Active Roles by One Identity vs IBM Tivoli Access Manager [EOL] comparison

Why PeerSpot?

One Identity and IBM are both solutions in the User Provisioning Software category. Additionally, 100% of One Identity users are willing to recommend the solution, compared to 93% of IBM users who would recommend it.

Active Roles by One Identity

Read 91 Active Roles by One Identity reviews

10,237 Views
3,788 Comparison Views

100% willing to recommend

IBM Tivoli Access Manager [...

Read 29 IBM Tivoli Access Manager [EOL] reviews

93% willing to recommend

Active Roles by One Identity

IBM Tivoli Access Manager [...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jul 20, 2026

IBM Tivoli Access Manager [EOL] and Active Roles by One Identity are both products in the identity and access management category. Active Roles by One Identity has the upper hand, offering superior features and a user-friendly deployment process with significant ROI benefits.

Features: IBM Tivoli Access Manager offers robust access management, centralized access controls for various platforms, and enhances security through single sign-on and reverse proxy components like WebSEAL. Active Roles by One Identity provides dynamic group management, automation of identity lifecycle tasks, and advanced auditing, with a seamless integration across hybrid environments, improving both efficiency and security.

Room for Improvement: Tivoli Access Manager may require complex deployment and lacks some modern flexibility and cloud support. It could benefit from improvements in user interface and ease of management. In contrast, Active Roles could enhance its customization capabilities and provide more straightforward support for multi-cloud environments. Users also desire more granular reporting options.

Ease of Deployment and Customer Service: Active Roles by One Identity is easier to deploy with its cloud compatibility and support services. Tivoli Access Manager often demands detailed configurations and longer deployment timelines, which can challenge its adaptability in cloud environments compared to the more straightforward setup of Active Roles.

Pricing and ROI: IBM Tivoli Access Manager generally offers attractive pricing which can appeal to certain budgets. However, Active Roles provides a compelling ROI due to its robust feature set and efficiency. Despite a potentially higher initial cost, the long-term value delivered by Active Roles offers a favorable cost-benefit balance, aligning with sustainable business growth goals.

To learn more, read our detailed User Provisioning Software Report (Updated: August 2026).

Buyer's Guide

User Provisioning Software

August 2026

Download the complete report

Helped 912,801 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Active Roles by One Identity

Average Rating

8.6

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

User Provisioning Software (3rd), Active Directory Management (1st), Non-Human Identity Management (NHIM) (1st)

IBM Tivoli Access Manager [...

Average Rating

8.0

Reviews Sentiment

3.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Featured Reviews

Puru Solanki ( ITIL. CISM , CCSP )

IT Head at Citadel Global

Automation has streamlined onboarding and governance and delivers faster, more secure access

Overall, we are very satisfied with Active Roles by One Identity, but there are a few areas that could be improved. The user interface could be more modern and intuitive, especially for new administrators. Some advanced configuration and policy settings have a steep learning curve and could be simplified. We would also like to see more built-in integrations with cloud platforms and SaaS applications, along with additional out-of-the-box reporting templates. These improvements would make the product even easier and more flexible for organizations managing hybrid environments. One thing that would make our daily work even smoother is having more ready-to-use templates for common administrative tasks and reports. This would reduce the need for customization and help teams get up and running more quickly. Additionally, faster and simpler synchronization for hybrid and cloud environments would be beneficial, especially for organizations managing both on-premises and cloud identities. More detailed documentation and guided setup for advanced features would help new administrators learn the platform faster and more easily. One additional improvement I would like to see for Active Roles by One Identity is a better built-in dashboard with more real-time insights into identity and access activities. It would be helpful if upgrades and migrations were simpler and required less planning. Finally, expanding native integrations with more cloud services and third-party applications would make the platform even more versatile and reliable. These enhancements would improve the overall user experience while keeping the product's strong security and automation capabilities.

Read full review

it_user711612

Senior Consultant at a insurance company with 1,001-5,000 employees

Reverse proxy provides central control over authentication and authorization.

It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It provides automatic provisioning/update/deprovisioning workflows from a source system to a target system."

"One of the biggest positive impacts of One Identity Active Roles was bringing more control and consistency to Active Directory."

