CyberArk Identity vs ForgeRock comparison

CyberArk and Ping Identity are both solutions in the Access Management category. CyberArk is ranked #6 with an average rating of 7.7, while Ping Identity is ranked #9 with an average rating of 8.5. Additionally, 95% of CyberArk users are willing to recommend the solution, compared to 92% of Ping Identity users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Aug 11, 2024

ForgeRock and CyberArk Identity are both prominent identity management solutions. Based on user reviews, CyberArk Identity appears to have the upper hand due to its superior features despite ForgeRock's more favorable pricing and support feedback.

Features: ForgeRock offers flexibility, extensive customization, and cost-effectiveness. CyberArk Identity provides robust security measures, a comprehensive feature set, and efficient deployment.

Room for Improvement: ForgeRock needs better performance, scalability enhancements, and simpler deployment. CyberArk Identity requires improved integration capabilities, user experience optimization, and more flexible pricing options.

Ease of Deployment and Customer Service: ForgeRock deployment can be complex and time-consuming, with responsive but sometimes slow customer service. CyberArk Identity deployment is straightforward, with efficient and supportive customer service.

Pricing and ROI: ForgeRock is cost-effective with a good return on investment. CyberArk Identity is pricier, but users find the advanced features justify the cost, reflecting a high ROI.

To learn more, read our detailed CyberArk Identity vs. ForgeRock Report (Updated: March 2025).

Buyer's Guide

CyberArk Identity vs. ForgeRock

March 2025

Download the complete report

Helped 845,406 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Omada Identity

Featured Reviews

Pernilla Hulth

IAM Project Manager (Independent) at a retailer with 10,001+ employees

The interface is easy to use and gives you a solid overview

The cloud-based deployment was straightforward, but the on-prem deployment was in a highly complex ecosystem. Omada has matured since then. I wouldn't say that it isn't straightforward, but it depends on the customer. A standard deployment is relatively easy, but it can be more painful if you need a lot of customization. We deployed the cloud solution in around four months, nearly meeting the 12-week benchmark. The on-prem deployment took three years. It was a highly complex ecosystem that was dependent on other systems. Depending on the size of your environment, you need a product owner and some specialists for maintenance. My last customer was a university with a complex environment. They had around 12 people involved in maintenance at that organization. Typically, it's between 2-5 people.

Read full review

Julio Montero

Access Management Analyst at Telefónica

Access management system provides strong security and effortless user authentication

The solution can be deployed on cloud or on-premises. CyberArk is more on the cloud than on local hardware. The deployment is initially quite difficult. That said, when you are doing the implementation of CyberArk, there are so many tutorials that make the learning process very easy. The only complaint could be the language barrier. It's difficult if you don't have a very good level of English. Otherwise, it is very easy. You can have it set up within three months without much difficulty. It's hard to get started, however, once you get going, it gets easier. A full deployment takes half a year or less. There is some maintenance necessary. A company is constantly hiring and letting go of employees. The access is always changing, so access must always be adjusted. Or, if we need another law of filter, we would need to add those, or even take them away. That's another aspect of maintenance.

Read full review

Trisha Bhola

Senior Associate at Cognizant

It's easier to customize and maintain our code

I worked on two different projects based on ForgeRock, and both are automated deployments. One is a UI-based deployment. It's an automated process using some scripts. The deployments are done through Octopus, so it's also automated. We first deploy the essential components of AM and then implement additional configurations like Amster Imports. After that, we import all the SAML Federation data and add some certificates. We have two teams of five and three team members working on the different deployment processes. One is working on the dev side, another is looking at the higher environment, and one is managing the data. In another project, I'm the only developer. We also deploy on the dev environments so that anyone can test new features, configurations, and client requirements. They can test it on the dev environment, but a team of four people manages higher environments. The Access Management component involves the most customization, which takes around 15 to 20 minutes because of the need to import the Amster configuration. If another deployment is simultaneously happening, it may be a little slower and take around 30 minutes. The other components, like the user data stores, take about five to seven minutes. It's another five to 10 minutes for Identity Management. After deployment, the maintenance is mostly checking for security vulnerabilities. If ForgeRock shares security vulnerabilities or advisories, we check to see if there is something inside we need to maintain. Other than that, we just install updates when they add features each month.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable aspects of Omada Identity for me are the automation capabilities."

