Identity Manager by One Identity Reviews

One Identity Manager is our main solution for identifying lifecycles, management, and automation. It helps us with user provisioning and managing access rights, ensuring users have appropriate access based on their roles.

In our day-to-day work, we use One Identity Manager to automate dashboards and handle onboarding and off-boarding. When someone joins or leaves the organization, the required accounts and access are provisioned or revoked accordingly. We save significant time since the process has been automated, reducing manual effort considerably.

The best features One Identity Manager offers are automated user provisioning and de-provisioning based on roles, access control, and the approval workflow. I also find the reporting and audit trails very useful during compliance and audit activities. Provisioning has made the biggest difference for my team as it has reduced manual work, accelerated user onboarding, and ensured that employees receive the correct access without unnecessary delay.

One Identity Manager has positively impacted my organization by managing access, reducing manual effort, and standardizing user provisioning. It has also helped us strengthen our compliance by maintaining proper audit trails and ensuring timely removal of access when employees leave.

The user interface could be more intuitive, especially for new administrators. The initial setup and customization can be somewhat complex. Simplifying the deployment and improving the documentation would make it easier to use. One Identity Manager is stable in our experience, and it has been reliable for day-to-day operations with very few issues. Once it is properly configured, the platform has no issues.

I have been using One Identity Manager for approximately one year.

One Identity Manager is stable in our experience. It has been reliable for day-to-day operations with very few issues, and once it is properly configured, the platform has no issues.

One Identity Manager's scalability is very good. It has been able to support a growing number of users and applications without any major platform issues and works well for the enterprise environment.

I have not been involved with the customer support team very often, but I will reach out in the future if needed.

We did not use any other dedicated identity governance solution. One Identity Manager was the first solution we started using.

The user interface could be more intuitive, especially for new administrators. The initial setup and customization can be somewhat complex.

My advice regarding using One Identity Manager is to spend time planning the implementation and defining roles first. Properly implement policies so that before implementing, you begin with the configuration part, which simplifies the work. For access management, it is better to implement roles first and the access policy before deployment. Proper planning needs to be done.

We have seen a good return on investment. User onboarding and off-boarding previously used to take a few hours and can now be completed in minutes. The time spent on this is significantly reduced, which is why it has given us a good return on investment.

I have not evaluated other options as that was done by another team. Since I work in delivery, I am not the appropriate person for this evaluation. One Identity Manager was evaluated by my senior managers.

User onboarding that previously took a few hours is now completed in minutes due to automation. It has also made audit evidence easier because accessing records and approval histories are readily available. The evidence is much easier to provide during compliance and audit activities. I would rate this review as a 9 overall.

Our main use case for One Identity Manager is to standardize the Active Directory operations and also reduce the amount of manual work that is done by the IT team. This involves managing users as well as the groups and the permissions.

I can give you a quick specific example of how I use One Identity Manager for managing users. Whenever a new department is created, we can quickly assign the required administrative responsibilities to designated team members without giving them unrestricted access to Active Directory. This really improves the operational control as well as speeds up the administration work.

As per my experience, the best features One Identity Manager offers are its centralized directory management, its administrative task delegation, and the policy-based administration. These are the very best features for us, along with the change audits.

Centralized management and administrative task delegation help my team because both have made day-to-day Active Directory operation more efficient. We are not relying on a small group of domain administrators for every request. We can safely delegate specific tasks to helpdesk or IT team while maintaining proper control and oversight. This is a very useful and powerful feature of the solution.

One Identity Manager has positively impacted my organization in many areas because it provides a very secure environment with shorter turnaround time for user requests. We are getting improved management consistency. We also have better visibility into directory operations.

The shorter turnaround time with One Identity Manager means that before implementing this solution, routine requests such as password reset or account unlock and group membership changes really escalated to a senior administrator. After implementing this solution, we are getting automations. These requests can now be completed within a few minutes. Earlier it was taking 30 to 60 minutes. Now it is completed within five to 10 minutes. We have also seen that onboarding account and modification account request process is approximately 40 to 60% faster.

Apart from the initial setup that requires proper planning and an expertise engineer to set up and fine-tune, everything is perfect. The initial setup could be more simplified so that it can be implemented in less time.

I have been working in my current field for almost two years.

One Identity Manager is stable in my experience. It is a very stable solution and smooth.

One Identity Manager is a very scalable solution, as it is handling our organization growth over time.