"Active Roles helped reduce our identity-based breaches."

"After moving to One Identity Active Roles, I achieve better automation, improved security through controlled delegation, and enhanced compliance with detailed auditing and reporting, significantly improving efficiency and reducing operational risk compared to the previous approach."

"One Identity Active Roles provides strong automation capabilities that significantly reduce manual administrative work, with one especially helpful example being automated employee onboarding, where user accounts, group membership, permissions, and mailbox access are assigned automatically based on the employee's department or role."

"Overall, it has made our identity administration process more structured, predictable, and easier to manage as our environment has grown."

"One Identity Active Roles has positively impacted my organization by speeding up the user provisioning, reducing manual AD tickets, strengthening the security through consistent access control, and improving compliance."

"Clear ROI has been seen with One Identity Active Roles, mainly through the time savings and reduced manual administration."

More Active Roles by One Identity pros

"Tivoli Access Manger lets you separate security from applications and manage at one place."

"TAM component integration and their SSO capabilities and transparency are the most valuable features I have found."

"It is a simple-to-deploy solution, with many features that are supported out-of-the-box without complicated setup."

"The integration effort with the end application is quite straightforward and easy."

"The WebSEAL reverse proxy is great for protecting your critical systems."

"Tivoli Access Manager (or IBM Security Access Manager) is a fully featured web authentication, sso and authorization product."

"I like the primary function of this product allowing the administration of user/network accounts with a fair amount of ease."

"This product is highly recommended to meet access management and web single sign-on requirements."

More IBM Tivoli Access Manager [EOL] pros

Cons

"I did not rate One Identity Active Roles at the highest level because areas such as user interface modernization, workflow complexity, troubleshooting experience, reporting capabilities, and cloud integration still have room for improvement."

"One area that could be improved in One Identity Active Roles is the user interface and initial configuration process, as some advanced workflows and policy settings can be complex for new administrators."

"A few improvements I would like to see in One Identity Active Roles are mainly around usability, reporting, and modern integration."

"One area for improvement would be the initial setup, which feels a little bit complex and could be simplified."

"It also has workflows and those are really powerful, but there are no built-in workflows. When it comes to them, it's empty. I would personally love for it to come with ten, 15, or 20 workflows where each achieves a certain task... I could just look at how each is done, clone them, copy them, modify them the way I want them, and be good to go. Right now we have to invent things from scratch."

"One area where One Identity Active Roles can be improved is in the user interface. It can feel outdated and not very intuitive for new users."

"The user and group management in Azure AD could be better. Our focus these days is dynamic sharing with several on-prem Microsoft applications like SharePoint."

"When doing a workflow, we would like a bit better feedback on the screen, as we're trying to get it to work."

More Active Roles by One Identity cons

"The TAMeB policy server is not scalable."

"It was complex for us as we have multiple domains."

"Administration of the product can be improved a lot."

"Older TAM versions are not compatible for connecting to a DB."

"Yes, because there are so many moving parts it can often be difficult getting it right first time."

"The initial set-up is a bit complex for a novice as the Linux version of it needs you to be somewhat good with Linux."

"We have had stability issues lately with the hardware and SAN that the product runs on."

"Installation and configuration. If you don’t know the requirements of the supporting components, it could be complicated to install and this has been improved in the later versions that are renamed to IBM Tivoli Security Access Manager."

More IBM Tivoli Access Manager [EOL] cons

Pricing and Cost Advice

"It's expensive."

"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."

"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."

"The licensing model is a simple user-based model, not that much complicated."

"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."

"It's fairly priced."

"The pricing is on the higher end."

"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."

See which vendors are best for you

Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.

See recommendations

912,801 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

28%

Healthcare Company

Financial Services Firm

Computer Software Company

Outsourcing Company

15%

Construction Company

12%

Financial Services Firm

12%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	100
Midsize Enterprise	16
Large Enterprise	45

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	2
Large Enterprise	18

Questions from the Community

What is your experience regarding pricing and costs for One Identity Active Roles?

Our experience with the pricing, setup cost, and licensing of Active Roles by One Identity has been very positive. Although Active Roles by One Identity is not the lowest-priced solution, we believ...

See all answers

What needs improvement with One Identity Active Roles?

