This month's question · Q.026
Okta vs. Ping Identity: How I'd Choose
Okta vs. Ping: Okta suits cloud-first orgs that want pure SaaS. Ping suits complex, hybrid or regulated enterprises that need deployment control.
Identity · Privilege · Security
Funny you
should ask…
Once a month I take one question I've been asked, in a design review, on a call or over coffee, and answer it properly, in depth. Mostly privileged access and identity governance, with detours into whatever's keeping security teams up at night.
- PAM
- IGA
- Zero trust
- OT security
- PKI
- PQC
- ITDR
- Non-human identities
- AI agents
Latest questions
All posts →User Access Reviews That Aren't Rubber Stamps
A user access review confirms each person's access is still appropriate. Why most become rubber stamps, and how to make reviewers' decisions count.
What Is CIEM? Cloud Entitlement Management Explained
CIEM finds every cloud identity, works out what it can actually do, and trims unused permissions. How it works and how it fits with CNAPP, IGA and PAM.
Zero Standing Privileges: Goal, Myth or Next Year's Project?
Zero standing privileges means no account holds privilege until it's needed. What's realistic, where it breaks, and how to measure progress toward it.
Just-in-Time Access: Do You Really Need It?
Just-in-time access grants privileges only when needed and removes them after. Here's how it works, where it fits, and when you're ready for it.
Certificate Lifecycle Management for 47-Day Certificates
Certificate lifecycle management covers discovery, issuance, deployment, monitoring, renewal and revocation. Here's how to get ready for 47-day TLS certs.
Build a CBOM First: Step One of Post-Quantum Readiness
A CBOM (cryptographic bill of materials) inventories where you use cryptography. It's the first step of PQC readiness. Here's how to build one.
Tool reviews
All reviews →Honest, hands-on takes on the platforms I've deployed and run: CyberArk, BeyondTrust, Delinea, SailPoint, Okta, Ping and more. Nobody pays to be here.
- OT Remote AccessBeyondTrust Privileged Remote AccessBeyondTrustThe most practical way I know to get vendors off the VPN and out of shared accounts in OT, without slowing down the people who keep the plant running.Read the review
- PAMCyberArk PAMCyberArkThe deepest PAM platform on the market, if you can staff it.Read the review