ForgeRock vs Microsoft Entra ID comparison

Ping Identity and Microsoft are both solutions in the Identity Management (IM) category. Ping Identity is ranked #10 with an average rating of 8.6, while Microsoft is ranked #1 with an average rating of 8.7. Ping Identity holds a 5.1% mindshare in IAM, compared to Microsoft’s 10.5% mindshare. Additionally, 92% of Ping Identity users are willing to recommend the solution, compared to 94% of Microsoft users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Aug 11, 2024

ForgeRock and Microsoft Entra ID are leading identity management solutions. Microsoft Entra ID seems to have the upper hand due to its scalability, ease of use, and cost-effectiveness based on user reviews.

Features: ForgeRock is praised for extensive customization options, seamless integration with various systems, and strong support. Microsoft Entra ID is recognized for comprehensive scalability, advanced security features, and a robust feature set favored by larger enterprises.

Room for Improvement: ForgeRock could improve its setup documentation, user training materials, and user interface complexity. Microsoft Entra ID needs more intuitive navigation, clearer error messaging, and additional user training resources.

Ease of Deployment and Customer Service: ForgeRock requires significant time and technical expertise to deploy, but users appreciate the support during this process. Microsoft Entra ID has a quicker deployment process with users finding its customer service responsive and effective.

Pricing and ROI: ForgeRock has higher initial setup costs but provides a good long-term return on investment due to its flexibility. Microsoft Entra ID is more cost-effective initially, and users report a significant ROI due to its feature set and scalability.

To learn more, read our detailed ForgeRock vs. Microsoft Entra ID Report (Updated: November 2024).

Buyer's Guide

ForgeRock vs. Microsoft Entra ID

November 2024

Download the complete report

Helped 824,053 peers since 2012

Categories and Ranking

Omada Identity

Mindshare comparison

As of December 2024, in the Identity Management (IM) category, the mindshare of Omada Identity is 3.9%, down from 4.0% compared to the previous year. The mindshare of ForgeRock is 5.1%, down from 6.3% compared to the previous year. The mindshare of Microsoft Entra ID is 10.5%, up from 9.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Identity Management (IM)

Featured Reviews

Pernilla Hulth

IAM Project Manager (Independent) at a retailer with 10,001+ employees

The interface is easy to use and gives you a solid overview

The cloud-based deployment was straightforward, but the on-prem deployment was in a highly complex ecosystem. Omada has matured since then. I wouldn't say that it isn't straightforward, but it depends on the customer. A standard deployment is relatively easy, but it can be more painful if you need a lot of customization. We deployed the cloud solution in around four months, nearly meeting the 12-week benchmark. The on-prem deployment took three years. It was a highly complex ecosystem that was dependent on other systems. Depending on the size of your environment, you need a product owner and some specialists for maintenance. My last customer was a university with a complex environment. They had around 12 people involved in maintenance at that organization. Typically, it's between 2-5 people.

Read full review

Trisha Bhola

Senior Associate at Cognizant

It's easier to customize and maintain our code

I worked on two different projects based on ForgeRock, and both are automated deployments. One is a UI-based deployment. It's an automated process using some scripts. The deployments are done through Octopus, so it's also automated. We first deploy the essential components of AM and then implement additional configurations like Amster Imports. After that, we import all the SAML Federation data and add some certificates. We have two teams of five and three team members working on the different deployment processes. One is working on the dev side, another is looking at the higher environment, and one is managing the data. In another project, I'm the only developer. We also deploy on the dev environments so that anyone can test new features, configurations, and client requirements. They can test it on the dev environment, but a team of four people manages higher environments. The Access Management component involves the most customization, which takes around 15 to 20 minutes because of the need to import the Amster configuration. If another deployment is simultaneously happening, it may be a little slower and take around 30 minutes. The other components, like the user data stores, take about five to seven minutes. It's another five to 10 minutes for Identity Management. After deployment, the maintenance is mostly checking for security vulnerabilities. If ForgeRock shares security vulnerabilities or advisories, we check to see if there is something inside we need to maintain. Other than that, we just install updates when they add features each month.

