Try our new research platform with insights from 80,000+ expert users

ARCON Privileged Access Management vs One Identity Manager comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ARCON Privileged Access Man...
Average Rating
7.8
Reviews Sentiment
7.6
Number of Reviews
36
Ranking in other categories
Privileged Access Management (PAM) (8th)
One Identity Manager
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
138
Ranking in other categories
User Provisioning Software (1st), Identity Management (IM) (3rd), Identity Governance Administration (IGA) (2nd)
 

Mindshare comparison

While both are Identity and Access Management solutions, they serve different purposes. ARCON Privileged Access Management is designed for Privileged Access Management (PAM) and holds a mindshare of 2.6%, down 3.7% compared to last year.
One Identity Manager, on the other hand, focuses on Identity Governance Administration (IGA), holds 11.0% mindshare, down 17.1% since last year.
Privileged Access Management (PAM) Market Share Distribution
ProductMarket Share (%)
ARCON Privileged Access Management2.6%
CyberArk Privileged Access Manager11.2%
Delinea Secret Server5.0%
Other81.2%
Privileged Access Management (PAM)
Identity Governance Administration (IGA) Market Share Distribution
ProductMarket Share (%)
One Identity Manager11.0%
SailPoint Identity Security Cloud33.8%
Saviynt Identity Cloud19.0%
Other36.2%
Identity Governance Administration (IGA)
 

