Identity Manager by One Identity Reviews

I use One Identity Manager for managing permissions in my company. When I assign any kind of permissions to users or when I have to restrict some permissions, I use this particular application because it is very easy for me to manage from the centralized portal.

I use One Identity Manager to extend governance to cloud apps. It helps us in managing both on-premises and cloud apps. We have some cloud apps where we are using One Identity Manager because their administration is also required, so the system supports identity and access governance. Nowadays, this is a demand in IT environments. We manage all our cloud applications through this platform.

I do not use One Identity Manager on demand.

One Identity Manager features that I have found most valuable are, first of all, that it is a trusted solution.

It is easy for us to manage our permissions across multiple accounts. This provides complete governance and secures our organization data and the users. It reduces the risks that are associated with the services.

When we provide solutions as a service, we want a manager and a console from where we can manage everything, so that it should not compromise the security. It is more governance-focused. It actually does the job of administration. It safeguards our passwords, and all those things can be done from a single console.

One Identity Manager definitely provides IGA for the difficult to manage aspects of SAP such as T-codes, profiles, and roles, if it is applicable. It definitely provides comprehensive governance. That also helps us to manage all user entities and security policies because we have multiple security policies in our company.

It automates the account creation. In terms of compliance and governance, compliance with the regulatory requirements should be there. It is suitable for an organization like us, which has a diverse user basis.

From my personal experience, it is very easy to manage from one single console. I am managing all my PAM solutions, IAM solutions, and team solutions through One Identity Manager. We are managing the active directory through this as well. It is easy for us to manage all user level access and the governance part is there. Everything we find is under a single console, which is why the name says One Identity.

It is easy for us to configure the policies and tightly control our user access throughout the employee life cycle. The experience so far has been very good.

One Identity Manager helps me minimize gaps in governance coverage among test, dev, and production servers. It is helping us to do the identity and governance. It definitely minimizes the gaps for that because it has a solution called Identity Governance and Administration. It also has that application governance module from where we are managing the PAG, privileged access governance. All these modules help us to standardize our users' identity where we have to provide privileged access and standardize user access. That helps in identify this governance with the privileges. It helps in reducing the risk as well as satisfying the compliances.

Pricing for One Identity Manager is something that can be controlled or reduced. It is a very nice product, but if we compare it with multiple other products, a small business will not require too many licenses. However, big organizations like us will require 1,000 plus licenses. This could end up costing us $10,000 per month or more than that. The pricing is something which can be controlled or reduced a little so that for big organizations who are going to take more licenses every month, the burden should be less.

The implementation process for One Identity Manager was quite easy because we have the One Identity installation guide that describes the entire installation and the initial operations of this platform. The setup was quite easy. The updates were there, but we should be provided with every new update or new customization. It would be good if we keep on receiving information about the guides. This would be helpful.

Other than when we raise a support ticket, that is the only time we get to know the solution. It would be good if any update should be provided immediately to the customers. Every now and then there are changes in the technologies, so they should also keep their customers updated with all the latest technologies and workflows. If they keep on circulating the installation guides, it would be helpful.

I am still using One Identity Manager.

One Identity Manager is a nice product. The only thing is that pricing should be improved. Apart from that, regarding the access part, it is of course pretty clear, but initially they started with their own login credentials. The single sign-on eliminates the need for multiple passwords, which is a good thing.

Apart from the pricing, there is nothing else I have to say because it offers us a clear 360 degree view of the governance posture, which is very common for an organization and big organizations like us. That is something which is good, and apart from the pricing, the product performs well.

I would assess One Identity Manager as quite simple for providing a single platform for enterprise level administration and governance of users, data, and privileged accounts. It acts as a single point from where we can manage all our policy in terms of governance. It is easy for us to get the single platform.

One Identity Manager portfolio is quite comprehensive. It is secure and the platform has high integration capability. The strong automation is also there. As far as we understand so far, it is scalable in the cloud as well as a hybrid environment. It is performing well.

My experience with the customer service I received from my One Identity partner has been good so far.

The implementation process for One Identity Manager was quite easy because we have the One Identity installation guide that describes the entire installation and the initial operations of this platform. The setup was quite easy. The updates were there, but we should be provided with every new update or new customization. It would be good if we keep on receiving information about the guides. This would be helpful.

Other than when we raise a support ticket, that is the only time we get to know the solution. It would be good if any update should be provided immediately to the customers. Every now and then there are changes in the technologies, so they should also keep their customers updated with all the latest technologies and workflows.

My One Identity partner did help us with the implementation of the product.

It was quite easy for them to work because as soon as we got the subscription or the final version of the product, they have a dedicated team which actually works for the implementation. Since they are directly working with my team and with me, it was quite easy for us to understand how we can implement this identity manager and how we can customize this so that we can maintain the governance and administration.

They helped, and I think it was quite easy for us to get this kind of implementation done.

One Identity Manager is deployed on cloud for us.

We are using Azure for One Identity Manager. My overall review rating for this product is 7.

My main use case for Identity Manager by One Identity is identity lifecycle management. I use it to automate the complete user lifecycle, from joiner, mover, and leaver (JML) processes. Whenever a new employee joins, Identity Manager by One Identity automatically provisions the required accounts and access based on their roles. If the employee changes the department, the access is modified automatically. When the employee leaves the organization, all accounts are de-provisioned or disabled to maintain security. Apart from that, I use Identity Manager by One Identity for Active Directory integration, role-based access control (RBAC), approval workflows, access certification, and compliance reporting. It also helps me automate identity management and reduce manual effort, while ensuring users have the right access at the right time.