"Surveying is a valuable feature because it allows us to import data and see who has access to what data, for example."

"Omada's most valuable aspect is its usability."

"The most valuable feature in Omada is the governance. We work with other products and other product vendors, but the sweet spot in the market for Omada is where things are heavy on governance."

"The support for the validity of the resources is valuable. The tool allows resource assignments within a validity period so that the managers do not have to remember to revoke the access once the work is done."

"The most valuable functionality of the solution for us is that when employees stop working for the municipality, they are automatically disabled in Active Directory. Omada controls that 100 percent. They are disabled for 30 days, and after that time Omada deletes the Active Directory account. The same type of thing happens when we employ a new person. Their information is automatically imported to Omada and they are equipped with the roles and rights so they can do their jobs."

"The administrative features and SoD are valuable."

"Its best feature is definitely the process design. It is quite easy and straightforward to design a process."

More Omada Identity pros

"The best thing I like about CyberArk Identity is that it does not require heavy implementation, complex hardware, or complex training."

"The integration capabilities, ability to integrate CyberArk into the overall IBB strategy of our current clients."

"The solution helps with auditing, and monitoring, and integrates with Splunk for log analysis. User activity logs are captured in CyberArk Identity and sent to external tools like Splunk for analysis and monitoring."

"I like the RBAC (Role-Based Access Control). It basically involves defining various roles, and then simply assigning those roles to users."

"The tool is a very strong and valuable enterprise solution, particularly in ensuring the continuity of service."

"The initial setup is straightforward. It takes me up to an hour and a half."

"Being able to integrate CyberArk Identity with Microsoft Defender is valuable."

"It has machine learning and can help clients to learn the environment and understand what is happening."

More CyberArk Identity pros

"ForgeRock is an extensive product with many functionalities and capabilities, much more than many other tools combined."

"The solution is very scalable. We have a lot of users that have been increasing over the years that we have been using it. We have approximately 20,000 users."

"The product is easy to use in a development environment."

"We have found the identity and access management tools in the solution to be particularly useful for our organization."

"Easy to customize and adaptable to any environment."

"Even though we have very small business interests with them today, they see that we plan on growing drastically over the next two years. Therefore, we have excellent support and we are now at a point where we are not calling tech support. We pick up a phone and call the Account Manager and they'll get everything resolved for us. We don't have to queue along with everybody else and go through a long process."

"Easy to navigate, handle and manage the applications."

"The solution integrates well and it is important for them to keep up with the current trends in the market quickly enough, and they have been doing a good job at it."

More ForgeRock pros

Cons

"Omada Identity's user interface needs improvement, especially for new users."

"The UI design needs improvement. One or two years ago, Omada changed its user interface to simplify, but the simplification has not really kicked in."

"The architecture of the entire system should also be less complex. The way they process the data is complex."

"The reporting and importing have room for improvement."

"The comprehensiveness of Omada's out-of-the-box connectors for the applications we use could be better. We are getting a new HR system called Cornerstone for which they do not have an out-of-the-box connector, so we have to take the REST connector and play around with it."

"The current reporting tools in Omada are limited, but we expect significant improvements in the new version."

"If you find an error and you need it fixed, you have to upgrade. It's not like they say, "Okay, we'll fix this problem for you." You have to upgrade. The last time we upgraded, because there was an error in a previous version, we had to pay 150,000 Danish Krone (about $24,000 at the time of this review) to upgrade our systems... That means that we have to pay to get errors fixed that Omada has made in programming the system. I hope they change this way of looking at things."

