One Identity Active Roles vs SAP Identity Management comparison

One Identity Active Roles vs. SAP Identity Management

Download the complete report

Helped 894,668 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

One Identity Active Roles

Ranking in User Provisioning Software

3rd

Average Rating

8.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Active Directory Management (1st), Non-Human Identity Management (NHIM) (2nd)

SAP Identity Management

Ranking in User Provisioning Software

7th

Average Rating

7.8

Reviews Sentiment

5.9

Number of Reviews

Ranking in other categories

Identity Management (IM) (16th)

Mindshare comparison

As of May 2026, in the User Provisioning Software category, the mindshare of One Identity Active Roles is 5.8%, down from 6.2% compared to the previous year. The mindshare of SAP Identity Management is 4.8%, down from 6.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

User Provisioning Software Mindshare Distribution
Product	Mindshare (%)
One Identity Active Roles	5.8%
SAP Identity Management	4.8%
Other	89.4%

User Provisioning Software

Featured Reviews

Mahesh Malve

Senior Business Development Executive at DigitalTrack Solutions Ind Pvt Ltd

Automation has transformed user lifecycle tasks and now enforces consistent secure access

While One Identity Active Roles is a strong platform, a few improvements would make it even better. Many users feel the user interface is not very modern or intuitive, and it can take time to get used to navigating the console and workflows. Another improvement area is the learning curve and setup complexity. One Identity Active Roles is very powerful, but initial configuration, especially for policies, workflows, and delegation, can be complex and require experienced resources. From an integration perspective, although it supports multiple systems, organizations would benefit from more out-of-the-box connectors and smoother cloud integrations such as Azure Active Directory and software-as-a-service applications, as some setups currently require customization. In terms of reporting, while auditing is strong, generating business-friendly reports can be challenging. Users have mentioned the need for better dashboards and easier report generation. There are also some performance considerations, especially in large environments, such as slower PowerShell execution or delays in dynamic group processing in certain cases. Overall, improvements in user interface, ease of use, integration, reporting, and performance optimization would significantly enhance the product experience.

Read full review

Fabiano Marques

Sales Executive at Minsait

Identity management enhances connectivity and productivity with streamlined access and robust security, offering time-saving processes and facilitating seamless integration with other BI tools

One area that could be improved with SAP Identity Management, other than support, is user engagement from an implementation perspective. It would be beneficial for SAP to extend their events and workshops that are currently performed for partners to their final customers, as many customers want to know what's new and what else they can do without solely depending on the partners. For SAP support in Brazil, everything is in English, which poses a difficulty for many customers. The support could be improved for the specific needs in Brazil, as many customers have difficulty accessing the support center due to the language barrier. This feedback is specific to Brazil, though it's unclear if SAP receives similar feedback from other countries. It could certainly be enhanced with Portuguese documents, among other improvements.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is an easier way for me to manage Active Directory with more advanced features."

"One Identity Active Roles has had a very positive impact on the organization, especially in terms of efficiency, security, and compliance."

"Operational issues are much easier and more reliable with Quest ActiveRoles's directory layer and portal."

"There are a lot of other benefits that we take advantage of that are above and beyond the native Active Directory functions that Microsoft provides."

"One Identity Active Roles brings a positive impact to organizations in that they will start realizing the ROI in a much faster manner because the implementation time is very short and it is easy to use."

"One Identity Active Roles has significantly reduced both the complexity and the workload for Active Directory administration in our environment."

"In comparison to native Active Directory tools, using Active Roles for delegation is so much better. It uses an access template and that makes it easy to see who can access what. In fact, you can do that for many objects as well."

"Clear ROI has been seen with One Identity Active Roles, mainly through the time savings and reduced manual administration."

More One Identity Active Roles pros

"The tool's most valuable features are its access control and approval of access requests. The self-service password reset feature is efficient. Role management capabilities streamline user access by assigning and revoking roles."

"I find it an excellent tool for data synchronization and cleansing."

"IBM really gives you the power to implement a lot of functionality outside the current implementation if you know how to build the functionality you want."

"It provides basic automatic user administration and role provisioning to save time."

"NW IDM is extremely flexible, and with a small amount of effort you can integrate the basic provisioning for most of the commonly used modern systems."

"Some processes that they used to perform in two to three days now take one to two hours, which has been really beneficial for them regarding the time saved."

