What is our primary use case?
My main use case for One Identity Safeguard Authentication Services is for Active Directory. One Identity Safeguard Authentication Services helps us to integrate non-Windows systems like Linux and Unix with Active Directory, primarily for centralized user authentication and authorization, where users can log in using their AD credentials, enabling single sign-on and consistent password policies, while also allowing us to manage permissions through AD groups, which simplifies access control, improves security, and reduces the need for maintaining separate local accounts across systems.
In addition, I also use One Identity Safeguard Authentication Services for enforcing centralized security policies, auditing user logins, and ensuring compliance across Linux and Unix systems, which helps improve visibility, reduce security risks, and maintain consistent identity governance across the environment.
How has it helped my organization?
One Identity Safeguard Authentication Services has positively impacted our organization by centralizing authentication for Linux and Unix systems through Active Directory, which simplifies user management, reduces administrative overhead, improves security by enforcing consistent policies and eliminating local accounts, and enhances compliance through better auditing and improved visibility of user access.
Using One Identity Safeguard Authentication Services, we have reduced manual user management effort by around thirty to forty percent, eliminated most local account-related issues, improved login consistency across systems, and made audits faster and easier by having centralized authentication logs and reporting.
What is most valuable?
The features that stand out the most for One Identity Safeguard Authentication Services are centralized authentication in Active Directory, seamless single sign-on for Linux and Unix systems, and strong policy enforcement, as this simplifies user management, enhances security by enforcing consistent credentials and access control, and eliminates the need for managing separate local accounts, making administration more efficient and secure.
I rely the most on centralized authentication in One Identity Safeguard Authentication Services, as it allows Linux and Unix systems to authenticate directly against Active Directory, ensuring consistent access controls, simplifying user management, and reducing administrative overhead in day-to-day operations.
Additionally, I find the auditing and compliance features of One Identity Safeguard Authentication Services very valuable, as they provide detailed visibility into user logins and access activity across Linux and Unix systems, helping with security monitoring, troubleshooting, and meeting compliance requirements.
What needs improvement?
One Identity Safeguard Authentication Services can be improved with a more modern and user-friendly interface, simplified configuration and troubleshooting, especially for complex environments, and better integration with cloud and hybrid identity platforms, along with enhanced reporting and real-time monitoring features to provide deeper visibility and easier management.
Specific improvements that would make daily work easier with One Identity Safeguard Authentication Services would be better troubleshooting and diagnostic tools with clear error messages and a built-in help dashboard, as currently, debugging an authentication or integration issue can take time. Having more intuitive logs, real-time alerts, and guided fixes would significantly improve efficiency and reduce resolution time.
For how long have I used the solution?
I have been using One Identity Safeguard Authentication Services for the last four years.
What do I think about the stability of the solution?
One Identity Safeguard Authentication Services is generally considered a stable solution, with most users reporting reliable performance in production environments with minimal outages, and it is known for handling enterprise workloads efficiently with strong availability and consistent functionality, although minor issues can occasionally occur during updates or complex configurations, which are usually resolved quickly.
What do I think about the scalability of the solution?
One Identity Safeguard Authentication Services performs well in terms of application services and scalability, as it is designed and handles enterprise environments with centralized authentication across multiple Linux and Unix systems, ensuring consistent performance and availability, and it supports a scalable architecture with the ability to extend across large infrastructure without significant performance degradation while also benefiting from high-availability setups and distributed components for load handling. Based on industry feedback, it is consistently considered highly scalable, reliable, and capable of supporting growing user bases and systems efficiently.
How are customer service and support?
My experience with customer support for One Identity Safeguard Authentication Services has been generally positive, and the support team is technically strong and knowledgeable, and most issues are resolved efficiently, especially with standard support requests. Although for more complex problems or escalations, the response time can sometimes be slower, overall, users commonly report good expertise and helpful guidance from the support team.
Which solution did I use previously and why did I switch?
I earlier used local authentication and manual account management on Linux and Unix systems, but I switched to One Identity Safeguard Authentication Services to enable centralized authentication with Active Directory, improve security, and reduce administrative overhead.
How was the initial setup?
My experience with pricing, setup cost, and licensing for One Identity Safeguard Authentication Services has been that it follows an enterprise licensing model with pricing typically customized based on the number of users, systems, and deployment scope. There is no fixed public pricing, and it is generally required to engage with the vendor for a quote. While the cost is on the higher side, it is justified by the security and centralized management capabilities it provides, with the setup requiring initial planning and some complexity during integration with Active Directory.
What about the implementation team?
I did not purchase One Identity Safeguard Authentication Services through the Azure Marketplace. It was procured through a direct enterprise license agreement.
What was our ROI?
I have seen a clear ROI from using One Identity Safeguard Authentication Services, with around a thirty to forty percent reduction in manual user management effort, elimination of most local account maintenance, faster login and access management, and improved audit readiness, which together save administrative time and reduce security risks.
Which other solutions did I evaluate?
Before choosing One Identity Safeguard Authentication Services, I evaluated alternatives like CyberArk Privileged Access Management, BeyondTrust, and Microsoft Entra ID, as these are well-known solutions in the PAM and IAM space, offering similar capabilities such as privileged access control, authentication, and security management. I selected Safeguard because it provided a better balance of easy integration with Active Directory, centralized authentication for Linux and Unix systems, and simpler deployment compared to some of the more complex alternatives.
What other advice do I have?
My advice would be to plan the implementation carefully around Active Directory integration and ensure prerequisites like DNS, time synchronization, and domain connectivity are properly configured, as the solution heavily depends on AD for authentication. Also, follow best practices like role-based access control and least privilege to strengthen security. I give this solution a review rating of ten out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure