One Identity Active Roles vs SAP Identity Management comparison

One Identity Active Roles vs. SAP Identity Management

Download the complete report

Helped 892,776 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

One Identity Active Roles

Ranking in User Provisioning Software

3rd

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Active Directory Management (1st), Non-Human Identity Management (NHIM) (2nd)

SAP Identity Management

Ranking in User Provisioning Software

7th

Average Rating

7.8

Reviews Sentiment

5.9

Number of Reviews

Ranking in other categories

Identity Management (IM) (16th)

Mindshare comparison

As of May 2026, in the User Provisioning Software category, the mindshare of One Identity Active Roles is 5.8%, down from 6.2% compared to the previous year. The mindshare of SAP Identity Management is 4.8%, down from 6.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

User Provisioning Software Mindshare Distribution
Product	Mindshare (%)
One Identity Active Roles	5.8%
SAP Identity Management	4.8%
Other	89.4%

User Provisioning Software

Featured Reviews

Mahesh Malve

Senior Business Development Executive at DigitalTrack Solutions Ind Pvt Ltd

Automation has transformed user lifecycle tasks and now enforces consistent secure access

While One Identity Active Roles is a strong platform, a few improvements would make it even better. Many users feel the user interface is not very modern or intuitive, and it can take time to get used to navigating the console and workflows. Another improvement area is the learning curve and setup complexity. One Identity Active Roles is very powerful, but initial configuration, especially for policies, workflows, and delegation, can be complex and require experienced resources. From an integration perspective, although it supports multiple systems, organizations would benefit from more out-of-the-box connectors and smoother cloud integrations such as Azure Active Directory and software-as-a-service applications, as some setups currently require customization. In terms of reporting, while auditing is strong, generating business-friendly reports can be challenging. Users have mentioned the need for better dashboards and easier report generation. There are also some performance considerations, especially in large environments, such as slower PowerShell execution or delays in dynamic group processing in certain cases. Overall, improvements in user interface, ease of use, integration, reporting, and performance optimization would significantly enhance the product experience.

Read full review

Fabiano Marques

Sales Executive at Minsait

Identity management enhances connectivity and productivity with streamlined access and robust security, offering time-saving processes and facilitating seamless integration with other BI tools

One area that could be improved with SAP Identity Management, other than support, is user engagement from an implementation perspective. It would be beneficial for SAP to extend their events and workshops that are currently performed for partners to their final customers, as many customers want to know what's new and what else they can do without solely depending on the partners. For SAP support in Brazil, everything is in English, which poses a difficulty for many customers. The support could be improved for the specific needs in Brazil, as many customers have difficulty accessing the support center due to the language barrier. This feedback is specific to Brazil, though it's unclear if SAP receives similar feedback from other countries. It could certainly be enhanced with Portuguese documents, among other improvements.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It has helped increase operational efficiency in our organization."

"The best part of this Active Roles is the workflow engine. It features an industry-leading workflow automation feature. It's a visual PowerShell that allows task interruption."

"Active Roles is a thousand times better than native Microsoft tools."

"The provisioning and deprovisioning saves a lot of time and skips a lot of errors."

"One Identity Active Roles has had a very positive impact on our organization, mainly by improving efficiency and security at the same time."

"Overall, One Identity Active Roles has helped us move toward a more automated, secure, scalable identity management model, aligning IT operations more closely with business needs."

"We have two staff members and so per staff member, Active Roles saves us 0.2 FTE."

"It provides automatic provisioning/update/deprovisioning workflows from a source system to a target system."

More One Identity Active Roles pros

"What's most valuable in SAP Identity Management is that it's easily an out-of-the-box solution for connectivity with SAP applications. We do not have to do any customizations, and this makes the solution very compatible with most SAP applications. SAP Identity Management is also very user-friendly."

"NW IDM is extremely flexible, and with a small amount of effort you can integrate the basic provisioning for most of the commonly used modern systems."

"The most valuable feature is the user experience for managing information."

"The most valuable features of SAP Identity Management are business roles and automated user provisioning."

"With SAP IDM we have stopped manually managing all changes in user accounts after his/her transferring between organizational units."

"IBM really gives you the power to implement a lot of functionality outside the current implementation if you know how to build the functionality you want."

"The setup process is straightforward."

