Identity Manager by One Identity Reviews

One Identity Manager is primarily used for user lifecycle management, access request and approval, role-based access control, and compliance.

Since we are using One Identity Manager, we have seen a significant positive impact by improving our security through ensuring users only receive the access they need and reducing manual work, making identity management more efficient and organized.

We have experienced specific outcomes with One Identity Manager, including faster onboarding and offboarding processes for users and fewer security incidents.

The best feature of One Identity Manager is the access request and approval functionality, which allows users to request access to a service portal, and the request goes to the proper approver before access is granted, ensuring control and secure access management while also providing a solution that streamlines and assists with audits.

What I find most valuable about the access request and approval features is that they make the environment more secure.

Another standout feature of One Identity Manager is centralized management, which allows all users and access to be managed from a central, unified platform that supports multiple systems such as Active Directory and cloud applications, simplifying identity management.

There is always a need for improvement based on the features, which is why I deducted one point from the overall rating.

I have been using One Identity Manager for more than three years.

One Identity Manager is stable.

Scalability-wise, One Identity Manager is managing our growth of users, so there is no challenge.

I have had a great experience with the customer support team for One Identity Manager, as they are ready to provide support and resolve issues within the timeline.

We have not evaluated other options because we had already decided that One Identity Manager is excellent, so we are using this solution.

I had a good experience with the pricing and setup of One Identity Manager, as the sales team was very helpful during this process and assisted us in implementation, leading to an overall great experience with the pricing and setup cost.

We are a partner with the vendor of One Identity Manager.

We have seen a good return on investment with One Identity Manager, as automation has reduced manual efforts by approximately 40 to 50%, especially in user provisioning and access management, saving significant time for the IT team and reducing the workload of our employees.

I had a good experience with the pricing and setup of One Identity Manager, as the sales team was very helpful during this process and assisted us in implementation, leading to an overall great experience with the pricing and setup cost.

We have not evaluated other options because we had already decided that One Identity Manager is excellent, so we are using this solution.

I highly recommend any organization looking for this type of solution to consider One Identity Manager. My advice would be to plan the implementation carefully and understand your requirements in advance, ensuring your access policies are well-defined for a smooth deployment. I gave this review a rating of 9 out of 10.

I mainly use One Identity Manager for resolving incidents and other tasks, working as both a manager and sometimes as a designer.

We are using One Identity Manager for IGA only, managing the data and identities.

We make use of One Identity Manager's business rules to map company structures for dynamic application provisioning. For the client I'm using, they have multiple business and system rules, so it's going well with a proper structure of business role entitlement and everything.

We are using One Identity Manager for Cloud Azure, but I'm not part of that team as of now.

One Identity Manager helps to minimize gaps in governance coverage among test, dev, and production servers through the CI/CD pipeline, making it easy to migrate the data and development across different environments.

Minimizing these gaps has affected my operations by making it fast. If we automate this process through deployment, then it's very fast.

We are using a DevOps model for One Identity Manager, specifically through CI/CD.

One Identity Manager has helped me achieve an identity-centric zero-trust model because all data related to identity can be seen on the Object Browser, with role and entitlement assigned to that identity along with other relevant details. It's a very good thing as we can view everything about that identity on one page, making it a good approach.

What I find valuable about One Identity Manager is that in the Object Browser, we can see everything, which is a good feature. We can also do and change the data in one place, so that is beneficial; we don't need to query each time.

I find it beneficial because we don't need to open the database, so it's good.

The business rules functionality is important to me because for each individual, we don't need to assign the role. If we assign a particular functionality to the role, it will be assigned to the employee using that business role, meaning we don't need to assign specific things for each employee; it will be done through the business role, which is a good feature.

The main benefits I've seen from using One Identity Manager are that it's very easy to use. I check with other teams, and they are using different tools such as SailPoint and Okta, which are very difficult to learn and manage identities with. With One Identity Manager, the UI is very good; it's easy to learn and understand if we have knowledge about .NET and SQL, or the OOPS concept, making it easy to grasp the tool.