The typical joiner process in my organization with Identity Manager by One Identity starts when a new employee record is received from the HR system. Identity Manager by One Identity synchronizes that information and creates the identity. Based on the employee's department, location, and job role, the appropriate business roles or application roles are assigned. After that, this role automatically triggers provisioning of the required accounts, such as an Active Directory account, emails, and access to business applications. If approvals are required, the request follows the configured approval workflow. Before the provisioning starts, the job service executes the provisioning tasks and synchronizes the logs and checks to verify if it completed successfully. For a mover event, if an employee changes department, Identity Manager by One Identity recalculates the role assignment. Access that is no longer required is removed, and the new permissions are provisioned automatically based on the updated role. It helps ensure they always have the correct level of access while reducing the effort.

Identity Manager by One Identity reduces manual work significantly. Earlier, managing user access across different applications used to take time, and there was always a chance of missing something. With Identity Manager by One Identity, the provisioning, approvals, and de-provisioning are automated based on the policies and roles. It also gives proper audit logs, so it is much easier during compliance and security reviews. That is one of the biggest advantages I have seen with this platform.

The best feature of Identity Manager by One Identity is automation. Once the rules and policies are configured, Identity Manager by One Identity automatically provisions and de-provisions the user, so manual work is very minimal. Another good feature is role-based access control. A user gets only the access which is required for their job role. I also appreciate the approval workflow. Before giving any sensitive access, it goes to the manager or application owner for approval. One more feature is Active Directory and application integration. It works with AD and many enterprise applications, so user management becomes very straightforward. Also, all the activity is logged properly, so during audits and compliance reviews, it is very helpful. Overall, it saves time, improves security, and reduces manual errors.

Automation makes my daily work much easier. Earlier, creating user accounts and giving access was all manual. It was taking more time, and sometimes small mistakes were happening. After automation in Identity Manager by One Identity, once the user details come from the HR department and required approvals are completed, the account provisioning happens automatically. I only monitor the jobs and check if everything completed successfully. With RBAC, security is much better. A user gets only the access which is assigned to their role, nothing extra. If someone changes the department, old access is removed, and the new access is assigned automatically. Because of this, wrong access requests and manual mistakes are reduced significantly. Also, during an audit, it becomes easy because everything is tracked in Identity Manager by One Identity on one dashboard.

Compliance and reporting is also a good feature. I can easily track who requested the access, who approved it, and when it was provisioned. This is very useful during an audit because all the details are available in one place. Identity Manager by One Identity integrates very well with Active Directory, Azure AD, SQL servers, LDAP, and different enterprise applications. Because of this, I do not have to manage users separately in every application. Everything is managed from one platform, which saves time and makes administration much easier.

Overall, it has had a good impact. The biggest improvement is automation. Manual work is reduced significantly because user provisioning and de-provisioning happens automatically. Based on the workflow, it also helps in giving the correct access to the correct user, so chances of manual mistakes are very low. From a security point of view, it is also good because every access request goes through proper approval, and all activity is logged. During an audit, reports can be generated very easily, so compliance has become much simpler. Overall, it saves time, improves security, and makes identity management more efficient.

Overall, Identity Manager by One Identity is a very good product, but I think there is still some scope for improvement. Sometimes troubleshooting or provisioning issues can take time because I need to check different logs and components. If there is a more centralized dashboard with detailed error information, it will make troubleshooting much easier and faster for all of us worldwide. Also, I feel the UI can be more modern and user-friendly, especially for new administrators. Apart from that, better out-of-the-box reporting and more pre-built connectors for cloud applications would be helpful. But overall, I think Identity Manager by One Identity is a strong IAM solution.

Cloud integration can be improved more. Nowadays, many organizations are moving to clouds, so having more ready-to-use connectors for cloud applications will save time. Also, in a large environment, synchronization and provisioning can take some time. If the performance and monitoring are improved, it will be easier to identify the issues very quickly. Support and documentation are already good, but having troubleshooting examples and best practices for complex environments will help administrators. Overall, these are small improvements, but the product is quite stable and works very well for enterprise identity management.

I have been using Identity Manager by One Identity for about 1.8 years in my current role.

Identity Manager by One Identity has good governance and security features. It follows the least privilege approach, so users get only the access they need. Every access request goes through a proper approval workflow, and all the activity is logged, which is very useful during an audit. It also supports role-based access control, such as RBAC, segregation of duties (SoD), and access reviews, which help my organization maintain compliance and reduce security risks. Overall, I think its governance and security capabilities are very well prepared and very strong for the enterprise.

I think the AI capabilities are good, but I always believe AI should support the administrator, not replace the administrator. For normal recommendations, analysis, and governance insights, the output is quite accurate, but before taking any critical action such as provisioning sensitive access or changing the policies, I always verify the recommendation. Overall, I would say the AI output is reliable, but in an enterprise environment, final validation by the administrator is always important. That is the best approach for security and compliance.

I would recommend that you first understand your identity and access management process before implementing Identity Manager by One Identity. If roles, approval workflows, and business policies are properly designed, then the implementation becomes much smoother and easier. Also, spend time on Active Directory integration, RBAC, and synchronization configuration because these are the core components. Keep regular monitoring on synchronization jobs and job services, and review logs regularly to identify issues early. Overall, if it is planned properly, Identity Manager by One Identity is a very good solution for automating identity management, improving security, and maintaining compliance in the enterprise environment.

Overall, I think Identity Manager by One Identity is a very strong IAM solution for the enterprise environment. It helps automate user lifecycle management, improves security through RBAC and approval workflows, and makes compliance much easier with proper audits and logs reporting. Like any enterprise product, it takes proper planning and configuration, but once it is implemented correctly, it is stable, scalable, and significantly reduces manual efforts. I would rate this solution a 9 out of 10 based on my overall experience working with Identity Manager by One Identity.

I configured One Identity Manager's Sync Manager tool and connected using that tool. One Identity Manager synced the data from different platforms, after which we arranged access management through access request forms. We defined workflows and policies based on these requests and created reports using Report Editor.

