Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs Okta Workforce Identity comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.6
CyberArk Privileged Access Manager enhances security, automates tasks, aids SOX compliance, reduces risks, and scales security operations efficiently.
Sentiment score
7.2
Okta Workforce Identity offers 20%-30% ROI by enhancing efficiency, security, and reliability despite customization issues for some users.
The return on investment lies in improved security infrastructure, addressing over-privileged access, and reducing the risk of credential compromise, which is a major source of data breaches.
The end users have the authority to reconcile the password or verify it before using session isolation, which is one of the unique features that can be enabled through Privileged Session Manager, preventing any attacks from happening within the organization when connected with sessions through CyberArk Privileged Access Manager.
CyberArk Privileged Access Manager has helped customers save on costs primarily by reducing the number of engineering and information security personnel.
We have our dashboard to log in via Okta Workforce Identity.
 

Customer Service

Sentiment score
6.5
CyberArk's support shows improvement with efficient service but needs faster responses for high-priority issues and better tier coordination.
Sentiment score
7.2
Okta Workforce Identity's customer service is highly rated for responsiveness, expertise, and efficiency, despite occasional inconsistency.
CyberArk has been exceptional in coming back to us with immediate responses.
It could be forever until you talk to someone who knows what they are doing.
Based on the issue resolution and support quality, I rate the support 10 out of 10.
They are very supportive; they just open a ticket, and they support us very professionally.
We had an issue with the Okta Workforce Identity dashboard once in 2023 when we had an outage, but it recovered in a few minutes.
 

Scalability Issues

Sentiment score
7.6
CyberArk Privileged Access Manager is scalable and adaptable, supporting growth and diverse infrastructures despite potential licensing complexities.
Sentiment score
7.5
Okta Workforce Identity offers excellent scalability, supporting thousands of users and diverse infrastructures in cloud and on-premise environments.
The CPM can reportedly handle up to 50,000 accounts independently without issue.
I would rate it a ten out of ten for scalability.
They had 40,000 passwords in this one safe, and it was saving the last ten iterations of each password object. That means they had 400,000 password objects in this safe. They exceeded the limit.
 

Stability Issues

Sentiment score
7.7
CyberArk Privileged Access Manager is stable and reliable, with minor bugs often due to configuration or infrastructure issues.
Sentiment score
7.9
Okta Workforce Identity is highly stable and reliable, with minimal issues, earning top ratings and few disruptions.
Proper fine-tuning and expertise ensure the product performs well.
Overall, the stability of the solution is high.
It has a large customer base and positive feedback within my network.
Okta Workforce Identity is a stable product.
 

Room For Improvement

Users find CyberArk Privileged Access Manager needing UI updates, better integration, improved documentation, customizable reporting, and enhanced automation.
Okta Workforce Identity needs better integration, improved reporting, enhanced MFA, user-friendly interface, and competitive pricing alongside other improvements.
They want everything to be on the cloud, but even in the SaaS version of CyberArk Privileged Access Manager, they need to deploy some servers on-premises.
We cannot generate a plug-in for web-based applications.
If they want clients to move to the cloud, they need to support them in real-time.
If there was a fingerprint option, then only the person who has already added their fingerprint on their mobile phone could access it.
It could improve in the governance part, particularly regarding better role management and workflow, as I feel it is tedious on Okta.
Okta should have at least a local peering partner for countries that align with or comply with GDPR, so there are no compliance or audit questions.
 

Setup Cost

CyberArk Privileged Access Manager is costly but offers strong security, appealing to large enterprises with flexible subscription options.
Okta Workforce Identity offers competitive pricing, but costs can be high for large organizations and smaller companies might find it expensive.
CyberArk is expensive compared to other products I know.
CyberArk is comparatively expensive compared to other PAM solutions, such as Delinea, especially during renewal.
CyberArk's SaaS solution is particularly expensive.
 

