Identity Manager by One Identity Reviews

One Identity Manager has been in use at Sodexo for eight years. We use One Identity Manager for IGA in our organization. We use One Identity Manager to automate the lifecycle of accounts in Active Directory. On a daily basis, we use One Identity Manager with an HRIS systems landscape.

One Identity Manager has had a positive impact on our organization as it has allowed us to streamline the use of Active Directory accounts and strengthen our security. Currently, almost 90% of Active Directory accounts—regardless of the type of account, user, service account, room, or mailbox—are managed by our IGA, illustrating the improvement in terms of security and account management at Sodexo.

The best feature that One Identity Manager offers is certificate-based identity management. Certificate-based identity management adds value to my work at Sodexo because recertification makes it possible to automate the lifecycle of accounts in Active Directory; if they are not renewed, the accounts are automatically deleted.

I would like to see the possibility of being supported during the migration to the Angular portal as an improvement in One Identity Manager. I do not have any other points regarding necessary improvements or aspects that could make it easier to adopt this tool at Sodexo.

I have been working in my current field for four years.

One Identity Manager is stable, relatively, in my experience.

I rate the scalability of One Identity Manager as good.

I evaluate One Identity Manager's customer support as responsive, mainly when we go through our account manager or our Success Manager.

Before choosing One Identity Manager, I did not evaluate other solutions because I was not at Sodexo at that time.

My advice to other professionals considering using One Identity Manager is to clearly define their identity management policy before choosing the product. I rate this review a 7 out of 10.

Our main use case for One Identity Manager is identity governance and administration, which we have been using for about three years. We use it for automated user provisioning and de-provisioning across AD, Azure AD, and 20 plus business applications. It also handles access certifications and role management, which cut our audit prep time in half. Additionally, the workflows let us enforce SOD policies without manual checks. Our main use case is reducing identity risk and administration overhead during employee lifecycle changes.

Some of the best features of One Identity Manager include automation, intuitive compliance and audit, intuitive and user-friendly interface, and centralized management.

One Identity Manager helps with access certifications and role management. One Identity Manager helps with access certifications by automating attestation campaigns. We run quarterly reviews where managers get a dashboard showing all direct reports and their entitlements in AD, SAP, and SharePoint. They can approve or revoke access in one place instead of spreadsheets.

One Identity Manager offers automated provisioning and de-provisioning, making it easier to handle joiners, movers, and leavers across AD, Azure, and SAP without manual tickets.

Compliance and audit is a very standout feature of One Identity Manager. We are able to access certifications with a full audit trail, ensuring auditors get what they need fast.

One Identity Manager impacts my organization positively by cutting manual administration work and improving compliance while also reducing security risk and enabling better governance, thus improving efficiency and security. It has also provided cost savings and audit readiness. The positive impact has been achieved through cost saving and audit by automating identity lifecycle tasks, which reduced our IT administration hours spent on manual provisioning by seventy percent.

One Identity Manager's AI capabilities help governance and security by focusing on risk. The system uses machine learning to analyze access patterns and flag anomalies such as users requesting entitlements outside their normal role, which has improved our governance by providing data-driven recommendations for role modeling and SOD violations.

Regarding One Identity Manager's AI capabilities, I find the accuracy and reliability solid once it is trained on our data. The risk scoring for user accounts is constant and consistent. High-risk users actually match who we expect to review first.

One Identity Manager's integration capabilities are broad and flexible, connecting to our core systems through out-of-the-box connectors for Active Directory, Azure AD, SAP ERP, and SQL databases.

Customizing workflows and policies in One Identity Manager is very easy.

One Identity Manager handles compliance by giving us full visibility and control over user access. For SOX and ISO 27001, it automates access certifications so managers regularly attest who has what in AD, SAP, and databases.

One Identity Manager's reporting and analytics functionality meets our needs for compliance and audits, as it has built-in reports for user entitlements, access certifications, SOD violations, and change history across AD, Azure AD, and SAP.

One Identity Manager is very scalable because it is able to grow with my organization's needs and cater to them perfectly.

The performance of One Identity Manager under heavy loads or during peak times has always been very optimal and high with no downtime noticed or runtime issues; it is very reliable at all costs.

I find One Identity Manager to be very cost-effective, with affordability being very high.

One Identity Manager could be improved with a simpler user interface and a better onboarding process.

The platform is very powerful, but the learning curve is steep for new administrators and new users. More guided setup and modernized dashboards would help.

I have been working in my current field for one year and eleven months.

