ARCON Privileged Access Management vs One Identity Manager comparison

The compared ARCON and One Identity solutions aren't in the same category. ARCON is ranked #8 in PAM , with an average rating of 8.3, and holds a 2.6% mindshare in the category. One Identity is ranked #3 in IAM , with an average rating of 8.1, and holds a 4.9% mindshare. Additionally, 89% of ARCON users are willing to recommend the solution, compared to 91% of One Identity users who would recommend it.

ARCON Privileged Access Man...

Read 36 ARCON Privileged Access Management reviews

2,173 Views
1,956 Comparison Views

89% willing to recommend

One Identity Manager

Read 136 One Identity Manager reviews

7,806 Views
6,011 Comparison Views

91% willing to recommend

ARCON Privileged Access Man...

One Identity Manager

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between ARCON Privileged Access Management and One Identity Manager based on real PeerSpot user reviews.

Find out what your peers are saying about CyberArk, One Identity, Delinea and others in Privileged Access Management (PAM).

To learn more, read our detailed Privileged Access Management (PAM) Report (Updated: January 2026).

Buyer's Guide

Privileged Access Management (PAM)

January 2026

Download the complete report

Helped 881,821 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ARCON Privileged Access Man...

Average Rating

7.8

Reviews Sentiment

7.6

Number of Reviews

Ranking in other categories

Privileged Access Management (PAM) (8th)

One Identity Manager

Average Rating

8.2

Reviews Sentiment

6.7

Number of Reviews

136

Ranking in other categories

User Provisioning Software (1st), Identity Management (IM) (3rd)

Mindshare comparison

While both are Identity and Access Management solutions, they serve different purposes. ARCON Privileged Access Management is designed for Privileged Access Management (PAM) and holds a mindshare of 2.6%, down 3.7% compared to last year.
One Identity Manager, on the other hand, focuses on Identity Management (IM), holds 4.9% mindshare, down 6.9% since last year.

Privileged Access Management (PAM) Market Share Distribution
Product	Market Share (%)
ARCON Privileged Access Management	2.6%
CyberArk Privileged Access Manager	11.2%
Delinea Secret Server	5.0%
Other	81.2%

Privileged Access Management (PAM)

Identity Management (IM) Market Share Distribution
Product	Market Share (%)
One Identity Manager	4.9%
SailPoint Identity Security Cloud	13.7%
Microsoft Entra ID	8.9%
Other	72.5%

Identity Management (IM)

Featured Reviews

Daleep Singhal

System and DBA at a energy/utilities company with 1,001-5,000 employees

Enhanced security through session monitoring and activity recording

From an end-user point of view, it would be beneficial if the system could provide information about the last login. This would help identify if the server was accessed by me or if someone has potentially stolen my credentials. It would provide a clearer picture of whether ARCON Privileged Access Management is accessed by an authentic user.

Read full review

reviewer2538840

Senior identity and security specialist at a pharma/biotech company with 1,001-5,000 employees

Highly flexible and stable, but lacks in many aspects and requires a strong partner

