Identity Manager by One Identity Reviews

One Identity Manager serves as a robust and comprehensive identity governance and administration solution, providing centralized control over user identities, access rights, and compliance management across the organization.

I use One Identity Manager to manage user identity and access across multiple systems, which helps automate user provisioning and reduce manual work. The RBAC feature is very useful for controlling access and maintaining compliance, and the strong reporting and auditing features help during audits. However, the initial setup is somewhat complex and requires skilled resources.

Overall, it is a stable and reliable solution for identity and access management. In our organization, One Identity Manager automates the user lifecycle management process. Whenever a new employee joins, their account is automatically created in Active Directory and other connected systems based on their role. We have implemented role-based access control to ensure that they receive appropriate access depending on their department and job function, which reduces manual error and improves security.

The best features One Identity Manager offers include automated user lifecycle management, role-based access control, centralized identity management, strong audit and compliance support, integration with multiple systems, and AI-driven security and risk insight.

One Identity Manager sometimes generates false-positive policy violations, especially in a complex RBAC environment where multiple roles and inheritance rules apply. There are cases where it flags excessive or conflicting access, even though the access is valid based on the requirement, usually due to role overlaps or misconfigured policies.

One Identity Manager is a strong solution, but several areas require improvement. The initial setup and configuration are quite complex and time-consuming, especially for large environments, and the user interface could be improved to be more user-friendly. The current interface is difficult for new users to navigate, and troubleshooting issues such as synchronization or policy conflicts sometimes require deep technical knowledge.

Additionally, the system can generate false-positives in access violations, requiring manual tuning and validation. Performance could also be improved when handling large datasets or running heavy reports.

I have been working in my current field for five years and have been using One Identity Manager for one year.

One Identity Manager is stable in my experience. Our experience with One Identity Manager has been stable and reliable, performing well in daily operations such as user provisioning, synchronization, and access management. We have not faced any major downtime; however, issues can occasionally occur during heavy workloads or large synchronization jobs. Overall, with proper configuration and maintenance, the platform remains stable in an enterprise environment.

Customer support for One Identity Manager is generally good and responsive, providing quick responses for troubleshooting issues and resolving queries. For complex issues, response time can sometimes take longer, but the support team is knowledgeable and effective, with proper documentation and experienced resources, which helps in faster issue resolution.

I have not used a previous solution before One Identity Manager.

One Identity Manager is a powerful solution for identity governance, especially in large enterprise environments, improving security by ensuring proper access control and reducing manual efforts. My environment consists of almost five thousand users using LDAP security. However, proper planning is very important before implementation since the initial setup and customization can be complex, so having skilled resources or vendor support is recommended. Once implemented correctly, it provides good stability, scalability, and long-term benefits for managing identities and compliance.

One Identity Manager is a strong solution, but several areas require improvement. The initial setup and configuration are quite complex and time-consuming, especially for large environments, and the user interface could be improved to be more user-friendly. The current interface is difficult for new users to navigate, and troubleshooting issues such as synchronization or policy conflicts sometimes require deep technical knowledge. Additionally, the system can generate false-positives in access violations, requiring manual tuning and validation. Performance could also be improved when handling large datasets or running heavy reports.

Before choosing One Identity Manager, we evaluated other solutions such as SailPoint Identity, Microsoft Entra ID, and Okta. These solutions also provide strong identity features compared to One Identity Manager, but we selected One Identity Manager due to its strong customization capabilities, flexible integrations with multiple systems, and powerful on-premise support.

In our experience, One Identity Manager sometimes generates false-positive policy violations, especially in a complex RBAC environment where multiple roles and inheritance rules apply. There are cases where it flags excessive or conflicting access, even though the access is valid based on the requirement, usually due to role overlaps or misconfigured policies.

One Identity Manager is a powerful and reliable identity governance solution suitable for large enterprise environments. It offers strong automation, security, and compliance features that help streamline access management. While the initial setup can be complex, once properly implemented, it delivers long-term value and improves overall operational efficiency.

Customer support for One Identity Manager is generally good and responsive, providing quick responses for troubleshooting issues and resolving queries. For complex issues, response time can sometimes take longer, but the support team is knowledgeable and effective, with proper documentation and experienced resources, which helps in faster issue resolution. I would rate this product nine out of ten.

One Identity Manager is used to manage the user lifecycle and control access for applications. We specify which users are allowed to access particular applications at specific times, and the system enables us to control all of these elements based on our requirements.

