Safeguard by One Identity Reviews

In day-to-day work, I use One Identity Safeguard to manage centralized login for Linux and UNIX servers, troubleshoot login access issues, enforce security policies, manage AD-based permissions, monitor authentication logs, and ensure secure and compliant access across the systems.

Additionally, I use One Identity Safeguard for operational tasks like on-boarding and off-boarding users, reducing dependency on local accounts, improving audit and visibility, and simplifying administration through centralized access control and policy management.

The best features of One Identity Safeguard are centralized authentication, seamless Active Directory integration, single sign-on on Linux and UNIX systems, role-based access control, policy enforcement, and auditing capability, which improve security and simplify administration and enhance compliance across the enterprise environment.

The most valuable feature is seamless integration with Active Directory, allowing Linux and UNIX systems to use centralized AD authentication, enabling single sign-on, centralized user management, consistent security policy, and easier access control without maintaining separate local accounts.

Additionally, the auditing, policy enforcement, and centralized access management features of One Identity Safeguard are very valuable as they improve security, visibility, simplify compliance management, and reduce administrative effort across Linux and UNIX environments.

One Identity Safeguard has positively impacted my organization by reducing manual user management efforts, improving security through centralized authentication, eliminating most local account-related issues, simplifying access management, and improving audit and compliance visibility across Linux and UNIX systems.

One Identity Safeguard can be improved with a more modern and intuitive interface, better troubleshooting and diagnostic tools, enhanced real-time monitoring and reporting, and stronger integration with cloud and hybrid identity platforms to simplify administration and improve operational visibility.

Additionally, One Identity Safeguard could improve policy synchronization speed, provide clearer error messages during authentication failures, simplify complex configurations, and enhance automation and self-service capabilities to reduce administrative overhead in large enterprise environments.

I have been using One Identity Safeguard for the last two years.

One Identity Safeguard is generally stable and reliable in an enterprise environment with consistent authentication performance and minimal downtime when properly configured and maintained.

One Identity Safeguard scales well in enterprise environments, as it can efficiently handle a large number of Linux and UNIX systems and users through centralized authentication and policy management without significant performance impact.

Customer support for One Identity has been generally good, with knowledgeable technical teams and effective guidance for most deployment and troubleshooting issues; although response times for complex cases can sometimes be slow.

Customer support for One Identity Safeguard is around a seven out of ten for strong technical expertise and helpful guidance, with some room for improvement in response and escalation times.

Previously, I used local authentication and manual account management for Linux and UNIX systems, but I switched to One Identity Safeguard to achieve centralized authentication, better security, simplified administration, and improved compliance.

The deployment of One Identity Safeguard took approximately two to four weeks, including planning, Active Directory integration testing, policy configuration, and phased rollout across Linux and UNIX systems.

One Identity Safeguard required moderate training, especially for administrators managing Active Directory integration, authentication policies, and troubleshooting; typically, a few days of hands-on training and documentation review is enough for experienced system administrators to manage daily operations effectively.

I achieved a good ROI with One Identity Safeguard through approximately thirty to forty percent reduction in manual user management effort, fewer password and local account issues, faster access management, and improved audit and compliance efficiency, which saved administrative time and improved security operations.

Pricing and licensing for One Identity Safeguard are generally enterprise-based and depend on the number of users and systems; while setup costs are moderate due to deployment, integration, and training requirements, overall the solution provides good value through centralized authentication, improved security, and reduced administrative overhead.

I evaluated solutions including CyberArk Privilege Access Management, BeyondTrust Remote Access, and Microsoft Entra ID before selecting One Identity Safeguard due to strong Active Directory integration and simplified Linux and UNIX authentication management.

The feedback for One Identity Safeguard has generally been positive, especially regarding simplified login, single sign-on experience, and reduced password-related issues; while administrators appreciate the centralized authentication and improved security, some users mentioned that troubleshooting and advanced configuration could be more user-friendly.

One Identity Safeguard is integrated with tools and platforms including DevOps environments, Linux, UNIX applications, SSH-based systems, and Active Directory services, helping provide centralized authentication, role-based access control, and security management across infrastructure.

The integration of One Identity Safeguard with Active Directory was moderately easy; the core AD integration is straightforward, but advanced configuration, policy mapping, and troubleshooting in a complex hybrid environment require careful planning and some expertise.

I recommend One Identity Safeguard for organizations seeking centralized authentication, strong Active Directory integration, improved security, and simplified Linux and UNIX access management in enterprise environments. I would rate this product an eight out of ten overall.

Hybrid Cloud

Microsoft Azure

Safeguard by One Identity is primarily used for privileged access management, which helps us securely manage administrator accounts, store and rotate privileged passwords, control access to critical servers and network devices, and monitor user sessions for security and compliance.

When a new system administrator needs to access a production server, instead of sharing the administrator password, they request access through Safeguard by One Identity, which securely provides the credentials or starts a monitored session, logging all activity. This has helped our team improve security, simplify audits, and ensure privileged passwords are never shared directly.

Safeguard by One Identity has become an important part of our privileged access workflow by enforcing security policies, reducing the risk of unauthorized access, and maintaining a compliance audit trail. It has made managing privileged accounts more secure and efficient for our IT team.

Since implementing Safeguard by One Identity, we have improved the security of privileged accounts by eliminating the need to share passwords and enforcing controlled access. We have also reduced the time spent managing privileged credentials through automation tasks such as password rotation. During security audits, having a complete session log and access records has made it much easier to demonstrate compliance and investigate privileged activity when needed, enhancing our security and audit readiness.

Before Safeguard by One Identity, privileged passwords were managed manually, which increased the risk of passwords being shared. Now, administrators access systems through the password vault, and passwords are rotated automatically, reducing manual effort, strengthening security, and making audits much easier since all privileged access and user sessions are logged and can be reviewed whenever needed.

We do not have exact metrics, but we have definitely seen an improvement since using Safeguard by One Identity, as password management is much faster without the need for administrators to manually share or update privileged credentials. Security has improved through automated password rotation and controlled access, while audit preparation takes much less time because all privileged sessions and access records are available in one place.

Safeguard by One Identity's best features are secure password vaulting, automatic password rotation, and privileged session monitoring.

Safeguard by One Identity's password vaulting feature keeps privileged passwords in a secure, encrypted vault, so administrators do not need to know or share the actual credentials, allowing team members to request access when needed and automatically rotate the password after use. This reduces the risk of password leaks, improves automation, and saves time since we do not have to manually manage privileged credentials.

Another feature I appreciate from Safeguard by One Identity is the session recording and auditing, which provides a complete record of privileged activity, very helpful for troubleshooting, security investigations, and compliance audits. Safeguard by One Identity's centralized management interface also makes it easier to manage privileged accounts across different systems from a single place.

Overall, we are satisfied with Safeguard by One Identity, but there are a few areas for improvement. Safeguard by One Identity's user interface could be more modern and intuitive, especially for new administrators, and the initial deployment and configuration can be complex.

Another improvement would be having more detailed documentation and step-by-step deployment guides, particularly for complex environments. Better performance on large-scale deployments, enhanced search and filtering in audit logs, and more flexible notification and approval workflows would also improve the overall experience, making administration simpler and reducing the learning curve.

I have been using Safeguard by One Identity for about two years, but I have used Safeguard for one year.

Safeguard by One Identity is now stable.

Our experience with Safeguard by One Identity's scalability has been positive. It has scaled well as we have added more users, servers, and privileged accounts, continuing to perform reliably without requiring major changes to the deployment. Safeguard by One Identity's centralized management and role-based access control have made it easier to support growth while maintaining consistent security policies.

Our experience with customer support has been positive, with the support team being responsive when we needed assistance with configuration and troubleshooting, and their technical guidance being generally helpful.

We did not use a dedicated privileged access management solution before Safeguard by One Identity. We mainly relied on manual password management and built-in administrative controls.

Safeguard by One Identity's deployment took about two to three weeks, with most time spent on planning, integration with Active Directory, configuring privileged accounts and policies, and testing and validating access before moving into production.

Administrators required a few days of training to learn the deployment, policy configuration, password vaulting, and session management features of Safeguard by One Identity. For end users, the learning curve was much smaller, typically requiring just a short training session or documentation to understand how to request and use privileged access, with the platform being straightforward once the initial setup and onboarding were complete.

We have seen a positive return on investment from Safeguard by One Identity, mainly through improved security and operational efficiency. We do not track exact financial metrics, but administrators spend less time managing privileged passwords and preparing for audits because password rotation, session logging, and access control are automated.

Safeguard by One Identity's pricing is on the higher side, but it remains reasonable considering the security and privileged access management capabilities it provides. Safeguard by One Identity's licensing model is straightforward once understood, although planning the required licenses takes some time, and the initial setup requires an investment in deployment and configuration. However, after implementation, the solution delivers good value by improving security, simplifying privileged access management, and reducing administrative effort.

Before selecting Safeguard by One Identity, we evaluated other privileged access management solutions, including CyberArk, BeyondTrust, and Delinea. We chose Safeguard by One Identity because it offered the features we needed for privileged access management along with strong security controls, straightforward integration with our existing environment, and a good balance between functionality and cost.

I rate Safeguard by One Identity a 9 out of 10 overall.

This rating of 9 out of 10 reflects that it offers strong privileged access management with features such as secure password vaulting, session monitoring, and auditing. Safeguard by One Identity is not rated a 10 because the initial deployment can be complex, and the user interface and reporting could be more intuitive.

From what I have seen, Safeguard by One Identity's governance and security are strong overall, with role-based access control and detailed audit trails. If the AI features follow the same security model, I expect them to provide a good level of governance and protection.

We have not used the AI capabilities enough to fairly evaluate their accuracy or reliability, so I cannot comment from first-hand experience, especially since most of our users focus on privileged access management, password vaulting, and session monitoring rather than AI features.

Overall feedback from users regarding Safeguard by One Identity's usability and functionality has been positive, with users appreciating that privileged access is centralized and secure, as well as not having to manage or remember privileged passwords. Administrators find Safeguard by One Identity's audit and session recording features especially useful. Safeguard by One Identity's main feedback has been that the interface can take some time to learn and that some administrative tasks could be more intuitive.

I advise others looking into using Safeguard by One Identity to spend time planning the deployment and defining privileged access policies before implementation. Involving the security and infrastructure teams early to start with a small pilot before rolling it out across the organization is important. Providing basic training to administrators and end-users is also essential to ensure smooth adoption. When configured properly, Safeguard by One Identity is a strong solution for improving privileged access security and simplifying compliance.

On-premises

Other

In our organization, the primary use of One Identity Safeguard is managing and securing privileged access, and we mainly use it to store and protect sensitive credentials like admin passwords, ensuring that they are not exposed or misused. It also helps in monitoring privileged sessions, allowing us to track and audit activities performed by administrators or high-level users. This adds a stronger layer of security and compliance, as all credential access is controlled, recorded, and reviewed when needed. Overall, it plays a key role in protecting sensitive systems and reducing the risk of insider or outsider threats.

A common example of how we use One Identity Safeguard to secure privileged access is when a system administrator needs access to a production server. Instead of sharing or knowing the actual admin password, they request access through One Identity Safeguard, which securely provides a temporary credential for a session without exposing the password. This system automatically records an entire session, including actions performed on the server. If anything unusual happens, such as an unauthorized change or risky commands, the session logs and recording can be viewed by a security team, ensuring that privileged access is tightly controlled, fully monitored, and auditable at all times.

