Try our new research platform with insights from 80,000+ expert users

One Identity Active Roles vs One Identity Manager comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.4
One Identity Active Roles enhances security and efficiency, automating tasks and reducing IT workload, achieving up to 30% ROI.
Sentiment score
5.7
One Identity Manager boosts productivity by automating user provisioning, enhancing efficiency, reducing costs, and improving security.
One Identity Active Roles provides excellent reporting and auditing functionality, allowing administrators to track permissions, actions, and responsibilities effectively.
solution architect/ engineer at APEX.IT Sp. z o.o.
It has saved 90% of the time compared to before.
IAM Specialist
One Identity has a theme that they want the right people to have the right set of access, and this is what they are able to provide with their tool.
Assistant Manager- Pre-sales ( IT-Enterprise Vertical ) at a tech vendor with 201-500 employees
Without it, we would need thousands of additional people.
enterprise it architect at a financial services firm with 10,001+ employees
If you do not see it as purely an Identity Management tool but as a possibility to automate processes in the company, it provides a huge amount of value.
Managing Director at a consultancy with 1-10 employees
One Identity Manager saved us approximately thirty to forty percent in terms of time, money, and resources compared to our pre-deployment setup.
IAM functional analyst at a hospitality company with 10,001+ employees
 

Customer Service

Sentiment score
6.9
One Identity Active Roles support is praised for efficiency and expertise, though some face delays and need professional services.
Sentiment score
6.6
Users find One Identity Manager's customer service satisfactory, appreciating premium support speed despite inconsistencies and high skill requirements.
Everything is good, and I can give One Identity technical support a rating of ten.
Assistant Manager- Pre-sales ( IT-Enterprise Vertical ) at a tech vendor with 201-500 employees
One Identity's support is great.
Team Lead, Technical & Enterprise Directory Services Vita Program at AIS Network
I rate customer service and support as a seven because, although they are helpful when needed, there can be delays in responding to tickets and finding necessary fixes.
IAM Product owner at a hospitality company with 10,001+ employees
If you have outages or critical production problems, you can count on the manufacturer to help resolve the situation.
Managing Director at a consultancy with 1-10 employees
They should focus on bringing in technically skilled individuals who understand the tools and technologies involved.
Back End Developer at DC Smarter
Compared to my experiences with other tools, their support is exemplary.
Senior Manager at a consultancy with 10,001+ employees
 

Scalability Issues

Sentiment score
7.3
One Identity Active Roles offers scalability and flexibility, supporting up to 150,000 users and accommodating complex enterprise environments.
Sentiment score
7.0
One Identity Manager is scalable for large enterprises, though performance may vary with extensive datasets and specific configurations.
It is very beneficial for large and complex environments.
Team Lead, Technical & Enterprise Directory Services Vita Program at AIS Network
If you are a major enterprise customer, it is a matter of scaling out on resources with more memory, disk, and CPU power.
IAM Specialist
The solution is highly scalable, with a scalability rating of nine.
IAM Product owner at a hospitality company with 10,001+ employees
We could handle about 1,00,000 records for different users.
I would rate its scalability as strong since we have not experienced any significant challenges.
IAM functional analyst at a hospitality company with 10,001+ employees
This includes designing and implementing IAM solutions for legacy systems, cloud migrations, and multifactor authentications.
Business Analyst at tcs
 

Stability Issues

Sentiment score
7.1
One Identity Active Roles is a stable, reliable tool with minor bugs, high ratings, and occasional performance issues.
Sentiment score
7.3
One Identity Manager is stable with high ratings, though older versions may have bugs and complex customization challenges.
There were no major problems with One Identity Active Roles.
solution architect/ engineer at APEX.IT Sp. z o.o.
Regarding stability, One Identity Active Roles is mostly stable.
Director, Identity & M365 Engineering at a healthcare company with 10,001+ employees
We haven't had any glitches.
IAM Specialist
I would rate it a nine out of ten for stability.
Senior identity and security specialist at a pharma/biotech company with 1,001-5,000 employees
Specifically affecting the test and development environments, not the production environment.
One Identity Manager has improved in terms of performance and added functionality.
Managing Director at a consultancy with 1-10 employees
 

