No more typing reviews! Try our Samantha, our new voice AI agent.

One Identity Active Roles vs SAP Identity Management comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

One Identity Active Roles
Ranking in User Provisioning Software
3rd
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
53
Ranking in other categories
Active Directory Management (1st), Non-Human Identity Management (NHIM) (3rd)
SAP Identity Management
Ranking in User Provisioning Software
7th
Average Rating
7.8
Reviews Sentiment
5.9
Number of Reviews
14
Ranking in other categories
Identity Management (IM) (16th)
 

Mindshare comparison

As of April 2026, in the User Provisioning Software category, the mindshare of One Identity Active Roles is 6.0%, up from 6.0% compared to the previous year. The mindshare of SAP Identity Management is 5.0%, down from 5.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Provisioning Software Mindshare Distribution
ProductMindshare (%)
One Identity Active Roles6.0%
SAP Identity Management5.0%
Other89.0%
User Provisioning Software
 

Featured Reviews

Mahesh Malve - PeerSpot reviewer
Senior Business Development Executive at DigitalTrack Solutions Ind Pvt Ltd
Automation has transformed user lifecycle tasks and now enforces consistent secure access
While One Identity Active Roles is a strong platform, a few improvements would make it even better. Many users feel the user interface is not very modern or intuitive, and it can take time to get used to navigating the console and workflows. Another improvement area is the learning curve and setup complexity. One Identity Active Roles is very powerful, but initial configuration, especially for policies, workflows, and delegation, can be complex and require experienced resources. From an integration perspective, although it supports multiple systems, organizations would benefit from more out-of-the-box connectors and smoother cloud integrations such as Azure Active Directory and software-as-a-service applications, as some setups currently require customization. In terms of reporting, while auditing is strong, generating business-friendly reports can be challenging. Users have mentioned the need for better dashboards and easier report generation. There are also some performance considerations, especially in large environments, such as slower PowerShell execution or delays in dynamic group processing in certain cases. Overall, improvements in user interface, ease of use, integration, reporting, and performance optimization would significantly enhance the product experience.
FM
Sales Executive at Minsait
Identity management enhances connectivity and productivity with streamlined access and robust security, offering time-saving processes and facilitating seamless integration with other BI tools
One area that could be improved with SAP Identity Management, other than support, is user engagement from an implementation perspective. It would be beneficial for SAP to extend their events and workshops that are currently performed for partners to their final customers, as many customers want to know what's new and what else they can do without solely depending on the partners. For SAP support in Brazil, everything is in English, which poses a difficulty for many customers. The support could be improved for the specific needs in Brazil, as many customers have difficulty accessing the support center due to the language barrier. This feedback is specific to Brazil, though it's unclear if SAP receives similar feedback from other countries. It could certainly be enhanced with Portuguese documents, among other improvements.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Another good feature is the change history. It's centralized in a single place and allows us to manage people's Active Directory domains from a central location. We can also drill down into individual objects in a troubleshooting or even an auditing situation. We can show evidence to auditors by drilling down into the individual history. It gives you all the history of what happened around an individual object. That is something that would be almost impossible to do in Active Directory, or extremely complicated."
"We have eased the burden on the support desk and reduced the risk of them doing something they shouldn't."
"Overall, One Identity Active Roles has significantly reduced the complexity and workload in Active Directory administration in our organization."
"One Identity Active Roles takes us less time, probably half the time, to complete delegations that are very granular and complex, compared to having to use native tools and scripts."
"We have two staff members and so per staff member, Active Roles saves us 0.2 FTE."
"One Identity Active Roles has had a very positive impact on the organization, especially in terms of efficiency, security, and compliance."
"Overall, the return on investment comes from time savings, reduced errors, better resource utilization, and improved compliance, which together justify the investment."
"One Identity Active Roles has significantly reduced the complexity and workload of administrative tasks related to Active Directory, as routine tasks like user creation, password resets, and access changes are automated or delegated, saving time and reducing manual efforts while making management more structured and consistent, making overall administration easier and more efficient."
"The most valuable feature is the user experience for managing information."
"The tool's most valuable features are its access control and approval of access requests. The self-service password reset feature is efficient. Role management capabilities streamline user access by assigning and revoking roles."
"Rather than implement a basic SSO, this solution assisted us with setting up two-factor authentication."
"It provides basic automatic user administration and role provisioning to save time."
"With SAP IDM we have stopped manually managing all changes in user accounts after his/her transferring between organizational units."
"Automatic provisioning by designed workflows are valuable in any authorization audit."
"The most valuable features of SAP Identity Management are business roles and automated user provisioning."
"What I like about SAP Identity Management is that it's stable for experienced users and suitable for access management, not just for SAP accounts, but for Active Directory, including file sharing and process sharing."
 