"What I found most valuable in SAP Identity Management is process automation. The solution also gives transparency about what is happening and why which I find beneficial. Another feature I found valuable in SAP Identity Management is integration. It has very good integration."

"What I like about SAP Identity Management is that it's stable for experienced users and suitable for access management, not just for SAP accounts, but for Active Directory, including file sharing and process sharing."

More SAP Identity Management pros

Cons

"Overall, One Identity Active Roles is a very powerful tool, but there are definitely areas where it can be improved."

"One Identity Active Roles is a strong tool, but there are a few areas where it can be improved."

"The user and group management in Azure AD could be better. Our focus these days is dynamic sharing with several on-prem Microsoft applications like SharePoint."

"If One Identity Active Roles has to be positioned for all customers, not just the entities which are being regulated, then the pricing has to be normalized."

"One area of improvement is the user interface and overall usability."

"One area is the user interface and administrative experience. While the platform is feature-rich, some workflows and configuration screens can feel complex for new administrators, especially in large enterprise environments with extensive policy configurations."

"The possibility to request group membership, similar to the past, was disabled and moved to Identity Manager."

"The user interface needs to be more modern and scalable. There are certain screen resolutions where the product is unusable."

More One Identity Active Roles cons

"What needs improvement in SAP Identity Management is its compatibility with third-party applications. We'd like to get connectors or plugin settings to make it easier to manage other applications, whether SAP or non SAP applications. As SAP Identity Management is not compatible with non SAP applications, some of the clients are looking for other IDM applications such as SalePoint and Saviynt, so this is an issue we've observed in the solution."

"One of the areas for improvement in the solution is its user interface which needs to be up-to-date and fancier, in particular, have better visualization in terms of the tabs and buttons."

"The current functionality allows you only to change one user at a time. There is no option to maintain the business roles from the UI using standard validation or imports, so you have to build your business roles one by one."

"It needs to have the SSO for the HANA modules that SAP is releasing."

"I find SAP Identity Management complicated to use. Maintaining it is also complex."

"It needs to have the SSO for the HANA modules that SAP is releasing."

"Research and marketing need to be improved."

"The standard one is not friendly and very time-consuming for elementary operation."

More SAP Identity Management cons

Pricing and Cost Advice

"The pricing is on the higher end."

"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."

"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."

"It's fairly priced."

"It's expensive."

"The licensing model is a simple user-based model, not that much complicated."

"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."

"I rate the solution's pricing a four out of ten."

"The licensing cost varies depending on the specific requirements and deployment size."

"When evaluating the price of any product, I first look at how it meets my business requirements and if it meets requirements adequately and predictively. Currently, I don't see this from SAP Identity Management, so pricing for it is expensive, in my opinion."

See which vendors are best for you

Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.

See recommendations

894,668 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

19%

Computer Software Company

Financial Services Firm

Manufacturing Company

14%

Energy/Utilities Company

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	61
Midsize Enterprise	13
Large Enterprise	34

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	3
Large Enterprise	6

Questions from the Community

What is your experience regarding pricing and costs for One Identity Active Roles?

I had a great experience with the setup cost, pricing, and licensing costs because the sales team of the vendor is really helpful during the entire procurement of the solution, and we are grateful ...

What needs improvement with One Identity Active Roles?

I do not see anything that needs to be changed as of now concerning the organization's needs because it is working very well and it is providing great features with great processes. The initial set...

What is your primary use case for One Identity Active Roles?

When a new user is created, predefined rules automatically apply naming standards and assigned groups. This reduces manual tasks while ensuring consistency across all operations. It prevents and av...

What needs improvement with SAP Identity Management?

What is your primary use case for SAP Identity Management?

The use cases for SAP Identity Management include the logistics company, and we also have a beverage company that is using SAP Identity Management. We did not make the migration for them, but we im...

What advice do you have for others considering SAP Identity Management?

My clients use SAP Identity Management for managing access rights efficiently based on user roles. I have experience with other IAM tools, having worked for Oracle three or four years ago, but I ca...