In terms of providing a single platform for enterprise-level administration and governance of users, data, and privileged accounts, One Identity is not yet there. One Identity recently bought OneLogin. They already had Safeguard and One Identity Manager. They have started integrating these three tools. I am also on the customer advisory board (CAB) of One Identity, so I have more insight into these things. I know that they started to integrate OneLogin and One Identity just recently. OneLogin is their access management tool. They use it for authentication and for SSO. It is a competitor for Entra and Okta, whereas Safeguard is competing with CyberArk, Delinea, and BeyondTrust. One Identity has indeed done good integration between their three products. However, the platform is not unified. You still need three URLs, which is not optimal. They are going there, but it will take them time. The second thing they are not yet good at is their SaaS offering. They are behind in the market. They started with something in Safeguard, but it is a pretty basic offering. It is still a new baby. They have Safeguard On Demand, but it is just a hosted PAM solution. I did PoC for Safeguard twice. This is how I know this, but I have not used it. As PAM, Safeguard is a good product, but it is not a full-featured PAM like CyberArk or BeyondTrust. They are lacking in that aspect. The integration between One Identity's products is similar to BMC's integration. I used to work with BMC products such as BMC Remedy ten years ago. I used to be an ITSM or Control-M guy. When BMC integrated its products, the integration was not well done. It was like two different entities trying to integrate with each other rather than one company giving you a fully-fledged platform. The same thing is happening with One Identity Manager at the moment. They are selling it as a unified platform, but in my opinion, it is not yet good. It is also not bad. There are things that I can take from it, but there is no complete picture. The problem nowadays is that vendors are getting into each other's areas. For example, CyberArk used to be just a PAM provider, so people would integrate with it, but now, CyberArk wants to do the identity bit. It has now become a competitor for other vendors, so they will stop integrating with it. SailPoint, at some point, stopped integrating with CyberArk. SailPoint and CyberArk's integration was good. This is what is happening in the market or between vendors. All of them are getting into each other's area. If you happen to buy another product from a competitor, you need to integrate it on your own. There is no integration plug-in concept between them. This is a bit hard for companies that already have a PAM and they want to buy a new IGA, for example, or vice versa. They are trying to shift towards an Angular-based platform for their web portal or for IT Shop. That has been very long overdue because they did not modernize their web portal for almost three versions. They are doing it, but there is no feature parity till version 9.3, which is the upcoming version. This is a problem. For example, data governance is not included in 9.2 if you want to upgrade, but if you do not upgrade, you lose support. They have these issues with the roadmap in general. They give you options, but they are not always the complete options. To me, it seems that this company is going to suffer in the long run. Another issue is that for admin requests, we have to configure the tool at least in seven different clients, which is unacceptable. We are in 2024, not in 1981 or 1985. Having seven clients for the same tool, or more, is just unheard of. To me, that is a very old design idea. I am on the newest version 9.2, and I am still doing that. To me, that is a big problem as an admin. The relationship with the customers is extremely bad. That is not a technical problem. That is a company problem. They tried to fix that, but it seems they failed. They do not have the personnel. They have a hiring problem. They now rely on partners. They are a type of company where the partner is more of a vendor to you as a client rather than the company itself. If you want to pick any solution by One Identity, you need a very strong partner with you. If you do not, you will struggle with this product's adoption, roadmap, vision, and implementation. We struggle a lot as a client. I have been there. I have seen that. It is not easy with them. One Identity is based in Europe. Our account manager at One Identity resigned in May and till now, just to show how bad they are, we do not know who our new account manager is. We are in August. Their Starling Connect roadmap or flagship is a failure. We had to withdraw from using it with SuccessFactors, for example. It had a lot of stability issues. Now, my understanding is better, but it caused a bad implementation, so we are not using it. They are not investing a lot in enhancing or extending Starling Connect. They are using Starling Connect as a propagation gateway to SaaS apps so that you have One Identity Manager on-prem talking to Starling Connect which is handling all SaaS apps. However, the roadmap for Starling Connect is not clear. Now that they have bought OneLogin, OneLogin can do that as well as an IAM tool. You can now bring any IAM or CIAM tool such as Entra, Okta, or OneLogin. They can be your propagation gateway. OneLogin and Starling Connect are competing products, and they need to unify them. They cannot have both products doing the same thing. When I discussed this with the head of engineering from their side, they were still defending having Starling Connect. I do not understand why because if you have a proper IAM such as Entra or Okta, that is your propagation gateway. That is it. You can do everything you want with it. You can merge the functionality, and that is it. You do not need Starling Connect. To me, this is confusing. You use a propagation gateway like Starling Connect because it has ready plug-ins to connect to SaaS apps and you do not need to create a custom connector every time. If you look at the number of apps that One Identity supports with Starling Connect, there are not more than 50, which is not a lot. There is a big difference when you compare it to Okta Marketplace or Entra Marketplace. You will immediately understand the difference. OneLogin's marketplace is better than Starling Connect, but OneLogin was not a part of One Identity before, so they had their own marketplace. Overall, the Starling Connect roadmap does not make sense to me. They need to remove the dependency on VB.NET for backend development and they need to unify the front end. If they are selling it as a unified product, they need to give me a unified UX. This is something I have mentioned to Mark Logan himself. This is how ServiceNow won over Remedy. Having a unified UX and being able to turn on or off a feature is better than trying to connect three or four different products with different contracts. To me, the main thing is that they need to modernize their application. Once we do that, making it SaaS is doable.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is recording video records for Windows and command-line reports for others, Linux and AIX, of whatever activities being carries by that particular administrator."

