limited features for applications, requiring us to build scheme connectors. While small-scale enterprises can benefit from Microsoft Entra External ID's Identity Governance solution, large-scale enterprises might need different tools from leading market vendors such as SailPoint or Saviynt. Customers face particular challenges with contractor and B2B accounts. Microsoft Entra External ID isn't a complete cloud-based account solution, as it must handle internal employees and collaborate with internal Active Directory. There are delays in the identity lifecycle process, especially for contract partners during onboarding and off-boarding. This might be due to back-end syncing with Active Directory. B2B account removal and provisioning take considerable time. Access governance, particularly access certification for guest users, is time-consuming. Multi-factor authentication enforcement also presents challenges for external users.
report
Use our free recommendation engine to learn which Customer Identity and Access Management (CIAM) solutions are best for your needs.
872,706 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
12%
Manufacturing Company
11%
Healthcare Company
6%
Computer Software Company
16%
Financial Services Firm
12%
Manufacturing Company
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise4
Large Enterprise10
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise2
Large Enterprise6
 

Questions from the Community

What do you like most about CyberArk Identity?
The integration capabilities, ability to integrate CyberArk into the overall IBB strategy of our current clients.
What is your experience regarding pricing and costs for CyberArk Identity?
I am not certain about CyberArk Identity's exact pricing model. For comparison, Okta was around five dollars per user. CyberArk Identity offers good discounts to some clients, which influences thei...
What needs improvement with CyberArk Identity?
We do not specifically use the password vaulting feature of CyberArk Identity. The centralized user dashboard of CyberArk Identity has not been that important for us. If it would be possible to sha...
What is your experience regarding pricing and costs for Microsoft Entra External ID?
The only problem that you might face with Microsoft now is their complex licensing model.
What needs improvement with Microsoft Entra External ID?
For the last four or five years, I have been in an IT manager function, focusing on making things happen and having technical persons execute tasks. In the last three months, I have transitioned to...
What is your primary use case for Microsoft Entra External ID?
I am looking for a new solution and investigating existing products. We are already working with Microsoft Intune and SOTI. I have been working in the past with a Kaseya product, specifically Datto...
 

Also Known As

Idaptive
Azure Active Directory External Identities
 

Overview

 

Sample Customers

MLB, Citi, Pfizer, SulAmerica, GE Capital, Shiseido
Information Not Available
Find out what your peers are saying about CyberArk Identity vs. Microsoft Entra External ID and other solutions. Updated: September 2025.
872,706 professionals have used our research since 2012.