The customer support for One Identity Manager is excellent, with engineers being excellent in technical troubleshooting. They are able to resolve complex issues within the time limit.

We have not switched from any other solution because we started using this kind of solution starting with One Identity Manager.

Apart from the initial setup that requires proper planning and an expertise engineer to set up and fine-tune, everything is perfect. The initial setup could be more simplified so that it can be implemented in less time.

We are a partner with this vendor.

We have seen a return on investment with One Identity Manager because of the faster request fulfillment, reduced operational efforts, and also better governance outcomes. These are the positive outcomes from this solution, and we are able to save our time and money.

Pricing, setup cost, and licensing are handled by our management team, so I do not handle those aspects.

We have not gone for evaluation to other options.

My advice to others looking into using One Identity Manager would be to start with proper planning, define your use cases, and begin with the core use cases such as user provisioning, access requests, and access review. Gradually expand to additional applications. It is very important to involve both IT and the business teams early since this really affects multiple departments. This requires very careful planning to implement. Overall, I rate One Identity Manager nine out of ten.

One Identity Manager is used for identity governance and administration. The platform automates user lifecycle management, manages access requests and approvals, enforces compliance policies, and provides centralized visibility into user identities and permissions across multiple systems.

A typical access request and approval use case involves an employee needing access to a specific application or resource. The user submits an access request through the self-service portal, and the system automatically routes it to the appropriate manager or application owner for approval based on predefined workflows. Once approved, the required access is provisioned automatically, and the entire process is logged for auditing and compliance purposes.

The best features of One Identity Manager include automated identity lifecycle management, access request and approval workflows, role-based access control, strong compliance and auditing capabilities, and centralized visibility across multiple systems. The platform stands out for its governance features, which help organizations manage user access securely while reducing manual administrative effort.

One Identity Manager's governance features help maintain better control over user access and compliance. Features such as access certification, policy enforcement, role-based access reviews, and detailed auditing ensure users only have the permissions they need. This improves security, supports regulatory compliance, and provides administrators with clear visibility into who has access to what across the environment.

One Identity Manager has positively impacted the organization by improving identity governance, automating access management processes, and reducing manual administrative effort. It helps streamline user provisioning and approvals, strengthen compliance capabilities, and provide better visibility and control over users across multiple systems.

After implementing One Identity Manager, there was a noticeable reduction in manual access management effort and onboarding time because many provisioning and approval tasks became automated. It also helped reduce access-related errors and improved audit readiness by providing centralized reporting and detailed access tracking across systems.

One Identity Manager could be improved with a more user-friendly interface, simpler workflow customization, and easier deployment for complex environments. Faster performance for large-scale reporting and improved cloud-native integration capabilities would also enhance the overall experience.

One Identity Manager has been used for the last year.

One Identity Manager is stable.

One Identity Manager scales very well for large enterprises and complex hybrid environments. The platform can handle growing numbers of users, identities, applications, and access policies while maintaining centralized governance and automation. Its scalability makes it suitable for organizations that need consistent identity management and compliance across multiple systems and business units.

Customer support for One Identity Manager is very good.

The experience with pricing and licensing for One Identity Manager was generally positive. The initial setup and implementation required planning and investment due to the platform's extensive customization and integration capabilities, but the automation, governance features, and long-term operational efficiency provided good overall value for the organization.

A strong return on investment has been seen with One Identity Manager. Automation reduced the time spent on user provisioning, access approvals, and compliance reporting, which significantly lowered manual administrative effort. It also improved operational efficiency and allowed the IT team to manage identity governance tasks more efficiently without needing additional resources as the organization grew.

A strong return on investment has been seen with One Identity Manager. Automation reduced the time spent on user provisioning, access approvals, and compliance reporting, which significantly lowered manual administrative effort. It also improved operational efficiency and allowed the IT team to manage identity governance tasks more efficiently without needing additional resources as the organization grew.

Investment was needed for the initial setup and implementation due to the platform's extensive customization and integration capabilities.

Organizations considering One Identity Manager should invest time in planning identity governance policies, workflows, and role structures before deployment. Proper integration planning and clear access management processes help to maximize the platform's automation, compliance, and governance capabilities while reducing long-term administrative complexity. This review has been rated as a ten out of ten.

My main use case for One Identity Manager is identity lifecycle management, user provisioning, access governance, and automating joiner, mover, leaver processes using this product.

When a new employee joins, I use One Identity Manager to automatically provision accounts, assign roles, and grant the required access based on department or job role.

