No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Entra ID vs Yubico YubiKey comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 11, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Entra ID
Ranking in Authentication Systems
1st
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
278
Ranking in other categories
Single Sign-On (SSO) (2nd), Identity Management (IM) (2nd), Identity and Access Management as a Service (IDaaS) (IAMaaS) (1st), Access Management (1st), Microsoft Security Suite (2nd)
Yubico YubiKey
Ranking in Authentication Systems
10th
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
6
Ranking in other categories
Passwordless Authentication (2nd), Multi-Factor Authentication (MFA) (4th)
 

Mindshare comparison

As of September 2026, in the Authentication Systems category, the mindshare of Microsoft Entra ID is 5.6%, down from 13.8% compared to the previous year. The mindshare of Yubico YubiKey is 2.5%, down from 8.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Authentication Systems Mindshare Distribution
ProductMindshare (%)
Microsoft Entra ID5.6%
Yubico YubiKey2.5%
Other91.9%
Authentication Systems
 

Featured Reviews

Stafin Jacob - PeerSpot reviewer
Microsoft 365 Security & Compliance Practice Lead at Invoke
Identity has become our central gatekeeper and has provided secure single sign-on for all users
Microsoft Entra ID can improve by focusing more on new passwordless methods and becoming a primary adopter. One feature we would like to see is the ability to have security questions for password resets. I know the current capability is phasing out, so we do not have an alternative method yet. Customers who already use security questions require a smoother transition for that capability to be available. My experience with the deployment has had some challenges, particularly around the Microsoft MFA campaigns. The hardest part is moving users from a different MFA provider to the Microsoft MFA provider, as it ultimately depends on user activity. In large enterprises with numerous users across various geographies, this transition takes time. If there are ways to exert more control around that process, it would improve the situation.
reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Hardware authentication has reduced password resets and now secures access against phishing
The best features Yubico YubiKey offers are the major reasons we use it as a hardware MFA to create a token because it is phishing resistant. It guarantees the authentication works on a valid cryptographically verified domain, and it supports multiple protocols and authenticator capability. It is based on challenge-response mode, and it has extremely physical durability. It has a dual interface where you can plug it into a laptop or against an iOS and Android mobile phone. The private keys are generated directly on the internal secure chip and can never be exported by the host system or malware. Reducing password reset and MFA lockout support tickets by 75% has reclaimed the engineering capacity, which can be redirected towards more core infrastructure priorities, such as automating the security pipelines, improving asset management, and building internal CLI AI tooling. It has eliminated employee downtime and has simpler compliance and lower operational friction.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Privilege identity management is the most valuable feature."
"Customer service and technical support for Microsoft Entra ID are very good because I open many tickets with the support and get straight answers."
"Token-based security has had a positive impact on defending against threats with Microsoft Entra ID."
"The features of Microsoft Entra ID that I find most valuable include the ability to define service principles and assign permissions."
"It's very good at not disrupting the user experience."
"The write-back caching of Microsoft Entra ID allows us to keep our existing Active Directory environment while also using Azure services, which helped tremendously because we didn't have to do a full conversion from one to the other."
"Azure Active Directory has many automation capabilities, and you can apply policies on top. You can do a lot of things with these combinations and integrate other tools like PingFederate."
"It certainly centralizes usernames, and it certainly centralizes credentials. Companies have different tolerances for synchronizing those credentials versus redirecting to on-prem. The use case of maturing into the cloud helps from a SaaS adoption standpoint, and it also tends to be the jumping-off point for larger organizations to start doing PaaS and infrastructure as a service. So, platform as a service and infrastructure as a service kind of dovetail off the Active Directory synchronization piece and the email and SharePoint. It becomes a natural step for people, who wouldn't normally do infrastructure as a service, because they're already exposed to this, and they have already set up their email and SharePoint there. All of the components are there."
"Reducing password reset and MFA lockout support tickets by 75% has reclaimed the engineering capacity, which can be redirected towards more core infrastructure priorities, such as automating the security pipelines, improving asset management, and building internal CLI AI tooling."
"Yubico YubiKey is highly valued for its anti-phishing feature, which prevents phishing of OTPs that are normally obtained through phones."
"It's small and lightweight. Like a phone, it doesn't run out of battery. It also doesn't have to be unlocked. It doesn't break. Moreover, they're very durable and it's very convenient."
"The solution is simple to use and we have installed it in our clients' endpoints. The tool is just plug-and-play for the end user. The end user can just put in the key to the security computer and log in without any hassle. The solution is efficient, user-friendly, and easy to use."
"YubiKey is a hardware security device with advanced security features."
"The most valuable feature of Yubico YubiKey is security."
 

