No more typing reviews! Try our Samantha, our new voice AI agent.

One Identity Active Roles vs SAP Identity Management comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

One Identity Active Roles
Ranking in User Provisioning Software
3rd
Average Rating
8.6
Reviews Sentiment
6.6
Number of Reviews
41
Ranking in other categories
Active Directory Management (1st), Non-Human Identity Management (NHIM) (3rd)
SAP Identity Management
Ranking in User Provisioning Software
7th
Average Rating
7.8
Reviews Sentiment
5.9
Number of Reviews
14
Ranking in other categories
Identity Management (IM) (16th)
 

Mindshare comparison

As of April 2026, in the User Provisioning Software category, the mindshare of One Identity Active Roles is 6.0%, up from 6.0% compared to the previous year. The mindshare of SAP Identity Management is 5.0%, down from 5.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Provisioning Software Mindshare Distribution
ProductMindshare (%)
One Identity Active Roles6.0%
SAP Identity Management5.0%
Other89.0%
User Provisioning Software
 

Featured Reviews

SN
Identity and Access Management Specialist at a university with 10,001+ employees
Governed access has transformed user management and now reduces internal attack surface
The crown jewels of One Identity Active Roles that make my life as an architect easier are Access Templates, Virtual Attributes, Workflow and Approval Engine, and Managed Units, which allowed us to structure our directory into a policy-driven asset rather than constantly firefighting manual errors. Access Templates and Managed Units are the real secret sauce of One Identity Active Roles for us. Access Templates standardize permission settings, reducing security drift and allowing for the creation of modular permission bundles such as those I created for the Tier 1 help desk. Managed Units help me stay organized without rewriting the physical structure of the directory, saving me hours of cleanup. A critical feature that I found essential for a clean environment is Dynamic Group management, which prevents permission creep by using rule-defined group memberships rather than manual additions. One Identity Active Roles automatically manages group membership based on rules tied to the HR records. One Identity Active Roles has had a transformative impact on my organization, moving from controlled chaos to governed operations. The biggest win has been a reduction in the internal attack surface, achieving over a 40% reduction in unauthorized or accidental access attempts.
FM
Sales Executive at Minsait
Identity management enhances connectivity and productivity with streamlined access and robust security, offering time-saving processes and facilitating seamless integration with other BI tools
One area that could be improved with SAP Identity Management, other than support, is user engagement from an implementation perspective. It would be beneficial for SAP to extend their events and workshops that are currently performed for partners to their final customers, as many customers want to know what's new and what else they can do without solely depending on the partners. For SAP support in Brazil, everything is in English, which poses a difficulty for many customers. The support could be improved for the specific needs in Brazil, as many customers have difficulty accessing the support center due to the language barrier. This feedback is specific to Brazil, though it's unclear if SAP receives similar feedback from other countries. It could certainly be enhanced with Portuguese documents, among other improvements.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best part of this Active Roles is the workflow engine. It features an industry-leading workflow automation feature. It's a visual PowerShell that allows task interruption."
"It gives us attribute-level control and the AD management features work very well."
"One Identity Active Roles absolutely helps reduce identity-based breaches, making it very seamless for our user base to ensure that folks in specific positions have the least privileged access possible across our for-profit healthcare conglomerate with thirty states and over fifty community hospitals under a single Active Directory domain."
"The ease of managing on-prem and cloud-based directories through a single pane of glass is good."
"Having a tool to manage all changes to AD from a single pane of glass is awesome."
"One Identity Active Roles is recommended as one of the best solutions currently in the market since it addresses many issues such as risks faced, inconsistent account setup, excessive admin privileges, lack of audit trails, and manual provisioning errors, all of which can be resolved with this solution."
"Since we have implemented One Identity Active Roles, we have seen significant improvements, with faster user management, better control over Active Directory, reduced errors, and improved security."
"It is very intuitive and close to the native tools. Since it is web-based, it does not require extensive training for our end users."
"The setup process is straightforward."
"IBM really gives you the power to implement a lot of functionality outside the current implementation if you know how to build the functionality you want."
"The most valuable features of SAP Identity Management are business roles and automated user provisioning."
"Some processes that they used to perform in two to three days now take one to two hours, which has been really beneficial for them regarding the time saved."
"I find it an excellent tool for data synchronization and cleansing."
"It provides basic automatic user administration and role provisioning to save time."
"What I like about SAP Identity Management is that it's stable for experienced users and suitable for access management, not just for SAP accounts, but for Active Directory, including file sharing and process sharing."
"NW IDM is extremely flexible, and with a small amount of effort you can integrate the basic provisioning for most of the commonly used modern systems."
 