It also helps centralize identity governance and ensures access request approvals and compliance processes are handled in a more automated and controlled way using this product.

The best features One Identity Manager offers are automated provisioning, role-based access control, identity lifecycle management, approval workflows, compliance reporting, and access governance.

I rely most on the automated provisioning and identity lifecycle management feature in One Identity Manager. It makes daily operations easier by automatically creating, updating, and disabling accounts based on user role or status changes, which saves time and reduces manual errors.

One Identity Manager has positively impacted my organization by improving efficiency through automating identity management tasks, strengthening access control, reducing manual errors, and helping improve compliance and audit readiness across the organization.

After implementing One Identity Manager, onboarding and provisioning time is reduced by around fifty percent, and manual access-related errors decrease significantly due to automation and approval workflows. It also improves audit readiness because access changes and approvals are tracked centrally.

One Identity Manager could be improved by simplifying the user interface, reducing the learning curve for new administrators, and making customization and reporting easier.

Better documentation, clearer troubleshooting guidance, and simpler integration setup for complex environments would also improve the overall experience with One Identity Manager.

I have been using One Identity Manager for around one year.

One Identity Manager is generally stable and reliable for enterprise identity management. Occasionally, complex customizations or large-scale integrations may require tuning, but overall stability is good.

One Identity Manager is highly scalable and suitable for large enterprises, making it easy to manage thousands of users, roles, and connected systems. It handles hybrid environments and complex identity governance requirements quite well when properly configured.

Customer support for One Identity Manager is generally good, especially for identity governance and integration-related issues. However, complex cases or advanced customizations can sometimes take longer to resolve.

Before One Identity Manager, I mainly relied on native Active Directory tools and manual identity management processes. I switched to One Identity Manager for better automation, centralized identity governance, approval workflows, and improved compliance management.

My experience with pricing and licensing for One Identity Manager has been moderate to high, mainly because it is an enterprise-focused solution. The initial setup requires planning and skilled resources, but the automation and governance capabilities provide good long-term value.

My advice would be to clearly define identity governance processes and access policies before implementing One Identity Manager. Start with core automation use cases first, invest in proper planning and training, and avoid overcomplicating customizations during the initial deployment.

I have seen a good return on investment with One Identity Manager. User provisioning and access management tasks become around fifty percent faster, manual errors reduce significantly, and the same admin team can manage more identities without increasing staff. Automation and centralized governance also reduce audit preparation effort and improve compliance efficiency.

My experience with pricing and licensing for One Identity Manager has been moderate to high, mainly because it is an enterprise-focused solution.

I evaluated solutions such as SailPoint IdentityIQ, Microsoft Identity Manager, and Okta before selecting One Identity Manager. I chose it mainly for its strong identity governance, automation, and hybrid environment support.

I would rate this review an eight out of ten.

One Identity Manager is primarily used for identity lifecycle management, access governance, provisioning, and automating joining, joiner, mover, and leaver processes across different systems.

One Identity Manager automatically provisions accounts and assigns the right access when a new employee joins, and it removes or adjusts permissions automatically when someone changes roles or leaves the company.

One Identity Manager has been integrated with Active Directory, HR systems, and a few business applications, so identity changes flow automatically across multiple platforms from a single process.

The best features One Identity Manager offers are identity lifecycle automation, access governance, role-based provisioning, approval workflows, and the store, auditing, and compliance reporting capabilities.

Identity lifecycle automation is the feature relied upon most in day-to-day work because it reduces a lot of manual provisioning work and keeps access changes consistent across connected systems.

One Identity Manager has positively impacted the organization by improving access governance, reducing manual identity management tasks, and helping standardize onboarding, role changes, and offboarding processes across the organization.

Since using One Identity Manager, strong outcomes have been achieved such as faster onboarding and access provisioning, and fewer access-related errors because approvals and role assignments are automated and standardized across systems.

Overall, One Identity Manager has been a solid platform for improving identity governance and automation, especially in large environments where centralized access management and compliance visibility are important.

One Identity Manager is a powerful platform, but the UI could be more intuitive, and some advanced configurations and customizations have a fairly steep learning curve.

Reporting customization and troubleshooting complex workflows can sometimes be a particular pain point for my team, so better visibility and simpler administration tools would help significantly.

One Identity Manager has been in use for approximately two years.

One Identity Manager is very stable.

