ForgeRock vs Microsoft Entra ID Protection comparison

Ping Identity and Microsoft are both solutions in the Identity Management (IM) category. Ping Identity is ranked #12 with an average rating of 8.5, while Microsoft is ranked #8 with an average rating of 8.6. Ping Identity holds a 4.5% mindshare in IAM, compared to Microsoft’s 1.7% mindshare. Additionally, 92% of Ping Identity users are willing to recommend the solution, compared to 100% of Microsoft users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 1, 2024

ForgeRock and Microsoft Entra ID Protection compete in identity and access management solutions. Microsoft Entra ID Protection tends to have the upper hand due to its superior product offering and robust features.

Features: ForgeRock offers advanced identity orchestration capabilities, comprehensive user consent management, and extensive support for protocols like OAuth and SAML. Microsoft Entra ID Protection provides risk-based adaptive authentication, strong integration with Microsoft 365 applications, and detailed reporting tools.

Room for Improvement: ForgeRock could improve its integration with non-identity tools and enhance simplicity in configuration. Entra ID Protection could refine its pricing structure and expand support for non-Microsoft environments. Both products can benefit from increased customization options to better suit diverse enterprise needs.

Ease of Deployment and Customer Service: Microsoft Entra ID Protection is easy to deploy due to its cloud-based nature and seamless Microsoft service integration, supported by comprehensive documentation. ForgeRock requires more intricate configuration, offering flexibility that suits diverse deployment environments but may demand more setup efforts and expertise.

Pricing and ROI: ForgeRock's initial pricing is more attractive and scales well for large implementations, providing cost advantages in budget-conscious scenarios. Microsoft Entra ID Protection, although higher upfront, offers significant productivity gains and security benefits within Microsoft ecosystems, promising a compelling ROI over time.

To learn more, read our detailed ForgeRock vs. Microsoft Entra ID Protection Report (Updated: January 2025).

Buyer's Guide

ForgeRock vs. Microsoft Entra ID Protection

January 2025

Download the complete report

Helped 839,422 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Omada Identity

Mindshare comparison

As of March 2025, in the Identity Management (IM) category, the mindshare of Omada Identity is 3.2%, down from 3.4% compared to the previous year. The mindshare of ForgeRock is 4.5%, down from 5.4% compared to the previous year. The mindshare of Microsoft Entra ID Protection is 1.7%, up from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Identity Management (IM)

Featured Reviews

Pernilla Hulth

IAM Project Manager (Independent) at a retailer with 10,001+ employees

The interface is easy to use and gives you a solid overview

The cloud-based deployment was straightforward, but the on-prem deployment was in a highly complex ecosystem. Omada has matured since then. I wouldn't say that it isn't straightforward, but it depends on the customer. A standard deployment is relatively easy, but it can be more painful if you need a lot of customization. We deployed the cloud solution in around four months, nearly meeting the 12-week benchmark. The on-prem deployment took three years. It was a highly complex ecosystem that was dependent on other systems. Depending on the size of your environment, you need a product owner and some specialists for maintenance. My last customer was a university with a complex environment. They had around 12 people involved in maintenance at that organization. Typically, it's between 2-5 people.

Read full review

Trisha Bhola

Senior Associate at Cognizant

It's easier to customize and maintain our code

I worked on two different projects based on ForgeRock, and both are automated deployments. One is a UI-based deployment. It's an automated process using some scripts. The deployments are done through Octopus, so it's also automated. We first deploy the essential components of AM and then implement additional configurations like Amster Imports. After that, we import all the SAML Federation data and add some certificates. We have two teams of five and three team members working on the different deployment processes. One is working on the dev side, another is looking at the higher environment, and one is managing the data. In another project, I'm the only developer. We also deploy on the dev environments so that anyone can test new features, configurations, and client requirements. They can test it on the dev environment, but a team of four people manages higher environments. The Access Management component involves the most customization, which takes around 15 to 20 minutes because of the need to import the Amster configuration. If another deployment is simultaneously happening, it may be a little slower and take around 30 minutes. The other components, like the user data stores, take about five to seven minutes. It's another five to 10 minutes for Identity Management. After deployment, the maintenance is mostly checking for security vulnerabilities. If ForgeRock shares security vulnerabilities or advisories, we check to see if there is something inside we need to maintain. Other than that, we just install updates when they add features each month.