Featured Reviews

DS
System and DBA at a energy/utilities company with 1,001-5,000 employees
Enhanced security through session monitoring and activity recording
From an end-user point of view, it would be beneficial if the system could provide information about the last login. This would help identify if the server was accessed by me or if someone has potentially stolen my credentials. It would provide a clearer picture of whether ARCON Privileged Access Management is accessed by an authentic user.
reviewer2538840 - PeerSpot reviewer
Senior identity and security specialist at a pharma/biotech company with 1,001-5,000 employees
Highly flexible and stable, but lacks in many aspects and requires a strong partner
In terms of providing a single platform for enterprise-level administration and governance of users, data, and privileged accounts, One Identity is not yet there. One Identity recently bought OneLogin. They already had Safeguard and One Identity Manager. They have started integrating these three tools. I am also on the customer advisory board (CAB) of One Identity, so I have more insight into these things. I know that they started to integrate OneLogin and One Identity just recently. OneLogin is their access management tool. They use it for authentication and for SSO. It is a competitor for Entra and Okta, whereas Safeguard is competing with CyberArk, Delinea, and BeyondTrust. One Identity has indeed done good integration between their three products. However, the platform is not unified. You still need three URLs, which is not optimal. They are going there, but it will take them time. The second thing they are not yet good at is their SaaS offering. They are behind in the market. They started with something in Safeguard, but it is a pretty basic offering. It is still a new baby. They have Safeguard On Demand, but it is just a hosted PAM solution. I did PoC for Safeguard twice. This is how I know this, but I have not used it. As PAM, Safeguard is a good product, but it is not a full-featured PAM like CyberArk or BeyondTrust. They are lacking in that aspect. The integration between One Identity's products is similar to BMC's integration. I used to work with BMC products such as BMC Remedy ten years ago. I used to be an ITSM or Control-M guy. When BMC integrated its products, the integration was not well done. It was like two different entities trying to integrate with each other rather than one company giving you a fully-fledged platform. The same thing is happening with One Identity Manager at the moment. They are selling it as a unified platform, but in my opinion, it is not yet good. It is also not bad. There are things that I can take from it, but there is no complete picture. The problem nowadays is that vendors are getting into each other's areas. For example, CyberArk used to be just a PAM provider, so people would integrate with it, but now, CyberArk wants to do the identity bit. It has now become a competitor for other vendors, so they will stop integrating with it. SailPoint, at some point, stopped integrating with CyberArk. SailPoint and CyberArk's integration was good. This is what is happening in the market or between vendors. All of them are getting into each other's area. If you happen to buy another product from a competitor, you need to integrate it on your own. There is no integration plug-in concept between them. This is a bit hard for companies that already have a PAM and they want to buy a new IGA, for example, or vice versa. They are trying to shift towards an Angular-based platform for their web portal or for IT Shop. That has been very long overdue because they did not modernize their web portal for almost three versions. They are doing it, but there is no feature parity till version 9.3, which is the upcoming version. This is a problem. For example, data governance is not included in 9.2 if you want to upgrade, but if you do not upgrade, you lose support. They have these issues with the roadmap in general. They give you options, but they are not always the complete options. To me, it seems that this company is going to suffer in the long run. Another issue is that for admin requests, we have to configure the tool at least in seven different clients, which is unacceptable. We are in 2024, not in 1981 or 1985. Having seven clients for the same tool, or more, is just unheard of. To me, that is a very old design idea. I am on the newest version 9.2, and I am still doing that. To me, that is a big problem as an admin. The relationship with the customers is extremely bad. That is not a technical problem. That is a company problem. They tried to fix that, but it seems they failed. They do not have the personnel. They have a hiring problem. They now rely on partners. They are a type of company where the partner is more of a vendor to you as a client rather than the company itself. If you want to pick any solution by One Identity, you need a very strong partner with you. If you do not, you will struggle with this product's adoption, roadmap, vision, and implementation. We struggle a lot as a client. I have been there. I have seen that. It is not easy with them. One Identity is based in Europe. Our account manager at One Identity resigned in May and till now, just to show how bad they are, we do not know who our new account manager is. We are in August. Their Starling Connect roadmap or flagship is a failure. We had to withdraw from using it with SuccessFactors, for example. It had a lot of stability issues. Now, my understanding is better, but it caused a bad implementation, so we are not using it. They are not investing a lot in enhancing or extending Starling Connect. They are using Starling Connect as a propagation gateway to SaaS apps so that you have One Identity Manager on-prem talking to Starling Connect which is handling all SaaS apps. However, the roadmap for Starling Connect is not clear. Now that they have bought OneLogin, OneLogin can do that as well as an IAM tool. You can now bring any IAM or CIAM tool such as Entra, Okta, or OneLogin. They can be your propagation gateway. OneLogin and Starling Connect are competing products, and they need to unify them. They cannot have both products doing the same thing. When I discussed this with the head of engineering from their side, they were still defending having Starling Connect. I do not understand why because if you have a proper IAM such as Entra or Okta, that is your propagation gateway. That is it. You can do everything you want with it. You can merge the functionality, and that is it. You do not need Starling Connect. To me, this is confusing. You use a propagation gateway like Starling Connect because it has ready plug-ins to connect to SaaS apps and you do not need to create a custom connector every time. If you look at the number of apps that One Identity supports with Starling Connect, there are not more than 50, which is not a lot. There is a big difference when you compare it to Okta Marketplace or Entra Marketplace. You will immediately understand the difference. OneLogin's marketplace is better than Starling Connect, but OneLogin was not a part of One Identity before, so they had their own marketplace. Overall, the Starling Connect roadmap does not make sense to me. They need to remove the dependency on VB.NET for backend development and they need to unify the front end. If they are selling it as a unified product, they need to give me a unified UX. This is something I have mentioned to Mark Logan himself. This is how ServiceNow won over Remedy. Having a unified UX and being able to turn on or off a feature is better than trying to connect three or four different products with different contracts. To me, the main thing is that they need to modernize their application. Once we do that, making it SaaS is doable.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We use ARCON Privileged Access Management to monitor and record our admin users' activity."
"The product's deployment phase was easy."
"Overall, I would rate ARCON Privileged Access Management nine out of ten."
"The notification alert feature where the network admin gets notified of probable malicious activity is the most valuable feature."
"The technical support is excellent."
"They don't just stick to a base version; instead, they actively enhance and improve it based on client feedback and industry trends."
"One important feature is the administrator access, mainly for Windows machines as well as Linux machines. It is important for us because there is accountability associated with each user ID. And the recordings are also helpful."
"The user interface, overall, is really good. If I have some 20 servers in my ID, I can easily see for which servers I have read-only access, for which servers I have prompt-access, and for which servers I have server admin access."
"The Data Importer is a great tool to create an ETL. It generates code which is easy to maintain later without the tool."
"In One Identity Manager, I appreciate the Synchronization Editor for onboarding different target system applications."
"One of the best features of One Identity Manager is its high level of customization."
"Nobody has to put people in AD groups by hand anymore. It goes automatically and that's very good. It's also very flexible. It's quite easy to customize and we have customized it a lot."
"One Identity Manager is flexible and offers numerous connectors that enable us to serve as the core component of the system, as well as to construct our own connectors using the API."
"The best feature of this solution is its flexibility to be customized."
"I rate One Identity nine out of 10 for stability. We haven't seen any downtime. It has worked smoothly since it went into production."
"The solution is flexible because you can realize the customer needs. Therefore, it is easy to upgrade specialized things. It provides the flexibly, so you can implement customers' use cases."
 

