Try our new research platform with insights from 80,000+ expert users

Keeper vs One Identity Active Roles comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.1
Keeper enhances password security and efficiency, reducing retrieval time, offering significant value and aligning well with business needs.
Sentiment score
7.4
One Identity Active Roles enhances efficiency and security, reduces workload and risks, delivering quick returns and increased user satisfaction.
From a pricing perspective, although it was more expensive than the competition, the price-performance ratio was perfect for our business needs.
One Identity Active Roles provides excellent reporting and auditing functionality, allowing administrators to track permissions, actions, and responsibilities effectively.
It has saved 90% of the time compared to before.
 

Customer Service

Sentiment score
7.6
Users praise Keeper's customer service for its reliability, quick response, knowledgeable support, and high-quality issue resolution.
Sentiment score
7.7
One Identity Active Roles support is responsive and effective, with occasional delays; users rate it between seven and ten.
It was perfect, and I had no reason to complain.
Sometimes having a fix for a bug takes too much time.
One Identity's support is great.
I rate customer service and support as a seven because, although they are helpful when needed, there can be delays in responding to tickets and finding necessary fixes.
 

Scalability Issues

Sentiment score
8.4
Keeper effectively scales from small groups to large organizations, handling growth smoothly, with most users experiencing positive scalability.
Sentiment score
7.8
One Identity Active Roles is scalable for large user bases, efficiently managing multiple directories and automating tasks.
The solution is highly scalable, with a scalability rating of nine.
It is very beneficial for large and complex environments.
If you are a major enterprise customer, it is a matter of scaling out on resources with more memory, disk, and CPU power.
 

Stability Issues

Sentiment score
8.6
Keeper is praised for reliability, with no data loss or downtime, earning high ratings for stability and long-term use.
Sentiment score
7.4
One Identity Active Roles is generally stable with minimal maintenance, but occasional performance lags and updates are needed.
There were no major problems with One Identity Active Roles.
We haven't had any glitches.
The stability of One Identity Active Roles is rated seven.
 

Room For Improvement

Users want Keeper improvements in UX, integration, customization, stability, support, pricing, offline access, and API and import capabilities.
One Identity Active Roles needs better web interface customization, scripting support, integration, user interface scalability, and improved workflows and security.
Enhancements to the console are also necessary because it is more confusing than the web interface.
One area for improvement would be the Entra ID side, including better delegation for Entra ID objects and more granular permissions.
The user interface needs to be more modern and scalable.
 

Setup Cost

Keeper offers reasonable, scalable pricing with discounts and plans that align with business needs, providing justified security benefits.
One Identity Active Roles uses a user-based licensing model with high costs but offers significant ROI and flexibility.
The solution was more expensive than the competition, but considering our business needs, it was perfectly aligned with the price-performance aspect.
It is quite expensive, costing more than 50 euros per identity.
The pricing of One Identity Active Roles is expensive, but the return on investment justifies the cost, allowing for savings in other areas.
The pricing is high.
 

Valuable Features

Keeper offers secure password management with two-factor authentication, AES-256 encryption, and multi-platform access, enhancing user convenience and security.
One Identity Active Roles enhances security and management with robust access control, automation, integration, and centralized directory management.
The ability to share credentials easily and securely was a big improvement.
It's improved our security posture. It has limited access to our crown jewels, where all our identities lie within Active Directory.
It helps in removing custom Active Directory delegation, which enhances security by eliminating unnecessary privileges, addressing identity-based breaches by reducing the number of Active Directory delegations.
The Angular user interface is much more flexible for adjusting to customer needs, and a completely new and customizable one can be created, aligning with all settings and scripts required by a customer.
 

