Try our new research platform with insights from 80,000+ expert users

ForgeRock vs Okta Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ForgeRock
Ranking in Access Management
15th
Ranking in Customer Identity and Access Management (CIAM)
7th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
30
Ranking in other categories
Identity Management (IM) (13th)
Okta Platform
Ranking in Access Management
2nd
Ranking in Customer Identity and Access Management (CIAM)
1st
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
91
Ranking in other categories
Single Sign-On (SSO) (2nd), Authentication Systems (5th), Privileged Access Management (PAM) (5th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (2nd), ZTNA as a Service (3rd), AI IT Support (2nd)
 

Mindshare comparison

As of February 2026, in the Access Management category, the mindshare of ForgeRock is 5.5%, down from 6.1% compared to the previous year. The mindshare of Okta Platform is 10.2%, down from 10.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Access Management Market Share Distribution
ProductMarket Share (%)
Okta Platform10.2%
ForgeRock5.5%
Other84.3%
Access Management
 

Featured Reviews

Ahmet Murat Ülker - PeerSpot reviewer
Devops Engineer and Trainer at a tech vendor with 1-10 employees
Easy to use, but customizations can be complicated to handle
I would suggest others use the product after asking them to consider their use cases. SSO may be a use case for some, and using the product as an IDM tool may be a use case. At the moment, my company is not deploying all the components of ForgeRock itself. My company uses ForgeRock for OAuth 2.0. For example, my company is not deploying the IDM and identity gateway components. You should consider your use case and select the required components for that use case. My company does not use the SSO features of the tool. My company uses SSO to access ForgeRock's AM Console for individual users. My company does not use single sign on features of the product and instead, we use Auth0. I rate the tool a seven or eight out of ten.
SumitMundik - PeerSpot reviewer
Lead Admin Systems at a financial services firm with 10,001+ employees
Authentication process improves security with quick and intuitive user interface
The best feature is the speed and execution of Okta Workforce Identity. The moment you click on single sign-on, you immediately get the notification on your mobile phone, then you do the authentication and within a second you get authenticated. The entire customer experience is very good. The user interface is pretty simple, straightforward, and really good. Multi-factor authentication in Okta Workforce Identity is very useful so people who do not have access or are trying to access using just a user ID and password will be completely blocked because of this two-factor authentication. You will get the code, and as your device is authorized in the system, only that device can be used for the authentication purpose. A third person trying to access or hack your data will not be able to do that anymore. Additionally, you don't have to remember your passwords going forward. Previously, every 60 days or 90 days, passwords kept changing. With the two-factor authentication or single sign-on option in Okta Workforce Identity, you don't have to remember it anymore or write down passwords in plain text. If something goes wrong, we have the IAM team which can unlock your account immediately if you have issues.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"ForgeRock is an extensive product with many functionalities and capabilities, much more than many other tools combined."
"Their access management solution, OpenAM, is most valuable because it meets the needs of a lot of users."
"The solution integrates well and it is important for them to keep up with the current trends in the market quickly enough, and they have been doing a good job at it."
"It works very well, especially in Identity and Access Management. It helps detect anomalies in user behavior patterns."
"The product is easy to set up."
"The most valuable features are that it is easy to manage and it's stable."
"The product is easy to use in a development environment."
"Easy to navigate, handle and manage the applications."
"The most valuable aspect of Okta Customer Identity is the server's reliability, especially for directory and node management."
"The end user's ease of use is the most valuable feature."
"The support for YubiKey is really good because you don't actually have to type in your username and password."
"I find the provisioning features and the integration with other applications useful."
"Workforce Identity offers a comprehensive access management solution with multi-factor authentication, total control, and features like app access management, identity governance, and administration tools such as certification and access request management. These are typically found in identity management solutions, but Okta integrates them seamlessly into its user interface."
"The most valuable feature in Okta Workforce Identity is the single sign-on, universal directory, and lifecycle management."
"The most valuable feature is the identity access authentication."
"The solution has great multifactor authentication."
 