Cons

"If you take Microsoft hypervisor - which comes with its own interface, its own web layer, etc. - something like that also requires privileged IDs. As per our institution policy now, everything has to come through ARCON. We have demanded that these kind of advanced features also should be there."
"The auto-password change feature which was recently added. It is supposed to change the password. However, in some cases, while changing the password, it has caused me to lose to connection due to network-related issues or something similar. What we need to have is a type of log for failure of password change."
"For the in-house built applications, they need to provide good, solid access through their portal."
"They they should focus on support. The support needs to be very strong. Since the product is becoming stronger, their support team also should be equally strong. They should respond to open queries within the time limit they have set. Their support team should be more technical, to understand the issue or the set up."
"ARCON Privileged Access Management is not a user-friendly solution, and the application flow from one screen to another is very complex."
"The solution needs more work on the password management side of things. Password management is a big challenge for us, and I would like to improve this aspect. We're finding that BeyondTrust is better in this regard, which is why we're probably going to migrate over. It will offer better security I think."
"I'll provide feedback on additional features after the project is completed. I think it would be better to comment on that after the implementation is finished."
"One common problem I faced with ARCON PAM was compatibility issues with certain software versions."
"One Identity has a self-service portal but many customers need a helpdesk where they can go in and request. To make that happen we need to do a lot of customization. Maybe that could be improved..."
"More integration with SAP and with the internet of things would be good. We also have system devices that we could manage as identities, so that would be a feature to add."
"A room for improvement in One Identity Manager is its analytics. Though it's getting better from version to version, the analytics feature still needs improvement. I would appreciate more analytical features in the next release of One Identity Manager, so I can do a better analysis. Another vendor, for example, has a self-certification system where you can send people, then create a type of profile or screen for each person, and the person can see his entitlement and the risks behind that entitlement, so then the person makes a decision on whether he wants to keep or let go of it, and that's an out-of-the-box feature that would be good to see in One Identity Manager. Another feature I'd like to see in One Identity Manager that would be very interesting is integration with SIEM or any log collection product for both access and usage. For example, I'd be able to see that I have access to a particular application and also get information on how many times I've accessed it in the last year, last few months, etc. It's a feature that would be great to have in One Identity Manager."
"The support for DevOps could be improved with quick delivery cycles and multiple delivery streams."
"The performance could be better. I also think One Identity could improve its documentation for developers. Many of One Identity's features aren't fully documented. We don't have enough information on how to use them."
"I also find it difficult to add resources to the business roles because we have to use many options in One Manager for that. We have to add it to the IT shop so that the users can submit requests through the web portal, and we must generate that IT shop structure to add resources to the business. There is a lot of complexity in that."
"I would like it to have an easier integration with phones."
"The implementation of the tool and management on the infra side is a bit difficult."
 

Pricing and Cost Advice

"The product's pricing is good value. Go for user-based licensing, without any limit on the target servers."
"Pricing and licensing are good, very aggressive."
"The product's pricing is a good value. It's appropriately priced. The product has all the required features. It doesn't work in some of the areas but, right now overall, it's pretty good."
"There are no major concerns with licensing because we can handle multiple servers in our kiosk system."
"It is good value for our business. According to me, their competitors are more costly. Therefore, it is quite affordable. I find the ARCON to be much cheaper than the other products in the market."
"The cost of this product is very cheap, comparatively in the global market."
"Pricing is reasonable."
"ARCON is a will give you all the features in a very cost-effective solution. Pricing and licensing is very good compared to other players in the market."
"The licensing cost is per user."
"It has helped to reduce customer costs."
"We have the premium support and are very satisfied. They are always answer our questions very quickly. For the moment, we are very satisfied, but I think it's because we are paying for the premium support."
"The licensing for One Identity Manager is per user, per carbon life, specifically, it's per people, and not a per-identity licensing model. For example, if I have two hundred people, or if I have someone with several identities, I'm only paying for it once. I don't remember the exact cost of One Identity Manager because I wasn't the one who paid for the license."
"Prices in Turkey are high due to inflation, a challenge we've heard about from our customers."
"One Identity is cost-efficient from a licensing perspective. However, one drawback is that it's expensive on the hardware side for the customer to set up. One Identity's professional services team recommends various components. They lose some of the cost advantage because the hardware is expensive and requires maintenance."
"It was okay for us. It was not too much for us. It was nearly the same as other products. It was not expensive."
"You get a lot of bang for your buck with One Identity. It has many features that are included in the standard IGA license. Most people who are considering buying One Identity don't understand how much power is behind it in engines."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
882,410 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
9%
Financial Services Firm
8%
Manufacturing Company
8%
Government
7%
Financial Services Firm
12%
Manufacturing Company
9%
Computer Software Company
7%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise11
Large Enterprise17
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise91
 

Questions from the Community

What needs improvement with ARCON Privileged Access Management?
From an end-user point of view, it would be beneficial if the system could provide information about the last login. This would help identify if the server was accessed by me or if someone has pote...
What do you like most about One Identity Manager?
The One Identity birthright process has helped generate user accounts more accurately and quickly.
What is your experience regarding pricing and costs for One Identity Manager?
The licensing and setup cost is on the higher side, but it is delivering more features. The pricing is worth it.
What needs improvement with One Identity Manager?
One Identity Manager could be improved with more modern features such as artificial intelligence or faster workflow configuration for complex environments, expanded out-of-the-box integration with ...
 

Also Known As

ARCON ARCOS, ARCON PAM
Quest One Identity Manager
 

Overview

 

Sample Customers

RAK Bank, AXIS Bank, Reliance Capital, Kotak Life Insurance, MTS
Texas A&M, Sky Media, BHF Bank, Swiss Post, Union Investment, Wayne State University. More at OneIdentity.com/casestudies
Find out what your peers are saying about CyberArk, One Identity, Delinea and others in Privileged Access Management (PAM). Updated: February 2026.
882,410 professionals have used our research since 2012.