One additional point about our main use case is that we use One Identity Safeguard not just for securing access but also for enforcing strict governance and accountability across teams. For example, we apply role-based access control and approval workflows, so any privileged access request must be approved before it is granted.

The best features of One Identity Safeguard mainly revolve around strong security, visibility, and control over privileged access. One of the most valuable features is its password management, where sensitive credentials are securely stored, automatically rotated, and accessed only through a controlled workflow, reducing the risk of misuse. Another standout feature is session monitoring and recording, which captures every action taken during privileged sessions.

The session monitoring and recording feature in One Identity Safeguard has been extremely valuable for our team, especially from a security and compliance perspective. We use it quite regularly whenever an administrator accesses critical systems. Every privileged session is recorded in detail, covering screen activity, commands executed, and user behavior, so we have a complete audit trail. This has helped us quickly investigate incidents, verify actions taken on sensitive systems, and ensure that all activities follow internal policies.

One Identity Safeguard has had a very positive impact on our organization, especially in terms of security, efficiency, and visibility. It has helped us centralize and control privileged access and provided a structured secure approach. As a result, we now have much better visibility into accessing credentialed systems and the actions performed, which has improved accountability and compliance.

One Identity Safeguard has significantly improved accountability and compliance by giving us complete visibility of all privileged activities. Every access requires approval, and a session is logged and recorded, which means we always have a great audit trail of who accessed what and when. This has made internal and external audits much smoother, as we can quickly provide evidence without manually tracking.

One Identity Safeguard is a strong PAM solution, but there are definitely a few areas where it could be improved based on practical experience and known limitations. One key area is performance and resource usage, especially when advanced features like session recording or OCR are enabled. These features consume significant CPU and storage, and in some cases, may slow down connections or processing time if not optimized properly. Improving efficiency here would make the platform smoother and more scalable.

One additional improvement that would be helpful in One Identity Safeguard is better integration flexibility with modern cloud and DevOps tools. While it supports many systems, connecting with newer platforms for automation workflows in dynamic environments can sometimes require extra effort or customization.

I have been using One Identity Safeguard for two years.

One Identity Safeguard is stable.

One Identity Safeguard is highly scalable, and that is a core strength in enterprise environments. It is designed for scale through clustering and a distributed architecture, allowing multiple appliances to work together as a single system. For example, organizations can add multiple One Identity Safeguard appliances to handle an increasing number of users, privileged accounts, and session traffic without impacting performance.

Customer support for One Identity Safeguard has been generally reliable based on our experience. On the positive side, the customer team is knowledgeable and technically strong, especially when dealing with configuration issues, session monitoring, or password-related queries. For standard or well-defined issues, responses are usually helpful and resolve problems efficiently.

We evaluated a few other privileged access management (PAM) solutions before implementing One Identity Safeguard, including CyberArk and other enterprise PAM tools in the same space.

The deployment of One Identity Safeguard was relatively quick compared to many other IAM and PAM solutions because it is delivered as a pre-configured appliance, either physical or virtual. The initial setup can be done quite fast, which helps to reduce the time to value.

The deployment of One Identity Safeguard was fairly smooth overall with minimal disruption for privileged users. During the initial rollout, there was a short adjustment period where users had to request access through the system instead of directly using credentials, which slightly changed their workflow. However, once they became familiar with the process, it actually improved their experience by simplifying access and removing the need to remember or manage sensitive passwords.

The training required for One Identity Safeguard was quite manageable and varied by role. For end-users and privileged users, training was minimal, and basic guidance was enough for them to understand how to request access and start sessions since the interface is fairly straightforward for daily use.

We have seen a clear return on investment with One Identity Safeguard, mainly driven by time savings, reduced manual effort, and fewer security-related incidents. One of the biggest measurable improvements has been in IT workload reduction. After implementing One Identity Safeguard, we saw a significant drop in manual tasks including password handling, privileged access approvals, and incident troubleshooting.

My advice to others looking into using One Identity Safeguard is that we have seen a clear return on investment, mainly derived from saved operational efficiency and reduced security overhead. A simple way to explain it is time saved, faster administration, fewer security incidents, and efficiency gained.

Overall, One Identity Safeguard stands out as a strong and well-built privileged access management solution, especially for organizations that want tighter control over admin activity without slowing down operations. I would rate this product a nine out of ten.

Public Cloud

Amazon Web Services (AWS)

One Identity Safeguard is used to securely manage privileged accounts and protect administrative credentials sessions across our IT environment. It helps control access to critical systems and enforce security.

A common scenario involves system administrators who need temporary access to Windows or Linux production servers for maintenance or troubleshooting. Instead of sharing privileged passwords, they request access through One Identity Safeguard. One Identity Safeguard securely stores these credentials, grants time-limited access after approval, records the entire privileged session, and automatically revokes access once the maintenance is complete. This reduces the risk of credential exposure while maintaining security.

The best features of One Identity Safeguard are its secure password vault, automated password rotation, and privileged session monitoring. I also appreciate the approval workflow for granting temporary privileged access, which helps ensure least privilege policies. The session recording and searchable audit logs are especially useful during security reviews and compliance audits, as they provide clear visibility into who accessed critical systems, when they were accessed, and what actions were performed.

The session recording and search features are straightforward to use. Every privileged session is automatically recorded in user activity and commands, so there is no need for manual intervention. When investigating an incident or reviewing administrative actions, I can search sessions using filters such as user, target, system, date, or time range. Finding a specific session usually takes only a few minutes, and the playback feature makes it easy to see exactly what happened during the session. This has been very helpful for troubleshooting, internal audits, and compliance reviews.