Cons

"The user interface could be improved as it is cumbersome and outdated. It doesn't have a responsive UI."
"The solution's deployment should be made easier."
"ForgeRock is an open source solution and is available to everyone but it is not freeware. If you need support, you need a subscription for ForgeRock. Many of its functionalities need to be built up with the help of a consultant."
"The identity management model needs a bit of improvement."
"As with any complex software platform, there is a learning curve to using ForgeRock, and it may require specialized expertise to implement and manage effectively."
"Automatic Deployment needs improvement. it could be made easier."
"They should improve the solution by include reporting."
"It should have a better user interface. Its flexibility should also be improved. It is not about simplifying; it is more about flexibility. Each company has its own requirements, and ForgeRock can provide more flexibility in terms of the use of existing modules to implement features for the customers."
"The only issue with Okta Customer Identity is after the upgrade process; we have some issues with the integration between Okta Customer Identity and Jamf."
"There are some issues with the interface that can be improved."
"You can't hide the device when you're checking logs."
"We still had to write several internal programs/scripts to complete the user-provisioning process. Okta does not have the ability to provision mailbox accounts for on-premise Exchange or in a hybrid O365 environment. The Group Push function from Okta to AD did not work reliably in our environment."
"Okta Workforce Identity can improve by having more features in governance."
"Okta should have at least a local peering partner for countries that align with or comply with GDPR, so there are no compliance or audit questions."
"The initial setup could be easier to do."
"They should focus on improving them to provide top-notch team access management while still offering those typical features."
 

Pricing and Cost Advice

"The pricing of the solution is fair but I do not have the full details."
"The license is purchased annually per user. However, you can negotiate if you are signing for a longer period of time. When comparing this solution to others on the market it is priced fair, it is not at the top of the price range or at the bottom end."
"We have multiple clients we are looking at right now. We are at a very small number, however, the idea and the goal is to grow. We are looking at about $100,000 and $50,000 a minimum a month cost. That'd be minimum maybe in a couple of years."
"ForgeRock's pricing is more competitive than other products."
"Its price is comparable to other products in the market."
"It's a bit pricey and could be more competitive."
"ForgeRock is an expensive solution."
"Its licensing is on a yearly basis, but it also depends on the contract that you have with the vendor. They have multiple types of contracts. There are additional costs to the standard licensing fees. If you need some of the features, you have to pay more."
"The solution’s pricing needs to be reasonable. You are dealing with a lot of components and the pricing is component-based."
"Price-wise, Okta Workforce Identity is a cheap solution. The overall cost depends on the license since you can negotiate with Okta or any of Okta's partners only if you opt for many licenses."
"Workforce Identity is well-priced."
"I believe it competes well. The pricing is pretty competitive. I know that Microsoft also provides something similar with its MFA and identity services."
"The cost per user for this solution is really high and could be reduced."
"This solution is costly. Pricing is decent if you have less users, but it significantly goes up the more users you have, with its cost not justified."
"The price of this product could be lower."
"The price of the solution is fair for what it offers."
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
881,515 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
21%
Manufacturing Company
9%
Computer Software Company
9%
Insurance Company
6%
Manufacturing Company
11%
Financial Services Firm
9%
Computer Software Company
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise4
Large Enterprise13
By reviewers
Company SizeCount
Small Business38
Midsize Enterprise21
Large Enterprise44
 

Questions from the Community

What do you like most about ForgeRock?
The most valuable features of ForgeRock are social login and data protection.
What is your experience regarding pricing and costs for ForgeRock?
Our company was considering switching back to Keycloak from ForgeRock, so as to not pay any license fees. ForgeRock also supports M-PIN and biometric features that Keycloak does not provide. My com...
What needs improvement with ForgeRock?
In the past, I saw that Splunk was integrated with a testing portal, and then it was integrated with Slack. I don't think ForgeRock directly supports integrations with Slack, making it an area wher...
What do you like most about Okta Workforce Identity?
Okta has introduced the Universal Directory. It has custom attribute capability and user permissions to read/write on their profiles or hide them. Profile sources and identity profile sourcing are ...
What is your experience regarding pricing and costs for Okta Workforce Identity?
Pricing for Okta is reasonably not that much, however, I don't have access to the commercial aspect.
What needs improvement with Okta Workforce Identity?
Currently, in Okta Workforce Identity we get the two-digit authentication code. Instead of getting the two-digit authentication code, if we had an option to do fingerprint verification, that would ...
 

Also Known As

ForgeRock Identity Platform, ForgeRock OpenIDM
Okta Customer Identity, Workforce Identity
 

Overview

 

Sample Customers

Geico, Thomson Reuters, Salesforce, McKesson, Trinet, SKY, BNP Paribas, Deloitte, Capgemini, North Western University
FedEx, Zoom, Takeda, Lululemon Athletica, GrunHub, jetBlue, McKensson, Bain & Company, Engie, Peloton, Sonos, T-Mobile, Hewlett Packard, MGM Resorts, Ally Financial, Priceline, Albertsons, Itercom, Classy, FICO, Kensho, Live Nation, Drata, Rotary, and others.
Find out what your peers are saying about ForgeRock vs. Okta Platform and other solutions. Updated: December 2025.
881,515 professionals have used our research since 2012.