Okta

Have you ever heard someone with this "great" idea? "I'm going to make a webpage that has all your links. When you click them, it'll authenticate for you". It sounds great, but in reality it's extremely hard to do. Securely storing passwords, integration with enterprise systems, centralized management of the lists of links, etc. And, if you do one thing wrong, you can compromise the security of literally millions of logins.

Okta seems to have conquered the problem. It's central management is wonderful. New employees login for the first time and immediately have dozens of applications available to them. New applications are all managed through our Active Directory groups.

It has a great chrome extension that gives you access to your links from your toolbar. The smartphone app, Okta Verify, is fast and works well.

At work, I use 3 servers within Okta. One for our "corporate" servers, one for "production" and one for our parent company. The chrome extension only shows the links from the most recently accessed. So, I end up having to use the web pages, even with the extension.

Also, having multiple Okta servers doesn't work well with LastPass and other password managers. They see all my servers as the same host. But, I have different passwords. So, I basically just turn off password management for Okta.

Okta has simplified everything for us. The process of setting up applications is pretty straight forward, and the number of applications that are supported is amazing. The adaptive MFA is really neat so we can easily balance security and usability to meet just about everyone's needs. The amount of work we have to do to onboard a new user has been reduced drastically through the support of SCIM and APIs. They continue to innovate and bring out new features that further enhance the usability and security of Okta.

Only minor issues with Okta, primarily being chose of wording for some of the settings that lead to some confusion on when Okta sessions expire.