Read full review

Mahender Nirwan

Software developer at TAIGLE LLC

Access to other software is just one click away and suitable for big organizations

Currently, we have limited use of Microsoft AD. We only use it to see if user blocks are available. If they are, we unblock the account and get access accordingly. AD has paid access control features. We can add access control over AD. For example, for documentation, we use an Outline tool. It's open source, and we add our company's knowledge base to it. It's an alternative to Confluence. We don't want everyone to have access to all documentation. If I create documentation for my team, only my team should have access, not support or sales. We can add these scopes or access controls over AD. Once integrated, the person will get the appropriate access control features upon logging in. Role-based access control is a great feature of Active Directory.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We are able to onboard new user accounts much faster by automating the process and standardizing our operations globally. Previously, there were many individual processes and manual admin interactions. We also see a lot of cost savings and benefits because through automation and standardization."

"As an administrator, we benefit from a lot of functionality that is available out of the box, but it is also configurable to meet our specific needs."

"The most valuable feature is the automatic provisioning and reconciliation of things like the Active Directory groups and memberships."

"The thing that I find most valuable is that Omada consists of building blocks, which means that you can configure almost anything you want without using custom code, making it pretty easy to do. It's possible to connect to multiple target systems and to create one role that consists of different permissions in the different target systems. So one role in Omada can make sure that you have an account in three different systems."

"The most valuable feature of Omada is its API connectivity, which allows seamless integration with various services like SAP, GRC, and Microsoft licenses."

"I appreciate all the support we receive from Omada."

"The Governance and self-service that can be set up so you can use them yourself to work in the system are the most valuable features. End users can be enabled to help themselves."

"I'm not using Omada, but the interface is easy to use and gives you a solid overview of your identities."

More Omada Identity pros

"Easy to navigate, handle and manage the applications."

"I like the intelligent authentication feature."

"Even though we have very small business interests with them today, they see that we plan on growing drastically over the next two years. Therefore, we have excellent support and we are now at a point where we are not calling tech support. We pick up a phone and call the Account Manager and they'll get everything resolved for us. We don't have to queue along with everybody else and go through a long process."

"ForgeRock has CIAM, which other products didn't have, and they have DevOps ready."

"This is a stable solution. When you do experience any issues, you will see it in your DB logs or audit logs so you can easily reach a conclusion of might be causing it."

"I like the way it is handling authentication and authorization."

"The product is easy to set up."

"The product is easy to use in a development environment."

More ForgeRock pros

"The valuable features include multifactor authentication, accessory capabilities, and conditional access for specific applications."

"The primary and most valuable aspect of Azure AD identity is its ability to function seamlessly on both on-premise and cloud infrastructure, eliminating the need for extensive updates. However, this dual solution can pose vulnerabilities that require substantial support and security measures in the on-premise environment. Despite the challenges, it is currently not feasible to completely abandon AD, especially for companies in the sales and energy sectors. The integration with Microsoft Defender is crucial for enhancing security, making identity and security the primary focus and purpose of Azure AD."

"As an end-user, I find the experience to be quite seamless. My main advantage is that I only need to manage one login and one two-factor authentication method to access all the necessary tools. I don't have to set up separate logins and authentication for each application."

"The deployment process is straightforward. It takes a few hours to complete."

"The valuable features of Entra ID Protection include providing me visibility of my entire estate, managing access, and having a level of control."

"I find the most valuable feature to be conditional access. It allows for comprehensive security controls, network security, and application label security."

"The solution's technical support offers great assistance to users."

"The solution helps us with authentication."

More Microsoft Entra ID Protection pros

Cons

"The current reporting tools in Omada are limited, but we expect significant improvements in the new version."