One Identity Manager scales very well for large enterprise environments, especially when managing multiple directories, hybrid infrastructures, and high volumes of provisioning and governance workflows. The platform's modular architecture helps when scaling across multiple domains and millions of identities, although larger deployments usually need careful performance tuning and infrastructure planning.

Customer support for One Identity Manager is great and helpful. Every time support is contacted, they always try to resolve issues as quickly as possible.

Before using One Identity Manager, manual processes and native AD tools with some custom scripts were mainly relied upon. The switch to One Identity Manager was made to get better automation, centralized governance, and strong compliance controls.

One Identity Manager requires proper planning because implementation and customization can take time in complex environments.

A return on investment with One Identity Manager has been achieved mainly through reduced manual identity management work and faster onboarding and offboarding processes. Tasks that previously took hours across multiple teams are now mostly automated, which has improved efficiency and reduced access-related errors.

One Identity Manager pricing, setup cost, and licensing are definitely enterprise-focused and can get expensive depending on the number of managed identities and integrations. However, the automation and the governance capabilities justify the investment in larger environments.

Before choosing One Identity Manager, SailPoint, Saviynt, and Microsoft Entra ID Governance were evaluated, mainly because strong hybrid identity governance and flexible provisioning workflows were needed.

One Identity Manager should be chosen with the clarity that identity governance processes and role models are well-defined before implementation because the platform is very powerful but works best when the workflows and access policies are well planned from the beginning. The overall review rating given to One Identity Manager is 8 out of 10.

Our main use case for One Identity Manager is to manage the access request and approvals through the workflows. It really helps us to enforce the RBAC control and ensures proper authentication and security. This reduces the unauthorized access risk.

A user can request access through the portal. Approvals are handled through workflows. This ensures proper authentication and validation before they are getting access to the application. It improves accountability and visibility.

The best features One Identity Manager offers are its strong governance and compliance features. It provides great visibility into access control and approvals. It supports the audit requirement and also provides the identity lifecycle process, which really reduces manual efforts and improves accuracy. It also integrates well with multiple systems such as AD and enterprise applications, making it suitable for any hybrid environment of the company.

Because our organization has a hybrid environment, it really helps us to integrate all those systems from a central unified console or portal. This smooths our process and improves efficiency to enforce the security policies.

One Identity Manager has positively impacted our organization by improving the security through proper access control and approval. It has also reduced the manual workload for the IT engineers, making the operations more efficient in our environment.

It has really reduced the workload of the IT team by almost 40 to 60 percent. It provides great visibility and has great security features. The manual tasks have been reduced with the positive impact.

I can see that the workload has been reduced, and it is saving our engineers time, which allows them to handle more work in the same time.

As far as we are using this solution, we don't see that anything is lacking. It's great working in our environment as per our requirement. I don't see anything that needs to be improved.

I don't wish to add any improvement needed as of now because it's working well for our organization, and we are happy with this.

It's been more than four years since I'm using One Identity Manager.

Stability has been satisfactory.

Scalability-wise, there is no issue. It works very well.

Excellent support is provided by the vendor support team. They are ready to address any kind of issue or any technical matters.

I had a great experience with the sales team of the vendor. They provided great pricing for the setup cost and the licensing. We are very happy with the sales team as they provided great support on the procurement of the solution.

I had a great experience with the sales team of the vendor. They provided great pricing for the setup cost and the licensing.

I will advise that this solution is very highly recommended and it's a great fit for any organization. Use a phased deployment approach and begin with the core features, expanding step-by-step. This will really help reduce the complexity of deployment. I have rated this solution a 9 out of 10.

One Identity Manager simplifies user operations and provides security features, including automatic blocking of inactive accounts and timely access revocation.

My user experience with One Identity Manager involves using Identity Access Management to provide security, compliance, and visibility. We have implemented RBAC, where we define roles and responsibilities based on job functions or permissions. We have SoD (segregation of duties), ensuring that no single user has permissions that could lead to conflicts or fraud. The benefits include reduced security risks, lower costs with SSO solutions, enhanced user experience compared to other solutions, and improved compliance with regulations.

Customization for One Identity Manager is based on client inputs. We can detail and break down the inputs for customization, including user interface customization, where we include manager and launch pad features. For example, we implemented the Genesys application for the service desk, where we can monitor daily calls, frequency, and agent performance. This implementation helps showcase to customers our multiple checks and background processes internally. We provide recording sessions to users for review and daily improvement. Configuration parameters come under several aspects based on system behavior. One Identity Manager provides default parameters for particular solutions, allowing an overview of the tool.