One Identity Manager is very stable.

One Identity Manager is very scalable because it has continued to handle my organization's growth efficiently.

Customer support for One Identity Manager is responsive and helpful.

I previously used SailPoint IdentityIQ. We switched from SailPoint IdentityIQ to One Identity Manager mainly for cost and AD integration.

My experience with the implementation process of One Identity Manager was very smooth, and whenever we encountered small hiccups, the technical support was very proactive and helpful.

The documentation and training material provided by One Identity Manager, especially the online documentation, is very resourceful and helpful, particularly for the onboarding process.

We have seen a lot of return on investments with One Identity Manager, with the biggest impact being time saved. Access certifications that took three to four weeks manually now run in five to six days with automated campaigns and reports. Mainly, this has resulted in risk reduction and improved efficiency.

Before choosing One Identity Manager, I evaluated other options including Oracle systems and SAP.

One Identity Manager is deployed in my organization using a hybrid cloud.

We use AWS as our cloud provider.

I would rate One Identity Manager a nine out of ten.

One Identity Manager serves my primary use case based on business team requirements, focusing on identity creation, business roles, end-to-end identity creation, JMLs (Joiner, Mover, Leavers), product entitlements uploading, provisioning, reconciliation, synchronization, attestations, and end-to-end product management. The solution handles identity lifecycle management and product lifecycle management through end-to-end testing of a product's provisioning, de-provisioning, and auditing purposes.

The implementation depends on business requirements. For example, with RSA as an application integration, One Identity Manager Web Shop is used for requesting user accounts and entitlements. The request goes through an approval workflow that selects appropriate approvers. Once I log into One Identity Manager Web Shop as an approver, I approve the request, and it proceeds to workflow completion. Upon completion, provisioning is triggered to the target systems. Since the system uses cloud infrastructure and CSM target systems, it goes through One Identity Manager Cloud and Starling Connect, ultimately reaching the RSA target system to validate that the user account is provisioned. Once the user has an account, entitlements can be ordered for that user as well.

One Identity Manager offers customization with separate tools that have positively impacted my organization.

One Identity Manager has been particularly helpful during audits when auditors request logs showing how a user gained access or their current access status, whether through a business role from the front end or through a dynamic role running hourly or per configurations. Provisioning to different target systems is streamlined, making it easy to store the logs, which is the most important aspect for us.

The Job Queue manages jobs triggered from One Identity Manager, and the Sync Editor manages different target system synchronizations. These are the two major tools I use regularly.

One Identity Manager could be enhanced by developing an Android or iOS application alongside the Web Shop to enable mobile access to the application.

I have been using One Identity Manager for seven years.

One Identity Manager is stable.

Before choosing One Identity Manager, I considered SailPoint, but it cannot be heavily customized. One Identity Manager was selected because it provides greater customization capabilities.

One Identity Manager has made the audit process smoother for my team and organization, which is the most important outcome.

I would advise others considering One Identity Manager to recognize that it is both user-friendly and auditor-friendly.

One Identity Manager is a really good product. I have worked with the same product for almost seven years across two different clients, and both clients are satisfied with the product. I provide this review with a rating of nine out of ten.

The overall purpose for using this product is for identity management, which is our core requirement.

We adjusted the number of authorizations given to a person. Before, it used to just collect and collect under people. Now, we can adjust and remove authorizations so they don't just stack up. It's reduced the number of authorizations assigned. 

The workflow has improved from request to assignment. We've been able to accelerate the speed significantly. 

I like the workflow engine and the deep integration with SAP products, including SAP authorizations. In the market, there aren't many products that can deliver this feature. The possibility of customizations is a significant aspect that makes this product stand out from others. 

Additionally, the number of connectors they support is commendable. Reducing the number of authorizations given to people on average is beneficial. Previously, individuals had accumulated authorizations as they moved between departments over their careers. 

Now, there's an attestation process when a person moves to a new department, allowing managers to decide on reassigning authorizations. This has led to fewer authorizations being assigned, which is one of its most important benefits. Moreover, the time taken from an authorization request to an assignment has also been accelerated.

One Identity Manager connects SAP accounts to employee identities under governance. We have an HCM connector, and we have built up the complete life cycle of an identity. TThis means when a person leaves the company or has a transition to another department, we also have processes implemented that we take care that they lose the authorization.

The solution provides IGA for difficult-to-manage aspects of SAP, like profiles, rules, etc. We use transaction codes and activities, and so on, on the lowest sub-authorization level for segregation and security checks. We assign roles, composite roles and single roles.