"Omada Identity has two main issues that need to be solved or improved the most. One is its setup or installation process because it's complex and cumbersome. I'm talking about the process for on-premises deployment because I've never tried the cloud version of Omada Identity. Setting up the cloud version should be much easier. The second area for improvement in Omada Identity is that it's piggybacking on Microsoft's complex way of having all kinds of add-ons, extensions, or setups, whether small or large, such as the new SQL Server, and it's cumbersome to make sure that everything works. Omada Identity is a complex solution and could still be improved."

More Omada Identity cons

"There are some issues with CyberArk Identity. Sometimes, I have encountered glitches or bugs, which increased downtime."

"The OpenID features could improve in CyberArk Identity."

"Integration or deployment is extremely difficult for CyberArk Identity."

"The product is not cheap, especially if you opt for an on-premise deployment requiring a complex server infrastructure. On the other hand, choosing the software as a service version simplifies infrastructure requirements but necessitates being online all the time."

"In terms of general user feedback, the more security you put in front of a user, the more they complain. So usability and the user experience are always a challenge. So there's always room for improvement."

"To enhance the product, they can consider improving the user interface of the software and possibly the customer support team."

"The user interface could be improved."

"The product needs to leverage the cloud more, especially in the financial sector, where cloud adoption might be limited. Proper reporting within the cloud is essential. The tool should be more user-friendly to expedite access for users. The current agent-based system poses challenges if a user loses access to the server, making tasks difficult to perform. It should also improve technical support."

More CyberArk Identity cons

"ForgeRock is an open source solution and is available to everyone but it is not freeware. If you need support, you need a subscription for ForgeRock. Many of its functionalities need to be built up with the help of a consultant."

"The only problem with ForgeRock is that it is derived from an open-source product, so sometimes it's a bit unstable."

"It should be a little bit easier to implement. It is user-friendly, but there is always scope for improvement."

"I don't think ForgeRock directly supports integrations with Slack, making it an area where improvements are required."

"It should have a better user interface. Its flexibility should also be improved. It is not about simplifying; it is more about flexibility. Each company has its own requirements, and ForgeRock can provide more flexibility in terms of the use of existing modules to implement features for the customers."

"In future releases, I would like to see easier integration with other solutions, like facial recognition and KYC solutions with biometric onboarding."

"We're worried about the scaling. We're told it will be okay and there won't be issues, however, I'm not 100% convinced."

"We would like this solution to be developed for use with mobile applications."

More ForgeRock cons

Pricing and Cost Advice

"Omada Identity is competitively priced and delivers good value for our money."

"It is fairly priced for an on-premise environment, but for the cloud environment, I am not that happy with the pricing."

"It's a fair price for the on-premises system. Compared with what we had before, it's much cheaper and we get all the modules in one. We tried to go with the cloud, but it was far too expensive."

"Omada is expensive."

"While Omada Identity carries a premium price tag, it proves to be cost-effective."

"My client deals directly with the Omada Identity team in terms of licensing. I never look at pricing, so I'm not aware of how much the solution costs, but it's worth the money. Often, when you begin to use Omada Identity and it takes a while to set up, it'll be irreversible, and you'd depend on and focus more on the functionality of the solution, rather than its price tag."

"Omada continues to be very competitive on pricing, especially on the Omada cloud product."

"Omada is too expensive. We are in the automotive industry. The pricing might be high because most of the other customers are in the insurance or banking sectors, but it's steep for an auto supply company."

More Omada Identity pricing and cost advice

"The pricing is acceptable. It is worth considering what we are protecting with the amount charged."

"There could be some additional costs apart from the licensing costs of the solution when you want to develop connectors in CyberArk Identity."

"In terms of pricing, BeyondTrust and CyberArk tend to be more expensive, with CyberArk receiving an eight out of ten, in this regard."

