We need it for running MSA protection for most of the users. We need Azure AD Connect because they are highly on primary setup, so they need to sync on primary with Azure AD.
Cloud Consultant at a tech vendor with 11-50 employees
The most beneficial feature would be the effectiveness of having a hybrid set-up. The tech support is inconsistent.
Pros and Cons
- "The most beneficial feature would be the effectiveness of having a hybrid set-up."
- "Initially, we wanted to exclude specific users from MSA. So, we had a condition policy, which forces MSA for all the users. So we wanted to exclude users who are using an NPS extension. So it was not listed, as a NPS extension was not listed outside an application, in actual, so, we go back and were not able to exclude users using NPS extension from MSA. So that was one limitation that we found and we had to work around that."
- "Tech support is inconsistent."
What is our primary use case?
How has it helped my organization?
From the beginning when I joined the company, they were already using Azure AD Premium. The most wanted features would be the synchronization between the Windows AD, Azure AD, because there are so many capabilities that just because we can't sync their own from Azure AD.
What is most valuable?
The most beneficial feature would be the effectiveness of having a hybrid set-up. When we need to create an account, we create it in Auto Activator 3. Even though the users are created and managed in Windows really, we can use all the benefits of the cloud, as well.
What needs improvement?
Right now I can't point out a particular feature, but sometimes when we work, it evolves. There are so many features that are out recently, so it'd be hard to set up MSA for obvious remote users, so users who are using Azure are hard to use it remotely. So, while we're setting that up, we have face of issues which show the limitations of Azure.
Initially, we wanted to exclude specific users from MSA. So, we had a condition policy, which forces MSA for all the users. So we wanted to exclude users who are using an NPS extension. So it was not listed, as a NPS extension was not listed outside an application, in actual, so, we go back and were not able to exclude users using NPS extension from MSA. So that was one limitation that we found and we had to work around that.
We noticed recent additions on display that have been in recent updates. On the board, there are some features that still need help.
Buyer's Guide
Microsoft Entra ID
January 2025
Learn what your peers think about Microsoft Entra ID. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,265 professionals have used our research since 2012.
For how long have I used the solution?
One to three years.
What do I think about the stability of the solution?
The stability is pretty good. Earlier, there were freezes here and there. But, we overcame it. What w have now is stable, but they are trying to include more features.
What do I think about the scalability of the solution?
We have almost 500 users. So, it is pretty easy. They are including more features, which enhances onboarding and decommissioning users. From an actual perspective, it's pretty easy to scale.
How are customer service and support?
Tech support has its up and downs. So, sometimes it will take one week, and other times two weeks to resolve a case. Sometimes they have to respond fast, and they do so. It is not consistent.
What's my experience with pricing, setup cost, and licensing?
It's really affordable. It does not feel as if it is too costly. It's okay to spend this money for this product or feature. Yeah, I think it's affordable.
What other advice do I have?
If you have connections with a PSP partner, it will be easy, I guess. If you're buying an Azure AD Premium independently, you won't have a helping hand from them. You'll have support but, not much other than that. With a PSP partner, you will feel like that you can implement or you can quadrate.
Once Azure is developed, and fully established, it will be a perfect product. It is still in the development stage at present.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior Technical Consultant at a tech services company with 51-200 employees
In terms of security, we have been using the B2B/B2C hybrid integration with the certificate authentication.
Pros and Cons
- "We have not had any formal issues with scalability."
- "It is pretty good in terms of stability."
- "I primarily use this solution for hybrid deployment, security, securing resources and for integration purposes. In terms of security, we have been using the B2B/B2C hybrid integration with the certificate authentication."
- "There are issues using it with ADFS."
What is our primary use case?
I primarily use this solution for hybrid deployment, security, securing resources and for integration purposes. In terms of security, we have been using the B2B/B2C hybrid integration with the certificate authentication.
How has it helped my organization?
From a practice point of view, of storing secrets internally on Azure AD, we use the certificate when we can.
I would advise to allow an ex-client user to change their password. At present, you can only change your password externally if your password is still valid. If your password is expired, you cannot actually do it through Azure AD.
What is most valuable?
Most of the time, this product is doing purpose-built solutions. Some people on my team like the multi-step authentication. Others like the fact that it secures their resources externally.
What needs improvement?
We found the ADFS being a redundant part of the solution. But, it was removed. The licensing is a bit confusing if you are not going into the premium model.
For how long have I used the solution?
Three to five years.
What do I think about the stability of the solution?
It is pretty good in terms of stability. I have not had any issues. It has not crashed.
What do I think about the scalability of the solution?