In my experience, the best features in One Identity Manager are under SSO (single sign-on), where we can save passwords and don't need to authenticate each time when accessing applications. This extends to the creation of privileged IDs and account creation in AD. 

Perhaps support could be improved. The knowledge base articles and wiki resources we currently use may not be applicable in every situation, as they often depend on the specific inputs or problems presented by users.

I have been using One Identity Manager for six years.

It is stable. 

We provide solutions for enhancing access governance with One Identity Manager, including identity verification and improving system security procedures. This includes designing and implementing IAM solutions for legacy systems, cloud migrations, and multifactor authentications. We implement MFA solutions for applications with larger audiences. We manage roles and responsibilities in IAM technology and conduct risk assessments to identify potential vulnerabilities. The identity verification process comes as an automatic solution, streamlining user onboarding and offboarding in the organization.

Our clients are enterprises. We have more than 50 specialists.

We use their regular support. I would rate their support an eight out of ten.

Positive

For identity access management, we have used multiple tools. When I was working on a banking project, we used a right modeling tool and Sphere and AD to create users in AD and Nsphere, which is an internal tool of a particular project. Whatever we handle in AD and the right modeling tool reflects in Nsphere, which serves as a portal where all users are displayed, and we can see which level of access is required for a particular application. Being in the banking sector, we have an N-3 approval format. Based on approvals, such as line manager approval, we make changes accordingly. We worked with privileged IDs where particular users want different sets of privileges for their accounts. For example, with my particular account in the banking sector, I can give third-party users access to my entire bank for read, write, and edit capabilities. For some users, I can give only read access, allowing me to segregate the privileged IDs and privileges for users who can access my application or banking portal.

In another project for insurance, we used applications in SAML and OIDC. For OIDC applications, we asked the end user to provide the client ID and based on that, we shared the configuration directly to their email IDs. They could copy-paste the same configuration to make the portal easily accessible. With SSO and One Identity Manager implementing that configuration for OIDC applications, they can easily access their portal without multiple authentications. Through single sign-on, users can sign in once and access the portal without passwords.

From my knowledge, One Identity Manager makes customer operations easier compared to other solutions. When customers have different applications or solutions but want to migrate to One Identity Manager, it's because of enhanced security and the convenience of the SSO process.

The setup is somewhat tricky because providing on-premises ID access requires following specific justifications and naming conventions, with different sets of servers to be added for users. We must be conscious while providing access to servers. For instance, if a user requests access to 10 servers, we need to evaluate whether they truly need all server access and can segregate permissions for cost and security reasons after consulting with line managers.

The cost is handled by customers, but it doesn't seem to be very expensive. It seems fairly priced.

We use One Identity Manager for business roles, implementation capabilities, SSO bypass, and automation deployment with guidelines. The licensing helps consolidate procurement when generating audit reports. We follow basic steps such as end-user satisfaction and improvement in regulatory functions to reduce business risk. We implement changes according to the system lifecycle and role-based access control. 

Privileged users receive separate access, enabling them to access cloud applications. With a privileged ID account, users can access CyberArk, Entra, and Office 365 to manage licenses. One Identity Manager provides good security through SSO and MFA implementations. While there can be dependencies during new configuration creation, we work to provide better user satisfaction and support. 

I would rate One Identity Manager a ten out of ten.

A quick, specific example of how I use One Identity Manager in my role as a back-end engineer is that if I need to generate a report for the users and the entitlements associated with them, or whether to check that the employee is part of which organizational entity, or just the system entitlements.

I interact with One Identity Manager by viewing whatever organizational entity is there and whatever employees are there in the system. Everything is connected to the system, including Active Directory and everything associated with those systems.

One Identity Manager has positively impacted my organization by making the onboarding a little bit smoother. We have automated the onboarding process; for example, when the user logs in for the first time, they are automatically given the roles that are according to their responsibilities.

The time it used to consume is lesser now because of automating onboarding.

I chose seven because it works, so it is obviously more than the basic number, but it is not in the top range because it lacks the smoothness and the simplicity to use.

While I am not sure about the money part, the time is saved with One Identity Manager. For example, a person who was supposed to be requesting the roles manually, now we have automated that, and it saves a lot of time.

My use cases for One Identity Manager are mainly related to JML processes, Joiner Mover Leaver processes, similar to other standard IAM systems. I see that since One Identity Manager provides an on-premises setup, it is selling more in the market compared to One Identity Manager cloud solution, which I observe is rarely used.

