No more typing reviews! Try our Samantha, our new voice AI agent.

Idira Privileged Access Manager vs WSO2 Identity Server comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Idira Privileged Access Man...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
231
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)
WSO2 Identity Server
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
11
Ranking in other categories
Customer Identity and Access Management (CIAM) (13th)
 

Mindshare comparison

While both are Identity and Access Management solutions, they serve different purposes. Idira Privileged Access Manager is designed for Privileged Access Management (PAM) and holds a mindshare of 8.6%, down 16.0% compared to last year.
WSO2 Identity Server, on the other hand, focuses on Customer Identity and Access Management (CIAM), holds 2.7% mindshare, up 1.4% since last year.
Privileged Access Management (PAM) Mindshare Distribution
ProductMindshare (%)
Idira Privileged Access Manager8.6%
Safeguard by One Identity4.4%
Teleport3.6%
Other83.4%
Privileged Access Management (PAM)
Customer Identity and Access Management (CIAM) Mindshare Distribution
ProductMindshare (%)
WSO2 Identity Server2.7%
Okta Platform14.3%
Auth0 Platform11.6%
Other71.4%
Customer Identity and Access Management (CIAM)
 

Featured Reviews

Singaravelu C - PeerSpot reviewer
CyberArk Engineer at Tata Consultancy
Provides full visibility into user activity and ensures secure end-to-end access across critical systems
In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.
Ritesh_Shah - PeerSpot reviewer
Senior Solution Architect at Hewlett Packard Enterprise
Utilizing key management and seamless single sign-on integration for enhanced user profile management
WSO2 Identity Server's key management feature stands out as a particularly impactful feature for enhancing security. Additionally, from a user perspective, the self-user portal and user profile management capabilities are highly valuable. It allows users to manage their profiles, change passwords, and offers a self-care portal type of functionality. The single sign-on capability integrates seamlessly with various platforms, including Google, Facebook, LDAP, and Active Directory, which supports rapid product launches.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We have demoted a lot of domain admins and taken a lot of that away from people, giving it a shared account structure."
"Its features like detailed audit and reporting, automated workflows, granulated privileged access controls, automated password rotation, and centralized and secure storage have helped us in developing a secure environment for customers, along with audit and compliance coverage."
"This product scales amazingly well."
"I appreciate the ease of use for support analysts."
"All the high privileged accounts are managed by CyberArk at a regular frequency."
"It is a great product when it comes to security, and from the security point of view, I would advise a new user to use this tool and deploy it in your environment since the security is unbeatable."
"The most valuable features of CyberArk Privileged Access Manager include its search capabilities."
"It has helped from an auditing perspective identify who has access to privileged accounts."
"Some of the valuable features of the solution are the easy integration with processes, such as Single Sign-On, and overall WSO2 is straightforward and does not need customization."
"The single sign-on procedure itself, as well as the ability to connect to external user sources such as Microsoft Active Directory and LDAP servers, are the solution's most valuable features."
"I would rate the solution's stability eight or nine out of ten."
"We are able to use this tool to better secure next generation data centers, which use software defined networks."
"We use the solution for customer identity management, authenticating customers coming in through a web portal."
"I use this solution to generate keystores and certifications and link these with project development in our company."
"The solution gets the job done, and we don't have to do the main configuration."
"I am completely satisfied with WSO2 Identity Server and would definitely recommend it to other companies."
 

Cons

"Improved user-friendliness, granularity, and functionality would enhance the product further."
"The product could be easier to use. More work needs to be done on this aspect; it is not good enough yet. It also takes up a lot of server space. Sometimes we need to use up to seven servers."
"The initial setup can get complex."
"Their post-sale support area requires a big improvement."
"The solution should be able to mitigate internal threats"
"Having a cloud version would be very helpful. You have to invest a lot of money for the infrastructure hardware so the cloud version would help."
"CyberArk Privileged Access Manager could improve the integration with other solutions and ease of use. Additionally, there should be a feature to have remote connections without a VPN."
"Pricing is a problem. CyberArk is expensive compared to other products I know."
"The high availability architecture has to be improved."
"This solution does not have BPM workflows already integrated, we had to integrate the BPM module externally. They do not provide full-featured auditing and certification modules out of the box."
"First, improvements have to been made in the high availability architecture. This has to do with the master-slave replication, and how the load balancing is handled between the identity servers."
"This solution requires extensive knowledge to be used effectively as certain areas of its use are not user friendly."
"I found the initial setup to be very complex."
"The solution's licensing model could be more flexible, and pricing could be improved."
"There needs to be a good support model and easy-to-understand documentation."
"The solution could improve its development from a user perspective."
 