Business roles represent one of the important use cases I worked with. When you have a workflow, there should be approval policies in place. For example, if certain reports or functionalities should only be visible to the HR department, we define business roles and give access to those particular people. This allows us to segregate the duties of different teams and departments, providing particular access to each department.

One Identity Manager was utilized to achieve what was called an identity-centric zero trust model, which was built by an One Identity partner. The concept involves not trusting anyone and validating everyone who comes to the tool. We implemented something around this, although I was not heavily involved in that particular aspect.

Managing business roles and assigning them from business users is what I appreciate most about One Identity Manager. This is a simplified process that we can manage easily in the Manager tool. The primary drawback of One Identity Manager is the customization of the WebGUI.

One Identity Manager provides everything in a single place, which is beneficial. Before One Identity Manager, we used to manage every certification, onboarding, and syncing of data between platforms separately, which was difficult. Having everything in one location gives us a better understanding and allows us to maintain data more effectively. We can maintain entitlements properly, reduce duplicates and redundancy, and have better overall organization.

The primary drawback of One Identity Manager is the customization of the WebGUI. The customization uses web scripts and drag-and-drop for elements and configuring elements, which was somewhat complicated for a few colleagues. They received training initially from One Identity representatives, but found it was not easy to understand. In comparison, I am using SailPoint in my current organization, and it is less customized than One Identity Manager. It is not that easy to define the GUI in One Identity Manager. Apart from GUI customization, the other tools are fine, and configuration and building everything is straightforward.

When we configured all the platforms including ACF2, RACF, and AS/400 initially, we attempted to integrate with Active Directory after HSBC's huge data set was processed. We encountered some issues while doing the Active Directory integration because of the large data volume. Jobs might process for a long time or there could be timeout issues. This was the major concern we saw in the initial stages. As of now, this appears to be resolved. There is not much drawback remaining. One Identity may have enhanced several things.

Overall, I worked on One Identity Manager for over five years now.

In the initial stages, we did not see any issues when working with less data, such as with RACF, AS/400, and similar platforms. However, when we connected with Active Directory, we noticed some lagging issues while syncing data or submitting requests. After fine-tuning and making adjustments to the data, it began working properly.

One Identity Manager is good regarding scalability. It has separate tools for everything, which allows us to scale to whatever extent we need based on requirements. One Identity Manager is a scalable application.

I contacted technical support for One Identity Manager when we had issues with the request center and the access request manager WebGUI. In the initial stages, we experienced some issues with concepts called cart items and separate items. To understand the process and resolve these issues, I worked with customer support.

One Identity Manager's Premier Support was used initially because in the first couple of years, the response was very immediate and they could easily solve issues. After that, the company may have implemented some licensing policies, and we transitioned to using a ticketing tool. Whenever we found issues, we submitted a ticket, and they responded based on the timeline.

I do not remember the specific details that stand out in Premier Support, but the service was very quick. Whenever issues arose, the response was immediate and they solved them quickly. They assigned resources who worked with us, and we were able to resolve issues very quickly. I would rate the support at a nine out of ten. The support was good, though it sometimes took time to resolve issues.

Positive

The initial deployment of One Identity Manager is very straightforward. Syncing data is straightforward as we need to map the columns between the target system and One Identity Manager. However, it is not that easy, as we encountered some difficulties with version mismatches. One Identity provided support that helped us achieve everything. In the initial stages, they supported us for a couple of years, and we were able to achieve all syncing of data and everything with their help. It is an easy process but not without difficulty.

We managed the solution ourselves with One Identity Manager. Initially, during the first couple of years, One Identity Manager provided solution partners. After two years of contract, they departed. From that point forward, we have been building enhancements and maintaining the project ourselves. If we encounter issues, we raise tickets and move forward.

We continue to perform maintenance on One Identity Manager with ongoing enhancements. Since we work for a bank, we continue getting enhancements and maintenance. Some jobs fail in the job editor, so we need to perform maintenance and address whatever issues we encounter.

On-premises

Our main use case for Identity Manager by One Identity is to automate the user identity lifecycle. We use it to provision and de-provision user accounts, manage role-based access, and ensure employees receive the appropriate access when they join, move within the organization, or leave. It also helps streamline approval workflows, reduce manual effort, improve compliance, and maintain an audit trail of all access-related activities.

An additional benefit is that it standardized the identity management process across the organization. Instead of handling access requests manually, everything follows predefined policies and approval workflows. This improves security, reduces provisioning time, minimizes human errors, and provides complete audit logs for compliance and reporting.

Identity Manager by One Identity has had a positive impact by reducing the time and effort required to manage user accounts and access requests. Automation has minimized manual errors, improved onboarding and offboarding efficiency, and strengthened security by ensuring users have only the access they need. It also helped with compliance by maintaining detailed audit logs and standardized approval workflows.

The features I find most valuable in Identity Manager by One Identity are automated provisioning and de-provisioning, role-based access control, approval workflows, and identity lifecycle management. I also appreciate its integration capabilities with systems such as Active Directory and cloud applications, along with its audit and compliance reporting. These features help reduce manual effort, improve security, and ensure users always have the appropriate level of access.

The feature I rely on the most in Identity Manager by One Identity is automated user provisioning and de-provisioning. It helps by automatically creating, modifying, and disabling user accounts based on changes in the HR system or predefined workflows. For example, when a new employee joins, the required accounts and access are provisioned automatically, and when someone leaves, their access is revoked immediately. This saves time, reduces manual errors, and ensures users always have the appropriate access while maintaining security and compliance.

Overall, I think the biggest advantage is that Identity Manager by One Identity centralizes identity management in a single platform. It automates repetitive tasks, enforces consistent access policies, and provides complete audit visibility, making identity management more efficient, secure, and easier to manage across the organization.