"One of the main benefits we've experienced is that Arcon helps us manage all our team's tasks and provides recording capabilities."

"The initial setup was very simple. There was only one server we had to setup. We needed to store all the passwords, and a secure database is used."

"Video and audio logs are there for any activities that the privileged admin carries out."

"The initial setup is very straightforward. It's not complex at all."

"The session management capabilities are helpful. The session recording feature for system handling is good. It also eliminates the need to open many ports for end-users, simplifying access."

"The best part of this product is the administrator convenience. The portal is very user-friendly. An administrator can use it very easily."

"The entire conversation that is happening between the servers and the client is recorded. It is a good feature if you want to do some analysis, and for investigation."

More ARCON Privileged Access Management pros

"This solution has helped to increase employee productivity when it comes to provisioning users in our systems. This solution has been really been effective with our retail workers. It wouldn't be possible to onboard and manage our 40,000 store employees without it. The management of the solution is pretty automated."

"I like how One Identity Manager is designed. We can control granular-level permissions. Compared to SailPoint and CyberArk, we can go granular in the access levels. We can control it at the table, column, and database levels. That's the power of One Identity."

"One Identity enables us to provide users with permissions for only the roles that they need. We can use segmentation to ensure that users don't have roles that can cause trouble in the business."

"One Identity Manager is a very robust tool with plenty of out-of-the-box features in the identity and access management space, and it is very easy to customize and fits for very complex platforms."

"It ensures high security through multiple approval processes, preventing unauthorized access and enhancing compliance by providing time-based access for privileged accounts with proper audit trails."

"One Identity Manager was the right decision in comparison to other market products."

"The most valuable feature of One Identity Manager is its object-oriented architecture."

"For me, personally, the automation is the most valuable feature. I don't have to do things manually, like creating user accounts and provisioning them to the target systems."

More One Identity Manager pros

Cons

"I suggest implementing password rotation for service-based accounts, as that should be included."

"There is often a slow response when logging into routers, switches, or servers compared to direct access."

"If you take Microsoft hypervisor - which comes with its own interface, its own web layer, etc. - something like that also requires privileged IDs. As per our institution policy now, everything has to come through ARCON. We have demanded that these kind of advanced features also should be there."

"A few areas for improvement in ARCON would be performance optimization, ensuring smoother management."

"One common problem I faced with ARCON PAM was compatibility issues with certain software versions."

"It should support the SQL Always On platform with FQDN name instead of IP."

"Currently, we can manage only the SSH or RDP connections, but there are many more devices that are present, apart from our SSH and RDP. We want all this to be part of the ARCON solution. For the password management, they should increase the pool of supported devices, they should have more connectors."

"I would like for it to be dependent on Windows as opposed to Linux."

More ARCON Privileged Access Management cons

"Their support is inadequate."

"One of the things we would like is the ability to have more than one system role manager. That would be nice. For example, when people are on vacation, sometimes it gets a little hard to administrate system roles."

"One Identity Manager can be made more user-friendly for end users."

"The framework is robust and flexible, allowing companies to easily adopt and extend the schema as needed."

"Quest Software should provide notes and documents to customers before they buy the product and license."

"There is a small area inside of the administrator's GUI that could be a little bit more organized."

"The client application should transition to a web-based interface to improve administration flexibility. Improvements are also needed in the analytics, peer comparison, and recommendation features, as these areas were added later and require more development. More flexibility in the portal is needed for multi-tenant environments."

"The solution's intuitiveness requires almost a complete redesigning in terms of user experience."

More One Identity Manager cons

Pricing and Cost Advice

"There are no major concerns with licensing because we can handle multiple servers in our kiosk system."

"The solution’s pricing is neither cheap nor expensive."

