

ForgeRock and Microsoft Entra ID are leading identity management solutions. Microsoft Entra ID seems to have the upper hand due to its scalability, ease of use, and cost-effectiveness based on user reviews.
Features: ForgeRock is praised for extensive customization options, seamless integration with various systems, and strong support. Microsoft Entra ID is recognized for comprehensive scalability, advanced security features, and a robust feature set favored by larger enterprises.
Room for Improvement: ForgeRock could improve its setup documentation, user training materials, and user interface complexity. Microsoft Entra ID needs more intuitive navigation, clearer error messaging, and additional user training resources.
Ease of Deployment and Customer Service: ForgeRock requires significant time and technical expertise to deploy, but users appreciate the support during this process. Microsoft Entra ID has a quicker deployment process with users finding its customer service responsive and effective.
Pricing and ROI: ForgeRock has higher initial setup costs but provides a good long-term return on investment due to its flexibility. Microsoft Entra ID is more cost-effective initially, and users report a significant ROI due to its feature set and scalability.
On a B2B level, it opened up the market for TomTom to sell its services in a more efficient way to car companies.
We can use a Linux image from ForgeRock with different systems, applications, websites, and mobile apps to create various types of access for users.
I can definitely see that fewer employees are needed compared to using different SaaS applications.
We leverage existing licensing, like Windows Server or SQL, and hybrid benefits, and our sales and marketing teams benefit from co-selling and partnership advantages.
We get a return from not needing to pay other vendors to do what we already had from Microsoft, which was better than the competition.
By eliminating the need for multiple VPN channels and enabling direct work from Azure servers, we have achieved approximately 30% efficiency savings.
The support portals offer comprehensive documentation, troubleshooting guides, and community forums that have been helpful for resolving common issues independently.
For standard support tickets, response times were very decent, and the support team was helpful in identifying configuration issues, especially with authentication trees, token settings, and directory replications.
The customer support is very flexible and supportive, particularly in the area of automation and customer deployments.
The actual support when you get to that level is a ten out of ten.
There are immediate answers to any issues that arise with great knowledge and a deep understanding of the product and business needs.
They usually try to deflect, buy time, and often do not address the problem immediately.
The access management layer is stateless, so I can scale horizontally by adding more nodes behind a load balancer as traffic increases.
The platform provides flexible authentication trees, enabling us to design custom MFA flows tailored for different user groups and risk profiles.
We scaled up with ForgeRock. My team received an award for implementing it for a 60 million customer base, which was the largest implementation at that time.
Microsoft Entra ID meets our needs better, especially when discussing integration.
We experienced no scalability issues with Microsoft Entra ID.
Its scalability is impressive, aided by Microsoft's efforts to expand its data centers.
ForgeRock supports integration with legacy systems in our organization by offering a wide range of connectors and APIs.
ForgeRock is very stable because it manages access, authentication, and authorization effectively.
It's a critical solution that we can't do without.
I haven't experienced any downtime, crashes, or performance issues with Microsoft Entra ID.
I have not experienced any downtime, crashes, or performance issues with Microsoft Entra ID.
ForgeRock needs to focus on low-code, no-code solutions that allow for drag-and-drop functionality with good orchestration.
It would be better if they were available for support whenever the customer needs it, especially during migration or go-live time periods.
The main area is complexity. ForgeRock is extremely flexible, but the learning curve can be steep.
A recent incident we dealt with took four months to resolve with a seven-day deadline, which was quite frustrating.
Synchronization issues occasionally occur, making it challenging to analyze logs and pinpoint the exact problem.
There is a need for better transformation support from on-premises Active Directory policies to the cloud, as Entra ID doesn't cover this sufficiently yet.
The pricing, setup cost, and licensing are very straightforward, which is a good success.
One has to spend considerable time trying to understand the different modules and different needs for those modules on the licensing front.
We are getting our money's worth.
Microsoft sets pricing based on customer demand, adjusting to find the optimal balance between sales volume and profit per unit, similar to how Costco manages product prices.