During employee onboarding, employee details are automatically pulled from the HR system into One Identity Manager. Based on their role and department, the system automatically creates their account and assigns the required access such as Gmail access, applications, or any other necessary access. The system creates access automatically and sends it for approval if needed.

One Identity Manager offers strong access control, support for automation with good audit visibility, and performance that functions well within our enterprise environment.

Automation has significantly reduced our manual tasks. This automation substantially lowers human errors, allowing us to save considerable time.

One Identity Manager has positively impacted our organization by improving security since users receive only the access they need while also providing proper access controls. It increases efficiency by automating user onboarding and offboarding, saving our resources' time while reducing human errors and speeding up the employee onboarding process.

The initial setup could be improved to reduce the complexity.

I have been using One Identity Manager for more than three years.

One Identity Manager is very stable.

The scalability of One Identity Manager is excellent, matching our organization's growth with no issues.

Customer support is responsive and available 24/7, allowing them to troubleshoot whatever we require.

From the beginning, we have been using One Identity Manager as our solution.

The setup cost and licensing were straightforward, with excellent support. There were no issues with pricing, setup cost, or licensing.

We are both a customer and partner of the vendor.

Implementing One Identity Manager has completely eliminated the manual process, indirectly saving our organization's money and providing a clear return on investment through significantly reducing manual efforts for business reports and saving considerable time for the quality team.

The setup cost and licensing were straightforward, with excellent support. There were no issues with pricing, setup cost, or licensing.

We have not evaluated other options before choosing One Identity Manager.

Automation has significantly reduced our manual tasks, and this automation substantially lowers human errors, allowing us to save considerable time. One Identity Manager works properly in our organization, and there is no requirement to improve or add any features as it is functioning well for us.

My advice for others looking into using One Identity Manager is that anyone planning to deploy it should have skilled resources for proper implementation. They should focus on clear role-based access from the beginning to avoid over-personalization with the right plan and setup. I would rate this solution a 9 out of 10.

My use case with One Identity Manager is both access management and identity management. The main tasks I perform involve solving issues when users receive roles but cannot access applications. During these situations, I debug within One Identity Manager to find and resolve the issues according to required actions. This is my daily use case.

The best features of One Identity Manager are the synchronization project, the mapping, onboarding using CSV, and the designer tool which allows us to write our own custom workflows. 

Once it's set up, One Identity Manager helps with provisioning and continues to work effectively. When anyone leaves the organization, they can be un-provisioned, and all access is removed instantly.

The UI of One Identity Manager is adequate, but there is room for improvement. They should publish more development documents to help users of One Identity Manager, as there are limited resources available.

I have been using One Identity Manager for one year.

The stability of One Identity Manager is good.

I don't have extensive experience comparing One Identity Manager with other market solutions, but I have heard about SailPoint, which has its own advantages and disadvantages. For large organizations, One Identity Manager is more scalable and secure.

We have 8,000 people.

The technical support for One Identity Manager rates a seven out of ten, which is average. When we raise tickets, they are directed to the respective team for response. We have two support connections from One Identity Manager itself and the partner, allowing direct communication. Issues are typically resolved within 24 hours through the ticket system.

Neutral

While I didn't work with SAP, I worked with Segregation of Duties (SoD) in One Identity Manager. It is flexible, and customization is neither particularly easy nor difficult. There are certain theories and concepts to keep in mind for successful customization.

I use the business roles in One Identity Manager, which is essentially the RBAC (role-based access system), and for the target system, we use the FRIC business role. Though I haven't used One Identity Manager to extend governance to cloud apps yet, I would if given the opportunity.

For production management, we have the packager tool, which allows setup of various environments including development, test, ultra-test, and production. We can export from lower environments and import into production using the packager tool.

I would rate One Identity Manager a nine out of ten.

One Identity Manager is used for centralized user identity and access management, privileged account management, access governance, compliance, and auditing purposes.

In one of our projects, One Identity Manager is used for centralized identity and access management across the organization. Earlier, user account creation, access approvals, and deactivations were handled manually, which was time-consuming and prone to human error. The complete user lifecycle process has been automated using One Identity Manager. Whenever a new employee joins, the system automatically creates the account and assigns the required access based on the department or designation. One Identity Manager has also been integrated with Microsoft Active Directory. If a user belongs to the finance department, for example, they automatically receive access only to finance-related applications. This is the main benefit to the organization from using One Identity Manager.

