We performed a comparison between One Identity Active Roles and SailPoint IdentityIQ based on real PeerSpot user reviews.
Find out in this report how the two User Provisioning Software solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The solution is stable."
"The provisioning and deprovisioning saves a lot of time and skips a lot of errors."
"It provides automatic provisioning/update/deprovisioning workflows from a source system to a target system."
"The most valuable features include auditing, dynamic grouping, and creating dynamic groups based on AD attributes."
"It gives us attribute-level control and the AD management features work very well."
"In comparison to native Active Directory tools, using Active Roles for delegation is so much better. It uses an access template and that makes it easy to see who can access what. In fact, you can do that for many objects as well."
"Another good feature is the change history. It's centralized in a single place and allows us to manage people's Active Directory domains from a central location. We can also drill down into individual objects in a troubleshooting or even an auditing situation. We can show evidence to auditors by drilling down into the individual history. It gives you all the history of what happened around an individual object. That is something that would be almost impossible to do in Active Directory, or extremely complicated."
"Secure access is the most valuable feature."
"We like the integration with other systems."
"The tool's GUI is user-friendly."
"Access certification and provisioning are two of the solutions most valuable features."
"It provides a lot of out-of-the-box functionalities. You don't have to do too much custom development like other solutions such as Microsoft or NetIQ. It also has a lot of out-of-the-box connectors for different sources, directories, databases, etc. Its cloud version is working very well, and its pricing is okay. Its value for money is fine for most of the customers. It is also very flexible. They have frequent new releases and patches for fixing errors and things like that."
"It is a scalable product."
"The community is very active and when I had questions about an issue, I was able to find the resources."
"The solution is one of the main security products you need to control access and have visibility into what's happening in your organization. It helps with managing access to applications, ensuring governance, and obtaining certifications."
"I find the built-in connectors, lifecycle management, certification, and recertification features to be the most valuable."
"When doing a workflow, we would like a bit better feedback on the screen, as we're trying to get it to work. For example, there is a "Find" function that you need set up in a workflow to do some of the automation. It is not the easiest to get a result from those finds when you're trying to do that. In the MMC, they have a couple different types of workflows. In this particular case, we use their workflow functionality to find all of X within the environment, then if you find it, do X, Y, and Z. You can have multiple steps. When you do that search function within that workflow, it's really hard to find out, "Is my search working?" It would be nice if there was some feedback on the screen so you could see if your search is working properly within the workflow."
"The ability to send logs to a SIEM would be very beneficial."
"I've had a difficult time getting it to cooperate with Azure in the cloud and, while the support staff are very good and very knowledgeable, what they assist with just on a call doesn't go deep enough to help with a number of issues. The answer that comes back is that we'd have to start an engagement with Professional Services, which is fine but that takes time to schedule and it takes budget."
"For the AAD management feature, it needs to improve the objects that we can manage and the security."
"The solution needs an attestation process that includes certification and recertification attestation."
"There are some features that we think should be included in their next release. We think these things would take them to the next level: the ability to completely force or limit any dynamic group processing to specific servers, change-tracking reporting of virtual attributes, and the ability to use files as inputs to automation workloads. These things have also been talked about. Knowing them, they're probably working on them."
"Most of the time it just works."
"In terms of improvement, it could be made even more user-friendly for administrators when they need to create new workflows and rule sets."
"We faced some issues while integrating the solution with a third-party tool."
"Compared to at least one other product some of the administrative tasks could be easier or more intuitive."
"Some setups should be done in the interface and in the code, and could be made simpler."
"There's a lot of customization required to improve the user experience."
"It tends to be more expensive, but at the end of the day, it works."
"If there's a price reduction for SailPoint IdentityIQ, that would be helpful. Another area for improvement in the product is the technical support, which needs to be more friendly to customers."
"The UI is complex."
"Needs to focus on automation wherein provisioning of work can be improved and access certification should be automated without the intervention from a manager for approval."
One Identity Active Roles is ranked 5th in User Provisioning Software with 17 reviews while SailPoint IdentityIQ is ranked 1st in User Provisioning Software with 61 reviews. One Identity Active Roles is rated 8.6, while SailPoint IdentityIQ is rated 8.2. The top reviewer of One Identity Active Roles writes "Single interface and workflows simplify AD and Azure AD management efficiency and security". On the other hand, the top reviewer of SailPoint IdentityIQ writes "Flexible, easy to customize, and not too difficult to set up". One Identity Active Roles is most compared with Microsoft Entra ID, ManageEngine ADManager Plus, One Identity Manager, Softerra Adaxes and NetIQ Directory and Resource Administrator, whereas SailPoint IdentityIQ is most compared with Saviynt, One Identity Manager, Microsoft Entra ID, ForgeRock and Microsoft Identity Manager. See our One Identity Active Roles vs. SailPoint IdentityIQ report.
See our list of best User Provisioning Software vendors.
We monitor all User Provisioning Software reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.