One Identity Safeguard is a strong privileged access management solution, though there are a few areas in which it could be improved. The initial deployment and configuration can be complex, especially for organizations with larger hybrid environments. The user interface could be more intuitive, particularly for first-time administrators, and some reporting and dashboard customization options could be more flexible. I would also like to see broader native integration with cloud platforms and DevOps tools to simplify privileged access management across modern infrastructure.

I have been using One Identity Safeguard for the last eight months.

One Identity Safeguard is stable.

The scalability of One Identity Safeguard has been good for our environment. As more systems and privileged users have been added, expanding the deployment has been straightforward without requiring major changes to the existing setup. The virtual appliance architecture has made it easy to grow as needed, and I have not experienced any significant performance issues while onboarding additional servers or accounts. Overall, One Identity Safeguard has scaled well to meet our current requirements.

Customer support is definitely outstanding. I would rate the customer support a ten out of ten.

I did not previously use a different solution.

The initial deployment took almost three weeks. Most of the time was spent on planning, configuration, policies, integration with other existing directory services, testing privileged access workflows, and validating session recording before rolling it out to the administrators. Once the initial setup was complete, onboarding additional systems and users was relatively straightforward.

The deployment of One Identity Safeguard caused very little disruption to our privileged users. During the rollout, administrators had to learn the new access request and approval process, which required a short adjustment period. After that, the workflow became routine. Instead of using shared administrator passwords, users simplified the request for access through One Identity Safeguard and received time-limited access when approved. Overall, the transition was smooth, and the improved security and accountability outweighed the small learning curve.

The administrators who manage One Identity Safeguard required approximately two to three days of training to become comfortable with the deployment, policy configuration, and ongoing administration. End-users, such as system administrators requesting privileged access, needed only a short onboarding session of around one to two hours to understand the access request processes, approval workflow, and how to start a privileged session. After the initial training, most users were able to use the solution without significant issues.

I have seen a positive return on investment from One Identity Safeguard, mainly through time savings and improved operational efficiency rather than reduced headcount. Before implementing One Identity Safeguard, collecting privileged access records for security reviews and audits was a manual process that often took several hours. With centralized audit logs and session recording, I have reduced the effort by approximately thirty to forty percent, and in many cases, I can gather the required evidence in about an hour. I also spend less time managing shared administrator passwords and investigating privileged activities because everything is centrally recorded and searchable. While I have not reduced staff, I have been able to spend more time on proactive security work instead of administrative tasks.

My experience with pricing, setup cost, and licensing has been overall positive. One Identity Safeguard is positioned as an enterprise product, so the licensing cost is not inexpensive, but I felt it was justified by the security features and compliance benefits it provides. The licensing process was straightforward, and there were no unexpected setup costs beyond the time required for deployment and configuration. Overall, the total cost of ownership has been reasonable for the value it delivers in securing privileged access.

I did not evaluate other options before choosing One Identity Safeguard.

One Identity Safeguard has been deployed in a hybrid environment. The core privileged access management components are hosted on-premises to manage access to critical internal systems, while they also integrate with cloud-based resources. This setup gives us the flexibility to secure both traditional infrastructure and cloud workloads from a single privileged access management platform.

Microsoft Azure is primarily used for our cloud-based resources.

The virtual appliance deployment was chosen because it was easier to deploy in our existing virtualized infrastructure, required less hardware management than physical appliances, and offered the flexibility to scale as our environment grows. It also simplified backup, maintenance, and software updates while providing the same core privileged access management capabilities we needed.

Overall, the feedback from our users regarding One Identity Safeguard's usability and functionality has been positive. Administrators appreciate that they no longer need to know or share privileged passwords, and the approval workflow is straightforward once they become familiar with it. The session recording and audit features are also well-received because they make troubleshooting and compliance review much easier. The main feedback has been that the interface has a learning curve for new users, and the initial setup and policy configuration can be a bit complex. However, after onboarding, most users find the platform reliable and easy to use for their day-to-day privileged access tasks.

At this stage, One Identity Safeguard has not been integrated with DevOps pipelines, RPA platforms, or other advanced business systems. It is primarily used for privileged access management, secure credential storage, password rotation, and session monitoring for our infrastructure.

My advice for others looking into using One Identity Safeguard would be to spend enough time planning the deployment before implementation. Identify your privileged accounts, define clear access policies and approval workflows, and involve both the security and infrastructure teams early in the project. Start with a small group of critical systems to validate the configuration and user experience before expanding across the environment. Also, provide basic training for administrators and end-users so they can understand the new privileged access process. Taking this approach makes the rollout smoother and helps you get the most value from the solution. I rate this solution a ten out of ten overall.

My main use case for One Identity Safeguard is to manage and control privileged accounts and store passwords. For example, if an IT admin needs access to a server, I use One Identity Safeguard to manage and control privileged accounts. One Identity Safeguard helps companies avoid data breaches regarding my main use case, influencing other teams and types of users who interact with it.

One best feature One Identity Safeguard offers is multi-factor authentication, which adds extra security by requiring more than one verification step. When I mention requiring more than one verification step, I am referring to multi-factor authentication, and it helps to secure systems because it will protect the data. One Identity Safeguard has positively impacted my organization by helping to increase security because of password vaulting.

Password management has improved as it is easier now; for example, I experienced improved efficiency when my IT team needs to access a production server. I have noticed measurable outcomes regarding reduced time to access servers and fewer security incidents since using One Identity Safeguard because it helps me to secure my data and it is reliable.

One Identity Safeguard could be improved, and some user tools can be enhanced. I would add more about the needed improvements related to user tools or any other area. The improvement I suggest is to add AI and smart automation; One Identity Safeguard already uses analytics to detect risks, but there is room for enhancement. I believe One Identity Safeguard can be improved by enhancing the user experience.

I have been working in my current field for one and a half years.

One Identity Safeguard is stable, and this is actually expected by most organizations, commonly compared with CyberArk.

For scalability, instead of one system handling everything, multiple systems are used.