From a user experience perspective, One Identity Manager is good; the only difficulty I find sometimes is because it's a Windows application, it's very difficult to view all data since it's a limited Windows space. Opening multiple windows is difficult as it's a Windows application.

When I need to compare between two different things, I can't do it in a single window. I have to open two windows and check them. Even if I have to change the data, I have to open another instance of the application and check. If it could be done in a single instance, then it would have a better approach.

One Identity Manager has just introduced Angular, so if some of the functionality can be done through a web version, creating a lighter web version to perform tasks would be useful.

I've been working with One Identity Manager for more than one and a half years.

My personal experience with the initial setup and onboarding of One Identity Manager was very smooth. We got training from one of the partners, and we used their online labs to complete the setup, which was straightforward. We did not face any difficulties, and if we follow the proper steps, it's very easy to configure and deploy.

There is very little information available about One Identity Manager on the internet, and very few people are using it, as it's a niche skill. If we could have more information or videos, it would be easier for people to use it, and if we encounter any problems with the tools, we can check the functionalities, understanding what features we can find and where.

I did not escalate any technical questions to the support team, but we have access to labs for a limited period. If we could have lab access extended for more days, it would be helpful for me and my team members to learn more about One Identity Manager, which could assist in related inquiries.

My overall review rating for One Identity Manager is 8.5 out of 10.

One Identity Manager is primarily used for identity and life cycle management, access governance, provisioning, and automating joiner, mover, leaver processes across different systems.

One Identity Manager automatically provisions accounts and assigns the right access when a new employee joins. It also handles transfers or adjusts promotions automatically when someone changes roles or leaves the company.

One Identity Manager has been integrated with Active Directory, HR systems, and a few business applications so identity changes flow automatically across multiple platforms from a single process.

The best features One Identity Manager offers are identity lifecycle automation, access governance, role-based provisioning, approval workflows, and risk monitoring and compliance reporting capabilities.

The automation feature is relied upon most because onboarding and access provisioning are much faster now. There have been fewer access-related errors because approvals and role assignments are automated and standardized across systems. One Identity Manager has improved access governance, reduced manual identity management tasks, and helped standardize onboarding, role changes, and offboarding processes across the organization.

One Identity Manager has positively impacted the organization through access governance, reduced manual identity management tasks, standardized onboarding and role changes, and offboarding processes across the organization.

Reporting customization and troubleshooting complex workflows can sometimes be time-consuming, so better visibility and simpler administration tools would be helpful.

One Identity Manager is powerful, but the UI could be more intuitive and some advanced configuration customizations have a fairly steep learning curve.

Reporting customization and troubleshooting complex workflows should be easier and more streamlined, so better visibility and simpler administration tools would help significantly.

One Identity Manager has been used for one year.

One Identity Manager is stable and smooth.

One Identity Manager scales very well for large enterprise environments, especially when managing multiple directories, hybrid infrastructure, and high volumes of provisioning and governance workflows. The platform's modular architecture helps with scaling across multiple domains and millions of identities, although larger deployments usually need careful performance tuning and infrastructure planning.

Customer support for One Identity Manager is excellent, and they are reliable and quick to resolve every query.

Before One Identity Manager, manual processes and native AD tools with some custom scripts were mainly relied upon. The switch to One Identity Manager was made to get better automation, centralized governance, and strong compliance control.

Setup requires proper planning because implementation and customization can take some time in complex environments.

Strong return on investment has been seen mainly through reduced manual identity management work and faster onboarding and offboarding processes. Tasks that previously took hours across multiple teams are now mostly automated, which has improved efficiency and reduced access-related errors.

The pricing and licensing for One Identity Manager are definitely enterprise-focused and can get expensive depending on the number of managed identities and integrations. The automation and governance capabilities justify the investment in large environments.

SailPoint, Saviynt, and Microsoft Entra ID Governance were evaluated before choosing One Identity Manager, mainly because strong hybrid identity governance and flexible provisioning workflows were needed.