"It is good value for our business. According to me, their competitors are more costly. Therefore, it is quite affordable. I find the ARCON to be much cheaper than the other products in the market."

"ARCON is a will give you all the features in a very cost-effective solution. Pricing and licensing is very good compared to other players in the market."

"Pricing is reasonable."

"Product pricing is based on users and connections. We did not have to pay more for additional features."

"ARCON Privileged Access Management's pricing is reasonable."

"The cost of this product is very cheap, comparatively in the global market."

More ARCON Privileged Access Management pricing and cost advice

"One Identity Manager's pricing is competitive and in line with what other companies offer."

"It is cost-effective. I do not know about the other regions, but here in the Middle East, the competitors are almost double the price."

"It is fairly priced because they provide all the features by default. That is why they charge a bit more than other vendors. I am not sure about the exact cost part, but One Identity is a little bit more expensive than IBM and other tools."

"The licensing for One Identity Manager is per user, per carbon life, specifically, it's per people, and not a per-identity licensing model. For example, if I have two hundred people, or if I have someone with several identities, I'm only paying for it once. I don't remember the exact cost of One Identity Manager because I wasn't the one who paid for the license."

"We are using a self-built solution. It would cost too much to get that up to the standard of what we need. In the long-term, it is cheaper to buy a solution that has what we need. Though, we are still running the previous solution, as we are still in the implementation phase."

"There is a one-time licensing cost, and there is also a yearly subscription fee."

"One Identity Manager has a reasonable price point."

"It's not cheap, but the pricing is okay. Other applications cost about the same."

More One Identity Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.

See recommendations

881,821 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

Financial Services Firm

Manufacturing Company

Government

Financial Services Firm

12%

Manufacturing Company

Computer Software Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	11
Large Enterprise	17

By reviewers
Company Size	Count
Small Business	46
Midsize Enterprise	19
Large Enterprise	90

Questions from the Community

What do you like most about ARCON Privileged Access Management?

The product's deployment phase was easy.

See all answers

What is your experience regarding pricing and costs for ARCON Privileged Access Management?

The pricing is considered not expensive and is best priced.

See all answers

What needs improvement with ARCON Privileged Access Management?

See all answers

What do you like most about One Identity Manager?

The One Identity birthright process has helped generate user accounts more accurately and quickly.

See all answers

What is your experience regarding pricing and costs for One Identity Manager?

The licensing and setup cost is on the higher side, but it is delivering more features. The pricing is worth it.

See all answers

What needs improvement with One Identity Manager?

One Identity Manager could be improved with more modern features such as artificial intelligence or faster workflow configuration for complex environments, expanded out-of-the-box integration with ...

See all answers

Comparisons

CyberArk Privileged Access Manager vs ARCON Privileged Access Management

Compared 21% of the time

ManageEngine PAM360 vs ARCON Privileged Access Management

Compared 21% of the time

WALLIX Bastion vs ARCON Privileged Access Management

Compared 7% of the time

BeyondTrust Endpoint Privilege Management vs ARCON Privileged Access Management

Compared 7% of the time

Delinea Privileged Access Service vs ARCON Privileged Access Management

Compared 4% of the time

More ARCON Privileged Access Management Competitors

SailPoint Identity Security Cloud vs One Identity Manager

Compared 18% of the time

Microsoft Entra ID vs One Identity Manager

Compared 12% of the time

One Identity Active Roles vs One Identity Manager

Compared 7% of the time

Microsoft Entra ID Protection vs One Identity Manager

Compared 5% of the time

EVOLVEUM midPoint vs One Identity Manager

Compared 4% of the time

More One Identity Manager Competitors

Product Reports

Buyer's Guide

ARCON Privileged Access Management

February 2026

ARCON Privileged Access Management report

Download ARCON Privileged Access Management product report

Buyer's Guide

One Identity Manager

January 2026

Download One Identity Manager product report

Also Known As

ARCON ARCOS, ARCON PAM

Quest One Identity Manager

Overview

ARCON PAM is a full blown Privileged Access Management solution. It has a robust password vaulting technology that comes with AES- 256 Database encryption. Dual Factor Authentication, 4Eye Authentication functionalities and Granular Access Control enables an enterprise to block any unauthorized access attempt to critical information assets. All access is based on “Need to know” and “Need to do” basis. It has the largest connector stack. Its Single Sign On enables seamless access to a host of devices with just a single click.

