Try our new research platform with insights from 80,000+ expert users

ForgeRock vs One Identity Active Roles comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ForgeRock
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
30
Ranking in other categories
Identity Management (IM) (13th), Access Management (10th), Customer Identity and Access Management (CIAM) (7th)
One Identity Active Roles
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
26
Ranking in other categories
User Provisioning Software (5th), Active Directory Management (1st), Non-Human Identity Management (NHIM) (5th)
 

Mindshare comparison

While both are Identity and Access Management solutions, they serve different purposes. ForgeRock is designed for Access Management and holds a mindshare of 7.5%, up 6.8% compared to last year.
One Identity Active Roles, on the other hand, focuses on Active Directory Management, holds 9.8% mindshare, up 7.3% since last year.
Access Management Market Share Distribution
ProductMarket Share (%)
ForgeRock7.5%
Microsoft Entra ID24.8%
Auth09.2%
Other58.5%
Access Management
Active Directory Management Market Share Distribution
ProductMarket Share (%)
One Identity Active Roles9.8%
ManageEngine ADManager Plus14.5%
Netwrix Auditor11.8%
Other63.9%
Active Directory Management
 

Featured Reviews

Ahmet Murat Ülker - PeerSpot reviewer
Easy to use, but customizations can be complicated to handle
I would suggest others use the product after asking them to consider their use cases. SSO may be a use case for some, and using the product as an IDM tool may be a use case. At the moment, my company is not deploying all the components of ForgeRock itself. My company uses ForgeRock for OAuth 2.0. For example, my company is not deploying the IDM and identity gateway components. You should consider your use case and select the required components for that use case. My company does not use the SSO features of the tool. My company uses SSO to access ForgeRock's AM Console for individual users. My company does not use single sign on features of the product and instead, we use Auth0. I rate the tool a seven or eight out of ten.
Grzegorz Kosela - PeerSpot reviewer
Task automation simplifies user and delegation management while offering a customizable interface
Currently, task automation, like provisioning, deprovisioning, and reprovisioning, is very effective. When a user moves from one organization to another, it automatically changes their group membership and performs similar functions. Secondly, the granular delegation feature is very nice and much simpler and easier than it is natively in Microsoft. Two years ago, One Identity Active Roles was under Dell. It was quite poor. However, now, there have been notable improvements, such as faster system processing, better logging, enhanced information, and a more user-friendly interface. Once it was sold by Dell, things got better. The interface became a bit more user-friendly. The Angular user interface is much more flexible for adjusting to customer needs, and a completely new and customizable one can be created, aligning with all settings and scripts required by a customer. The ease of managing on-prem and cloud-based directories through a single pane of glass is good. I'd rate it nine out of ten. The solution's ability to provision and deprovision resources and directories like Azure AD is very simple, especially when you can integrate with the HR system and grab some data from HR. It's actually fully automatic. I don't need to even touch it. It's helped increase operational efficiency by 50%. It's helped decrease security problems around privileged accounts. We were able to decrease the number of privileged accounts and have been able to delegate more effectively. We decreased the number of high-level permissions that administrators had. For example, if someone is a DNS administrator, he has access only as far as the specific actions he needs to handle. We don't need to give away such high privileges for such a daily job. It's helped clarify roles and access. It's helped reduce identity-based breaches. If someone leaves a company, we can easily undo provisioning and close accounts. We can generate reports to see which people have which permissions and at what times. We've just integrated with our HR system. It helps us follow activated and deactivated users. I'd rate the granular controls on offer ten out of ten. We've saved on manpower in terms of the work of the administrators. There's good reporting and functionality, and it's very transparent. You can connect more than one directory and manage everything from one pane. You can do many things from one interface.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We create and define the permissions and configurations for the users."
"Easy to customize and adaptable to any environment."
"The most valuable features are that it is easy to manage and it's stable."
"The product is easy to set up."
"The support is good and prompt."
"We have found the identity and access management tools in the solution to be particularly useful for our organization."
"Their access management solution, OpenAM, is most valuable because it meets the needs of a lot of users."
"It works very well, especially in Identity and Access Management. It helps detect anomalies in user behavior patterns."
"One Identity Active Roles has helped my organization reduce the number of incorrect privileged accounts through the management unit feature and enables comprehensive group membership management with features not available in Active Directory, such as adding multiple secondary owners and dynamic groups."
"The most valuable features include auditing, dynamic grouping, and creating dynamic groups based on AD attributes."
"The solution improved our organization's security posture by framing the end users and ensuring that capabilities that could cause mistakes are hidden from the web interface."
"We have eased the burden on the support desk and reduced the risk of them doing something they shouldn't."
"With the use of the sync service we were able to import information from multiple external systems and populate them within our space and leverage them for downstream systems."
"It has helped increase operational efficiency in our organization."
"The solution is stable."
"The ease of managing on-prem and cloud-based directories through a single pane of glass is good."
 