"Rather than implement a basic SSO, this solution assisted us with setting up two-factor authentication."

More SAP Identity Management pros

Cons

"The possibility to request group membership, similar to the past, was disabled and moved to Identity Manager."

"Some users find the admin console and workflow designer to be somewhat complex, so making the interface more modern could reduce the learning curve."

"One area where One Identity Active Roles can be improved is in simplifying its initial setup and configuration process, as deployment can be complex and time-consuming for a new user or organization without deep Active Directory expertise, which can slow down adoption and require additional training or support."

"There are some features that we think should be included in their next release. We think these things would take them to the next level: the ability to completely force or limit any dynamic group processing to specific servers, change-tracking reporting of virtual attributes, and the ability to use files as inputs to automation workloads. These things have also been talked about. Knowing them, they're probably working on them."

"I am not really satisfied with the customer support for One Identity Active Roles as the support is pretty limited."

"If One Identity Active Roles has to be positioned for all customers, not just the entities which are being regulated, then the pricing has to be normalized."

"Additional documentation about the Angular web interface is needed."

"The user interface needs to be more modern and scalable. There are certain screen resolutions where the product is unusable."

More One Identity Active Roles cons

"It needs to have the SSO for the HANA modules that SAP is releasing."

"What needs improvement in SAP Identity Management is its compatibility with third-party applications. We'd like to get connectors or plugin settings to make it easier to manage other applications, whether SAP or non SAP applications. As SAP Identity Management is not compatible with non SAP applications, some of the clients are looking for other IDM applications such as SalePoint and Saviynt, so this is an issue we've observed in the solution."

"SAP Identity Management can improve risk analysis and authority checks."

"One of the areas for improvement in the solution is its user interface which needs to be up-to-date and fancier, in particular, have better visualization in terms of the tabs and buttons. The user interface of SAP Identity Management should be improved based on the latest trends."

"One of the areas for improvement in the solution is its user interface which needs to be up-to-date and fancier, in particular, have better visualization in terms of the tabs and buttons."

"As SAP Identity Management is not compatible with non SAP applications, some of the clients are looking for other IDM applications such as SalePoint and Saviynt, so this is an issue we've observed in the solution."

"I have encountered issues with the host authentication feature."

"The standard one is not friendly and very time-consuming for elementary operation."

More SAP Identity Management cons

Pricing and Cost Advice

"The pricing is on the higher end."

"It's fairly priced."

"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."

"The licensing model is a simple user-based model, not that much complicated."

"It's expensive."

"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."

"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."

"I rate the solution's pricing a four out of ten."

"When evaluating the price of any product, I first look at how it meets my business requirements and if it meets requirements adequately and predictively. Currently, I don't see this from SAP Identity Management, so pricing for it is expensive, in my opinion."

"The licensing cost varies depending on the specific requirements and deployment size."

See which vendors are best for you

Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.

See recommendations

892,776 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

19%

Computer Software Company

Financial Services Firm

Manufacturing Company

14%

Energy/Utilities Company

Comms Service Provider

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	12
Large Enterprise	29

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	3
Large Enterprise	6

Questions from the Community

What is your experience regarding pricing and costs for One Identity Active Roles?

I had a great experience with the setup cost, pricing, and licensing costs because the sales team of the vendor is really helpful during the entire procurement of the solution, and we are grateful ...

What needs improvement with One Identity Active Roles?

I do not see anything that needs to be changed as of now concerning the organization's needs because it is working very well and it is providing great features with great processes. The initial set...

What is your primary use case for One Identity Active Roles?

When a new user is created, predefined rules automatically apply naming standards and assigned groups. This reduces manual tasks while ensuring consistency across all operations. It prevents and av...

What needs improvement with SAP Identity Management?

What is your primary use case for SAP Identity Management?

The use cases for SAP Identity Management include the logistics company, and we also have a beverage company that is using SAP Identity Management. We did not make the migration for them, but we im...

What advice do you have for others considering SAP Identity Management?

My clients use SAP Identity Management for managing access rights efficiently based on user roles. I have experience with other IAM tools, having worked for Oracle three or four years ago, but I ca...