Cons

"I want One Identity Active Roles to improve in the area of user interface, modernizing it to feel more like a SaaS tool and to have user-friendly navigation."
"I am not really satisfied with the customer support for One Identity Active Roles as the support is pretty limited."
"There are some features that we think should be included in their next release. We think these things would take them to the next level: the ability to completely force or limit any dynamic group processing to specific servers, change-tracking reporting of virtual attributes, and the ability to use files as inputs to automation workloads. These things have also been talked about. Knowing them, they're probably working on them."
"I want One Identity Active Roles to improve in the area of user interface, modernizing it to feel more like a SaaS tool and to have user-friendly navigation."
"It's a fairly stable product but not perfectly reliable."
"Even though I advocate for One Identity Active Roles, there are areas for improvement, particularly in hybrid integration experiences where it feels a bit clunky compared to its capabilities for on-premises AD management."
"In terms of improvement, it could be made even more user-friendly for administrators when they need to create new workflows and rulesets."
"For ActiveRoles, it would be good if the product supports multi-scripting language. You can use only VBScript."
"The standard one is not friendly and very time-consuming for elementary operation."
"I believe they could make a lot of improvements on SAP IDM. There is also a lack of startup connectors to different systems, and they could have better cloud integration connectors for SAP IDM."
"Research and marketing need to be improved."
"SAP Identity Management can improve risk analysis and authority checks."
"I have encountered issues with the host authentication feature."
"It needs to have the SSO for the HANA modules that SAP is releasing."
"There are also some issues with the UI, the ACLs and performance - depending on the configuration and Identity DB size."
"SAP Identity Management can improve risk analysis and authority checks."
 

Pricing and Cost Advice

"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"The pricing is on the higher end."
"The licensing model is a simple user-based model, not that much complicated."
"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."
"It's expensive."
"It's fairly priced."
"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."
"The licensing cost varies depending on the specific requirements and deployment size."
"When evaluating the price of any product, I first look at how it meets my business requirements and if it meets requirements adequately and predictively. Currently, I don't see this from SAP Identity Management, so pricing for it is expensive, in my opinion."
"I rate the solution's pricing a four out of ten."
report
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
890,071 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
13%
Computer Software Company
8%
Financial Services Firm
8%
Manufacturing Company
7%
Manufacturing Company
14%
Energy/Utilities Company
7%
Comms Service Provider
7%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business38
Midsize Enterprise14
Large Enterprise27
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise3
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for One Identity Active Roles?
I am aware of the pricing; it is on the expensive side, though pricing is not my department.
What needs improvement with One Identity Active Roles?
I do not see anything that needs to be changed as of now concerning the organization's needs because it is working very well and it is providing great features with great processes. The initial set...
What is your primary use case for One Identity Active Roles?
When a new user is created, predefined rules automatically apply naming standards and assigned groups. This reduces manual tasks while ensuring consistency across all operations. It prevents and av...
What needs improvement with SAP Identity Management?
One area that could be improved with SAP Identity Management, other than support, is user engagement from an implementation perspective. It would be beneficial for SAP to extend their events and wo...
What is your primary use case for SAP Identity Management?
The use cases for SAP Identity Management include the logistics company, and we also have a beverage company that is using SAP Identity Management. We did not make the migration for them, but we im...
What advice do you have for others considering SAP Identity Management?
My clients use SAP Identity Management for managing access rights efficiently based on user roles. I have experience with other IAM tools, having worked for Oracle three or four years ago, but I ca...
 

Also Known As

Quest Active Roles
SAP NetWeaver Identity Management, NetWeaver Identity Management
 

Overview

 

Sample Customers

City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
State of Indiana, Automotive Resources International (ARI), Alliander N.V., Chemion Logistik GmbH, Seoul National University Bundang Hospital (SNUBH)
Find out what your peers are saying about One Identity Active Roles vs. SAP Identity Management and other solutions. Updated: April 2026.
890,071 professionals have used our research since 2012.