Idira Privileged Access Manager vs ManageEngine ADSelfService Plus comparison

Idira by Palo Alto Networks and ManageEngine are both solutions in the Enterprise Password Managers category. Idira by Palo Alto Networks is ranked #2 with an average rating of 8.6, while ManageEngine is ranked #23. Idira by Palo Alto Networks holds a 6.4% mindshare in EPM, compared to ManageEngine’s 1.1% mindshare. Additionally, 95% of Idira by Palo Alto Networks users are willing to recommend the solution, compared to 90% of ManageEngine users who would recommend it.

Idira Privileged Access Man...

Read 230 Idira Privileged Access Manager reviews

23,988 Views
5,757 Comparison Views

95% willing to recommend

ManageEngine ADSelfService ...

Read 9 ManageEngine ADSelfService Plus reviews

1,007 Views
916 Comparison Views

90% willing to recommend

Idira Privileged Access Man...

ManageEngine ADSelfService ...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 2, 2026

Idira Privileged Access Manager and ManageEngine ADSelfService Plus compete in the access management solutions market. ManageEngine ADSelfService Plus has the upper hand with its robust features and ease of deployment, providing a comprehensive solution justifying its higher investment.

Features: Idira Privileged Access Manager includes role-based access control, compliance management, and privileged session monitoring. ManageEngine ADSelfService Plus offers self-service password reset, multifactor authentication, and account unlock capabilities, serving a wide range of organizational needs with its feature-rich environment.

Room for Improvement: Idira Privileged Access Manager could enhance its deployment process and expand user support documentation. Improving integration capabilities and user interface design could also add value. ManageEngine ADSelfService Plus might benefit from reduced response times in customer service, expanded feature set to include detailed audit trails, and enhanced reporting capabilities for better visibility.

Ease of Deployment and Customer Service: ManageEngine ADSelfService Plus stands out with a swift, straightforward implementation process and commendable customer service, catering to businesses looking for rapid deployment. Idira Privileged Access Manager, while maintaining decent customer service, faces challenges with its complex and time-consuming deployment routine.

Pricing and ROI: Idira Privileged Access Manager offers competitive pricing with promising ROI, particularly attractive to budget-conscious organizations. ManageEngine ADSelfService Plus, though potentially more expensive, is seen as a better investment due to its extensive capabilities and feature advantages, making it appealing to stakeholders seeking long-term value.

To learn more, read our detailed Idira Privileged Access Manager vs. ManageEngine ADSelfService Plus Report (Updated: June 2026).

Buyer's Guide

Idira Privileged Access Manager vs. ManageEngine ADSelfService Plus

June 2026

Download the complete report

Helped 908,800 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Idira Privileged Access Man...

Ranking in Enterprise Password Managers

2nd

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

230

Ranking in other categories

User Activity Monitoring (1st), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)

ManageEngine ADSelfService ...

Ranking in Enterprise Password Managers

23rd

Average Rating

8.4

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2026, in the Enterprise Password Managers category, the mindshare of Idira Privileged Access Manager is 6.4%, down from 7.9% compared to the previous year. The mindshare of ManageEngine ADSelfService Plus is 1.1%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Enterprise Password Managers Mindshare Distribution
Product	Mindshare (%)
Idira Privileged Access Manager	6.4%
ManageEngine ADSelfService Plus	1.1%
Other	92.5%

Enterprise Password Managers

Featured Reviews

Atul-Gujar

CyberArk manager at a comms service provider with 10,001+ employees

Secures critical infrastructures with essential user session audit records

A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.

Read full review

Kimberly Brock

Technical Security Engineer & Data Governance at a computer software company with 51-200 employees

Efficiently keeps track and monitors

When I look at something like a server or a user who has an unsuccessful login, all they're giving me is what is from the domain controllers. When I click on the analytics portion that says give me information, it doesn't tell me what application is errored out. It doesn't tell me; it just tells me what is the same information from the domain controller. I'd like a little bit more robust information on actually giving me some useful information instead of some links that send me out to the Internet that says research here, and then I have to do additional research. It's kind of generic. And, basically, it's just a quick, I don't have to search through the domain controller logs, but once I pull those out, the logs are still very generic like you get from Microsoft. Area code four three one one. Okay. I had to go look that up. It doesn't take it any further than just a copy based on the domain controller.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The benefit of it is it's stable, it's old-school, it just works."

