


ForgeRock and Okta Platform are prominent players in the Identity and Access Management category. ForgeRock seems to have the upper hand with its strong customization capabilities, while Okta Platform is favored for its user-friendly approach and fast deployment.
Features: ForgeRock stands out with its flexibility, robust DevOps support, and high customization levels, suitable for integrating modern protocols. Okta Platform is recognized for seamless integration capabilities, effective identity administration, and comprehensive automation features.
Room for Improvement: ForgeRock is critiqued for its complex UI and documentation, requiring sophistication for customization, and users seek better reporting tools. Okta Platform faces occasional downtime and user experience issues, like prompt fatigue, needing better certificate management and log analytics.
Ease of Deployment and Customer Service: ForgeRock offers extensive deployment options, including on-premises solutions, praised for its dedicated customer support and community involvement. Okta Platform, cloud-based, ensures rapid deployment with minimal setup challenges and strong proactive support.
Pricing and ROI: ForgeRock offers competitive pricing with an open-source option, beneficial for enterprises. Okta Platform, though effective, is perceived as more costly, particularly for larger organizations, offering solid ROI through enhanced security integration.
We were able to implement zero trust extremely quickly because of the platform and its ongoing developments, including Cisco Duo Network Gateway, which enabled that transition to zero trust extremely quickly.
Not having MFA means you cannot put a price tag on that because you will be hit with ransomware immediately.
The biggest return on investment was the ease of use for the end users to have that secondary authentication when logging into the critical systems.
On a B2B level, it opened up the market for TomTom to sell its services in a more efficient way to car companies.
We can use a Linux image from ForgeRock with different systems, applications, websites, and mobile apps to create various types of access for users.
I can definitely see that fewer employees are needed compared to using different SaaS applications.
Employee onboarding used to be a major pain point, but the automation Okta Platform provides for creating user accounts across various apps or SaaS tools has made our life much easier.
First, it improves the security authentication and authorization processes across the organization, securing applications with single sign-on and MFA.
We have our dashboard to log in via Okta Workforce Identity.
They got back to us quickly, were nice, and gave us what we needed.
I would rate their support 10 out of 10.
I would rate support for Cisco Duo a 10, as I have never had a negative experience.
The support portals offer comprehensive documentation, troubleshooting guides, and community forums that have been helpful for resolving common issues independently.
For standard support tickets, response times were very decent, and the support team was helpful in identifying configuration issues, especially with authentication trees, token settings, and directory replications.
The team is very responsive and takes a sense of ownership and accountability.
By offering a system to set varying priority levels on support tickets, urgent issues could receive quicker attention, benefiting business continuity and customer satisfaction.
For Okta Platform, the customer service is seamless, and I am very satisfied with their assistance compared to other channels such as Microsoft's, which usually takes longer to resolve issues.
You can raise issues based on urgency using classifications such as P1, P2, P3, and P4, and you will receive a response within two hours for P1 and within four hours for P2.
In my last contracting position, it was a large one for a major worldwide airline that had hundreds of thousands of devices that could use Cisco Duo, and it scaled very well.
You would not need many more engineers to manage Cisco Duo even if we scale up to 500 employees because it is so simple to manage.
Cisco Duo is scalable for organizational growth.
The access management layer is stateless, so I can scale horizontally by adding more nodes behind a load balancer as traffic increases.
The platform provides flexible authentication trees, enabling us to design custom MFA flows tailored for different user groups and risk profiles.
We scaled up with ForgeRock. My team received an award for implementing it for a 60 million customer base, which was the largest implementation at that time.
The scalability of Okta Platform is impressive, but its effectiveness relies on how integrations are designed, rate limits are handled, and day-to-day operations are managed.
It is secure, providing needed scalability without impacting performance.
Clients can scale their API access requests beyond default limits, which is adaptable according to requirements without impacting performance or deployment.
We have not had any Cisco Duo outages across all the companies I have worked for that utilize Cisco Duo.
The stability has been excellent.
I did not notice any downtime or crashes with Cisco Duo.
ForgeRock supports integration with legacy systems in our organization by offering a wide range of connectors and APIs.
ForgeRock is very stable because it manages access, authentication, and authorization effectively.
This ensures immediate action upon changes applied within Okta Platform, stabilizing operations in managing user accounts, identities, logins, and user profiles.
You do not need to think about performance with Okta Platform; it just works.
Okta Workforce Identity is a stable product.
If you don't have internet access, you can't access your computer, only local access is available.
It lacks some dynamic identity management features compared to other products such as SailPoint.
Not only has the product been very good and we have done fewer support cases, but I think support overall has been very fast.
ForgeRock needs to focus on low-code, no-code solutions that allow for drag-and-drop functionality with good orchestration.
It would be better if they were available for support whenever the customer needs it, especially during migration or go-live time periods.
The main area is complexity. ForgeRock is extremely flexible, but the learning curve can be steep.
If there was a fingerprint option, then only the person who has already added their fingerprint on their mobile phone could access it.
If someone is a beginner with Okta Platform, the UI should be simplified, and the language used should make it easier for them to understand the concepts and what they are trying to do.
