IBM Tivoli Access Manager [EOL] vs One Identity Manager comparison

IBM and One Identity are both solutions in the Identity Management (IM) category. Additionally, 93% of IBM users are willing to recommend the solution, compared to 91% of One Identity users who would recommend it.

IBM Tivoli Access Manager [...

Read 29 IBM Tivoli Access Manager [EOL] reviews

93% willing to recommend

One Identity Manager

Read 136 One Identity Manager reviews

7,806 Views
6,011 Comparison Views

91% willing to recommend

IBM Tivoli Access Manager [...

One Identity Manager

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between IBM Tivoli Access Manager [EOL] and One Identity Manager based on real PeerSpot user reviews.

Find out what your peers are saying about SailPoint, Microsoft, One Identity and others in Identity Management (IM).

To learn more, read our detailed Identity Management (IM) Report (Updated: January 2026).

Buyer's Guide

Identity Management (IM)

January 2026

Download the complete report

Helped 881,757 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

IBM Tivoli Access Manager [...

Average Rating

8.0

Reviews Sentiment

3.8

Number of Reviews

Ranking in other categories

No ranking in other categories

One Identity Manager

Average Rating

8.2

Reviews Sentiment

6.7

Number of Reviews

136

Ranking in other categories

User Provisioning Software (1st), Identity Management (IM) (3rd)

Featured Reviews

it_user711612

Senior Consultant at a insurance company with 1,001-5,000 employees

Reverse proxy provides central control over authentication and authorization.

It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…

Read full review

reviewer2538840

Senior identity and security specialist at a pharma/biotech company with 1,001-5,000 employees

Highly flexible and stable, but lacks in many aspects and requires a strong partner

