No more typing reviews! Try our Samantha, our new voice AI agent.

Active Roles by One Identity vs IBM Tivoli Access Manager [EOL] comparison

One Identity and IBM are both solutions in the User Provisioning Software category. Additionally, 100% of One Identity users are willing to recommend the solution, compared to 93% of IBM users who would recommend it.
Active Roles by One Identity
Read 90 Active Roles by One Identity reviews
  • 8,596 Views
  • 3,095 Comparison Views
100% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Jul 20, 2026

IBM Tivoli Access Manager [EOL] and Active Roles by One Identity are both products in the identity and access management category. Active Roles by One Identity has the upper hand, offering superior features and a user-friendly deployment process with significant ROI benefits.

Features: IBM Tivoli Access Manager offers robust access management, centralized access controls for various platforms, and enhances security through single sign-on and reverse proxy components like WebSEAL. Active Roles by One Identity provides dynamic group management, automation of identity lifecycle tasks, and advanced auditing, with a seamless integration across hybrid environments, improving both efficiency and security.

Room for Improvement: Tivoli Access Manager may require complex deployment and lacks some modern flexibility and cloud support. It could benefit from improvements in user interface and ease of management. In contrast, Active Roles could enhance its customization capabilities and provide more straightforward support for multi-cloud environments. Users also desire more granular reporting options.

Ease of Deployment and Customer Service: Active Roles by One Identity is easier to deploy with its cloud compatibility and support services. Tivoli Access Manager often demands detailed configurations and longer deployment timelines, which can challenge its adaptability in cloud environments compared to the more straightforward setup of Active Roles.

Pricing and ROI: IBM Tivoli Access Manager generally offers attractive pricing which can appeal to certain budgets. However, Active Roles provides a compelling ROI due to its robust feature set and efficiency. Despite a potentially higher initial cost, the long-term value delivered by Active Roles offers a favorable cost-benefit balance, aligning with sustainable business growth goals.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed User Provisioning Software Report (Updated: July 2026).
Buyer's Guide
User Provisioning Software
July 2026
Download the complete report
Helped 906,829 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Active Roles by One Identity
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
90
Ranking in other categories
User Provisioning Software (3rd), Active Directory Management (1st), Non-Human Identity Management (NHIM) (1st)
IBM Tivoli Access Manager [...
Average Rating
8.0
Reviews Sentiment
3.8
Number of Reviews
29
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Varun Mehra - PeerSpot reviewer
Varun Mehra
collaboration support engineer at a retailer with 11-50 employees
Automation has transformed onboarding and access control and now streamlines daily governance
While One Identity Active Roles is a strong identity and access management solution overall, there are a few areas where it could improve. One challenge we experienced was the initial setup and configuration complexity. Deploying workflows, policies, and delegation models require careful planning and a good understanding of the Active Directory environment. For organizations without experienced administrators, the learning curve can feel quite steep in the beginning. The user interface could also be more modern and intuitive. Some administrative tasks require navigating through multiple menus and the overall experience could be simplified for faster day-to-day management. Another area for improvement is reporting and customization. While the auditing features are good, creating highly customized reports sometimes requires additional efforts or scripting knowledge. More built-in reporting templates and easier dashboard customization would be helpful. We have also noticed that troubleshooting workflows or synchronization issues can occasionally take time because the logs can be very detailed and technical. Better diagnostic tools and simpler error explanations would improve the operational experience. That said, once the platform is properly configured and maintained, it performs reliably and delivers strong automation, delegation, and governance capabilities. One additional area where One Identity Active Roles could improve is cloud integration and hybrid environment management. While it works well with Active Directory and the Microsoft environment, organizations moving heavily towards cloud-first infrastructure may want even deeper and more seamless integration with modern SaaS platforms and identity providers. Performance optimization in large environments could be improved. In very large enterprise deployments with complex workflows and multiple managed domains, some administrative actions and synchronization tasks can occasionally feel slower than expected. Another point is documentation and onboarding resources. The product is feature-rich, but some advanced configurations require going through extensive documentation. More practical examples, guided setup wizards, and easier to follow best practice guides would help new administrators adopt the platform faster. Overall, the core functionality is solid, and most of the pain points are related more to usability, complexity, and modernization rather than the reliability. One additional improvement I would mention is around integration flexibility with third-party ITSM and DevOps tools. While the platform integrates well within Microsoft-centric environments, broader out-of-the-box integration and simpler API workflows for non-Microsoft ecosystems would make deployment and automation easier for organizations using diverse infrastructure. Another area is upgrade and migration simplicity. In enterprise environments, version upgrades and environment migration sometimes require careful planning and testing. Streamlining that process with more automated compatibility checks and migration assistance would reduce operational overhead.
Read full review
it_user711612 - PeerSpot reviewer
it_user711612
Senior Consultant at a insurance company with 1,001-5,000 employees
Reverse proxy provides central control over authentication and authorization.
It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Previously, I was handling a 100 percent workload, but after using One Identity Active Roles, 70 percent of my load has been resolved."
"The provisioning and deprovisioning saves a lot of time and skips a lot of errors."
"I saw a strong ROI with One Identity Active Roles through around a forty to fifty percent reduction in service desk workload, faster user provisioning from hours to minutes, fewer manual errors, and improved compliance and audit efficiency, which saves significant administrative time and operational efforts."
"Since we have implemented One Identity Active Roles, we have seen significant improvements, with faster user management, better control over Active Directory, reduced errors, and improved security."
"One Identity Active Roles has significantly reduced both the complexity and workload of administrative tasks related to Active Directory; many repetitive tasks are automated, so admins spend much less time on routine activities."
"One Identity Active Roles has had a very positive impact on our organization, mainly by improving efficiency and security at the same time."
"With the use of the sync service we were able to import information from multiple external systems and populate them within our space and leverage them for downstream systems."
"One Identity Active Roles has significantly reduced the complexity and workload of administrative tasks related to Active Directory, as routine tasks like user creation, password resets, and access changes are automated or delegated, saving time and reducing manual efforts while making management more structured and consistent, making overall administration easier and more efficient."
More Active Roles by One Identity pros
"I like the primary function of this product allowing the administration of user/network accounts with a fair amount of ease."
"Centralized policy management and reverse proxy-based architecture make it very flexible in terms of deployment, adoption, and implementation."
"It is a totally secure way of accessing clients through various application portals for more than ten EU countries, just by using single sign-on."
"It is one of the best products in the present market in the area of access management."
"The SSO, URL-based access control, OAuth 2 and OIDC are the most valuable features."
"Some of the valuable features are: Reverse proxy Protected object space Ease of integration Multiple and robust AuthN and AuthZ mechanisms built-in No single point of failure (SPOF)"
"Tivoli Access Manager's proxy product (WebSEAL) is extremely fast."
"It provides good scalability and reliability, not to mention the overall availability of the service."
More IBM Tivoli Access Manager [EOL] pros
 