One Identity Manager automates user provisioning and de-provisioning, enables a faster employee onboarding process, and reduces manual work for IT teams. One Identity Manager provides better visibility of who has access and what kind of access the user has.

There is a central dashboard to see all the users and their access. The IT team can easily identify who has access to which application and which user has been using which server and for how much time. One Identity Manager tracks all user login activities and access changes, helping to detect unauthorized or excessive permissions.

One Identity Manager is a significant time saver since it is an automated process and manual work is not being done. It improves security by giving users only the required access. One Identity Manager provides centralized monitoring and reporting of user activities. It is a scalable solution for larger organizations. If there are thousands of users, manually creating a domain and assigning users would be a very large process. Using One Identity Manager helps the organization do this automatically.

Initial deployments are complex and require proper planning. Role mapping needs to be done very carefully. Integration with legacy applications takes more time and these areas could be improved.

Integrations do not always happen properly, and the same process often needs to be repeated. More features could be added. For example, AI is not fully implemented, so AI could be properly integrated into One Identity Manager.

I have been working in presales for the last two years, and prior to that, I was in post-sales for the last 3.5 years.

Instead of having two engineers for this, we can have just one engineer. One Identity Manager is highly scalable.

Customer service is good.

I have not used a different solution. One Identity Manager is the first solution I have implemented.

Manual processes are time-consuming, so I recommend that others use One Identity Manager as it saves a lot of time. Errors that are made by humans will probably not happen when using One Identity Manager.

One Identity Manager was deployed in one of our customer's environments six to seven months ago.

For auditing purposes, reports are easily obtained through One Identity Manager. Manually, reports would need to be fetched from each system individually. Using One Identity Manager, all necessary reports for auditing purposes are automatically generated.

One Identity Manager's licensing plan is good for the features that are needed. I rated it an eight because the features are good for the license.

I have not evaluated alternate solutions. I rate this review an eight overall.

One Identity Manager is used for the user lifecycle and to enforce access governance across the organization's systems. This solution helps to automate account creation, any modification, or any account removal. It also controls access through approval workflows, which is the main use case.

A real-time example of how One Identity Manager has helped the team was during a new employee onboarding and access assignment scenario. Multiple new joiners in different departments, such as IT or HR, had their accounts created in the AD automatically, with access assigned to multiple applications, and proper procedures were followed.

One Identity Manager has had a good impact on the organization and has really improved access control and reduced manual efforts. The identity processes are now more consistent and processed, which is helping significantly.

Manual errors have been reduced because all things are automated. There has been great time saving. The same process that was taking one to two hours now takes only 10 to 15 minutes mostly. The automated provisioning of the user across the system occurs in much less time and has really reduced manual tickets.

There has been a strong return on investment after implementing One Identity Manager, especially through automation, reduced operational efforts, and improved security. Time saving has been achieved in user lifecycle management, and there has been a reduction in support tickets of almost 60 to 70%, along with a reduction in errors.

The lifecycle automation feature of One Identity Manager is found to be very effective. It handles user onboarding and access assignment without any manual interruption or steps. This has really helped to improve efficiency and accuracy.

Lifecycle automation has multiple aspects that are really helping. One Identity Manager's lifecycle automation has made the biggest difference in secure and instant onboarding, which not only reduced the risk but also reduced efforts from daily operations.

One Identity Manager has provided great security with great automation features and great usability.

OEM documentation for the initial setup could be improved.

One Identity Manager has been in use for more than four years.

There have been no downtime or reliability issues with One Identity Manager. It is a very stable solution.

There are no scalability issues with One Identity Manager. It is highly scalable and capable of keeping up with the organization's growth needs, especially in the enterprise environment.

The customer support team for One Identity Manager provides a great experience. They resolve any technical issues within a given timeline and provide support 24/7.

One Identity Manager has been the only solution used from the start.

The vendor's sales team provided a great experience because there was a very positive response from the team, and they helped in procuring the solution.

The organization is a partner with the vendor of One Identity Manager.

Other solutions were not evaluated before choosing One Identity Manager.

One Identity Manager is highly recommended. It is a great solution that comes with great features and great security features. The advice would be to define the identity process and roles clearly before procuring or implementing. Start with the basic features and then move to the more advanced features. Proper planning is needed before implementation. The overall rating for One Identity Manager is nine out of ten.

As an engineer, I primarily use One Identity Manager for user lifecycle management and access governance, which helps me to automate onboarding users or employees, role changes, and offboarding. This is the primary use case, and additionally, I am using it for access requests and approvals, ensuring controlled access through a portal where user requests go through an approval process. My use case also involves role-based access control, where access is assigned based on job roles, with automated features that eliminate the need for manual effort. Furthermore, HR system integration acts as a source of information, allowing user data to sync automatically and maintain accurate data across the organization while providing a compliance and audit-ready environment.

Whenever any new employee or user joins my organization, their account is automatically created in the system and access is granted based on their roles and responsibilities, which really helps me to reduce the manual efforts of the IT team. If they require any change in the department, access is automatically granted or updated.

The best feature offered by One Identity Manager is the excellent automation for user lifecycle management, along with strong role-based access control where access is assigned based on job role, department, and business functions.

The role-based access control feature of One Identity Manager helps my team by keeping the environment secure and ensuring standardized access across users. Instead of assigning access manually, I create roles based on departments, such as finance, IT, or HR, each with predefined access. Every user in the same role receives consistent access, independent of manual decisions, saving a significant amount of time for my IT team, with automated provisioning resulting in over a 70% reduction in provisioning efforts and faster onboarding of employees.

One Identity Manager has positively impacted my organization by saving my IT team a huge amount of time, allowing them to concentrate on other critical tasks and increasing their productivity, resulting in a notable reduction in onboarding and offboarding time. This improvement eliminates the need for manual work for the IT team and enhances my security posture.

I have seen a significant reduction in the time previously taken for onboarding users, achieving a 70 to 80% faster onboarding process compared to the previous time it required, which has had a positive impact on my organization.

Based on my experience with One Identity Manager, it is working very well as per my requirements, and I do not believe it requires any kind of improvement at this point; it is offering great features with impressive usability.

Sometimes, the initial setup or deployment of the solution feels a little complex and could be simplified with better planning, which would allow for more flexibility for new engineers.

I have been using One Identity Manager for more than three years.

One Identity Manager is stable.

I do not see any challenges with the scalability of One Identity Manager; it is a very scalable solution suitable for mid to large enterprises, capable of handling thousands of users.

One Identity Manager's customer support is good, providing effective assistance in resolving complex issues whenever I face them. They are always ready to help.

From day one, I have been using One Identity Manager and have not used a different solution.

Sometimes, the initial setup or deployment of the solution feels a little complex and could be simplified with better planning, which would allow for more flexibility for new engineers.

I have seen a great return on investment with One Identity Manager, especially in terms of time-saving and reduced manual efforts, saving 70 to 80% of time compared to previous methods and allowing for almost 90% faster access removal or granting, making it a great solution for my environment.

I do not handle pricing, setup costs, or licensing for One Identity Manager, as this is managed by a different team in my organization.

I did not evaluate other options before choosing One Identity Manager.

I highly recommend One Identity Manager as it will really help any organization. My advice is to invest time in proper planning before implementation, particularly around role design and identity structure, starting with core use cases such as user lifecycle management and access requests, and gradually expanding to advanced governance to ensure a smooth deployment. I give this review a rating of 10.

My main use case for One Identity Manager is for identity access management solutions for clients. For our clients, let's say we have a bank company as a client. In that client, there will be employees, various kinds of employees, permanent employees, external employees, vendors, so many people might be there. Every employee who gets onboarded into a company will be having some identity within the company, so to provide an entire identity access management system is essential.

Once a user is onboarded, we can give some accesses by default using birthright roles or dynamic roles. We can also provide a way so that the user can request the roles or accesses that the user might require. We have a portal, IT Shop, everything set up, and we can create workflows, access approval workflows, and all so that the user can request the required access, and if the proper workflow has been completed, the access will be provided. These all things can be customized as per the customer requirements.

Using One Identity Manager, we can connect with various target systems like ServiceNow, SuccessFactors, Workday, whatever, however. To One Identity Manager, we can onboard data, and we can also send the data to various target systems, whatever the customer might need. It provides various connectors such as DB connector, native SQL connector, Oracle connector, SAP connector, Exchange connector, Active Directory connector, PowerShell connector. There are so many ways we can connect to other systems so that we can send data to other systems and sync back from those systems, making this One Identity Manager system a centralized system that controls everything. One Identity Manager can act as a source of truth for various systems, which is one way for the companies to centralize their IM system.

