

One Identity Manager and One Identity Active Roles compete in the identity and access management space. One Identity Manager seems to have the upper hand due to its extensive features and automation capabilities, despite some deployment complexities.
Features: One Identity Manager offers advanced GUI reporting, logical database schema and table names, and comprehensive web customization. It provides out-of-the-box connectors for systems like SAP, LDAP, and Active Directory, and a customizable portal. One Identity Active Roles provides dynamic access control, extensive templates for delegation, and a simpler on-premises deployment model.
Room for Improvement: One Identity Manager could improve its job server performance, ease of integration, and user interface, and simplify documentation. One Identity Active Roles is limited by its lack of dynamic workflows, and it could benefit from enhanced change-tracking and better cloud database integration.
Ease of Deployment and Customer Service: One Identity Manager requires significant on-premises setup and a complex initial deployment, but it adapts well to cloud environments. Customer service is responsive but sometimes inconsistent. One Identity Active Roles offers simpler on-premises deployments but requires thoughtful handling of high-level support queries.
Pricing and ROI: One Identity Manager is competitively priced, offering high ROI with its automation features despite being on the higher side. Though One Identity Active Roles is considered expensive, its pricing models and access management automation contribute to improved employee productivity and a satisfactory ROI.
One Identity Active Roles provides excellent reporting and auditing functionality, allowing administrators to track permissions, actions, and responsibilities effectively.
Automation has really reduced the time spent on user provisioning, access management, or access changes by around 40 to 60 percent, which has significantly improved team productivity.
User onboarding time reduced by around seventy to eighty percent, from thirty to forty-five minutes to under ten minutes.
Without it, we would need thousands of additional people.
Instead of spending on various systems, having one centralized system that handles all my organizational requirements helps save money.
Several users reported reduced onboarding and offboarding times by around 40% thanks to automated provisioning and de-provisioning.
They are ready to provide support at any time.
The support team is knowledgeable about the product and AD environments.
Everything is good, and I can give One Identity technical support a rating of ten.
If you have outages or critical production problems, you can count on the manufacturer to help resolve the situation.
They should focus on bringing in technically skilled individuals who understand the tools and technologies involved.
Compared to my experiences with other tools, their support is exemplary.
One Identity Active Roles works well in hybrid environments, handling both on-premises and cloud identities from a single platform.
It is commonly used in medium to large organizations managing complex Microsoft Active Directory and hybrid identity environments.
The platform can scale without needing a complete redesign.
It is architected so that key components can be scaled both horizontally and vertically to handle increasing loads from employee accounts to millions of external identities if needed.
Generally, if we need to add thousands of new users, we can ramp up container resources effectively.
It is highly scalable and capable of keeping up with the organization's growth needs, especially in the enterprise environment.
Overall, One Identity Active Roles has proven to be a stable, reliable, and well-suited solution for managing Active Directory at scale.
Overall, I consider One Identity Active Roles to be a stable solution, suitable for enterprise-grade environments.
Consistently performing for daily operations like automation and user management without major downtime reported.
One Identity Manager is considered stable and dependable for enterprise identity management with a strong track record of uptime and reliability when implemented correctly.
I would rate it a nine out of ten for stability.
Specifically affecting the test and development environments, not the production environment.
I also want One Identity Active Roles to improve in their policy configuration area, which requires advanced expertise, and in the area of reporting, I want the reporting to be more basic, visible, and have the ability to export and customize options.
The current REST API feels like an afterthought, and my developers want the ability to operate through CI/CD pipelines instead of logging into the GUI.
Improving documentation and providing more guided implementation resources would help organizations accelerate deployment and reduce dependency on external support.
This lack of 24-hour support is problematic from a testing and development standpoint.
It is crucial for them to expand their support team to match their product's success.
When it comes to privileged access management, we need to know who has access to what, which is the central problem we want to solve.
It is quite expensive, costing more than 50 euros per identity.
I think our total was in the seven-figure range for a couple of years of service.
The initial investment includes licensing, infrastructure setup, and implementation effort, with licensing typically based on the number of managed users or accounts, which can increase costs in large environments.
On-premises might incur higher costs.
We have a good enterprise license agreement, and we are very happy with what we get for the price we pay for it.
Many customers find it fair and reasonable for enterprise use, though it can be expensive for smaller organizations due to total licensing and implementation cost.
It's improved our security posture. It has limited access to our crown jewels, where all our identities lie within Active Directory.
It helps in removing custom Active Directory delegation, which enhances security by eliminating unnecessary privileges, addressing identity-based breaches by reducing the number of Active Directory delegations.
Dynamic groups are also one of the best features, eliminating the need to add or manage members manually.
It ensures high security through multiple approval processes, preventing unauthorized access and enhancing compliance by providing time-based access for privileged accounts with proper audit trails.
It continuously monitors user behavior in real-time, triggering automated responses, and manages secure access for both on-premises and cloud applications using protocols such as SAML.
Once you have some experience, it demonstrates best practices and guides you on the correct way to use the tool.
| Product | Mindshare (%) |
|---|---|
| One Identity Manager | 10.1% |
| One Identity Active Roles | 6.0% |
| Other | 83.9% |


| Company Size | Count |
|---|---|
| Small Business | 41 |
| Midsize Enterprise | 15 |
| Large Enterprise | 29 |
| Company Size | Count |
|---|---|
| Small Business | 74 |
| Midsize Enterprise | 29 |
| Large Enterprise | 108 |
One Identity Active Roles enhances Active Directory management by automating essential tasks and improving security through efficient delegation and role-based access control.
One Identity Active Roles offers advanced features for managing Active Directory environments, aiding in automating user provisioning, group management, and de-provisioning. It integrates seamlessly with Microsoft environments and provides centralized management for both on-premises and cloud identities. By improving operational efficiency and reducing manual errors, it enforces robust governance across organizations. Active Roles includes auditing and reporting tools that strengthen compliance and security monitoring. Companies find the setup could be simplified with better documentation, more customization options in reporting, and expanded cloud integration, particularly with Azure. Improved workflows and deeper native connectors are needed for seamless automation. Price adjustments and user-friendly analytics with intuitive dashboards are recommended for better usability.
What are the key features of One Identity Active Roles?Many industries deploy One Identity Active Roles for automating user lifecycle management, especially in Active Directory environments. It significantly eases operations by automating onboarding for new hires, managing role changes, and modifying access. The platform efficiently handles tasks like password resets and compliance audits while empowering teams to securely manage user access without requiring full administrative rights.
One Identity Manager offers centralized identity management with strong audit and compliance support, lifecycle automation, and streamlined access provisioning. It integrates with systems like SAP, Active Directory, and cloud platforms to enhance security and efficiency.
One Identity Manager provides extensive customization and flexible role-based access control, making it an effective tool for managing identities across different environments. Its centralized system supports lifecycle automation and offers seamless integration with multiple platforms, such as SAP and Active Directory. With robust audit and compliance tools, it helps organizations improve security and operational efficiency. Although there is room for improvement in database performance and user interface design, its current features offer substantial time savings and error reduction through effective automation and governance capabilities.
What are the standout features?One Identity Manager is widely implemented across industries like finance, healthcare, and manufacturing. In finance, it ensures compliance with stringent regulations by automating user access audits and approval workflows. Healthcare organizations use it to manage access in complex environments, ensuring patient data confidentiality. Manufacturing industries benefit from its integration capabilities, enabling seamless workflows across multiple systems and enhancing productivity.
We monitor all User Provisioning Software reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.