"If you find an error and you need it fixed, you have to upgrade. It's not like they say, "Okay, we'll fix this problem for you." You have to upgrade. The last time we upgraded, because there was an error in a previous version, we had to pay 150,000 Danish Krone (about $24,000 at the time of this review) to upgrade our systems... That means that we have to pay to get errors fixed that Omada has made in programming the system. I hope they change this way of looking at things."

"We are still on Omada on-prem, but I understand that when Omada is in the cloud, you cannot send an attachment via email. We have some emails with attachments for new employees because we have to explain to them how to register and do their multi-factor authentication. All that information is in the attachment. People have to do that before they are in our system. We cannot give them a link to our Intranet and SharePoint because they do not yet have access. They have to register before that, so I need to send the attachments, but this functionality is not there in the cloud."

"One thing that we are not so happy about is the user interface. It is a bit dated. I know that they are working on that, but the user interface is quite dated. Currently, it is a little bit difficult to customize the user interface to the need of the business, which is a little bit disappointing. It needs it to be a little bit easier to operate, and it should have a better user interface."

"When the re-certification process is launched that makes Omada very slow. There are performance issues in the current version."

"I would like to search on date fields, which is not possible now."

"We are trying to use Omada's standards and to adapt our processes. But we have had some trouble with the bad documentation. This is something that they could improve on. It has not been possible for us to analyze some of the problems so far, based on the documentation. We always need consultants. The documentation should include some implementation hints and some guidelines for implementing the processes."

"There's a challenge with handling large amounts of data in this system."

More Omada Identity cons

"We raised tickets asking for improvements, but sometimes we don't get the proper solution. They are responding, but the ticket is open for weeks and weeks. For some issues, we don't get a satisfactory solution or the solution doesn't work."

"ForgeRock is an open source solution and is available to everyone but it is not freeware. If you need support, you need a subscription for ForgeRock. Many of its functionalities need to be built up with the help of a consultant."

"The product's support services in the French language are not free."

"Lacks simplified documentation within the tool that requires use of a separate portal."

"In future releases, I would like to see easier integration with other solutions, like facial recognition and KYC solutions with biometric onboarding."

"In an upcoming release, the solution could improve by limiting the need to do customizations."

"It should have a better user interface. Its flexibility should also be improved. It is not about simplifying; it is more about flexibility. Each company has its own requirements, and ForgeRock can provide more flexibility in terms of the use of existing modules to implement features for the customers."

"I don't think ForgeRock directly supports integrations with Slack, making it an area where improvements are required."

More ForgeRock cons

"The product's initial setup phase is not easy."

"Entra ID lacks a function to synchronize from the cloud to the local directory. This is a significant issue since there is no write-back feature from the cloud to local, which would allow me to use my own credentials from the cloud tenant securely."

"The recent CrowdStrike issue affected most systems."

"I rate the quality of support at four out of ten because of inefficiencies in the ticket handling process. Tickets often bounce from person to person, requiring the sharing of information multiple times."

"The solution's sync should be faster since it can take about 30 minutes to two hours to complete a simple sync. The tool needs to sync instantly. It also needs to improve scalability, support, and stability."

"Microsoft has room for improvement in simplifying their integration with third-party solutions and making the licensing model more understandable."

"Integrating some notifications, not necessarily all, but at least for important events or alerts, would be beneficial as it would function as a team solution or something similar."

More Microsoft Entra ID Protection cons

Pricing and Cost Advice

"Omada Identity is very reasonably and competitively priced."

"They are positioned at a good price point. They are lower than some of their competitors."

"Omada Identity is competitively priced and delivers good value for our money."

"From an on-prem point of view, the cost is quite transparent and reasonable. The direct cost is primarily for licenses and maintenance on licenses."

"Omada isn't cheap or expensive. The licensing model is flexible. I've only had limited interactions with the Omada sales team, but they were positive. They don't sell the customers more licenses than they need. It's important to accurately forecast future usage. For example, we have many licenses that we don't use because we don't have the identities yet. We pay extra, which isn't good."

