One Identity Active Roles vs SAP Identity Management comparison

One Identity Active Roles vs. SAP Identity Management

Download the complete report

Helped 894,807 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

One Identity Active Roles

Ranking in User Provisioning Software

3rd

Average Rating

8.6

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Active Directory Management (1st), Non-Human Identity Management (NHIM) (2nd)

SAP Identity Management

Ranking in User Provisioning Software

7th

Average Rating

7.8

Reviews Sentiment

5.9

Number of Reviews

Ranking in other categories

Identity Management (IM) (16th)

Mindshare comparison

As of May 2026, in the User Provisioning Software category, the mindshare of One Identity Active Roles is 5.8%, down from 6.2% compared to the previous year. The mindshare of SAP Identity Management is 4.8%, down from 6.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

User Provisioning Software Mindshare Distribution
Product	Mindshare (%)
One Identity Active Roles	5.8%
SAP Identity Management	4.8%
Other	89.4%

User Provisioning Software

Featured Reviews

Mahesh Malve

Senior Business Development Executive at DigitalTrack Solutions Ind Pvt Ltd

Automation has transformed user lifecycle tasks and now enforces consistent secure access

While One Identity Active Roles is a strong platform, a few improvements would make it even better. Many users feel the user interface is not very modern or intuitive, and it can take time to get used to navigating the console and workflows. Another improvement area is the learning curve and setup complexity. One Identity Active Roles is very powerful, but initial configuration, especially for policies, workflows, and delegation, can be complex and require experienced resources. From an integration perspective, although it supports multiple systems, organizations would benefit from more out-of-the-box connectors and smoother cloud integrations such as Azure Active Directory and software-as-a-service applications, as some setups currently require customization. In terms of reporting, while auditing is strong, generating business-friendly reports can be challenging. Users have mentioned the need for better dashboards and easier report generation. There are also some performance considerations, especially in large environments, such as slower PowerShell execution or delays in dynamic group processing in certain cases. Overall, improvements in user interface, ease of use, integration, reporting, and performance optimization would significantly enhance the product experience.

Read full review

Fabiano Marques

Sales Executive at Minsait

Identity management enhances connectivity and productivity with streamlined access and robust security, offering time-saving processes and facilitating seamless integration with other BI tools

One area that could be improved with SAP Identity Management, other than support, is user engagement from an implementation perspective. It would be beneficial for SAP to extend their events and workshops that are currently performed for partners to their final customers, as many customers want to know what's new and what else they can do without solely depending on the partners. For SAP support in Brazil, everything is in English, which poses a difficulty for many customers. The support could be improved for the specific needs in Brazil, as many customers have difficulty accessing the support center due to the language barrier. This feedback is specific to Brazil, though it's unclear if SAP receives similar feedback from other countries. It could certainly be enhanced with Portuguese documents, among other improvements.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features include auditing, dynamic grouping, and creating dynamic groups based on AD attributes."

"We have definitely seen a strong return on investment after implementing One Identity Active Roles, mainly in terms of time saving, reduced workload, and improved efficiency, where user provisioning and access requests that earlier took hours are now completed in a few minutes through automation, and we observe around a 40 to 50% reduction in service desk tickets related to Active Directory tasks, which allows the team to focus on more critical activities instead of repetitive work, while delegation reduces dependency on senior administrators, indirectly saving manpower effort, and overall, the reduction in errors, faster onboarding, and improved compliance also contribute to cost savings and operational efficiency, making it a valuable investment for the organization."

"One Identity Active Roles has significantly reduced both the complexity and the workload for Active Directory administration in our environment."

"One Identity Active Roles has had a transformative impact on my organization, moving from controlled chaos to governed operations."

"It has eliminated a lot of tedious IT tasks, especially when people leave, with ten or 15 scripted actions that Active Roles always does the same way and at the same time."

"One Identity Active Roles brings a positive impact to organizations in that they will start realizing the ROI in a much faster manner because the implementation time is very short and it is easy to use."

"Another good feature is the change history. It's centralized in a single place and allows us to manage people's Active Directory domains from a central location. We can also drill down into individual objects in a troubleshooting or even an auditing situation. We can show evidence to auditors by drilling down into the individual history. It gives you all the history of what happened around an individual object. That is something that would be almost impossible to do in Active Directory, or extremely complicated."

"It gives us attribute-level control and the AD management features work very well."

More One Identity Active Roles pros

"Automatic provisioning by designed workflows are valuable in any authorization audit."