Read full review

Vinod Survase

M365 Senior Consultant at Capgemini

Saves us time and money and features Conditional Access policies, SSPR, and MFA

I want better integration between Azure AD and the on-prem environment because there are currently limitations that can hamper employee experience. We use a feature called password writeback, that can be challenging to implement in a hybrid environment. Employees can change their passwords using a self-service password reset (SSPR) feature, which reflects from the cloud to the on-prem identity, but not the other way around. Currently, there is no way to reflect passwords from on-prem identities to the cloud. There are other similar limitations, such as a cap on the number of identities that can be synchronized in a particular time frame, which can be an issue for large enterprises with 300,000 employees or more.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The thing that I find most valuable is that Omada consists of building blocks, which means that you can configure almost anything you want without using custom code, making it pretty easy to do. It's possible to connect to multiple target systems and to create one role that consists of different permissions in the different target systems. So one role in Omada can make sure that you have an account in three different systems."

"It has a very user-friendly interface compared to what we are used to, and it is highly configurable. In the old solution, when we needed to do something, we had to have a programmer sitting next to us, whereas, in Omada Identity, everything is configurable."

"The most valuable feature of Omada is its API connectivity, which allows seamless integration with various services like SAP, GRC, and Microsoft licenses."

"The support for the validity of the resources is valuable. The tool allows resource assignments within a validity period so that the managers do not have to remember to revoke the access once the work is done."

"When we started with identity and access management, we cleaned up and skipped 500 accounts. Therefore, there are a lot of people who are still in our system. Using this tool, we have cleaned up a lot of accounts for ourselves as well as our partners and suppliers. So, we can manage everything now."

"Omada's user interface is elegant and easy to work with. I like Omada's ability to automatically generate accounts for new hires and allow them access to all required systems by established policies. Around 80 percent of workers can start working immediately on their first day without requesting further access."

"Two valuable features of Omada Identity are the ability to discover accounts and link them to identities, and the automatic disabling of inactive accounts or identities."

"It scales in terms of numbers and types of identities. It can govern the on-premise applications as well as the cloud applications. So, it can manage hybrid environments with all types of identities and various load amounts."

More Omada Identity pros

"ForgeRock has CIAM, which other products didn't have, and they have DevOps ready."

"We create and define the permissions and configurations for the users."

"Easy to customize and adaptable to any environment."

"ForgeRock products are customizable, and the out-of-the-box features are solid, too. I primarily use the OIDC compliance features. It's just a configuration. it's easy to set up and customize trees. We can add our own features if necessary. Banks and corporations have different standards and specific validations."

"The most valuable features are that it is easy to manage and it's stable."

"The solution's most valuable feature is the authentication for the consumers. The integration with other third-party applications is excellent."

"The solution integrates well and it is important for them to keep up with the current trends in the market quickly enough, and they have been doing a good job at it."

"This is a stable solution. When you do experience any issues, you will see it in your DB logs or audit logs so you can easily reach a conclusion of might be causing it."

More ForgeRock pros

"Microsoft Entra ID has streamlined and centralized our device management and threat response processes."

"It is a really nice tool and we have a license for the more complex model."

"It's not intuitive and we use it mainly for our Office 365 files. The integration between the two is interesting. However, the learning curve is high."

"The solution has a variety of tools. Two of the most valuable features are the ability to create users and to replicate the user account from on-premise to the cloud."

"It's very good at not disrupting the user experience."

"Entra ID's anti-phishing measures have improved our phishing response."

"Active Directory itself is the best feature it has. It also gives us a single pane of glass for managing user access."

"A use case that we did for an end user in a manufacturing organization: We used WVD with biometric authentication because 1,500 processes need to happen in a process. The user didn't want to use a login using their credentials. They wanted to use fingerprinting or tap their ID. That is where we integrated with the authentication. Now, they can process in a couple of hours, and they run those 1,500 processes every day. This changed their login process, which improved the manufacturing process. This helped a lot for their high deployment."