Customer support is good and meets my expectations. I would give a rating of 4.5; I think it is good for customer support.

I have previously used a different solution and it was a good experience.

The training required to use the solution is straightforward and effective. It took about one to two weeks for deployment of the solution.

I typically integrate One Identity Safeguard with several parts of the business to make access more seamless. The integration process was balanced because of moderate challenges but manageable overall.

For ROI, I have seen a return on investment based on time saved, which is nearly a 50 to 70% reduction.

A strong and honest answer about pricing is that it shows both cost and value.

I evaluated other options before choosing One Identity Safeguard.

The feedback regarding the solution's usability and functionality is positive; from my perspective, it is easy to use. I have additional thoughts about One Identity Safeguard. I find this interview very appreciating; it is very helpful, and overall it is a good experience.

I can provide a short poem: Locked doors, silent keys, access flows, watched and secure. This poem captures my sentiments regarding the solution. My overall review rating for One Identity Safeguard is 8.5.

On-premises

Other

Currently, for our business case, we have multiple scenarios with One Identity Safeguard, but I haven't used the transparent mode much. The transparent mode that I am aware of is that One Identity Safeguard privileged sessions have that transparent mode where the administrator and target server allow users to continue connecting to servers exactly as they would normally, which can be useful.

This is a good feature to have.

I use the secure remote access for privileged users.

I do not use any physical appliances, virtual appliances, or on-demand versions with One Identity Safeguard. The primary business use case we have for it is secure privileged account management, including credential vaulting, enforcing password rotation, and providing secure privileged session access. These are the proper business use cases on which we implement it. It helps us reduce the risk associated with privileged credentials while supporting compliance and security monitoring.

This is how we utilize it.

The best features of One Identity Safeguard are multiple features similar to any PAM solution that we use for our security purposes. The strongest feature of One Identity Safeguard is a centralized privileged credential vault, which eliminates the need for administrators to know or manually manage privileged passwords. The automated password rotation and secure checkout process significantly reduce credential exposure.

This is the best aspect that I have experienced, along with another feature that is session management. The session recording and replay provide excellent visibility for investigation, compliance audits, and insider threat monitoring. These features are the best in One Identity Safeguard that I have seen compared to multiple other PAM solutions.

One Identity Safeguard has improved our organization from the security perspective, which is the main aspect that we have seen in it. VPN elimination and reduced credential exposure have helped us manage credentials in a more secure way. We work in a Security Operations Center, and it has helped us significantly from a SOC perspective.

One area that has room for improvement in One Identity Safeguard is native integration with newer cloud platforms and SaaS applications and security tools. We have a SOAR application in our environment, which is Cortex XSOAR, and it would be better if One Identity Safeguard could have native integration with this application so that anyone executing playbooks through the SOAR could request One Identity Safeguard access through it. This would be one improvement that we suggest regarding native integration with newer cloud platforms.

Reporting and dashboard customization with One Identity Safeguard should be better improved. While it is already present, monitoring multiple servers and technologies that we have integrated with One Identity Safeguard could be managed better if more reporting and dashboard customization options were available.

I have been using the solution for one and a half years.

From a stability perspective, I rate One Identity Safeguard as being stable in our production environment and it performs reliably with minimal unplanned downtime. I would rate it 8 out of 10.

The scalability of One Identity Safeguard is that the solution scales in the enterprise environment with multiple privileged accounts, servers, and administrators. It overall supports growth without any significant performance issues. When deployed according to best practices, I would rate it 9 out of 10.

I use the regular support for One Identity Safeguard. I rate support from 1 to 10 overall as 9 because compared to other customer PAM solutions that we have like iRage PAM and Commvault PAM, this is superior and offers a more advanced procedure.

I use the secure remote access for privileged users.

One Identity Safeguard provides VPN-less remote access where administrators, vendors, and third-party users can securely connect with privileged resources without using traditional VPN. This is the main advantage because having VPN connectivity between these three user types would otherwise present a vulnerability. Additionally, the clientless browser-based access allows users to connect through a web browser without installing client software, which simplifies onboarding and remote administration.

It is not important to me that secure remote access with One Identity Safeguard does not use VPN, because it already eliminates VPN-related risks for privileged users and it was very helpful. VPN usage would be a key concern when connecting in such cases, but this particular secure access eliminates VPN-related risks and provides a complete audit trail for remote administrative activities.

I compare One Identity Safeguard with other vendors based on the features that I have mentioned, such as stability and customer support, as well as scalability. This is the best product that I can recommend. It would be an excellent tool for the medium to large enterprise looking for a mature privileged access management solution. Compared to other solutions, it has a better feature set and better capabilities, which makes it a superior tool.

I am not aware of the pricing for One Identity Safeguard because I am an end user of this product. The pricing must be handled by our finance team, so I am not informed about this aspect.

The deployment of One Identity Safeguard did not disruptively affect my privileged users in any way.

I have integrated One Identity Safeguard with multiple options available, such as our Active Directory.

My experience with integration of One Identity Safeguard was not difficult. The integration with Active Directory or any enterprise infrastructure was straightforward. However, configuring the policies and onboarding privileged assets required careful planning and workflow understanding. Overall, it was straightforward and simple with no complex details.

The amount of training required to start using One Identity Safeguard is minimal. Because in our environment we have multiple PAM solutions or other integrated solutions, One Identity Safeguard was much easier in comparison.

I rate this review 9 out of 10.

On-premises

Other

My main use case for One Identity Safeguard is to store our IDs and passwords so that they can be used later for logging in. It also helps us when our employees are working from home by managing IDs, passwords, and other login credentials safely, without any worry of password theft or identity theft.

A specific example of how I use One Identity Safeguard with employees working from home is when they are using their personal Wi-Fi connection, where the chance of personal theft increases. One Identity Safeguard helps us manage the chances of theft, reducing the instances of password theft and identity theft, which has been very useful for us and has also reduced the cases we experience.