One Identity Manager is very powerful and works best when the workflows and access policies are well-planned from the beginning, so it is important to clearly define identity governance processes and role models before implementation. The overall rating for this review is 8 out of 10.

I use One Identity Manager for IAM processes, governance, and policies. 

I use One Identity Manager to help manage SAP. The integration requires knowledge about the structure of the data. If you know the structure of the data, manipulating it is straightforward. With PowerShell scripts, you can connect to the SAP table you want and modify data based off of triggers in your database or processes.

The solution provides IGA for the difficult to manage aspects such as SAP T-codes, profiles, and rules. It depends on how complicated the architecture of the SAP is and the rules that govern it, but you can set those rules in your One Identity Manager and trigger those changes based off of those rules. You don't have to do any work in SAP; you can do all the work in One Identity Manager and trigger the change in whatever environment you want.

I use business roles to map company structure for dynamic provisioning. The business role functionality is important because it helps with the segregation of duties, the SODs. I can create business roles, assign privileges, and provision those business roles to identities, which is essential for managing privileged access.

I use the solution to extend governance to cloud apps. The extension is important to my new client because they want to manage everything in One Identity Manager without using different tools for cloud solutions and identities. Since they already manage their identities in One Identity Manager, provisioning cloud services becomes easy, allowing for seamless assignment of cloud functions to business roles.

The solution helps minimize gaps in governance coverage among test, dev, and production servers, but I don't think it's optimal out of the box. You have to manually create those environments on different servers. It would make sense to have a feature for creating a test environment on one server. It can test scripts, but I think it's not robust enough.

The solution does streamline application access decisions, compliance, and auditing. We have attestation policies that apply to every identity, and One Identity Manager gives you the ability to audit your data, delivering compliance and auditing power. The solution has helped achieve an identity-centric zero-trust model.

The best features in One Identity Manager include the new Angular portal, which is the best improvement they made by removing the old portal. This feature gives you access to customize and create endpoints, APIs, and now it makes sense because you can expose and create endpoints from your tables and other target systems can use them and add or remove from your database and trigger processes with APIs. That's a very cool feature because it makes the identity more robust, and you can integrate as many things as you want to integrate to One Identity now. It's a very good addition.

The solution provides a single platform for enterprise-level administration and governance of users, data, and privileged accounts which is quite strong. I recently started a project where we're trying to integrate the management of nonhuman identities, such as Azure Functions and various other devices. I believe One Identity is very effective for managing these types of applications because it treats everything as an identity. You can also apply and request specific business rules for these identities. Overall, I find it to be a very robust solution for managing these kinds of applications.

For basic tasks, it's acceptable, but when there are complexities and building on those complexities, it becomes slow because One Identity Manager doesn't do parallel processing; it processes in series and in batches. That's a drawback because with a heavy database and many processes, it becomes slow, which isn't ideal for user experience.

There are many areas in One Identity Manager that have room for improvement. I don't prefer that One Identity Manager uses series processing where everything is in a queue; it has to process in order, which means there are too many layers involved in processing a single piece of information. If they could simplify that and make processing faster, it would be perfect. The database queue process doesn't make sense, and it's annoying waiting for processes to finish before another starts. Also, when upgrading, they should be more considerate; with the transition from One Identity Manager 7.0 to 8.2, many functions were phased out, requiring extensive upgrading of numerous scripts.

I find it pretty difficult to customize the solution because you really need to be an expert. If you have about one year of experience, you can't do much with One Identity Manager. You need many years of experience to customize solutions effectively.

I've been using One Identity Manager for almost five years now.

I'll give it a ten for stability. It truly is reliable. It's a solution you can depend on because you have your own on-premises solution as well as your own cloud solution. This means there's no interference from One Identity, such as unexpected automatic updates to your system. The way you deploy it is precisely how you have it set up. Therefore, I give it a ten; it’s very stable.

Regarding scalability, I would give it a ten because, with the new features added, you can integrate with many applications, and it's really scalable depending on your needs.