Overall, it is a strong platform, but I think the user interface could be more intuitive, especially for new administrators. Some workflows and configuration require a good understanding of the product, so there is a learning curve. Improving the UI, simplifying administration, and providing more out-of-the-box connectors and dashboards would make it even easier to use and reduce deployment time.

One area that could be improved is the documentation. While it covers most topics, having more practical examples and implementation guides for common deployment scenarios would help administrators get up to speed faster. Additionally, expanding the library of pre-built integrations and templates would reduce customization effort and speed up onboarding for new applications.

I have been working with Identity Manager by One Identity for approximately two years.

Identity Manager by One Identity has been a stable platform in my experience. Once it is properly configured, it runs reliably with minimal downtime. We have had consistent performance for identity provisioning, approval workflows, and integrations.

Identity Manager by One Identity scales well for enterprise environments. It can handle a growing number of users, applications, and connected systems without requiring major changes to the overall architecture. As the organization grows, it is straightforward to onboard new applications, automate additional workflows, and manage increasing identity volumes while maintaining good performance.

Overall, I would say the customer support is good. The support team is knowledgeable and responsive for critical issues, and they provide useful guidance during troubleshooting. For more complex cases, the resolution can take a little longer, but overall, we have had a positive experience with the support quality.

Before Identity Manager by One Identity, we primarily relied on manual identity management using Active Directory, along with internal scripts and a ticket-based approval process. As the organization grew, that approach became time-consuming and difficult to manage consistently. We moved to Identity Manager by One Identity to automate provisioning, centralize identity governance, improve compliance, and reduce manual effort and provisioning errors.

Before implementing Identity Manager by One Identity, onboarding and access provisioning were mostly manual and could take several hours or even a day, depending on approvals. With automation, the process is typically completed within thirty to sixty minutes. We have also seen significantly fewer provisioning errors and much faster offboarding, which helps reduce security risks. Overall, it has improved operational efficiency and reduced the workload on the IT team.

We have seen a positive return on investment. The biggest benefit has been time savings through automation. User provisioning, which previously took several hours or even a full business day, now typically takes less than an hour. We have also reduced manual provisioning errors and sped up offboarding, which improves security. Rather than reducing headcount, it has allowed the IT team to spend less time on repetitive account management and more time on higher-value tasks.

Overall, I found the pricing to be competitive for an enterprise identity governance solution. The initial setup requires some investment in implementation and customization, but it is justified by the automation and operational efficiency it provides over time. The licensing model is straightforward, and once deployed, the reduction in manual administration and improved compliance delivers good value for the organization.

We have evaluated a few other identity governance solutions, including SailPoint and Microsoft Entra ID Governance. We found that Identity Manager by One Identity offered a good balance of identity lifecycle management, strong integration capabilities, flexible workflows, and overall value for our environment. Those factors made it the best fit for our organization's requirements.

My advice would be to clearly understand your organization's identity governance requirements before implementation. Spend time designing your roles, access policies, and approval workflows, as this will make the deployment much smoother. Also, start with a phased rollout and leverage the product's automation features early. With proper planning, Identity Manager by One Identity can significantly improve security, compliance, and operational efficiency.

Identity Manager by One Identity scales well for enterprise environments. It can handle a growing number of users, applications, and connected systems without requiring major changes to the overall architecture. As the organization grows, it is straightforward to onboard new applications, automate additional workflows, and manage increasing identity volumes while maintaining good performance.

Overall, I would say the AI capabilities of Identity Manager by One Identity are accurate and reliable for assisting with identity governance tasks, especially when they are based on existing access policies and historical data. The recommendations are generally helpful, but I believe they should always be reviewed through the organization's approval workflow rather than being applied automatically. In my experience, AI works best as a decision support tool, with final access decisions remaining under human oversight.

The AI capabilities of Identity Manager by One Identity are a good addition because they support governance rather than replace it. They can help identify unusual access patterns, recommend appropriate access, and improve decision-making during access reviews. Since these recommendations still follow approval workflows and role-based policies, governance and security remain under organizational control. Overall, I think the AI features help improve efficiency while maintaining strong security and compliance. I would rate this review a nine out of ten.

In our organization, Identity Manager by One Identity is deployed on-premises. This deployment model gives us greater control over identity data, security policies, and integrations with internal systems such as Active Directory and other enterprise applications. It also helps us meet our organization's security and compliance requirements.

One Identity Manager has been used in our premises environment for several years, primarily for identity lifecycle management, access governance, and provisioning workflows.

One Identity Manager is mainly used for identity lifecycle management and access provisioning in our premises environment. For example, when a new employee joins, user accounts and required access are automatically provisioned based on their role and department.

The best features of One Identity Manager are its strong automation capabilities, flexible role-based access management, approval workflows, and reliable integration with on-prem systems like Active Directory. Its identity lifecycle management and compliance reporting have also been very valuable for our operations.

The automation has significantly reduced manual efforts and onboarding time while also minimizing access-related errors. It has improved our security and compliance by ensuring users get the right access automatically and access is removed promptly during offboarding.

One Identity Manager has helped us standardize identity and access management across our premises environment. It improves operational efficiency, reduces dependency on manual processes, and provides better visibility and control over access and compliance activities.

Another valuable feature of One Identity Manager is flexibility in customizing workflows and access policies based on business needs. It also provides good visibility into our access, which helps during audits and compliance reviews in our on-premises environment.

One Identity Manager has improved operational efficiency, strengthened access governance, and reduced manual dependency across our on-premises environment. We have faster onboarding and offboarding, fewer access-related issues, improved compliance readiness, and better visibility into our access management process.

While One Identity Manager works well for our on-prem setup, initial configuration and customization can be complex and time-consuming. The learning curve for workflow and role modeling is also quite steep. It could be improved with simpler configuration options, better out-of-the-box templates, and more intuitive admin tooling to reduce implementation efforts.

