Safeguard Authentication Services by One Identity Reviews

I have been using One Identity Safeguard Authentication Services for the last one year. Use cases for One Identity Safeguard Authentication Services are prominent in my operations. In my day-to-day work, I use One Identity Safeguard Authentication Services as a daily work tool within the organization. I use Safeguard authentication service for daily operations within the organization. One Identity Safeguard Authentication Services is mainly used for securing privileged accounts, managing user access, password vaulting, and controlling access to critical systems and servers. I also use One Identity Safeguard Authentication Services for session monitoring.

The best features of One Identity Safeguard Authentication Services are numerous. The features that stand out to me the most are multi-factor authentication, centralized privileged access management, granular access control and approval workflows, secure remote access for vendors and third parties, real-time monitoring, and audit reporting.

The features of One Identity Safeguard Authentication Services provide the most value in improving security, simplifying Linux and Unix access management, and reducing administrative overhead in enterprise environments. One Identity Safeguard Authentication Services has impacted my organization positively because after using One Identity Safeguard, it has improved my environment and strengthened centralized authentication, simplifying Linux and Unix access.

Since implementing One Identity Safeguard Authentication Services, I have achieved around a 30% to 40% reduction in manual user management efforts and improved authentication consistency across Linux and Unix systems.

There are some improvements needed in One Identity Safeguard Authentication Services. Specific areas that need improvement in One Identity Safeguard Authentication Services include reporting and cloud integration to make administration easier and more efficient. I did not rate One Identity Safeguard Authentication Services a ten because areas like interface usability, troubleshooting complexity, reporting capabilities, and cloud integration still have room for improvement.

More improvements needed for One Identity Safeguard Authentication Services could include enhancements in areas like UI modernization, easier troubleshooting, better reporting, and simplified cloud and hybrid integration capabilities.

I have been working in my current field for the last 3.5 years.

One Identity Safeguard Authentication Services is stable.

One Identity Safeguard Authentication Services scales well and can efficiently support large enterprise environments with many Linux and Unix systems and users.

Customer support for One Identity Safeguard Authentication Services was pretty good.

Before using One Identity Safeguard Authentication Services, I relied on local authentication and manual account management for Linux and Unix systems.

I have achieved good ROI with One Identity Safeguard Authentication Services through reduced manual user management efforts, fewer authentication issues, improved security, and faster audit and compliance processes.

My experience with pricing, setup cost, and licensing with One Identity Safeguard Authentication Services is moderate, and the price is moderate. Efforts for Active Directory integration and licensing are typically based on user or managed systems.

Before choosing One Identity Safeguard Authentication Services, I evaluated some other options like CyberArk Privilege Access Manager and BeyondTrust Privileged Remote Access.

Organizations should invest in administrator training and proper documentation for One Identity Safeguard Authentication Services, especially around troubleshooting, policy management, and hybrid integrations to ensure smoother operations and faster issue resolution in large enterprise environments. I would provide advice to organizations looking into using One Identity Safeguard Authentication Services, focusing on centralized authentication, strong Active Directory integration, and simplified Linux and Unix access management with improved security and compliance. I would give this review a rating of seven.

My main use case for One Identity Safeguard Authentication Services is for Active Directory. One Identity Safeguard Authentication Services helps us to integrate non-Windows systems like Linux and Unix with Active Directory, primarily for centralized user authentication and authorization, where users can log in using their AD credentials, enabling single sign-on and consistent password policies, while also allowing us to manage permissions through AD groups, which simplifies access control, improves security, and reduces the need for maintaining separate local accounts across systems.

In addition, I also use One Identity Safeguard Authentication Services for enforcing centralized security policies, auditing user logins, and ensuring compliance across Linux and Unix systems, which helps improve visibility, reduce security risks, and maintain consistent identity governance across the environment.

One Identity Safeguard Authentication Services has positively impacted our organization by centralizing authentication for Linux and Unix systems through Active Directory, which simplifies user management, reduces administrative overhead, improves security by enforcing consistent policies and eliminating local accounts, and enhances compliance through better auditing and improved visibility of user access.

Using One Identity Safeguard Authentication Services, we have reduced manual user management effort by around thirty to forty percent, eliminated most local account-related issues, improved login consistency across systems, and made audits faster and easier by having centralized authentication logs and reporting.

The features that stand out the most for One Identity Safeguard Authentication Services are centralized authentication in Active Directory, seamless single sign-on for Linux and Unix systems, and strong policy enforcement, as this simplifies user management, enhances security by enforcing consistent credentials and access control, and eliminates the need for managing separate local accounts, making administration more efficient and secure.

I rely the most on centralized authentication in One Identity Safeguard Authentication Services, as it allows Linux and Unix systems to authenticate directly against Active Directory, ensuring consistent access controls, simplifying user management, and reducing administrative overhead in day-to-day operations.

Additionally, I find the auditing and compliance features of One Identity Safeguard Authentication Services very valuable, as they provide detailed visibility into user logins and access activity across Linux and Unix systems, helping with security monitoring, troubleshooting, and meeting compliance requirements.

One Identity Safeguard Authentication Services can be improved with a more modern and user-friendly interface, simplified configuration and troubleshooting, especially for complex environments, and better integration with cloud and hybrid identity platforms, along with enhanced reporting and real-time monitoring features to provide deeper visibility and easier management.