Cons

"A few improvements I would like to see in One Identity Active Roles are mainly around usability, reporting, and modern integration."
"One Identity Active Roles is a mature and reliable product, but there are definitely areas where it could be improved."
"One area for improvement would be the initial setup, which feels a little bit complex and could be simplified."
"One area is the user interface and administrative experience. While the platform is feature-rich, some workflows and configuration screens can feel complex for new administrators, especially in large enterprise environments with extensive policy configurations."
"When doing a workflow, we would like a bit better feedback on the screen, as we're trying to get it to work."
"The initial setup of One Identity Active Roles can be more simplified."
"Most of the time it just works."
"I think its governance and security are very good. If they use a third party as an AI, the security may be compromised. However, if they are using their inbuilt assistance, it gives a very good result."
More Active Roles by One Identity cons
"What I don’t particularly like is the flow duration."
"The whole product could be made into one suite instead of multiple components which are essentially a part of the same infrastructure."
"We have had stability issues lately with the hardware and SAN that the product runs on."
"The product has not been updated with emerging technologies over the years specifically around AJAX, REST and Mobile app integration."
"The self-service portal needs improvement."
"Older TAM versions are not compatible for connecting to a DB."
"Complex to install and run."
"Administration of the product can be improved a lot."
More IBM Tivoli Access Manager [EOL] cons
 

Pricing and Cost Advice

"It's fairly priced."
"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."
"It's expensive."
"The licensing model is a simple user-based model, not that much complicated."
"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."
"The pricing is on the higher end."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."
report
See which vendors are best for you
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
See recommendations
906,829 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
24%
Financial Services Firm
8%
Computer Software Company
8%
Manufacturing Company
6%
Construction Company
15%
Financial Services Firm
14%
Outsourcing Company
11%
Marketing Services Firm
11%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business97
Midsize Enterprise14
Large Enterprise45
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise18
 

Questions from the Community

What is your experience regarding pricing and costs for One Identity Active Roles?
I wasn't directly involved in the pricing or licensing decisions, so I cannot comment on the exact cost. For our operations, I believe the investment was considered worthwhile because the product r...
See all answers
What needs improvement with One Identity Active Roles?
I think One Identity Active Roles is a mature and reliable solution, but there are a few areas where it could be improved. The biggest one is the management interface, which feels dated compared to...
See all answers
What is your primary use case for One Identity Active Roles?
Our main use case for One Identity Active Roles is to simplify and standardize Active Directory administration across multiple business units while reducing the amount of manual work handled by our...
See all answers
Ask a question
Earn 20 points
 