In terms of scalability, we have not had any formal issues or outages from the solution. We are currently using it for 100 users. But, our clients are also using it, and I think we have at least several thousand clients using it.
How was the initial setup?
The initial setup was straightforward. It has been improving a lot in the past couple of years. Yes, it is a lot easier now than when I first started working with this solution.
I would estimate that the initial setup would probably take a team a week to set up.
What other advice do I have?
When implementing for one client, where they had ADFS turned on, we could not ID enough ADFS and when there was no internet connection. This was a Catch-22 for us, and very frustrating. I would advise new users to use Azure over the ADFS.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Microsoft Entra ID
January 2025
Learn what your peers think about Microsoft Entra ID. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
831,265 professionals have used our research since 2012.
Presales at Quest Software
The best solution you can implement for your identity protection
Pros and Cons
- "Don't delay implementing this solution, it's the best thing you can do for your identity protection."
- "It would be an improvement if Authenticator made it easier to recover the app if you reboot your cellphone and lose access."
What is our primary use case?
I use Authenticator across my company for controlling access to our platforms and data.
What is most valuable?
The most valuable feature is the prompt for a number so that you're sure what you're seeing is what you're agreeing to.
What needs improvement?
It would be an improvement if Authenticator made it easier to recover the app if you reboot your cellphone and lose access.
What do I think about the stability of the solution?
Authenticator is stable.
How was the initial setup?
The initial setup is straightforward.
What other advice do I have?
Don't delay implementing this solution, it's the best thing you can do for your identity protection. I would rate Authenticator as nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Infrastructure Manager at a consumer goods company with 51-200 employees
Improved stability and straightforward to set up but licensing is confusing
Pros and Cons
- "Azure is the leading market solution because of its history, features, and maturity."
- "The technical support can be confusing - if you're looking for something very specific, it can be hard to get the right answer or a solution."
What is our primary use case?
My main use is for directory services, including identity access, management policies, access control, authentication features, and endpoint management.
What needs improvement?
The licensing model makes it difficult to understand the real cost of the solution, especially because it changes all the time.
For how long have I used the solution?
I have fifteen years of experience with Active Directory.
What do I think about the stability of the solution?
The stability has improved from a couple of years ago. From time to time, there are service interruptions, but they're not a problem.
What do I think about the scalability of the solution?
This solution is easily scalable.
How are customer service and support?
The technical support can be confusing - if you're looking for something very specific, it can be hard to get the right answer or a solution. Google Workspace's support is stronger - it's fast and easy, and they go the extra mile without asking.
How was the initial setup?
Active Directory is straightforward to set up.
What other advice do I have?
Azure is the leading market solution because of its history, features, and maturity. I'd rate this solution seven out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Service Architect at a computer software company with 10,001+ employees
Adds a valuable extra layer to data security; very functional
Pros and Cons
- "The solution adds an extra layer of security."
- "Lacks integration between applications and phones."
What is our primary use case?
My primary use case is to access our company resources. I'm a solution architect and we are customers of Authenticator.
What is most valuable?
I use this solution on a daily basis and it's a very functional app. that adds an extra layer when it comes to securing the data owned by my company. It's quite easy to deploy.
What needs improvement?
I'd like to see integration between applications and phones included in the solution. It would also be helpful to have support for the kind of integration you see between Facebook and Google, support with protocols from one application on the internet or SaaS to another one. I've seen several kinds of applications in the area of risky behavior that are a little better in other solutions.
For how long have I used the solution?
I've been using this solution for a year.
What do I think about the stability of the solution?
The solution always works, it's stable.
What do I think about the scalability of the solution?
The solution is scalable, we have around 40,000 users in our company.
Which solution did I use previously and why did I switch?
I have previously used other products but Authenticator is included in the Microsoft license suite package so the decision to go with it was commercial.
How was the initial setup?
The solution is connected with Intune in the cloud so implementation is very easy and took me less than five minutes. Everything is updated via Microsoft cloud delivery.
What other advice do I have?
I rate this solution eight out of 10.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Vice President of Technology at Ecuity Edge
User authentication that is reliable and scales well
Pros and Cons
- "The most valuable feature is the ease of scalability."
- "I think the documentation and configuration are both areas that need improvement."
What is our primary use case?
I am using this product for user authentication.
What needs improvement?
I think the documentation and configuration are both areas that need improvement.
The product changes and gets updated, but the documentation doesn't keep pace.
The initial setup could be simplified.
I would like to see a better UI tool.
For how long have I used the solution?
The company has been using this solution for approximately four years.
We are using the latest version.
What do I think about the stability of the solution?
It's a stable solution. We have not experienced any issues.
