Try our new research platform with insights from 80,000+ expert users

One Identity Active Roles vs Symantec Identity Governance and Administration comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

One Identity Active Roles
Ranking in User Provisioning Software
5th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
19
Ranking in other categories
Active Directory Management (5th)
Symantec Identity Governanc...
Ranking in User Provisioning Software
12th
Average Rating
7.6
Number of Reviews
66
Ranking in other categories
Identity Management (IM) (28th)
 

Mindshare comparison

As of November 2024, in the User Provisioning Software category, the mindshare of One Identity Active Roles is 6.3%, up from 6.0% compared to the previous year. The mindshare of Symantec Identity Governance and Administration is 4.2%, up from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Provisioning Software
 

Featured Reviews

JosephChandrasekaram - PeerSpot reviewer
Oct 16, 2023
Single interface and workflows simplify AD and Azure AD management efficiency and security
I use it primarily for granting, managing, and auditing access The ways Active Roles has improved the way we operate are through workflows and user onboarding, automatic user management, group permissioning, adding users to the right groups based on the department, and distribution list creation…
Efrén Yanez - PeerSpot reviewer
Feb 9, 2017
It has increased our automation and maintenance of SLA security functions, although I would like to see the human resource onboarding/offboarding processes improved.
* The xPress technologies (connector xPress/Policy xPress/Config xPress) * Integration with API Management and other CA solutions * Facility to publish the web services of any task of Identity Manager * Ease of integration to leverage authentication processes managed by Identity Manager and called by external applications * You do not depend on the supplier to change screens and validate field, create notifications, etc. * True integration between CA Identity Manager and CA Identity Governance for better use of compliance approved roles, data exchange and improved customer experience * Availability to implement in the cloud * Take advantage of important features of Identity Manager and Identity Governance on the Portar offered by Identity Suite (best user experience) and less technicall knowlegde need What about Identity Governance and integration with Identity Manager? This solution makes a seamless integration, leveraging the power of Identity Manager connectors it import the data obtained to Identity Governance; in the opposite direction, the results campaigns from Governance have the ability to update in automatic way the information in Identity Manager, enabling materialization of privileges changes and fulfilling a RBAC model (It is the business strategy to the lowest level of privileges in applications) Through the implementation of "Identity Suite Virtual Appliance" have created a supremely quick and convenient way to install (Identity Manager / Governance / Portal) with even high availability. Multiple scenarios available on a single console.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's valuable to us in that it resembles the native tools that most people have grown accustomed to... Active Roles resembles traditional tools, such as from Microsoft. That is really good because it eases the way people interact with the tool."
"Because of Active Roles, we're able to synchronize on an even more regular basis. It enables us to provide even more information to the Active Directory, which helped us to group our users in a more consistent manner."
"The solution is stable."
"Active Roles is easy to configure. It isn't a plug-and-play solution, and you need expertise to set it up. However, once you have your templates, it's easy to deploy in a highly decentralized environment. The custom configuration for our customers is fantastic, especially the web interface."
"The biggest thing for us is Active Roles saves a lot of man-hours in keeping groups up-to-date manually or trying to write some sort of script that you have to run, so we don't have to reinvent the wheel. Instead of when every time somebody joins a department, then somebody has to remember to put in a request to add "meet user Joe" to this group, the solution does it automatically for us. Therefore, it saves our business and IT staff time because they do not have to process requests since Active Role can do it for them."
"The best part of this Active Roles is the workflow engine. It features an industry-leading workflow automation feature. It's a visual PowerShell that allows task interruption."
"Another good feature is the change history. It's centralized in a single place and allows us to manage people's Active Directory domains from a central location. We can also drill down into individual objects in a troubleshooting or even an auditing situation. We can show evidence to auditors by drilling down into the individual history. It gives you all the history of what happened around an individual object. That is something that would be almost impossible to do in Active Directory, or extremely complicated."
"It gives us attribute-level control and the AD management features work very well."
"The scalability potential is there if a company needs to expand."
"The product’s most valuable feature is flexibility. It can be customized as per the customer’s requirements."
"The solution is easy to scale."
"Streamlines user access, consolidates applications."
"I like that it is easy to diagnose. It has a version of a virtual appliance so we can download it, run it, configure it, and it would take about 10 to 15 minutes to configure the cluster or so."
"I've used it to manage users, create and update, delete users, change passwords, and assign and change rules."
"Connector Xpress and Policy Xpress and the new interface."
"It's a very useful tool that has improved our client's security, from day one."
 