One Identity Manager can sometimes feel heavy to manage for small changes, as even simple updates may require multiple steps or approvals. Reporting could be more straightforward and easier to customize. Better UI simplicity and faster configuration changes would make day-to-day administration smoother.

One Identity Manager has been used for several years in our premises environment.

One Identity Manager has been stable in our on-prem environment. Once properly configured, it runs reliably for daily identity lifecycle and access management tasks with minimal downtime or major issues.

One Identity Manager scales well in our on-prem environment. As the organization grows, it handles increasing user accounts, systems, and access rules without major issues. The main challenge is that as complexity grows, managing the roles and workflows becomes more effort-intensive and needs careful design. However, overall it has supported our growth successfully.

One Identity Manager support has been reached out to a few times, mainly for configuration and issue troubleshooting. Overall, the support has been helpful, though resolution times can vary depending on the complexity of issues. Once engaged properly, the technical guidance is solid and effective for our on-prem environment.

One Identity Manager customer support is rated around eight out of ten. It is generally helpful and technically strong, but the response and resolution time can sometimes be slower depending on the issue's complexity.

Before One Identity Manager, a manual script-based approach combined with a basic Active Directory tool was being used. The switch was made mainly to get better automation, centralized identity governance, and stronger control over access management in our on-prem environment. The previous setup was harder to scale and more prone to manual errors.

For One Identity Manager, the licensing and setup cost were a bit on the higher side, especially during the initial implementation. Setup also required significant effort and time because of configuration and customization needs in our on-prem environment. However, once implemented, the long-term value from automation and reduced manual work has justified the investment.

One Identity Manager has delivered a positive ROI, mainly through reduced manual efforts and fewer support tickets related to access issues. While exact financial numbers are not available, the biggest gains come from faster onboarding and offboarding and reduced need for manual provisioning work, which has lowered day-to-day operational efforts for the team. Overall, the time saved and improved efficiency have outweighed the initial license and setup cost in our on-prem environment.

For One Identity Manager, the licensing and setup cost were a bit on the higher side, especially during the initial implementation.

Before selecting One Identity Manager, a few other identity governance solutions like SailPoint and Microsoft Identity Manager were evaluated. One Identity Manager was chosen because it fit better with our on-prem requirements and offered stronger flexibility for customized workflow and role-based access management.

My advice for anyone considering One Identity Manager in our on-prem environment is to invest time in proper planning and design up front. Focus on clear role modeling and workflow design earlier because setup can be complex. Also, make sure your team is trained properly, as there is a learning curve. If implemented properly, it delivers strong long-term value through automations and control.

One Identity Manager has been a solid fit for our on-prem identity management needs. It brings strong automation and control, and while it takes effort to set up and manage, it delivers good long-term value in terms of security, compliance, and operational efficiency. The overall review rating for One Identity Manager is eight out of ten.

On-premises

I work in the operations part with One Identity Manager, specifically with incident management. On a day-to-day basis, I work with the Manager, Object Browser, Job Queue, and Designer and web designer. These are the most commonly used tools. My work involves administrative tasks such as provisioning, de-provisioning, and ILC.

Currently, I use One Identity Manager on demand. I have seen many companies, and even after joining my current company, I can observe calls from different projects where everyone is using One Identity Manager as an IGA solution. I can see it has good demand in the market. However, I could say it is about 50/50 because many people are preferring cloud solutions nowadays.

One Identity Manager handles a very large amount of data, which is one of the good things about the tool. Everything is customizable and easily customizable, which is another strong point. For every configuration, a different tool is available. For example, if I need to set any configurations, I can do it in the Web Designer. I can use Object Browser for SQL-related tasks and mostly for database management.

One Identity Manager has role-based access management. For instance, if I need to work with different applications, I need a specific role. I need to request that role from the application, such as an admin role or any other role. It will be processed in the back end, and I can check everything in the Manager tool as well as Object Browser.

One Identity Manager has business rules such as internal administration, external administration, and security admin. I have seen those kinds of business roles in my project. These are utilized through birthrights. Some roles are assigned during joining itself, while a few business roles are assigned based on a request and are approved by the managers as well as the product owners based on role and demand in the project.

Business rules in One Identity Manager are administrative in nature. One Identity Manager provides users for administration roles, and roles are provided during joining and based on role and demand in the project. Different criteria are available, and based on that, business roles will be provided.

One Identity Manager minimizes gaps through the Manager application, which is part of everything including governance, audits, certifications, and attestations, all available in the same application.

Application-related information is all available in the Manager tool in One Identity Manager. For a specific application, there are different groups or different roles. Everything is audited and has attestations. Attestations occur yearly or twice yearly for compliance purposes with different applications.

As an owner, I receive attestations yearly or twice yearly. For example, if user A has a specific role, I verify whether that role should be with that user. During the request itself, it goes to the product owner at the last approval level. After approval, we have attestations, and that governance part is covered for every role based on product owner approvals.

Privileged users are different from other users in One Identity Manager. Privileged users have specific configurations and are provided with different roles to access only specific applications. Privileged users are not treated as normal users. That part is also covered in One Identity Manager. From my project point of view, I did not see that much privileged user solutions because we have other tools in place to manage privileged access management. However, based on my previous experience, I can speak to this capability.

One Identity Manager is an IGA tool with everything available in the same tool. For example, Identity Lifecycle, attestation, certifications, and role-based access management are all available in one tool. Everything can be customized based on customer requirements. Everything can be managed in the job servers as a separate process, so there is no dependency for different jobs inside the processes. Each job works as a different process. One Identity Manager has a Designer application where I can customize everything based on requirements such as jobs, different application connectors, and different tables. The web application is built in Angular, which is another feature that can be utilized for better user experience.

