Try our new research platform with insights from 80,000+ expert users

IBM Tivoli Access Manager [EOL] vs Okta Platform vs OneLogin comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Featured Reviews

it_user711612 - PeerSpot reviewer
Senior Consultant at a insurance company with 1,001-5,000 employees
Reverse proxy provides central control over authentication and authorization.
It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…
SumitMundik - PeerSpot reviewer
Lead Admin Systems at a financial services firm with 10,001+ employees
Authentication process improves security with quick and intuitive user interface
The best feature is the speed and execution of Okta Workforce Identity. The moment you click on single sign-on, you immediately get the notification on your mobile phone, then you do the authentication and within a second you get authenticated. The entire customer experience is very good. The user interface is pretty simple, straightforward, and really good. Multi-factor authentication in Okta Workforce Identity is very useful so people who do not have access or are trying to access using just a user ID and password will be completely blocked because of this two-factor authentication. You will get the code, and as your device is authorized in the system, only that device can be used for the authentication purpose. A third person trying to access or hack your data will not be able to do that anymore. Additionally, you don't have to remember your passwords going forward. Previously, every 60 days or 90 days, passwords kept changing. With the two-factor authentication or single sign-on option in Okta Workforce Identity, you don't have to remember it anymore or write down passwords in plain text. If something goes wrong, we have the IAM team which can unlock your account immediately if you have issues.
Vaibhav Patil - PeerSpot reviewer
Digital Marketer at DigiLiterate
Single sign-on has simplified daily logins and now secures all our marketing workflows
OneLogin by One Identity has many features available. These include Single Sign-On, Multi-Factor Authentication, centralized access control, instant onboarding and offboarding, and passwordless convenience. All of these features definitely help. I rely mostly on Single Sign-On in my day-to-day work with OneLogin by One Identity. It stands out because it removes the biggest daily headache: juggling passwords for every marketing tool. With SSO, I log in once and instantly access Google Ads, HubSpot, Looker, Meta Ads, Slack, and everything else. There are no password resets, no delays, and no asking IT for access. It saves time every single day and keeps my workflow smooth, especially when I'm switching between multiple dashboards and campaigns. One hidden gem feature in OneLogin by One Identity that often gets overlooked is context-aware or adaptive access control. With this, access isn't just on or off. Instead, OneLogin by One Identity can allow or restrict access depending on conditions, such as your location, IP address, device type, or time of day. For example, if you're logging in from an unknown location or public Wi-Fi, OneLogin by One Identity can automatically require stronger authentication. This adds a subtle but powerful layer of security without complicating day-to-day logins. It's ideal for remote work, travel, or working from shared spaces. Since implementing OneLogin by One Identity, the biggest positive change I've noticed is how much smoother and faster my workday feels. I no longer juggle multiple passwords or get stuck waiting for access to tools. Logging in once and instantly opening Google Ads, HubSpot, Looker, Slack, and everything else has easily saved me 15 to 20 minutes a day. Another major improvement is clean, consistent permissions. There are no more access denied issues or chasing IT for fixes. When someone joins or leaves the team, their access is handled automatically, which keeps everything secure and organized. Overall, OneLogin by One Identity has reduced small daily frustrations, improved security, and made my workflow far more efficient. Other impacts of OneLogin by One Identity include fewer IT tickets, faster onboarding, consistent access, higher security, less downtime, and better collaboration.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"OAuth 2 is now the de facto standard for API protection and scoped authorized delegation. IBM TAM now supports OAuth 2 and can act as fully compliant OAuth 2 authorization server."
"Single Sign-On functionality is valuable because the core purpose of the product is to allow universal (or bespoke) SSO for application suites."
"The integration effort with the end application is quite straightforward and easy."
"The Verify feature: A push method which customers are going for."
"SAML 2.0."
"You can only log in if you have the access, which protects the applications by avoiding cross-site scripting."
"Its simplicity and its integration with various vendor-agnostic platforms are the most valuable features."
"The most valuable features of Okta Workforce Identity are MFA, and SSO, which have high security."
"There is no password hash saved on the cloud, which is the part that I like the most."
"The solution can scale very well."
"The end user's ease of use is the most valuable feature."
"Okta Platform has positively impacted our organization because our staff can connect to all tools and applications we use from a single location, which has saved us time."
"Okta controls all the users. It has context-based access from the user and type of device. It identifies the risk and can do a step of authentication when that user is trying to access some sensitive application from an unknown device."
"Since implementing OneLogin by One Identity, the biggest positive change I've noticed is how much smoother and faster my workday feels."
"One aspect I particularly appreciate is their exceptional customer support whenever I've needed assistance."
"OneLogin is a great password management solution that adds security to all our business applications and consolidates password management, saving time and costs."
"OneLogin has transformed the way I handle security and user logins within my team."
"It's super useful to have a single pane of glass when it comes to access management."
"OneLogin is easy to use and manage, which is one of the best features."
"The solution's ability to save and manage of all my passwords is great."
"The best feature of OneLogin is the mapping feature, which stands out as the most beneficial, as the mapping works better in OneLogin, allowing me to sync users from Google Group to OneLogin role, which is crucial for role access for end users and new service requests."
 