The Solution enables an enterprise to monitor and analyze advanced threats in a real time. It has the best-in-class real-time threat analytics. It provides comprehensive audit trails and session recordings to ensure that all activities are tracked and these logs are encrypted and separately stored creating a legal hold.

Further, it has a highly scalable architecture that easily integrates with Third Party SIEM Solutions. It also supports cloud environment.

ARCON PAM is full-functionality solution at the most optimum pricing. More than 250 global enterprises spanning wide-ranging industries such as Banking, Financial Services and Insurance (BFSI), Government Organizations, Media, Health Care, and Fintech have deployed ARCON PAM as of today.

While the company continues to be a leader in India and the Middle East, it has gained a solid traction in Africa and APAC market thanks to its well-distributed global channel network and strong industry reputation it enjoys in the cyber security domain.

ARCON

One Identity Manager is a value-added and trusted active directory management and user provisioning software solution. One Identity Manager administers and protects an organization’s data and users, minimizes threats, and ensures that compliance regulations are consistently satisfied.

Users will have access to the data and applications they need when they need them. One Identity can be used on premises, in the cloud, and also with hybrid options. One Identity Manager is able to easily combine strict governance compliance regulations and rigorous security protocols to keep business enterprises secure and functional today and into the future. One Identity Manager is also a robust, scalable identity governance and administration (IGA) solution. The solution is designed to meet the changing needs of a growing dynamic business enterprise, and not be limited or left vulnerable by IT department constricts.

One Identity consistently provides robust security solutions that facilitate a strong secure enterprise where the users, applications, and critical data are safe and secure. The unified identity security platform provides identity governance and administration (IGA), privileged access management (PAM), active directory management and security (ADMS), and identity and access management (IAM) processes to ensure an aggressive stance on security for today’s dynamic enterprise organizations.

One Identity is used by more than 11,000 organizations worldwide managing over five hundred million plus identities.

One Identity Manager Features

Self-service options: Organizations save time and are able to get tasks completed easily. Users can request permissions or access and receive predetermined approval based on role assignments.
Password management: Organizations can easily reset user passwords based on established organizational protocols. Password policies can be determined according to user roles and assignments.
Governance: One Identity Manager offers complete visibility regarding data access, such as who has access, when the access was given, and the reasons why access was given. The solution delivers clear reporting to comply with any regulatory requirements.
SAP certified: Users are able to amplify existing SAP security protocols and seamlessly connect accounts under governance. One Identity Manager is a complete identity access solution.
Reporting: One Identity Manager delivers reliable reporting regarding user access and privileged access to an organization's network. The reporting can satisfy all government and regulatory compliance standards.
Connectors: One Identity Manager’s significant amount of available connectors enable organizations to easily extend identity governance to the cloud and will ensure cloud application time is minimized significantly.

Reviews from Real Users

“The initial setup process for an employee is straightforward. We set up processes for user accounts and we can add other processes to them. Our goal is to automate all user-permission and user-administration processes with One Identity and we are doing that more and more.” - Marc H., IT Architect at a tech services company

“The most valuable features are that it has a lot of capabilities, can integrate with a lot of systems, including automated onboarding like CyberArk, and allows you to integrate different entities.” - Security Consultant at a financial services firm

One Identity

Sample Customers

RAK Bank, AXIS Bank, Reliance Capital, Kotak Life Insurance, MTS

Texas A&M, Sky Media, BHF Bank, Swiss Post, Union Investment, Wayne State University. More at OneIdentity.com/casestudies

Buyer's Guide

Privileged Access Management (PAM)

January 2026

Download Free Report

Find out what your peers are saying about CyberArk, One Identity, Delinea and others in Privileged Access Management (PAM). Updated: January 2026.

DOWNLOAD NOW

881,821 professionals have used our research since 2012.

We monitor all Privileged Access Management (PAM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.