User experience with One Identity Manager is somewhat difficult compared to cloud SaaS solutions like Saviyent and SailPoint. As an on-premises tool, it is comparatively harder to explore, and lagging sometimes occurs while loading data from the backend. These are the minor drawbacks regarding One Identity Manager user experience. However, I can see there are many improvements, and they have introduced a new version with some improvements, but my project has not implemented it yet.

Comparing One Identity Manager with other tools, the customization is very simple. I have a Web Designer tool where I can connect with different applications, create connectors, create customized processes, or create different tables. Everything is possible in the Designer, and documentation is also available on One Identity Manager's website.

From an improvement point of view, the user experience and UI are somewhat lagging. That is one thing One Identity Manager should improve. Additionally, there are many tools in this space, so I have to check each tool for different purposes, though I am not sure how that could be improved. One Identity Manager runs thousands of jobs daily. Sometimes jobs get stuck and processing is slow, though not every time. One Identity Manager could provide a solution to improve that performance as well.

I believe One Identity Manager should focus on cloud solutions. Everyone is nowadays preferring cloud solutions, so that would be another improvement. Moving some of the things to the cloud would definitely improve the performance of the on-premises solution.

I have worked with NetIQ and Saviyent before One Identity Manager.

I started working with One Identity Manager approximately three months ago.

I do have premier support for One Identity Manager.

With premier support, I can see they are directly connecting with our team and providing tool training from One Identity Manager people. They come to our company and provide trainings based on new requirements. That is a good thing. If a new feature comes up, they provide us approaches to implement in our solutions.

I have previous experience with SQL and database management. I was working with NetIQ, which is also a legacy tool. I wanted to switch to a different tool with a different project. I had SQL knowledge before that. If someone has SQL-related knowledge, it will be very easy to work with One Identity Manager, and there will be many opportunities. Because of the opportunities, I chose One Identity Manager. In NetIQ, there was nothing like SQL. One Identity Manager has IGA, but NetIQ did not have that many opportunities at that time. I also have experience with .NET. One Identity Manager has a VB.NET solution, which was another factor in my decision based on the opportunities available.

I have been involved in a few implementations of One Identity Manager. I can see it is a long process. I have to create a transport, create a package, and build in Jenkins. There are many things involved, and it is not a straightforward process in One Identity Manager. Deployment is definitely a complex thing in One Identity Manager, and it is longer than other tools.

I did not get a chance to work with partners because I am still in the learning phase with One Identity Manager. I am exploring the tools in my project. However, in the future, there are platforms available to connect with One Identity Manager partners, and I will connect for sure.

I did not work on SAP implementations with One Identity Manager.

I have not seen cloud implementations with One Identity Manager in my project. However, we do have plans to implement some cloud solutions in the future. We have Entra ID with our projects, and that is the only cloud solution I have seen so far.

I do not have knowledge about zero trust models.

Privileged accounts are not managed in One Identity Manager. I am just creating those accounts, but they are completely managed in a different IM solution. For PAM, there are different applications managing those responsibilities. Currently, I am not working with those privileged users.

Since I am very new to One Identity Manager, I am still on the learning curve and exploring different things. One Identity Manager is a very huge platform with many tools, and the architecture is quite complex.

I give One Identity Manager an overall rating of eight out of ten.

My use case for One Identity Manager is mostly for identity management and application onboarding, including joiner, mover, leaver, and application onboarding through the IT shopping cart and role-based access provisioning and privileged account provisioning, along with all the aspects including recertification.

I use One Identity Manager to help manage SAP, and it has the best SAP connector in place, allowing me to manage their identities through provisioning SAP roles, SAP groups, SAP authorities, and all the systems. It also connects with SAP GRC and performs segregation of duties very efficiently with the SAP application, enabling various types of implementations we can do with SAP.

One Identity Manager is a very robust tool with plenty of out-of-the-box features in the identity and access management space, and it is very easy to customize and fits for very complex platforms. 

For multinational companies or those with various locations managing their identities and applications, it is very easy and very robust in nature. 

It also helps streamline aspects of application governance, including access decisions, compliance, and auditing. 

It has a module called access recertification or attestation for recertification and a robust segregation of duties engine, as a governance platform that collects data and provides a variety of dashboards for management.

One Identity Manager provides IGA for difficult-to-manage aspects of SAP, and I can manage by assigning profiles, roles, and groups. There's also a role-in-role concept where I can assign a role to another role.

One Identity Manager delivers SAP-specialized workflows and business logic. For example, if my SAP solution is integrated with SAP GRC and I want to request a segregation of duties check with GRC before provisioning an SAP role, all those tasks can be done in One Identity Manager.

It is easy to manage and provides a single platform for enterprise-level administration and governance of users' data and privileged accounts, but one must know the product. Learning One Identity Manager takes some time, around four to five months, but once learned, managing applications such as SAP or Active Directory becomes easy.

One Identity Manager helps minimize gaps in governance coverage for test, dev, and production servers, and it provides internal deployment tools that make it straightforward to manage code across different environments.

One Identity Manager could be improved by offering a more low-code experience, as it still requires a fair amount of coding knowledge. Compared to other cloud-based tools, the learning curve is quite steep; it can take six months to a year to master, while similar tools may only require one to two months. Earlier versions also lacked robust web UI enhancements and API support, but recent updates have shown notable progress in these areas.

I have been using One Identity Manager for around 15 years, starting in 2010.

The solution is scalable; I would rate it a seven to eight out of ten. It is suitable for medium-level enterprises, but a user base exceeding one million may require heavier infrastructure.

I would rate One Identity Manager's technical support at around 9.5 out of ten. Compared to my experiences with other tools, their support is exemplary.

Positive

Most of the One Identity implementations are on-premises. They also have a now the popular approach is being in hybrid approach is getting popular now.

One Identity Manager is easy to customize, however, the person customizing it needs basic .NET programming and SQL skills. With these skills, anyone can customize it according to their needs.

During the patches or during the core deployments, it does not require any downtime.

