We performed a comparison between One Identity Active Roles and SailPoint IdentityIQ based on real PeerSpot user reviews.
Find out in this report how the two User Provisioning Software solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."Having a tool to manage all changes to AD from a single pane of glass is awesome."
"The solution is stable."
"The biggest thing for us is Active Roles saves a lot of man-hours in keeping groups up-to-date manually or trying to write some sort of script that you have to run, so we don't have to reinvent the wheel. Instead of when every time somebody joins a department, then somebody has to remember to put in a request to add "meet user Joe" to this group, the solution does it automatically for us. Therefore, it saves our business and IT staff time because they do not have to process requests since Active Role can do it for them."
"Secure access is the most valuable feature."
"The provisioning and deprovisioning saves a lot of time and skips a lot of errors."
"Instead of deleting accounts, we like the deprovision option so that we can reverse any accidental deletions. It also gives a higher level of quality control in terms of enforcing any number of variables, such as making sure that an account has a description entered before the account can be created. We can backtrack and know the history of it that way."
"It's valuable to us in that it resembles the native tools that most people have grown accustomed to... Active Roles resembles traditional tools, such as from Microsoft. That is really good because it eases the way people interact with the tool."
"In comparison to native Active Directory tools, using Active Roles for delegation is so much better. It uses an access template and that makes it easy to see who can access what. In fact, you can do that for many objects as well."
"It significantly reduces the workload for certification processes."
"This solution is easy to configure."
"Good life cycle management, segregation of duties, and analytics features."
"Deployment takes a bit of time, however, once it's done properly, everything becomes very organized and easy to use."
"The access certification feature is valuable."
"We like the integration with other systems."
"This solution has made our team more effective. We need less manual approvals when someone new joins our company. There is less paperwork and fewer support tickets raised for access."
"The solution is stable and reliable."
"It also has workflows and those are really powerful, but there are no built-in workflows. When it comes to them, it's empty. I would personally love for it to come with ten, 15, or 20 workflows where each achieves a certain task... I could just look at how each is done, clone them, copy them, modify them the way I want them, and be good to go. Right now we have to invent things from scratch."
"The way you can search groups could be better."
"The initial setup was quite easy, but it was time-consuming. It took about three months."
"For ActiveRoles, it would be good if the product supports multi-scripting language. You can use only VBScript."
"The solution needs an attestation process that includes certification and recertification attestation."
"In terms of improvement, it could be made even more user-friendly for administrators when they need to create new workflows and rule sets."
"The third area for improvement, which is the weakest portion of ARS, is the workflow engine, which was introduced a few years ago. It's slow and not very intuitive to use, so I would like to see improvement there."
"The ability to send logs to a SIEM would be very beneficial."
"We faced some issues while integrating the solution with a third-party tool."
"I think that the onboarding framework could be improved."
"Finding integration experts for SailPoint in the North American market can be challenging, and transitioning to a no-code or low-code setup could reduce dependence on specialized skills."
"It is too technical. You need really good technical skills in Java and other technologies, which are hard to find. If they can make it easier so that things can be done with a few clicks, it will be great."
"We have had a lot of service breaks because of the lack of support."
"When it comes to queries and analysis, I find the reporting module to be very low, very simple."
"The interface should be simple and easier to use."
"The product must improve its support."
One Identity Active Roles is ranked 5th in User Provisioning Software with 17 reviews while SailPoint IdentityIQ is ranked 1st in User Provisioning Software with 61 reviews. One Identity Active Roles is rated 8.6, while SailPoint IdentityIQ is rated 8.2. The top reviewer of One Identity Active Roles writes "Single interface and workflows simplify AD and Azure AD management efficiency and security". On the other hand, the top reviewer of SailPoint IdentityIQ writes "Flexible, easy to customize, and not too difficult to set up". One Identity Active Roles is most compared with Microsoft Entra ID, ManageEngine ADManager Plus, One Identity Manager, Softerra Adaxes and NetIQ Directory and Resource Administrator, whereas SailPoint IdentityIQ is most compared with Saviynt, One Identity Manager, Microsoft Entra ID, ForgeRock and Microsoft Identity Manager. See our One Identity Active Roles vs. SailPoint IdentityIQ report.
See our list of best User Provisioning Software vendors.
We monitor all User Provisioning Software reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