In my opinion, the best features One Identity Manager offers are customization. We can customize many things as per our requirements, not just use the default options, out-of-the-box options. We can connect to any target system using the PowerShell connector, which is the best way. We also have API connectors and other things as well. From the latest versions, they are moving from the native portal to the Angular portal, which will speed up the portal development process and make the portal more attractive and dynamic. It also has other supportive portals like Operations Portal, Admin Portal, and Password Reset Portal for various services and all.

Most customers choose One Identity Manager because of the customization it provides, not just for me or my customers. We have one feature called attestation, which helps review user access periodically and frequently and ensures the audit players and audit processes work properly within the organization.

One Identity Manager positively impacts my organization and my clients by automating user access reviews, which often won't happen properly. With One Identity Manager, we can schedule those access review processes and automate them so that they automatically trigger and send access review emails to the user's managers, ensuring they take action on the access side, whether the user should have that access or not. For most customers, their access management system becomes smoother using One Identity Manager.

The specific outcomes my clients have seen include saving time and reducing manual work. Without a centralized IM system like One Identity Manager, onboarding tasks must be done manually, leading to human errors. If a user makes a mistake manually, it could lead to another incident, causing bottleneck issues in operations. Using a centralized system like One Identity Manager really eases the onboarding and offboarding processes for any organization, making identity access management smoother.

One Identity Manager could be improved because the community is a bit small, and the documentation sometimes isn't clear or interactive. This migration from the native portal to the Angular portal is not well known, and I think this change could bring chaos within the community.

I have been using One Identity Manager for more than two and a half years.

One Identity Manager is stable in my experience.

One Identity Manager's scalability depends on the subscription you take and the size of your user base.

Customer service rating: 4 out of 10.

Positive

I evaluated SailPoint, Saviynt, and other tools before choosing One Identity Manager. I prefer One Identity Manager because of the customizations it allows, though I'm not completely certain about other solutions. My experience with One Identity Manager influenced my choice.

When using a centralized system like One Identity Manager that offers so much customization, I see a return on investment through saved money. Instead of spending on various systems, having one centralized system that handles all my organizational requirements helps save money. The setup is easy, and One Identity Manager provides support.

I advise others looking into using One Identity Manager to go ahead and take the latest version of One Identity Manager solution to avoid the headaches of migrating from previous versions. The latest versions have support from One Identity Manager as well, fixing many issues and adding new features as part of the new releases. Our company has a business relationship with this vendor as we are partners. I rate this solution an 8 out of 10.

We use it for identity management and governance. We are a large financial institution; therefore, we use it for identity management and all the cases surrounding that, such as segregation of duty, attestation, extensive provisioning, and life cycle management.

The largest improvement we have seen is the depth of how many applications we have covered. We have about 4,000 applications connected to One Identity Manager, fully managed from there. That has definitely grown over the years, including the ease of connecting those applications. In the end, what we want to achieve as an organization is not a nice technical solution, but our goals are being in control of our accounts, being in control of our entitlements, and being in control of what entitlements are assigned to whom and why, and proper substantiation for that. To be able to achieve that, we need to have a large range of applications that we actually manage. That is something that has become easier and grown over the years. I would say this is the biggest improvement. Moreover, better processes have been introduced surrounding the data so that we do not just connect the applications, but at a data level, we actually achieve the control we want by ensuring everything in those applications is monitored and kept in control.

The SAP integration goes in-depth into the SAP tool, enabling us to get all the information we want from there. It connects SAP accounts to employee identities under governance, which is very important. It saves licensing costs by cleaning up and ensuring SAP accounts are associated with actual employees. We want a SAP account associated with one person.

It provides IGA for the difficult-to-manage aspects of SAP, such as T Codes, profiles, and rules. It provides profiles, profile limits, and field values.

It offers a single platform for enterprise-level administration and governance of users, data, and privileged accounts. It is very good, especially when you are looking at the enterprise backend. On the platform side, it is very good. However, the frontend usability, at least for our organization, could still be improved a little bit. That is not so much for the admin perspective; that is for the actual end-users in our enterprise. That is partially also due to the fact that we are still using some of the older portals because we have been using the tool for a while, and we have not had a chance to migrate to all the latest versions. It is very good for enterprise management, but our end-user experience could still use some fine-tuning, tweaking, and improvements.

We can easily customize the solution for our needs.

