IronGate compared
IronGate next to Microsoft Entra ID, Entra Domain Services, JumpCloud.
Review draft. Competitor cells are unchecked; “To be checked” marks a gap on purpose.
| IronGate | Microsoft Entra ID | Entra Domain Services | JumpCloud | |
|---|---|---|---|---|
| A real domain controller speaking Kerberos, LDAP and NETLOGON | Yes | NoNo domain controllers; those come with Entra Domain Services | YesManaged domain controllers | To be checked |
| Join Windows machines to a domain | Yes | PartlyEntra join (cloud-only); hybrid join needs a domain controller | YesDomain join supported | To be checked |
| A domain controller of your own, never shared | Yes | NoNo domain controllers in Entra ID | To be checked | To be checked |
| Directory ports closed to the internet by default | Yes | To be checked | YesPublic secure LDAP is off by default | To be checked |
| A directory created automatically from sign-up | PartlyFrom a pool of prepared servers; not instant | Yes | To be checked | To be checked |
| Linux machine joins with single sign-on by Kerberos ticket | Yes | To be checked | To be checked | To be checked |
| Windows machine joins and receives Group Policy | PartlyJoins and retrieves policy; a setting applying is not yet shown | NoEntra-joined devices use Intune, not Group Policy | YesGroup Policy replicated across replica sets | PartlyAgent policies use Windows GPO engine; no domain GPOs |
| Staff and group management from a web panel | Yes | Yes | Yes | Yes |
| Password policy per person or group | Yes | To be checked | YesFine-grained policies applied by group | YesSeparate password policy per user group |
| Device inventory and sign-in agent | PartlyVerified on test machines | Yes | To be checked | YesDevice list in admin console; agent on Mac/Win/Linux |
| Backups of every customer's directory | NoNot offered yet | PartlyEntra Backup and Recovery: daily, ~7 days, needs P1/P2 | YesPlatform backs up the managed DCs | YesEncrypted backups kept in several locations |
| Two-factor sign-in | Planned | YesAuthenticator and other MFA methods | To be checked | YesJumpCloud Protect push and TOTP MFA |
| Automatic failover | NoOne domain controller per customer | To be checked | PartlyReplica sets add DCs; up to 5 sets per domain | YesMulti-AZ, within-region failover; 99.9% uptime commitment |
| Mac and Android devices | Planned | YesMac joins (macOS 13+); Android registers | To be checked | YesAgent on Mac/Win/Linux; Android and iOS via MDM |