More Microsoft Entra ID pros

Cons

"If you're running Omada on a cloud service, you may have some issues deploying the newest release. Sometimes, the latest release doesn't adapt to the processes we have already installed. Identity Access Management is a critical system for our organization, and we need to ensure that everyone has the same access as they did before the release."

"Improved traceability would be helpful for administrators. For example, let's say a user's permission is being revoked. We can only see the system that has carried out a particular action but not what triggered it. If an event definition or something has changed in the criteria for the permission being removed or something like that, we don't have immediate access to that information. It takes a little detective work."

"Omada Identity has a steep learning curve."

"There's a challenge with handling large amounts of data in this system."

"If I had to name one thing, it would be the user interface (UI)."

"When the re-certification process is launched that makes Omada very slow. There are performance issues in the current version."

"It is not possible to customize reports on Omada Identity."

"The security permission inside Omada needs improvement. It's tricky to set up."

More Omada Identity cons

"The solution could improve by adding more advertising and marketing."

"The solution's documentation is not very good, and they do not give more details."

"We raised tickets asking for improvements, but sometimes we don't get the proper solution. They are responding, but the ticket is open for weeks and weeks. For some issues, we don't get a satisfactory solution or the solution doesn't work."

"I find that it's quite expensive for just an open-source system. Support is quite expensive."

"I don't think ForgeRock directly supports integrations with Slack, making it an area where improvements are required."

"The solution's deployment should be made easier."

"In an upcoming release, the solution could improve by limiting the need to do customizations."

"The only problem with ForgeRock is that it is derived from an open-source product, so sometimes it's a bit unstable."

More ForgeRock cons

"The visibility in the GUI is not good for management. There are a lot of improvements that could make it better. It should be more user-friendly overall. It is not user-friendly because everything keeps changing on the platform. I can understand it because I know the platform, am familiar with it, and use it every day. However, for a lot of clients, they don't use it every day or are not familiar with it, so it should be more user friendly."

"I want better integration between Azure AD and the on-prem environment because there are currently limitations that can hamper employee experience. We use a feature called password writeback, that can be challenging to implement in a hybrid environment. Employees can change their passwords using a self-service password reset (SSPR) feature, which reflects from the cloud to the on-prem identity, but not the other way around. Currently, there is no way to reflect passwords from on-prem identities to the cloud."

"I would like to see Microsoft communicate how they intend to manage legacy applications. Right now, you still have to deploy a hosted domain server (which comes at an extra cost) if you have a legacy application that cannot sync properly with the enterprise applications and the modern applications."

"When it comes to identity and access life cycle management for applications that are run on-premises, as well as access governance, if those kinds of capabilities could be built into Azure Active Directory, that would be good."

"When you start to deal with legacy applications, provisioning is not as intuitive."

"I would like them to improve the dashboard by presenting the raw data in a more visual way for the logs and events. That would help us understand the reports better."

"Overall, it's not a very intuitive solution."

"There should be a clearer separation between objects held in Entra and Azure, so we don't need to approach the Entra ID team to create rules, policies, and app registrations. It would help if we could make independent IDs on the Azure side to go through that team to create a role, change permissions, or create something for a specific task."

More Microsoft Entra ID cons

Pricing and Cost Advice

"Omada Identity offers a reasonable price point, but it will increase as we transition to the cloud."

"Omada continues to be very competitive on pricing, especially on the Omada cloud product."

"There were a lot of administrator, partner, and supplier accounts for people who were no longer working for us but still in the system. So, we reduced the number of users no longer with the company, which saved us some money on licensing."

"Being Dutch, I can only say that it is extremely expensive, but all software products are expensive. If you have 38,000 users, then even one dollar or one euro per person would amount to a significant amount of money. Because of the high number of users, anything gets expensive very fast here."

"It is not cheap. None of these solutions are cheap, but we have good pricing at least for now from a licensing perspective."

"From an on-prem point of view, the cost is quite transparent and reasonable. The direct cost is primarily for licenses and maintenance on licenses."

"They are positioned at a good price point. They are lower than some of their competitors."

"The pricing is too high for SMBs."

More Omada Identity pricing and cost advice

"The pricing of the solution is fair but I do not have the full details."

