Try our new research platform with insights from 80,000+ expert users

CyberArk Identity vs One Identity Active Roles comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Identity
Ranking in Active Directory Management
11th
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
19
Ranking in other categories
Authentication Systems (9th), Identity Management (IM) (13th), Authorization Software (4th), Enterprise Password Managers (9th), User Entity Behavior Analytics (UEBA) (9th), Access Management (9th), Cloud Resource Access Management (2nd), Customer Identity and Access Management (CIAM) (6th)
One Identity Active Roles
Ranking in Active Directory Management
4th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
19
Ranking in other categories
User Provisioning Software (5th)
 

Featured Reviews

RiyasAbdulkhader - PeerSpot reviewer
Offers Multi-factor authentication (MFA) and supports single sign-on (SSO) across multiple applications but dependency on Identity Connectors for seamless federation can be cumbersome
CyberArk Identity could improve by allowing federation directly or seamlessly, without the need for an Identity Connector. Instead of building separate Azure Connectors, if they could just federate, that would be nice. However, for this kind of feature to work, the customer's environment would need specific configurations. Basically, they could improve the federation capabilities to handle multiple domains separately, instead of just one. Right now, if you're working with one domain, it's okay. But for multiple domains, it becomes a bit complicated. In the on-premises version, you can curate more than one domain seamlessly. However, the SaaS version of CyberArk Identity requires more configuration. Moreover, CyberArk Identity is relatively new. They haven't been in the market for more than two or three years. They're still under development and not yet a fully-fledged product. They're constantly adding features, but they haven't yet achieved complete account management capabilities for all types of accounts, which is likely due to their competition. So, while they are actively promoting it, not many customers are using CyberArk Identity yet.
JosephChandrasekaram - PeerSpot reviewer
Single interface and workflows simplify AD and Azure AD management efficiency and security
The most valuable features include * auditing * dynamic grouping * creating dynamic groups based on AD attributes. Also, as part of the cloud identity, meaning expanding identity to the cloud, it gives me a single workflow to expand on-prem. I can create a user in the cloud and give them access to resources through a single workflow. And for regulatory, auditing, and security requirements, it's critical that the solution enables Zero Trust security with hybrid AD fine delegation and role-based access control.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The setup, via cloud, is simple."
"I found the solution to be stable."
"If anyone makes an error, or if an incident occurs by accident, the business will not be harmed as a result of this activity."
"The initial setup of CyberArk Identity was straightforward."
"The user self-service program and the Office 365 provisioning service feature are the most valuable. It is a very easy and feature-rich solution that gives priority to the users and security."
"The tool is a very strong and valuable enterprise solution, particularly in ensuring the continuity of service."
"It has machine learning and can help clients to learn the environment and understand what is happening."
"The user identification is simplified, and managing user privileges, whether adding or revoking them, is also quite straightforward when utilizing CyberArk SaaS."
"It gives us attribute-level control and the AD management features work very well."
"Active Roles improved the management of users, groups, and AD objects in the organization."
"In comparison to native Active Directory tools, using Active Roles for delegation is so much better. It uses an access template and that makes it easy to see who can access what. In fact, you can do that for many objects as well."
"The most valuable features include auditing, dynamic grouping, and creating dynamic groups based on AD attributes."
"Active Roles is easy to configure. It isn't a plug-and-play solution, and you need expertise to set it up. However, once you have your templates, it's easy to deploy in a highly decentralized environment. The custom configuration for our customers is fantastic, especially the web interface."
"Having a tool to manage all changes to AD from a single pane of glass is awesome."
"The AD and AAD management features of this solution are really good... They offer added value by showing more fields such as password age and the statuses of some things that we normally wouldn't see."
"Another good feature is the change history. It's centralized in a single place and allows us to manage people's Active Directory domains from a central location. We can also drill down into individual objects in a troubleshooting or even an auditing situation. We can show evidence to auditors by drilling down into the individual history. It gives you all the history of what happened around an individual object. That is something that would be almost impossible to do in Active Directory, or extremely complicated."
 

