We performed a comparison between One Identity Active Roles, One Identity Safeguard, and SailPoint IdentityIQ based on real PeerSpot user reviews.
Find out what your peers are saying about SailPoint, One Identity, Omada and others in User Provisioning Software."The solution is stable."
"Active Roles improved the management of users, groups, and AD objects in the organization."
"Instead of deleting accounts, we like the deprovision option so that we can reverse any accidental deletions. It also gives a higher level of quality control in terms of enforcing any number of variables, such as making sure that an account has a description entered before the account can be created. We can backtrack and know the history of it that way."
"It gives us attribute-level control and the AD management features work very well."
"With the use of the sync service we were able to import information from multiple external systems and populate them within our space and leverage them for downstream systems."
"Because of Active Roles, we're able to synchronize on an even more regular basis. It enables us to provide even more information to the Active Directory, which helped us to group our users in a more consistent manner."
"The provisioning and deprovisioning saves a lot of time and skips a lot of errors."
"The AD and AAD management features of this solution are really good... They offer added value by showing more fields such as password age and the statuses of some things that we normally wouldn't see."
"It offers high availability and enables end users to deploy the solution with 99.999 percent uptime, which is crucial in an enterprise environment with a large number of endpoints."
"The system is easy to manage, as it is not a system that you will change everything all of a sudden. It evolves most of the time with customer requests."
"We use the solution’s “transparent mode” feature for privileged sessions. It is very easy because it is only a simple configuration for our users. We don't have to modify our network. We install it, configure it, and it works. So, it is super easy. The rollout for our users is seamless."
"One Identity Safeguard is stable and provides great performance."
"I have found One Identity Safeguard to be stable."
"I like that One Identity Safeguard lets you configure the maximum number of connections to the target, a configuration I didn't find in its competitor."
"It is generally easy-to-use and install."
"The transparent mode for privileged sessions is one of the best things for customers, because they don't see the system in-between."
"SailPoint IdentityIQ has a good and straightforward user interface. They also have a lot of resources and documentation available to understand the process."
"The solution is stable and reliable."
"It is a scalable product."
"Deployment takes a bit of time, however, once it's done properly, everything becomes very organized and easy to use."
"Access certification and provisioning are two of the solutions most valuable features."
"It significantly reduces the workload for certification processes."
"IdentityIQ's best features are the hassle-free user experience and security."
"User provisioning and the role management features are good."
"The third area for improvement, which is the weakest portion of ARS, is the workflow engine, which was introduced a few years ago. It's slow and not very intuitive to use, so I would like to see improvement there."
"It also has workflows and those are really powerful, but there are no built-in workflows. When it comes to them, it's empty. I would personally love for it to come with ten, 15, or 20 workflows where each achieves a certain task... I could just look at how each is done, clone them, copy them, modify them the way I want them, and be good to go. Right now we have to invent things from scratch."
"There are some features that we think should be included in their next release. We think these things would take them to the next level: the ability to completely force or limit any dynamic group processing to specific servers, change-tracking reporting of virtual attributes, and the ability to use files as inputs to automation workloads. These things have also been talked about. Knowing them, they're probably working on them."
"The solution needs an attestation process that includes certification and recertification attestation."
"For ActiveRoles, it would be good if the product supports multi-scripting language. You can use only VBScript."
"The ability to send logs to a SIEM would be very beneficial."
"The initial setup was quite easy, but it was time-consuming. It took about three months."
"Most of the time it just works."
"Transparent mode was too cumbersome, so I don't foresee us being able to use it. On paper when we were initially talking about it, it was definitely going to be the preferred method until we realized the burden it would be on our network guys. Then, we had to step back and reevaluate what we wanted to do. That's when we changed our approach to use the RD Gateway feature."
"From a usability perspective, what we are finding out is that our privileged domain admin users, in particular, want functionality for extending a checkout session. So we are working with One Identity support to see if there's an enhancement that can be made to the product."
"The SPS could be a lot easier to administrate and the parts should be unified, from a design perspective, so that I can recognize the systems as being part of the same package. They feel like they have been forced together."
"We currently have a problem with the Active Directory integrations on Windows. Some of our users need to be logged with Active Directory, but we are having communication issues between One Identity and Active Directory. It seems that Active Directory is not well-integrated."
"There is a lack of documentation and many problems with the plugins."
"Something for One Identity to look at is having integration guidelines for how to logically group accounts."
"I would like to see support for RDP over HTTPS so this product can be used in conjunction with the Microsoft terminal."
"Cost-wise, it is a little bit expensive, which makes it difficult to get management approval. Its price should be reduced."
"Scalability is hard, especially when you are doing it in real time."
"We faced some issues while integrating the solution with a third-party tool."
"It allowed to implement the automated processes when a new employee is hired. It allows to have a main central process for new hires."
"If there's a price reduction for SailPoint IdentityIQ, that would be helpful. Another area for improvement in the product is the technical support, which needs to be more friendly to customers."
"Finding integration experts for SailPoint in the North American market can be challenging, and transitioning to a no-code or low-code setup could reduce dependence on specialized skills."
"The interface should be simple and easier to use."
"The product’s cloud offering could be flexible."
"The product has poor reporting and analytic capabilities. Reports are not easy to use and its analytic capabilities are limited."