See all answers

What is your primary use case for One Identity Active Roles?

Active Roles by One Identity is our main solution for simplifying and automating user account management in our Active Directory environment. We use it for tasks like user provisioning, deprovision...

See all answers

Ask a question

Earn 20 points

Comparisons

ManageEngine ADManager Plus vs Active Roles by One Identity

Compared 9% of the time

Netwrix Auditor vs Active Roles by One Identity

Compared 7% of the time

Saviynt Identity Cloud vs Active Roles by One Identity

Compared 7% of the time

SailPoint Identity Security Cloud vs Active Roles by One Identity

Compared 6% of the time

Active Administrator vs Active Roles by One Identity

Compared 5% of the time

More Active Roles by One Identity Competitors

Symantec Siteminder vs IBM Tivoli Access Manager [EOL]

Compared 12% of the time

Okta Platform vs IBM Tivoli Access Manager [EOL]

Compared 9% of the time

SailPoint Identity Security Cloud vs IBM Tivoli Access Manager [EOL]

Compared 8% of the time

Idira Privileged Access Manager vs IBM Tivoli Access Manager [EOL]

Compared 7% of the time

Keeper Enterprise Password Manager vs IBM Tivoli Access Manager [EOL]

Compared 5% of the time

More IBM Tivoli Access Manager [EOL] Competitors

Product Reports

Buyer's Guide

Active Roles by One Identity

September 2026

Download Active Roles by One Identity product report

Buyer's Guide

IBM Tivoli Access Manager [EOL]

September 2026

Download IBM Tivoli Access Manager [EOL] product report

Also Known As

Quest Active Roles

Tivoli Access Manager, IBM Security Access Manager

Overview

One Identity Active Roles enhances Active Directory management by automating essential tasks and improving security through efficient delegation and role-based access control.

One Identity Active Roles offers advanced features for managing Active Directory environments, aiding in automating user provisioning, group management, and de-provisioning. It integrates seamlessly with Microsoft environments and provides centralized management for both on-premises and cloud identities. By improving operational efficiency and reducing manual errors, it enforces robust governance across organizations. Active Roles includes auditing and reporting tools that strengthen compliance and security monitoring. Companies find the setup could be simplified with better documentation, more customization options in reporting, and expanded cloud integration, particularly with Azure. Improved workflows and deeper native connectors are needed for seamless automation. Price adjustments and user-friendly analytics with intuitive dashboards are recommended for better usability.

What are the key features of One Identity Active Roles?

Automation of Active Directory tasks: Streamlines processes such as user provisioning and de-provisioning.
Role-based access control: Ensures secure delegation of administration tasks.
Auditing and reporting: Enhances compliance with security monitoring capabilities.
Integration with Microsoft: Seamlessly manages on-premises and cloud identities.

What benefits and ROI should users evaluate?

Operational Efficiency: Reduces manual errors and streamlines active directory tasks.
Security and Governance: Enforces policy-based controls for secure user management.
Compliance: Strengthens monitoring and compliance through advanced auditing.
Usability: Suggests enhancements in workflow and analytics for better management.

Many industries deploy One Identity Active Roles for automating user lifecycle management, especially in Active Directory environments. It significantly eases operations by automating onboarding for new hires, managing role changes, and modifying access. The platform efficiently handles tasks like password resets and compliance audits while empowering teams to securely manage user access without requiring full administrative rights.

One Identity

IBM Tivoli Access Manager is a robust and secure centralized policy management solution for e-business and distributed applications. IBM Tivoli Access Manager WebSEAL is a high performance, multi-threaded Web server that applies fine-grained security policy to the Tivoli Access Manager protected Web object space. WebSEAL can provide single sign-on solutions and incorporate back-end Web application server resources into its security policy.

IBM

Sample Customers

City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies

Essex Technology Group Inc.

Buyer's Guide

User Provisioning Software

August 2026

Download Free Report

Find out what your peers are saying about One Identity, SailPoint, Omada and others in User Provisioning Software. Updated: August 2026.

DOWNLOAD NOW

912,801 professionals have used our research since 2012.

See our list of best User Provisioning Software vendors.

We monitor all User Provisioning Software reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.