Identity Governance and Administration (IGA) Software
One Identity Manager: features, pricing and who it fits
One Identity Manager is an enterprise suite with attestation, business roles and policy-based provisioning, offered as SaaS or self-managed software by One Identity, part of Quest Software. SAP connectivity is included in standard licensing. Cloud applications need the separate Starling Connect add-on.
Who One Identity Manager is for
Best for
- Large enterprises with hybrid Active Directory and SAP estates
- Teams that need a self-managed or fully managed deployment choice
- Organizations that want attestation and business-role governance in one suite
Look elsewhere if
- Small teams wanting public pricing and self-serve signup
- Buyers who want a fast, no-consultant rollout
One Identity Manager features
- Provisioning automation
- Automated provisioning for on-premises, cloud and hybrid resources; cloud applications use the separate Starling Connect add-on
- Access reviews and certification
- Attestation policies define what is attested, how often and by whom; business-role and application-role attestation are covered in the 9.2 admin guide
- Role management
- Business roles and application roles with attestation; role mining detail not confirmed by the vendor
- Segregation of duties controls
- SoD controls documented for SAP (R/3 and S/4HANA); behavior-driven governance for SoD violations is vendor-described
- Integrations and connectors
- SAP connectivity included in standard licensing; cloud apps via Starling Connect; connector count not published on pages opened
- Compliance and audit reporting
- Compliance rules with violation reports, attestation and an auditor role in the web portal
- Pricing model
- Quote only; subscription or tiered per-user licensing with modules, per vendor pages
- Target company size
- Global enterprises; no SMB tier described
Integrations, security and hosting
Worth knowing before you buy
- SAP IDM reaches end of life in 2027 per One Identity's SAP page, and One Identity markets Identity Manager as the migration path
- Cloud applications need Starling Connect on top of the Identity Manager license
- Sold as Identity Manager SaaS, On Demand and self-managed; the vendor says deployment ranges from self-managed to fully managed
- Gartner Peer Insights shows about 4.5 from roughly 205 ratings for One Identity in IGA
One Identity Manager alternatives
Vendor dossier
Fit by company size
| Category | 1-10 people | 11-50 people | 51-500 people | 500+ people |
|---|---|---|---|---|
| Identity Governance and Administration (IGA) Software | Poor fit | Poor fit | No data | Strong fit |
Strong fitWorkablePoor fitNo data from the vendor
How buying One Identity Manager works
- How you buy
- Through sales
- Demo or quote needed for
- All editions
About the company
- Founded
- 2016
- Headquarters
- Aliso Viejo, California, US
- Ownership
- part of Quest Software (owned by Clearlake Capital since 2021)
- 2016
- Dell sold its software group; Quest Software and One Identity separated as independent companies
- 2018
- Acquired Balabit (privileged access)
- 2021
- Acquired OneLogin
Switching to One Identity Manager
Official ways to bring your data over, as documented by One Identity Manager:
- From SAP Identity Management: vendor positions Identity Manager as the path ahead of SAP IDM end of life in 2027
Support and integrations
- Notable integrations
- SAP R/3, SAP S/4HANA, Starling Connect (cloud apps)
What vendors in this category ask before quoting
Answer these once in a SaaSBid request and One Identity Manager and its alternatives quote against the same facts.
- How many identities, including contractors and service accounts, need to be governed?Most vendors price per identity, and the count sets the tier.
- Which directory and identity provider do you use today?Okta, Entra and Ping add-ons only work on their own platforms.
- Which business applications and on-premises systems must be connected?Connector coverage drives implementation effort and may require extra licenses.
- Which audits or regulations drive this project?SOX or similar rules make separation-of-duties controls a requirement.
- Do you want SaaS, a private cloud or software run in your own data center?Deployment model changes price, timeline and staffing.
- What is your target go-live, and do you have identity engineers in-house?It decides whether a partner or accelerator program is needed.