Try our new research platform with insights from 80,000+ expert users

CyberArk Secrets Management vs Okta Workforce Identity comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Secrets Management
Ranking in Access Management
19th
Average Rating
7.2
Reviews Sentiment
7.6
Number of Reviews
4
Ranking in other categories
Enterprise Password Managers (16th)
Okta Workforce Identity
Ranking in Access Management
4th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
67
Ranking in other categories
Single Sign-On (SSO) (3rd), Authentication Systems (6th), Privileged Access Management (PAM) (7th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (3rd), ZTNA as a Service (12th)
 

Featured Reviews

RJ
Helps with compliance and improves operational flexibility
We have had both on-premises and SaaS models. The on-premise setup was a little difficult, but now that it has been moved to the SaaS model, everything is controlled by CyberArk. We just go and do our work. The initial on-premises setup took two weeks because it was an integrated effort. I had to spin up the servers and bring in the CyberArk Secrets Management resource to deploy the scripts. I then had to open networks and firewalls between CyberArk Secrets Management's on-premise servers and the application server. In the initial phase, it took two to three weeks, but it became easier when moving to the SaaS model. In terms of maintenance, it requires patching or upgrades, which happens one day in a month. If there is a failure, we have to roll back and try once again, which takes more time, but if everything goes smoothly, there is three to five hours of downtime.
Tor Nordhagen - PeerSpot reviewer
Extremely easy to work with, simple to set up, and reasonably priced
The drawback of this solution is that in our shops, many staff members sometimes have to be borrowed from one shop to another and the solution does not really support having multiple roles. The user experience we would like to have when a person works in shop A which pays their salary is that they should have access to pretty much everything. Maybe you have somebody who is a manager in that shop A, he should be able to order new wear, he should be able to change the pricing, he should be able to empty the cash registry, and ship it to the bank. But when for instance, in COVID, people had to fill in for people in shops where a lot of people were sick, then they had to actually use user accounts of people that work in shop B. If you were employed in shop A, you could not work in shop B without borrowing somebody else's user ID and password. Which is really bad. We haven't been able to work around that and Okta Workforce Identity does not have a solution for it. We are now piloting their identity governance solution. Obviously, it's easy to give somebody access, give them an account, and give them roles, but it's hard to maintain that. For example, if you moved from, say working in a shop to working in a warehouse. But why do you still have all this shop access? The solution has until now not had anything to really support the process of taking away access. But now we are in a better release program of Okta's identity governance solution. Although it's very basic, the solution has started on a journey, but identity governance is something that Okta Workforce Identity really needs to improve. The ability or the options in the solution for changing the look and feel are not good enough because in our partner portal, essentially what they have is an ugly admin interface. The admin interface is good enough for us technical people because that's all we need. We work with the product and we're able to see the data but when it comes to presenting the service portal, Okta Workforce Identity does not have any capabilities really for making it look pretty. To add branding and different graphical user interface elements than Okta basic for essentially delegated admin for the business-to-business portal is horrifying because you're essentially using the tech admin. The only option we had and used, was to take the tech admin console and strip it. so that a vendor that has some goods that are sold in the shops, when they want to add a user on their side, say a driver or a packer on their side who should know how much they've packed in a truck to come to our warehouse, then the user interface that this vendor is using, these functional people will then have to use an extremely basic user interface.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The automatic rotation of the password is the top feature."
"CyberArk Secrets Management is a critical solution for strengthening our security posture."
"The audit trails have been extremely important for us in helping our organization meet regulatory requirements."
"It's vital for effectively managing and securing my credentials."
"One of the most important features for us is the system's performance, particularly its speed of retrieving secrets."
"CyberArk's support team is knowledgeable and helpful, consistently responding on time."
"With CyberArk Secrets Management, we were able to resolve the automatic change of the passwords based on timelines. We were also able to retrieve the passwords in an encrypted format by utilizing the CyberArk platform, which was not provided to us by UiPath."
"You can only log in if you have the access, which protects the applications by avoiding cross-site scripting."
"The initial setup is easy."
"We find the solution to be reliable for our customers and it is nice that it is cloud-based and can be accessed from anywhere."
"We find the solution to be stable."
"Its simplicity and its integration with various vendor-agnostic platforms are the most valuable features."
"The most valuable functions are Single Sign-On (SSO) and Multi-Factor Authentication (MFA)."
"They have good push authentications."
"The impact of SSO on my IT overhead and user experience has been significant because it reduced authentication fatigue, password sharing, and password reusing."
 