"The most valuable feature is the user experience for managing information."

"The tool's most valuable features are its access control and approval of access requests. The self-service password reset feature is efficient. Role management capabilities streamline user access by assigning and revoking roles."

"What's most valuable in SAP Identity Management is that it's easily an out-of-the-box solution for connectivity with SAP applications. We do not have to do any customizations, and this makes the solution very compatible with most SAP applications. SAP Identity Management is also very user-friendly."

"There is definitely ROI because we use this as our enterprise-wide SSO solution."

"The most valuable features of SAP Identity Management are business roles and automated user provisioning."

"IBM really gives you the power to implement a lot of functionality outside the current implementation if you know how to build the functionality you want."

"Some processes that they used to perform in two to three days now take one to two hours, which has been really beneficial for them regarding the time saved."

More SAP Identity Management pros

Cons

"It's a fairly stable product but not perfectly reliable."

"The user interface needs to be more modern and scalable. There are certain screen resolutions where the product is unusable."

"The ability to send logs to a SIEM would be very beneficial."

"I am not really satisfied with the customer support for One Identity Active Roles as the support is pretty limited."

"Additional documentation about the Angular web interface is needed."

"First is the user interface and experience. While it is functional, it can feel complex for a new user and less intuitive, especially for onboarding a new user."

"One Identity Active Roles could be improved by making the initial setup and policy configuration simpler and more intuitive, especially for complex enterprise AD environments."

"The third area for improvement, which is the weakest portion of ARS, is the workflow engine, which was introduced a few years ago. It's slow and not very intuitive to use, so I would like to see improvement there."

More One Identity Active Roles cons

"One of the areas for improvement in the solution is its user interface which needs to be up-to-date and fancier, in particular, have better visualization in terms of the tabs and buttons."

"I find SAP Identity Management complicated to use. Maintaining it is also complex."

"What needs improvement in SAP Identity Management is its compatibility with third-party applications. We'd like to get connectors or plugin settings to make it easier to manage other applications, whether SAP or non SAP applications. As SAP Identity Management is not compatible with non SAP applications, some of the clients are looking for other IDM applications such as SalePoint and Saviynt, so this is an issue we've observed in the solution."

"As SAP Identity Management is not compatible with non SAP applications, some of the clients are looking for other IDM applications such as SalePoint and Saviynt, so this is an issue we've observed in the solution."

"Research and marketing need to be improved."

"A lack of startup connectors to different systems, and could have better connectors for SAP IDM."

"There are also some issues with the UI, the ACLs and performance - depending on the configuration and Identity DB size."

"The product needs better UI customization and the administration console is outdated in this version."

More SAP Identity Management cons

Pricing and Cost Advice

"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."

"The licensing model is a simple user-based model, not that much complicated."

"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."

"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."

"The pricing is on the higher end."

"It's fairly priced."

"It's expensive."

"The licensing cost varies depending on the specific requirements and deployment size."

"I rate the solution's pricing a four out of ten."

"When evaluating the price of any product, I first look at how it meets my business requirements and if it meets requirements adequately and predictively. Currently, I don't see this from SAP Identity Management, so pricing for it is expensive, in my opinion."

See which vendors are best for you

Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.

See recommendations

894,807 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

19%

Computer Software Company

Financial Services Firm

Manufacturing Company

14%

Energy/Utilities Company

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	64
Midsize Enterprise	14
Large Enterprise	36

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	3
Large Enterprise	6

Questions from the Community

What is your experience regarding pricing and costs for One Identity Active Roles?

I had a great experience with the setup cost, pricing, and licensing costs because the sales team of the vendor is really helpful during the entire procurement of the solution, and we are grateful ...

What needs improvement with One Identity Active Roles?

I do not see anything that needs to be changed as of now concerning the organization's needs because it is working very well and it is providing great features with great processes. The initial set...

What is your primary use case for One Identity Active Roles?

When a new user is created, predefined rules automatically apply naming standards and assigned groups. This reduces manual tasks while ensuring consistency across all operations. It prevents and av...

What needs improvement with SAP Identity Management?

What is your primary use case for SAP Identity Management?

The use cases for SAP Identity Management include the logistics company, and we also have a beverage company that is using SAP Identity Management. We did not make the migration for them, but we im...

What advice do you have for others considering SAP Identity Management?

My clients use SAP Identity Management for managing access rights efficiently based on user roles. I have experience with other IAM tools, having worked for Oracle three or four years ago, but I ca...