Cons

"In an upcoming release, the solution could improve by limiting the need to do customizations."
"It should be a little bit easier to implement. It is user-friendly, but there is always scope for improvement."
"We're worried about the scaling. We're told it will be okay and there won't be issues, however, I'm not 100% convinced."
"I find that it's quite expensive for just an open-source system. Support is quite expensive."
"I think the upgrade process is sometimes a little complicated and there are failures that occur."
"The identity management model needs a bit of improvement."
"It should have a better user interface. Its flexibility should also be improved. It is not about simplifying; it is more about flexibility. Each company has its own requirements, and ForgeRock can provide more flexibility in terms of the use of existing modules to implement features for the customers."
"I don't think ForgeRock directly supports integrations with Slack, making it an area where improvements are required."
"For mid-sized to small companies, I do not know if it would be that useful, considering the tool's purpose."
"It's a fairly stable product but not perfectly reliable."
"Active Roles could add more options for web customization. Our requirements are exceedingly specific. We'd like to get the web interface down to just five buttons, but in some cases, we can only get to six. The web interface in the current version is less customizable than in the previous one."
"When we add numerous domains, it becomes slow. With around 60 domains, attempting to add approximately 30 caused significant performance issues."
"There are some features that we think should be included in their next release. We think these things would take them to the next level: the ability to completely force or limit any dynamic group processing to specific servers, change-tracking reporting of virtual attributes, and the ability to use files as inputs to automation workloads. These things have also been talked about. Knowing them, they're probably working on them."
"The ability to send logs to a SIEM would be very beneficial."
"I know they have increased support for Entra ID and mentioned providing support for AWS. A way to connect to various directories and integrate with cloud directories would be beneficial."
"When doing a workflow, we would like a bit better feedback on the screen, as we're trying to get it to work. For example, there is a "Find" function that you need set up in a workflow to do some of the automation. It is not the easiest to get a result from those finds when you're trying to do that. In the MMC, they have a couple different types of workflows. In this particular case, we use their workflow functionality to find all of X within the environment, then if you find it, do X, Y, and Z. You can have multiple steps. When you do that search function within that workflow, it's really hard to find out, "Is my search working?" It would be nice if there was some feedback on the screen so you could see if your search is working properly within the workflow."
 

Pricing and Cost Advice

"ForgeRock is an expensive solution."
"We have multiple clients we are looking at right now. We are at a very small number, however, the idea and the goal is to grow. We are looking at about $100,000 and $50,000 a minimum a month cost. That'd be minimum maybe in a couple of years."
"The pricing of the solution is fair but I do not have the full details."
"Its price is comparable to other products in the market."
"Its licensing is on a yearly basis, but it also depends on the contract that you have with the vendor. They have multiple types of contracts. There are additional costs to the standard licensing fees. If you need some of the features, you have to pay more."
"ForgeRock's pricing is more competitive than other products."
"It's a bit pricey and could be more competitive."
"The license is purchased annually per user. However, you can negotiate if you are signing for a longer period of time. When comparing this solution to others on the market it is priced fair, it is not at the top of the price range or at the bottom end."
"It's fairly priced."
"The pricing is on the higher end."
"The licensing model is a simple user-based model, not that much complicated."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."
"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."
"It's expensive."
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
868,229 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
23%
Computer Software Company
11%
Manufacturing Company
7%
Insurance Company
6%
Computer Software Company
16%
Healthcare Company
9%
Financial Services Firm
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise4
Large Enterprise13
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise2
Large Enterprise17
 

Questions from the Community

What do you like most about ForgeRock?
The most valuable features of ForgeRock are social login and data protection.
What is your experience regarding pricing and costs for ForgeRock?
Our company was considering switching back to Keycloak from ForgeRock, so as to not pay any license fees. ForgeRock also supports M-PIN and biometric features that Keycloak does not provide. My com...
What needs improvement with ForgeRock?
In the past, I saw that Splunk was integrated with a testing portal, and then it was integrated with Slack. I don't think ForgeRock directly supports integrations with Slack, making it an area wher...
What is your experience regarding pricing and costs for One Identity Active Roles?
The product is expensive, but if you want to save money, the delegation set-up process is quite easy. After setting up Active Roles once, defining the delegation model, it is very efficient, almost...
What needs improvement with One Identity Active Roles?
One area for improvement would be the Entra ID side, including better delegation for Entra ID objects and more granular permissions. We would also like to see better Entra ID license management usi...
 

Also Known As

ForgeRock Identity Platform, ForgeRock OpenIDM
Quest Active Roles
 

Overview

 

Sample Customers

Geico, Thomson Reuters, Salesforce, McKesson, Trinet, SKY, BNP Paribas, Deloitte, Capgemini, North Western University
City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Find out what your peers are saying about ForgeRock vs. One Identity Active Roles and other solutions. Updated: March 2020.
868,229 professionals have used our research since 2012.