We performed a comparison between CyberArk Privileged Access Manager, Gemalto Protiva, and OneLogin by One Identity based on real PeerSpot user reviews.
Find out what your peers are saying about CyberArk, Delinea, BeyondTrust and others in Privileged Access Management (PAM)."Creating policies and the password rotation feature have been valuable. We don't have to memorize our password for the ADM account."
"We are able to centrally manage credentials, touch applications, and rotate passwords."
"Helped us meet our standards and requirements to help us comply with industry standards and banking regulations."
"The flexibility of integrating with other technologies is important because of a lot of applications - a lot of COTS products - are not supported when we are bringing the application IDs. The CyberArk platform provides a lot of opportunities to do customization."
"It is very simple to use."
"This is a complete solution that can detect cyber attacks well."
"AIM has been a great help in automating password retrieval which removes the need for hard-coded credentials."
"For a while, there were individual IDs having privileged access. We wanted to restrict that. We implemented the solution so that it can be more of internal control. We can have session recordings happening and reduce our attacks."
"The most valuable feature for us is the ability to use Active Directory groups as virtual containers instead of domains because it means that we can control our access groups better."
"In my role, the most valuable features are two-factor authentication and self-service password reset. The most helpful feature for the institution as a whole is probably the single sign-on. As an IT director, I care about security and ease of use."
"It's super useful to have a single pane of glass when it comes to access management."
"Once I made the OneLogin ID, it would essentially make user names and passwords for every application that we had."
"OneLogin is efficient."
"The single sign-on and the fact that we can integrate everything in one place and control from there were valuable features of this solution."
"When it comes to access management, the solution's single pane of glass is extremely important. The single pane of glass for access management enables collaborative work between IT and security. We have access to certain applications that require device trust. Based on the role, we can access those applications through OneLogin Desktop."
"Simplicity is the most valuable part of OneLogin."
"Documentation."
"I would like to see better usability for non-technical people."
"The initial setup has room for improvement to be more straightforward."
"There should be more models and licensing plans for this software."
"The product is very vaulting-focused. I'd love to see it expanding its capabilities a bit further into areas like just-in-time elevation, and access with non-vaulted credentials."
"The admin interface of the Password Vault Web Access (PVWA) is moving from an old style (the classic interface) to a new style (the v10 interface) and unfortunately, this process is quite slow."
"PAM could be more user-friendly and CyberArk could update the documentation to include more real-world examples. You have to learn it yourself through trial and error. In particular, the online documentation should have more information about troubleshooting."
"It can be made user-friendly, in the sense of the console is pretty outdated."
"The initial setup was a bit complex."
"The user interface needs improvement."
"The solution keeps going down for many hours, which impacts the entire company. You can't access any applications. OneLogin Desktop has a huge problem where it locks your computers and you need to reset the whole computer, which is pretty insane."
"We've been experiencing some pain points since the acquisition. For example, there have been some outages we didn't see previously, which are a big topic with my executive team. You have hundreds of applications relying on this service for login. If the service is unavailable, nobody can log into these applications."
"I would like better reporting from SmartFactor Authentication when a user is not able to sign in due to a new location, new IP, new device, et cetera."
"This product doesn't necessarily provide us with all of the functionality that we need, such as being able to share passwords with external users."
"The tool must be made more robust."
"They have downtime twice a year or once in six months. During the downtime, the SSO page did not come up. When users wanted to get to their email, they were redirected to the OneLogin page, but the page did not come up, and MFA and logins failed. It completely crippled us."
"While I initially used OneLogin's desktop feature to extend SSO, I discontinued it two years ago due to limitations."
"In terms of managing the users on a large scale, it would be easier if they had some kind of user management portal."
More CyberArk Privileged Access Manager Pricing and Cost Advice →
Earn 20 points