Pricing and Cost Advice

"The solution is cost-effective for the features."
"It can be an expensive product."
"There are additional features added to our CyberArk Privileged Access Manager license. For example, features that allow us to integrate into various kinds of platforms."
"I'm a technician so I don't handle the licensing for CyberArk Privileged Access Manager, but I know that the price for the core license is about €140 per year. There's another type of license, the external vendor license, and that's about €600 and you can manage twenty devices. From what I know, the price for one device in a subscription is about €65 per year. You can buy the CyberArk Endpoint Privilege Manager too, or you can buy some other application or application license with CyberArk Privileged Access Manager, but all other features, such as the Analytics Server is included in the basic CyberArk license. With WALLIX, you need to buy separate licenses for the features."
"Before we bought it, they were licensing each function individually, which got complicated and very expensive. When we decided to buy it, it was much more straightforward and still quite expensive, but it brings a lot of value and risk reduction to the organization."
"The main problem for the tool is its licensing. I work for a really big company. When you try to develop this as a service, usually you work with leverage teams who are formed with dozens of members. You might dedicate one FTE, or less, for something, e.g., an antivirus administrator. You might have half an FTE's effort dedicated to administering the antivirus, but then you have a team of about 30 users who might access that ticket. The problem is that CyberArk eliminated the possibility of concurrent users years ago. This is a big problem for companies who work with leverage teams. You need to pay for everyone. 40 licenses are used by 20 or 30 people. This is a big problem because licenses are not precisely cheap."
"No, I do not have any advice on the price of the product."
"With the current model of licensing, for my use cases, sometimes it's hard to convince the management and get budget approvals for it. It's expensive and you're not getting anything new. It's just a control, but in terms of risk, you are covering a big impact on the company. Improvement in the licensing prices is something I would want to have."
"WSO2 Identity Server is not an expensive solution."
"They should bring in some good pricing models to host the marketplace."
"I have found the solutions license is priced competitively compared to others."
"I rate the product price an eight out of ten. There is a need to pay more for the extra features provided by the solution."
"We have to take their support, but that is a minimal charge if I'm comparing it to other identity managers."
"At this time we are working with the open-source version."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
917,382 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
12%
Financial Services Firm
12%
Manufacturing Company
10%
Comms Service Provider
7%
Construction Company
15%
Outsourcing Company
14%
Comms Service Provider
12%
Transportation Company
11%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise43
Large Enterprise175
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise5
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
The pricing is reasonable compared to other software options we evaluated, and it is straightforward. However, overall costs depend on deployment size and licensing requirements.
What needs improvement with CyberArk Privileged Access Manager?
While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creat...
What is your experience regarding pricing and costs for WSO2 Identity Server?
The pricing is currently the same as the API Manager, so it's not surprising. Since we used it primarily for SSO and the self portal, there were no additional pricing concerns.
What needs improvement with WSO2 Identity Server?
Currently, all required features are supported. If new use cases for artificial intelligence arise, it could be beneficial to incorporate those. However, for our current projects, WSO2 Identity Ser...
What is your primary use case for WSO2 Identity Server?
We deployed WSO2 Identity Server to fulfill our single sign-on (SSO) requirements. Whenever we implement the API Manager, instead of using the API Manager's inbuilt key manager, we use WSO2 Identit...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
No data available
 

Overview

 

Sample Customers

Rockwell Automation
Nutanix, ELM, AlmavivA, BDigital, StubHub, M-creations, MedVision360
Find out what your peers are saying about Idira by Palo Alto Networks, One Identity, Okta and others in Privileged Access Management (PAM). Updated: October 2026.
917,382 professionals have used our research since 2012.