I've looked into SailPoint and Saviynt. One Identity Manager is comparatively faster to deploy than SailPoint, although not as fast as Saviynt since Saviynt has a more low-code approach. 

One Identity Manager is highly customizable and allows for extensive UI and backend modifications, which tools such as Saviynt do not readily support. SailPoint allows for similar customizations on-premise but not on the cloud version.

The solution is identity-centric, and we consider it as identities linked to an account structure for each application, linking all the accounts to the identities. 

I recommend One Identity Manager to other users as the license comparison with the market leader SailPoint is very favorable, and it offers all the functionalities at a lower price. 

For medium-level organizations, One Identity Manager rates as a nine out of ten. For larger organizations facing performance issues, it would rate around an eight out fo ten. On a scale of one to ten, I rate One Identity Manager a nine.

On-premises

Other

The JML process, which stands for Joiner, Leaver, Mover, is my main use case for One Identity Manager, where we focus on synchronizing between different directories.

In our environment, the synchronization works by having different Active Directories in different countries, and we are reading based on a predefined extension attribute, user, and security groups.

Regarding my main use case, we solve the governance and compliance part.

The best features One Identity Manager offers for us come from the sync projects, which are our way to keep data from different sources in one single place, giving us the possibility to simplify the process and to have a clear overview over the products and data.

One Identity Manager has positively impacted our organization by adding more visibility on what we have, what we need, and what compliance features or compliance requirements we need to fulfill while allowing us to provide audit records on time and in a very useful way.

The main functionality that I expect from One Identity Manager is to include more possibilities to use a custom interface and a more user-friendly interface, as this is one of the major topics. There are a few other things which I think could be easier to implement, and another feature which is really helpful.

These are my main pain points regarding additional improvements that One Identity Manager needs.

Regarding the reporting and analytics features in One Identity Manager, the analytics and reporting part is a place where improvements are really helpful, making it more user-friendly.

The performance and speed of One Identity Manager in my environment show that they consume a lot of resources, so the speed depends on the resources assigned for each component.

We started working with One Identity Manager around nine years ago.

In my experience, One Identity Manager is stable, and it can be easily added back to the system.

The scalability of One Identity Manager is quite good, but the growth can be quite expensive.

One Identity Manager's customer support is satisfactory, as they provide us support every time we open an incident or a ticket.

I previously used an in-house solution, and the reason for switching to One Identity Manager was that the cost for maintaining and implementing new features in the in-house product was over the price for implementing a new product.

My experience with pricing, setup cost, and licensing is that this is something where every company decides in the first phase of the project when they decide to work with One Identity Manager, and it can be improved.

Implementing One Identity Manager in my environment was quite difficult because it requires specialized persons.

I have seen a return on investment with One Identity Manager, as the number of resources required increased, but the main benefit for us came from being compliant with the regulators, where we fulfill a lot of regulations with the product.

My experience with pricing, setup cost, and licensing is that this is something where every company decides in the first phase of the project when they decide to work with One Identity Manager, and it can be improved.

Before choosing One Identity Manager, I evaluated other options, and it was a discussion with ForgeRock, but ultimately, One Identity Manager was chosen.

I find the integration capabilities with other systems or applications work really fine with the standard products.

I find the role-based access control and permissions management in One Identity Manager meet our requirements, as they are standard implementations and are really fine.

I would describe the upgrade and patching process for One Identity Manager as difficult when upgrading from version 6 to version 8, but quite easy from version 8 to version 9; now we are planning to upgrade to version 10.

I find the documentation and training resources for One Identity Manager quite helpful for specialized persons, although I still consider the trainings to be too expensive.

My advice for others looking into using One Identity Manager is to ensure they have the capabilities, resources, and knowledge to do whatever they want before they start.

I really want to have access to more documentation and data regarding One Identity Manager.

I would rate this review a 7 out of 10.

Private Cloud

Other

One Identity Manager serves as our centralized identity governance and access management solution across the organization, primarily used for managing the complete user life cycle including onboarding, role-based access, provisioning, and offboarding.

In daily work, we use One Identity Manager for onboarding new users where access is automatically assigned based on their role. Recently, it helped us quickly provision access for multiple users without manual intervention, saving time and reducing errors. It also ensures proper access removal during offboarding, improving overall security.

Apart from life cycle management, we also use One Identity Manager for periodic access review and compliance reporting. It helps maintain visibility over user access across the system and ensures policies are consistently enforced. Overall, it adds strong control and governance to our environment.

One Identity Manager offers strong automated identity cycle management, which reduces manual effort, and it provides role-based access control and self-service access requests, making access management smooth. The compliance reporting and audit capabilities are very useful for governance, and its integration with multiple systems, both on-premises and cloud, gives complete visibility and control.

The automated identity life cycle management makes the biggest impact for our team, as it significantly reduces the manual effort in onboarding or offboarding while ensuring users always have the right access. This improves both efficiency and overall security.

One Identity Manager has improved our efficiency by automating user provisioning and reducing manual effort, and it has strengthened our security by ensuring proper access control and timely offboarding. It also made audits and compliance reports much easier and more streamlined.

One Identity Manager would benefit from enhancements in flow customization and faster performance in large environments to make it more efficient. Overall, it is a strong solution with great potential to evolve further.

From a user experience perspective, a more intuitive and modern user interface would make One Identity Manager easier for new users to adapt to quickly. Additionally, while support is generally good, faster response times in complex cases would enhance the overall experience. The current support and documentation are already quite helpful.

I rated it nine because it already delivers strong identity governance, automation, and reliability in day-to-day operations. To make it a perfect ten, a more intuitive user interface, a faster initial setup, and slight improvement in performance for large scales would make the experience even smoother.

I have been using One Identity Manager for the last three years.

One Identity Manager is stable.