The use cases we see often require segregation of duties, especially within the SAP module, which One Identity Manager handles well, allowing for compliance rules and multi-step approval workflows for critical roles.

I did use it for managing SAP and had a good experience overall, but there were instances when roles did not get assigned and I had to troubleshoot rigorously. My experience was not completely flawless, especially during audits where certain roles were missing or were unexplainable.

Managing profiles in SAP is not an issue, but synchronization of derived roles has been problematic.

One Identity Manager includes a history database, but it lacks a proper dashboard for visibility, making it difficult during audits to determine who triggered role assignments or clarify issues.

As a practitioner, I see that One Identity Manager handles segregation of duties within the SAP module well, allowing for compliance rules and multi-step approval workflows.

One Identity Manager provides an on-premises setup, which is selling more in the market compared to One Identity Manager cloud solution.

One Identity Manager is a complete governance tool, but its pricing remains reasonable when measured against other vendors.

What I dislike most about One Identity Manager is the upgrade process. For instance, if I'm migrating from one version to another, I've experienced issues where old hotfixes break. Unlike Microsoft which smoothly integrates hotfixes, One Identity Manager requires me to redeploy older hotfixes even after applying a new upgrade. Another challenge is seeing many clients still using older versions that rely on the deprecated Web Designer. Migrating to the latest versions is complicated due to the complete overhaul required.

There is also a lack of clear communication or documentation from One Identity Manager regarding upgrades and deprecations, which complicates the process further.

I believe that One Identity Manager is not currently providing all-in-one capabilities effectively. It does have options for privileged account management and categorizing human identities, but it lacks visibility for non-human identities and CI/CD pipelines or cloud workloads.

I find that the user experience and intuitiveness of One Identity Manager are quite confusing. The navigation is not straightforward and requires assistance from someone experienced with the tool. Configuration settings are scattered across different areas, which complicates things and contributes to a steep learning curve, especially for new users. The documentation lacks clarity and thoroughness, making it difficult to follow procedures without proper guidance.

I have worked on One Identity Manager since the year 2022.

I see technical challenges with the cloud version, the SaaS version, especially in a hybrid setup because I often encounter issues connecting to on-premises devices. It is often more stable to have a solution on-premises that can send data to the cloud.

I have contacted technical support multiple times and found their emergency coverage reliable. They respond promptly for severity one issues. However, after an upgrade, without involving their paid support, resolving issues can proceed at a slow pace.

Negative

Since the start of my career, I have worked in the identity and access management domain, with experience in various products from Microsoft to SailPoint and Saviynt.

The initial deployment is not easy.

It requires specialized knowledge. As a techno-manager, my team has engineers familiar with the tool due to extensive experience. However, training someone to deploy in a short time can be challenging as they often require support from SMEs who know the tool.

When it comes to pricing, I find it relatively cheaper compared to competitors in the IGA space.

There are pros and cons to One Identity Manager as a product. From a strategic partner perspective, there are always pros without cons. My team functions both as integrators and sellers, as we have our managed service, allowing us to sell it to our customers. 

I have worked on various European projects where we mainly use this tool as an Identity and Access Management (IAM) solution rather than its Privileged Access Management (PAM) features. Specifically, it serves as a central IAM tool for governance, compliance, and managing access requests across all the companies and projects I've been involved with. Most of these access requests were processed through Microsoft tools. They were onboarding applications and managing access to them via One Identity Manager through the portal it offers.

Every identity management tool has its unique features, and I believe that One Identity Manager performs quite well. From a developer's perspective, its interface provides excellent information. It includes appealing visuals and a user-friendly design, allowing you to clearly see how software accounts correlate or match with an identity. This gives you a comprehensive view of what an identity encompasses. You can establish specific rules to determine if access is fully managed by One Identity, which acts as the authoritative source for system access. Additionally, it offers a range of capabilities and customization options for managing access across various applications. Overall, I think One Identity Manager does a commendable job in this area.

One Identity Manager can be set up to have accounts synced from the SAP system and have them as orphaned in the system. The intended way is to link them to an identity, and when clicking the identity of the employee, you will see underneath the AD accounts, other application accounts, and different SAP accounts. For each SAP system, you can have specific rules. It has this capability out of the box, SOD rules, different roles, and bundles.