In terms of providing a single platform for enterprise-level administration and governance of users, data, and privileged accounts, One Identity is not yet there. One Identity recently bought OneLogin. They already had Safeguard and One Identity Manager. They have started integrating these three tools. I am also on the customer advisory board (CAB) of One Identity, so I have more insight into these things. I know that they started to integrate OneLogin and One Identity just recently. OneLogin is their access management tool. They use it for authentication and for SSO. It is a competitor for Entra and Okta, whereas Safeguard is competing with CyberArk, Delinea, and BeyondTrust. One Identity has indeed done good integration between their three products. However, the platform is not unified. You still need three URLs, which is not optimal. They are going there, but it will take them time. The second thing they are not yet good at is their SaaS offering. They are behind in the market. They started with something in Safeguard, but it is a pretty basic offering. It is still a new baby. They have Safeguard On Demand, but it is just a hosted PAM solution. I did PoC for Safeguard twice. This is how I know this, but I have not used it. As PAM, Safeguard is a good product, but it is not a full-featured PAM like CyberArk or BeyondTrust. They are lacking in that aspect. The integration between One Identity's products is similar to BMC's integration. I used to work with BMC products such as BMC Remedy ten years ago. I used to be an ITSM or Control-M guy. When BMC integrated its products, the integration was not well done. It was like two different entities trying to integrate with each other rather than one company giving you a fully-fledged platform. The same thing is happening with One Identity Manager at the moment. They are selling it as a unified platform, but in my opinion, it is not yet good. It is also not bad. There are things that I can take from it, but there is no complete picture. The problem nowadays is that vendors are getting into each other's areas. For example, CyberArk used to be just a PAM provider, so people would integrate with it, but now, CyberArk wants to do the identity bit. It has now become a competitor for other vendors, so they will stop integrating with it. SailPoint, at some point, stopped integrating with CyberArk. SailPoint and CyberArk's integration was good. This is what is happening in the market or between vendors. All of them are getting into each other's area. If you happen to buy another product from a competitor, you need to integrate it on your own. There is no integration plug-in concept between them. This is a bit hard for companies that already have a PAM and they want to buy a new IGA, for example, or vice versa. They are trying to shift towards an Angular-based platform for their web portal or for IT Shop. That has been very long overdue because they did not modernize their web portal for almost three versions. They are doing it, but there is no feature parity till version 9.3, which is the upcoming version. This is a problem. For example, data governance is not included in 9.2 if you want to upgrade, but if you do not upgrade, you lose support. They have these issues with the roadmap in general. They give you options, but they are not always the complete options. To me, it seems that this company is going to suffer in the long run. Another issue is that for admin requests, we have to configure the tool at least in seven different clients, which is unacceptable. We are in 2024, not in 1981 or 1985. Having seven clients for the same tool, or more, is just unheard of. To me, that is a very old design idea. I am on the newest version 9.2, and I am still doing that. To me, that is a big problem as an admin. The relationship with the customers is extremely bad. That is not a technical problem. That is a company problem. They tried to fix that, but it seems they failed. They do not have the personnel. They have a hiring problem. They now rely on partners. They are a type of company where the partner is more of a vendor to you as a client rather than the company itself. If you want to pick any solution by One Identity, you need a very strong partner with you. If you do not, you will struggle with this product's adoption, roadmap, vision, and implementation. We struggle a lot as a client. I have been there. I have seen that. It is not easy with them. One Identity is based in Europe. Our account manager at One Identity resigned in May and till now, just to show how bad they are, we do not know who our new account manager is. We are in August. Their Starling Connect roadmap or flagship is a failure. We had to withdraw from using it with SuccessFactors, for example. It had a lot of stability issues. Now, my understanding is better, but it caused a bad implementation, so we are not using it. They are not investing a lot in enhancing or extending Starling Connect. They are using Starling Connect as a propagation gateway to SaaS apps so that you have One Identity Manager on-prem talking to Starling Connect which is handling all SaaS apps. However, the roadmap for Starling Connect is not clear. Now that they have bought OneLogin, OneLogin can do that as well as an IAM tool. You can now bring any IAM or CIAM tool such as Entra, Okta, or OneLogin. They can be your propagation gateway. OneLogin and Starling Connect are competing products, and they need to unify them. They cannot have both products doing the same thing. When I discussed this with the head of engineering from their side, they were still defending having Starling Connect. I do not understand why because if you have a proper IAM such as Entra or Okta, that is your propagation gateway. That is it. You can do everything you want with it. You can merge the functionality, and that is it. You do not need Starling Connect. To me, this is confusing. You use a propagation gateway like Starling Connect because it has ready plug-ins to connect to SaaS apps and you do not need to create a custom connector every time. If you look at the number of apps that One Identity supports with Starling Connect, there are not more than 50, which is not a lot. There is a big difference when you compare it to Okta Marketplace or Entra Marketplace. You will immediately understand the difference. OneLogin's marketplace is better than Starling Connect, but OneLogin was not a part of One Identity before, so they had their own marketplace. Overall, the Starling Connect roadmap does not make sense to me. They need to remove the dependency on VB.NET for backend development and they need to unify the front end. If they are selling it as a unified product, they need to give me a unified UX. This is something I have mentioned to Mark Logan himself. This is how ServiceNow won over Remedy. Having a unified UX and being able to turn on or off a feature is better than trying to connect three or four different products with different contracts. To me, the main thing is that they need to modernize their application. Once we do that, making it SaaS is doable.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Single Sign-On functionality is valuable because the core purpose of the product is to allow universal (or bespoke) SSO for application suites."

"SAML 2.0."

"OAuth 2 is now the de facto standard for API protection and scoped authorized delegation. IBM TAM now supports OAuth 2 and can act as fully compliant OAuth 2 authorization server."

"The Verify feature: A push method which customers are going for."

"The integration effort with the end application is quite straightforward and easy."

"One Identity is one of the most feature-rich platforms on the market. It covers every use case. The user interface has been improved, making it easier to make it look like what customers want. It's easier to customize than a lot of competition solutions. There are nearly a thousand built-in processes that you can edit and customize according to your needs."

"The most valuable feature of One Identity Manager is its object-oriented architecture."

"I greatly appreciate the initial approach provided by One Identity Manager."

"With this product, we been able to bring together HR, IT, and lifecycle management. It is very helpful for managing the Joiner/Mover/Leaver process. We also use it for compliance on all the audits which are around."

"One Identity Manager has positively impacted the organization by reducing account creation and access approval times from days or weeks to minutes or hours through automated workflows."

"One Identity Manager's most valuable asset is the ability to customize its front-end website."

"For me, personally, the automation is the most valuable feature. I don't have to do things manually, like creating user accounts and provisioning them to the target systems."