The best features are that the user interface is very good and the functionality is smooth, with a good user experience overall. Apart from this, the third-party integration that One Identity Safeguard provides is another major feature that I appreciate. It integrates well with other third-party websites and solutions, allowing the end user to log in or save their password on those websites using One Identity Safeguard.

A specific third-party integration that I found especially useful was when we integrated Salesforce Cloud, which was a smooth experience overall without any bottlenecks during the integration process, resulting in a good workflow.

One Identity Safeguard has positively impacted my organization by reducing the cases of password theft and increasing efficiency. Our employees no longer have to worry about password theft, allowing them to be more efficient in their work. It has helped us reduce the effort that our employees used to expend by entering passwords and user IDs manually before using One Identity Safeguard.

The incidents of password theft have reduced by around forty percent, which has been a very good result from using One Identity Safeguard for our organization and is a great benefit for us.

We have saved a lot of time because users no longer have to save passwords manually, as everything has been automated. This saving of time leads to increased overall efficiency of our organization.

One feature that I feel One Identity Safeguard lacks is a robust reporting interface, as the data we get from it is not very well displayed. A reporting dashboard is missing and needs to be incorporated in the coming updates. This is one of the essential features that is missing from the solution.

One Identity Safeguard needs improvement in customer support, and there are also glitches while logging in that end users face. These minor glitches cause problems for us, which need to be addressed.

In the case of the glitches, sometimes we have to try two or three times for one task. While these glitches are minor and happen occasionally, they need to be taken care of.

I have been using One Identity Safeguard for the last one and a half years.

One Identity Safeguard is stable and quite performance-centric.

One Identity Safeguard's scalability is quite good.

The customer support for One Identity Safeguard needs improvement. I would rate the customer support as a seven out of ten.

We were not using any other solution prior to One Identity Safeguard. This is the first solution that we have purchased, as One Identity Safeguard was the market leader and that is why we selected it.

The deployment of One Identity Safeguard took around four to five months.

The deployment affected my privileged users by being somewhat disruptive, as they had to make changes to their day-to-day workflow. Overall, it was a very good experience with support from the One Identity Safeguard team during the deployment stage.

There was no need for any training for either end-users or for the people who manage One Identity Safeguard.

We have not integrated One Identity Safeguard with other parts of our business.

If you are looking to increase the organization's efficiency, One Identity Safeguard is the solution that needs to be purchased, as it is an overall cost-efficient solution for business needs.

I find that the pricing is very affordable and the setup cost is also very affordable, aligning with our budget. Licensing is per-user based.

While selecting One Identity Safeguard, we evaluated other options, but they were not aligning with our business needs, so we chose One Identity Safeguard instead.

After thoughtfully considering the pros and cons of One Identity Safeguard, I give this product a rating of nine because it is overall very good software. However, factoring in the subpar customer support and the technical glitches, I believe nine is a perfect rating.

Public Cloud

Google

My main use case for One Identity Safeguard is managing and securing privileged access on a day-to-day basis. It is used for password vaulting, controlled admin access to servers, and monitoring privileged sessions to ensure security and compliance.

Recently, I used One Identity Safeguard to retrieve a privileged account password from the vault for server access during troubleshooting. The access was time-bound and automatically logged. I also checked session activity logs to verify the actions performed, ensuring everything was secure and compliant.

Some of the best features of One Identity Safeguard in my opinion are its password vaulting, session monitoring, and detailed auditing capabilities. It securely stores privileged credentials, provides real-time monitoring and recording of admin sessions, and maintains complete audit logs, which helps in improving security and meeting compliance requirements.

One Identity Safeguard has positively impacted our organization by improving our overall security through controlled and monitored privileged access. We have reduced risk related to password misuse, and auditing has become much easier. It also helps in maintaining compliance and gives better visibility into admin activities across the environment.

Overall, One Identity Safeguard works well, but it could be improved in terms of UI simplicity and ease of navigation, especially for new users. Some configuration can feel complex, so better documentation or more intuitive workflows would help. Additionally, faster performance in session monitoring and reporting would enhance the overall experience.

A better integration with other security and monitoring tools would improve the overall experience. Also, more user-friendly reporting and a customizable dashboard would make it easier to track activities and generate insights quickly.

I have been using One Identity Safeguard for six months to one year.

One Identity Safeguard is stable in our environment.

One Identity Safeguard is highly scalable in our environment. We are able to add more users, systems, and privileged accounts without impacting performance. As our infrastructure grows, the solution continues to handle the increased load smoothly, especially for password vaulting and session monitoring, without any major changes required.

I would say the customer support for One Identity Safeguard has been generally responsive and helpful. Whenever we raise issues related to configuration or access, the support team assists with proper guidance.

Previously, we were using a more manual process for privileged access management, which involved shared credentials and less centralized control. We switched to One Identity Safeguard to improve security, implement proper access control, and gain better auditing and monitoring of privileged activities.

Deployment of One Identity Safeguard in our organization took approximately a few days to a couple of weeks, including installation, configuration, and integration with Active Directory and internal systems as well. Most of the time was spent on testing and ensuring proper access policies were applied.

Only basic training was required to start using One Identity Safeguard. For administrators, a bit more training was needed to understand configuration, policies, and session management. For end users, minimal training was required since they mainly use it for requesting and accessing privileged credentials.

We have seen ROI mainly in terms of time saving and improved efficiency with One Identity Safeguard. Administrators spend less time managing privileged access and handling password requests because most processes are now automated. It has also reduced security risks by minimizing password sharing and manual access handling, which indirectly saves costs by preventing incidents and reducing audit effort. My advice would be to plan the deployment properly and ensure clear access policies are defined before implementation. It is important to invest time in understanding the configuration and integration with Active Directory. Once set up correctly, it provides strong security, better control over privileged access, and improves auditing and compliance significantly.