"We find that the pricing and licensing of this solution is adequate, as compared to the other competitors in the market."

"There is an initial license and then there is a subscription needed."

"Their pricing is obviously a lot higher than many vendors in the marketplace but their service is also unmatched."

"The solution is cheap and I rate its pricing an eight out of ten."

"It's not that affordable compared to Delinea or other products. They're less expensive and allow more customization. For the cost, it is expensive."

More CyberArk Identity pricing and cost advice

"Its licensing is on a yearly basis, but it also depends on the contract that you have with the vendor. They have multiple types of contracts. There are additional costs to the standard licensing fees. If you need some of the features, you have to pay more."

"Its price is comparable to other products in the market."

"ForgeRock is an expensive solution."

"We have multiple clients we are looking at right now. We are at a very small number, however, the idea and the goal is to grow. We are looking at about $100,000 and $50,000 a minimum a month cost. That'd be minimum maybe in a couple of years."

"The license is purchased annually per user. However, you can negotiate if you are signing for a longer period of time. When comparing this solution to others on the market it is priced fair, it is not at the top of the price range or at the bottom end."

"ForgeRock's pricing is more competitive than other products."

"It's a bit pricey and could be more competitive."

"The pricing of the solution is fair but I do not have the full details."

See which vendors are best for you

Use our free recommendation engine to learn which Access Management solutions are best for your needs.

See recommendations

845,406 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

Computer Software Company

13%

Manufacturing Company

Government

Financial Services Firm

17%

Computer Software Company

13%

Manufacturing Company

11%

Healthcare Company

Financial Services Firm

24%

Computer Software Company

12%

Insurance Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Omada Identity Cloud?

As an administrator, we benefit from a lot of functionality that is available out of the box, but it is also configur...

See all answers

What is your experience regarding pricing and costs for Omada Identity Cloud?

They are positioned at a good price point. They are lower than some of their competitors.

See all answers

What needs improvement with Omada Identity Cloud?

The biggest issue, which is the reason why we are transitioning from their product to SailPoint, is the overall user ...

See all answers

What do you like most about CyberArk Identity?

The integration capabilities, ability to integrate CyberArk into the overall IBB strategy of our current clients.

See all answers

What is your experience regarding pricing and costs for CyberArk Identity?

The pricing is acceptable. It is worth considering what we are protecting with the amount charged.

See all answers

What needs improvement with CyberArk Identity?

To enhance the product, they can consider improving the user interface of the software and possibly the customer supp...

See all answers

What do you like most about ForgeRock?

The most valuable features of ForgeRock are social login and data protection.

See all answers

What is your experience regarding pricing and costs for ForgeRock?

Our company was considering switching back to Keycloak from ForgeRock, so as to not pay any license fees. ForgeRock a...

See all answers

What needs improvement with ForgeRock?

In the past, I saw that Splunk was integrated with a testing portal, and then it was integrated with Slack. I don't t...

