No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Security Identity Governance and Intelligence vs One Identity Active Roles comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Security Identity Gover...
Ranking in User Provisioning Software
14th
Average Rating
7.6
Reviews Sentiment
6.7
Number of Reviews
2
Ranking in other categories
Identity Management (IM) (30th)
One Identity Active Roles
Ranking in User Provisioning Software
3rd
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
87
Ranking in other categories
Active Directory Management (1st), Non-Human Identity Management (NHIM) (1st)
 

Mindshare comparison

As of June 2026, in the User Provisioning Software category, the mindshare of IBM Security Identity Governance and Intelligence is 3.1%, up from 2.0% compared to the previous year. The mindshare of One Identity Active Roles is 5.6%, down from 6.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Provisioning Software Mindshare Distribution
ProductMindshare (%)
One Identity Active Roles5.6%
IBM Security Identity Governance and Intelligence3.1%
Other91.3%
User Provisioning Software
 

Featured Reviews

reviewer1830612 - PeerSpot reviewer
Head, Cybersecurity at a tech services company with 11-50 employees
We use the solution to ensure organizations conform to industry base certifications and best practices
We use the product to ensure organizations conform to industry base certifications and best practices and do not contradict their security policies within the base points they specify in the system, which are used to match everything against their governance use cases I think the product's most…
Varun Mehra - PeerSpot reviewer
collaboration support engineer at a retailer with 11-50 employees
Automation has transformed onboarding and access control and now streamlines daily governance
While One Identity Active Roles is a strong identity and access management solution overall, there are a few areas where it could improve. One challenge we experienced was the initial setup and configuration complexity. Deploying workflows, policies, and delegation models require careful planning and a good understanding of the Active Directory environment. For organizations without experienced administrators, the learning curve can feel quite steep in the beginning. The user interface could also be more modern and intuitive. Some administrative tasks require navigating through multiple menus and the overall experience could be simplified for faster day-to-day management. Another area for improvement is reporting and customization. While the auditing features are good, creating highly customized reports sometimes requires additional efforts or scripting knowledge. More built-in reporting templates and easier dashboard customization would be helpful. We have also noticed that troubleshooting workflows or synchronization issues can occasionally take time because the logs can be very detailed and technical. Better diagnostic tools and simpler error explanations would improve the operational experience. That said, once the platform is properly configured and maintained, it performs reliably and delivers strong automation, delegation, and governance capabilities. One additional area where One Identity Active Roles could improve is cloud integration and hybrid environment management. While it works well with Active Directory and the Microsoft environment, organizations moving heavily towards cloud-first infrastructure may want even deeper and more seamless integration with modern SaaS platforms and identity providers. Performance optimization in large environments could be improved. In very large enterprise deployments with complex workflows and multiple managed domains, some administrative actions and synchronization tasks can occasionally feel slower than expected. Another point is documentation and onboarding resources. The product is feature-rich, but some advanced configurations require going through extensive documentation. More practical examples, guided setup wizards, and easier to follow best practice guides would help new administrators adopt the platform faster. Overall, the core functionality is solid, and most of the pain points are related more to usability, complexity, and modernization rather than the reliability. One additional improvement I would mention is around integration flexibility with third-party ITSM and DevOps tools. While the platform integrates well within Microsoft-centric environments, broader out-of-the-box integration and simpler API workflows for non-Microsoft ecosystems would make deployment and automation easier for organizations using diverse infrastructure. Another area is upgrade and migration simplicity. In enterprise environments, version upgrades and environment migration sometimes require careful planning and testing. Streamlining that process with more automated compatibility checks and migration assistance would reduce operational overhead.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"This solution has a very good dashboard and the documentation is also very good, and life cycle management and governance are also good features in this solution."
"We use the product to ensure organizations conform to industry base certifications and best practices and do not contradict their security policies within the base points they specify in the system, which are used to match everything against their governance use cases."
"Lifecycle management, governance and documentation."
"I would rate the price eight out of 10, with 10 as the best value for money."
"It gives us attribute-level control and the AD management features work very well."
"I saw a strong ROI with One Identity Active Roles through around a forty to fifty percent reduction in service desk workload, faster user provisioning from hours to minutes, fewer manual errors, and improved compliance and audit efficiency, which saves significant administrative time and operational efforts."
"Active Roles is a thousand times better than native Microsoft tools."
"Overall, One Identity Active Roles has been a reliable and valuable solution for improving Active Directory management, automation, and access control, helping reduce manual efforts, improve security, and streamline identity administration tasks across the organization."
"One Identity Active Roles has positively impacted the organization by significantly improving efficiency through automating repetitive tasks and saving time for the IT team."
"Instead of deleting accounts, we like the deprovision option so that we can reverse any accidental deletions. It also gives a higher level of quality control in terms of enforcing any number of variables, such as making sure that an account has a description entered before the account can be created. We can backtrack and know the history of it that way."
"Clear ROI has been seen with One Identity Active Roles, mainly through the time savings and reduced manual administration."
"It's valuable to us in that it resembles the native tools that most people have grown accustomed to... Active Roles resembles traditional tools, such as from Microsoft. That is really good because it eases the way people interact with the tool."
 