Room For Improvement

One Identity Active Roles needs enhancements in its interface, customization, integration, multilingual support, and pricing to stay competitive.
One Identity Manager needs better performance, simplified UI, updated documentation, cloud integration, and more training resources for improved user experience.
A way to connect to various directories and integrate with cloud directories would be beneficial.
Team Lead, Technical & Enterprise Directory Services Vita Program at AIS Network
Enhancements to the console are also necessary because it is more confusing than the web interface.
System Administrator at a healthcare company with 501-1,000 employees
The user interface needs to be more modern and scalable.
IAM Specialist
This lack of 24-hour support is problematic from a testing and development standpoint.
It is crucial for them to expand their support team to match their product's success.
Lead Consultant at a tech vendor with 10,001+ employees
When it comes to privileged access management, we need to know who has access to what, which is the central problem we want to solve.
Principal Cybersecurity Architect at a tech vendor with 10,001+ employees
 

Setup Cost

One Identity Active Roles is costly but valued for its functionality, ease of use, and flexible user-based licensing model.
One Identity Manager offers competitive and flexible pricing, praised for cost-effectiveness and features versus alternatives like SailPoint and ForgeRock.
It is quite expensive, costing more than 50 euros per identity.
solution architect/ engineer at APEX.IT Sp. z o.o.
I think our total was in the seven-figure range for a couple of years of service.
Director, Identity & M365 Engineering at a healthcare company with 10,001+ employees
The pricing is high.
Team Lead, Technical & Enterprise Directory Services Vita Program at AIS Network
On-premises might incur higher costs.
IAM DEVELOPER at a university with 10,001+ employees
We have a good enterprise license agreement, and we are very happy with what we get for the price we pay for it.
enterprise it architect at a financial services firm with 10,001+ employees
On-premises, it is cheap.
Senior identity and security specialist at a pharma/biotech company with 1,001-5,000 employees
 

Valuable Features

One Identity Active Roles enhances AD management with automation, security, and efficiency while offering a user-friendly interface and powerful features.
One Identity Manager offers flexible customization, SAP integration, and robust governance, enhancing efficiency with comprehensive reporting and automation features.
It's improved our security posture. It has limited access to our crown jewels, where all our identities lie within Active Directory.
IAM Specialist
It helps in removing custom Active Directory delegation, which enhances security by eliminating unnecessary privileges, addressing identity-based breaches by reducing the number of Active Directory delegations.
Head of Global Digital Identity Services at a hospitality company with 10,001+ employees
Dynamic groups are also one of the best features, eliminating the need to add or manage members manually.
Technical Specialist at LSEG
It ensures high security through multiple approval processes, preventing unauthorized access and enhancing compliance by providing time-based access for privileged accounts with proper audit trails.
Principal Consultant at a computer software company with 1,001-5,000 employees
It continuously monitors user behavior in real-time, triggering automated responses, and manages secure access for both on-premises and cloud applications using protocols such as SAML.
IAM DEVELOPER at a university with 10,001+ employees
Once you have some experience, it demonstrates best practices and guides you on the correct way to use the tool.
IAM Developer at a manufacturing company with 10,001+ employees
 

Categories and Ranking

One Identity Active Roles
Ranking in User Provisioning Software
5th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
29
Ranking in other categories
Active Directory Management (1st), Non-Human Identity Management (NHIM) (4th)
One Identity Manager
Ranking in User Provisioning Software
1st
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
131
Ranking in other categories
Identity Management (IM) (3rd)
 

Mindshare comparison

As of January 2026, in the User Provisioning Software category, the mindshare of One Identity Active Roles is 5.6%, up from 4.5% compared to the previous year. The mindshare of One Identity Manager is 9.7%, down from 13.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Provisioning Software Market Share Distribution
ProductMarket Share (%)
One Identity Manager9.7%
One Identity Active Roles5.6%
Other84.7%
User Provisioning Software
 