While they have a vast range of integrations out of the box available, if their PAM and IGA capabilities were more mature, then Okta Platform could be the single solution for everything, covering access management, privilege access management, and governance of identity.
The pricing is acceptable to them.
Their website lists $3 per month per user for the Essential license.
One of my customers recently received a billing statement charging 3,600 US dollars for 100 users for one year.
One has to spend considerable time trying to understand the different modules and different needs for those modules on the licensing front.
Despite the cost, it's cheaper than the potential financial loss from a security breach.
It is certainly not cheap, but the features that you get, the functionality that you get, and whatever use cases that you have, it definitely satisfies those.
The pricing per-user list drops when user counts rise and with multi-year commitments.
From a management perspective, I appreciate that we can enroll or control devices on the back end for people who get a new phone and forget to handle Cisco Duo properly and need to add a new device.
Our company benefits from all those features of Cisco Duo with confidence, and we feel very secure with it in terms of authentication of our logins.
The benefit of having a complete passwordless environment in our organization is that it's gotten people away from using the sticky note under their keyboard - which is a huge problem.
Centralized management makes the biggest difference because it allows us to define, update, and enforce security and compliance rules from a single location.
ForgeRock positively impacts our organization as we manage a large number of users with ease, providing a standard IAM solution that simplifies our processes.
ForgeRock has positively impacted my organization by allowing us to migrate from the older system to the newer ForgeRock component, enabling us to go live with many products across geographies, enhancing security as it is all cloud-based, and with the company taking care of availability, it has reduced costs for the company.
One of its most valuable features is its easy integration with various applications through its extensive application directory, offering hundreds or thousands of applications ready to configure.
It offers around eight thousand five hundred out-of-the-box connectors, providing an edge over other tools.
For the end user, it is beneficial as they do not have to remember a password or keep the password on a post-it for different applications; they just authenticate once to access several services and service providers.
| Product | Mindshare (%) |
|---|---|
| Okta Platform | 11.1% |
| Cisco Duo | 3.1% |
| ForgeRock | 3.4% |
| Other | 82.4% |

| Company Size | Count |
|---|---|
| Small Business | 66 |
| Midsize Enterprise | 29 |
| Large Enterprise | 93 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 5 |
| Large Enterprise | 18 |
| Company Size | Count |
|---|---|
| Small Business | 53 |
| Midsize Enterprise | 27 |
| Large Enterprise | 66 |
Cisco Duo is a cloud-based identity security platform safeguarding critical resources for any user and device worldwide. Known for its ease of use, Duo offers seamless protection across multi-cloud, hybrid, and on-premises environments.
Cisco Duo is designed to secure access with identity-first protection and provides extensive visibility throughout an organization's identity ecosystem. Offering multi-factor authentication, Duo facilitates easy integration and management, allowing teams to protect data effectively on VPNs, applications, and networks. Its single-pane management improves security processes while enhancing trust, making it suitable for diverse IT infrastructures.
What are the key features of Cisco Duo?
Which benefits and ROI should users consider?
In industries like education and finance, Cisco Duo is widely employed to secure multi-factor authentication across platforms such as email, databases, and servers. Its integration capabilities with Microsoft 365, Active Directory, and VPNs like AnyConnect are instrumental in verifying user identities using mobile apps or OTPs, catering effectively to both remote and on-premise environments.
ForgeRock offers robust integration, customization, and identity management with support for SAML, OAuth 2.0, and DevOps readiness, ensuring enhanced security and scalability.
ForgeRock stands out in identity and access management featuring flexible authentication flows, risk-based authentication, centralized policy management, and comprehensive data protection. Its open-source foundation and cloud capabilities allow versatility and ease of use. While it provides excellent user path orchestration through the Journey feature, challenges exist in integration support and user-friendly customization. Improved documentation and streamlined interfaces are necessary to overcome deployment complexities. Additionally, the cost and support model may be burdensome for smaller organizations.
What are the key features?ForgeRock is widely utilized in industries like telecommunications, insurance, and open banking for secure user authentication and access management. It supports microservice authentications, customer identity management, single sign-on, and multi-factor authentication, integrating effectively with existing infrastructures to enhance security and user experience.
Okta Platform provides comprehensive identity and access management, featuring Active Directory Sync, user management, and app auto-provisioning. It ensures security through single sign-on and adaptive multi-factor authentication.
Okta Platform offers advanced integration capabilities, allowing seamless connection with in-house and cloud applications. Security features are robust, incorporating multi-factor authentication and SSO to prevent unauthorized access. Users benefit from its ease of use and the ability to integrate and manage numerous applications effectively. While generally praised, users note areas for improvement, such as high costs and complex setups. Better integrations with on-premises systems and third-party tools are desired along with enhanced error logging and reporting features.
What are Okta's key features?Companies across industries implement Okta to secure user authentication and streamline onboarding processes. It supports access management for both on-premises and cloud applications, synchronizing directories and facilitating SaaS services. Organizations benefit from reduced credential management complexity and improved IT infrastructure compliance.
We monitor all Access Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.