Cons

"We did not have a good experience with technical support because their numerous processes caused delays in engaging, leading to project delays or issues with production."
"Implementation was complex and required professional services."
"Improvements for CyberArk Secrets Management include enhanced documentation with more use cases and step-by-step integration guides."
"We occasionally experience incidents that delay password injection back into the script."
"The password search feature and integration between different vaults could be enhanced. For instance, when updating passwords in both lower and higher environment vaults, improvement is required in search and upgrade functions."
"There is room for improvement with better documentation and less need for CyberArk Secrets Management personnel to assist us with their presence."
"Implementing it and ensuring seamless password rotations present challenges."
"SSO and MFA for improved end-user experience, and protection against password spray attacks, account password self-service."
"The guest user access could be improved."
"We still had to write several internal programs/scripts to complete the user-provisioning process. Okta does not have the ability to provision mailbox accounts for on-premise Exchange or in a hybrid O365 environment. The Group Push function from Okta to AD did not work reliably in our environment."
"UD attribute mapping, Okta group rules, and dynamic usage could use improvement. It also needs more in-depth functionality and features to integrate with RADIUS solutions."
"They should focus on improving them to provide top-notch team access management while still offering those typical features."
"The only aspect in which it can be improved is that the interface could be cleaner. I found this even when I was trying to do my certification exam because the certification is hands-on. You find yourself fumbling around a little bit to find simple things. This happens even when you start to get familiar with the product."
"A room for improvement in Okta Workforce Identity is its price. It could be cheaper. The biggest benefit of the solution is that everything works securely without extra steps, so you're saving on your workforce's time and effort because your applications work smoothly and securely, but you'd need to pay some amount of money for that. Another area that could be improved, though not necessarily regarding Okta Workforce Identity, is the SSO applications because so many of the source applications charge extra money to put the SSO to work, which means you have to buy a more expensive license. Nowadays, SSO is a mainstream functionality and it should be out-of-the-box in those applications because it's so easy to set up."
"We have experienced some challenges in integrating this solution with Scope and Cognito."
 

Pricing and Cost Advice

"CyberArk Secrets Management has a moderate pricing structure based on a per-tenant licensing model rather than a per-user account model like their PAM solution."
"It is in the middle. It is neither very cheap nor very expensive, so I would place it in the middle."
"The price of Okta Workforce Identity is reasonable."
"It could be a bit too pricey for small companies. Okta Workforce Identity can add a lot of benefits, but smaller companies may not have a lot of applications that need to be managed by Okta Workforce Identity. In larger organizations, there are more departments, applications, and users to manage. Okta Workforce Identity adds a bit more value to those bigger organizations. In addition to standard licensing fees, there are also additional costs for things"
"The product's price is high. For each feature, a certain payment is required."
"Though I don't know about the licensing model of the product, I wouldn't be surprised if Okta offers a per user license subscription model."
"The cost per user for this solution is really high and could be reduced."
"The licensing model is fine for general service usage. However, the charges for API features and API tokens can be quite high."
"The price of the solution is good."
"It is costly for large companies."
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
859,129 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
14%
Financial Services Firm
11%
Manufacturing Company
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for CyberArk Secrets Management?
It is in the middle. It is neither very cheap nor very expensive, so I would place it in the middle.
What needs improvement with CyberArk Secrets Management?
There is room for improvement with better documentation and less need for CyberArk Secrets Management personnel to assist us with their presence.
What is your primary use case for CyberArk Secrets Management?
My main use cases at the moment promote security all across the organization.
What do you like most about Okta Workforce Identity?
Okta has introduced the Universal Directory. It has custom attribute capability and user permissions to read/write on their profiles or hide them. Profile sources and identity profile sourcing are ...
What is your experience regarding pricing and costs for Okta Workforce Identity?
Pricing for Okta is reasonably not that much, however, I don't have access to the commercial aspect.
What needs improvement with Okta Workforce Identity?
I believe that if we integrate the workflows section into the main Okta Workforce Identity dashboard, it can be very useful.
 

Overview

 

Sample Customers

Information Not Available
FedEx, Zoom, Takeda, Lululemon Athletica, GrunHub, jetBlue, McKensson, Bain & Company, Engie, Peloton, Sonos, T-Mobile, Hewlett Packard, MGM Resorts, Ally Financial, Priceline, Albertsons, Itercom, Classy, FICO, Kensho, Live Nation, Drata, Rotary, and others.
Find out what your peers are saying about CyberArk Secrets Management vs. Okta Workforce Identity and other solutions. Updated: June 2025.
859,129 professionals have used our research since 2012.