In terms of user experience and intuitiveness, there is always an issue from one product to another. In the beginning, the users may find it a bit complicated. However, they get new functions and a fancier UI. Overal, it provides a good impression.

It's easy to customize. The product has a huge number of possibilities or ways you could go. That said, you need good knowledge of the product. It's complex. This product needs a deep understanding of how the product works and how the implementation needs to be done. You need an external partner with good experience.

We make use of the product's business roles. We try to catch 80% of the authorizations so only 20% of authorization would need to be requested. 

We have connected cloud applications, including SAP cloud systems. These extensions to governance are very important. They need to be integrated. Our aim is to integrate every system where management takes place under one solution. 

One Identity Manager helps minimize gaps in governance coverage among test, dev, and production servers. Now, we can identify when users have no need anymore to have certain authorizations on a special system or special groups. Our user life cycle takes care of this. When they are not in the department anymore, they won't have access. It makes access to special systems more secure. 

It does help with licensing. If two licenses are similar, we can look at the settings and make sure that users are getting more licenses than we need, and when they leave, the license can be removed. It helps save license costs. 

The solution helps with application auditing and compliance as well as access decisions. 

We've been able to achieve an identity-centric zero-trust model. We have other applications around this, however, we are able to give authorizations only to one person and so that no one has more than they need to avoid security risks. People only get authorizations to that which is a user's core functions. 

We have more complex approval processes for normal authorizations. 

The user interface is good, however, there is space for improvement. Specifically, the way information is presented in the system could be refined so that users are not overwhelmed with technical details. They require more business information. We believe there is substantial room for enhancement in this area. 

There is also room for improvement in how we integrate systems. In some instances, we could achieve deeper integration. However, it requires effort, and we must decide if it makes financial sense.

The downside of the product is it is complex and you need an implementation partner to help you develop it. You can't do it on your own. 

I have used the solution for over four years.

We missed functions in SAP, and there was no further development to meet our needs. There was also no future strategy, and they have discontinued the development of this product. This made us decide that this was not the product for the future.

The deployment was easy in some aspects and complex in others.

There is maintenance needed in the form of upgrades and daily maintenance of one to two hours a day. 

Our partner helped with the implementation. It was, at points, a complex migration and implementation, and we are satisfied with the collaboration.

We are in the upper quarter regarding cost, so it's expensive. However, it is definitely a product with the best future perspective. In terms of function and support, it offers a fair price yet remains an expensive product.

We're a medium-sized company with locations across several countries. We have around 50,000 external and internal users.

One Identity Manager was the right decision in comparison to other market products. With other products, we would not have made such a good decision. 

We had a partner that provided training, coaching and implementation assistance. They were more focused on integration and helped with complex customizations and post-implementation support. We don't need as much support anymore. 

Overall, I rate the product an eight out of ten. I'd recommend it to other users. It was the right decision for us to go with this product in the end. 

My main use case for Identity Manager by One Identity is onboarding users and managing users. I integrate with different systems like Active Directory, mainframe, and other integrations, as well as onboarding users into the system.

The best features that Identity Manager by One Identity offers include flexibility and the capability to handle different configurations and features that we want, making it a good administration and governance system for different accounts.

For example, to get new employees added to different relevant email distribution lists without a manual process, the flexibility of Identity Manager by One Identity really made a difference for my team, highlighting the automation and efficiency of this feature.

Identity Manager by One Identity has positively impacted my organization by being a positive implementation that saved time and costs, as it is a scalable, cost-efficient, and stable solution.

To improve Identity Manager by One Identity, the web portal could get some enhancement to make it easier to use, more user-friendly, and intuitive, and the performance could also be improved, especially on the large SQL datasets.

I have been using Identity Manager by One Identity for three years.

Identity Manager by One Identity is a pretty scalable solution overall.

Customer support for Identity Manager by One Identity is pretty good and very reliable.

Since implementing Identity Manager by One Identity, I have saved about 20% of the cost and about 30% of the time compared to doing it manually.

Before choosing Identity Manager by One Identity, I did not evaluate other options as I was hired when this solution was already in place.

Identity Manager by One Identity is a good tool that is a very reliable system for employee master data, like an HR system, and it integrates with other tools, helping to move towards the identity center-centric zero trust model.

Regarding Identity Manager by One Identity's AI capabilities, I think its governance and security are pretty good. I find its accuracy and reliability of output to be pretty accurate and pretty good.