"Omada is too expensive. We are in the automotive industry. The pricing might be high because most of the other customers are in the insurance or banking sectors, but it's steep for an auto supply company."

"While Omada Identity carries a premium price tag, it proves to be cost-effective."

"The pricing is too high for SMBs."

More Omada Identity pricing and cost advice

"ForgeRock's pricing is more competitive than other products."

"The pricing of the solution is fair but I do not have the full details."

"We have multiple clients we are looking at right now. We are at a very small number, however, the idea and the goal is to grow. We are looking at about $100,000 and $50,000 a minimum a month cost. That'd be minimum maybe in a couple of years."

"It's a bit pricey and could be more competitive."

"Its price is comparable to other products in the market."

"The license is purchased annually per user. However, you can negotiate if you are signing for a longer period of time. When comparing this solution to others on the market it is priced fair, it is not at the top of the price range or at the bottom end."

"ForgeRock is an expensive solution."

"Its licensing is on a yearly basis, but it also depends on the contract that you have with the vendor. They have multiple types of contracts. There are additional costs to the standard licensing fees. If you need some of the features, you have to pay more."

"The pricing is competitive in the SMA segment and runs $5-$6 per user."

"From one to ten, if one is cheap and ten is expensive, I rate the tool a seven out of ten."

"The price of Azure AD is not expensive."

"Azure Active Directory Identity Protection is not very expensive."

"The product cost is on the expensive side."

See which vendors are best for you

Use our free recommendation engine to learn which Identity Management (IM) solutions are best for your needs.

See recommendations

839,422 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

Computer Software Company

13%

Manufacturing Company

Government

Financial Services Firm

24%

Computer Software Company

12%

Insurance Company

Manufacturing Company

Computer Software Company

17%

Financial Services Firm

14%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Omada Identity Cloud?

As an administrator, we benefit from a lot of functionality that is available out of the box, but it is also configur...

See all answers

What is your experience regarding pricing and costs for Omada Identity Cloud?

They are positioned at a good price point. They are lower than some of their competitors.

See all answers

What needs improvement with Omada Identity Cloud?

The biggest issue, which is the reason why we are transitioning from their product to SailPoint, is the overall user ...

See all answers

What do you like most about ForgeRock?

The most valuable features of ForgeRock are social login and data protection.

See all answers

What is your experience regarding pricing and costs for ForgeRock?

Our company was considering switching back to Keycloak from ForgeRock, so as to not pay any license fees. ForgeRock a...

See all answers

What needs improvement with ForgeRock?

In the past, I saw that Splunk was integrated with a testing portal, and then it was integrated with Slack. I don't t...

See all answers

What do you like most about Azure Active Directory Identity Protection?

I use conditional access most of the time.

See all answers

What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?

Microsoft Entra ID requires additional licensing components, particularly for Entra ID governance as an add-on for th...

See all answers

What needs improvement with Azure Active Directory Identity Protection?

I have set up my Active Directory locally for the same domain. However, Entra ID lacks a function to synchronize from...