Cons

"Most of the time it just works."
"The way you can search groups could be better."
"There are some features that we think should be included in their next release. We think these things would take them to the next level: the ability to completely force or limit any dynamic group processing to specific servers, change-tracking reporting of virtual attributes, and the ability to use files as inputs to automation workloads. These things have also been talked about. Knowing them, they're probably working on them."
"Another issue we have with the product is that we run a lot of custom tasks. You have to program them to run on one particular host and there's no automatic failover to a second host. If that host is down when a task is supposed to run, it has to wait until the next time it runs when that host is up."
"The solution needs an attestation process that includes certification and recertification attestation."
"It's a fairly stable product but not perfectly reliable."
"For ActiveRoles, it would be good if the product supports multi-scripting language. You can use only VBScript."
"For the AAD management feature, it needs to improve the objects that we can manage and the security."
"The reporting functions."
"Identity Manager has a lack of entitlement support, unlike other products that I have worked with."
"The development process to create this connector is not as easy as I would like."
"The support from Symantec Identity Governance and Administration could improve."
"We would like to see integration with analytics. Also, for them to be more efficient regarding discovering and implementing new rules."
"Integration capabilities with other solutions and formats, including JSON, could be improved."
"There are times that it takes too long to generate reports and to run the assessment tools to collect the information."
"The drawback with the CA Identity Manager is they don't have a connector to HR systems like SAP, or PeopleSoft, or Workday. That's a major drawback with the CA Identity Manager. For that we have to do lots of custom quoting to get data from HR systems. And if they could connect it to GRC systems, that's good to have in an identity product."
 

Pricing and Cost Advice

"It's fairly priced."
"The pricing is on the higher end."
"It's expensive."
"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."
"The licensing model is a simple user-based model, not that much complicated."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"Compared to other options, CA products are not that expensive."
"Pricing and licensing models are adequate and reasonable."
"The price is based on the number of users."
"The product has a good price in competition with another product with the same solution."
"The connector is free, and bundled with the product."
"Symantec keeps increasing the price. I rate its pricing a seven on a scale of ten."
"The price is flexible for our existing customers."
"I do not recall the approximate prices or licensing models, although I do so that it was priced per user number."
report
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
814,649 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
12%
Healthcare Company
9%
Government
9%
Computer Software Company
28%
Financial Services Firm
16%
Manufacturing Company
8%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for One Identity Active Roles?
The pricing for Active Roles is expensive but not as expensive as other solutions like Okta.
What needs improvement with One Identity Active Roles?
Active Roles can fix many little problems that have never been resolved and have lingered for years, continuing to annoy people. For example, you can't search by object GUIDs. The manual says you c...
What do you like most about Symantec Identity Governance and Administration?
The product’s most valuable feature is flexibility. It can be customized as per the customer’s requirements.
What needs improvement with Symantec Identity Governance and Administration?
The product works slowly while accessing cloud-native solutions. They should work on their ability to integrate with third-party vendors. Additionally, cloud networking features and Azure, AWS, and...
 

Also Known As

Quest Active Roles
CA Identity Suite, Symantec IGA, Layer7 Identity Suite, CA Identity Manager (CA IDM), CA Identity Minder, CA IAM, CA Identity Manager (CA IDM), CA Identity Governance
 

Overview

 

Sample Customers

City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Acciona, Core Blox, DBS
Find out what your peers are saying about One Identity Active Roles vs. Symantec Identity Governance and Administration and other solutions. Updated: October 2024.
814,649 professionals have used our research since 2012.