ForgeRock vs OneLogin by One Identity comparison

Ping Identity and One Identity are both solutions in the Identity Management (IM) category. Ping Identity is ranked #13 with an average rating of 8.5, while One Identity is ranked #12 with an average rating of 8.5. Ping Identity holds a 4.5% mindshare in IAM, compared to One Identity’s 0.9% mindshare. Additionally, 92% of Ping Identity users are willing to recommend the solution, compared to 100% of One Identity users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Apr 6, 2025

ForgeRock and OneLogin by One Identity are competing identity and access management solutions. OneLogin appears to have an advantage due to its seamless integration capabilities, although ForgeRock offers strong security credentials.

Features: ForgeRock provides enterprise-level security with customizable workflows and extensive access management. OneLogin emphasizes ease of integration with third-party applications, boasting a user-friendly interface and facilitating efficient deployment.

Room for Improvement: ForgeRock can be complex, requiring advanced technical support and a steep learning curve for effective deployment. OneLogin could benefit from enhancing customization options and offering more robust advanced security features to better compete with enterprise-grade security needs.

Ease of Deployment and Customer Service: OneLogin offers a straightforward deployment process with excellent support services, making integration efficient. Although ForgeRock offers powerful solutions, its deployment process can be intricate, necessitating thorough technical guidance.

Pricing and ROI: ForgeRock tends to have higher setup costs due to its comprehensive customization capabilities, potentially extending the ROI period. OneLogin presents a more cost-effective model, achieving faster ROI with its simplified deployment and integration processes, making it attractive for organizations valuing speed and agility.

To learn more, read our detailed ForgeRock vs. OneLogin by One Identity Report (Updated: February 2025).

Buyer's Guide

ForgeRock vs. OneLogin by One Identity

February 2025

Download the complete report

Helped 845,960 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Omada Identity

Mindshare comparison

As of April 2025, in the Identity Management (IM) category, the mindshare of Omada Identity is 3.3%, down from 3.4% compared to the previous year. The mindshare of ForgeRock is 4.5%, down from 5.4% compared to the previous year. The mindshare of OneLogin by One Identity is 0.9%, down from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Identity Management (IM)

Featured Reviews

Pernilla Hulth

IAM Project Manager (Independent) at a retailer with 10,001+ employees

The interface is easy to use and gives you a solid overview

The cloud-based deployment was straightforward, but the on-prem deployment was in a highly complex ecosystem. Omada has matured since then. I wouldn't say that it isn't straightforward, but it depends on the customer. A standard deployment is relatively easy, but it can be more painful if you need a lot of customization. We deployed the cloud solution in around four months, nearly meeting the 12-week benchmark. The on-prem deployment took three years. It was a highly complex ecosystem that was dependent on other systems. Depending on the size of your environment, you need a product owner and some specialists for maintenance. My last customer was a university with a complex environment. They had around 12 people involved in maintenance at that organization. Typically, it's between 2-5 people.

Read full review

Trisha Bhola

Senior Associate at Cognizant

It's easier to customize and maintain our code

I worked on two different projects based on ForgeRock, and both are automated deployments. One is a UI-based deployment. It's an automated process using some scripts. The deployments are done through Octopus, so it's also automated. We first deploy the essential components of AM and then implement additional configurations like Amster Imports. After that, we import all the SAML Federation data and add some certificates. We have two teams of five and three team members working on the different deployment processes. One is working on the dev side, another is looking at the higher environment, and one is managing the data. In another project, I'm the only developer. We also deploy on the dev environments so that anyone can test new features, configurations, and client requirements. They can test it on the dev environment, but a team of four people manages higher environments. The Access Management component involves the most customization, which takes around 15 to 20 minutes because of the need to import the Amster configuration. If another deployment is simultaneously happening, it may be a little slower and take around 30 minutes. The other components, like the user data stores, take about five to seven minutes. It's another five to 10 minutes for Identity Management. After deployment, the maintenance is mostly checking for security vulnerabilities. If ForgeRock shares security vulnerabilities or advisories, we check to see if there is something inside we need to maintain. Other than that, we just install updates when they add features each month.