Valuable Features

CyberArk Privileged Access Manager enhances security with policy automation, AI threat detection, and flexible, scalable privilege account management.
Okta Workforce Identity enhances efficiency with centralized management, Single Sign-On, and Multi-Factor Authentication, ensuring security and flexibility.
CyberArk Privileged Access Manager helps ensure data privacy because we now know who is using which credentials and at what time.
It keeps a record of activities, allowing me to easily fetch screen recordings to detect any misuse and see who did what and what happened.
It can integrate with Splunk, SNMP, and other solutions and technologies.
For the end user, it is beneficial as they do not have to remember a password or keep the password on a post-it for different applications; they just authenticate once to access several services and service providers.
Multi-factor authentication in Okta Workforce Identity is very useful so people who do not have access or are trying to access using just a user ID and password will be completely blocked because of this two-factor authentication.
You can only log in if you have the access, which protects the applications by avoiding cross-site scripting.
 

Categories and Ranking

CyberArk Privileged Access ...
Ranking in Privileged Access Management (PAM)
1st
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
229
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (3rd), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
Okta Workforce Identity
Ranking in Privileged Access Management (PAM)
6th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
68
Ranking in other categories
Single Sign-On (SSO) (2nd), Authentication Systems (6th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (3rd), Access Management (2nd), ZTNA as a Service (9th)
 

Mindshare comparison

As of September 2025, in the Privileged Access Management (PAM) category, the mindshare of CyberArk Privileged Access Manager is 16.3%, down from 22.0% compared to the previous year. The mindshare of Okta Workforce Identity is 2.8%, up from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM) Market Share Distribution
ProductMarket Share (%)
CyberArk Privileged Access Manager16.3%
Okta Workforce Identity2.8%
Other80.9%
Privileged Access Management (PAM)
 

Featured Reviews

Atul-Gujar - PeerSpot reviewer
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
SumitMundik - PeerSpot reviewer
Authentication process improves security with quick and intuitive user interface
The best feature is the speed and execution of Okta Workforce Identity. The moment you click on single sign-on, you immediately get the notification on your mobile phone, then you do the authentication and within a second you get authenticated. The entire customer experience is very good. The user interface is pretty simple, straightforward, and really good. Multi-factor authentication in Okta Workforce Identity is very useful so people who do not have access or are trying to access using just a user ID and password will be completely blocked because of this two-factor authentication. You will get the code, and as your device is authorized in the system, only that device can be used for the authentication purpose. A third person trying to access or hack your data will not be able to do that anymore. Additionally, you don't have to remember your passwords going forward. Previously, every 60 days or 90 days, passwords kept changing. With the two-factor authentication or single sign-on option in Okta Workforce Identity, you don't have to remember it anymore or write down passwords in plain text. If something goes wrong, we have the IAM team which can unlock your account immediately if you have issues.
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
867,445 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
15%
Manufacturing Company
9%
Government
6%
Computer Software Company
13%
Manufacturing Company
11%
Financial Services Firm
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business60
Midsize Enterprise41
Large Enterprise171
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise16
Large Enterprise32
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
There has been no reduced cost associated with CyberArk Privileged Access Manager, as when it is required, you must pay for their licensing and prepare the full environment. While there are costs f...
What do you like most about Okta Workforce Identity?
Okta has introduced the Universal Directory. It has custom attribute capability and user permissions to read/write on their profiles or hide them. Profile sources and identity profile sourcing are ...
What is your experience regarding pricing and costs for Okta Workforce Identity?
Pricing for Okta is reasonably not that much, however, I don't have access to the commercial aspect.
What needs improvement with Okta Workforce Identity?
Currently, in Okta Workforce Identity we get the two-digit authentication code. Instead of getting the two-digit authentication code, if we had an option to do fingerprint verification, that would ...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
No data available
 

Overview

 

Sample Customers

Rockwell Automation
FedEx, Zoom, Takeda, Lululemon Athletica, GrunHub, jetBlue, McKensson, Bain & Company, Engie, Peloton, Sonos, T-Mobile, Hewlett Packard, MGM Resorts, Ally Financial, Priceline, Albertsons, Itercom, Classy, FICO, Kensho, Live Nation, Drata, Rotary, and others.
Find out what your peers are saying about CyberArk Privileged Access Manager vs. Okta Workforce Identity and other solutions. Updated: July 2025.
867,445 professionals have used our research since 2012.