Most features of Entra ID are part of Microsoft's ecosystem and included in Microsoft 365 bundles, which means there are no additional costs associated with pricing and licensing.
Centralized management makes the biggest difference because it allows us to define, update, and enforce security and compliance rules from a single location.
ForgeRock positively impacts our organization as we manage a large number of users with ease, providing a standard IAM solution that simplifies our processes.
ForgeRock has positively impacted my organization by allowing us to migrate from the older system to the newer ForgeRock component, enabling us to go live with many products across geographies, enhancing security as it is all cloud-based, and with the company taking care of availability, it has reduced costs for the company.
We can secure the applications that we are building and make sure that if the application were to be compromised, there is no full access to a customer's environment causing issues and other security concerns.
It's integrated with Microsoft technologies like Authenticator, SSO, and MFA, streamlining operations and creating a seamless environment.
The granular control, such as preventing logins from specific locations, enhances security significantly.
| Product | Mindshare (%) |
|---|---|
| Microsoft Entra ID | 8.8% |
| ForgeRock | 3.7% |
| Other | 87.5% |

| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 5 |
| Large Enterprise | 18 |
| Company Size | Count |
|---|---|
| Small Business | 88 |
| Midsize Enterprise | 39 |
| Large Enterprise | 159 |
ForgeRock is a comprehensive open-source identity and access management solution designed to meet the unique needs of your users and workforce. With ForgeRock you can orchestrate, manage, and secure the complete lifecycle of identities in any cloud or hybrid environment. ForgeRock allows you to set up bot detection, identity proofing, and risk-based authentication.
With ForgeRock, you can define access policies and automate the management of the identity lifecycle all from a central, easy to use, and graphical dashboard. ForgeRock Access Management allows you to build safe authentication using options like passwordless and usernameless logins, single sign-on, biometrics, contextual analytics, and behavioral authentication. When threats appear, you can swiftly change how your users access your most sensitive applications and provide users with secure access to the applications, systems, and resources they need on demand.
ForgeRock Benefits and Key Features
Reviews from Real Users
ForgeRock stands out among its competitors for a number of reasons. Two major ones are its robust identity and access tools and its being easy to manage and scale with one central dashboard.
PeerSpot users note the effectiveness of these features. A technology solutions leader at an outsourcing company writes, “We need it for multiple clients, multiple implementations. Not all of them are necessarily a multi-tenant solution. We need a very versatile solution that can do a lot of work, but from a single instance that we can centralize authentications and we don't duplicate the efforts and that's where ForgeRock seems to do better.”
Mohamed B., a cyber security consultant at a tech company, writes, "Their access management solution, OpenAM, is most valuable because it meets the needs of a lot of users. ForgeRock secured our system so that it is accessed only by authorized people, and it implemented the SSO."
Microsoft Entra ID is an advanced identity and access management service offering seamless single sign-on, multifactor authentication, and centralized user access across applications, enhancing security and efficiency for organizations transitioning to cloud-based environments.
Recognized for its centralized management, Microsoft Entra ID significantly boosts organizational security by integrating features such as conditional access and identity protection. It supports a wide array of applications, facilitating a secure transition from on-premises to scalable cloud environments. By adopting robust security measures and flexible identity management, organizations can streamline operations and ensure consistent user experiences. However, challenges like confusing licensing costs, outdated documentation, and limited integration with non-Microsoft applications persist. Enhancements in technical support, interface design, and more granular permissions are needed to address these issues effectively.
What are the key features of Microsoft Entra ID?In healthcare, Microsoft Entra ID facilitates secure patient record access and compliance with industry regulations. Financial institutions rely on it for robust security measures in safeguarding client data. In the education sector, it streamlines access to online resources for students and faculty. Global enterprises benefit from its ability to manage complex identity frameworks across multiple regions, ensuring reliable security amidst increasing cyber threats.
We monitor all Identity Management (IM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.