We use the solution's business roles to map company structures for dynamic application purposes. That is very important for us because it is one of the ways where we can remove the complexity for end-users. We can automate things while still providing a good control framework where we can say we are in control. Being a large enterprise, we have a complicated structure, so we need a good model that allows us to accommodate that complicated structure. With the business roles, we were able to do that.

We use it to extend governance to cloud apps. This extension is important for us because, as a large financial institution, we have to meet a lot of compliance requirements. That does not stop with our on-premise environment; it also applies to our cloud systems, so we need to manage those.

It helps minimize gaps in governance coverage among test, dev, and production servers. We also have a lot of our dev, test, and acceptance environments connected to the solution. It allows us to manage those as well based on the production user's life cycle. We have no issues there.

It helps consolidate procurement and licensing a little bit. We do not manage our procurement or licensing in the tool. We have our own procurement tools for that. However, when we know, for example, that there are limits to the amount of licenses we can give out, we use the tool to ensure we do not pass those limits. We use it more as an enforcement tool or safety valve to ensure we follow the guidelines set by procurement on how much we can do.

It streamlines application access decisions, application compliance, and application auditing. We use the segregation of duty framework. We use the attestation framework. It is one of the core pillars for the regulatory and compliance set where we show we are in control of our identities, accounts, and the access they have. We can show that we meet all the regulations in regular reviewing that ensure that no toxic combinations or toxic pairs are assigned.

It helps achieve an identity-centric zero-trust model. We are currently using it for one body, and we are looking into extending it to machine identities. For our current human employees, we are in the identity-centric model. We also have multiple sources from where identities come. We have a lot of subsidiary companies. We have a lot of statements of work or external contractors, and sometimes people come in from multiple sources at the same time. It also allows us to consolidate that to see that it is actually the same identity.

It helps create a privileged governance stance to close the security gap between privileged users and standard users. For the management of privileged accounts, we use another solution called CyberArk Privileged Access Management, and we do have a close automated connection between One Identity and CyberArk where we use One Identity to decide who should have access to which privileged accounts and why. CyberArk is a tool that we use to actually hand out access to those accounts and monitor usage of those accounts, etc. The governance part of who can use which account is managed from One Identity, and then the actual usage is done through CyberArk, and that integration works well for us.

What I like the most is the flexibility or configurability. It is not like you are writing huge lines of code. It allows us to handle our very complex enterprise use cases, and we have many of those. We have a lot of scenarios where we need to do things internationally or slightly differently per country, or need to comply with specific regulations. It gives us a lot of flexibility to meet all those needs while also being able to accommodate our enterprise processes. It allows us to shift the tool to work for us instead of needing to change the organization to follow a piece of technology.

Their support could be enhanced.

There is an area for improvement when it comes to intuitiveness. It has the ability to manage everything and does that fairly well, but that also causes a risk of drowning end-users in complexity. One Identity technology probably has the best way to handle the complexity that you want to tackle as a large enterprise. It can handle any complex use case you can think of, but that is also the thing they should improve on. They should keep it simpler for end-users, even though they are handling that complexity. They should handle all the complexity, but keep it simple for the end users, so the part they need to improve on is keeping it simple for the end users.

I have been using it in some way, shape, or form for 14 years. At my current place of employment, we have been using it for 8 years.

I would rate the stability a nine out of ten.

I would rate its scalability an eight out of ten.

In terms of the number of users, there are two sides. The number of people who request access would be about 50,000, and there are about 300 or 400 people who do specialized things. That ranges from the actual technical team supporting the solution to people doing more complex business role management and things like that for their pillars within the organization.

We use their premier support. That has differed over the eight years. At the start, it certainly did add a lot of value. At a certain point, about one and a half years ago, One Identity underwent some reorganizations and their support level went down and was not up to our expectations anymore. We have had some serious conversations with them about that. They reacted well because support has picked up back to where we expected it to be. The advantage for us with premier support is that, as a large enterprise, we can always run into specific problems, and, at that point, someone who knows all the ins and outs of the product looks at it and helps us resolve those.

Premier Support has not been an influence in purchasing additional licenses or products from the vendor. However, it has definitely been an influence in using the product for this long and not switching to a competitor.

About two years ago, I would have rated their support a nine out of ten. Given the issues we have had, I would rate it a seven out of ten, hoping it will climb back up to that nine.

Neutral

We have a hybrid deployment model. Technical deployment or technical setup is very straightforward. Integrating it into your entire landscape when it is as big as ours and managing everything is obviously complex. I do not believe that is necessarily due to technology; that is due to the sheer volume of data and applications you need to connect.