I've used both regular support and partner support, but recently, I haven't had to use it because I have experienced people around me, so I just ask them for guidance. Based on my experience, I would rate support as a two out of ten. I would rate it so low because support often lacks experienced technical personnel, resulting in long wait times and unhelpful solutions. They sometimes ask random questions or read from scripts, which can be frustrating. After a while, I didn't need support anymore because I had knowledgeable people to assist me.

It should be done properly. They need to hire technical experts and pay them accordingly. I believe the issue is related to budget constraints, which is why they avoid hiring experienced professionals. They should focus on bringing in technically skilled individuals who understand the tools and technologies involved. It’s important to have knowledgeable support staff rather than just hiring random people with only six months of experience.

Negative

My different clients have different models. They have the cloud model. They have the on-prem model. It just depends on their needs.

Overall, deployment is easy. Installation is straightforward. Deployment can take an average of a day to set up an instance.

The solution requires maintenance due to frequent bugs with new versions, and it takes time to apply updates. We often comment on bugs in the community platform, but it would help if they addressed them more consistently.

One Identity Manager is not cheap at all, which is a significant drawback for small to mid-sized companies. Only large enterprises can afford the licensing fees, and the pricing needs to drop. They could consider developing a mini version for smaller companies, similar to Microsoft's approach.

I have many partners because I worked with different companies including For Rivers, IT-Consult, and now Staffice. My experience with the partners has been positive. They did really help me out, especially IT-Consult. They helped me with trainings with their own customized training platform where they teach you how to use the tool in three months, where you can create your own processes, work on attestations, onboarding new systems, new target systems, handling sync projects, basically almost everything.

My clients are mainly large enterprise businesses. Most One Identity Manager clients tend to be large enterprises who can afford the costs. 

I can't recommend it to a small company because of its costs, but I can recommend it to big companies. However, the training materials are the worst I've ever seen; they don't provide practical learning, only theory. While it's a good system, it requires a lot of money to hire experts for maintenance. 

I can't rate One Identity Manager compared to other solutions because I'm biased; I still feel it's the best. I would choose it over CyberArk any day due to my experience.

I would rate this solution a seven out of ten.

My main use case for Identity Manager by One Identity is to onboard and offboard an employee, where whenever a new employee joins, it automatically creates their identity and shares the required access, and whenever someone exits, it automatically disables their account and removes all the access, so it helps in automatically giving access to a joiner and then automatically removing the access whenever they leave.

A specific example of how this automation has helped my team is that whenever a new employee joins, the onboarding team and HR team choose which accesses need to be granted based on their role, and when someone leaves, they revoke all the access. For instance, recently, a tech lead joined, and we had to give him access to many different platforms and accounts, but he disconnected within two days, so we created it on the first day but then revoked it immediately. This does not require much manual checking and also enhances security because employees who are leaving do not have access that was previously difficult to manage as teams were unable to identify all the accesses and some credentials would remain with candidates who were leaving.

Identity Manager by One Identity also helps from a compliance and security point of view.

The best features Identity Manager by One Identity offers include monitoring of identity and providing a centralized system for it, and I particularly value the centralized governance of identity.

Identity Manager by One Identity has positively impacted my organization by reducing the manual identity creation or management work, making all accesses more structured and automated, and by offering clear visibility to the teams during compliance audits due to the structured and clear access visibility.

For example, we have joinings every Monday, and it becomes difficult for the onboarding team to provide logins and create identities manually across different platforms, but Identity Manager by One Identity speeds up that process. The same happens when someone leaves, as the HR team does not have to spend much bandwidth, as they can simply remove all the access of those employees with a few clicks.

Identity Manager by One Identity can improve by simplifying some of the processes, as the environment can be a bit complex when onboarding or creating identities, which requires more in-depth expertise.

There are no specific areas to add regarding making it easier for my team, as it mainly revolves around technical processes that present issues.

Based on my experience, I have not seen any other areas where Identity Manager by One Identity could be improved.

I have been using Identity Manager by One Identity for around 18 months.

Identity Manager by One Identity is highly stable.

