Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs One Identity Manager comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.6
CyberArk Privileged Access Manager enhances security, automates tasks, aids SOX compliance, reduces risks, and scales security operations efficiently.
Sentiment score
6.5
One Identity Manager boosts productivity, reduces costs, and enhances security by automating user provisioning and access management.
The return on investment lies in improved security infrastructure, addressing over-privileged access, and reducing the risk of credential compromise, which is a major source of data breaches.
The end users have the authority to reconcile the password or verify it before using session isolation, which is one of the unique features that can be enabled through Privileged Session Manager, preventing any attacks from happening within the organization when connected with sessions through CyberArk Privileged Access Manager.
CyberArk Privileged Access Manager has helped customers save on costs primarily by reducing the number of engineering and information security personnel.
Without it, we would need thousands of additional people.
If you do not see it as purely an Identity Management tool but as a possibility to automate processes in the company, it provides a huge amount of value.
One Identity Manager saved us approximately thirty to forty percent in terms of time, money, and resources compared to our pre-deployment setup.
 

Customer Service

Sentiment score
6.5
CyberArk's support shows improvement with efficient service but needs faster responses for high-priority issues and better tier coordination.
Sentiment score
6.6
One Identity Manager's customer service is inconsistent, with varying technical support responsiveness and the importance of partner involvement emphasized.
CyberArk has been exceptional in coming back to us with immediate responses.
It could be forever until you talk to someone who knows what they are doing.
Based on the issue resolution and support quality, I rate the support 10 out of 10.
If you have outages or critical production problems, you can count on the manufacturer to help resolve the situation.
They should focus on bringing in technically skilled individuals who understand the tools and technologies involved.
If I raised a request while they were active, I received responses within an hour.
 

Scalability Issues

Sentiment score
7.6
CyberArk Privileged Access Manager is scalable and adaptable, supporting growth and diverse infrastructures despite potential licensing complexities.
Sentiment score
7.2
One Identity Manager excels in scalability but faces challenges with large datasets and customization for extensive setups.
The CPM can reportedly handle up to 50,000 accounts independently without issue.
I would rate it a ten out of ten for scalability.
They had 40,000 passwords in this one safe, and it was saving the last ten iterations of each password object. That means they had 400,000 password objects in this safe. They exceeded the limit.
We could handle about 1,00,000 records for different users.
I would rate its scalability as strong since we have not experienced any significant challenges.
This includes designing and implementing IAM solutions for legacy systems, cloud migrations, and multifactor authentications.
 

Stability Issues

Sentiment score
7.7
CyberArk Privileged Access Manager is stable and reliable, with minor bugs often due to configuration or infrastructure issues.
Sentiment score
7.3
One Identity Manager is stable when correctly configured, but stability varies with infrastructure and proper maintenance is crucial.
Proper fine-tuning and expertise ensure the product performs well.
Overall, the stability of the solution is high.
It has a large customer base and positive feedback within my network.
I would rate it a nine out of ten for stability.
Specifically affecting the test and development environments, not the production environment.
One Identity Manager has improved in terms of performance and added functionality.
 

Room For Improvement

Users find CyberArk Privileged Access Manager needing UI updates, better integration, improved documentation, customizable reporting, and enhanced automation.
One Identity Manager requires improved performance, user interface, integration, documentation, streamlined processes, and enhanced database management for better functionality.
They want everything to be on the cloud, but even in the SaaS version of CyberArk Privileged Access Manager, they need to deploy some servers on-premises.
We cannot generate a plug-in for web-based applications.
If they want clients to move to the cloud, they need to support them in real-time.
This lack of 24-hour support is problematic from a testing and development standpoint.
It is crucial for them to expand their support team to match their product's success.
When it comes to privileged access management, we need to know who has access to what, which is the central problem we want to solve.
 

Setup Cost

CyberArk Privileged Access Manager is costly but offers strong security, appealing to large enterprises with flexible subscription options.
One Identity Manager offers competitive pricing with savings for large enterprises, but may be costly for smaller businesses.
CyberArk is expensive compared to other products I know.
CyberArk is comparatively expensive compared to other PAM solutions, such as Delinea, especially during renewal.
CyberArk's SaaS solution is particularly expensive.
On-premises might incur higher costs.
We have a good enterprise license agreement, and we are very happy with what we get for the price we pay for it.
On-premises, it is cheap.
 