I rate Identity Manager by One Identity an eight because overall, it is a good, scalable, stable solution that can create new processes and is very useful in day-to-day tasks, but the performance and some aspects of the user interface could be improved.

One Identity Manager is used to manage user identities and control access across our organization, ensuring that the right people have the right access at all times.

One Identity Manager automates the process of giving and removing access when someone joins or leaves the organization, which saves considerable manual work for our team.

The best features One Identity Manager offers are automated provisioning, access-based control, and detailed audit reports.

The detailed audit reports help our team most because automated provisioning is the most valuable for us, ensuring that new users get the right access on time without anyone having to do it manually.

One Identity Manager has positively impacted our organization by helping us achieve much better control over user access and significantly reducing the risk of anyone having more access than they should, which has also made the audit process much easier for our team.

The time spent on managing user access manually has decreased, and our audit process is now much faster and more accurate than before.

One Identity Manager's initial setup could be simplified. Apart from this, everything is perfect and working very smoothly.

I have been using One Identity Manager for less than two years.

One Identity Manager is stable in my experience.

One Identity Manager's scalability is good for our organization.

One Identity Manager's customer support is good, and the team is helpful when I raise an issue.

We have not switched from another solution and are using this kind of solution for the first time.

One Identity Manager's initial setup could be simplified. Apart from this, everything is perfect and working very smoothly.

We have seen a positive return on investment from using One Identity Manager, as it is a time-saver and money-saver solution.

The pricing, setup cost, and licensing are handled by a different team, not by me.

We have not evaluated other options before choosing One Identity Manager.

I advise others looking into using One Identity Manager to plan properly and ensure they understand their access management needs before they start, as once it is set up correctly, it manages user identities and access much easier and more securely for the whole organization. I gave this review a rating of 9 out of 10.

One Identity Manager is used to manage identity and user account changes. We use this solution for user role changes, onboarding, and access-based requests, access certification, and compliance audits. We handle all of these functions while integrating multiple systems such as Active Directory, Azure, and SAP into one identity platform.

One Identity Manager's strong automation is the best feature, as it has reduced manual effort during user onboarding and access management. The unified centralized governance is very useful, allowing us to manage all user access and systems from one platform. One Identity Manager has reduced human error during onboarding and has saved significant time.

Currently, this solution appears to perform well for our automation use case. I chose a rating of nine out of ten because I consider this solution to be a good service, but I have reserved one point for potential enhancements to the features.

I have been using One Identity Manager for more than two years.

One Identity Manager is stable in my experience.

The support team for One Identity Manager is excellent. I have received multiple instances of technical support during both implementation and post-implementation phases.

The integration process for One Identity Manager was easy. We referred to the knowledge base provided by the solution, which helped us integrate successfully through a step-by-step approach.

One Identity Manager has saved both time and money because the organization does not have to expend additional resources.

I recommend considering One Identity Manager by starting with a clear understanding of your identity and access management requirements. The organization should define workflows and policies prior to implementing this solution to get the most value from the platform. I highly recommend using this solution to leverage these features.

I usually provide consultancy for clients and help the team work with the technology.

Business roles in One Identity Manager is something that we normally use and it is very important for the clients. The usability of the platform is good.

The feature that provides the most value to me in One Identity Manager is the customization that can be made within it. It is a very customizable tool. One Identity Manager is very well prepared for any possibility of the clients and it is a comprehensive tool where you can make everything.

There is a specific part in One Identity Manager for clients so they do not see the entire solution. This helps clients who do not have all the knowledge to use the platform. That part is very user friendly.

You can extract the information that you need from One Identity Manager. Usually the clients do not have any issues with this part.

I think that One Identity Manager is a solid eight. AI, intuitiveness, and automations could be improved. Better documentation is needed. One Identity Manager is a complicated solution and needs more documentation, more explanations, and tutorials. This would help partners and clients because documentation should be created for clients as well.

I am using One Identity Manager for one year.

If it is Entra ID from Microsoft, everything is fine. With others, it is more complicated.

It depends on the clients. There are times when clients have a better price and that is acceptable for One Identity Manager. For others, the price is in the normal range for the market.

Saviynt and SailPoint are competitors. I think that they are in the same way as One Identity Manager.

One Identity Manager is very easy to deploy.

The first deployment of One Identity Manager to not be totally functional takes less than one week. If we consider everything that could be involved, such as human resources and Active Directory, it can be more. It can be around six months or something like that.

One Identity Manager does require the normal updates. There are some situations but nothing special.