Read full review

Pete Snell

IT Director at Florida State College at Jacksonivlle

Staff and students can now reset their passwords using their enrolled two-factor device as the authentication mechanism

We've been a OneLogin customer for several years now. While I like the platform, there have been some challenges. A great example is the amount of work needed with that webhook for the enrollment user experience. This functionality is native to some competing products. That's one area where we've leaned on our account rep over the years. They shouldn't rely on the customer to make this experience better. This is one feature request that hasn't been implemented yet. At the same time, they've implemented other features we've requested. One is the ability to use a personal email address as a factor. Initially, they didn't have that. We pushed hard on our account team for about two years before it was finally released. It's a give-and-take. Some of the product's features aren't perfect, but we've had some success pushing fixes to the development team that needs to happen. They've done a decent job. However, there are some fixes that they don't have an interest in. A lot of what I described was before OneLogin was acquired by Quest/One Identity. Things have changed. It doesn't feel like they're driving the product as OneLogin was. It may be because it's a new product to them, and they're still trying to get the lay of the land, process feature requests, etc., but it's not moving as fast as before. We've been experiencing some pain points since the acquisition. For example, there have been some outages we didn't see previously, which are a big topic with my executive team. You have hundreds of applications relying on this service for login. If the service is unavailable, nobody can log into these applications. The issues have high visibility. It's gotten better, but it's still there. It raises questions about whether One Identity can support the platform they've acquired. How are they enhancing the product? And how are they supporting the product and the service in the future? Those are two essential questions. There are also lots of nice-to-haves, but that's the case with any product.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The customer success and support teams have been crucial."

"You can make resources. You can import them from Azure or Active Directory and put them in an application. For example, if there is an application that uses a lot of Active Directory groups, you can make the groups available for people. If they need to access that application, you can tell them the resource groups you have for that application. People can do everything by themselves. They do not need anybody else. They can just go to the Omada portal, and they can do it all by themselves. That is terrific."

"Surveying is a valuable feature because it allows us to import data and see who has access to what data, for example."

"We don't have to go in and do a lot of the work that we did before. It may have saved us somewhere in the range of 10 to 30 percent of the time we spent on provisioning access."

"The best feature in Omada Identity is that it enables us to implement standardized employee life cycle processes so that we don't have to create them ourselves. We can then use the standard workflows. The breadth and scope of the solution’s IGA features also fulfill our requirements."

"The most valuable feature in Omada is the governance. We work with other products and other product vendors, but the sweet spot in the market for Omada is where things are heavy on governance."

"The most valuable aspects of Omada Identity for me are the automation capabilities."

"The most valuable aspect of the product is that it is Microsoft-based and it supports all Microsoft technology."

More Omada Identity pros

"ForgeRock is an extensive product with many functionalities and capabilities, much more than many other tools combined."

"Easy to customize and adaptable to any environment."

"ForgeRock has CIAM, which other products didn't have, and they have DevOps ready."

"Even though we have very small business interests with them today, they see that we plan on growing drastically over the next two years. Therefore, we have excellent support and we are now at a point where we are not calling tech support. We pick up a phone and call the Account Manager and they'll get everything resolved for us. We don't have to queue along with everybody else and go through a long process."

"The most valuable features of ForgeRock are social login and data protection."

"This is a stable solution. When you do experience any issues, you will see it in your DB logs or audit logs so you can easily reach a conclusion of might be causing it."

"Easy to navigate, handle and manage the applications."

"We used it to implement multi-factor authentication and to improve our security posture as well as reducing the potential for attacks."

More ForgeRock pros

"The solution allows the user to search logs based on a specific time."

"One aspect I particularly appreciate is their exceptional customer support whenever I've needed assistance."

"The single sign-on and the fact that we can integrate everything in one place and control from there were valuable features of this solution."

"The most valuable feature is the ease with which we can manage the sign-on feature."

"It's super useful to have a single pane of glass when it comes to access management."

"Simplicity is the most valuable part of OneLogin."