"It's a bit pricey and could be more competitive."

"We have multiple clients we are looking at right now. We are at a very small number, however, the idea and the goal is to grow. We are looking at about $100,000 and $50,000 a minimum a month cost. That'd be minimum maybe in a couple of years."

"The license is purchased annually per user. However, you can negotiate if you are signing for a longer period of time. When comparing this solution to others on the market it is priced fair, it is not at the top of the price range or at the bottom end."

"ForgeRock's pricing is more competitive than other products."

"ForgeRock is an expensive solution."

"Its licensing is on a yearly basis, but it also depends on the contract that you have with the vendor. They have multiple types of contracts. There are additional costs to the standard licensing fees. If you need some of the features, you have to pay more."

"Its price is comparable to other products in the market."

"Entra has P1 and P2 licenses that are bundled with lots of applications."

"Microsoft Entra ID's pricing is reasonable."

"The solution costs us 60,000 Rupees annually, just over $700, and there are no additional costs."

"If you are dealing with one supplier with an out-of-the-box solution, which provides you end-to-end capabilities, then it is naturally cheaper and less of a headache to manage and operate."

"This product is sold as part of the enterprise package and our licensing fees are paid on a yearly basis."

"The pricing for Azure Active Directory is affordable; I would rate the cost a six out of ten."

"As a nonprofit, we have A5 licenses for nonprofits in education, so we at least have some reduced costs."

"I work for an academic medical center, where there is a watch kept over every dollar spent. I do have concerns about the micro charges for different levels or features of the product."

More Microsoft Entra ID pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Identity Management (IM) solutions are best for your needs.

See recommendations

824,053 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

17%

Computer Software Company

13%

Manufacturing Company

Government

Financial Services Firm

23%

Computer Software Company

12%

Insurance Company

Government

Educational Organization

32%

Computer Software Company

10%

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Omada Identity?

We don't have to go in and do a lot of the work that we did before. It may have saved us somewhere in the range of 10...

See all answers

What needs improvement with Omada Identity?

There are some technical bits and pieces that we have looked at that could be better. For instance, when you do a rec...

See all answers

What is your primary use case for Omada Identity?

We wanted a solution that could help us make HR the master of identities. We wanted a solution that could take that d...

See all answers

What do you like most about ForgeRock?

The most valuable features of ForgeRock are social login and data protection.

See all answers

What is your experience regarding pricing and costs for ForgeRock?

Our company was considering switching back to Keycloak from ForgeRock, so as to not pay any license fees. ForgeRock a...

See all answers

What needs improvement with ForgeRock?

In the past, I saw that Splunk was integrated with a testing portal, and then it was integrated with Slack. I don't t...

See all answers

How does Duo Security compare with Microsoft Authenticator?

We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Du...

See all answers

What do you like most about Azure Active Directory?

It is very simple. The Active Directory functions are very easy for us. Its integration with anything is very easy. W...

See all answers

What is your experience regarding pricing and costs for Azure Active Directory?

Most features of Entra ID are part of Microsoft's ecosystem and included in Microsoft 365 bundles, which means there ...