ManageEngine ADManager Plus vs One Identity Active Roles

Comparisons

Compared 13% of the time

Netwrix Auditor vs One Identity Active Roles

Compared 9% of the time

Active Administrator vs One Identity Active Roles

Compared 8% of the time

One Identity Manager vs One Identity Active Roles

Compared 7% of the time

SailPoint Identity Security Cloud vs One Identity Active Roles

Compared 6% of the time

More One Identity Active Roles Competitors

SailPoint Identity Security Cloud vs SAP Identity Management

Compared 15% of the time

Symantec Identity Governance and Administration vs SAP Identity Management

Compared 8% of the time

One Identity Manager vs SAP Identity Management

Compared 7% of the time

Oracle Identity Governance vs SAP Identity Management

Compared 5% of the time

Microsoft Identity Manager vs SAP Identity Management

Compared 5% of the time

More SAP Identity Management Competitors

Product Reports

One Identity Active Roles

Download One Identity Active Roles product report

SAP Identity Management

Download SAP Identity Management product report

Also Known As

Quest Active Roles

SAP NetWeaver Identity Management, NetWeaver Identity Management

Overview

One Identity Active Roles enhances Active Directory management by automating essential tasks and improving security through efficient delegation and role-based access control.

One Identity Active Roles offers advanced features for managing Active Directory environments, aiding in automating user provisioning, group management, and de-provisioning. It integrates seamlessly with Microsoft environments and provides centralized management for both on-premises and cloud identities. By improving operational efficiency and reducing manual errors, it enforces robust governance across organizations. Active Roles includes auditing and reporting tools that strengthen compliance and security monitoring. Companies find the setup could be simplified with better documentation, more customization options in reporting, and expanded cloud integration, particularly with Azure. Improved workflows and deeper native connectors are needed for seamless automation. Price adjustments and user-friendly analytics with intuitive dashboards are recommended for better usability.

What are the key features of One Identity Active Roles?

Automation of Active Directory tasks: Streamlines processes such as user provisioning and de-provisioning.
Role-based access control: Ensures secure delegation of administration tasks.
Auditing and reporting: Enhances compliance with security monitoring capabilities.
Integration with Microsoft: Seamlessly manages on-premises and cloud identities.

What benefits and ROI should users evaluate?

Operational Efficiency: Reduces manual errors and streamlines active directory tasks.
Security and Governance: Enforces policy-based controls for secure user management.
Compliance: Strengthens monitoring and compliance through advanced auditing.
Usability: Suggests enhancements in workflow and analytics for better management.

Many industries deploy One Identity Active Roles for automating user lifecycle management, especially in Active Directory environments. It significantly eases operations by automating onboarding for new hires, managing role changes, and modifying access. The platform efficiently handles tasks like password resets and compliance audits while empowering teams to securely manage user access without requiring full administrative rights.

One Identity

SAP Identity Management provides seamless connectivity and process automation for user provisioning and access governance. It integrates with SAP applications, offering flexible custom logic and native analytics to enhance productivity and system compatibility.

SAP Identity Management addresses user access, provisioning, and lifecycle management within IT environments. By integrating with applications, users automate authorizations and secure systems with authentication. Flexibility in custom logic development aids in creating workflows, supporting seamless access management. Despite its strengths, improvements are needed in UI customization, third-party compatibility, and connector range, particularly in non-SAP applications and cloud integration.

What are the key features of SAP Identity Management?

Integration Capabilities: Supports connection with SAP applications and other systems.
Process Automation: Automates user provisioning and role management to streamline operations.
Access Governance: Enhances security and user administration through efficient access control.
Custom Logic Development: Provides flexibility in developing tailored processes.
Native Analytics: Improves productivity and data accessibility with built-in analytics.

What benefits and ROI should users consider?

Time Savings: Reduces manual processes leading to efficiency gains.
Enhanced Reporting: Offers improved insights and reporting capabilities.
System Compatibility: Ensures stable integration with various systems.
Improved Performance: Enhances user satisfaction with stable and reliable operation.

In industries like finance, retail, and manufacturing, SAP Identity Management is implemented to manage complex IT environments, ensuring secure authentication and efficient access to essential applications. Companies leverage its capabilities to streamline processes and maintain compliance with industry standards.

SAP

Sample Customers

City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies

State of Indiana, Automotive Resources International (ARI), Alliander N.V., Chemion Logistik GmbH, Seoul National University Bundang Hospital (SNUBH)

One Identity Active Roles vs. SAP Identity Management