"The One Identity birthright process has helped generate user accounts more accurately and quickly."

More One Identity Manager pros

Cons

"Multi-factor authentication with social integration needs to improve."

"The self-service portal needs improvement."

"An Amazon Machine Image (AMI) for the newer appliance versions for hosting the virtual appliances on AWS will help."

"The profiling element is incredibly robust, but also equally as complex, it requires an off-site course to be able to understand the context or the plethora of options available."

"Looking at their roadmap, they have a broad grasp of the security features which the industry needs."

"One Identity Manager can be improved because implementation and administration require specialized knowledge, and deployment efforts can be significant."

"One Identity Manager's documentation is something they can improve, and I believe much of this is related to translation since it is a German company."

"The support model has room for improvement, especially when compared to competitors like Omada and SailPoint, which offer a more extensive global presence and support network."

"There are occasional issues with the UI or errors when servers are not up and running, often requiring a restart from cache memory and other related areas."

"Transitioning from legacy technologies, like for a seasoned web designer moving to Angular, can be challenging and requires dedicated learning."

"I also find it difficult to add resources to the business roles because we have to use many options in One Manager for that. We have to add it to the IT shop so that the users can submit requests through the web portal, and we must generate that IT shop structure to add resources to the business. There is a lot of complexity in that."

"One Identity could add more connectors for various services we integrate. We need to build and configure custom connectors for our clients with complicated environments and multiple data streams."

"Having new features for web developers in the One Identity Manager shop is an area for improvement. Another area for improvement in the tool is its ServiceNow connection as ServiceNow is a major ITSM system player, but the current out-of-the-box feature proposed by One Identity Manager can only make simple incident requests to the system. My company is now in full ICL design, so it prefers for all concerns or requests to be sent properly to ServiceNow, so my company can have better control over the incident requests and be able to sort those out. The tool fits all my needs today, except for the ServiceNow connector. That's the only additional feature I'd like to see in the next release of One Identity Manager."

More One Identity Manager cons

Pricing and Cost Advice

"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."

"My clients have been using it for a long time now. They have looked at other products as well, so it seems worth the price."

"One Identity Manager is fairly priced."

"It was okay for us. It was not too much for us. It was nearly the same as other products. It was not expensive."

"There are old processes that are really great for some people and look like pieces of artwork. However, the maintenance of them is really expensive."

"The price of One Identity Manager is cheaper than SailPoint."

"The licensing for One Identity Manager is per user, per carbon life, specifically, it's per people, and not a per-identity licensing model. For example, if I have two hundred people, or if I have someone with several identities, I'm only paying for it once. I don't remember the exact cost of One Identity Manager because I wasn't the one who paid for the license."

"I am aware of the cost. For us, it is quite cost-efficient. We have a good enterprise license agreement, and we are very happy with what we get for the price we pay for it."

"You get a lot of bang for your buck with One Identity. It has many features that are included in the standard IGA license. Most people who are considering buying One Identity don't understand how much power is behind it in engines."

More One Identity Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Identity Management (IM) solutions are best for your needs.

See recommendations

881,757 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Financial Services Firm

12%

Manufacturing Company

Computer Software Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	2
Large Enterprise	18

By reviewers
Company Size	Count
Small Business	46
Midsize Enterprise	19
Large Enterprise	90

Questions from the Community

Ask a question

Earn 20 points

What do you like most about One Identity Manager?

The One Identity birthright process has helped generate user accounts more accurately and quickly.

See all answers

What is your experience regarding pricing and costs for One Identity Manager?

The licensing and setup cost is on the higher side, but it is delivering more features. The pricing is worth it.

See all answers

What needs improvement with One Identity Manager?

One Identity Manager could be improved with more modern features such as artificial intelligence or faster workflow configuration for complex environments, expanded out-of-the-box integration with ...