When users request access for a SAP system and do not have an account already, an account is created based on specific criteria that can be defined. From an end user point of view, they go to the portal and request access. If they do not have an account, they get one. If they already have an account, the access will be added and provisioned properly. The account will be connected to their identity with all the access in the downstream application in SAP. It requires a good architect to think through all the different cases for the business. Many connectors must be built because some companies use upwards of 200 SAP systems.

One Identity Manager offers governance for cloud apps through its cloud framework. The logic remains similar to on-premise applications: build a connector, import data, create business roles, enable requests, and implement approvals. The governance framework is particularly strong with application approval workflows and recertification processes.

The solution provides technical options to distinguish between different types of accounts per system. For AD, different rules can identify and manage various account types differently. It offers strong reporting capabilities and can detect policy violations.

For application management, One Identity Manager has a built-in risk framework that helps businesses with approvals and recertifications. Full application management without IT involvement requires building custom frameworks.

It helps to streamline application access decisions, application compliance, and application auditing for customers. When auditors come in, they require that access be managed using an IGA tool. It's quite easy to set up; you just need to build a connector to facilitate this access. In addition, a business analyst can identify the business rules needed. You publish the business rules and set up an approval process—usually requiring two approvals if it's related to the application. Once the business rule is published, a user can request access through the portal, and someone will approve it—standard procedure. You can also run certifications and set up different approval processes for employees who need access for one year or for those who are moving (like shifts). Certification can involve various terms, including access reviews or access refusals. It's a straightforward process. It's strong and reliable. I've seen hundreds of applications successfully managed and compliant because of this process, which includes approval requests and access refusals. You simply onboard the application, and you're set—it all becomes remote for you. All the audit trails are available. You can see who approved what, why they approved it, when the access was granted, and when it was revoked, among other details. It truly helps to maintain compliance.

The solution offers some out-of-the-box capability to manage profiles, but I have not worked with other aspects. In the companies where I was working, they were not using this from a SAP point of view.

One of the most significant advantages is its strong security around identity management when compared to other tools; it's quite robust. However, it does come with a high learning curve, making it difficult to implement and operate without a dedicated IAM team. You need people with substantial experience—likely several years—in order to navigate the complexities effectively. It's not something you can easily outsource entirely to a consultancy. In the past couple of years, they released a new version, Version 9, building on the previous version 8.02. This new version introduced a revamped portal where end users can request access. The previous version had a built-in portal that was quite complex to configure. In the new Version 9, they developed a new portal based on Angular, which offers many capabilities. If someone knows how to utilize it and learn its features, they can make API calls to interact with other systems. Some consulting firms are already developing custom frameworks around this to leverage these capabilities. 

This new portal is where end users go to request access. It provides good out-of-the-box functionalities, allowing users to request access to various applications, and managers can approve these requests. In addition to the default functionalities, the use of APIs is enabled through the portal. However, the general market lacks expertise regarding this tool; only a few companies are actively investing in understanding how it works and offering their services based on that knowledge. Many businesses are migrating to this new portal as the older versions are being phased out of support and are eager to learn how to maximize its capabilities.

Overall, One Identity Manager is a robust tool designed for large enterprises and is still an on-premise solution.

One Identity Manager does not offer much in terms of delivering SAP-specialized workflows and business logic. Custom workflows can be built, but it is limited in that regard. Comparing it to SailPoint, One Identity Manager is less advanced around SAP, particularly regarding the flexibility to build custom flows. While customizations are possible through processes in One Identity Manager where you can build PowerShell code or make API calls, this is not the intended way and requires heavy customization that might become unmanageable.

They could offer more out-of-the-box connectors so that custom PowerShell connectors would not need to be built. 

The support could be improved. They could add more AI to help with role mining. The new portal documentation needs improvement as some partners are more advanced in understanding how the Angular portal works than One Identity itself.

I'm not currently working with it. I stopped working with it three to four months ago. Before that, I worked with it for about three years and seven months.

Regarding support, they prioritize resolving escalated issues. However, their response can be slow. Whenever I open a ticket, the reply often includes a request for the specifications of the server I am using. For instance, they frequently ask, “How many gigabytes of RAM are you running on the server?” If I'm not using the maximum recommended specifications, they immediately suggest that there is a problem. They don’t always consider that the issue may not be related to performance at all.

I haven’t had the best experience with them, but I understand that they do eventually respond. However, there have been instances where we had tickets open for months without any resolution. Sometimes, they would either go quiet or eventually respond and help us find a solution. I’ve faced many similar situations across various projects.