"When it comes to access management, the solution's single pane of glass is extremely important. The single pane of glass for access management enables collaborative work between IT and security. We have access to certain applications that require device trust. Based on the role, we can access those applications through OneLogin Desktop."

"Once I made the OneLogin ID, it would essentially make user names and passwords for every application that we had."

More OneLogin by One Identity pros

Cons

"Its flexibility is both a good thing and a bad thing. Because it is very flexible, it also becomes too complex. This is common for most of the products we evaluated. Its scalability should be better. It had a few scalability issues."

"Omada Identity's user interface needs improvement, especially for new users."

"We are trying to use Omada's standards and to adapt our processes. But we have had some trouble with the bad documentation. This is something that they could improve on. It has not been possible for us to analyze some of the problems so far, based on the documentation. We always need consultants. The documentation should include some implementation hints and some guidelines for implementing the processes."

"The web GUI can be improved."

"Improved traceability would be helpful for administrators. For example, let's say a user's permission is being revoked. We can only see the system that has carried out a particular action but not what triggered it. If an event definition or something has changed in the criteria for the permission being removed or something like that, we don't have immediate access to that information. It takes a little detective work."

"The UI design needs improvement. One or two years ago, Omada changed its user interface to simplify, but the simplification has not really kicked in."

"The biggest issue, which is the reason why we are transitioning from their product to SailPoint, is the overall user experience. From a technical perspective, it is a very good product, but from an end-user experience perspective, it significantly lacks."

"When the re-certification process is launched that makes Omada very slow. There are performance issues in the current version."

More Omada Identity cons

"The product's customization is a bit complicated."

"In an upcoming release, the solution could improve by limiting the need to do customizations."

"We're worried about the scaling. We're told it will be okay and there won't be issues, however, I'm not 100% convinced."

"The solution requires more simplified customization. However, part of the problem is my clients determining their own preferences. Technology can help and do many things, but you have to define your own policies to ensure that the solution or service works within those parameters. Helping customers understand their business and different processes is another issue not relating to the functionality of this solution."

"The identity management model needs a bit of improvement."

"They should improve the solution by include reporting."

"Automatic Deployment needs improvement. it could be made easier."

"The solution's deployment should be made easier."

More ForgeRock cons

"They have downtime twice a year or once in six months. During the downtime, the SSO page did not come up. When users wanted to get to their email, they were redirected to the OneLogin page, but the page did not come up, and MFA and logins failed. It completely crippled us."

"More off-hour support."

"To offboard, you have to manually click on this checklist, each of the checkmarks. It would actually be really nice if, for offboarding someone, you just click "offboard" and it automatically runs a script to do that."

"In terms of managing the users on a large scale, it would be easier if they had some kind of user management portal."

"I'd like OneLogin to have a customization section that displays the company's offerings, categorized by different topics."

"OneLogin offers a Virtual LDAP feature that we utilize, although it differs slightly from traditional LDAP servers."

"This product doesn't necessarily provide us with all of the functionality that we need, such as being able to share passwords with external users."

"The solution keeps going down for many hours, which impacts the entire company. You can't access any applications. OneLogin Desktop has a huge problem where it locks your computers and you need to reset the whole computer, which is pretty insane."

More OneLogin by One Identity cons

Pricing and Cost Advice

"Omada continues to be very competitive on pricing, especially on the Omada cloud product."

"It is expensive. Fortunately, I had a very good procurement manager on my side, but they are expensive. The closest competitors are also very expensive. You get a full-fledged solution that can do everything you dream of, but you pay for everything."

"The pricing for Omada Identity is fair."

"Being Dutch, I can only say that it is extremely expensive, but all software products are expensive. If you have 38,000 users, then even one dollar or one euro per person would amount to a significant amount of money. Because of the high number of users, anything gets expensive very fast here."

"There were a lot of administrator, partner, and supplier accounts for people who were no longer working for us but still in the system. So, we reduced the number of users no longer with the company, which saved us some money on licensing."

