Compare EIAM versions
Compare the features of the old and new IDaaS (EIAM) versions at a high level. Use this comparison to make an initial assessment of whether the new version meets your requirements.
Background
During the planning of the new version in 2021, we tracked how often each feature in the old version was used. We selected the frequently used features and considered factors such as the product direction and development complexity. Together, these defined the features in the current version.
For the 20% most frequently used features, we significantly simplified how they are used, enriched their configuration options, and standardized them. For the least frequently used features, we reduced the functionality. A small number of infrequently used features are no longer supported. Going forward, our main development goals for IDaaS are to strengthen the foundation, support more use cases, and improve security.
The new version prioritizes features with the following characteristics:
High usage frequency in the old version
Improved identity security
Alignment with the long-term product direction
General identity foundation capabilities
Development support complexity
Feature comparison table
Major module | Feature module | Sub-module | Version 1.x (old) | Version 2.x (new) |
Instance | / | Multiple free instances | Not supported | Supported. You can create up to 3 instances and can submit a request for more. |
/ | Instance trial | Not supported | Supported. The default trial period is 15 days. | |
/ | Instance release | Supported | Supported | |
Overview page | / | / | Supported | Supported |
Application | Application Marketplace | Accumulated application templates | Not supported | Supported |
Pre-integrated SSO templates | Not supported | Supported. The new version greatly simplifies operations. It provides 100 preset templates and more than 40 convenient templates. | ||
One-to-one configuration documents | Not supported | Supported. Continuously updated. | ||
Application Management | Application list | Supported | Supported | |
Application lifecycle | Supported | Supported | ||
Application key rotation | Not supported | Supports manual rotation. | ||
Sub-account management | Supported | Supported | ||
Single sign-on configuration | Supported | Supported | ||
Application authorization | Supported. Available in a separate authorization menu. | Supported. Available in Application Management. | ||
Application synchronization - self-developed integration | Supported | Supported. Uses an event-based synchronization mechanism and asynchronously pushes messages internally over MQ. | ||
Application synchronization - synchronization scope | Supported. The synchronization scope is determined by application authorization. | Supported. The synchronization scope is determined by the synchronization scope configuration. It is separate from application authorization. | ||
Application synchronization with the System for Cross-domain Identity Management (SCIM) protocol | Supports inbound synchronization. | Standard applications support SCIM export and allow you to adjust field mappings based on your requirements. | ||
Application synchronization - pre-integrated templates | Supports RAM sub-account synchronization. | Templates for RAM and CloudSSO applications include best practices. | ||
Account | Account Management | Account list | Supported | Supported |
Account lifecycle | Supported (create, delete, modify, move, enable/disable, lock, and unlock). | Supported (create, delete, modify, move, enable/disable, lock, and unlock). | ||
Offboarding operations | Supported | Not supported | ||
Real-name verification | Supported | Not supported | ||
Dormant accounts | Supported | Not supported | ||
Account synchronization | Supported | Supported | ||
Organizational structure | Tree-based organization management | Supported | Supported | |
Organization lifecycle management | Supported | Supported | ||
Organization synchronization | Supported | Supported | ||
Accounts in multiple organizations | Supported | Not supported yet | ||
Group Management | Group list | Supported | Supported | |
Group lifecycle | Supported | Supported | ||
Group synchronization | Supported | Not supported | ||
Group member management | Supported | Supported | ||
Data dictionary | User data dictionary | Supported | Supported | |
Organization data dictionary | Supported | Not supported | ||
Group data dictionary | Supported | Not supported | ||
Classification management | Assign permissions based on attribute values | Supported | Not supported | |
Authentication | Logon methods/authentication sources | Logon method templates | Supported | Supported |
View the logon method list | Supported | Supported | ||
Logon method lifecycle management | Supported | Supported | ||
Authentication methods | DingTalk | Supported | Supported | |
WeCom | Supported | Supported | ||
AD/LDAP | Supported. Private network access is not available. | Supported. You can access a private network through a dedicated endpoint. | ||
SMS | Supported | Supported | ||
Lark | Not supported | In development and not yet supported. | ||
TOTP | Not supported | Supported | ||
WebAuthn | Not supported | Supported | ||
Third-party logon with OpenID Connect (OIDC) | Not supported | Supported. You can use this capability to integrate with Okta and AAD. | ||
Security Settings | Global secondary authentication | Supported. TOTP and SMS. | Supported. TOTP, email, SMS, and WebAuthn. | |
Application secondary authentication | Supported. TOTP and SMS. | Not supported | ||
Logon security | Supported | Supported | ||
Logon password security | Supported | Supported | ||
Password policy | Password security | Supported | Supported | |
RADIUS | / | Supported | Not supported | |
Certificate management | / | Supported | Not supported | |
Authorization | Application authorization | Authorization menu | Supported | Not supported. Application authorization is completed in Application Management, with no separate menu. |
Authorize by application | Supported | Supported | ||
Authorize accounts by application | Supported | Supported | ||
Authorization time limit | Not supported | Not supported yet | ||
Reverse authorization | Supported | Not supported | ||
Permission system | Grant authorization to third-party applications | Supported | In development and not yet supported. | |
Audit | User logs | View the user log list | Not supported. User and management logs were previously mixed. | Supported |
View the synchronization log list | Supported | Supported | ||
View the management log list | Supported | Supported | ||
Others | Synchronization center | DingTalk address book synchronization | Supported. Only full synchronization is available. | Supported. You can customize the synchronization scope. Operations are greatly simplified. |
AD/LDAP synchronization | Supported | Supports inbound synchronization. Outbound synchronization is in development and not yet supported. | ||
Network endpoints | Private network access | Not supported | Supported | |
Audit log delivery | Deliver instance audit logs to customers | Not supported | Supported | |
Management operation risk control | Mandatory verification for critical operations | Not supported | Supported |
Regardless of the conclusions in the comparison table, we recommend that you activate a new-version instance for free and try the experience and capabilities of the new version.