Cons

"They can include the Mobile Device Management (MDM) feature."
"The product needs to leverage the cloud more, especially in the financial sector, where cloud adoption might be limited. Proper reporting within the cloud is essential. The tool should be more user-friendly to expedite access for users. The current agent-based system poses challenges if a user loses access to the server, making tasks difficult to perform. It should also improve technical support."
"In terms of general user feedback, the more security you put in front of a user, the more they complain. So usability and the user experience are always a challenge. So there's always room for improvement."
"They could improve their UI and make everything more user-friendly."
"I'm not sure what needs improvement. It is a good platform."
"The tool has issues with the third-party SMS gateway. The solution has its own SMS gateway. Integration support is a challenge when we don’t use their SMS gateway. The tool also needs to improve its scalability."
"CyberArk Identity could improve by having the ability to better manage the network, such as Cisco. There seem to be some issues in this area."
"The solution could be easier to use and I found it to be very complex involving many steps."
"It's a fairly stable product but not perfectly reliable."
"For the AAD management feature, it needs to improve the objects that we can manage and the security."
"For ActiveRoles, it would be good if the product supports multi-scripting language. You can use only VBScript."
"The way you can search groups could be better."
"The third area for improvement, which is the weakest portion of ARS, is the workflow engine, which was introduced a few years ago. It's slow and not very intuitive to use, so I would like to see improvement there."
"The solution needs an attestation process that includes certification and recertification attestation."
"Most of the time it just works."
"There are some features that we think should be included in their next release. We think these things would take them to the next level: the ability to completely force or limit any dynamic group processing to specific servers, change-tracking reporting of virtual attributes, and the ability to use files as inputs to automation workloads. These things have also been talked about. Knowing them, they're probably working on them."
 

Pricing and Cost Advice

"The pricing of CyberArk Identity is competitive."
"In terms of pricing, BeyondTrust and CyberArk tend to be more expensive, with CyberArk receiving an eight out of ten, in this regard."
"CyberArk Identity is an expensive solution."
"The solution is cheap and I rate its pricing an eight out of ten."
"I think it is a fairly priced tool. I rate the tool between six and seven on a scale of one to ten where one is expensive, and ten is cheap."
"We find that the pricing and licensing of this solution is adequate, as compared to the other competitors in the market."
"Their pricing is obviously a lot higher than many vendors in the marketplace but their service is also unmatched."
"I would rate the tool’s pricing a seven out of ten. The product’s pricing is expensive and is on a yearly basis. You will need to pay around 10,000 GBP for 500 users."
"It's expensive."
"It's fairly priced."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"The licensing model is a simple user-based model, not that much complicated."
"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."
"The pricing is on the higher end."
report
Use our free recommendation engine to learn which Active Directory Management solutions are best for your needs.
830,824 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
14%
Manufacturing Company
11%
Insurance Company
7%
Computer Software Company
17%
Financial Services Firm
11%
Government
9%
Healthcare Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about CyberArk Identity?
The integration capabilities, ability to integrate CyberArk into the overall IBB strategy of our current clients.
What is your experience regarding pricing and costs for CyberArk Identity?
I think it is a fairly priced tool. I rate the tool between six and seven on a scale of one to ten where one is expensive, and ten is cheap.
What needs improvement with CyberArk Identity?
At the moment CyberArk needs to enrich Conjur and it needs to be made more viable so that its adoption can be made much faster.
What is your experience regarding pricing and costs for One Identity Active Roles?
The pricing for Active Roles is expensive but not as expensive as other solutions like Okta.
What needs improvement with One Identity Active Roles?
Active Roles can fix many little problems that have never been resolved and have lingered for years, continuing to annoy people. For example, you can't search by object GUIDs. The manual says you c...
 

Also Known As

Idaptive
Quest Active Roles
 

Overview

 

Sample Customers

MLB, Citi, Pfizer, SulAmerica, GE Capital, Shiseido
City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Find out what your peers are saying about CyberArk Identity vs. One Identity Active Roles and other solutions. Updated: October 2024.
830,824 professionals have used our research since 2012.