"Omada isn't cheap or expensive. The licensing model is flexible. I've only had limited interactions with the Omada sales team, but they were positive. They don't sell the customers more licenses than they need. It's important to accurately forecast future usage. For example, we have many licenses that we don't use because we don't have the identities yet. We pay extra, which isn't good."

"They are positioned at a good price point. They are lower than some of their competitors."

"While Omada Identity carries a premium price tag, it proves to be cost-effective."

More Omada Identity pricing and cost advice

"ForgeRock's pricing is more competitive than other products."

"Its price is comparable to other products in the market."

"The pricing of the solution is fair but I do not have the full details."

"Its licensing is on a yearly basis, but it also depends on the contract that you have with the vendor. They have multiple types of contracts. There are additional costs to the standard licensing fees. If you need some of the features, you have to pay more."

"The license is purchased annually per user. However, you can negotiate if you are signing for a longer period of time. When comparing this solution to others on the market it is priced fair, it is not at the top of the price range or at the bottom end."

"We have multiple clients we are looking at right now. We are at a very small number, however, the idea and the goal is to grow. We are looking at about $100,000 and $50,000 a minimum a month cost. That'd be minimum maybe in a couple of years."

"It's a bit pricey and could be more competitive."

"ForgeRock is an expensive solution."

"We were happy with the price we got when we signed up, but I don't know what will happen when the time comes to renew because it is a different company now. We haven't seen any pricing models or had that discussion yet. My renewal is a year and a half away. It's worth what we're paying for it. There's no way we could provide the level of service for cheaper or try to do the same in-house."

"Surprisingly expensive given the price of on-premise solutions."

"While I wish OneLogin's pricing was more affordable, their licensing model, which is based on per user, is acceptable."

"It was cheap in the beginning, and then it became very expensive. We were initially charged $2 per user per month, which was fine, but by the second year, they increased it to $5 per user. That became very expensive for us because we had about 1,500 users. At $2 per user, it comes out to be $3,000 a month, which is $36,000 a year. If we move to $5 per user, it comes out to be $7,500 a month. That made its cost so high. That is why we removed the product because the cost was high."

"The price of the licensing is fine."

"The pricing for OneLogin seems to be okay. The pricing and licensing are affordable. If you'd consider OneLogin to be expensive, it's worth it."

"The pricing and licensing are reasonable. It is much cheaper than other products."

"OneLogin's pricing, from the perspective of the education sector, seems quite reasonable for the value it delivers."

See which vendors are best for you

Use our free recommendation engine to learn which Identity Management (IM) solutions are best for your needs.

See recommendations

845,960 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

Computer Software Company

13%

Manufacturing Company

Government

Financial Services Firm

24%

Computer Software Company

12%

Insurance Company

Government

Computer Software Company

25%

Financial Services Firm

Retailer

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Omada Identity Cloud?

As an administrator, we benefit from a lot of functionality that is available out of the box, but it is also configur...

See all answers

What is your experience regarding pricing and costs for Omada Identity Cloud?

They are positioned at a good price point. They are lower than some of their competitors.

See all answers

What needs improvement with Omada Identity Cloud?

The biggest issue, which is the reason why we are transitioning from their product to SailPoint, is the overall user ...

See all answers

What do you like most about ForgeRock?

The most valuable features of ForgeRock are social login and data protection.

See all answers

What is your experience regarding pricing and costs for ForgeRock?

Our company was considering switching back to Keycloak from ForgeRock, so as to not pay any license fees. ForgeRock a...

See all answers

What needs improvement with ForgeRock?

In the past, I saw that Splunk was integrated with a testing portal, and then it was integrated with Slack. I don't t...

See all answers

What do you like most about OneLogin by One Identity?

OneLogin is efficient.

See all answers

What needs improvement with OneLogin by One Identity?

There have been some outages over the years. The uptime has not been great recently, with some outages lasting six, s...

See all answers

What is your primary use case for OneLogin by One Identity?

We use OneLogin by One Identity to provide SAML authentication and single sign-on for all of our SaaS apps.