One Identity Manager is highly scalable and works well for enterprise environments. It can handle large user bases, even millions of identities, and support both horizontal and vertical scaling as needed. Overall, it performs reliably even as the organization grows and adds more systems.

Customer support for One Identity Manager is generally good and responsive, especially for standard issues. The support team has strong technical expertise and provides helpful solutions when needed.

We were using a more manual and partially automated access management approach earlier, and we switched to One Identity Manager to achieve better automation, centralized control and management, and strong governance. It also provides more scalability and improved compliance compared to the previous setup.

The initial setup cost might be slightly high, but it is justified by long-term value and automation benefits.

We have seen the return on investment after implementation with around a 60 percent reduction in manual effort for access management, and onboarding times have decreased significantly. It also reduces the dependency on additional resources for routine tasks, and audits are now faster and more efficient, saving both time and operational cost.

The pricing and licensing of One Identity Manager are reasonable considering the features and capabilities it offers for enterprise use.

We have evaluated a few other identity governance solutions such as SailPoint and Microsoft Identity Manager. However, we chose One Identity Manager due to its strong automation capabilities, flexibility, and better fit for our hybrid environment.

Once properly configured, One Identity Manager becomes a very efficient and reliable solution for handling identity governance at scale.

We have seen around 60 to 70 percent reduction in manual effort for user provisioning and access requests. Onboarding time has reduced significantly, and access-related errors have also decreased. Additionally, audit readiness has improved with faster report generation and smoother compliance checks.

I would recommend clearly defining your identity and access requirements before implementing One Identity Manager. Invest time in proper initial configuration and role design, as that makes a significant difference later. Also, leverage automation features fully to get the best value and efficiency from the solution.

One Identity Manager is a powerful and reliable solution for identity governance and access management. It has helped improve efficiency, security, and compliance in our organization. With continuous enhancement, it can become even more user-friendly and impactful. I rated this solution a nine out of ten.

Hybrid Cloud

Microsoft Azure

I am currently working with One Identity Manager, and I was previously working with it before I switched to SailPoint, but now I'm back working with One Identity.

In my previous organization, I was working with One Identity Manager in a personal capacity and we were also switching it to other customers to use it as a specific tool for their IAM operations. Currently, it serves as our in-house identity lifecycle management tool.

We use One Identity Manager for governance purposes, whether it involves the governance side of things, identity lifecycle requests, or anything similar. We utilize it for multiple purposes.

We have a couple of vendors for One Identity Manager, but we also work directly with it. We usually take support from a couple of outside vendors.

One of the best features in One Identity Manager that I really appreciate is its high customizability. When I was one of the vendors customizing the demo, it allowed me to tweak things according to our requirements, which I find not available in other IAM solutions.

The advantages of One Identity Manager include its high customizability and the existing workflows that cover a wide range of processes without having to start from scratch.

We have the SAP module in One Identity Manager. We would be using a central account to connect SAP accounts to employee identities under governance.

Being a central account for SAP is important because it helps to remove a lot of discrepancies and makes life easier, especially since SAP is integrated into almost all large-scale organizations.

One Identity Manager does deliver specialized workflows and business logic for SAP.

We do have support from One Identity, but I'm not sure about the Premier Support.

One Identity Manager definitely helps to streamline application governance aspects such as application access decisions, application compliance, and application auditing.

Streamlining application governance enables us to find gaps and manage risks associated with accounts, whether they are privileged or non-privileged, according to our policies.

One Identity Manager does help minimize those gaps in governance coverage among test, dev, and production servers.

There are different roles for the test and dev environments, making the governance aspects manageable.

One Identity Manager has helped us achieve an identity-centric zero-trust model, which aligns with one of the four IAM principles.

I rate it at seven because although for a user there is a front end that is simple, the back-end has so many tools that it's quite complicated. I prefer SailPoint or Saviynt where everything is in a single view, making it easier to work with.

Customizing One Identity Manager for my particular needs is complicated.

The customization can be a double-edged sword. While we can customize everything, it complicates things, and sometimes it leads to problems in the future.

I'm looking forward to the improvements with version 9.2 launching the Angular portal, as the previous Web Designer was problematic. I would appreciate a clearer approach to customization.

I understand that the customization is quite complex.

Instead of having multiple tools for backend and users, I would like to see a single screen solution in One Identity Manager.

I would like to see more specificity regarding timelines for missing features being requested, as One Identity Manager needs to improve in that area.

I have been working with One Identity Manager for close to almost three years.

I'm not sure if our One Identity partner helped with the implementation because we have been using One Identity Manager for more than ten years. Everything is implemented, and we are just upgrading, but I would not say they help us with any implementation.

I'm not sure if One Identity Manager provides IGA for the difficult to manage aspects of SAP, such as T-codes, profiles, and rules.

I'm not working on that part of SAP connectivity, but I understand that the integration of SAP is essential in any IGA tool and it should be simple.

I ask questions to the tech support team and they provide solutions.

I rate the tech support at six. I would have rated it seven, but since I rated One Identity Manager at seven, I give them a six.

I'm not sure if One Identity Manager helps with procurement and licensing since I haven't worked on that side of things.

The onboarding process was different for me since I worked as an engineer and developer, but generally, it's straightforward for others.

I would appreciate clarification regarding how I assess One Identity Manager for providing an enterprise view for managing logically disconnected SAP accounts.

I don't have insights into return on investment with One Identity Manager. A business person would be more suited to answer that question.

I have a rough idea that One Identity Manager is comparatively cheaper to implement than other tools, but I don't know the exact pricing.

I have experience working with other identity management solutions such as Saviynt.

The key differences between One Identity Manager and competitors are that others being based on Java give them a competitive edge, while One Identity Manager is shifting to Angular but remains based on .NET. Other tools have single screen solutions, making navigation easier, while One Identity Manager's interface can be slightly slower.

On-premises