What is our primary use case?
Our goal was to eliminate our on-site Active Directory and legacy Windows infrastructure since we operate solely on Macs. We considered two options: one that precisely aligned with our needs, and another that functioned more like a public solution. Ultimately, I chose OneLogin due to its enterprise-grade features and the professionalism of its representatives. It provided a seamless transition to the cloud, consolidating all our access needs onto a single platform.
How has it helped my organization?
Since implementing OneLogin, managing user accounts has become significantly streamlined. We no longer need to create and delete four separate accounts for each new user – a major advantage for an international school like ours, where student and staff turnover can be dramatic. In August, we might see 50 new students, while 30 may leave in October. Managing individual accounts across every platform was time-consuming, hindering our ability to improve workflows and automate processes. OneLogin simplifies this task, making user management faster, easier, and significantly more productive.
Many users forget their passwords, especially after an extended break like a three-day weekend. This leads to frequent password resets in less tech-savvy organizations. To simplify this process, we rely on OneLogin. With a single password reset, users can regain access to all their applications, making it significantly easier for them. Initially, there was some resistance from IT staff, but the convenience of one password won them over. Now, with macOS's desktop Single Sign-On, we're leveraging OneLogin even further. We use it to authenticate users to the radio server, lab machines, and shared workstations, and the upcoming Mac desktop SSO will streamline direct logins to individual Macs as well.
OneLogin provides a single pane of glass for most of our needs. It functions like a dashboard, giving me all the key metrics I need to see, such as the number of logins attempted and the number of failures. This allows me to quickly identify trends, like increased failures during holidays, and understand the reason behind them. Additionally, OneLogin offers the potential to integrate more frequently used apps and generate valuable reports. While it doesn't provide complete visibility due to the inherent privacy features of Macs, it covers the majority of our login activity. For deeper insights and troubleshooting Mac-specific login issues, I do need to utilize the Mac management tools directly.
The single pane of access management facilitates collaboration between IT and security, even when, as in my case, those roles are combined. The granular control allows us to tailor user access to the system's functionalities based on the specific needs and workloads of both IT and security personnel, enabling the creation of different user groups with varying levels of access.
OneLogin has saved us a tremendous amount of time, especially in account management. Creating and deleting accounts no longer eats up half my day. I used to spend countless hours on the phone and manually handling these tasks, but now it's a breeze. The workload has drastically reduced, and the process is incredibly streamlined. I simply create a user, and everything else takes care of itself automatically, from licensing to configuration. It's that simple!
During the COVID pandemic, we had a surge in remote workers. Provisioning accounts for essential tools like Teams became cumbersome. To streamline the process, we started to implement automation for Office 365 through OneLogin. This automatically created accounts in Azure, eliminating the need for manual account creation. Onboarding new users into various applications became quick and efficient. Instead of assigning licenses individually, a single organizational setup granted licenses to all 650 users instantly. This streamlined approach saved us considerable time and effort.
As a non-profit organization, our focus isn't on generating or saving money for ourselves. However, in terms of regular expenditures, including capital expenditures, we've seen significant cost reductions since switching to OneLogin. This is primarily due to eliminating our former Windows infrastructure, including legacy servers and associated maintenance requirements. We no longer need to hold spare parts on-site or staff a large IT department to manage and operate these systems. Overall, OneLogin has contributed to substantial year-over-year savings within our budget.
What is most valuable?
OneLogin's ease of use is a game-changer. No need for a dedicated team – a single person can manage everything effortlessly. It streamlines account creation across diverse systems, a godsend for small teams like ours. Back then, we were just two; now, we're four. Setting up accounts for 600 students across seven or eight platforms used to be a slog. But with OneLogin, it's a breeze. Just configure a few connectors and bam, everything hums along smoothly.
Simplicity is the most valuable part of OneLogin. It is easy to use. The documentation is well done and the integration with other applications is simple.
What needs improvement?