At first, it is difficult to understand everything in One Identity Manager. Probably no one knows everything, but when you know how it works, most of the platform can be easy.

One Identity Manager is working well in every part. Probably in the Angular part, but they are working on that, so it is fine. They are doing good work.

I recommend One Identity Manager. If a client sees everything about the technology and about the solution, they can make a decision to implement One Identity Manager because it is a very good solution. Sometimes they are a little confused about all of the information that they have.

One Identity Manager is in the top of the solutions, probably with one, two, or three more. The decision is not really about whether the solution is better or not. It depends more on whether the client has any knowledge or experience with that or something like that. It is not actually a matter of whether it is a better solution or not. It is more about a commercial thing or client knowledge.

One Identity Manager has been integrated and in use for two years. The primary focus is on integrating One Identity Manager for other customers, particularly mid-sized financial institutions. The implementation targets unifying user access across internal applications, cloud platforms, and third-party partner systems.

While specific details cannot be shared due to NDA agreements, one organization had multiple identity systems: one for internal employees, one for external employees such as contractors, and another for partners. This fragmentation caused inconsistent access, security vulnerabilities, and slow onboarding and offboarding processes. One Identity Manager was implemented to consolidate these systems, resulting in significantly faster operations.

One Identity Manager's best features include fast setup with the ability to be configured locally for direct database access. The solution provides specific procedures for onboarding and offboarding, and supports the use of custom connectors.

One Identity Manager has positively impacted the organization by reducing account creation and access approval times from days or weeks to minutes or hours through automated workflows. Self-service access requests are routed through a central portal with defined approval paths, which minimized manual work and accelerated onboarding. Governance functions such as attestations and access reviews are now enforced consistently, which was not the case previously.

One Identity Manager can be improved in the areas of documentation and training, both of which are severely lacking.

Three years have been spent working in the current field.

One Identity Manager is genuinely stable, particularly the LTS versions.

One Identity Manager's scalability performs comparably to other One Identity products and scales effectively from very small organizations to large financial companies, including major banks and other large entities.

One Identity Manager's customer support is good. Response times average four to five days, sometimes extending to six days, but the support team has been genuinely helpful in addressing cases in a timely manner.

A different solution was not previously used, as the customer specifically requested One Identity Manager.

Specific details regarding pricing, setup cost, and licensing cannot be shared. However, One Identity is quite affordable, particularly with partner status.

Other options were not evaluated before choosing One Identity Manager.

One Identity Manager is the industry standard for valid reasons, which demonstrates its quality. It is backed by a large and reputable company and is genuinely easy to learn and implement. The documentation is adequate. One Identity Manager's onboarding and offboarding processes are considerably faster than previous methods, resulting in significant time savings that translate to cost savings. The overall impression of One Identity Manager is positive, and a rating of 8 out of 10 reflects the value and effectiveness of this solution.

I am a consultant for One Identity Manager and implement it for clients. They use it for ordering permissions, attestation of permissions, and reporting on permissions.

Customers use One Identity Manager to manage SAP. SAP integration is very important because clients have critical business processes in SAP systems. Governance of SAP users and permissions is important.

One Identity Manager is a good solution for providing a single platform for enterprise-level administration and governance of users, data, and privileged accounts. You have a view of all the users, permissions, and connected systems, and you can have a whole range of connected systems such as Active Directory, SAP, Entra ID, Exchange Online and others. You can import identities from HR systems or create them manually and join them with their accounts and permission. It gives you a view of the permissions and roles people have in different target systems. You can combine that with roles that are automatically populated through inheritance. You can also combine it with attestation so that you have an approval process for those rights. You can basically check that they are not assigned forever or when not needed.

Customers use One Identity Manager's business roles to assign permissions based on membership in organizational structures, such as departments, locations, job functions. This functionality is very important because you can model your business as a hierarchy and inherit permissions and accounts along with this hierarchy. It is a good solution to assign permissions automatically. For example, if you have different locations for your business, you can model those locations in the business roles and assign people to those roles automatically through HR import. That makes life easy and gives you a graphical view of that structure in One Identity Manager. For people who are not too technical, it makes it easy to understand how permissions are inherited.

It gives an overview of licenses. For example, in One Identity Manager, you can have an overview of Office 365 licenses being used. Apart from that, you can see how many and which accounts are being used, but it is not a license management tool.

Attestations help you determine if someone should have a certain permission or not. You can also have recurring attestation where, for example, a manager can decide if certain permissions are needed for certain people. For compliance, you can implement segregation of duties where you can specify that if you have permission A, the users cannot have permission B.