From starting the setup to the full global rollout, it took about two years.

It does require maintenance. It primarily includes the occasional cumulative update packs being deployed. The second thing is that we have a constantly changing environment. New applications come in, and other applications are deprecated. We acquire companies. We spin companies off. They are, on the one hand, business-as-usual cases. On the other hand, they do require changes in the system. When you are, for example, suddenly onboarding 5,000 new people because you have acquired a new organization or need to integrate another directory service, then obviously that has some impact.

Our partner is Intragen. Our partner was originally AspisID, and they were acquired by Intragen during the eight-year period.

They helped with the implementation, although it was company-led. We led the implementation, and they provided expert resources. They definitely helped with the speed of the implementation. Some of the things they implemented were good for the initial implementation, but over the eight-year period, it has had some rework, which is not surprising.

We got the training from One Identity themselves which was good. Our partner provided on-the-job training but did not provide specific, in-depth training like a specialized training course or anything.

Our partner was involved in helping us customize the solution for our particular needs. Our experience on the whole was positive. Especially on some very detailed use cases, some choices were made which were good in the short term. In the long term, we have had to revisit them. What we are really happy with is that all the customizations they have done have proven to be very upgradable. Customizations that were done seven or eight years ago are still able to work in the current versions of the product. The customizations were done fairly well within the One Identity framework, but for the specific banking use cases, we are currently revisiting some of those.

The customer service we received from our partner has been very good. They have provided good value. They have definitely helped us move forward. They were originally AspisID and were acquired by Intragen. We have the advantage that they have local people, which always makes for a good collaboration. Their nearshore team integrates fairly well into our organization. They do their best to help bridge the cultural gaps. Due to the way they work with the nearshore team, they have been able to provide the resources we want, which we found to be tricky in the past with the IAM market.

That is a tricky estimate to give. Our primary reason for having the tool is not just a return on investment; without technology like this, we do not see a good way to meet our mandatory compliance requirements. Having a technology like this, whether it is One Identity or another, is almost a given to be able to keep a banking license when you are at our scale. Without it, we would need thousands of additional people. That is hard to translate into a return on investment, other than as a multiple of hundreds. That is just not the way you would tackle that problem.

I am aware of the cost. For us, it is quite cost-efficient. We have a good enterprise license agreement, and we are very happy with what we get for the price we pay for it.

I would compare One Identity Manager fairly favorably to other vendors on the market for identity management governance. We have recently done another RFP and decided to extend our contract, primarily because we have a lot of complex use cases, and the fact that the tool can tackle those fairly well is important for us.

I would recommend One Identity Manager to other users, but I would ask questions like, 'What are the users? How big are they?' For other enterprise organizations, I would definitely recommend it. For smaller organizations, like mid-size businesses with a few hundred employees, I would only recommend it if they are in a heavily regulated space. 

I would rate One Identity Manager a nine out of ten.

My main use case for One Identity Manager is identity lifecycle management, automating user provisioning, access approvals, and de-provisioning across multiple enterprise systems.

A specific example of how we use One Identity Manager is that we automatically create and assign system access for new employees based on their department and role, which removes a lot of manual onboarding work for IT.

The best features of One Identity Manager include that it helps significantly with compliance reviews since managers can regularly certify user access without IT manually tracking permissions in spreadsheets.

The compliance review feature definitely saves time and reduces errors compared to my previous process; before this, access reviews were mostly manual and spreadsheet-driven, so automating certifications reduced a lot of manual error and saved managers a ton of time during audits.

One Identity Manager has positively impacted my organization by improving access governance significantly; onboarding is faster, offboarding is more reliable, and audit preparation takes less manual effort than before.

Onboarding that used to take several hours across multiple systems is mostly automated now, and audit review probably takes fifty to sixty percent less effort compared to our old process.

One Identity Manager can be improved as the biggest pain point is the complexity; customization and troubleshooting can get quite technical, so it takes experienced admins to manage efficiently.

Better documentation with more real deployment examples would help significantly, and the UI could definitely be simplified for day-to-day admin tasks.

I have been using One Identity Manager for one year.

One Identity Manager has been quite stable overall; most issues we have seen were related to custom integrations and our workflow complexity rather than the core platform itself.

One Identity Manager scales well for large environments, especially when mapping and managing thousands of users and multiple connected systems, but performance tuning becomes important as deployment grows.