Cons

"Compared to what we can do on-prem, Azure AD lacks a feature for multiple hierarchical groups."
"The user administration has room for improvement because some parts are not available within the Azure AD portal, but they are available within the Microsoft 365 portal."
"The variety of different group types has caused challenges in areas where we have Microsoft 365 groups, distribution groups, and security groups, and the different types do not always make programmatic management clear."
"I would like to dive into some of the things that we saw today around the workflows at this Microsoft event. I cannot say that they need to make it better because I do not have much experience with it, but something that is always applicable to Microsoft is that they need to be able to integrate with their competitors. If you look at IDP, they do not integrate with Okta."
"The ability to manage and authenticate against on-premises solutions would be beneficial."
"Microsoft's pricing and licensing are difficult to understand. We engage with Microsoft partners regularly, but Microsoft's frequent rebranding complicates the process for us in the industry."
"There is a lot of room for improvement in terms of its integration with the local Active Directory. There are some gaps in terms of the local Active Directory through which Microsoft is syncing our environment from our data center. There should be the availability of custom attributes on Azure Active Directory. In addition, there should be the availability of security groups and distribution groups that are residing on the local Active Directory. Currently, they are not replicated on Azure Active Directory by default."
"Its price should be improved. It is very expensive for Turkish people."
"It's a hardware device, so it isn't cost-effective to use for all your accounts. You might have a hard time getting budget approval. It's better to take a strategic approach and use it only for critical accounts. You can use other forms of authentication for the rest."
"Yubico YubiKey is inconvient. No one likes the idea of having to put a USB device into the system, having to remember to take it out, and having passwords. It may be very good for security but it is not great for people to use."
"Yubico YubiKey is one per user and I do not believe it is very scalable."
"It would be better if the product can come up with a serial number for the keys. It would be nice if they had a numbering system as a configuration identity that would help the IT and technical teams to identify the keys because they look all the same. It would be more like putting a tag on them."
"Yubico YubiKey could be improved by allowing for centralized administration, which is not currently available in India."
"Currently, an area where the product lacks is in addressing service needs."
 

Pricing and Cost Advice

"It is worth the money."
"The licensing costs are yearly. There is a standard fee per user."
"There are add-on components and services, such as identity services, that we have to add to our Azure subscription. Only then can I actually say it's on par with the on-prem server edition. Why should I pay for a component? It should be included in my subscription."
"It is not too expensive."
"We make sure that we only enable the licenses that are needed for the users, rather than enabling licenses in a blanket fashion."
"I work for an academic medical center, where there is a watch kept over every dollar spent. I do have concerns about the micro charges for different levels or features of the product."
"It is very expensive. Its price should be lower. Price is the most important factor for Turkish people."
"We are currently on the education plan, so the price is slightly better than the development plan."
"We paid 100 bucks for one Yubikey."
report
Use our free recommendation engine to learn which Authentication Systems solutions are best for your needs.
914,262 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
13%
Financial Services Firm
10%
Manufacturing Company
7%
Government
7%
Government
10%
Financial Services Firm
10%
Manufacturing Company
9%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business90
Midsize Enterprise42
Large Enterprise162
No data available
 

Questions from the Community

How does Duo Security compare with Microsoft Authenticator?
We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Duo for 30 days, and we could not be happier. Duo Security is easy to configure a...
What is your experience regarding pricing and costs for Azure Active Directory?
I would rate the pricing of the product as four out of five. The product is definitely good, and I see it as part of the future roadmap for managing all endpoints.
What needs improvement with Azure Active Directory?
I believe instead of putting everything in a single form under Microsoft Entra ID, it would be best for Microsoft to segregate these features. For example, if someone wants to design the Conditiona...
What needs improvement with Yubico YubiKey?
Yubico YubiKey could be improved by allowing for centralized administration, which is not currently available in India. In India, administrators typically have control over all security devices, bu...
What is your primary use case for Yubico YubiKey?
I primarily use Yubico YubiKey ( /products/yubico-yubikey-reviews ) for authentication in environments such as Active Directory, cloud administration, trading room, and dealing room where phones ar...
What advice do you have for others considering Yubico YubiKey?
From an individual perspective, no improvements are required for Yubico YubiKey. However, at a corporate or enterprise level, a central control mechanism is necessary, which is currently lacking in...
 

Also Known As

Azure AD, Azure Active Directory, Azure Active Directory, Microsoft Authenticator
YubiKey
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Microsoft Entre ID is trusted by companies of all sizes and industries including Walmart, Zscaler, Uniper, Amtrak, monday.com, and more.
Google Inc., Salesforce, Novartis, Facebook, GitHub, CERN, Duke University, Code Enigma, Luther Burbank High School, ZorgSaam, Agfa, Santa Clara County Fire Department, Dyson Ltd, Portugal Telecom, Boral, Canonical Ltd
Find out what your peers are saying about Microsoft Entra ID vs. Yubico YubiKey and other solutions. Updated: September 2026.
914,262 professionals have used our research since 2012.