Comparisons

ManageEngine ADManager Plus vs Active Roles by One Identity Logo
ManageEngine ADManager Plus vs Active Roles by One Identity
Compared 11% of the time
Netwrix Auditor vs Active Roles by One Identity Logo
Netwrix Auditor vs Active Roles by One Identity
Compared 8% of the time
SailPoint Identity Security Cloud vs Active Roles by One Identity Logo
SailPoint Identity Security Cloud vs Active Roles by One Identity
Compared 6% of the time
Saviynt Identity Cloud vs Active Roles by One Identity Logo
Saviynt Identity Cloud vs Active Roles by One Identity
Compared 6% of the time
Active Administrator vs Active Roles by One Identity Logo
Active Administrator vs Active Roles by One Identity
Compared 6% of the time
More Active Roles by One Identity Competitors
Symantec Siteminder vs IBM Tivoli Access Manager [EOL] Logo
Symantec Siteminder vs IBM Tivoli Access Manager [EOL]
Compared 13% of the time
Idira Privileged Access Manager vs IBM Tivoli Access Manager [EOL] Logo
Idira Privileged Access Manager vs IBM Tivoli Access Manager [EOL]
Compared 8% of the time
Okta Platform vs IBM Tivoli Access Manager [EOL] Logo
Okta Platform vs IBM Tivoli Access Manager [EOL]
Compared 8% of the time
SailPoint Identity Security Cloud vs IBM Tivoli Access Manager [EOL] Logo
SailPoint Identity Security Cloud vs IBM Tivoli Access Manager [EOL]
Compared 8% of the time
NetFortris Secure Wi-Fi vs IBM Tivoli Access Manager [EOL] Logo
NetFortris Secure Wi-Fi vs IBM Tivoli Access Manager [EOL]
Compared 3% of the time
More IBM Tivoli Access Manager [EOL] Competitors
 

Product Reports

Buyer's Guide
Active Roles by One Identity
July 2026
Active Roles by One Identity reportDownload Active Roles by One Identity product report
Buyer's Guide
IBM Tivoli Access Manager [EOL]
July 2026
IBM Tivoli Access Manager [EOL] reportDownload IBM Tivoli Access Manager [EOL] product report
 

Also Known As

Quest Active Roles
Tivoli Access Manager, IBM Security Access Manager
 

Overview

One Identity Active Roles enhances Active Directory management by automating essential tasks and improving security through efficient delegation and role-based access control.

One Identity Active Roles offers advanced features for managing Active Directory environments, aiding in automating user provisioning, group management, and de-provisioning. It integrates seamlessly with Microsoft environments and provides centralized management for both on-premises and cloud identities. By improving operational efficiency and reducing manual errors, it enforces robust governance across organizations. Active Roles includes auditing and reporting tools that strengthen compliance and security monitoring. Companies find the setup could be simplified with better documentation, more customization options in reporting, and expanded cloud integration, particularly with Azure. Improved workflows and deeper native connectors are needed for seamless automation. Price adjustments and user-friendly analytics with intuitive dashboards are recommended for better usability.

What are the key features of One Identity Active Roles?

  • Automation of Active Directory tasks: Streamlines processes such as user provisioning and de-provisioning.
  • Role-based access control: Ensures secure delegation of administration tasks.
  • Auditing and reporting: Enhances compliance with security monitoring capabilities.
  • Integration with Microsoft: Seamlessly manages on-premises and cloud identities.

What benefits and ROI should users evaluate?

  • Operational Efficiency: Reduces manual errors and streamlines active directory tasks.
  • Security and Governance: Enforces policy-based controls for secure user management.
  • Compliance: Strengthens monitoring and compliance through advanced auditing.
  • Usability: Suggests enhancements in workflow and analytics for better management.

Many industries deploy One Identity Active Roles for automating user lifecycle management, especially in Active Directory environments. It significantly eases operations by automating onboarding for new hires, managing role changes, and modifying access. The platform efficiently handles tasks like password resets and compliance audits while empowering teams to securely manage user access without requiring full administrative rights.

One Identity
IBM Tivoli Access Manager is a robust and secure centralized policy management solution for e-business and distributed applications. IBM Tivoli Access Manager WebSEAL is a high performance, multi-threaded Web server that applies fine-grained security policy to the Tivoli Access Manager protected Web object space. WebSEAL can provide single sign-on solutions and incorporate back-end Web application server resources into its security policy.
IBM
 

Sample Customers

City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Essex Technology Group Inc.
Buyer's Guide
User Provisioning Software
July 2026
Download Free Report
Find out what your peers are saying about One Identity, SailPoint, Omada and others in User Provisioning Software. Updated: July 2026.
DOWNLOAD NOW
906,829 professionals have used our research since 2012.
See our list of best User Provisioning Software vendors.

We monitor all User Provisioning Software reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.