

ForgeRock and Microsoft Entra ID are leading identity management solutions. Microsoft Entra ID seems to have the upper hand due to its scalability, ease of use, and cost-effectiveness based on user reviews.
Features: ForgeRock is praised for extensive customization options, seamless integration with various systems, and strong support. Microsoft Entra ID is recognized for comprehensive scalability, advanced security features, and a robust feature set favored by larger enterprises.
Room for Improvement: ForgeRock could improve its setup documentation, user training materials, and user interface complexity. Microsoft Entra ID needs more intuitive navigation, clearer error messaging, and additional user training resources.
Ease of Deployment and Customer Service: ForgeRock requires significant time and technical expertise to deploy, but users appreciate the support during this process. Microsoft Entra ID has a quicker deployment process with users finding its customer service responsive and effective.
Pricing and ROI: ForgeRock has higher initial setup costs but provides a good long-term return on investment due to its flexibility. Microsoft Entra ID is more cost-effective initially, and users report a significant ROI due to its feature set and scalability.
On a B2B level, it opened up the market for TomTom to sell its services in a more efficient way to car companies.
We can use a Linux image from ForgeRock with different systems, applications, websites, and mobile apps to create various types of access for users.
I can definitely see that fewer employees are needed compared to using different SaaS applications.
We leverage existing licensing, like Windows Server or SQL, and hybrid benefits, and our sales and marketing teams benefit from co-selling and partnership advantages.
We get a return from not needing to pay other vendors to do what we already had from Microsoft, which was better than the competition.
By eliminating the need for multiple VPN channels and enabling direct work from Azure servers, we have achieved approximately 30% efficiency savings.
The support portals offer comprehensive documentation, troubleshooting guides, and community forums that have been helpful for resolving common issues independently.
For standard support tickets, response times were very decent, and the support team was helpful in identifying configuration issues, especially with authentication trees, token settings, and directory replications.
The customer support is very flexible and supportive, particularly in the area of automation and customer deployments.
The actual support when you get to that level is a ten out of ten.
There are immediate answers to any issues that arise with great knowledge and a deep understanding of the product and business needs.
They usually try to deflect, buy time, and often do not address the problem immediately.
The access management layer is stateless, so I can scale horizontally by adding more nodes behind a load balancer as traffic increases.
The platform provides flexible authentication trees, enabling us to design custom MFA flows tailored for different user groups and risk profiles.
We scaled up with ForgeRock. My team received an award for implementing it for a 60 million customer base, which was the largest implementation at that time.
Microsoft Entra ID meets our needs better, especially when discussing integration.
Integrating seamlessly with Microsoft services like Microsoft 365, Azure, and other Microsoft platforms, while also supporting integration with thousands of third-party applications such as Salesforce, ServiceNow, and Google Workspace using standards including SAML, OAuth, and OpenID Connect.
We experienced no scalability issues with Microsoft Entra ID.
ForgeRock supports integration with legacy systems in our organization by offering a wide range of connectors and APIs.
ForgeRock is very stable because it manages access, authentication, and authorization effectively.
It's a critical solution that we can't do without.
I haven't experienced any downtime, crashes, or performance issues with Microsoft Entra ID.
I have not experienced any downtime, crashes, or performance issues with Microsoft Entra ID.
ForgeRock needs to focus on low-code, no-code solutions that allow for drag-and-drop functionality with good orchestration.
It would be better if they were available for support whenever the customer needs it, especially during migration or go-live time periods.
The main area is complexity. ForgeRock is extremely flexible, but the learning curve can be steep.
A recent incident we dealt with took four months to resolve with a seven-day deadline, which was quite frustrating.
Synchronization issues occasionally occur, making it challenging to analyze logs and pinpoint the exact problem.
There is a need for better transformation support from on-premises Active Directory policies to the cloud, as Entra ID doesn't cover this sufficiently yet.
The pricing, setup cost, and licensing are very straightforward, which is a good success.
One has to spend considerable time trying to understand the different modules and different needs for those modules on the licensing front.
We are getting our money's worth.
Microsoft sets pricing based on customer demand, adjusting to find the optimal balance between sales volume and profit per unit, similar to how Costco manages product prices.
Most features of Entra ID are part of Microsoft's ecosystem and included in Microsoft 365 bundles, which means there are no additional costs associated with pricing and licensing.
Centralized management makes the biggest difference because it allows us to define, update, and enforce security and compliance rules from a single location.
ForgeRock positively impacts our organization as we manage a large number of users with ease, providing a standard IAM solution that simplifies our processes.
ForgeRock has positively impacted my organization by allowing us to migrate from the older system to the newer ForgeRock component, enabling us to go live with many products across geographies, enhancing security as it is all cloud-based, and with the company taking care of availability, it has reduced costs for the company.
We can secure the applications that we are building and make sure that if the application were to be compromised, there is no full access to a customer's environment causing issues and other security concerns.
It's integrated with Microsoft technologies like Authenticator, SSO, and MFA, streamlining operations and creating a seamless environment.
The granular control, such as preventing logins from specific locations, enhances security significantly.
| Product | Mindshare (%) |
|---|---|
| Microsoft Entra ID | 6.9% |
| ForgeRock | 3.1% |
| Other | 90.0% |

| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 5 |
| Large Enterprise | 18 |
| Company Size | Count |
|---|---|
| Small Business | 90 |
| Midsize Enterprise | 40 |
| Large Enterprise | 160 |
ForgeRock offers robust integration, customization, and identity management with support for SAML, OAuth 2.0, and DevOps readiness, ensuring enhanced security and scalability.
ForgeRock stands out in identity and access management featuring flexible authentication flows, risk-based authentication, centralized policy management, and comprehensive data protection. Its open-source foundation and cloud capabilities allow versatility and ease of use. While it provides excellent user path orchestration through the Journey feature, challenges exist in integration support and user-friendly customization. Improved documentation and streamlined interfaces are necessary to overcome deployment complexities. Additionally, the cost and support model may be burdensome for smaller organizations.
What are the key features?ForgeRock is widely utilized in industries like telecommunications, insurance, and open banking for secure user authentication and access management. It supports microservice authentications, customer identity management, single sign-on, and multi-factor authentication, integrating effectively with existing infrastructures to enhance security and user experience.
Microsoft Entra ID is an advanced identity and access management service offering seamless single sign-on, multifactor authentication, and centralized user access across applications, enhancing security and efficiency for organizations transitioning to cloud-based environments.
Recognized for its centralized management, Microsoft Entra ID significantly boosts organizational security by integrating features such as conditional access and identity protection. It supports a wide array of applications, facilitating a secure transition from on-premises to scalable cloud environments. By adopting robust security measures and flexible identity management, organizations can streamline operations and ensure consistent user experiences. However, challenges like confusing licensing costs, outdated documentation, and limited integration with non-Microsoft applications persist. Enhancements in technical support, interface design, and more granular permissions are needed to address these issues effectively.
What are the key features of Microsoft Entra ID?In healthcare, Microsoft Entra ID facilitates secure patient record access and compliance with industry regulations. Financial institutions rely on it for robust security measures in safeguarding client data. In the education sector, it streamlines access to online resources for students and faculty. Global enterprises benefit from its ability to manage complex identity frameworks across multiple regions, ensuring reliable security amidst increasing cyber threats.
We monitor all Identity Management (IM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.