For auditing, you can see the permissions and the accounts people have, but it is a view from a certain point in time. There might be some gaps or synchronization delays between One Identity Manager and the target system, such as SAP. For auditing or a tracing without any gaps, you need tools that monitor permissions in those systems in real-time, similar to Change Auditor from Quest.

It helps to create a privileged governance stance to close the security gap between privileged users and standard users. You can have different types of identities. You can have a person with a non-privileged identity and also a privileged identity. It helps to separate those, but at the same time, you can see what kind of permissions a person has in total. You have a view of both the non-privileged and privileged identities.

It is very comprehensive. There are a lot of features in the product. The strong points are that you can model your organization in One Identity Manager and create roles. There is a Webshop where end users can order permissions and accounts. These are its strong points.

What is missing is a mobile user interface for the end-users so that they can do simple things on their mobile phones on the go. 

The time it takes to synchronize a large target system is often significant, often taking multiple hours. That is something that could be improved. I am aware that it is often due to the performance of the target systems, but it is a problem in day-to-day operations to have slow synchronization.

I have been using it for 12 years now.

It is stable. I would rate it a nine out of ten for stability.

One Identity Manager has improved in terms of performance and added functionality. There is better stability. They have invested in more modern web interfaces and are moving to the cloud as well. You can run it on prem, in your own private cloud, or you can have a SaaS solution nowadays.

It is scalable. I would rate it an eight out of ten for scalability. I have seen it work well in large environments.

There are different support tiers, some with 24/7 support and a dedicated technical account manager.  

If you have outages or critical production problems, you can count on the manufacturer to help resolve the situation. Minor questions are not always treated as fast as one would wish, but for the critical stuff, you can rely on them.

Positive

Its implementation effort depends on what you want to achieve, but it is not straightforward. You need solid knowledge of One Identity Manager. You also need a good strategy and information about what you want to achieve with One Identity Manager, how you want to connect to your target system, and what kind of processes you want to have in One Identity Manager.

But you can rely on the manufacturer and partners to help you with that.

In terms of maintenance, you have to update it regularly to be in support. Otherwise, after some time, there would not be any support from the manufacturer. Also, the manufacturer is fixing bugs and extending the product, so it makes sense to be current with the software.

As a consultant, I help the in-house team deploy the solution.

It saves an enormous amount of time. If you do not see it as purely an Identity Management tool but as a possibility to automate processes in the company, it provides a huge amount of value. If you use it the right way and think of which processes in terms of Identity Management you can automate, it will save a whole lot of time. 

The time savings depend a bit on what you are automating. For example, if you can automate assigning accounts and permissions by making use of the organizational structure and let managers order permissions through the web shop, you accelerate your business processes and reduce the amount of manual labour involved. 

My clients have been using it for a long time now. They have looked at other products as well, so it seems worth the price.

One Identity Manager is the most complete offering because you have the connection to the target systems and you have inheritance, which is powerful and not something every other vendor has. They have a Webshop with approval processes for ordering accounts and permissions. It is a complete package, and you get all this in one product. In terms of functionality, it is very good compared to other products on the market.

If you are a user, it is not too difficult to get into it. You have to be familiar with the concepts of Identity Management, as well as inheritance of roles and permissions and how to use the tools. It is manageable. If you want to be a developer in Identity Manager, that is a different thing because it takes way longer to get into. For example, the new web portal has an Angular web front. If you have Angular web development skills, you can more or less get straight into it.

One Identity Manager has a certain complexity, and it is not always easy. From an end-user perspective, there is a web interface to request permissions, reset your password, or manage your account in some aspects. However, when you get into the management of One Identity Manager itself, you need some knowledge, and it is not always straightforward. It is complex.

When it comes to customization, the ease depends on what you want to customize. Certain aspects of the product are easy to customize. You do not need programming knowledge, or you can do it with minimal programming knowledge. For some aspects, you need programming expertise in Angular or other programming languages, such as .net. You need to have a good grasp of how the Identity Manager works.

My recommendation is to first determine your needs and then look for a product that addresses them. One Identity Manager is a big product that provides lots of functionality. If you do not need lots of features, you could go for a SaaS solution, maybe also from One Identity.

Set up a strategy and do a proof of concept. Validate some of the requirements to see if it is a good fit and implement One Identity Manager if you are satisfied with the PoC.

Overall, I would rate One Identity Manager a nine out of ten.