See all answers

Comparisons

SailPoint Identity Security Cloud vs Omada Identity

Compared 30% of the time

Saviynt vs Omada Identity

Compared 15% of the time

One Identity Manager vs Omada Identity

Compared 8% of the time

SAP Identity Management vs Omada Identity

Compared 6% of the time

CyberArk Privileged Access Manager vs Omada Identity

Compared 5% of the time

More Omada Identity Competitors

SailPoint Identity Security Cloud vs ForgeRock

Compared 15% of the time

Ping Identity Platform vs ForgeRock

Compared 10% of the time

Auth0 vs ForgeRock

Compared 8% of the time

Symantec Siteminder vs ForgeRock

Compared 7% of the time

One Identity Manager vs ForgeRock

Compared 5% of the time

More ForgeRock Competitors

Microsoft Intune vs Microsoft Entra ID

Compared 11% of the time

Google Cloud Identity vs Microsoft Entra ID

Compared 10% of the time

Okta Workforce Identity vs Microsoft Entra ID

Compared 8% of the time

Auth0 vs Microsoft Entra ID

Compared 5% of the time

Microsoft Identity Manager vs Microsoft Entra ID

Compared 2% of the time

More Microsoft Entra ID Competitors

Product Reports

Buyer's Guide

Omada Identity

December 2024

Download Omada Identity product report

Buyer's Guide

ForgeRock

December 2024

Download ForgeRock product report

Buyer's Guide

Microsoft Entra ID

December 2024

Download Microsoft Entra ID product report

Also Known As

Omada Identity Suite, Omada Identity Cloud

ForgeRock Identity Platform, ForgeRock OpenIDM

Azure AD, Azure Active Directory, Azure Active Directory, Microsoft Authenticator

Learn More

Video not available

Omada

Ping Identity

Microsoft

Interactive Demo

Demo not available

Omada

Demo not available

Ping Identity

Microsoft

Overview

Omada Identity is an identity governance and administration (IGA) solution designed to help organizations manage and secure digital identities and access across their IT environments. It focuses on enhancing security, compliance, and efficiency by automating identity management processes.

Omada Identity offers a robust set of features that streamline identity lifecycle management, access governance, and compliance reporting. It integrates with a wide range of IT systems, applications, and data sources, providing a centralized platform for managing user identities and access rights. The solution enables organizations to enforce security policies, ensure regulatory compliance, and reduce the risk of unauthorized access.

What are the critical features of Omada Identity?

Identity Lifecycle Management: Automates the process of creating, updating, and deactivating user identities throughout their lifecycle.
Access Governance: Ensures that users have appropriate access rights, enabling continuous monitoring and recertification of access.
Compliance Reporting: Provides comprehensive reporting capabilities to demonstrate compliance with regulatory requirements.
Role-Based Access Control (RBAC): Simplifies the assignment and management of access rights based on user roles within the organization.
Self-Service Access Requests: Empowers users to request access to resources through a user-friendly portal, reducing administrative burden.
Integration Capabilities: Seamlessly integrates with various systems, applications, and data sources for unified identity and access management.

What benefits or ROI items should users look for in the reviews when evaluating Omada Identity?

Improved Security: By ensuring that only authorized users have access to sensitive information, Omada Identity enhances overall security posture.
Regulatory Compliance: Helps organizations meet compliance requirements by providing detailed audit trails and reporting features.
Operational Efficiency: Automates routine identity management tasks, reducing manual effort and freeing up IT resources for strategic initiatives.
User Productivity: Streamlines access management processes, enabling users to quickly obtain the resources they need to perform their jobs.
Reduced Risk: Minimizes the risk of data breaches and insider threats by enforcing strict access controls and continuous monitoring.

Omada Identity is widely adopted across various industries, including healthcare, finance, and manufacturing. In healthcare, it helps protect patient data and comply with regulations like HIPAA. In finance, it ensures compliance with SOX and other financial regulations. In manufacturing, it secures access to sensitive production data and intellectual property.

Pricing and licensing for Omada Identity are typically based on the number of users and the specific features required. Customer support is available through various channels, including online resources, support tickets, and professional services for implementation and customization.

In summary, Omada Identity is a comprehensive IGA solution that enhances security, compliance, and efficiency in managing digital identities and access.

ForgeRock is a comprehensive open-source identity and access management solution designed to meet the unique needs of your users and workforce. With ForgeRock you can orchestrate, manage, and secure the complete lifecycle of identities in any cloud or hybrid environment. ForgeRock allows you to set up bot detection, identity proofing, and risk-based authentication.

With ForgeRock, you can define access policies and automate the management of the identity lifecycle all from a central, easy to use, and graphical dashboard. ForgeRock Access Management allows you to build safe authentication using options like passwordless and usernameless logins, single sign-on, biometrics, contextual analytics, and behavioral authentication. When threats appear, you can swiftly change how your users access your most sensitive applications and provide users with secure access to the applications, systems, and resources they need on demand.

