No more typing reviews! Try our Samantha, our new voice AI agent.

One Identity Active Roles vs SAP Identity Management comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

One Identity Active Roles
Ranking in User Provisioning Software
3rd
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
38
Ranking in other categories
Active Directory Management (1st), Non-Human Identity Management (NHIM) (4th)
SAP Identity Management
Ranking in User Provisioning Software
7th
Average Rating
7.8
Reviews Sentiment
5.9
Number of Reviews
14
Ranking in other categories
Identity Management (IM) (14th)
 

Mindshare comparison

As of April 2026, in the User Provisioning Software category, the mindshare of One Identity Active Roles is 6.4%, up from 6.2% compared to the previous year. The mindshare of SAP Identity Management is 5.7%, up from 5.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Provisioning Software Mindshare Distribution
ProductMindshare (%)
One Identity Active Roles6.4%
SAP Identity Management5.7%
Other87.9%
User Provisioning Software
 

Featured Reviews

SN
Identity and Access Management Specialist at a university with 10,001+ employees
Governed access has transformed user management and now reduces internal attack surface
The crown jewels of One Identity Active Roles that make my life as an architect easier are Access Templates, Virtual Attributes, Workflow and Approval Engine, and Managed Units, which allowed us to structure our directory into a policy-driven asset rather than constantly firefighting manual errors. Access Templates and Managed Units are the real secret sauce of One Identity Active Roles for us. Access Templates standardize permission settings, reducing security drift and allowing for the creation of modular permission bundles such as those I created for the Tier 1 help desk. Managed Units help me stay organized without rewriting the physical structure of the directory, saving me hours of cleanup. A critical feature that I found essential for a clean environment is Dynamic Group management, which prevents permission creep by using rule-defined group memberships rather than manual additions. One Identity Active Roles automatically manages group membership based on rules tied to the HR records. One Identity Active Roles has had a transformative impact on my organization, moving from controlled chaos to governed operations. The biggest win has been a reduction in the internal attack surface, achieving over a 40% reduction in unauthorized or accidental access attempts.
FM
Sales Executive at Minsait
Identity management enhances connectivity and productivity with streamlined access and robust security, offering time-saving processes and facilitating seamless integration with other BI tools
One area that could be improved with SAP Identity Management, other than support, is user engagement from an implementation perspective. It would be beneficial for SAP to extend their events and workshops that are currently performed for partners to their final customers, as many customers want to know what's new and what else they can do without solely depending on the partners. For SAP support in Brazil, everything is in English, which poses a difficulty for many customers. The support could be improved for the specific needs in Brazil, as many customers have difficulty accessing the support center due to the language barrier. This feedback is specific to Brazil, though it's unclear if SAP receives similar feedback from other countries. It could certainly be enhanced with Portuguese documents, among other improvements.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It gives us attribute-level control and the AD management features work very well."
"It gives us attribute-level control and the AD management features work very well."
"It is an easier way for me to manage Active Directory with more advanced features."
"It's valuable to us in that it resembles the native tools that most people have grown accustomed to... Active Roles resembles traditional tools, such as from Microsoft. That is really good because it eases the way people interact with the tool."
"Operational issues are much easier and more reliable with Quest ActiveRoles's directory layer and portal."
"The solution is stable."
"I advise others looking into using One Identity Active Roles to utilize it because the automation in workflow is perfect, and the ability to provide detailed auditing and assist in internal audits is excellent."
"There are a lot of other benefits that we take advantage of that are above and beyond the native Active Directory functions that Microsoft provides."
"Automatic provisioning by designed workflows are valuable in any authorization audit."
"The tool's most valuable features are its access control and approval of access requests. The self-service password reset feature is efficient. Role management capabilities streamline user access by assigning and revoking roles."
"It provides basic automatic user administration and role provisioning to save time."
"Some processes that they used to perform in two to three days now take one to two hours, which has been really beneficial for them regarding the time saved."
"The most valuable features of SAP Identity Management are business roles and automated user provisioning."
"The most valuable feature is the user experience for managing information."
"IBM really gives you the power to implement a lot of functionality outside the current implementation if you know how to build the functionality you want."
"The most valuable feature is the user experience for managing information."
 