What do I think about the scalability of the solution?
Microsoft Azure Active Directory Premium is a scalable solution. It scales very well.
We all use this solution daily. We are a team of five the company.
Which solution did I use previously and why did I switch?
The most valuable feature is the ease of scalability.
How was the initial setup?
The initial setup is fairly complex.
We are a smaller company and it only took us two days to deploy.
What about the implementation team?
We did not use an integrator, we used in-house knowledge.
What other advice do I have?
If you are familiar with Microsoft, this is the product to use.
I would rate Microsoft Azure Active Directory Premium an eight out of ten.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner, Reseller
Enterprise Security Architect at Energir
Improved user experience with SSO logins but requires role-based access controls
What is our primary use case?
- Office 365 authentication
- SSO for ServiceNow
- SSO for other cloud applications.
How has it helped my organization?
Improved user experience with SSO logins.
What is most valuable?
Keeping the same credentials as Active Directory.
What needs improvement?
Role-based access controls.
For how long have I used the solution?
Three to five years.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Infrastructure and Cloud Principle Specialist at a tech services company with 1,001-5,000 employees
Integrates well with Microsoft products but configuring third-party solutions can be difficult
Pros and Cons
- "Multi-factor authentication really secures our environments and gives us the flexibility to use location-based policies. Azure AD also gives us a lot of flexibility in our scope of integration."
- "I would like it to be easier to integrate third-party applications."
What is our primary use case?
We use Azure AD for sign-on security as well as for our customers' Microsoft 365 solutions. We help migrate our customers from the traditional Active Directory, and to use Exchange Online and Microsoft Teams. We use Azure AD to secure their login processes with multi-factor authentication. In some specific cases, where there are specific applications, databases, or Active Directory login information about users, we integrate Azure AD with those elements.
What is most valuable?
Multi-factor authentication really secures our environments and gives us the flexibility to use location-based policies. Azure AD also gives us a lot of flexibility in our scope of integration.
It's easy to configure Microsoft products with Azure AD. It is almost an instant integration. In hybrid installations it is a bit more complex to configure, but not that much. In short, it is good for most Microsoft customers and the products they use.
What needs improvement?
Some of the features related to authentication could be made clearer. In my last organization, I tried to integrate a third-party education solution with Azure AD, but it was a bit difficult to configure. I would like it to be easier to integrate third-party applications.
For how long have I used the solution?
I have been using Azure AD for three or four years.
What do I think about the stability of the solution?
It's a stable product. I haven't encountered any problems or bugs.
What do I think about the scalability of the solution?
The solution is very scalable.
How was the initial setup?
In general, there is no problem in configuring Azure AD. It's not hard. But, as I said, configuring third-party, open-source applications with it is a little bit difficult.
We usually set aside one day to configure Azure AD for new organizations. In general, it takes one person to maintain it, perhaps two in some cases.
What other advice do I have?
We have faced a few little problems in our customers' hybrid environments. Backing up the ADFS (Active Directory Federation Services) is very important, but some of our customers didn't do so and they lost their ADFS proxy servers. That is one of the important lessons I have learned. In those cases we had to reconfigure almost everything. It's simple to back up ADFS, so I would advise doing so.
But from the user's point of view, we've faced no problems. It works well.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Download our free Microsoft Entra ID Report and get advice and tips from experienced pros
sharing their opinions.
Updated: January 2025
Product Categories
Single Sign-On (SSO) Authentication Systems Identity Management (IM) Identity and Access Management as a Service (IDaaS) (IAMaaS) Access Management Microsoft Security SuitePopular Comparisons
Okta Workforce Identity
Fortinet FortiAuthenticator
Cisco Duo
Ping Identity Platform
JumpCloud
LastPass
Symantec Siteminder
OneLogin by One Identity
IBM Security Verify Access
ManageEngine Password Manager Pro
Microsoft Active Directory
Red Hat Single Sign On
Frontegg
Imprivata OneSign
Buyer's Guide
Download our free Microsoft Entra ID Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What do you think of the integration of Azure AD Services, Defender for Endpoint, and Intune as comprehensive security solutions?
- What are the biggest differences between Google Cloud Identity and Microsoft Azure Active Directory?
- How does Duo Security compare with Microsoft Authenticator?
- How does Microsoft Authenticator compare with Forinet FortiToken?
- When evaluating Single Sign-On, what aspect do you think is the most important to look for?
- CA SiteMinder vs IBM Tivoli Access Manager
- How much time does SSO save?
- Why is SSO needed?
- What single sign-on platform do you recommend?
- Why is Single Sign-On (SSO) important for companies?