See all answers

Comparisons

SailPoint Identity Security Cloud vs Omada Identity

Compared 31% of the time

Microsoft Entra ID vs Omada Identity

Compared 22% of the time

Saviynt vs Omada Identity

Compared 17% of the time

One Identity Manager vs Omada Identity

Compared 7% of the time

SAP Identity Management vs Omada Identity

Compared 6% of the time

More Omada Identity Competitors

Microsoft Entra ID vs ForgeRock

Compared 19% of the time

SailPoint Identity Security Cloud vs ForgeRock

Compared 13% of the time

Ping Identity Platform vs ForgeRock

Compared 9% of the time

Symantec Siteminder vs ForgeRock

Compared 8% of the time

Auth0 vs ForgeRock

Compared 8% of the time

More ForgeRock Competitors

Microsoft Entra ID vs OneLogin by One Identity

Compared 25% of the time

Okta Workforce Identity vs OneLogin by One Identity

Compared 15% of the time

LastPass vs OneLogin by One Identity

Compared 13% of the time

Auth0 vs OneLogin by One Identity

Compared 11% of the time

One Identity Manager vs OneLogin by One Identity

Compared 9% of the time

More OneLogin by One Identity Competitors

Product Reports

Buyer's Guide

Omada Identity

March 2025

Download Omada Identity product report

Buyer's Guide

ForgeRock

April 2025

Download ForgeRock product report

Buyer's Guide

OneLogin by One Identity

March 2025

Download OneLogin by One Identity product report

Also Known As

Omada Identity Suite, Omada Identity Cloud

ForgeRock Identity Platform, ForgeRock OpenIDM

OneLogin, OneLogin Workforce Identity

Overview

Omada Identity is an identity governance and administration (IGA) solution designed to help organizations manage and secure digital identities and access across their IT environments. It focuses on enhancing security, compliance, and efficiency by automating identity management processes.

Omada Identity offers a robust set of features that streamline identity lifecycle management, access governance, and compliance reporting. It integrates with a wide range of IT systems, applications, and data sources, providing a centralized platform for managing user identities and access rights. The solution enables organizations to enforce security policies, ensure regulatory compliance, and reduce the risk of unauthorized access.

What are the critical features of Omada Identity?

Identity Lifecycle Management: Automates the process of creating, updating, and deactivating user identities throughout their lifecycle.
Access Governance: Ensures that users have appropriate access rights, enabling continuous monitoring and recertification of access.
Compliance Reporting: Provides comprehensive reporting capabilities to demonstrate compliance with regulatory requirements.
Role-Based Access Control (RBAC): Simplifies the assignment and management of access rights based on user roles within the organization.
Self-Service Access Requests: Empowers users to request access to resources through a user-friendly portal, reducing administrative burden.
Integration Capabilities: Seamlessly integrates with various systems, applications, and data sources for unified identity and access management.

What benefits or ROI items should users look for in the reviews when evaluating Omada Identity?

Improved Security: By ensuring that only authorized users have access to sensitive information, Omada Identity enhances overall security posture.
Regulatory Compliance: Helps organizations meet compliance requirements by providing detailed audit trails and reporting features.
Operational Efficiency: Automates routine identity management tasks, reducing manual effort and freeing up IT resources for strategic initiatives.
User Productivity: Streamlines access management processes, enabling users to quickly obtain the resources they need to perform their jobs.
Reduced Risk: Minimizes the risk of data breaches and insider threats by enforcing strict access controls and continuous monitoring.

Omada Identity is widely adopted across various industries, including healthcare, finance, and manufacturing. In healthcare, it helps protect patient data and comply with regulations like HIPAA. In finance, it ensures compliance with SOX and other financial regulations. In manufacturing, it secures access to sensitive production data and intellectual property.

Pricing and licensing for Omada Identity are typically based on the number of users and the specific features required. Customer support is available through various channels, including online resources, support tickets, and professional services for implementation and customization.

In summary, Omada Identity is a comprehensive IGA solution that enhances security, compliance, and efficiency in managing digital identities and access.