While I initially used OneLogin's desktop feature to extend SSO, I discontinued it two years ago due to limitations. Firstly, the feature lacked day-one support for new macOS versions, forcing me to postpone system updates until OneLogin released a compatible update. Additionally, our adoption of Jump Pro for mobile device management necessitated the use of their native Jump Connect product for broader access management, rendering the OneLogin desktop feature redundant.
We're using Meraki, and even though the OneLogin integration works fine, it doesn't pass one specific tag that Meraki just ignores. I've been back and forth with both Meraki and OneLogin support trying to figure it out, but they keep blaming each other.
For how long have I used the solution?
We have been using OneLogin for almost four years.
What do I think about the stability of the solution?
I would rate the stability of OneLogin a ten out of ten. We are in the EU region and we have not had any stability problems the entire time we have been using it.
What do I think about the scalability of the solution?
OneLogin is cloud-based and super easy to scale and streamline. I would rate the scalability a ten out of ten.
How are customer service and support?
Since implementing OneLogin, I have only required technical support four times. The solution is well documented and we can find answers ourselves for the most part, but for the times I have used their support, they have been good.
How would you rate customer service and support?
How was the initial setup?
Our OneLogin account manager, along with a couple of their technicians, assisted us with the initial setup. We handled the basic configuration ourselves to our specifications. However, for some specific use cases and unique requirements that necessitated process automation, we enlisted their expertise. I also have a good understanding of the custom connectors, and we're comfortable managing those on our own. After that initial collaboration, I didn't require much further assistance. The remaining configuration steps are well-documented and straightforward.
After approval and the initial calls, the deployment took less than 24 hours to complete.
The deployment involved one person from our organization and two people from OneLogin.
What was our ROI?
We've seen a significant return on investment in terms of the time OneLogin has saved us. It has streamlined our workflow, making it much simpler and more efficient. This allows us to focus on other projects and priorities, knowing that OneLogin is handling account deletion and suspension automatically. By automatically suspending or deleting accounts when users are removed, OneLogin helps us maintain top-notch security and stay within our security margins.
What's my experience with pricing, setup cost, and licensing?
OneLogin's pricing, from the perspective of the education sector, seems quite reasonable for the value it delivers. While we secured a favorable deal at implementation, I'm unsure if their pricing structure has changed since then. Fortunately, our long-term license ensures price stability, as our recent three-year renewal at the same cost confirms. I understand, however, that pricing for more traditional businesses or large enterprises might differ.
Which other solutions did I evaluate?
We also considered JumpCloud, as it offered some Mac management features alongside its core functionality. However, compared to OneLogin, the solution was still in its early stages of development.
What other advice do I have?
I'd rate OneLogin by One Identity an eight out of ten. It wasn't on my radar before I joined this organization, but I championed its implementation, and even looking back five years later, I stand by that decision. It's a major time-saver and convenience enhancer for everyone here. The workflow is intuitive and accessible and rarely requires support intervention for basic tasks, which makes us all much more efficient.
OneLogin is deployed in one location. We are a K12 school with everything from young kids to high school students. It is one building with multiple divisions with 650 users. We have two people in IT with full access to OneLogin and two people with limited access to reset passwords.
Maintenance is minimal. Our main responsibility is to ensure application tokens like those for Office remain authenticated. Otherwise, provisioning will halt. This is solely on us; OneLogin isn't responsible for token management. Last year's dashboard update was primarily aesthetic. While the new interface is attractive, it offers minimal functionality. It simply displays the main provisioning screen, which fulfills their basic requirement. Essentially, OneLogin's end is covered, leaving the onus of maintaining app connections squarely on us.
While I recommend OneLogin, it's essential to proceed with caution. Make sure it aligns with your specific needs. Due to its extensive feature set and constant updates, OneLogin can be overwhelming, especially for users who lack a clear vision of their desired outcomes. Simpler, more limited products might be better suited for such scenarios, as they avoid information overload while offering focused functionality.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
Good Description