Identity Manager by One Identity can scale, and its scalability is strong.

The customer support for Identity Manager by One Identity is good, and I would rate it nine out of ten.

From a ROI perspective, I have seen that fewer employees were needed to monitor governance access, which has also helped in terms of money saved and has brought smoothness and quickness to the system, allowing us to operate quickly rather than manually.

My experience with pricing, setup cost, and licensing is that their setup was manageable, and we did it in-house.

Before choosing Identity Manager by One Identity, we evaluated other options such as Omada and Saviynt, but this is what we have chosen.

For anyone looking into using Identity Manager by One Identity, I would advise that it is a strong enterprise-level solution, particularly for larger teams seeking centralized governance, identity governance, access reviews, and compliance, as it is one of the best solutions available that can help them. I have given this review a rating of nine out of ten.

We use it as it is intended to be used. We have many identities that need to be managed, and we manage Active Directory to handle identity management.

My favorite feature is the visualization. When you open an identity, you can see what is linked to it, such as rules or departments. I really appreciate how you can see things that are connected rather than just viewing them in a list from a database. This is my most favorite feature of the overall One Identity Manager system.

This visualization exists in the backend, and it is also in the frontend, though it is somewhat lacking on our side due to our different setup. However, overall I appreciate all of these features for seeing connected information.

A lot of improvements are coming in the new version, which will improve many things I currently dislike. What I would really appreciate being built upon is dashboards. From what I understand, there will be some dashboards in version 10, but what my colleagues and I would prefer is customizable dashboards similar to Splunk. In Splunk, you can build your own dashboards and set access so that certain people with specific roles can access particular dashboards. You would have some presets, but you could build it like a puzzle for what you need and what you prefer. This customization capability is currently lacking.

I have been using this solution for two and a half years.

Stability could be improved. Our infrastructure for One Identity Manager is quite large, and there are many potential pain points. The infrastructure is complex with a lot of built-in components, and anything could be causing the issues. We have accumulated so much that finding out what is causing the problems is sometimes difficult in itself.

Our scale is quite large, and I would confirm that One Identity Manager handles this.

I have not personally contacted customer service, but I have heard from colleagues who did, and they were not happy about the support.

Negative

I am currently in the phase of initial deployment on a new infrastructure, and I would say it is acceptable. It is not the worst, nor the easiest.

This project has been ongoing for approximately one month, and I am still not complete because it is only about job servers. The main problem is that we have many customers that we need to connect to. Each customer and each connection is different, which is the biggest pain point.

This implementation requires a lot of maintenance.

I would say it requires a lot of operational work, and since we have many requirements, we also need to develop a lot of custom components that are not included out of the box. It requires significant initial maintenance to build something, then follow-up maintenance when migration happens, and you need a lot of maintenance if there is data inconsistency and then a lot of changes.

I cannot really answer this question because I have not been involved with the SAP aspect. Could the question about maintenance as infrastructure or the software and managing be more precise?

I know we have a connection, but I think we are not using the out-of-the-box connection.

One Identity Manager is used to automatically handle user accounts, passwords, and access permissions across our entire company from one central place. When new employees join the company, this system automatically creates their email, sets up their accounts, and grants them access to the exact folder they need for their job on day one.

The best features One Identity Manager offers are automated workflows for onboarding new hires, the self-service portal where employees can request access to applications, and the clear reporting tools for security audits.

The automatic workflows and the self-service portal make my job easier and more efficient because the self-service access request allows employees to ask for the software permissions they need, routes the request to their manager for approval, and grants access automatically without IT having to do it manually.

One Identity Manager has positively impacted my organization by drastically reducing the time it takes to onboard new employees and helping us in security audits because it tracks exactly who has access to our data.

The time saved during onboarding is approximately 40 to 50% because previously it took considerable time; now the system automatically provisions accounts based on HR data, which significantly reduces our manual setup. Regarding security audits, it saves our time due to the real-time logs present, allowing us to track everything and later fetch it to create a report.

One improvement could be a focus on documents, specifically an official document for the advanced troubleshooting guide so that anyone can understand and troubleshoot effectively.