Omada

ForgeRock is a comprehensive open-source identity and access management solution designed to meet the unique needs of your users and workforce. With ForgeRock you can orchestrate, manage, and secure the complete lifecycle of identities in any cloud or hybrid environment. ForgeRock allows you to set up bot detection, identity proofing, and risk-based authentication.

With ForgeRock, you can define access policies and automate the management of the identity lifecycle all from a central, easy to use, and graphical dashboard. ForgeRock Access Management allows you to build safe authentication using options like passwordless and usernameless logins, single sign-on, biometrics, contextual analytics, and behavioral authentication. When threats appear, you can swiftly change how your users access your most sensitive applications and provide users with secure access to the applications, systems, and resources they need on demand.

ForgeRock Benefits and Key Features

Elevate your security and efficiency: Consolidating your legacy systems under one single platform provides reliable, unified control over all your user identities and access-related policies. ForgeRock Access Management also supports scaling existing policies for application onto new setups.
Passwordless authentication: Implementing passwordless authentication is simple with ForgeRock Access Management. You can easily replace user-selected passwords with other options, such as easy multi-factor authentication, biometrics, and SSO.
Identity governance: ForgeRock Identity Governance is a modern, AI-driven identity governance solution. By leveraging ForgeRock generated analysis reports, you can identify and apply appropriate user access, automate high-confidence access approvals, recommend certification for low-risk accounts, and review high-risk and inappropriate user access privileges. In addition, you can grant and enforce access to systems, applications, and infrastructure according to established policies.

Reviews from Real Users

ForgeRock stands out among its competitors for a number of reasons. Two major ones are its robust identity and access tools and its being easy to manage and scale with one central dashboard.

PeerSpot users note the effectiveness of these features. A technology solutions leader at an outsourcing company writes, “We need it for multiple clients, multiple implementations. Not all of them are necessarily a multi-tenant solution. We need a very versatile solution that can do a lot of work, but from a single instance that we can centralize authentications and we don't duplicate the efforts and that's where ForgeRock seems to do better.”

Mohamed B., a cyber security consultant at a tech company, writes, "Their access management solution, OpenAM, is most valuable because it meets the needs of a lot of users. ForgeRock secured our system so that it is accessed only by authorized people, and it implemented the SSO."

Ping Identity

OneLogin by One Identity is a cloud-based access management solution for the modern enterprise. It delivers secure access for every user, every app and every device to meet an organization’s Workforce and Customer and Identity and Access Management (CIAM) needs.

OneLogin provides secure single sign-on, multi-factor authentication (supporting a wide array of passwordless authentication factors), adaptive authentication, desktop-level MFA, directory integration with AD, LDAP, G Suite and other external directories, identity lifecycle management and much more. OneLogin advanced authentication capabilities provide multi-layer, context aware and risk-based protection, minimizing the most common attacks and resulting in increased security, a frictionless user experience, and compliance with regulatory requirements. Furthermore, OneLogin’s user-friendly interface and streamlined design make it easy for end users and IT administrators to navigate the platform and remain productive.

One Identity

Sample Customers

Bayer, ECCO Shoes, Vattenfall, NuStar Energy, Unicredit, Schiphol Group, BMW Group, Deutsche Leasing

Geico, Thomson Reuters, Salesforce, McKesson, Trinet, SKY, BNP Paribas, Deloitte, Capgemini, North Western University

OneLogin has thousands of customers across multiple industries and from around the globe such as Uber, Airbnb, Noom, Petco, Sony, Lucky Brand, Tesco, Airbus, Japan Airlines, Aetna, Compass, Kaplan, Susan G. Komen, AAA and PennyMac.

Buyer's Guide

ForgeRock vs. OneLogin by One Identity

February 2025

Free Report: ForgeRock vs. OneLogin by One Identity

Find out what your peers are saying about ForgeRock vs. OneLogin by One Identity and other solutions. Updated: February 2025.

DOWNLOAD NOW

845,960 professionals have used our research since 2012.

See our ForgeRock vs. OneLogin by One Identity report.

See our list of best Identity Management (IM) vendors and best Access Management vendors.

We monitor all Identity Management (IM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.