ForgeRock Benefits and Key Features

Elevate your security and efficiency: Consolidating your legacy systems under one single platform provides reliable, unified control over all your user identities and access-related policies. ForgeRock Access Management also supports scaling existing policies for application onto new setups.
Passwordless authentication: Implementing passwordless authentication is simple with ForgeRock Access Management. You can easily replace user-selected passwords with other options, such as easy multi-factor authentication, biometrics, and SSO.
Identity governance: ForgeRock Identity Governance is a modern, AI-driven identity governance solution. By leveraging ForgeRock generated analysis reports, you can identify and apply appropriate user access, automate high-confidence access approvals, recommend certification for low-risk accounts, and review high-risk and inappropriate user access privileges. In addition, you can grant and enforce access to systems, applications, and infrastructure according to established policies.

Reviews from Real Users

ForgeRock stands out among its competitors for a number of reasons. Two major ones are its robust identity and access tools and its being easy to manage and scale with one central dashboard.

PeerSpot users note the effectiveness of these features. A technology solutions leader at an outsourcing company writes, “We need it for multiple clients, multiple implementations. Not all of them are necessarily a multi-tenant solution. We need a very versatile solution that can do a lot of work, but from a single instance that we can centralize authentications and we don't duplicate the efforts and that's where ForgeRock seems to do better.”

Mohamed B., a cyber security consultant at a tech company, writes, "Their access management solution, OpenAM, is most valuable because it meets the needs of a lot of users. ForgeRock secured our system so that it is accessed only by authorized people, and it implemented the SSO."

Microsoft Entra ID is used for extending on-premises Active Directory to the cloud, managing application access, enabling multi-factor authentication, and single sign-on. It facilitates policy enforcement and secure access, ensuring centralized identity management across cloud and on-premises resources.

Organizations utilize Microsoft Entra ID for robust user and group management, identity synchronization, and conditional access. Its seamless integration with third-party apps, scalability, and support for remote work make it a preferred choice. The admin center streamlines identity and access tasks, enhancing efficiency and security with features like privileged identity management and audit logs.

What are the key features of Microsoft Entra ID?

Single Sign-On: Simplifies user access to multiple applications with one login.
Multifactor Authentication: Enhances security by requiring additional verification.
Conditional Access: Establishes policies that determine how users' access cloud apps.
Integration: Easily integrates with various third-party applications.
User Identity Protection: Safeguards user identities from threats.
Privileged Identity Management: Manages elevated access to sensitive resources.
Audit Logs: Provides thorough activity logs for oversight and compliance.

What benefits should users look for in Microsoft Entra ID reviews?

Enhanced Security: Offers strong multifactor authentication and identity protection.
Administrative Efficiency: Simplifies identity and access management tasks.
Scalability: Supports growing user bases and remote work environments.
Integration Capabilities: Compatible with numerous third-party applications.
User-Friendly Interface: Makes managing user identities straightforward.

Microsoft Entra ID implementation varies across industries. Tech firms leverage it for secure, scalable access management, while healthcare organizations utilize its identity protection features to safeguard patient data. Educational institutions adopt Entra ID for streamlined user management and policy enforcement, ensuring secure access for students and staff across on-premises and cloud resources.

Sample Customers

Bayer, ECCO Shoes, Vattenfall, NuStar Energy, Unicredit, Schiphol Group, BMW Group, Deutsche Leasing

Geico, Thomson Reuters, Salesforce, McKesson, Trinet, SKY, BNP Paribas, Deloitte, Capgemini, North Western University

Microsoft Entre ID is trusted by companies of all sizes and industries including Walmart, Zscaler, Uniper, Amtrak, monday.com, and more.

Buyer's Guide

ForgeRock vs. Microsoft Entra ID

November 2024

Free Report: ForgeRock vs. Microsoft Entra ID

Find out what your peers are saying about ForgeRock vs. Microsoft Entra ID and other solutions. Updated: November 2024.

DOWNLOAD NOW

824,053 professionals have used our research since 2012.

See our ForgeRock vs. Microsoft Entra ID report.

See our list of best Identity Management (IM) vendors and best Access Management vendors.

We monitor all Identity Management (IM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.