See all answers

Comparisons

SailPoint Identity Security Cloud vs Omada Identity

Compared 30% of the time

Microsoft Entra ID vs Omada Identity

Compared 23% of the time

Saviynt vs Omada Identity

Compared 17% of the time

One Identity Manager vs Omada Identity

Compared 7% of the time

SAP Identity Management vs Omada Identity

Compared 6% of the time

More Omada Identity Competitors

Microsoft Entra ID vs CyberArk Identity

Compared 21% of the time

Microsoft Intune vs CyberArk Identity

Compared 15% of the time

CyberArk Privileged Access Manager vs CyberArk Identity

Compared 13% of the time

SailPoint Identity Security Cloud vs CyberArk Identity

Compared 10% of the time

Fortinet FortiAuthenticator vs CyberArk Identity

Compared 3% of the time

More CyberArk Identity Competitors

Microsoft Entra ID vs ForgeRock

Compared 19% of the time

SailPoint Identity Security Cloud vs ForgeRock

Compared 13% of the time

Ping Identity Platform vs ForgeRock

Compared 9% of the time

Symantec Siteminder vs ForgeRock

Compared 8% of the time

SecureAuth Identity Platform vs ForgeRock

Compared 2% of the time

More ForgeRock Competitors

Product Reports

Buyer's Guide

Omada Identity

March 2025

Download Omada Identity product report

Buyer's Guide

CyberArk Identity

March 2025

Download CyberArk Identity product report

Buyer's Guide

ForgeRock

March 2025

Download ForgeRock product report

Also Known As

Omada Identity Suite, Omada Identity Cloud

Idaptive

ForgeRock Identity Platform, ForgeRock OpenIDM

Overview

Omada Identity is an identity governance and administration (IGA) solution designed to help organizations manage and secure digital identities and access across their IT environments. It focuses on enhancing security, compliance, and efficiency by automating identity management processes.

Omada Identity offers a robust set of features that streamline identity lifecycle management, access governance, and compliance reporting. It integrates with a wide range of IT systems, applications, and data sources, providing a centralized platform for managing user identities and access rights. The solution enables organizations to enforce security policies, ensure regulatory compliance, and reduce the risk of unauthorized access.

What are the critical features of Omada Identity?

Identity Lifecycle Management: Automates the process of creating, updating, and deactivating user identities throughout their lifecycle.
Access Governance: Ensures that users have appropriate access rights, enabling continuous monitoring and recertification of access.
Compliance Reporting: Provides comprehensive reporting capabilities to demonstrate compliance with regulatory requirements.
Role-Based Access Control (RBAC): Simplifies the assignment and management of access rights based on user roles within the organization.
Self-Service Access Requests: Empowers users to request access to resources through a user-friendly portal, reducing administrative burden.
Integration Capabilities: Seamlessly integrates with various systems, applications, and data sources for unified identity and access management.

What benefits or ROI items should users look for in the reviews when evaluating Omada Identity?

Improved Security: By ensuring that only authorized users have access to sensitive information, Omada Identity enhances overall security posture.
Regulatory Compliance: Helps organizations meet compliance requirements by providing detailed audit trails and reporting features.
Operational Efficiency: Automates routine identity management tasks, reducing manual effort and freeing up IT resources for strategic initiatives.
User Productivity: Streamlines access management processes, enabling users to quickly obtain the resources they need to perform their jobs.
Reduced Risk: Minimizes the risk of data breaches and insider threats by enforcing strict access controls and continuous monitoring.

Omada Identity is widely adopted across various industries, including healthcare, finance, and manufacturing. In healthcare, it helps protect patient data and comply with regulations like HIPAA. In finance, it ensures compliance with SOX and other financial regulations. In manufacturing, it secures access to sensitive production data and intellectual property.

Pricing and licensing for Omada Identity are typically based on the number of users and the specific features required. Customer support is available through various channels, including online resources, support tickets, and professional services for implementation and customization.

In summary, Omada Identity is a comprehensive IGA solution that enhances security, compliance, and efficiency in managing digital identities and access.

Omada

CyberArk Identity is a versatile identity management solution suitable for a wide range of enterprises. It is designed to enhance enterprise security and improve user experience. Its focus on security, compliance, and operational efficiency, combined with positive user feedback, makes it a strong contender in the identity management space.

CyberArk Identity offers a robust suite of features to manage user identities and access privileges. It focuses on securing access to resources across various environments, including cloud and on-premises applications. Its capabilities include single sign-on (SSO), multi-factor authentication (MFA), lifecycle management, and privileged access management. These features are engineered to streamline access control, enhance security, and ensure compliance with regulatory standards.

Single Sign-On (SSO) simplifies user access by providing a single authentication point for multiple applications.
Multi-Factor Authentication (MFA) adds an extra layer of security by requiring additional verification methods.
Lifecycle Management automates user account provisioning and deprovisioning, aligning with HR processes and compliance requirements.
Privileged Access Management secures and monitors access to critical systems and data by privileged users.