"It's highly secure and very flexible. It gives us all types of storage options and it gives us a high level of security."

"BeyondTrust and ARCOS were introduced in market at that time; these tools are good but do not seem to be as user friendly as CyberArk PAM, which is more convenient in installing and deployment and easier to customize as per client requirement."

"With CyberArk, it allows us to streamline and create a workflow which allows them to automatically log into CyberArk, grab the credentials that they want, and it automatically sends their approval to their manager, who can click a couple buttons, approve, and the user is able to get their credentials."

"I would rate this solution a nine out of ten."

"All of the features of CyberArk Privileged Access Manager are valuable."

"The most valuable feature is the special management. It records the activity and the actions that we use for auditing."

"Our privileged accounts are now stored in a more secure location and lateral movement within the network have been lessened."

More Idira Privileged Access Manager pros

"Having multifactor authentication in Windows machines."

"The most valuable feature is the ability for remote users to change their login credentials using their mobile devices."

"The solution enables agents to reset their passwords."

"It's very simple to manage and implement. Its functions are straightforward. You get all the basic features, such as you get the option to unlock the user account if it is locked. You can enforce password policies, and you also have the option to allow them to reset their passwords if they forget it. These were the basic requirements of my company that we could achieve through this product."

"This solution has improved our security because our users can now change passwords on the fly."

"Helped establish basic standard processes for service ticketing and request management."

"ADSelfService has been highly stable."

"Due to ransomware and novel threats, we can no longer allow people to gain domain admin access to our servers with only a username and password. With MFA, they must supply a one-time password sent to them via some authenticator, like Microsoft or Google Authenticator. It could be a text message."

More ManageEngine ADSelfService Plus pros

Cons

"Make it easier to deploy."

"The PTA could be improved. Currently, companies often have multiple domains and sometimes it's difficult to implement CyberArk in this kind of infrastructure. For example, you can add CPM (Central Policy Manager) and PSM (Privileged Session Manager and PVWA (Password Vault Web Access) for access, but if you want to add PTA (Privileged Threat Analysis) to scan Vault logs, it is difficult because this component may be adding multiple domain environments."

"I believe account discovery and rolling support need to be improved."

"CyberArk could use some improvement in their level of customer service."

"New functionalities and discovered bugs take longer to patch. We would greatly appreciate quicker development of security patches and bug corrections."

"To get it to a ten it should give other possibilities to select if you could follow the keystrokes. It should have a flexibility with things where people can use it a lot faster."

"They are taking two to three days for resolution are too slow. Customers, including myself, do not want to wait this long for solutions."

"If CyberArk wants people to pay for cloud services, they need to make the cloud services much more real-time."

More Idira Privileged Access Manager cons

"The registration process could be improved. It should be easier for users to register for the service."

"Asset management/discover and reporting."

"They could improve their security of the products to prevent vulnerabilities."

"Could be simplified, not user-friendly."

"There is a lack of specific information provided by the analytics portion of the software."

"The price must be reduced."

"The worst part is that the solution can only be installed or updated on a device if it is physically connected to the local network."

"We need more reports for visualization."

Pricing and Cost Advice

"CyberArk DNA is free if you purchase the CyberArk solution. There is no additional charge for CyberArk DNA, which is great."

"Payments have to be made on a yearly basis toward the licensing costs of the solution."

"The license CyberArk Privileged Access Manager is on an annual basis."

"It is in line with its competitors, but all such solutions cost too much money."

"I'm aware that the organization had purchased licensing for almost all of CyberArk's solutions including licensing for PTA, EPM, and the Application Identity Manager. But when it comes to PSM, this is one of the components where there's an additional charge for any extra PSMs that you want to deploy. I believe that there's some rider where the vendor has a bit of leeway to, at times, charge a premium on whatever additional services you may require above the board."

"This product is very expensive."

"I would rate the tool’s pricing a six out of ten."

"It can be an expensive product."

More Idira Privileged Access Manager pricing and cost advice

"Using this solution costs us about $1,200 USD per year."