I have been working in my current field for more than three years.

One Identity Manager has been discussed thoroughly regarding potential improvements. My advice for organizations considering One Identity Manager is to focus on planning and strategy, spending considerable time cleaning up your company's active directories and foundational HR data before starting the implementation because the solution is very powerful, but you have to clearly define the policies and utilize automation. I would rate this product a 9 out of 10.

One Identity Manager has been in use at Sodexo for eight years. We use One Identity Manager for IGA in our organization. We use One Identity Manager to automate the lifecycle of accounts in Active Directory. On a daily basis, we use One Identity Manager with an HRIS systems landscape.

One Identity Manager has had a positive impact on our organization as it has allowed us to streamline the use of Active Directory accounts and strengthen our security. Currently, almost 90% of Active Directory accounts—regardless of the type of account, user, service account, room, or mailbox—are managed by our IGA, illustrating the improvement in terms of security and account management at Sodexo.

The best feature that One Identity Manager offers is certificate-based identity management. Certificate-based identity management adds value to my work at Sodexo because recertification makes it possible to automate the lifecycle of accounts in Active Directory; if they are not renewed, the accounts are automatically deleted.

I would like to see the possibility of being supported during the migration to the Angular portal as an improvement in One Identity Manager. I do not have any other points regarding necessary improvements or aspects that could make it easier to adopt this tool at Sodexo.

I have been working in my current field for four years.

One Identity Manager is stable, relatively, in my experience.

I rate the scalability of One Identity Manager as good.

I evaluate One Identity Manager's customer support as responsive, mainly when we go through our account manager or our Success Manager.

Negative

Before choosing One Identity Manager, I did not evaluate other solutions because I was not at Sodexo at that time.

My advice to other professionals considering using One Identity Manager is to clearly define their identity management policy before choosing the product. I rate this review a 7 out of 10.

Our main use case for One Identity Manager is identity governance and administration, which we have been using for about three years. We use it for automated user provisioning and de-provisioning across AD, Azure AD, and 20 plus business applications. It also handles access certifications and role management, which cut our audit prep time in half. Additionally, the workflows let us enforce SOD policies without manual checks. Our main use case is reducing identity risk and administration overhead during employee lifecycle changes.

Some of the best features of One Identity Manager include automation, intuitive compliance and audit, intuitive and user-friendly interface, and centralized management.

One Identity Manager helps with access certifications and role management. One Identity Manager helps with access certifications by automating attestation campaigns. We run quarterly reviews where managers get a dashboard showing all direct reports and their entitlements in AD, SAP, and SharePoint. They can approve or revoke access in one place instead of spreadsheets.

One Identity Manager offers automated provisioning and de-provisioning, making it easier to handle joiners, movers, and leavers across AD, Azure, and SAP without manual tickets.

Compliance and audit is a very standout feature of One Identity Manager. We are able to access certifications with a full audit trail, ensuring auditors get what they need fast.

One Identity Manager impacts my organization positively by cutting manual administration work and improving compliance while also reducing security risk and enabling better governance, thus improving efficiency and security. It has also provided cost savings and audit readiness. The positive impact has been achieved through cost saving and audit by automating identity lifecycle tasks, which reduced our IT administration hours spent on manual provisioning by seventy percent.

One Identity Manager's AI capabilities help governance and security by focusing on risk. The system uses machine learning to analyze access patterns and flag anomalies such as users requesting entitlements outside their normal role, which has improved our governance by providing data-driven recommendations for role modeling and SOD violations.

Regarding One Identity Manager's AI capabilities, I find the accuracy and reliability solid once it is trained on our data. The risk scoring for user accounts is constant and consistent. High-risk users actually match who we expect to review first.

One Identity Manager's integration capabilities are broad and flexible, connecting to our core systems through out-of-the-box connectors for Active Directory, Azure AD, SAP ERP, and SQL databases.

Customizing workflows and policies in One Identity Manager is very easy.

