I'm planning to implement Single Sign-On (SSO) later this year and narrowed my options down to Ping and Okta. We have about 1200 users and currently utilize Active Directory (AD). This will be our first time setting up SSO, so I'm looking for insights on how these two platforms compare. I've noticed that the initial quotes from Ping are significantly cheaper. Any thoughts or experiences to share?
6 Answers
If your plan is strictly SSO and you’re not committed to using Ping or Okta as your identity provider, check out Cisco Duo. They provide an all-in-one solution for SSO, SCIM, and MFA with easy integration into your existing AD structure. We found it much simpler to work with, and their pricing and support are quite competitive too.
I've worked with both Ping and Okta, and they each have their own strengths and weaknesses. It's crucial to do a comprehensive cost breakdown before deciding—consider implementation costs, renewal rates for the following years, and whether additional software is needed for features like SMS authentication. For 1200 users, you're likely looking at PingOne. Just a heads up: Ping's documentation can be a bit lacking compared to Okta's, though their low-code solution, Davinci, offers great customization options. On the adaptive authentication front, Ping generally performs better, which might be something to think about depending on your existing licenses. In short, both platforms can work, but if you're budget-conscious, Ping might be the way to go, especially if you don’t require too much professional assistance.
Awesome breakdown! Totally agree about the documentation, it can make a huge difference during implementation.
Holy cow, what a thorough response! Are you a Solutions Engineer or something?
If you're heavily invested in Microsoft products, why not just go with Entra? It’s pretty well-suited for AD environments, and it simplifies SSO without the need for an extra vendor. Cost and complexity are pretty significant factors right now, and I’d be cautious about moving to Okta for those reasons, especially if you’re already familiar with Microsoft’s setup.
Exactly! It integrates seamlessly with most Microsoft tools we use, so it's a no-brainer.
I see your point, but Entra can be complicated and might have its quirks, which is something I've run into with support.
Just a heads-up that you should factor in potential hidden fees with your SaaS applications—some like Asana can charge significantly more for SSO access.
From my experience, Okta has been super easy to implement. They offer great workflows and extensive app integrations compared to Ping and Entra. But keep in mind, if you're looking to save, you might want to check out Zerotek for more budget-friendly licensing options without sacrificing quality. Also, don’t overlook the extra costs associated with SSO for some applications; Adobe and DocuSign are notorious for hiking those prices.
If you're focusing on keeping costs down, why not consider an open-source alternative like Keycloak? You’d need proper administrative support though, which can be a challenge in some companies.
True, but many companies might not have the resources to manage a self-hosted solution.
We had a similar experience—it was much easier to work with than Ping and way more affordable.