Cons

"I have not seen a return on investment or any relevant metrics and I cannot imagine we would have saved any employees or any full-time equivalents for One Identity Active Roles."
"Additional documentation about the Angular web interface is needed."
"There are areas for improvement in One Identity Active Roles that include updating the web interface, creating an API accessible from the web, and improving overall performance, as it can be slow at times."
"Scripting options in different languages."
"Customer support is rated six. Sometimes having a fix for a bug takes too much time. While in production, issues tend to take a while to resolve."
"One area for improvement would be the initial setup, which feels a little bit complex and could be simplified."
"The ability to send logs to a SIEM would be very beneficial."
"I know they have increased support for Entra ID and mentioned providing support for AWS. A way to connect to various directories and integrate with cloud directories would be beneficial."
"I have encountered issues with the host authentication feature."
"Research and marketing need to be improved."
"A lack of startup connectors to different systems, and could have better connectors for SAP IDM."
"Research and marketing need to be improved."
"One of the areas for improvement in the solution is its user interface which needs to be up-to-date and fancier, in particular, have better visualization in terms of the tabs and buttons. The user interface of SAP Identity Management should be improved based on the latest trends."
"As SAP Identity Management is not compatible with non SAP applications, some of the clients are looking for other IDM applications such as SalePoint and Saviynt, so this is an issue we've observed in the solution."
"What needs improvement in SAP Identity Management is its compatibility with third-party applications. We'd like to get connectors or plugin settings to make it easier to manage other applications, whether SAP or non SAP applications. As SAP Identity Management is not compatible with non SAP applications, some of the clients are looking for other IDM applications such as SalePoint and Saviynt, so this is an issue we've observed in the solution."
"The pricing could be better."
 

Pricing and Cost Advice

"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."
"It's fairly priced."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"The licensing model is a simple user-based model, not that much complicated."
"The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment."
"The pricing is on the higher end."
"It's expensive."
"I rate the solution's pricing a four out of ten."
"The licensing cost varies depending on the specific requirements and deployment size."
"When evaluating the price of any product, I first look at how it meets my business requirements and if it meets requirements adequately and predictively. Currently, I don't see this from SAP Identity Management, so pricing for it is expensive, in my opinion."
report
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
886,426 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
9%
Computer Software Company
9%
Manufacturing Company
8%
Healthcare Company
7%
Manufacturing Company
14%
Energy/Utilities Company
7%
Financial Services Firm
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business23
Midsize Enterprise10
Large Enterprise21
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise3
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for One Identity Active Roles?
I am aware of the pricing; it is on the expensive side, though pricing is not my department.
What needs improvement with One Identity Active Roles?
One Identity Active Roles can be improved by simplifying the setup process since a small team in a small business requires implementation without extensive IT support. Additionally, the pricing cou...
What is your primary use case for One Identity Active Roles?
One Identity Active Roles is used primarily to simplify and automate Active Directory user and permission management. The solution automates routine tasks such as account creation, password reset, ...
What do you like most about SAP Identity Management?
The tool's most valuable features are its access control and approval of access requests. The self-service password reset feature is efficient. Role management capabilities streamline user access b...
What needs improvement with SAP Identity Management?
One area that could be improved with SAP Identity Management, other than support, is user engagement from an implementation perspective. It would be beneficial for SAP to extend their events and wo...
What is your primary use case for SAP Identity Management?
The use cases for SAP Identity Management include the logistics company, and we also have a beverage company that is using SAP Identity Management. We did not make the migration for them, but we im...
 

Also Known As

Quest Active Roles
SAP NetWeaver Identity Management, NetWeaver Identity Management
 

Overview

 

Sample Customers

City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
State of Indiana, Automotive Resources International (ARI), Alliander N.V., Chemion Logistik GmbH, Seoul National University Bundang Hospital (SNUBH)
Find out what your peers are saying about One Identity Active Roles vs. SAP Identity Management and other solutions. Updated: March 2026.
886,426 professionals have used our research since 2012.