Valuable Features

CyberArk Privileged Access Manager enhances security with policy automation, AI threat detection, and flexible, scalable privilege account management.
One Identity Manager offers flexibility, automation, and integration, enhancing efficiency while providing dynamic application provisioning and user-friendly interface.
CyberArk Privileged Access Manager helps ensure data privacy because we now know who is using which credentials and at what time.
It keeps a record of activities, allowing me to easily fetch screen recordings to detect any misuse and see who did what and what happened.
It can integrate with Splunk, SNMP, and other solutions and technologies.
It ensures high security through multiple approval processes, preventing unauthorized access and enhancing compliance by providing time-based access for privileged accounts with proper audit trails.
It continuously monitors user behavior in real-time, triggering automated responses, and manages secure access for both on-premises and cloud applications using protocols such as SAML.
Once you have some experience, it demonstrates best practices and guides you on the correct way to use the tool.
 

Categories and Ranking

CyberArk Privileged Access ...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
228
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (3rd), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
One Identity Manager
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
125
Ranking in other categories
User Provisioning Software (1st), Identity Management (IM) (3rd)
 

Mindshare comparison

While both are Identity and Access Management solutions, they serve different purposes. CyberArk Privileged Access Manager is designed for Privileged Access Management (PAM) and holds a mindshare of 15.8%, down 21.4% compared to last year.
One Identity Manager, on the other hand, focuses on Identity Management (IM), holds 5.4% mindshare, down 7.1% since last year.
Privileged Access Management (PAM) Market Share Distribution
ProductMarket Share (%)
CyberArk Privileged Access Manager15.8%
WALLIX Bastion7.2%
Delinea Secret Server7.1%
Other69.9%
Privileged Access Management (PAM)
Identity Management (IM) Market Share Distribution
ProductMarket Share (%)
One Identity Manager5.4%
SailPoint Identity Security Cloud18.4%
Microsoft Entra ID11.8%
Other64.4%
Identity Management (IM)
 

Featured Reviews

Atul-Gujar - PeerSpot reviewer
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
Charles Essien - PeerSpot reviewer
Makes identity management more robust with the new portal, but needs faster processing and better support
For basic tasks, it's acceptable, but when there are complexities and building on those complexities, it becomes slow because One Identity Manager doesn't do parallel processing; it processes in series and in batches. That's a drawback because with a heavy database and many processes, it becomes slow, which isn't ideal for user experience. There are many areas in One Identity Manager that have room for improvement. I don't prefer that One Identity Manager uses series processing where everything is in a queue; it has to process in order, which means there are too many layers involved in processing a single piece of information. If they could simplify that and make processing faster, it would be perfect. The database queue process doesn't make sense, and it's annoying waiting for processes to finish before another starts. Also, when upgrading, they should be more considerate; with the transition from One Identity Manager 7.0 to 8.2, many functions were phased out, requiring extensive upgrading of numerous scripts. I find it pretty difficult to customize the solution because you really need to be an expert. If you have about one year of experience, you can't do much with One Identity Manager. You need many years of experience to customize solutions effectively.
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
868,706 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
14%
Manufacturing Company
9%
Government
6%
Computer Software Company
15%
Financial Services Firm
13%
Manufacturing Company
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise41
Large Enterprise171
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise12
Large Enterprise83
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
Regarding costs, CyberArk Privileged Access Manager is not a cheap product; hence, many companies struggle with its high licensing cost. While it's valuable, it comes with a high price tag, making ...
What do you like most about One Identity Manager?
The One Identity birthright process has helped generate user accounts more accurately and quickly.
What is your experience regarding pricing and costs for One Identity Manager?
One Identity Manager is not cheap at all, which is a significant drawback for small to mid-sized companies. Only large enterprises can afford the licensing fees, and the pricing needs to drop. They...
What needs improvement with One Identity Manager?
For basic tasks, it's acceptable, but when there are complexities and building on those complexities, it becomes slow because One Identity Manager doesn't do parallel processing; it processes in se...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
Quest One Identity Manager
 

Overview

 

Sample Customers

Rockwell Automation
Texas A&M, Sky Media, BHF Bank, Swiss Post, Union Investment, Wayne State University. More at OneIdentity.com/casestudies
Find out what your peers are saying about CyberArk, Delinea, WALLIX and others in Privileged Access Management (PAM). Updated: September 2025.
868,706 professionals have used our research since 2012.