CyberArk Single Sign-On

Name: CyberArk Single Sign-On
Brand: CyberArk
Rating: 4.3 (227 reviews)

Leader

CyberArk is the global leader in identity security.

Est 1999|Valuation $20.6B|Raised $1.5B

LinkedIn 325K|Website|Web traffic 444K|FTEs 4,000|HQ Newton, MA

MarketsIdentity Provider (IdP) & SSO Identity Provider (IdP) & Single Sign-On (SSO)Identity Governance & Administration (IGA)

Platform CoversPrivileged Access Management (PAM)

01Competitive Landscape

| Aspect | CyberArk SSO (Workforce Identity) | Okta Workforce Identity | Microsoft Entra ID | |--------|-----------------------------------|--------------------------|-------------------| | Starting Price | Often quote-based; public third-party listings indicate published per-user starting pricing (verify with vendor) | Public list pricing varies by suite; published per-user pricing available from the vendor | Public pricing available by tier; published per-user tiered pricing available from the vendor | | Best For | Organizations standardizing on CyberArk identity security and PAM; need SSO + MFA with tighter privileged alignment | Organizations prioritizing a large app catalog and mature IDaaS ecosystem | Microsoft-centric organizations; M365-heavy environments; tight integration with Windows + Azure | | Key Strength | Positioning that bridges workforce and privileged identity with vault integration options and identity-security framing | Breadth of integrations and ecosystem; widely adopted for workforce SSO | Bundling and integration within Microsoft stack; often already licensed within Microsoft environments | | Key Weakness | Less public pricing transparency; perception of complexity when using the broader CyberArk suite; fewer public community how-to resources compared with some competitors | Can become costly with add-ons; frequently targeted in security reporting as a common enterprise IdP due to wide adoption | Feature gating by license tiers; non-Microsoft app administration can be more complex; conditional access policies can be complex | - **Pricing comparison sources** - Third-party pricing listings and vendor pricing pages are publicly available; treat third-party list prices as indicative and verify with the vendor for enterprise deals. - **Competitor perspectives / comparisons** - User-review and comparison sites aggregate user commentary and can provide directional signals, but such content should be weighed alongside direct references and procurement validation. - **Market context: SSO as an attack target** - Workforce SSO providers are frequent targets because compromising an identity provider can enable access to many applications. Recent reporting about campaigns targeting other IdPs highlights category-level risk for all SSO providers.

01Competitive Landscape

Aspect	CyberArk SSO (Workforce Identity)	Okta Workforce Identity	Microsoft Entra ID
Starting Price	Often quote-based; public third-party listings indicate published per-user starting pricing (verify with vendor)	Public list pricing varies by suite; published per-user pricing available from the vendor	Public pricing available by tier; published per-user tiered pricing available from the vendor
Best For	Organizations standardizing on CyberArk identity security and PAM; need SSO + MFA with tighter privileged alignment	Organizations prioritizing a large app catalog and mature IDaaS ecosystem	Microsoft-centric organizations; M365-heavy environments; tight integration with Windows + Azure
Key Strength	Positioning that bridges workforce and privileged identity with vault integration options and identity-security framing	Breadth of integrations and ecosystem; widely adopted for workforce SSO	Bundling and integration within Microsoft stack; often already licensed within Microsoft environments
Key Weakness	Less public pricing transparency; perception of complexity when using the broader CyberArk suite; fewer public community how-to resources compared with some competitors	Can become costly with add-ons; frequently targeted in security reporting as a common enterprise IdP due to wide adoption	Feature gating by license tiers; non-Microsoft app administration can be more complex; conditional access policies can be complex

Pricing comparison sources
- Third-party pricing listings and vendor pricing pages are publicly available; treat third-party list prices as indicative and verify with the vendor for enterprise deals.
Competitor perspectives / comparisons
- User-review and comparison sites aggregate user commentary and can provide directional signals, but such content should be weighed alongside direct references and procurement validation.
Market context: SSO as an attack target
- Workforce SSO providers are frequent targets because compromising an identity provider can enable access to many applications. Recent reporting about campaigns targeting other IdPs highlights category-level risk for all SSO providers.

Aspect

CyberArk SSO (Workforce Identity)

Okta Workforce Identity

Microsoft Entra ID

Starting Price

Often quote-based; public third-party listings indicate published per-user starting pricing (verify with vendor)

Public list pricing varies by suite; published per-user pricing available from the vendor

Public pricing available by tier; published per-user tiered pricing available from the vendor

Best For

Organizations standardizing on CyberArk identity security and PAM; need SSO + MFA with tighter privileged alignment

Organizations prioritizing a large app catalog and mature IDaaS ecosystem

Microsoft-centric organizations; M365-heavy environments; tight integration with Windows + Azure

Key Strength

Positioning that bridges workforce and privileged identity with vault integration options and identity-security framing

Breadth of integrations and ecosystem; widely adopted for workforce SSO

Bundling and integration within Microsoft stack; often already licensed within Microsoft environments

Key Weakness

Less public pricing transparency; perception of complexity when using the broader CyberArk suite; fewer public community how-to resources compared with some competitors

Can become costly with add-ons; frequently targeted in security reporting as a common enterprise IdP due to wide adoption

Feature gating by license tiers; non-Microsoft app administration can be more complex; conditional access policies can be complex