

Identity Manager by One Identity and Active Roles by One Identity both compete in the identity management solutions category. Identity Manager seems to have an advantage when considering its extensive features and long-term ROI potential, while Active Roles excels in robust Active Directory administration and cost-effectiveness for immediate returns.
Features: Identity Manager offers comprehensive identity governance, automation of complex administrative tasks, and enterprise provisioning. It provides an extensive API for custom connectors, role-based access control, and strong integration capabilities with major systems like SAP, Active Directory, and cloud environments. Active Roles shines in automated user provisioning, role-based access control, and provides a single pane of glass for managing on-premises and cloud directories. It offers granular control over AD permissions, enhancing security and operational efficiency.
Room for Improvement: Identity Manager could improve in reducing its deployment complexity and enhancing user-friendliness for non-technical users. It also requires a careful setup of automation workflows to avoid errors, which could be more streamlined. Active Roles could benefit from expanded out-of-the-box integrations with newer SaaS applications and could further simplify its policy configuration process. Its UI might also be enhanced to reduce the learning curve for new users.
Ease of Deployment and Customer Service: Identity Manager provides flexible deployment options adaptable to diverse IT environments and offers reliable customer support but requires thorough configuration due to its broad capabilities. Active Roles focuses on seamless integration within Microsoft environments, facilitating straightforward deployment but might occasionally need expert guidance for complex customizations. Both solutions receive positive feedback for their customer support responsiveness.
Pricing and ROI: Identity Manager implies higher setup costs but justifies it with substantial ROI through automation and detailed governance features, suitable for organizations seeking long-term benefits. Active Roles offers a cost-effective initial setup resulting in quicker ROI, especially suitable for environments heavily reliant on Microsoft technologies. It appeals to budget-conscious organizations looking for immediate efficiency improvements.
One Identity Active Roles provides excellent reporting and auditing functionality, allowing administrators to track permissions, actions, and responsibilities effectively.
Automation has really reduced the time spent on user provisioning, access management, or access changes by around 40 to 60 percent, which has significantly improved team productivity.
User onboarding time reduced by around seventy to eighty percent, from thirty to forty-five minutes to under ten minutes.
Without it, we would need thousands of additional people.
Instead of spending on various systems, having one centralized system that handles all my organizational requirements helps save money.
Several users reported reduced onboarding and offboarding times by around 40% thanks to automated provisioning and de-provisioning.
They are ready to provide support at any time.
The support team is knowledgeable about the product and AD environments.
Support is usually responsive for critical issues and provides solid practical guidance for AD workflow problems.
If you have outages or critical production problems, you can count on the manufacturer to help resolve the situation.
They should focus on bringing in technically skilled individuals who understand the tools and technologies involved.
Compared to my experiences with other tools, their support is exemplary.
One Identity Active Roles works well in hybrid environments, handling both on-premises and cloud identities from a single platform.
It is commonly used in medium to large organizations managing complex Microsoft Active Directory and hybrid identity environments.
The platform can scale without needing a complete redesign.
It is architected so that key components can be scaled both horizontally and vertically to handle increasing loads from employee accounts to millions of external identities if needed.
Generally, if we need to add thousands of new users, we can ramp up container resources effectively.
It is highly scalable and capable of keeping up with the organization's growth needs, especially in the enterprise environment.
Overall, One Identity Active Roles has proven to be a stable, reliable, and well-suited solution for managing Active Directory at scale.
Overall, I consider One Identity Active Roles to be a stable solution, suitable for enterprise-grade environments.
Consistently performing for daily operations like automation and user management without major downtime reported.
One Identity Manager is considered stable and dependable for enterprise identity management with a strong track record of uptime and reliability when implemented correctly.
It is widely seen as stable in production once properly configured, especially for Active Directory automation, user provisioning, de-provisioning, and role-based delegation.
It has a strong core architecture, a reliable user lifecycle management engine, a strong workflow engine, and stable integrations with Active Directory, SAP, HR systems, and enterprise applications.
The current REST API feels like an afterthought, and my developers want the ability to operate through CI/CD pipelines instead of logging into the GUI.
Improving documentation and providing more guided implementation resources would help organizations accelerate deployment and reduce dependency on external support.
