No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Tivoli Access Manager [EOL] vs One Identity Active Roles comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Tivoli Access Manager [...
Average Rating
8.0
Reviews Sentiment
3.8
Number of Reviews
29
Ranking in other categories
No ranking in other categories
One Identity Active Roles
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
60
Ranking in other categories
User Provisioning Software (3rd), Active Directory Management (1st), Non-Human Identity Management (NHIM) (2nd)
 

Featured Reviews

it_user711612 - PeerSpot reviewer
Senior Consultant at a insurance company with 1,001-5,000 employees
Reverse proxy provides central control over authentication and authorization.
It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…
Mahesh Malve - PeerSpot reviewer
Senior Business Development Executive at DigitalTrack Solutions Ind Pvt Ltd
Automation has transformed user lifecycle tasks and now enforces consistent secure access
While One Identity Active Roles is a strong platform, a few improvements would make it even better. Many users feel the user interface is not very modern or intuitive, and it can take time to get used to navigating the console and workflows. Another improvement area is the learning curve and setup complexity. One Identity Active Roles is very powerful, but initial configuration, especially for policies, workflows, and delegation, can be complex and require experienced resources. From an integration perspective, although it supports multiple systems, organizations would benefit from more out-of-the-box connectors and smoother cloud integrations such as Azure Active Directory and software-as-a-service applications, as some setups currently require customization. In terms of reporting, while auditing is strong, generating business-friendly reports can be challenging. Users have mentioned the need for better dashboards and easier report generation. There are also some performance considerations, especially in large environments, such as slower PowerShell execution or delays in dynamic group processing in certain cases. Overall, improvements in user interface, ease of use, integration, reporting, and performance optimization would significantly enhance the product experience.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is a simple-to-deploy solution, with many features that are supported out-of-the-box without complicated setup."
"The combination of TAM with IDM in IBM Tivoli Identity Manager helped us to realize robust and secure authentication infrastructure in accordance with industry regulations and laws."
"SAML 2.0."
"Single Sign-On functionality is valuable because the core purpose of the product is to allow universal (or bespoke) SSO for application suites."
"It is a good solution for anyone to take to their enterprise and get a buy in."
"TAM component integration and their SSO capabilities and transparency are the most valuable features I have found."
"This product is highly recommended to meet access management and web single sign-on requirements."
"The SSO, URL-based access control, OAuth 2 and OIDC are the most valuable features."
"One Identity Active Roles has had a very positive impact on our organization, mainly by improving efficiency and security at the same time."
"Active Roles provided us to do all these operations automatically and reduced our workload very significantly."
"Secure access is the most valuable feature."
"We have eased the burden on the support desk and reduced the risk of them doing something they shouldn't."
"Overall, it improves operational efficiency, strengthens our security posture, and simplifies identity and access management across the organization."
"The best part of this Active Roles is the workflow engine. It features an industry-leading workflow automation feature. It's a visual PowerShell that allows task interruption."
"One Identity Active Roles has made things more organized and secure across the company, and it has also reduced the need to contact IT administrators directly, saving time for both me and the IT staff."
"I highly recommend all organizations to consider this as one of the best solutions."
 

Cons

"The product has not been updated with emerging technologies over the years specifically around AJAX, REST and Mobile app integration."
"The self-service portal needs improvement."
"Sometimes, there are long running support tickets (for 6-8 months) and that is unacceptable from the customer's point of view."
"Older TAM versions are not compatible for connecting to a DB."
"Yes, because there are so many moving parts it can often be difficult getting it right first time."
"Web Portal Manager does not implement the full set of functions found in the command line"
"There were endless issues with stability in version 8.0.1."
"There is Java process that hangs in WebSphere almost every month."
"It's a fairly stable product but not perfectly reliable."
"Customer support is rated six. Sometimes having a fix for a bug takes too much time. While in production, issues tend to take a while to resolve."
"The user interface needs to be more modern and scalable. There are certain screen resolutions where the product is unusable."
"I've had a difficult time getting it to cooperate with Azure in the cloud and, while the support staff are very good and very knowledgeable, what they assist with just on a call doesn't go deep enough to help with a number of issues."
"Overall, One Identity Active Roles is a very powerful tool, but there are definitely areas where it can be improved."
"One Identity Active Roles is very useful, though there are a few areas where it could be improved, such as the user interface, policy creation, and reporting; it requires good knowledge of Active Directory."
"Scripting options in different languages."
"I want One Identity Active Roles to improve in the area of user interface, modernizing it to feel more like a SaaS tool and to have user-friendly navigation."
 

Pricing and Cost Advice

"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."
"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."
"The pricing is on the higher end."
"The licensing model is a simple user-based model, not that much complicated."
"It's fairly priced."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"It's expensive."
"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."
report
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
893,311 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
15%
Marketing Services Firm
14%
Outsourcing Company
11%
Financial Services Firm
9%
Outsourcing Company
19%
Financial Services Firm
8%
Computer Software Company
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise18
By reviewers
Company SizeCount
Small Business55
Midsize Enterprise12
Large Enterprise32
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for One Identity Active Roles?
I had a great experience with the setup cost, pricing, and licensing costs because the sales team of the vendor is really helpful during the entire procurement of the solution, and we are grateful ...
What needs improvement with One Identity Active Roles?
I do not see anything that needs to be changed as of now concerning the organization's needs because it is working very well and it is providing great features with great processes. The initial set...
What is your primary use case for One Identity Active Roles?
When a new user is created, predefined rules automatically apply naming standards and assigned groups. This reduces manual tasks while ensuring consistency across all operations. It prevents and av...
 

Also Known As

Tivoli Access Manager, IBM Security Access Manager
Quest Active Roles
 

Overview

 

Sample Customers

Essex Technology Group Inc.
City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Find out what your peers are saying about One Identity, SailPoint, Omada and others in User Provisioning Software. Updated: April 2026.
893,311 professionals have used our research since 2012.