See all answers

Comparisons

SailPoint Identity Security Cloud vs Omada Identity

Compared 32% of the time

Microsoft Entra ID vs Omada Identity

Compared 21% of the time

Saviynt vs Omada Identity

Compared 18% of the time

One Identity Manager vs Omada Identity

Compared 7% of the time

SAP Identity Management vs Omada Identity

Compared 6% of the time

More Omada Identity Competitors

Microsoft Entra ID vs ForgeRock

Compared 18% of the time

SailPoint Identity Security Cloud vs ForgeRock

Compared 14% of the time

Ping Identity Platform vs ForgeRock

Compared 9% of the time

Symantec Siteminder vs ForgeRock

Compared 8% of the time

Auth0 vs ForgeRock

Compared 8% of the time

More ForgeRock Competitors

Microsoft Defender for Identity vs Microsoft Entra ID Protection

Compared 48% of the time

BloodHound Enterprise vs Microsoft Entra ID Protection

Compared 9% of the time

CrowdStrike Falcon vs Microsoft Entra ID Protection

Compared 9% of the time

Semperis Directory Services Protector vs Microsoft Entra ID Protection

Compared 8% of the time

More Microsoft Entra ID Protection Competitors

Product Reports

Buyer's Guide

Omada Identity

February 2025

Download Omada Identity product report

Buyer's Guide

ForgeRock

March 2025

Download ForgeRock product report

Buyer's Guide

Microsoft Entra ID Protection

February 2025

Download Microsoft Entra ID Protection product report

Also Known As

Omada Identity Suite, Omada Identity Cloud

ForgeRock Identity Platform, ForgeRock OpenIDM

Azure Active Directory Identity Protection, Azure AD Identity Protection

Overview

Omada Identity is an identity governance and administration (IGA) solution designed to help organizations manage and secure digital identities and access across their IT environments. It focuses on enhancing security, compliance, and efficiency by automating identity management processes.

Omada Identity offers a robust set of features that streamline identity lifecycle management, access governance, and compliance reporting. It integrates with a wide range of IT systems, applications, and data sources, providing a centralized platform for managing user identities and access rights. The solution enables organizations to enforce security policies, ensure regulatory compliance, and reduce the risk of unauthorized access.

What are the critical features of Omada Identity?

Identity Lifecycle Management: Automates the process of creating, updating, and deactivating user identities throughout their lifecycle.
Access Governance: Ensures that users have appropriate access rights, enabling continuous monitoring and recertification of access.
Compliance Reporting: Provides comprehensive reporting capabilities to demonstrate compliance with regulatory requirements.
Role-Based Access Control (RBAC): Simplifies the assignment and management of access rights based on user roles within the organization.
Self-Service Access Requests: Empowers users to request access to resources through a user-friendly portal, reducing administrative burden.
Integration Capabilities: Seamlessly integrates with various systems, applications, and data sources for unified identity and access management.

What benefits or ROI items should users look for in the reviews when evaluating Omada Identity?

Improved Security: By ensuring that only authorized users have access to sensitive information, Omada Identity enhances overall security posture.
Regulatory Compliance: Helps organizations meet compliance requirements by providing detailed audit trails and reporting features.
Operational Efficiency: Automates routine identity management tasks, reducing manual effort and freeing up IT resources for strategic initiatives.
User Productivity: Streamlines access management processes, enabling users to quickly obtain the resources they need to perform their jobs.
Reduced Risk: Minimizes the risk of data breaches and insider threats by enforcing strict access controls and continuous monitoring.

Omada Identity is widely adopted across various industries, including healthcare, finance, and manufacturing. In healthcare, it helps protect patient data and comply with regulations like HIPAA. In finance, it ensures compliance with SOX and other financial regulations. In manufacturing, it secures access to sensitive production data and intellectual property.

Pricing and licensing for Omada Identity are typically based on the number of users and the specific features required. Customer support is available through various channels, including online resources, support tickets, and professional services for implementation and customization.

In summary, Omada Identity is a comprehensive IGA solution that enhances security, compliance, and efficiency in managing digital identities and access.

Omada

ForgeRock is a comprehensive open-source identity and access management solution designed to meet the unique needs of your users and workforce. With ForgeRock you can orchestrate, manage, and secure the complete lifecycle of identities in any cloud or hybrid environment. ForgeRock allows you to set up bot detection, identity proofing, and risk-based authentication.

With ForgeRock, you can define access policies and automate the management of the identity lifecycle all from a central, easy to use, and graphical dashboard. ForgeRock Access Management allows you to build safe authentication using options like passwordless and usernameless logins, single sign-on, biometrics, contextual analytics, and behavioral authentication. When threats appear, you can swiftly change how your users access your most sensitive applications and provide users with secure access to the applications, systems, and resources they need on demand.