ManageEngine ADManager Plus vs One Identity Active Roles

Comparisons

Compared 13% of the time

Netwrix Auditor vs One Identity Active Roles

Compared 9% of the time

Active Administrator vs One Identity Active Roles

Compared 7% of the time

One Identity Manager vs One Identity Active Roles

Compared 6% of the time

SailPoint Identity Security Cloud vs One Identity Active Roles

Compared 6% of the time

More One Identity Active Roles Competitors

SailPoint Identity Security Cloud vs SAP Identity Management

Compared 15% of the time

Symantec Identity Governance and Administration vs SAP Identity Management

Compared 8% of the time

One Identity Manager vs SAP Identity Management

Compared 7% of the time

Oracle Identity Governance vs SAP Identity Management

Compared 5% of the time

Microsoft Identity Manager vs SAP Identity Management

Compared 5% of the time

More SAP Identity Management Competitors

Product Reports

One Identity Active Roles

Download One Identity Active Roles product report

SAP Identity Management

Download SAP Identity Management product report

Also Known As

Quest Active Roles

SAP NetWeaver Identity Management, NetWeaver Identity Management

Overview

One Identity Active Roles enhances Active Directory management by automating essential tasks and improving security through efficient delegation and role-based access control.

One Identity Active Roles offers advanced features for managing Active Directory environments, aiding in automating user provisioning, group management, and de-provisioning. It integrates seamlessly with Microsoft environments and provides centralized management for both on-premises and cloud identities. By improving operational efficiency and reducing manual errors, it enforces robust governance across organizations. Active Roles includes auditing and reporting tools that strengthen compliance and security monitoring. Companies find the setup could be simplified with better documentation, more customization options in reporting, and expanded cloud integration, particularly with Azure. Improved workflows and deeper native connectors are needed for seamless automation. Price adjustments and user-friendly analytics with intuitive dashboards are recommended for better usability.

What are the key features of One Identity Active Roles?

Automation of Active Directory tasks: Streamlines processes such as user provisioning and de-provisioning.
Role-based access control: Ensures secure delegation of administration tasks.
Auditing and reporting: Enhances compliance with security monitoring capabilities.
Integration with Microsoft: Seamlessly manages on-premises and cloud identities.

What benefits and ROI should users evaluate?

Operational Efficiency: Reduces manual errors and streamlines active directory tasks.
Security and Governance: Enforces policy-based controls for secure user management.
Compliance: Strengthens monitoring and compliance through advanced auditing.
Usability: Suggests enhancements in workflow and analytics for better management.

Many industries deploy One Identity Active Roles for automating user lifecycle management, especially in Active Directory environments. It significantly eases operations by automating onboarding for new hires, managing role changes, and modifying access. The platform efficiently handles tasks like password resets and compliance audits while empowering teams to securely manage user access without requiring full administrative rights.

One Identity

SAP Identity Management provides seamless connectivity and process automation for user provisioning and access governance. It integrates with SAP applications, offering flexible custom logic and native analytics to enhance productivity and system compatibility.

SAP Identity Management addresses user access, provisioning, and lifecycle management within IT environments. By integrating with applications, users automate authorizations and secure systems with authentication. Flexibility in custom logic development aids in creating workflows, supporting seamless access management. Despite its strengths, improvements are needed in UI customization, third-party compatibility, and connector range, particularly in non-SAP applications and cloud integration.

What are the key features of SAP Identity Management?

Integration Capabilities: Supports connection with SAP applications and other systems.
Process Automation: Automates user provisioning and role management to streamline operations.
Access Governance: Enhances security and user administration through efficient access control.
Custom Logic Development: Provides flexibility in developing tailored processes.
Native Analytics: Improves productivity and data accessibility with built-in analytics.

What benefits and ROI should users consider?

Time Savings: Reduces manual processes leading to efficiency gains.
Enhanced Reporting: Offers improved insights and reporting capabilities.
System Compatibility: Ensures stable integration with various systems.
Improved Performance: Enhances user satisfaction with stable and reliable operation.

In industries like finance, retail, and manufacturing, SAP Identity Management is implemented to manage complex IT environments, ensuring secure authentication and efficient access to essential applications. Companies leverage its capabilities to streamline processes and maintain compliance with industry standards.

SAP

Sample Customers

City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies

State of Indiana, Automotive Resources International (ARI), Alliander N.V., Chemion Logistik GmbH, Seoul National University Bundang Hospital (SNUBH)

One Identity Active Roles vs. SAP Identity Management