Try our new research platform with insights from 80,000+ expert users

EmpowerID vs One Identity Active Roles comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

EmpowerID
Ranking in User Provisioning Software
10th
Average Rating
7.6
Reviews Sentiment
7.1
Number of Reviews
2
Ranking in other categories
Identity Management (IM) (24th)
One Identity Active Roles
Ranking in User Provisioning Software
5th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
28
Ranking in other categories
Active Directory Management (1st), Non-Human Identity Management (NHIM) (5th)
 

Mindshare comparison

As of December 2025, in the User Provisioning Software category, the mindshare of EmpowerID is 2.1%, up from 0.7% compared to the previous year. The mindshare of One Identity Active Roles is 5.6%, up from 4.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Provisioning Software Market Share Distribution
ProductMarket Share (%)
One Identity Active Roles5.6%
EmpowerID2.1%
Other92.3%
User Provisioning Software
 

Featured Reviews

Varun Khandavalli - PeerSpot reviewer
Senior Specialist Engineering Dev. & Integration at a manufacturing company with 10,001+ employees
An excellent application with a strong use case
It is very intuitive and has improved significantly over the last seven years. Its deployment is very enterprise-focused, and I hope it will eventually become cloud-based for easier connection through AWS or similar services. Currently, it's an It is very intuitive and has improved significantly over the last seven years. Its deployment is very enterprise-focused, and I hope it will eventually become cloud-based for easier connection through AWS or similar services. Currently, it's an excellent application with a strong use case.
reviewer2789802 - PeerSpot reviewer
Director, Identity & M365 Engineering at a healthcare company with 10,001+ employees
Granular delegated access has strengthened least privilege control across complex directories
One of the things I would like to see more robust is the change history. One Identity Active Roles can only monitor changes that happen in the console, and the logs don't go back longer than thirty days, maybe sixty days. The change history, when we've seen accounts get modified, we leverage a container domain that funnels accounts into our Active Directory console. I would like to see from an initial user provisioning perspective, for them to isolate the workflow and say that this came in on X date and account was created. If anyone were to modify that account from an external resource, I would like to be able to read that as well. One Identity Active Roles is strictly limited to the console. If someone makes a change, the history of those changes is not as long as I would prefer.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is very intuitive and has improved significantly over the last seven years. Its deployment is very enterprise-focused, and I hope it will eventually become cloud-based for easier connection through AWS or similar services. Currently, it's an excellent application with a strong use case."
"Active Roles helped reduce our identity-based breaches."
"Active Roles is easy to configure. It isn't a plug-and-play solution, and you need expertise to set it up. However, once you have your templates, it's easy to deploy in a highly decentralized environment. The custom configuration for our customers is fantastic, especially the web interface."
"In comparison to native Active Directory tools, using Active Roles for delegation is so much better. It uses an access template and that makes it easy to see who can access what. In fact, you can do that for many objects as well."
"The solution improved our organization's security posture by framing the end users and ensuring that capabilities that could cause mistakes are hidden from the web interface."
"Because of Active Roles, we're able to synchronize on an even more regular basis. It enables us to provide even more information to the Active Directory, which helped us to group our users in a more consistent manner."
"Instead of deleting accounts, we like the deprovision option so that we can reverse any accidental deletions. It also gives a higher level of quality control in terms of enforcing any number of variables, such as making sure that an account has a description entered before the account can be created. We can backtrack and know the history of it that way."
"One Identity Active Roles brings a positive impact to organizations in that they will start realizing the ROI in a much faster manner because the implementation time is very short and it is easy to use."
"It's valuable to us in that it resembles the native tools that most people have grown accustomed to... Active Roles resembles traditional tools, such as from Microsoft. That is really good because it eases the way people interact with the tool."
 

Cons

"I would like to see EmpowerID move to the cloud to facilitate easier deployment and connectivity through AWS or similar services."
"For ActiveRoles, it would be good if the product supports multi-scripting language. You can use only VBScript."
"For mid-sized to small companies, I do not know if it would be that useful, considering the tool's purpose."
"For the AAD management feature, it needs to improve the objects that we can manage and the security."
"Customer support is rated six. Sometimes having a fix for a bug takes too much time. While in production, issues tend to take a while to resolve."
"There is always room to improve the user interface for increased clarity. I believe enhancements to the console are also necessary because it is more confusing than the web interface."
"In terms of improvement, it could be made even more user-friendly for administrators when they need to create new workflows and rule sets."
"I know they have increased support for Entra ID and mentioned providing support for AWS. A way to connect to various directories and integrate with cloud directories would be beneficial."
"Additional documentation about the Angular web interface is needed."
 

Pricing and Cost Advice

Information not available
"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."
"The pricing is on the higher end."
"It's expensive."
"It's fairly priced."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."
"The licensing model is a simple user-based model, not that much complicated."
report
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
879,310 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
13%
Manufacturing Company
9%
Healthcare Company
9%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise18
 

Questions from the Community

What is your experience regarding pricing and costs for EmpowerID?
The cost is fairly moderate, although I can't recall the exact amount, it's around twenty five.
What needs improvement with EmpowerID?
I would like to see EmpowerID move to the cloud to facilitate easier deployment and connectivity through AWS or similar services.
What is your primary use case for EmpowerID?
EmpowerID is an application that helps move LC-MS and HPLC data from instruments to systems of record to be able to get that data and manage it. It is used for a lot of small molecule research and ...
What is your experience regarding pricing and costs for One Identity Active Roles?
The product is expensive, but if you want to save money, the delegation set-up process is quite easy. After setting up Active Roles once, defining the delegation model, it is very efficient, almost...
What needs improvement with One Identity Active Roles?
The interface appears outdated. Once logged in, everything inside remains unchanged from years ago. Additionally, when they release new features, they should provide training or webinars at least o...
What is your primary use case for One Identity Active Roles?
I use One Identity Active Roles primarily for identity management. We use it for managing multiple domains from a single interface, and the domains do not have trust between them. It has been used ...
 

Also Known As

The Dot Net Factory EmpowerID
Quest Active Roles
 

Overview

 

Sample Customers

Glencoe Specialty Services, GoDaddy, GTSI Corp., Alere Inc., Anadarko Petroleum, Bank of America, Bank of New York, Caterpillar, Coldwell Banker
City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Find out what your peers are saying about EmpowerID vs. One Identity Active Roles and other solutions. Updated: December 2025.
879,310 professionals have used our research since 2012.