Customer support for One Identity Manager has been decent overall; response times are usually good for critical issues, but more complex customization problems resolution can sometimes take longer than expected.

Before One Identity Manager, we relied mostly on manual Active Directory processes and a few custom scripts, but it became too difficult to manage consistently as the number of applications and compliance requirements grew.

My experience with pricing, setup cost, and licensing is that licensing can get expensive as the environment scales, and the initial setup took a decent amount of consulting and internal effort, but it made sense for our enterprise requirements.

We mostly use Microsoft Azure as our cloud provider for our hybrid setup.

I have seen a return on investment mainly through operational efficiency; onboarding and access reviews are much faster now, and we have reduced a lot of manual IAM work that previously needed dedicated admin time every week.

Before choosing One Identity Manager, we also evaluated SailPoint and Saviynt, but One Identity Manager fit better with our existing Microsoft environment and customization needs.

My advice to others looking into using One Identity Manager is to make sure you have experienced IAM resources involved early because the platform is powerful but gets much easier to manage when the initial architecture and workflow are designed properly.

One Identity Manager is deployed in my organization mostly on-premises with integrations into some cloud applications, so overall, it is more of a hybrid environment for us.

My additional thoughts about One Identity Manager are that it is a strong enterprise IAM platform if you need deep customization and governance capabilities, but you definitely need the right expertise in place to get the most out of it.

I suggest to others looking into using One Identity Manager that they ensure they have experienced IAM resources involved early, as the platform is powerful but gets much easier to manage when the initial architecture and workflow are designed properly. I would rate this product an eight out of ten.

One Identity Manager is primarily used for identity and life cycle management, access governance, provisioning, and automating joiner, mover, leaver processes across different systems.

One Identity Manager automatically provisions accounts and assigns the right access when a new employee joins. It also handles transfers or adjusts promotions automatically when someone changes roles or leaves the company.

One Identity Manager has been integrated with Active Directory, HR systems, and a few business applications so identity changes flow automatically across multiple platforms from a single process.

The best features One Identity Manager offers are identity lifecycle automation, access governance, role-based provisioning, approval workflows, and risk monitoring and compliance reporting capabilities.

The automation feature is relied upon most because onboarding and access provisioning are much faster now. There have been fewer access-related errors because approvals and role assignments are automated and standardized across systems. One Identity Manager has improved access governance, reduced manual identity management tasks, and helped standardize onboarding, role changes, and offboarding processes across the organization.

One Identity Manager has positively impacted the organization through access governance, reduced manual identity management tasks, standardized onboarding and role changes, and offboarding processes across the organization.

Reporting customization and troubleshooting complex workflows can sometimes be time-consuming, so better visibility and simpler administration tools would be helpful.

One Identity Manager is powerful, but the UI could be more intuitive and some advanced configuration customizations have a fairly steep learning curve.

Reporting customization and troubleshooting complex workflows should be easier and more streamlined, so better visibility and simpler administration tools would help significantly.

One Identity Manager has been used for one year.

One Identity Manager is stable and smooth.

One Identity Manager scales very well for large enterprise environments, especially when managing multiple directories, hybrid infrastructure, and high volumes of provisioning and governance workflows. The platform's modular architecture helps with scaling across multiple domains and millions of identities, although larger deployments usually need careful performance tuning and infrastructure planning.

Customer support for One Identity Manager is excellent, and they are reliable and quick to resolve every query.

Before One Identity Manager, manual processes and native AD tools with some custom scripts were mainly relied upon. The switch to One Identity Manager was made to get better automation, centralized governance, and strong compliance control.

Setup requires proper planning because implementation and customization can take some time in complex environments.

Strong return on investment has been seen mainly through reduced manual identity management work and faster onboarding and offboarding processes. Tasks that previously took hours across multiple teams are now mostly automated, which has improved efficiency and reduced access-related errors.

The pricing and licensing for One Identity Manager are definitely enterprise-focused and can get expensive depending on the number of managed identities and integrations. The automation and governance capabilities justify the investment in large environments.

SailPoint, Saviynt, and Microsoft Entra ID Governance were evaluated before choosing One Identity Manager, mainly because strong hybrid identity governance and flexible provisioning workflows were needed.

One Identity Manager is very powerful and works best when the workflows and access policies are well-planned from the beginning, so it is important to clearly define identity governance processes and role models before implementation. The overall rating for this review is 8 out of 10.