


Microsoft Entra ID and Microsoft Active Directory compete in the identity management category. Microsoft Entra ID has the upper hand in cloud integration, while Microsoft Active Directory excels in on-premise security.
Features: Microsoft Entra ID integrates seamlessly with cloud services, offers multi-factor authentication, and provides strong cloud-native capabilities. Microsoft Active Directory is known for comprehensive device management, advanced group policies, and robust on-premise security features.
Room for Improvement: Microsoft Entra ID needs better hybrid deployment capabilities, more detailed auditing tools, and stronger on-premise integrations. Microsoft Active Directory requires enhanced cloud integration, improved user activity logging, and more cloud-compatible features.
Ease of Deployment and Customer Service: Microsoft Entra ID is straightforward to deploy in cloud environments, with extensive documentation and prompt customer service. Microsoft Active Directory is more complex to deploy, especially in hybrid environments, but still offers solid customer support.
Pricing and ROI: Microsoft Entra ID offers competitive pricing with a quicker return on investment due to lower setup costs and faster deployment. Microsoft Active Directory involves higher initial setup costs but delivers long-term benefits with its extensive feature set.
We were able to implement zero trust extremely quickly because of the platform and its ongoing developments, including Cisco Duo Network Gateway, which enabled that transition to zero trust extremely quickly.
Not having MFA means you cannot put a price tag on that because you will be hit with ransomware immediately.
The biggest return on investment was the ease of use for the end users to have that secondary authentication when logging into the critical systems.
The solution is really time-saving since I don't need to create users in each server or system manually, and user access control is streamlined.
We leverage existing licensing, like Windows Server or SQL, and hybrid benefits, and our sales and marketing teams benefit from co-selling and partnership advantages.
We get a return from not needing to pay other vendors to do what we already had from Microsoft, which was better than the competition.
By eliminating the need for multiple VPN channels and enabling direct work from Azure servers, we have achieved approximately 30% efficiency savings.
They got back to us quickly, were nice, and gave us what we needed.
I would rate their support 10 out of 10.
I would rate support for Cisco Duo a 10, as I have never had a negative experience.
Support documents are available on the internet in every language.
If you purchase retail, the support will be more difficult because they will assess the priority or rating from the customer.
Sometimes support takes long to engage and resolve, extending over weeks or even months.
The actual support when you get to that level is a ten out of ten.
There are immediate answers to any issues that arise with great knowledge and a deep understanding of the product and business needs.
They usually try to deflect, buy time, and often do not address the problem immediately.
In my last contracting position, it was a large one for a major worldwide airline that had hundreds of thousands of devices that could use Cisco Duo, and it scaled very well.
You would not need many more engineers to manage Cisco Duo even if we scale up to 500 employees because it is so simple to manage.
Cisco Duo is scalable for organizational growth.
Microsoft Active Directory scales effectively; I don't foresee any issues with that at all.
Microsoft Entra ID meets our needs better, especially when discussing integration.
Integrating seamlessly with Microsoft services like Microsoft 365, Azure, and other Microsoft platforms, while also supporting integration with thousands of third-party applications such as Salesforce, ServiceNow, and Google Workspace using standards including SAML, OAuth, and OpenID Connect.
We experienced no scalability issues with Microsoft Entra ID.
We have not had any Cisco Duo outages across all the companies I have worked for that utilize Cisco Duo.
The stability has been excellent.
I did not notice any downtime or crashes with Cisco Duo.
If you meet the installation requirements from Microsoft, it will be very stable.
With multiple domain controllers, stability is ensured.
I've been working with Microsoft Active Directory for over 3 years, and we've had no problems.
It's a critical solution that we can't do without.
I haven't experienced any downtime, crashes, or performance issues with Microsoft Entra ID.
I have not experienced any downtime, crashes, or performance issues with Microsoft Entra ID.
If you don't have internet access, you can't access your computer, only local access is available.
It lacks some dynamic identity management features compared to other products such as SailPoint.
Not only has the product been very good and we have done fewer support cases, but I think support overall has been very fast.
Exporting and verifying group memberships require command line scripts, which isn't simple.
There are some features that need improvements in terms of ease of use and frequency of updates.
Sometimes, it can be overly complicated, and when you apply Group Policy in an Active Directory environment, sometimes those settings apply and sometimes they don't.
A recent incident we dealt with took four months to resolve with a seven-day deadline, which was quite frustrating.
Synchronization issues occasionally occur, making it challenging to analyze logs and pinpoint the exact problem.
Once you have the connector, there are multiple methods to set up Microsoft Entra ID, but fundamentally, it depends on how you want to integrate your on-premises Active Directory with Azure Active Directory.
The pricing is acceptable to them.
Their website lists $3 per month per user for the Essential license.
One of my customers recently received a billing statement charging 3,600 US dollars for 100 users for one year.
For the cloud solution in our region, the pricing of Microsoft Active Directory is very high.