Categories and Ranking

Keeper
Average Rating
9.2
Reviews Sentiment
7.9
Number of Reviews
33
Ranking in other categories
Enterprise Password Managers (10th)
One Identity Active Roles
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
25
Ranking in other categories
User Provisioning Software (5th), Active Directory Management (2nd), Non-Human Identity Management (NHIM) (5th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Keeper is designed for Enterprise Password Managers and holds a mindshare of 4.0%, up 3.7% compared to last year.
One Identity Active Roles, on the other hand, focuses on Active Directory Management, holds 6.8% mindshare, down 7.8% since last year.
Enterprise Password Managers
Active Directory Management
 

Featured Reviews

Parwiz ElmJo - PeerSpot reviewer
It's an inexpensive, scalable solution that has improved our security
We use Keeper to store passwords We previously kept our passwords in an Excel file. Using Keeper makes us more secure.  Keeper has strong security features.  The password rotation feature could be improved. I have used Keeper for three years. I rate Keeper eight out of 10 for stability.  I…
Grzegorz Kosela - PeerSpot reviewer
Task automation simplifies user and delegation management while offering a customizable interface
Currently, task automation, like provisioning, deprovisioning, and reprovisioning, is very effective. When a user moves from one organization to another, it automatically changes their group membership and performs similar functions. Secondly, the granular delegation feature is very nice and much simpler and easier than it is natively in Microsoft. Two years ago, One Identity Active Roles was under Dell. It was quite poor. However, now, there have been notable improvements, such as faster system processing, better logging, enhanced information, and a more user-friendly interface. Once it was sold by Dell, things got better. The interface became a bit more user-friendly. The Angular user interface is much more flexible for adjusting to customer needs, and a completely new and customizable one can be created, aligning with all settings and scripts required by a customer. The ease of managing on-prem and cloud-based directories through a single pane of glass is good. I'd rate it nine out of ten. The solution's ability to provision and deprovision resources and directories like Azure AD is very simple, especially when you can integrate with the HR system and grab some data from HR. It's actually fully automatic. I don't need to even touch it. It's helped increase operational efficiency by 50%. It's helped decrease security problems around privileged accounts. We were able to decrease the number of privileged accounts and have been able to delegate more effectively. We decreased the number of high-level permissions that administrators had. For example, if someone is a DNS administrator, he has access only as far as the specific actions he needs to handle. We don't need to give away such high privileges for such a daily job. It's helped clarify roles and access. It's helped reduce identity-based breaches. If someone leaves a company, we can easily undo provisioning and close accounts. We can generate reports to see which people have which permissions and at what times. We've just integrated with our HR system. It helps us follow activated and deactivated users. I'd rate the granular controls on offer ten out of ten. We've saved on manpower in terms of the work of the administrators. There's good reporting and functionality, and it's very transparent. You can connect more than one directory and manage everything from one pane. You can do many things from one interface.
report
Use our free recommendation engine to learn which Enterprise Password Managers solutions are best for your needs.
850,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Manufacturing Company
10%
Financial Services Firm
10%
Government
6%
Computer Software Company
17%
Financial Services Firm
12%
Healthcare Company
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Keeper?
I like the tool's keyword editor and SSO.
What is your experience regarding pricing and costs for Keeper?
The solution was more expensive than the competition, but considering our business needs, it was perfectly aligned with the price-performance aspect.
What needs improvement with Keeper?
There is no improvement needed. Everything was good, and it was perfect for my needs.
What is your experience regarding pricing and costs for One Identity Active Roles?
The product is expensive, but if you want to save money, the delegation set-up process is quite easy. After setting up Active Roles once, defining the delegation model, it is very efficient, almost...
What needs improvement with One Identity Active Roles?
One area for improvement would be the Entra ID side, including better delegation for Entra ID objects and more granular permissions. We would also like to see better Entra ID license management usi...
 

Also Known As

Keeper Security
Quest Active Roles
 

Overview

 

Sample Customers

At&t, Wells Fargo, Disney, GM, Chase, Honeywell, Samsung, Dow
City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Find out what your peers are saying about Microsoft, CyberArk, Amazon Web Services (AWS) and others in Enterprise Password Managers. Updated: April 2025.
850,747 professionals have used our research since 2012.