Cons

"Self service center is not always easy to understand."
"The solution is also a bit pricey for the Nigeria region."
"I think improvements could be made in the self service center, making it easier for the user to understand."
"One area where One Identity Active Roles can be improved is in simplifying its initial setup and configuration process, as deployment can be complex and time-consuming for a new user or organization without deep Active Directory expertise, which can slow down adoption and require additional training or support."
"It also has workflows and those are really powerful, but there are no built-in workflows."
"Most of the time it just works."
"The initial setup could be simpler because sometimes it feels like it should be more straightforward."
"I did not rate One Identity Active Roles at the highest level because areas such as user interface modernization, workflow complexity, troubleshooting experience, reporting capabilities, and cloud integration still have room for improvement."
"One Identity Active Roles could be improved by speeding up the approval process, especially for urgent access requests."
"One Identity Active Roles can be improved with a more modern and intuitive user interface, better reporting and analytics, simplified workflow customization, enhanced troubleshooting tools, and stronger cloud and hybrid identity integration capabilities for large enterprise environments."
"Pricing for One Identity Active Roles is a bit on the higher side compared to other options in the market."
 

Pricing and Cost Advice

"I would rate the price eight out of 10, with 10 as the best value for money."
"It's fairly priced."
"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"The licensing model is a simple user-based model, not that much complicated."
"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."
"It's expensive."
"The pricing is on the higher end."
report
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
902,495 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
15%
Financial Services Firm
13%
Government
13%
Insurance Company
8%
Outsourcing Company
24%
Financial Services Firm
8%
Computer Software Company
8%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business90
Midsize Enterprise18
Large Enterprise42
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for One Identity Active Roles?
Our experience with the pricing, setup cost, and licensing of One Identity Active Roles reflects the platform's status as an enterprise-grade premium product. One Identity structured the Active Rol...
What needs improvement with One Identity Active Roles?
One area for improvement in One Identity Active Roles would be reporting and dashboard customization. While the available reports are useful, having more flexible and easier-to-build reports would ...
What is your primary use case for One Identity Active Roles?
I have been using One Identity Active Roles for almost the last two years. My main use case of One Identity Active Roles is for user provisioning, group management, delegated administration, and ha...
 

Also Known As

IGI, IBM Security Identity Manager, ISIM
Quest Active Roles
 

Overview

 

Sample Customers

E.ON Global Commodities
City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Find out what your peers are saying about IBM Security Identity Governance and Intelligence vs. One Identity Active Roles and other solutions. Updated: June 2026.
902,495 professionals have used our research since 2012.