Cons

"The third area for improvement, which is the weakest portion of ARS, is the workflow engine, which was introduced a few years ago. It's slow and not very intuitive to use, so I would like to see improvement there."
"For the AAD management feature, it needs to improve the objects that we can manage and the security."
"In terms of improvement, it could be made even more user-friendly for administrators when they need to create new workflows and rulesets."
"We're pulling the identity components out because ARS is not an identity platform. It's not meant to be one. It's not robust enough to handle it all."
"I've had a difficult time getting it to cooperate with Azure in the cloud and, while the support staff are very good and very knowledgeable, what they assist with just on a call doesn't go deep enough to help with a number of issues."
"I have not seen a return on investment or any relevant metrics and I cannot imagine we would have saved any employees or any full-time equivalents for One Identity Active Roles."
"In terms of improvement, it could be made even more user-friendly for administrators when they need to create new workflows and rule sets."
"I want One Identity Active Roles to improve in the area of user interface, modernizing it to feel more like a SaaS tool and to have user-friendly navigation."
"I find SAP Identity Management complicated to use. Maintaining it is also complex."
"One of the areas for improvement in the solution is its user interface which needs to be up-to-date and fancier, in particular, have better visualization in terms of the tabs and buttons. The user interface of SAP Identity Management should be improved based on the latest trends."
"It needs to have the SSO for the HANA modules that SAP is releasing."
"SAP Identity Management can improve risk analysis and authority checks."
"The current functionality allows you only to change one user at a time. There is no option to maintain the business roles from the UI using standard validation or imports, so you have to build your business roles one by one."
"The standard one is not friendly and very time-consuming for elementary operation."
"One of the areas for improvement in the solution is its user interface which needs to be up-to-date and fancier, in particular, have better visualization in terms of the tabs and buttons."
"As SAP Identity Management is not compatible with non SAP applications, some of the clients are looking for other IDM applications such as SalePoint and Saviynt, so this is an issue we've observed in the solution."
 

Pricing and Cost Advice

"It's fairly priced."
"The licensing model is a simple user-based model, not that much complicated."
"It's expensive."
"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."
"The pricing is on the higher end."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."
"The licensing cost varies depending on the specific requirements and deployment size."
"When evaluating the price of any product, I first look at how it meets my business requirements and if it meets requirements adequately and predictively. Currently, I don't see this from SAP Identity Management, so pricing for it is expensive, in my opinion."
"I rate the solution's pricing a four out of ten."
report
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
885,789 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
9%
Manufacturing Company
8%
Financial Services Firm
8%
University
7%
Manufacturing Company
14%
Energy/Utilities Company
7%
Comms Service Provider
7%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business23
Midsize Enterprise7
Large Enterprise21
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise3
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for One Identity Active Roles?
I am aware of the pricing; it is on the expensive side, though pricing is not my department.
What needs improvement with One Identity Active Roles?
One Identity Active Roles can be improved by simplifying the setup process since a small team in a small business requires implementation without extensive IT support. Additionally, the pricing cou...
What is your primary use case for One Identity Active Roles?
One Identity Active Roles is used primarily to simplify and automate Active Directory user and permission management. The solution automates routine tasks such as account creation, password reset, ...
What do you like most about SAP Identity Management?
The tool's most valuable features are its access control and approval of access requests. The self-service password reset feature is efficient. Role management capabilities streamline user access b...
What needs improvement with SAP Identity Management?
One area that could be improved with SAP Identity Management, other than support, is user engagement from an implementation perspective. It would be beneficial for SAP to extend their events and wo...
What is your primary use case for SAP Identity Management?
The use cases for SAP Identity Management include the logistics company, and we also have a beverage company that is using SAP Identity Management. We did not make the migration for them, but we im...
 

Also Known As

Quest Active Roles
SAP NetWeaver Identity Management, NetWeaver Identity Management
 

Overview

 

Sample Customers

City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
State of Indiana, Automotive Resources International (ARI), Alliander N.V., Chemion Logistik GmbH, Seoul National University Bundang Hospital (SNUBH)
Find out what your peers are saying about One Identity Active Roles vs. SAP Identity Management and other solutions. Updated: March 2026.
885,789 professionals have used our research since 2012.