"You purchase the license for one time, and you can use it for a lifetime. The only thing is that in order to get support, you need to upgrade your product to the latest solution. You need to keep a support contract with them for which you have to pay some amount. It's a very small amount for renewing their support contract. Overall, it's very cost-effective."

See which vendors are best for you

Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.

See recommendations

908,800 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Manufacturing Company

10%

Outsourcing Company

Construction Company

Outsourcing Company

10%

Government

10%

Manufacturing Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	42
Large Enterprise	175

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	2
Large Enterprise	2

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...

See all answers

What needs improvement with CyberArk Privileged Access Manager?

I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...

See all answers

Ask a question

Earn 20 points

Comparisons

Safeguard by One Identity vs Idira Privileged Access Manager

Compared 4% of the time

Teleport vs Idira Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs Idira Privileged Access Manager

Compared 3% of the time

Saviynt Identity Cloud vs Idira Privileged Access Manager

Compared 3% of the time

Delinea Secret Server vs Idira Privileged Access Manager

Compared 3% of the time

More Idira Privileged Access Manager Competitors

FastPass SSPR vs ManageEngine ADSelfService Plus

Compared 17% of the time

Specops vs ManageEngine ADSelfService Plus

Compared 14% of the time

Imprivata OneSign vs ManageEngine ADSelfService Plus

Compared 13% of the time

Delinea Secret Server vs ManageEngine ADSelfService Plus

Compared 13% of the time

ManageEngine Password Manager Pro vs ManageEngine ADSelfService Plus

Compared 11% of the time

More ManageEngine ADSelfService Plus Competitors

Product Reports

Buyer's Guide

Idira Privileged Access Manager

July 2026

Download Idira Privileged Access Manager product report

Buyer's Guide

ManageEngine ADSelfService Plus

July 2026

Download ManageEngine ADSelfService Plus product report

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

No data available

Overview

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks

ManageEngine ADSelfService Plus provides multi-factor authentication and user self-service capabilities, enhancing security with integrations like Microsoft and Google, while allowing remote mobile access for password management.

ManageEngine ADSelfService Plus enables organizations to streamline password management by offering self-service options that reduce the need for password resets, thus minimizing IT tickets. Remote users can change credentials via mobile, ensuring synchronization between Active Directory and local passwords. Multi-factor authentication on Windows enhances security. This tool assists in efficient account management by allowing users to reset passwords, unlock accounts, and adhere to password policies. It is designed for enterprises handling a large number of user accounts.

What are the key features of ManageEngine ADSelfService Plus?

Multi-factor Authentication: Enhances security with methods like Microsoft and Google.
Self-Service Password Management: Users can manage passwords, reducing reset tickets.
Mobile Access: Allows password changes and account management on mobile devices.
Account Unlock: Users can unlock accounts without admin assistance.
Password Synchronization: Ensures AD and local password synchronization.

What are the benefits to look for in ManageEngine ADSelfService Plus reviews?

Reduced IT Tickets: Self-service reduces password reset requests.
Enhanced Security: Multi-factor authentication secures accounts.
Improved Efficiency: Users can manage accounts independently.
Convenience: Simplifies password management with mobile access.

In industries with extensive user bases, particularly tech and finance, ManageEngine ADSelfService Plus supports password management and multi-factor authentication, integrating with third-party applications for improved security practices. It serves organizations with substantial user counts, like those managing domains with multifactor authentication.

ManageEngine

Sample Customers

Rockwell Automation

TEL U.S. Holdings Inc, Henson Group, CAMH, HPE, HubSpot, Hitachi, IBM, Accenture, Capgemini, Apogee, Symantec

Buyer's Guide

Idira Privileged Access Manager vs. ManageEngine ADSelfService Plus

June 2026

Free Report: Idira Privileged Access Manager vs. ManageEngine ADSelfService Plus

Find out what your peers are saying about Idira Privileged Access Manager vs. ManageEngine ADSelfService Plus and other solutions. Updated: June 2026.

DOWNLOAD NOW

908,800 professionals have used our research since 2012.

See our Idira Privileged Access Manager vs. ManageEngine ADSelfService Plus report.

See our list of best Enterprise Password Managers vendors.

We monitor all Enterprise Password Managers reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.