According to our user interviews, CyberArk Identity is praised for its reliability and user-friendly interface. IT professionals highlight the ease of integration with existing systems, while business executives appreciate the visibility it provides into access and identity management across the organization. Users also commend the responsive customer support, which is crucial for enterprise-level solutions.

IT Professionals found that CyberArk Identity's focus on multi-layered security significantly reduced the risk of data breaches and unauthorized access. With a centralized dashboard and automation features, you can streamline identity and access management tasks, saving time and reducing complexity. Finally, it helps meet various compliance requirements.

CyberArk

ForgeRock is a comprehensive open-source identity and access management solution designed to meet the unique needs of your users and workforce. With ForgeRock you can orchestrate, manage, and secure the complete lifecycle of identities in any cloud or hybrid environment. ForgeRock allows you to set up bot detection, identity proofing, and risk-based authentication.

With ForgeRock, you can define access policies and automate the management of the identity lifecycle all from a central, easy to use, and graphical dashboard. ForgeRock Access Management allows you to build safe authentication using options like passwordless and usernameless logins, single sign-on, biometrics, contextual analytics, and behavioral authentication. When threats appear, you can swiftly change how your users access your most sensitive applications and provide users with secure access to the applications, systems, and resources they need on demand.

ForgeRock Benefits and Key Features

Elevate your security and efficiency: Consolidating your legacy systems under one single platform provides reliable, unified control over all your user identities and access-related policies. ForgeRock Access Management also supports scaling existing policies for application onto new setups.
Passwordless authentication: Implementing passwordless authentication is simple with ForgeRock Access Management. You can easily replace user-selected passwords with other options, such as easy multi-factor authentication, biometrics, and SSO.
Identity governance: ForgeRock Identity Governance is a modern, AI-driven identity governance solution. By leveraging ForgeRock generated analysis reports, you can identify and apply appropriate user access, automate high-confidence access approvals, recommend certification for low-risk accounts, and review high-risk and inappropriate user access privileges. In addition, you can grant and enforce access to systems, applications, and infrastructure according to established policies.

Reviews from Real Users

ForgeRock stands out among its competitors for a number of reasons. Two major ones are its robust identity and access tools and its being easy to manage and scale with one central dashboard.

PeerSpot users note the effectiveness of these features. A technology solutions leader at an outsourcing company writes, “We need it for multiple clients, multiple implementations. Not all of them are necessarily a multi-tenant solution. We need a very versatile solution that can do a lot of work, but from a single instance that we can centralize authentications and we don't duplicate the efforts and that's where ForgeRock seems to do better.”

Mohamed B., a cyber security consultant at a tech company, writes, "Their access management solution, OpenAM, is most valuable because it meets the needs of a lot of users. ForgeRock secured our system so that it is accessed only by authorized people, and it implemented the SSO."

Ping Identity

Sample Customers

Bayer, ECCO Shoes, Vattenfall, NuStar Energy, Unicredit, Schiphol Group, BMW Group, Deutsche Leasing

MLB, Citi, Pfizer, SulAmerica, GE Capital, Shiseido

Geico, Thomson Reuters, Salesforce, McKesson, Trinet, SKY, BNP Paribas, Deloitte, Capgemini, North Western University

Buyer's Guide

CyberArk Identity vs. ForgeRock

March 2025

Free Report: CyberArk Identity vs. ForgeRock

Find out what your peers are saying about CyberArk Identity vs. ForgeRock and other solutions. Updated: March 2025.

DOWNLOAD NOW

845,406 professionals have used our research since 2012.

See our CyberArk Identity vs. ForgeRock report.

See our list of best Access Management vendors, best Identity Management (IM) vendors, and best Customer Identity and Access Management (CIAM) vendors.

We monitor all Access Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.