One Identity review

One Identity sells identity security and governance software for managing people, machines, and AI identities across enterprise environments. The suite covers access governance, identity lifecycle tasks, Microsoft identity administration, and privileged accounts. Its main products include Active Roles for hybrid Active Directory and Entra ID, Safeguard for privileged access, and Identity Manager for enterprise applications and identity governance.

This is a set of product modules, not a single all-in-one license with a published standard price. Organizations may use it to automate account and group changes, review who has access, or control privileged credentials and sessions. The product information also names SAP, Oracle, and ServiceNow among the applications supported for governance. That breadth may suit a large organization with mixed systems, but buyers should confirm which modules cover their use cases and what implementation work is required before comparing it with a narrower tool.

The appeal is coverage across several identity problems. Instead of treating employee access, Microsoft directory administration, and privileged accounts as entirely separate categories, One Identity offers products for each. The product information lists:

• Identity governance: Govern access across enterprise applications, including SAP, Oracle, and ServiceNow.
• Microsoft identity management: Active Roles supports hybrid Active Directory and Entra ID environments.
• Lifecycle automation: Automate identity lifecycles and manage groups using rules.
• Privileged access: Safeguard supports zero standing privileges and session recording.
• Credential management: Automate credential vaulting for administrators and machine workloads.
• Access reviews: Identity Manager automates attestations and supports behavior analytics and role rationalization.

That mix gives enterprise buyers several potential ways to consolidate identity controls under one vendor. In particular, organizations with hybrid Microsoft directories and privileged workloads may find the product lineup relevant. The published material does not establish that every capability is included in one package, though; licensing varies by product module, so the practical advantage depends on the quote and the modules selected.

The biggest buying drawback is pricing opacity. The available pricing information describes custom, quote-based enterprise licensing through sales or an authorized partner. It lists no monthly or annual price, no seat or usage limits, and no standard unit of purchase. There is no free plan; a 30-day trial is listed only for Password Manager and select products. That makes it hard to compare total cost before a sales conversation, and buyers should request module-level pricing, implementation costs, and renewal terms in writing.

There is also a cautionary, product-specific user report: in one Reddit thread, a Safeguard Privilege Manager for Windows customer described unreliable elevation commands and prompts. Other commenters questioned whether deployment and requirements gathering contributed, while some reported similar trouble. This is anecdotal, not proof of a general product defect, but it is a reason to validate the exact workload in a pilot. The published material does not publish migration steps, plan caps, or service requirements, so those are questions to resolve with One Identity before switching.

One Identity does not publish a standard price list in the published pricing information. Its listed plan is Custom Enterprise, with pricing provided by sales or an authorized partner. The price depends on the product modules; seat and usage limits are not published. There are no tier prices to compare, so we can’t identify a price jump between tiers or estimate a typical contract cost.

The pricing record lists a 30-day free trial for Password Manager and select products. It does not say which other products qualify. Monthly and annual billing terms are also not published, and the published data lists no add-on prices. That does not confirm that every module or service is included in a quote.

Before comparing offers, ask for an itemized quote covering each module, identity or usage limits, support, implementation, renewal terms, and any optional services. Without those details, buyers cannot make a reliable cost comparison from public pricing alone.

The published product information describes coverage across Microsoft identities, enterprise applications, identity governance, and privileged access. That breadth makes scoping important: map the systems, identity types, policies, and workflows in scope before committing to a migration. The available material does not publish migration tools, implementation timelines, data-export formats, or transition costs, so confirm each directly with One Identity or its authorized partner.

Before switching in, ask how existing roles, access certifications, lifecycle rules, credentials, and audit records can be transferred—and what needs rebuilding. Before switching out, request a sample export and confirm which records and configurations remain usable outside the platform. These are questions to verify, not documented export guarantees.

The published material mentions uneven anecdotal feedback but includes no Reddit posts or specific reasons people leave. We can’t responsibly attribute churn to a particular issue. Treat migration effort, portability, and deployment fit as items to validate with references from organizations using the same modules.