Cons

"An Amazon Machine Image (AMI) for the newer appliance versions for hosting the virtual appliances on AWS will help."
"The self-service portal needs improvement."
"Looking at their roadmap, they have a broad grasp of the security features which the industry needs."
"Multi-factor authentication with social integration needs to improve."
"The profiling element is incredibly robust, but also equally as complex, it requires an off-site course to be able to understand the context or the plethora of options available."
"It is challenging to obtain a comprehensive backup."
"Okta should have at least a local peering partner for countries that align with or comply with GDPR, so there are no compliance or audit questions."
"On the admin side, we can create our own passwords instead of generating one, which is usually difficult to explain to a user."
"The solution lacks an on-premises deployment model so it can't offer a hybrid solution. It would be ideal if clients had options that weren't just cloud-based."
"The lifecycle management part can be improved. It should also have identity governance and the ability to choose a specific factor authentication at the application level. Its licensing and pricing can also be improved."
"I would like to see the provisioning simplified."
"The error logging could be improved. Okta doesn't provide enough details when you are troubleshooting an issue. It's often difficult to fix it from our end, so we always need additional support from Okta."
"It's not compatible with on-premises installations, unless you host it as a SaaS. We were not able to do that. For example, imagine a scenario where the cloud is not available. Then, Okta will not work for you. That use case will readily fail because it doesn't have an on-premises installation that you can use to authenticate or provide identity and access management. If you have a purely on-premises solution that is not connected to the internet, then this will not work. This is one area that can be improved."
"More off-hour support."
"This product doesn't necessarily provide us with all of the functionality that we need, such as being able to share passwords with external users."
"In terms of managing the users on a large scale, it would be easier if they had some kind of user management portal."
"OneLogin offers a Virtual LDAP feature that we utilize, although it differs slightly from traditional LDAP servers."
"OneLogin needs to increase the number of connectors available out of the box to connect to the different endpoints. The number of out-of-box connectors should be increased."
"However, the downfall rests with the lack of an on-premises solution or cloud in some areas, which prevents OneLogin from accessing some significant markets. Additionally, the weakness of their CIAM module is a concern."
"The solution keeps going down for many hours, which impacts the entire company. You can't access any applications. OneLogin Desktop has a huge problem where it locks your computers and you need to reset the whole computer, which is pretty insane."
"The user interface and the integration with third-party applications could use some work, as could enhancing the reporting and analytical features."
 