At the end of the day, I’m not a customer, so I’m not too concerned about the experience. However, the application owners of One Identity in these companies have expressed dissatisfaction with the responses they received. They wanted more immediate assistance and access to more skilled resources. That's understandable. Overall, I would rate the experience as a six out of ten.

Neutral

It depends on the situation. If you're starting from scratch, in a greenfield scenario, where you have nothing set up and don't have an IGA tool, then you can begin by establishing an Active Directory. You start with the basics: take employee data and import it into One Identity Manager to create Active Directory accounts for each employee. This setup can typically be completed in about three to four months. It’s not overly complicated. However, it’s important to note that most businesses have complex processes that don’t easily translate into the tool. To effectively monitor applications and manage these processes, you really need technical expertise.

For a large enterprise that has the capability to support an on-premise solution and is willing to find reliable partners to assist with this new portal, along with the technical know-how to match the tool's capabilities, it can be a highly effective solution. This tool offers a wide range of features out of the box. However, the biggest challenge is the steep learning curve; it's essential to have experts with many years of experience and strong technical expertise to maximize the tool's potential. This solution is not suitable for small companies or those seeking a quick implementation. It requires a significant investment initially, but it pays off in the long run due to its extensive features compared to other tools.

I don't have information on the costs associated with the tools or the specific deals they offer. However, I do know that it's challenging to find technical expertise, and these professionals often command high salaries.

In addition to purchasing the tool and its licenses, it's important to account for the need for a dedicated team, especially if you're a large enterprise. There are significant costs involved in maintaining the solution and ensuring it operates effectively. Unfortunately, I don't have details on the licensing fees or per-user costs, among other specifics.

My recommendation is that you really need to understand the realm of identity and access management. It's important to consider the alternatives available, and I believe that for some companies, One Identity is the best solution out there. For specific enterprises, it could indeed be the ideal choice, but for others, it may not be suitable. For instance, a small business with fewer than 25,000 employees, which may not prioritize governance and compliance, might find One Identity unnecessary. It really depends on the landscape of the company using the tool—what their requirements are, what applications they have, and what they're aiming to achieve.

One Identity is quite beneficial for finance-related entities that have strict compliance and security needs. However, One Identity should invest more in AI and enhance their documentation on the new portal. This improvement would help customers and developers better understand what they are building.

The business roles functionality is a very standard part of the access model. Typically, you would start with an application. You gather all the users and their entitlements, which include the accesses they have. Then, you need someone, such as a business analyst or consultant, to help identify bundles or groups of this low-level access. Instead of managing each access individually, you can group them together and create a role for each application, or possibly a combination of different applications. This approach greatly simplifies management. A user doesn’t need to know all the low-level accesses required in a system or across different systems. By creating bundles of access with accompanying business rules, it becomes easier to understand. For example, if I am a DevOps member working with AWS, there’s already a pre-defined access bundle for me. My colleague can tell me to request this specific access, which provides everything I need. Alternatively, access can be automatically assigned based on department—whenever someone joins a specific department, they receive all associated accesses. 

Moreover, you can build dynamic rules around these business rules. While technically speaking, in the One Identity Manager, an application role is part of a business role. However, it’s important to note that you can have a business role defined by specific criteria. Anyone who meets this criterion receives the business role, which is beneficial for management. For instance, if you want to grant access to new hires for applications like Teams, all relevant accesses can be bundled into a business role. If someone leaves the company, their status would change to inactive, and they would lose their access. This streamlines the access lifecycle management process.

From an end-user perspective, it simplifies requests for specific applications or accesses per department. Depending on your chosen architecture and access model, this organization is crucial. However, a key requirement is to have a business analyst involved; otherwise, you risk ending up with scattered entitlements and groups that lack clarity regarding their business association. Finally, don't forget to set up an approval process.

From an end-user perspective, with the new Angular portal in version 9 and upwards, it has improved significantly. However, not all companies have migrated because they have custom logic in the old portal that needs to be translated to the new Angular portal. The new portal is better as it is easy to navigate with straightforward navigation bars. Previously, sometimes custom queries behind the portal really slowed down end-user performance, with users reporting waiting 15-20 minutes for a page to load, especially during approvals or attestations. This was particularly frustrating for users needing high-level managerial approvals for various tasks. In the new portal, you can customize tasks to address some of these performance issues, making it a more efficient experience.

Overall, I would rate it a seven out of ten.