See all answers

Comparisons

SAP Identity Management vs IBM Tivoli Access Manager [EOL]

Compared 38% of the time

CyberArk Endpoint Privilege Manager vs IBM Tivoli Access Manager [EOL]

Compared 31% of the time

Comarch Identity and Access Management vs IBM Tivoli Access Manager [EOL]

Compared 31% of the time

More IBM Tivoli Access Manager [EOL] Competitors

SailPoint Identity Security Cloud vs One Identity Manager

Compared 18% of the time

Microsoft Entra ID vs One Identity Manager

Compared 11% of the time

One Identity Active Roles vs One Identity Manager

Compared 7% of the time

Microsoft Entra ID Protection vs One Identity Manager

Compared 5% of the time

EVOLVEUM midPoint vs One Identity Manager

Compared 4% of the time

More One Identity Manager Competitors

Product Reports

Buyer's Guide

IBM Tivoli Access Manager [EOL]

January 2026

Download IBM Tivoli Access Manager [EOL] product report

Buyer's Guide

One Identity Manager

January 2026

Download One Identity Manager product report

Also Known As

Tivoli Access Manager, IBM Security Access Manager

Quest One Identity Manager

Overview

IBM Tivoli Access Manager is a robust and secure centralized policy management solution for e-business and distributed applications. IBM Tivoli Access Manager WebSEAL is a high performance, multi-threaded Web server that applies fine-grained security policy to the Tivoli Access Manager protected Web object space. WebSEAL can provide single sign-on solutions and incorporate back-end Web application server resources into its security policy.

IBM

One Identity Manager is a value-added and trusted active directory management and user provisioning software solution. One Identity Manager administers and protects an organization’s data and users, minimizes threats, and ensures that compliance regulations are consistently satisfied.

Users will have access to the data and applications they need when they need them. One Identity can be used on premises, in the cloud, and also with hybrid options. One Identity Manager is able to easily combine strict governance compliance regulations and rigorous security protocols to keep business enterprises secure and functional today and into the future. One Identity Manager is also a robust, scalable identity governance and administration (IGA) solution. The solution is designed to meet the changing needs of a growing dynamic business enterprise, and not be limited or left vulnerable by IT department constricts.

One Identity consistently provides robust security solutions that facilitate a strong secure enterprise where the users, applications, and critical data are safe and secure. The unified identity security platform provides identity governance and administration (IGA), privileged access management (PAM), active directory management and security (ADMS), and identity and access management (IAM) processes to ensure an aggressive stance on security for today’s dynamic enterprise organizations.

One Identity is used by more than 11,000 organizations worldwide managing over five hundred million plus identities.

One Identity Manager Features

Self-service options: Organizations save time and are able to get tasks completed easily. Users can request permissions or access and receive predetermined approval based on role assignments.
Password management: Organizations can easily reset user passwords based on established organizational protocols. Password policies can be determined according to user roles and assignments.
Governance: One Identity Manager offers complete visibility regarding data access, such as who has access, when the access was given, and the reasons why access was given. The solution delivers clear reporting to comply with any regulatory requirements.
SAP certified: Users are able to amplify existing SAP security protocols and seamlessly connect accounts under governance. One Identity Manager is a complete identity access solution.
Reporting: One Identity Manager delivers reliable reporting regarding user access and privileged access to an organization's network. The reporting can satisfy all government and regulatory compliance standards.
Connectors: One Identity Manager’s significant amount of available connectors enable organizations to easily extend identity governance to the cloud and will ensure cloud application time is minimized significantly.

Reviews from Real Users

“The initial setup process for an employee is straightforward. We set up processes for user accounts and we can add other processes to them. Our goal is to automate all user-permission and user-administration processes with One Identity and we are doing that more and more.” - Marc H., IT Architect at a tech services company

“The most valuable features are that it has a lot of capabilities, can integrate with a lot of systems, including automated onboarding like CyberArk, and allows you to integrate different entities.” - Security Consultant at a financial services firm

One Identity

Sample Customers

Essex Technology Group Inc.

Texas A&M, Sky Media, BHF Bank, Swiss Post, Union Investment, Wayne State University. More at OneIdentity.com/casestudies

Buyer's Guide

Identity Management (IM)

January 2026

Download Free Report

Find out what your peers are saying about SailPoint, Microsoft, One Identity and others in Identity Management (IM). Updated: January 2026.

DOWNLOAD NOW

881,757 professionals have used our research since 2012.

See our list of best Identity Management (IM) vendors and best User Provisioning Software vendors.

We monitor all Identity Management (IM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.