Pricing and Cost Advice

"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."
"The solution’s pricing needs to be reasonable. You are dealing with a lot of components and the pricing is component-based."
"It has a yearly subscription. As compared to its competitors, it is quite expensive. It also has a complex licensing model."
"The licensing is per user per month and includes full technical support."
"The solution is not the cheapest but not the most expensive. They are in the middle rating."
"The cost per user for this solution is really high and could be reduced."
"The price of the solution is fair for what it offers."
"Workforce Identity is well-priced."
"Okta has fairly competitive pricing."
"OneLogin's pricing, from the perspective of the education sector, seems quite reasonable for the value it delivers."
"Surprisingly expensive given the price of on-premise solutions."
"While I wish OneLogin's pricing was more affordable, their licensing model, which is based on per user, is acceptable."
"It was cheap in the beginning, and then it became very expensive. We were initially charged $2 per user per month, which was fine, but by the second year, they increased it to $5 per user. That became very expensive for us because we had about 1,500 users. At $2 per user, it comes out to be $3,000 a month, which is $36,000 a year. If we move to $5 per user, it comes out to be $7,500 a month. That made its cost so high. That is why we removed the product because the cost was high."
"The pricing for OneLogin seems to be okay. The pricing and licensing are affordable. If you'd consider OneLogin to be expensive, it's worth it."
"The price of the licensing is fine."
"The pricing and licensing are reasonable. It is much cheaper than other products."
"We were happy with the price we got when we signed up, but I don't know what will happen when the time comes to renew because it is a different company now. We haven't seen any pricing models or had that discussion yet. My renewal is a year and a half away. It's worth what we're paying for it. There's no way we could provide the level of service for cheaper or try to do the same in-house."
report
Use our free recommendation engine to learn which Single Sign-On (SSO) solutions are best for your needs.
881,821 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Manufacturing Company
11%
Financial Services Firm
9%
Computer Software Company
9%
Educational Organization
6%
University
12%
Manufacturing Company
9%
Financial Services Firm
9%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise18
By reviewers
Company SizeCount
Small Business40
Midsize Enterprise21
Large Enterprise44
By reviewers
Company SizeCount
Small Business24
Midsize Enterprise11
Large Enterprise29
 

Questions from the Community

Ask a question
Earn 20 points
What do you like most about Okta Workforce Identity?
Okta has introduced the Universal Directory. It has custom attribute capability and user permissions to read/write on...
What is your experience regarding pricing and costs for Okta Workforce Identity?
Pricing for Okta is reasonably not that much, however, I don't have access to the commercial aspect.
What needs improvement with Okta Workforce Identity?
Currently, in Okta Workforce Identity we get the two-digit authentication code. Instead of getting the two-digit auth...
What needs improvement with OneLogin by One Identity?
OneLogin is a robust platform, but there is scope for improvement as there are some glitches, connectivity glitches, ...
What is your primary use case for OneLogin by One Identity?
My main use case for OneLogin is app aggregation and SSO. I use OneLogin for app aggregation, which is utilized for a...
 

Also Known As

Tivoli Access Manager, IBM Security Access Manager
Okta Customer Identity, Workforce Identity
OneLogin Workforce Identity
 

Overview

 

Sample Customers

Essex Technology Group Inc.
FedEx, Zoom, Takeda, Lululemon Athletica, GrunHub, jetBlue, McKensson, Bain & Company, Engie, Peloton, Sonos, T-Mobile, Hewlett Packard, MGM Resorts, Ally Financial, Priceline, Albertsons, Itercom, Classy, FICO, Kensho, Live Nation, Drata, Rotary, and others.
OneLogin has thousands of customers across multiple industries and from around the globe such as Uber, Airbnb, Noom, Petco, Sony, Lucky Brand, Tesco, Airbus, Japan Airlines, Aetna, Compass, Kaplan, Susan G. Komen, AAA and PennyMac.
Find out what your peers are saying about Microsoft, Okta, Cisco and others in Single Sign-On (SSO). Updated: January 2026.
881,821 professionals have used our research since 2012.