I was not directly involved in the pricing, setup cost, or licensing decisions for One Identity Safeguard. However, from an operational perspective, the solution is considered a premium enterprise tool, and the licensing is managed centrally by our IT security team based on organization requirements.

Before selecting One Identity Safeguard, we evaluated a few other privileged access management solutions, including CyberArk and BeyondTrust. We chose One Identity Safeguard based on its features, integration capabilities, and ease of deployment within our existing infrastructure.

Overall feedback from users regarding One Identity Safeguard's usability and functionality has been positive. However, some users feel the interface is slightly complex initially and requires some learning. Once familiar, they find it reliable for accessing privileged accounts and monitoring sessions effectively.

Since implementing One Identity Safeguard, we have seen better control over privileged access and reduced manual password handling. It has saved time during troubleshooting by providing quick, secure access, and auditing has improved, making it easier to track activities and support compliance requirements.

The integration with Active Directory was moderately easy. The initial setup required proper configuration of trust and mapping of users' roles, which took some time. However, once configured correctly, it works smoothly and provides centralized authentication and better control over privileged access.

I would rate this review an overall score of eight.

On-premises

Other

My main use case for One Identity Safeguard is for strong security, and it also helps me to store my information, to protect my data, and focus on data protection compliance.

One specific example of how I use it for security is to protect my data from external access. Regarding security compliance, I am able to set the metrics and also set the guidelines and the regulations about how my software should be stored and kept.

One Identity Safeguard provides multiple features, including data protection services. These tools are able to assess the security demands and compliance requirements. After assessing, I am able to know how data can be saved, and when data is properly saved, everything becomes easier because my data is stored securely and no one can access it.

One of the reasons why I need this is because it has the ability to centralize security monitoring across the entire data infrastructure, and it helps to automate and connect devices in a single platform whereby I can safeguard my data through multiple authentications.

Among the features, there is the AI assistant which helps to verify the quality of data and also verifies the security setups. I appreciate that this tool eliminates the manual process and time-consuming tasks for gathering evidence for compliance by auditing automatically, and it also pulls information from all integrated tools. This helps to ensure that the security of the integrated ecosystem is functioning and protected.

One Identity Safeguard works with One Login, and when they work together, they provide the best outcome which increases the security factors. Cloud integration is another valuable feature that enhances the overall security capabilities.

I find it challenging mostly when managing complex work, especially when trying to implement it on a larger scale; sometimes it becomes slow, and the automation process also slows down. I believe it should be improved upon when implementing it on an enterprise scale or with complexity; it should be faster than it currently is.

I have been using One Identity Safeguard for two years.

One Identity Safeguard is very stable.

The scalability is good; it runs without issues.

The excellent customer support provided during the integration made sure it did not disrupt my users, thanks to the support from both customer service and technicians from the vendor.

I previously used a solution called Microsoft Entra ID; it was expensive and not easy to operate, which is why I decided to switch.

The deployment of the solution took around one to two weeks.

After using One Identity Safeguard, I can say it operates effectively with One Login; when these two tools work together, I find that as a user, I save a lot of funds because they provide extremely high privacy. In this way, they ensure security is maintained, saving time and the costs of employing more workers to oversee increased compliance regulations over personal information. The system is reliable and performs effectively, reducing the need for extensive monitoring and therefore costs.

The integration with the cloud targets was somewhat complex initially, but it became easier after understanding the entire process of integration. After acquiring an integration specialist, everything became very easy and user-friendly.

The initial deployment was somewhat disruptive, but the excellent customer support provided during the integration made sure it did not disrupt my users, thanks to the support from both customer service and technicians from the vendor.

Since we were using One Login along with One Identity Safeguard, it took us around one week for full training and a few days for practice implementing what we were trained on. Overall, it took around two weeks to fully understand how the tool operates.

We use virtual appliances because they are easier to operate and use compared to physical appliances. Additionally, for those of us who are located remotely, purchasing this tool is easier with the virtual appliance compared to physical appliances.

After deploying this tool, it saves time; under policy governance, policy monitoring, and more integrations and configurations, it requires very few users to run and operate, which ultimately saves costs as well.

The pricing and setup cost were negotiable depending on requirements and usage, which made it relatively friendly and accommodating compared to other tools.

I evaluated Microsoft Entra ID as well as the CyberArk tool before choosing One Identity Safeguard.

One Identity Safeguard is powerful because it provides beneficial features that support clean integration with different tools, significantly improving security and automation processes. The navigation process is easy, and the platform has been extremely valuable for managing customer relationships as well as tracking and providing a centralized system for managing privacy and protecting accounts, as well as safeguarding data.

The reporting capacity is beneficial because it allows me to deal with customer reports about security purposes and understand what is occurring. Users say it is faster; for example, I can input the name of the information or the device I want to control, and this allows me to access it and do what is needed. The platform is intuitive, operates as demonstrated, and easily integrates with the existing platform.

Regarding integration, I primarily integrate One Identity Safeguard with cloud targets. I give One Identity Safeguard a rating of ten out of ten.

Public Cloud

Google

My main use case for One Identity Safeguard is managing and securing privileged access accounts, and I mainly use it for password vaulting, controlling access to administrative accounts, and monitoring privileged sessions on a day-to-day basis. It helps ensure that sensitive credentials are protected, that privileged activities are properly controlled and audited.

A common example of how I use it in my daily work is when an administrator needs access to a critical server; instead of sharing credentials directly, they request access through One Identity Safeguard, which provides controlled access and records sessions for auditing purposes. This approach helps improve security while maintaining accountability.

