CyberArk PAS vs. One Identity Active Roles

As of May 2019, CyberArk PAS is ranked 1st in Access Management with 61 reviews vs One Identity Active Roles which is ranked 5th in Access Management with 6 reviews. The top reviewer of CyberArk PAS writes "Gives us the security of all credentials in one place and lightens our administrative load". The top reviewer of One Identity Active Roles writes "Management features offer added value by showing more fields, while automation helps mitigate risk". CyberArk PAS is most compared with SailPoint IdentityIQ, Cisco ISE (Identity Services Engine) and BeyondTrust Endpoint Privilege Management. One Identity Active Roles is most compared with One Identity Manager, SailPoint IdentityIQ and Softerra Adaxes. See our CyberArk PAS vs. One Identity Active Roles report.
Cancel
You must select at least 2 products to compare!
Most Helpful Review
Find out what your peers are saying about CyberArk PAS vs. One Identity Active Roles and other solutions. Updated: May 2019.
339,601 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
For a while, there were individual IDs having privileged access. We wanted to restrict that. We implemented the solution so that it can be more of internal control. We can have session recordings happening and reduce our attacks.The Password Upload Utility tool makes it easier when setting up a Safe that contains multiple accounts and has cut down the amount of time that it takes to complete the task.There are no issues with scalability. Our clients are very happy to use the product.We are maintaining compliance in PCI, SOX and HIPPA, which is a big thing. Auditors really like it, and it has made us stay compliant.We are able to know who is accessing what and when; having accountability.This solution is quite stable.The most valuable feature is that it always provides flexibility, password quality and one-time user check-in and check-out.I really like the PTA (Privileged Threat Analytics). I find this the best feature.

Read more »

The provisioning and deprovisioning saves a lot of time and skips a lot of errors.It gives us attribute-level control and the AD management features work very well.It's valuable to us in that it resembles the native tools that most people have grown accustomed to... Active Roles resembles traditional tools, such as from Microsoft. That is really good because it eases the way people interact with the tool.The AD and AAD management features of this solution are really good... They offer added value by showing more fields such as password age and the statuses of some things that we normally wouldn't see.It provides automatic provisioning/update/deprovisioning workflows from a source system to a target system.

Read more »

Cons
Integration with the ticketing system should allow any number of fields to be used for validation before allowing a user to be evaluated and able to access a server.Currently, in Secure Connect, an end user is required to enter account information manually, and cannot save any of this information for future use.The initial setup of CyberArk is a challenge if you do not have prior experience with it.Make it easier to deploy.I think having a distributed architecture would certainly help this solution.There was a functionality of the solution that was missing. I had noticed it in Beyond Trust, but not in this solution. But, recently they have incorporated something similar.If we could have some kind of out-of-the box feature that you can simply say "no" so they don't have to go into a development mode, that would a really helpful feature.Tech support staff can be more proactive.

Read more »

For the AAD management feature, it needs to improve the objects that we can manage and the security.Most of the time it just works.It also has workflows and those are really powerful, but there are no built-in workflows. When it comes to them, it's empty. I would personally love for it to come with ten, 15, or 20 workflows where each achieves a certain task... I could just look at how each is done, clone them, copy them, modify them the way I want them, and be good to go. Right now we have to invent things from scratch.For ActiveRoles, it would be good if the product supports multi-scripting language. You can use only VBScript.

Read more »

Pricing and Cost Advice
In comparison to other products on the market, CyberArk is a more costly product.This solution is considered to be more expensive than others out there on the market today.I do not have any opinions to add about the pricing of the product.No, I do not have any advice on the price of the product.Network and security licenses are currently being managed by other outsource vendors, so they are facing some type of problems in the digital aspect.With reducing the privileged account access, there has been a huge improvement. They are now bringing more accounts on a little at a time.If you are looking at implementing this solution, buy the training and go to it.Our risk is definitely significantly lower. Also, our resources are low.

Read more »

The licensing model is a simple user-based model, not that much complicated.

Read more »

report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
339,601 professionals have used our research since 2012.
Ranking
1st
out of 21 in Access Management
Views
42,726
Comparisons
15,621
Reviews
60
Average Words per Review
538
Avg. Rating
8.9
5th
out of 21 in Access Management
Views
3,579
Comparisons
959
Reviews
6
Average Words per Review
585
Avg. Rating
8.8
Top Comparisons
Compared 10% of the time.
Also Known As
CyberArk Privileged Access Security, CyberArk Privileged Account Security, SSH Key Manager, Privileged Session Manager, Privileged Threat Analytics, Application Identity Manager, On-Demand Privileges Manager, Endpoint Privilege ManagerQuest Active Roles
Learn
CyberArk
One Identity
Overview

CyberArk is the trusted expert in privileged account security. Designed from the ground up with a focus on security, CyberArk has developed a powerful, modular technology platform that provides the industry's most comprehensive Privileged Account Security Solution.

Active Roles is a single, unified and rich tool to automate the most troublesome user and group management tasks. With One Identity Active Roles, you can streamline user and group administration, solve security issues – and meet those never-ending compliance requirements by managing and securing on-prem, and cloud AD resources simply and efficiently with a single, intuitive solution.

Offer
Learn more about CyberArk PAS
Learn more about One Identity Active Roles
Sample Customers
Rockwell AutomationCity of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Top Industries
REVIEWERS
Financial Services Firm28%
Insurance Company15%
Healthcare Company10%
Energy/Utilities Company8%
VISITORS READING REVIEWS
Financial Services Firm32%
Retailer13%
Comms Service Provider10%
Energy/Utilities Company9%
No Data Available
Company Size
REVIEWERS
Small Business17%
Midsize Enterprise9%
Large Enterprise74%
VISITORS READING REVIEWS
Small Business11%
Midsize Enterprise12%
Large Enterprise77%
No Data Available
Find out what your peers are saying about CyberArk PAS vs. One Identity Active Roles and other solutions. Updated: May 2019.
339,601 professionals have used our research since 2012.
We monitor all Access Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.

Sign Up with Email