Stronger, more seamless integration with cloud and hybrid environments like Azure AD, along with enhanced real-time reporting dashboards and easier troubleshooting tools, would help in faster issue resolution and a better overall administration experience.
This lack of 24-hour support is problematic from a testing and development standpoint.
It is crucial for them to expand their support team to match their product's success.
When it comes to privileged access management, we need to know who has access to what, which is the central problem we want to solve.
It is quite expensive, costing more than 50 euros per identity.
I think our total was in the seven-figure range for a couple of years of service.
The initial investment includes licensing, infrastructure setup, and implementation effort, with licensing typically based on the number of managed users or accounts, which can increase costs in large environments.
On-premises might incur higher costs.
We have a good enterprise license agreement, and we are very happy with what we get for the price we pay for it.
Many customers find it fair and reasonable for enterprise use, though it can be expensive for smaller organizations due to total licensing and implementation cost.
It's improved our security posture. It has limited access to our crown jewels, where all our identities lie within Active Directory.
It helps in removing custom Active Directory delegation, which enhances security by eliminating unnecessary privileges, addressing identity-based breaches by reducing the number of Active Directory delegations.
Dynamic groups are also one of the best features, eliminating the need to add or manage members manually.
It ensures high security through multiple approval processes, preventing unauthorized access and enhancing compliance by providing time-based access for privileged accounts with proper audit trails.
It continuously monitors user behavior in real-time, triggering automated responses, and manages secure access for both on-premises and cloud applications using protocols such as SAML.
Once you have some experience, it demonstrates best practices and guides you on the correct way to use the tool.
| Product | Mindshare (%) |
|---|---|
| Identity Manager by One Identity | 8.8% |
| Active Roles by One Identity | 4.8% |
| Other | 86.4% |


| Company Size | Count |
|---|---|
| Small Business | 99 |
| Midsize Enterprise | 19 |
| Large Enterprise | 46 |
| Company Size | Count |
|---|---|
| Small Business | 119 |
| Midsize Enterprise | 38 |
| Large Enterprise | 128 |
One Identity Active Roles enhances Active Directory management by automating essential tasks and improving security through efficient delegation and role-based access control.
One Identity Active Roles offers advanced features for managing Active Directory environments, aiding in automating user provisioning, group management, and de-provisioning. It integrates seamlessly with Microsoft environments and provides centralized management for both on-premises and cloud identities. By improving operational efficiency and reducing manual errors, it enforces robust governance across organizations. Active Roles includes auditing and reporting tools that strengthen compliance and security monitoring. Companies find the setup could be simplified with better documentation, more customization options in reporting, and expanded cloud integration, particularly with Azure. Improved workflows and deeper native connectors are needed for seamless automation. Price adjustments and user-friendly analytics with intuitive dashboards are recommended for better usability.
What are the key features of One Identity Active Roles?
What benefits and ROI should users evaluate?
Many industries deploy One Identity Active Roles for automating user lifecycle management, especially in Active Directory environments. It significantly eases operations by automating onboarding for new hires, managing role changes, and modifying access. The platform efficiently handles tasks like password resets and compliance audits while empowering teams to securely manage user access without requiring full administrative rights.
One Identity Manager offers centralized identity management with strong audit and compliance support, lifecycle automation, and streamlined access provisioning. It integrates with systems like SAP, Active Directory, and cloud platforms to enhance security and efficiency.
One Identity Manager provides extensive customization and flexible role-based access control, making it an effective tool for managing identities across different environments. Its centralized system supports lifecycle automation and offers seamless integration with multiple platforms, such as SAP and Active Directory. With robust audit and compliance tools, it helps organizations improve security and operational efficiency. Although there is room for improvement in database performance and user interface design, its current features offer substantial time savings and error reduction through effective automation and governance capabilities.
What are the standout features?
What benefits and ROI should be expected?
One Identity Manager is widely implemented across industries like finance, healthcare, and manufacturing. In finance, it ensures compliance with stringent regulations by automating user access audits and approval workflows. Healthcare organizations use it to manage access in complex environments, ensuring patient data confidentiality. Manufacturing industries benefit from its integration capabilities, enabling seamless workflows across multiple systems and enhancing productivity.
We monitor all User Provisioning Software reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.