The best features One Identity Safeguard offers, which stand out for me, include password vaulting, session monitoring, and privileged access control, which collectively help us secure sensitive accounts, control access to critical systems, and maintain an audit trail of privileged activities. Together, they provide a good balance between security and operational efficiency.

Session monitoring has been very useful for my team from both a security and audit perspective, giving us visibility into privileged activity and ensuring that administrative access is being used appropriately. For example, during troubleshooting or system maintenance, we can review the session record if there are questions about changes made on a server, which has helped improve accountability and made the review much easier.

Another feature I appreciate is the approval-based access workflow, as it gives us more control over privileged access requests without slowing down operations too much. What stands out to me is how the platform combines security, auditing, and access management in one place, making it easier to manage privileged accounts across different systems.

One of the biggest positive impacts of One Identity Safeguard on my organization is the improved control over privileged access; before implementing it, managing administrative credentials and tracking privileged activity required more manual effort. After implementation, access became more structured, and we had better visibility into who was accessing critical systems and when, which helped strengthen our security posture and made audit-related activities easier to manage.

One measurable improvement I observed was the reduction in time spent managing privileged credentials and access requests, as tasks that previously involved manual coordination became more streamlined through the platform. We also improved audit readiness because privileged sessions and access activities were centrally tracked, which reduced the effort required during compliance reviews and investigations.

One area for improvement in One Identity Safeguard would be reporting and dashboard customization; while the platform provides useful information, having more flexible and easier-to-customize reports would help with administration and gaining insights more quickly. I would also appreciate a more streamlined user interface for managing access requests and reviewing privileged sessions, especially in larger environments with many users and systems.

Another area I would mention for improvement is integration capability; while the platform integrates with common enterprise systems, expanding out-of-the-box integration options would make deployment faster and reduce customization efforts. I would also appreciate more detailed analytics around privileged access trends and user activity, which could help security teams identify risks and make better access management decisions.

From a governance and security perspective, One Identity Safeguard is very strong; it helps enforce privileged access control, secure credential management, session monitoring, and detailed auditing, which are all important for reducing security risks. Regarding AI capability, I see the platform's strength more in policy-based security and access governance than in advanced AI features. However, adding more intelligent risk analytics, anomaly detection, and access recommendations could further enhance its value for security teams. Overall, the governance and security are among the strongest aspects of the product.

I have been using One Identity Safeguard for the last four years, which gives me a very good experience with it as I work with privileged access management, password vaulting, session monitoring, and secure administrative access to critical systems.

One Identity Safeguard has been a stable and reliable platform in my experience, performing consistently without significant downtime. I use privileged access management regularly, and most of the issues we encountered were related to configuration or integration changes rather than the product's stability.

From my experience, One Identity Safeguard scales effectively as an organization grows; as we added more systems, privileged accounts, and users, the platform continued to perform reliably. Features such as centralized credential management and policy-based access control have helped us expand without significant increases in administrative overhead, making it well-suited for our organization's evolving privileged access management requirements.

My experience with customer support has been positive overall, as the support team was responsive and knowledgeable whenever we needed assistance with configuration, integration, or troubleshooting issues. For more complex cases, the resolution time sometimes required additional investigation, but the support engineers were helpful and provided clear guidance throughout the process.

Before implementing One Identity Safeguard, we relied on manual privileged account management and native administration tools, and we switched because we needed stronger control over privileged credentials, better auditing, and a more centralized approach to managing administrative access across the environment.

We evaluated a few other privileged access management solutions, including CyberArk and BeyondTrust, but we chose One Identity Safeguard because it offered the right balance of privileged access control and password management features.

Overall, the integration with those systems was fairly straightforward since we already had established identity and infrastructure systems in place; connecting One Identity Safeguard to those environments was not particularly difficult. The main challenge was planning access policies and ensuring the correct privileged accounts and systems were onboarded, but once that was completed, the integration worked smoothly and provided a more centralized approach to privileged access management.

We have seen a positive return on investment mainly through improved operational efficiency and reduced administrative effort in managing privileged credentials, access approvals, and audit activities, which became more streamlined. This change saved time for both security and infrastructure teams; while we did not reduce headcount, the team was able to spend less time on manual access management and more time on higher-priority security tasks.

My experience with pricing and licensing for One Identity Safeguard has been generally positive; for an enterprise security solution, the cost is justified by the value provided in privileged access management, credential security, and audit capabilities. The setup perspective is straightforward, with most of the effort going into onboarding systems, defining access policies, and configuring governance requirements rather than the installation itself.

We did not purchase One Identity Safeguard through the Azure Marketplace; the product was acquired through our organization's standard procurement process and integrated with our existing infrastructure and cloud base. Azure is part of our environment, but it was not the purchasing channel for the solution.

One of the biggest positive impacts of One Identity Safeguard on my organization is the improved control over privileged access; before implementing it, managing administrative credentials and tracking privileged activity required more manual effort. After implementation, access became more structured, and we had better visibility into who was accessing critical systems and when, which helped strengthen our security posture and made audit-related activities easier to manage.

We have integrated One Identity Safeguard with our Active Directory environment and various server platforms to manage privileged access centrally. We also use it alongside cloud resources and security tools to help control administrative access and maintain consistent governance across different systems, which streamlines access management and improves visibility into privileged activities.

The integration has positively impacted our operations by centralizing privileged access management and reducing manual processes; one noticeable improvement is that administrators can request and access privileged accounts through a controlled workflow instead of relying on manual credential sharing. This change improved efficiency, strengthened security, and provided better visibility into privileged activities across the environment.

My advice for others looking into using One Identity Safeguard is to clearly define your privileged access policies and governance requirements before implementing the product, as you will get the most value when the access workflow, approval processes, and account ownership are well understood. I recommend starting with the most critical systems and privileged accounts first and then expanding gradually, as this approach helps teams become familiar with the platform while demonstrating value early in the deployment. I would rate this product a nine out of ten.