ManageEngine ADManager Plus vs One Identity Active Roles

Comparisons

Compared 13% of the time

Netwrix Auditor vs One Identity Active Roles

Compared 9% of the time

Active Administrator vs One Identity Active Roles

Compared 8% of the time

One Identity Manager vs One Identity Active Roles

Compared 7% of the time

SailPoint Identity Security Cloud vs One Identity Active Roles

Compared 6% of the time

More One Identity Active Roles Competitors

SailPoint Identity Security Cloud vs SAP Identity Management

Compared 15% of the time

Symantec Identity Governance and Administration vs SAP Identity Management

Compared 8% of the time

One Identity Manager vs SAP Identity Management

Compared 6% of the time

Microsoft Identity Manager vs SAP Identity Management

Compared 5% of the time

Oracle Identity Governance vs SAP Identity Management

Compared 5% of the time

More SAP Identity Management Competitors

Product Reports

One Identity Active Roles

Download One Identity Active Roles product report

SAP Identity Management

Download SAP Identity Management product report

Also Known As

Quest Active Roles

SAP NetWeaver Identity Management, NetWeaver Identity Management

Overview

One Identity Active Roles enhances Active Directory management by automating essential tasks and improving security through efficient delegation and role-based access control.

One Identity Active Roles offers advanced features for managing Active Directory environments, aiding in automating user provisioning, group management, and de-provisioning. It integrates seamlessly with Microsoft environments and provides centralized management for both on-premises and cloud identities. By improving operational efficiency and reducing manual errors, it enforces robust governance across organizations. Active Roles includes auditing and reporting tools that strengthen compliance and security monitoring. Companies find the setup could be simplified with better documentation, more customization options in reporting, and expanded cloud integration, particularly with Azure. Improved workflows and deeper native connectors are needed for seamless automation. Price adjustments and user-friendly analytics with intuitive dashboards are recommended for better usability.

What are the key features of One Identity Active Roles?

Automation of Active Directory tasks: Streamlines processes such as user provisioning and de-provisioning.
Role-based access control: Ensures secure delegation of administration tasks.
Auditing and reporting: Enhances compliance with security monitoring capabilities.
Integration with Microsoft: Seamlessly manages on-premises and cloud identities.

What benefits and ROI should users evaluate?

Operational Efficiency: Reduces manual errors and streamlines active directory tasks.
Security and Governance: Enforces policy-based controls for secure user management.
Compliance: Strengthens monitoring and compliance through advanced auditing.
Usability: Suggests enhancements in workflow and analytics for better management.

Many industries deploy One Identity Active Roles for automating user lifecycle management, especially in Active Directory environments. It significantly eases operations by automating onboarding for new hires, managing role changes, and modifying access. The platform efficiently handles tasks like password resets and compliance audits while empowering teams to securely manage user access without requiring full administrative rights.

One Identity

SAP Identity Management provides seamless connectivity and process automation for user provisioning and access governance. It integrates with SAP applications, offering flexible custom logic and native analytics to enhance productivity and system compatibility.

SAP Identity Management addresses user access, provisioning, and lifecycle management within IT environments. By integrating with applications, users automate authorizations and secure systems with authentication. Flexibility in custom logic development aids in creating workflows, supporting seamless access management. Despite its strengths, improvements are needed in UI customization, third-party compatibility, and connector range, particularly in non-SAP applications and cloud integration.

What are the key features of SAP Identity Management?

Integration Capabilities: Supports connection with SAP applications and other systems.
Process Automation: Automates user provisioning and role management to streamline operations.
Access Governance: Enhances security and user administration through efficient access control.
Custom Logic Development: Provides flexibility in developing tailored processes.
Native Analytics: Improves productivity and data accessibility with built-in analytics.

What benefits and ROI should users consider?

Time Savings: Reduces manual processes leading to efficiency gains.
Enhanced Reporting: Offers improved insights and reporting capabilities.
System Compatibility: Ensures stable integration with various systems.
Improved Performance: Enhances user satisfaction with stable and reliable operation.

In industries like finance, retail, and manufacturing, SAP Identity Management is implemented to manage complex IT environments, ensuring secure authentication and efficient access to essential applications. Companies leverage its capabilities to streamline processes and maintain compliance with industry standards.

SAP

Sample Customers

City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies

State of Indiana, Automotive Resources International (ARI), Alliander N.V., Chemion Logistik GmbH, Seoul National University Bundang Hospital (SNUBH)

One Identity Active Roles vs. SAP Identity Management