Featured Reviews

Grzegorz Kosela - PeerSpot reviewer
solution architect/ engineer at APEX.IT Sp. z o.o.
Task automation simplifies user and delegation management while offering a customizable interface
Currently, task automation, like provisioning, deprovisioning, and reprovisioning, is very effective. When a user moves from one organization to another, it automatically changes their group membership and performs similar functions. Secondly, the granular delegation feature is very nice and much simpler and easier than it is natively in Microsoft. Two years ago, One Identity Active Roles was under Dell. It was quite poor. However, now, there have been notable improvements, such as faster system processing, better logging, enhanced information, and a more user-friendly interface. Once it was sold by Dell, things got better. The interface became a bit more user-friendly. The Angular user interface is much more flexible for adjusting to customer needs, and a completely new and customizable one can be created, aligning with all settings and scripts required by a customer. The ease of managing on-prem and cloud-based directories through a single pane of glass is good. I'd rate it nine out of ten. The solution's ability to provision and deprovision resources and directories like Azure AD is very simple, especially when you can integrate with the HR system and grab some data from HR. It's actually fully automatic. I don't need to even touch it. It's helped increase operational efficiency by 50%. It's helped decrease security problems around privileged accounts. We were able to decrease the number of privileged accounts and have been able to delegate more effectively. We decreased the number of high-level permissions that administrators had. For example, if someone is a DNS administrator, he has access only as far as the specific actions he needs to handle. We don't need to give away such high privileges for such a daily job. It's helped clarify roles and access. It's helped reduce identity-based breaches. If someone leaves a company, we can easily undo provisioning and close accounts. We can generate reports to see which people have which permissions and at what times. We've just integrated with our HR system. It helps us follow activated and deactivated users. I'd rate the granular controls on offer ten out of ten. We've saved on manpower in terms of the work of the administrators. There's good reporting and functionality, and it's very transparent. You can connect more than one directory and manage everything from one pane. You can do many things from one interface.
reviewer2538840 - PeerSpot reviewer
Senior identity and security specialist at a pharma/biotech company with 1,001-5,000 employees
Highly flexible and stable, but lacks in many aspects and requires a strong partner
In terms of providing a single platform for enterprise-level administration and governance of users, data, and privileged accounts, One Identity is not yet there. One Identity recently bought OneLogin. They already had Safeguard and One Identity Manager. They have started integrating these three tools. I am also on the customer advisory board (CAB) of One Identity, so I have more insight into these things. I know that they started to integrate OneLogin and One Identity just recently. OneLogin is their access management tool. They use it for authentication and for SSO. It is a competitor for Entra and Okta, whereas Safeguard is competing with CyberArk, Delinea, and BeyondTrust. One Identity has indeed done good integration between their three products. However, the platform is not unified. You still need three URLs, which is not optimal. They are going there, but it will take them time. The second thing they are not yet good at is their SaaS offering. They are behind in the market. They started with something in Safeguard, but it is a pretty basic offering. It is still a new baby. They have Safeguard On Demand, but it is just a hosted PAM solution. I did PoC for Safeguard twice. This is how I know this, but I have not used it. As PAM, Safeguard is a good product, but it is not a full-featured PAM like CyberArk or BeyondTrust. They are lacking in that aspect. The integration between One Identity's products is similar to BMC's integration. I used to work with BMC products such as BMC Remedy ten years ago. I used to be an ITSM or Control-M guy. When BMC integrated its products, the integration was not well done. It was like two different entities trying to integrate with each other rather than one company giving you a fully-fledged platform. The same thing is happening with One Identity Manager at the moment. They are selling it as a unified platform, but in my opinion, it is not yet good. It is also not bad. There are things that I can take from it, but there is no complete picture. The problem nowadays is that vendors are getting into each other's areas. For example, CyberArk used to be just a PAM provider, so people would integrate with it, but now, CyberArk wants to do the identity bit. It has now become a competitor for other vendors, so they will stop integrating with it. SailPoint, at some point, stopped integrating with CyberArk. SailPoint and CyberArk's integration was good. This is what is happening in the market or between vendors. All of them are getting into each other's area. If you happen to buy another product from a competitor, you need to integrate it on your own. There is no integration plug-in concept between them. This is a bit hard for companies that already have a PAM and they want to buy a new IGA, for example, or vice versa. They are trying to shift towards an Angular-based platform for their web portal or for IT Shop. That has been very long overdue because they did not modernize their web portal for almost three versions. They are doing it, but there is no feature parity till version 9.3, which is the upcoming version. This is a problem. For example, data governance is not included in 9.2 if you want to upgrade, but if you do not upgrade, you lose support. They have these issues with the roadmap in general. They give you options, but they are not always the complete options. To me, it seems that this company is going to suffer in the long run. Another issue is that for admin requests, we have to configure the tool at least in seven different clients, which is unacceptable. We are in 2024, not in 1981 or 1985. Having seven clients for the same tool, or more, is just unheard of. To me, that is a very old design idea. I am on the newest version 9.2, and I am still doing that. To me, that is a big problem as an admin. The relationship with the customers is extremely bad. That is not a technical problem. That is a company problem. They tried to fix that, but it seems they failed. They do not have the personnel. They have a hiring problem. They now rely on partners. They are a type of company where the partner is more of a vendor to you as a client rather than the company itself. If you want to pick any solution by One Identity, you need a very strong partner with you. If you do not, you will struggle with this product's adoption, roadmap, vision, and implementation. We struggle a lot as a client. I have been there. I have seen that. It is not easy with them. One Identity is based in Europe. Our account manager at One Identity resigned in May and till now, just to show how bad they are, we do not know who our new account manager is. We are in August. Their Starling Connect roadmap or flagship is a failure. We had to withdraw from using it with SuccessFactors, for example. It had a lot of stability issues. Now, my understanding is better, but it caused a bad implementation, so we are not using it. They are not investing a lot in enhancing or extending Starling Connect. They are using Starling Connect as a propagation gateway to SaaS apps so that you have One Identity Manager on-prem talking to Starling Connect which is handling all SaaS apps. However, the roadmap for Starling Connect is not clear. Now that they have bought OneLogin, OneLogin can do that as well as an IAM tool. You can now bring any IAM or CIAM tool such as Entra, Okta, or OneLogin. They can be your propagation gateway. OneLogin and Starling Connect are competing products, and they need to unify them. They cannot have both products doing the same thing. When I discussed this with the head of engineering from their side, they were still defending having Starling Connect. I do not understand why because if you have a proper IAM such as Entra or Okta, that is your propagation gateway. That is it. You can do everything you want with it. You can merge the functionality, and that is it. You do not need Starling Connect. To me, this is confusing. You use a propagation gateway like Starling Connect because it has ready plug-ins to connect to SaaS apps and you do not need to create a custom connector every time. If you look at the number of apps that One Identity supports with Starling Connect, there are not more than 50, which is not a lot. There is a big difference when you compare it to Okta Marketplace or Entra Marketplace. You will immediately understand the difference. OneLogin's marketplace is better than Starling Connect, but OneLogin was not a part of One Identity before, so they had their own marketplace. Overall, the Starling Connect roadmap does not make sense to me. They need to remove the dependency on VB.NET for backend development and they need to unify the front end. If they are selling it as a unified product, they need to give me a unified UX. This is something I have mentioned to Mark Logan himself. This is how ServiceNow won over Remedy. Having a unified UX and being able to turn on or off a feature is better than trying to connect three or four different products with different contracts. To me, the main thing is that they need to modernize their application. Once we do that, making it SaaS is doable.
report
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
879,853 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
9%
Healthcare Company
8%
Manufacturing Company
8%
Financial Services Firm
13%
Computer Software Company
9%
Manufacturing Company
9%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise19
By reviewers
Company SizeCount
Small Business41
Midsize Enterprise16
Large Enterprise87
 