Specific improvements that would make daily work easier with One Identity Safeguard Authentication Services would be better troubleshooting and diagnostic tools with clear error messages and a built-in help dashboard, as currently, debugging an authentication or integration issue can take time. Having more intuitive logs, real-time alerts, and guided fixes would significantly improve efficiency and reduce resolution time.

I have been using One Identity Safeguard Authentication Services for the last four years.

One Identity Safeguard Authentication Services is generally considered a stable solution, with most users reporting reliable performance in production environments with minimal outages, and it is known for handling enterprise workloads efficiently with strong availability and consistent functionality, although minor issues can occasionally occur during updates or complex configurations, which are usually resolved quickly.

One Identity Safeguard Authentication Services performs well in terms of application services and scalability, as it is designed and handles enterprise environments with centralized authentication across multiple Linux and Unix systems, ensuring consistent performance and availability, and it supports a scalable architecture with the ability to extend across large infrastructure without significant performance degradation while also benefiting from high-availability setups and distributed components for load handling. Based on industry feedback, it is consistently considered highly scalable, reliable, and capable of supporting growing user bases and systems efficiently.

My experience with customer support for One Identity Safeguard Authentication Services has been generally positive, and the support team is technically strong and knowledgeable, and most issues are resolved efficiently, especially with standard support requests. Although for more complex problems or escalations, the response time can sometimes be slower, overall, users commonly report good expertise and helpful guidance from the support team.

I earlier used local authentication and manual account management on Linux and Unix systems, but I switched to One Identity Safeguard Authentication Services to enable centralized authentication with Active Directory, improve security, and reduce administrative overhead.

My experience with pricing, setup cost, and licensing for One Identity Safeguard Authentication Services has been that it follows an enterprise licensing model with pricing typically customized based on the number of users, systems, and deployment scope. There is no fixed public pricing, and it is generally required to engage with the vendor for a quote. While the cost is on the higher side, it is justified by the security and centralized management capabilities it provides, with the setup requiring initial planning and some complexity during integration with Active Directory.

I did not purchase One Identity Safeguard Authentication Services through the Azure Marketplace. It was procured through a direct enterprise license agreement.

I have seen a clear ROI from using One Identity Safeguard Authentication Services, with around a thirty to forty percent reduction in manual user management effort, elimination of most local account maintenance, faster login and access management, and improved audit readiness, which together save administrative time and reduce security risks.

Before choosing One Identity Safeguard Authentication Services, I evaluated alternatives like CyberArk Privileged Access Management, BeyondTrust, and Microsoft Entra ID, as these are well-known solutions in the PAM and IAM space, offering similar capabilities such as privileged access control, authentication, and security management. I selected Safeguard because it provided a better balance of easy integration with Active Directory, centralized authentication for Linux and Unix systems, and simpler deployment compared to some of the more complex alternatives.

My advice would be to plan the implementation carefully around Active Directory integration and ensure prerequisites like DNS, time synchronization, and domain connectivity are properly configured, as the solution heavily depends on AD for authentication. Also, follow best practices like role-based access control and least privilege to strengthen security. I give this solution a review rating of ten out of ten.

We use the solution for compliance with password requirements and enhanced security. It allows us to adhere to various SOX compliance requirements. 

The ease of administration has reduced the amount of time my team spends on access requests for Red Hat servers. It's ability to utilize Active Directory accounts and network passwords to access the servers that have been added to the domain. We have the ability to utilize domain services on older Red Hat Linux servers where the native tool doesn't support earlier versions. 

The solution allows us to utilize command restriction to prevent so much root access from being allowed while also deploying to multiple servers to maintain consistency.

This has greatly reduced my team's time on account management within our Red Hat environment. We were also able to pass some of the routine access requests to our Helpdesk/Desktop Support team to lighten my team's workload. Less password reset and unlock requests have come through to our team since the servers utilized Active Directory accounts for access. Users do not have to remember so many different username and password combinations to access the servers they manage.

We like that we have user accounts and passwords that match our domain so users are not trying to remember 30 different usernames and passwords for various servers. The command restrictions prevent so much root access from being allowed. We are able to utilize GPO to push policy down to multiple servers rather quickly. The product also supports older versions of Red Hat in our environment. This allows us to maintain security on these servers that are already vulnerable due to age until we can fully get them out of the environment. 

Sometimes, policy changes must be forced in by removing and re-applying policies locally on the server. It would be nice to see that the check-in process happens more often and that those changes happen much quicker on its own. 

Since this is tied to Group Policy, seeing some support around Advanced Group Policy Management would be nice. We are tightening security and processes around Group Policy in our domain, but Advanced Group Policy Management does line up with how Authentication Services work without the security and check-in/out process that AGPM has. 

I've used the solution for the last three years. That said, previously, we had used it for a couple of years, many years ago. 

The solution is mostly stable; it has some quirks at times.

Scalability is typically around licensing - buy more, and you can simply add more servers.

Support has always been very helpful. KBs are always easy to find. 

Positive

We only tested the native AD join tool that came out around RHEL 7. We switched to Authentication Services as it offered support for older versions of RHEL where the native solution didn't. 

The initial setup is straightforward.

We did the setup in-house.

ROI is more around manhours saved with administration around user accounts going from locally managed individually to globally managed through AD and applying configuration and policy settings at scale instead of individually. 

Setup is simple, however, the cost can be expensive. 

We did look into the RHEL native AD join tool.