One Identity Active Roles vs SailPoint Identity Security Cloud comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

One Identity Active Roles
Ranking in User Provisioning Software
5th
Average Rating
8.6
Number of Reviews
17
Ranking in other categories
Active Directory Management (4th)
SailPoint Identity Security...
Ranking in User Provisioning Software
1st
Average Rating
8.2
Number of Reviews
62
Ranking in other categories
Identity Management (IM) (2nd), Identity and Access Management as a Service (IDaaS) (IAMaaS) (3rd), Cloud Infrastructure Entitlement Management (CIEM) (1st)
 

Mindshare comparison

As of June 2024, in the User Provisioning Software category, the mindshare of One Identity Active Roles is 8.4%, up from 5.0% compared to the previous year. The mindshare of SailPoint Identity Security Cloud is 33.5%, up from 29.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Provisioning Software
Unique Categories:
Active Directory Management
5.3%
Identity Management (IM)
22.3%
Identity and Access Management as a Service (IDaaS) (IAMaaS)
9.6%
 

Featured Reviews

JosephChandrasekaram - PeerSpot reviewer
Oct 16, 2023
Single interface and workflows simplify AD and Azure AD management efficiency and security
I use it primarily for granting, managing, and auditing access The ways Active Roles has improved the way we operate are through workflows and user onboarding, automatic user management, group permissioning, adding users to the right groups based on the department, and distribution list creation…
Surya Sadhu - PeerSpot reviewer
Jan 29, 2024
A cloud solution for identity management and access governance
Before making a decision, it's essential to align your primary goals with the long-term roadmap of your organization. Consider factors such as whether your organization is a government or private entity and where you envision your organization heading in the next five to ten years. While cost can be a significant factor, it's important to assess the value and features offered by SailPoint IdentityIQ in relation to your organization's needs and future direction. There have been many instances where we provided initial templates in building some of the connectors approximately eight or seven years ago. In response, my team developed a custom connector, which was reviewed and eventually incorporated into the SuccessFactors Connector by SailPoint. The previous version had limitations with subset deployments. SailPoint has introduced various solutions over time. For instance, they now handle deployment entirely, even for IdentityIQ, transitioning it into a SaaS application. SailPoint manages servers, applications, deployments, and server patches, relieving customers of these challenges. Customers access the product via a URL, focusing solely on utilizing it to address their needs. SailPoint continues to provide comprehensive solutions, including evolving IdentityIQ into a SaaS-capable platform, to support their customers' requirements. In terms of solving identity management and access governance challenges, SailPoint IdentityIQ is certainly a strong contender. However, it's essential to clarify your specific goals—are you focused solely on identity management and access governance, or do you also require access management and privileged access management solutions? Configuring IdentityIQ can be complex, requiring significant coding and effort, especially considering the intricacies of integrating with various target systems. The level of complexity can vary greatly depending on each system's specifications. Overall, I rate the solution an 8 out of 10.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Active Roles improved the management of users, groups, and AD objects in the organization."
"In comparison to native Active Directory tools, using Active Roles for delegation is so much better. It uses an access template and that makes it easy to see who can access what. In fact, you can do that for many objects as well."
"The provisioning and deprovisioning saves a lot of time and skips a lot of errors."
"The solution is stable."
"Another good feature is the change history. It's centralized in a single place and allows us to manage people's Active Directory domains from a central location. We can also drill down into individual objects in a troubleshooting or even an auditing situation. We can show evidence to auditors by drilling down into the individual history. It gives you all the history of what happened around an individual object. That is something that would be almost impossible to do in Active Directory, or extremely complicated."
"With the use of the sync service we were able to import information from multiple external systems and populate them within our space and leverage them for downstream systems."
"It gives us attribute-level control and the AD management features work very well."
"The most valuable features include auditing, dynamic grouping, and creating dynamic groups based on AD attributes."
"I find the built-in connectors, lifecycle management, certification, and recertification features to be the most valuable."
"It provides a lot of out-of-the-box functionalities. You don't have to do too much custom development like other solutions such as Microsoft or NetIQ. It also has a lot of out-of-the-box connectors for different sources, directories, databases, etc. Its cloud version is working very well, and its pricing is okay. Its value for money is fine for most of the customers. It is also very flexible. They have frequent new releases and patches for fixing errors and things like that."
"SailPoint IdentityIQ has more enriched out-of-box connectors than the others."
"Access certification and provisioning are two of the solutions most valuable features."
"Provides functionalities for various stages, such as joiner, mover, and leaver"
"Security and administration for any new/current access."
"IdentityIQ's best features are the hassle-free user experience and security."
"Great product to manage the access control of users."
 

Cons

"Most of the time it just works."
"The solution needs an attestation process that includes certification and recertification attestation."
"For the AAD management feature, it needs to improve the objects that we can manage and the security."
"For ActiveRoles, it would be good if the product supports multi-scripting language. You can use only VBScript."
"The initial setup was quite easy, but it was time-consuming. It took about three months."
"The way you can search groups could be better."
"It also has workflows and those are really powerful, but there are no built-in workflows. When it comes to them, it's empty. I would personally love for it to come with ten, 15, or 20 workflows where each achieves a certain task... I could just look at how each is done, clone them, copy them, modify them the way I want them, and be good to go. Right now we have to invent things from scratch."
"Another issue we have with the product is that we run a lot of custom tasks. You have to program them to run on one particular host and there's no automatic failover to a second host. If that host is down when a task is supposed to run, it has to wait until the next time it runs when that host is up."
"The connectors are far too manual. This needs to be automated a bit."
"SailPoint IdentityIQ could be cheaper."
"There are various functions that don't work in IdentityIQ, including the access request reminder, which doesn't go to the approvals in the proper format, so it's hard for users to read."
"We faced some issues while integrating the solution with a third-party tool."
"It allowed to implement the automated processes when a new employee is hired. It allows to have a main central process for new hires."
"Certifications could include additional access levels or practices."
"In the past, we had a lot of problems with SailPoint IdentityIQ, particularly in providing access and provisioning. There were some gaps in the operation of the solution because they were manual rather than automated, and the users and administrators were given access directly via Active Directory, and it wasn't appropriate for us at the time to use. In terms of integration, we could provide a more automated solution after a minimum number of years, but not in the SailPoint IdentityIQ platform, but there were problems in the registration, for example, with putting information inside ADP, but in general, we were able to solve those problems, and after implementing SailPoint IdentityIQ we had increased evaluations."
"Scalability is hard, especially when you are doing it in real time."
 

Pricing and Cost Advice

"It's fairly priced."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"The pricing is on the higher end."
"The licensing model is a simple user-based model, not that much complicated."
"It's expensive."
"You do pay one price for the license but that price depends on what you choose to include as far as the optional modules go."
"SailPoint is expensive compared to its competitors. It's one of the most expensive products, so I'd rate it as one out of five, cost-wise."
"The pricing is a little bit higher than other tools."
"SailPoint IdentityIQ is too expensive for small and medium companies. It is an expensive product."
"The licensing fees are on a yearly basis."
"The product is expensive. People need to opt for a licensing plan for one year or three years."
"I rate the solution a seven on a scale where one is cheap and ten is too expensive. In short, the solution falls under the higher side of pricing."
"It is a costly solution. Its cost, for sure, should be reduced."
report
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
787,779 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
11%
Government
9%
Healthcare Company
9%
Financial Services Firm
17%
Computer Software Company
14%
Manufacturing Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for One Identity Active Roles?
The solution is fairly priced. That said, I have nothing to compare it to.
What needs improvement with One Identity Active Roles?
The solution has not enabled us to reduce password reset times. It has not automated provisioning. The group attestation could be improved. It was a feature that was available in version 5. You can...
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about SailPoint IdentityIQ?
The first valuable feature of the solution is its interface. The second feature of the solution is the level of flexibility it provides.
What is your experience regarding pricing and costs for SailPoint IdentityIQ?
The product is expensive. People need to opt for a licensing plan for one year or three years.
 

Also Known As

Quest Active Roles
IdentityIQ, IdentityNow, Cloud Infrastructure Entitlement Management
 

Overview

 

Sample Customers

City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Adobe, AXA Technology Services, Cuna Mutual Group, Equifax, ING Direct, Orrstown Bank, Rockwell Automation, SallieMae, Spirit Aerosystems, TEL
Find out what your peers are saying about One Identity Active Roles vs. SailPoint Identity Security Cloud and other solutions. Updated: June 2024.
787,779 professionals have used our research since 2012.