ForgeRock Benefits and Key Features

Elevate your security and efficiency: Consolidating your legacy systems under one single platform provides reliable, unified control over all your user identities and access-related policies. ForgeRock Access Management also supports scaling existing policies for application onto new setups.
Passwordless authentication: Implementing passwordless authentication is simple with ForgeRock Access Management. You can easily replace user-selected passwords with other options, such as easy multi-factor authentication, biometrics, and SSO.
Identity governance: ForgeRock Identity Governance is a modern, AI-driven identity governance solution. By leveraging ForgeRock generated analysis reports, you can identify and apply appropriate user access, automate high-confidence access approvals, recommend certification for low-risk accounts, and review high-risk and inappropriate user access privileges. In addition, you can grant and enforce access to systems, applications, and infrastructure according to established policies.

Reviews from Real Users

ForgeRock stands out among its competitors for a number of reasons. Two major ones are its robust identity and access tools and its being easy to manage and scale with one central dashboard.

PeerSpot users note the effectiveness of these features. A technology solutions leader at an outsourcing company writes, “We need it for multiple clients, multiple implementations. Not all of them are necessarily a multi-tenant solution. We need a very versatile solution that can do a lot of work, but from a single instance that we can centralize authentications and we don't duplicate the efforts and that's where ForgeRock seems to do better.”

Mohamed B., a cyber security consultant at a tech company, writes, "Their access management solution, OpenAM, is most valuable because it meets the needs of a lot of users. ForgeRock secured our system so that it is accessed only by authorized people, and it implemented the SSO."

Ping Identity

Microsoft Entra ID Protection enhances security with advanced identity controls and seamless integration across environments. It ensures robust protection via multifactor authentication and single sign-on capabilities, safeguarding enterprises' sensitive information efficiently.

Microsoft Entra ID Protection offers comprehensive identity management and privileged access management features, making it critical for businesses transitioning to hybrid models or cloud solutions. Utilizing multifactor authentication, single sign-on, and security policy creation, it excels in securing access across both on-premise and cloud platforms. By integrating with Microsoft Defender, it enhances security measures. While it is highly effective, areas for improvement include identity labeling, password management, and more straightforward third-party integrations. Expanding access to Mac devices and simplification of the licensing model are also areas to be addressed for improved scalability.

What are the key features of Microsoft Entra ID Protection?

Granular Identity and Access Control: Tailor access permissions to enhance security measures.
Robust Authentication: Implement multifactor authentication for superior identity verification.
Seamless Management: Manage identities across on-premise and cloud environments effortlessly.
Conditional Access Policies: Enforce specific access rules based on predetermined conditions.

Why should users value Microsoft Entra ID Protection in their evaluations?

Operational Efficiency: Simplifies identity management with single sign-on.
Extensive Security Capabilities: Provides comprehensive protection for sensitive data.
Enterprise Focused: Tailored for use in complex organizational structures and transitions.
Integration Capability: Works closely with Microsoft Defender to enhance security measures.

In industries such as finance and healthcare, entities leverage Microsoft Entra ID Protection to maintain stringent access controls, optimize privileged access management, and facilitate smooth transitions to cloud environments. They utilize its integration with Azure AD to ensure comprehensive identity protection while aligning to compliance requirements specific to their fields.

Microsoft

Sample Customers

Bayer, ECCO Shoes, Vattenfall, NuStar Energy, Unicredit, Schiphol Group, BMW Group, Deutsche Leasing

Geico, Thomson Reuters, Salesforce, McKesson, Trinet, SKY, BNP Paribas, Deloitte, Capgemini, North Western University

Information Not Available

Buyer's Guide

ForgeRock vs. Microsoft Entra ID Protection

January 2025

Free Report: ForgeRock vs. Microsoft Entra ID Protection

Find out what your peers are saying about ForgeRock vs. Microsoft Entra ID Protection and other solutions. Updated: January 2025.

DOWNLOAD NOW

839,422 professionals have used our research since 2012.

See our ForgeRock vs. Microsoft Entra ID Protection report.

See our list of best Identity Management (IM) vendors.

We monitor all Identity Management (IM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.