I consider Microsoft Active Directory expensive because if you buy this thing bundled with the Windows Directory Server, you get five user licenses for about a thousand euros, or a little bit less than this.
The pricing, setup cost, and licensing with Microsoft Active Directory is straightforward; you just buy the server and then have to buy the user CALs.
We are getting our money's worth.
Microsoft sets pricing based on customer demand, adjusting to find the optimal balance between sales volume and profit per unit, similar to how Costco manages product prices.
Most features of Entra ID are part of Microsoft's ecosystem and included in Microsoft 365 bundles, which means there are no additional costs associated with pricing and licensing.
From a management perspective, I appreciate that we can enroll or control devices on the back end for people who get a new phone and forget to handle Cisco Duo properly and need to add a new device.
Our company benefits from all those features of Cisco Duo with confidence, and we feel very secure with it in terms of authentication of our logins.
The benefit of having a complete passwordless environment in our organization is that it's gotten people away from using the sticky note under their keyboard - which is a huge problem.
To assess the impact of Microsoft Active Directory's centralized domain management on security protocols and access permissions, Microsoft Active Directory itself has constraints with security because when we have a solution such as SSO or Single Sign-On, which makes it easier for users to log in, some parts have security openings.
One valuable feature is the centralized creation of IDs.
I can control all the devices in my domain by just changing the group policies in one place.
We can secure the applications that we are building and make sure that if the application were to be compromised, there is no full access to a customer's environment causing issues and other security concerns.
It's integrated with Microsoft technologies like Authenticator, SSO, and MFA, streamlining operations and creating a seamless environment.
The granular control, such as preventing logins from specific locations, enhances security significantly.
| Product | Mindshare (%) |
|---|---|
| Microsoft Entra ID | 8.4% |
| Cisco Duo | 3.2% |
| Microsoft Active Directory | 2.6% |
| Other | 85.8% |



| Company Size | Count |
|---|---|
| Small Business | 65 |
| Midsize Enterprise | 28 |
| Large Enterprise | 82 |
| Company Size | Count |
|---|---|
| Small Business | 21 |
| Midsize Enterprise | 7 |
| Large Enterprise | 20 |
| Company Size | Count |
|---|---|
| Small Business | 91 |
| Midsize Enterprise | 42 |
| Large Enterprise | 162 |
Cisco Duo is a cloud-based identity security platform safeguarding critical resources for any user and device worldwide. Known for its ease of use, Duo offers seamless protection across multi-cloud, hybrid, and on-premises environments.
Cisco Duo is designed to secure access with identity-first protection and provides extensive visibility throughout an organization's identity ecosystem. Offering multi-factor authentication, Duo facilitates easy integration and management, allowing teams to protect data effectively on VPNs, applications, and networks. Its single-pane management improves security processes while enhancing trust, making it suitable for diverse IT infrastructures.
What are the key features of Cisco Duo?
Which benefits and ROI should users consider?
In industries like education and finance, Cisco Duo is widely employed to secure multi-factor authentication across platforms such as email, databases, and servers. Its integration capabilities with Microsoft 365, Active Directory, and VPNs like AnyConnect are instrumental in verifying user identities using mobile apps or OTPs, catering effectively to both remote and on-premise environments.
Microsoft Active Directory enables centralized management of user identities and permissions, integrating seamlessly with cloud services via Azure AD Connect. Its support for hybrid environments makes it essential for businesses looking to manage authentication, authorization, and access control efficiently.
Active Directory offers a robust framework for network and identity management, focusing on scalability and ease of use. Its integration with Single Sign-On enhances user convenience by synchronizing login credentials across cloud and on-premises applications. While it efficiently manages security protocols, scalability, and third-party application integration, users note areas for improvement like better reporting capabilities, a modernized interface, improved synchronization between on-prem and cloud setups, and streamlined configurations.
What are the essential features of Microsoft Active Directory?In industries like finance and healthcare, Active Directory is implemented to manage sensitive data access and user authentication across complex networks. Retailers rely on its scalability for managing vast customer and product datasets, while educational institutions utilize its centralized management features to efficiently administer student and faculty permissions across multiple applications and platforms.
Microsoft Entra ID offers advanced identity management capabilities, ensuring security and efficiency with features like single sign-on and multifactor authentication.
Designed for hybrid environments, Microsoft Entra ID provides seamless synchronization between on-premises Active Directory and Azure Active Directory, enhancing security with multifactor authentication and conditional access. By integrating with a broad spectrum of cloud services, it supports user authentication and mobile device management, facilitating streamlined application registration and secure API access.
What are the most notable features of Microsoft Entra ID?In finance and healthcare, Microsoft Entra ID plays a crucial role in managing access to sensitive information while maintaining compliance with industry regulations. Retail and manufacturing sectors leverage its capabilities for secure supply chain operations and partner collaboration.
We monitor all Single Sign-On (SSO) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.