Try our new research platform with insights from 80,000+ expert users

IBM Tivoli Access Manager [EOL] vs One Identity Active Roles comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Tivoli Access Manager [...
Average Rating
8.0
Reviews Sentiment
3.8
Number of Reviews
29
Ranking in other categories
No ranking in other categories
One Identity Active Roles
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
34
Ranking in other categories
User Provisioning Software (3rd), Active Directory Management (1st), Non-Human Identity Management (NHIM) (4th)
 

Featured Reviews

it_user711612 - PeerSpot reviewer
Senior Consultant at a insurance company with 1,001-5,000 employees
Reverse proxy provides central control over authentication and authorization.
It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…
IO
Cybersecurity Consultant at CyberBackbone
One Identity Active Roles makes it easier to maintain a detailed auditing workflow
I want One Identity Active Roles to improve in the area of user interface, modernizing it to feel more like a SaaS tool and to have user-friendly navigation. I also want One Identity Active Roles to improve in their policy configuration area, which requires advanced expertise, and in the area of reporting, I want the reporting to be more basic, visible, and have the ability to export and customize options. The areas needing improvement for One Identity Active Roles include the reporting, the dashboard, and simple policy configuration. I would appreciate improvement in policy configuration and making the reporting system more basic for user interface usage.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The SSO, URL-based access control, OAuth 2 and OIDC are the most valuable features."
"The integration effort with the end application is quite straightforward and easy."
"Capabilities of advanced security are enhanced to support strong, flexible authentifications and authentications based on risks as well as critical internet vulnerabilities."
"Provided more secure computing."
"This product is highly recommended to meet access management and web single sign-on requirements."
"Single Sign-On functionality is valuable because the core purpose of the product is to allow universal (or bespoke) SSO for application suites."
"Before the solution was implemented it took around 2-3 weeks to get all the necessary account information for a new employee in my organization, and since implementation this now only takes a few minutes."
"Tivoli Access Manager (or IBM Security Access Manager) is a fully featured web authentication, sso and authorization product."
"The solution is stable."
"The most valuable features include auditing, dynamic grouping, and creating dynamic groups based on AD attributes."
"I advise others looking into using One Identity Active Roles to utilize it because the automation in workflow is perfect, and the ability to provide detailed auditing and assist in internal audits is excellent."
"The ease of managing on-prem and cloud-based directories through a single pane of glass is good."
"Instead of deleting accounts, we like the deprovision option so that we can reverse any accidental deletions. It also gives a higher level of quality control in terms of enforcing any number of variables, such as making sure that an account has a description entered before the account can be created. We can backtrack and know the history of it that way."
"It provides automatic provisioning/update/deprovisioning workflows from a source system to a target system."
"With the use of the sync service we were able to import information from multiple external systems and populate them within our space and leverage them for downstream systems."
"The provisioning and deprovisioning saves a lot of time and skips a lot of errors."
 

Cons

"The license model is pretty complex."
"The initial set-up is a bit complex for a novice as the Linux version of it needs you to be somewhat good with Linux."
"Multi-factor authentication with social integration needs to improve."
"I have not tested the stability yet."
"Multi-factor authentication with social integration needs to improve."
"An Amazon Machine Image (AMI) for the newer appliance versions for hosting the virtual appliances on AWS will help."
"The profiling element is incredibly robust, but also equally as complex, it requires an off-site course to be able to understand the context or the plethora of options available."
"The product has not been updated with emerging technologies over the years specifically around AJAX, REST and Mobile app integration."
"The user and group management in Azure AD could be better. Our focus these days is dynamic sharing with several on-prem Microsoft applications like SharePoint."
"One Identity Active Roles can be improved by simplifying the setup process since a small team in a small business requires implementation without extensive IT support."
"We're pulling the identity components out because ARS is not an identity platform. It's not meant to be one. It's not robust enough to handle it all."
"I want One Identity Active Roles to improve in the area of user interface, modernizing it to feel more like a SaaS tool and to have user-friendly navigation."
"For the AAD management feature, it needs to improve the objects that we can manage and the security."
"I am not really satisfied with the customer support for One Identity Active Roles as the support is pretty limited."
"The initial setup was quite easy, but it was time-consuming. It took about three months."
"Most of the time it just works."
 

Pricing and Cost Advice

"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."
"The pricing is on the higher end."
"The licensing model is a simple user-based model, not that much complicated."
"It's expensive."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."
"It's fairly priced."
"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."
report
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
884,976 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
9%
Financial Services Firm
9%
Manufacturing Company
8%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise18
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise7
Large Enterprise21
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for One Identity Active Roles?
I am aware of the pricing; it is on the expensive side, though pricing is not my department.
What needs improvement with One Identity Active Roles?
One Identity Active Roles can be improved by simplifying the setup process since a small team in a small business requires implementation without extensive IT support. Additionally, the pricing cou...
What is your primary use case for One Identity Active Roles?
One Identity Active Roles is used primarily to simplify and automate Active Directory user and permission management. The solution automates routine tasks such as account creation, password reset, ...
 

Also Known As

Tivoli Access Manager, IBM Security Access Manager
Quest Active Roles
 

Overview

 

Sample Customers

Essex Technology Group Inc.
City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Find out what your peers are saying about SailPoint, One Identity, Omada and others in User Provisioning Software. Updated: March 2026.
884,976 professionals have used our research since 2012.