Try our new research platform with insights from 80,000+ expert users

One Identity Safeguard vs Symantec Privileged Access Manager comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

One Identity Safeguard
Ranking in Privileged Access Management (PAM)
4th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
44
Ranking in other categories
User Entity Behavior Analytics (UEBA) (7th), Non-Human Identity Management (NHIM) (4th)
Symantec Privileged Access ...
Ranking in Privileged Access Management (PAM)
21st
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
52
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2025, in the Privileged Access Management (PAM) category, the mindshare of One Identity Safeguard is 4.2%, down from 4.7% compared to the previous year. The mindshare of Symantec Privileged Access Manager is 1.5%, down from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Privileged Access Management (PAM)
 

Featured Reviews

Tor Nordhagen - PeerSpot reviewer
Transparent mode for privileged sessions will greatly simplify our client's administrative situation
We're introducing the solution's transparent mode for privileged sessions. This is part of what the client hasn't used before. It will simplify their administrative situation greatly. So far, the rollout of this feature has been a seamless process, but we're still in the midst of rolling it out. The benefits will be on the risk side. Right now, the way accounts are managed, you don't necessarily know who is using an account. There's a shared admin account, and that's not a good thing. And those accounts are shared in wallets by several people. One of the real benefits of safeguarding here is that the client will have an absolute audit of who is using an administrative interface, whether it's server or network.
Krishnan Srinivasan - PeerSpot reviewer
Enhances credential management and relatively inexpensive but needs feature improvements
I work for a service provider company, and we implement Symantec Privileged Access Manager solutions for our clients, which include various banking and mining clients We have implemented both the remote access and credential management features. The agent-based credential management solution…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's one of the best products we've seen. When you start looking at the functionality and use cases and usability of the product, it's straightforward. They designed this product with the end-user in mind, and they also had the sysadmin who is supporting the product in mind. They really did a nice job. Overall, it's a nice product to work with."
"One of the real benefits of safeguarding here is that the client will have an absolute audit of who is using an administrative interface, whether it's server or network."
"The auditing and approval mechanisms are features we did not have before and are greatly appreciated."
"The first feature I like about One Identity Safeguard is the live contact point for the VPNs. This has been working very well for us, as it's both highly available and reliable."
"The solution's most valuable features are the efficiency and the quality of the recording."
"The customer service and technical support are very good."
"The transparent mode for privileged sessions is a very good solution."
"There are numerous valuable data protection features, including the content and information that offer us more scalable protection as needed."
"Password Management and Session Recording. The simplicity and ease that it is to be up and running out-of-the-box is very much appreciated."
"We can check the activities in the server for fragile files and documents in case of any issues."
"Symantec PAM is easier to deploy compared to its competitors, such as BeyondTrust."
"CA PAM is working well for us."
"You can do A2A integration. You can have your own script, which can then run outside of PA to retrieve the password and perform other tasks."
"One of the key things for us about the product is around its simplicity. Being able to put in the technology that allows the business to remove complexity and also allow the security improvements."
"Transparent login for users of privileged IDs (Linux, Windows). This prevents sharing of the password because it is never seen."
"Comprehensive coverage of the required features for the PAM solution."
 