Questions from the Community

What is your experience regarding pricing and costs for One Identity Active Roles?
The product is expensive, but if you want to save money, the delegation set-up process is quite easy. After setting up Active Roles once, defining the delegation model, it is very efficient, almost...
What needs improvement with One Identity Active Roles?
The interface appears outdated. Once logged in, everything inside remains unchanged from years ago. Additionally, when they release new features, they should provide training or webinars at least o...
What is your primary use case for One Identity Active Roles?
I use One Identity Active Roles primarily for identity management. We use it for managing multiple domains from a single interface, and the domains do not have trust between them. It has been used ...
What do you like most about One Identity Manager?
The One Identity birthright process has helped generate user accounts more accurately and quickly.
What is your experience regarding pricing and costs for One Identity Manager?
We use multiple tools in tandem for better security. The procurement and licensing process can indeed be complex. My experience was decent, with no major problems during procurement or licensing; i...
What needs improvement with One Identity Manager?
One Identity Manager's documentation is something they can improve, and I believe much of this is related to translation since it is a German company. Access to documentation and finding answers on...
 

Also Known As

Quest Active Roles
Quest One Identity Manager
 

Overview

 

Sample Customers

City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Texas A&M, Sky Media, BHF Bank, Swiss Post, Union Investment, Wayne State University. More at OneIdentity.com/casestudies
Find out what your peers are saying about One Identity Active Roles vs. One Identity Manager and other solutions. Updated: December 2025.
879,853 professionals have used our research since 2012.