One Identity Manager handles compliance by giving us full visibility and control over user access. For SOX and ISO 27001, it automates access certifications so managers regularly attest who has what in AD, SAP, and databases.

One Identity Manager's reporting and analytics functionality meets our needs for compliance and audits, as it has built-in reports for user entitlements, access certifications, SOD violations, and change history across AD, Azure AD, and SAP.

One Identity Manager is very scalable because it is able to grow with my organization's needs and cater to them perfectly.

The performance of One Identity Manager under heavy loads or during peak times has always been very optimal and high with no downtime noticed or runtime issues; it is very reliable at all costs.

I find One Identity Manager to be very cost-effective, with affordability being very high.

One Identity Manager could be improved with a simpler user interface and a better onboarding process.

The platform is very powerful, but the learning curve is steep for new administrators and new users. More guided setup and modernized dashboards would help.

I have been working in my current field for one year and eleven months.

One Identity Manager is very stable.

One Identity Manager is very scalable because it has continued to handle my organization's growth efficiently.

Customer support for One Identity Manager is responsive and helpful.

I previously used SailPoint IdentityIQ. We switched from SailPoint IdentityIQ to One Identity Manager mainly for cost and AD integration.

My experience with the implementation process of One Identity Manager was very smooth, and whenever we encountered small hiccups, the technical support was very proactive and helpful.

The documentation and training material provided by One Identity Manager, especially the online documentation, is very resourceful and helpful, particularly for the onboarding process.

We have seen a lot of return on investments with One Identity Manager, with the biggest impact being time saved. Access certifications that took three to four weeks manually now run in five to six days with automated campaigns and reports. Mainly, this has resulted in risk reduction and improved efficiency.

Before choosing One Identity Manager, I evaluated other options including Oracle systems and SAP.

One Identity Manager is deployed in my organization using a hybrid cloud.

We use AWS as our cloud provider.

I would rate One Identity Manager a nine out of ten.

One Identity Manager serves my primary use case based on business team requirements, focusing on identity creation, business roles, end-to-end identity creation, JMLs (Joiner, Mover, Leavers), product entitlements uploading, provisioning, reconciliation, synchronization, attestations, and end-to-end product management. The solution handles identity lifecycle management and product lifecycle management through end-to-end testing of a product's provisioning, de-provisioning, and auditing purposes.

The implementation depends on business requirements. For example, with RSA as an application integration, One Identity Manager Web Shop is used for requesting user accounts and entitlements. The request goes through an approval workflow that selects appropriate approvers. Once I log into One Identity Manager Web Shop as an approver, I approve the request, and it proceeds to workflow completion. Upon completion, provisioning is triggered to the target systems. Since the system uses cloud infrastructure and CSM target systems, it goes through One Identity Manager Cloud and Starling Connect, ultimately reaching the RSA target system to validate that the user account is provisioned. Once the user has an account, entitlements can be ordered for that user as well.

One Identity Manager offers customization with separate tools that have positively impacted my organization.

One Identity Manager has been particularly helpful during audits when auditors request logs showing how a user gained access or their current access status, whether through a business role from the front end or through a dynamic role running hourly or per configurations. Provisioning to different target systems is streamlined, making it easy to store the logs, which is the most important aspect for us.

The Job Queue manages jobs triggered from One Identity Manager, and the Sync Editor manages different target system synchronizations. These are the two major tools I use regularly.

One Identity Manager could be enhanced by developing an Android or iOS application alongside the Web Shop to enable mobile access to the application.

I have been using One Identity Manager for seven years.

One Identity Manager is stable.

Before choosing One Identity Manager, I considered SailPoint, but it cannot be heavily customized. One Identity Manager was selected because it provides greater customization capabilities.

One Identity Manager has made the audit process smoother for my team and organization, which is the most important outcome.

I would advise others considering One Identity Manager to recognize that it is both user-friendly and auditor-friendly.

One Identity Manager is a really good product. I have worked with the same product for almost seven years across two different clients, and both clients are satisfied with the product. I provide this review with a rating of nine out of ten.