Cons

"I find it complicated to implement HTTPS monitoring because the documentation is unclear."
"The deployment affects our privileged users because it takes a long time for them to request privileges, which impacts the SLA."
"We have not had any issues with the core product itself, but there is an add-on called SCALUS, which is quite critical to the user experience, and that does not work. They have been having issues with that for quite a long time, like months. That is not great at all."
"From a usability perspective, what we are finding out is that our privileged domain admin users, in particular, want functionality for extending a checkout session. So we are working with One Identity support to see if there's an enhancement that can be made to the product."
"I just received a question from a customer in regards to a connection with Oracle OID. I tried to integrate Safeguard with the Oracle YAML as well as something else to manage the groups and users from a different system, like AD or LDAP. This one feature could be better. At this moment, the platform system can only use the integration with LDAP or AD. The software for research and development to create a connector to a YAML platform can be very complicated."
"We have issues using Safeguard to connect to and record from the cloud. Currently, they don't have a mechanism to record this type of connection."
"We sometimes face issues with configuration and things like that, but we manage to solve them."
"There is room for improvement in the launch module. They built in a launch button but they don't have effective instructions for configuring it to allow it to launch an RDP session. They're working on that, but the button is in the live product. If they were going to install something that wasn't useful, they should have just disabled it and not rolled it out with the product."
"We have to do a lot of manual work to automate features."
"The setup is complex."
"The support for other remote assistance tools would be excellent. Free included tools in Windows (Remote Assist) and Microsoft SCCM Configuration Manager (ConMgr Remote Control) allow companies to reduce the amount of RDP connections and expand the usage of the tools are frequently used by companies to provide technical support for remote assistance."
"I wish it could create local accounts on desktops."
"Technical support was good when CA handled it. After Broadcom took over, it's not as good."
"Instead of just giving passwords to the user based on job function, from auditing perspective, turn that cycle around. That would really help from an auditing standpoint."
"The service account management functionality needs to be extended to application pools, SQL database, PowerShell scripts, service account discovery, etc."
"What I hope happens with the new product CA PAM is to keep all the useful features that exist in PA, but what I’ve noticed with many new products is the UI gets polished but systems lags stability and performance or it adds additional complexity instead of simplifying the user experience."
 

Pricing and Cost Advice

"We have a yearly license. The cost depends on how much a company wants to invest in technology. In our organization, we believe in modern digitization and automation processes so we found it affordable. One Identity was not that much less than other solutions and it is not a cheap solution. There were number of cheaper solutions. However, it's the most effective, according to our evaluation."
"Safeguard is cheaper than CyberArk."
"The pricing depends on our perspective, our budget, and, of course, the competitors we are taking into account."
"It is cheaper than CyberArk. Its price is fair."
"One Identity Safeguard is expensive and the cost goes up as we scale."
"They have comparable pricing. All identity products are essentially priced in a similar way. It's a per-user base."
"As compared to other products, it is reasonable, but the training sessions are too expensive."
"The license is around $3,000 per month."
"It is reasonably priced."
"Cost-wise, CA was better compared to others in the market. ​"
"I would prefer better licensing options for the 20-100 users we have at a given time."
"The licensing is simple and scalable."
"The version we are using is affordable compared to BeyondTrust, which is maybe three to four times as expensive, but it depends on the features."
"Don’t go with an agent model. Don’t go with a model that has you buying a thousand different parts. Go with PAM that gives you everything, or you’ll just be paying costs of implementing another tool that PAM would have just given you up front."
"Appliances are relatively cheap, don’t skimp. Make sure you have redundancy, high availability, and enough appliances to manage the concurrent workload."
"Pricing is fair compared to other top vendors."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
845,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
24%
Financial Services Firm
11%
Government
6%
Manufacturing Company
6%
Computer Software Company
17%
Manufacturing Company
16%
Financial Services Firm
13%
Comms Service Provider
13%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about One Identity Safeguard?
The identity discovery is good, and the performance is pretty good value.
What is your experience regarding pricing and costs for One Identity Safeguard?
One Identity Safeguard is expensive. The license is around $3,000 per month.
What needs improvement with One Identity Safeguard?
I find it complicated to implement HTTPS monitoring because the documentation is unclear. The disaster recovery process is complicated for me. For some configurations on the SPS side, if I need to ...
What do you like most about Symantec Privileged Access Manager?
We can check the activities in the server for fragile files and documents in case of any issues.
What is your experience regarding pricing and costs for Symantec Privileged Access Manager?
Symantec Privileged Access Manager is potentially cheaper than other solutions. I am not involved in the business side, so I do not have specific cost details.
What needs improvement with Symantec Privileged Access Manager?
Comparing Symantec Privileged Access Manager with market leaders like CyberArk and Delinea, CyberArk is the market leader. Delinea is better than Symantec Privileged Access Manager in terms of secu...
 

Also Known As

No data available
CA PAM, Xceedium Xsuite, CA Privileged Access Manager
 

Overview

 

Sample Customers

Cavium
NEOVERA, Telesis, eSoft
Find out what your peers are saying about One Identity Safeguard vs. Symantec Privileged Access Manager and other solutions. Updated: March 2025.
845,406 professionals have used our research since 2012.