Try our new research platform with insights from 80,000+ expert users

One Identity Active Roles vs Symantec Identity Governance and Administration comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024
 

Categories and Ranking

One Identity Active Roles
Ranking in User Provisioning Software
5th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
19
Ranking in other categories
Active Directory Management (5th)
Symantec Identity Governanc...
Ranking in User Provisioning Software
12th
Average Rating
7.6
Reviews Sentiment
6.7
Number of Reviews
66
Ranking in other categories
Identity Management (IM) (28th)
 

Mindshare comparison

As of December 2024, in the User Provisioning Software category, the mindshare of One Identity Active Roles is 6.3%, up from 6.1% compared to the previous year. The mindshare of Symantec Identity Governance and Administration is 4.2%, up from 2.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
User Provisioning Software
 

Featured Reviews

JosephChandrasekaram - PeerSpot reviewer
Single interface and workflows simplify AD and Azure AD management efficiency and security
The most valuable features include * auditing * dynamic grouping * creating dynamic groups based on AD attributes. Also, as part of the cloud identity, meaning expanding identity to the cloud, it gives me a single workflow to expand on-prem. I can create a user in the cloud and give them access to resources through a single workflow. And for regulatory, auditing, and security requirements, it's critical that the solution enables Zero Trust security with hybrid AD fine delegation and role-based access control.
Efrén Yanez - PeerSpot reviewer
It has increased our automation and maintenance of SLA security functions, although I would like to see the human resource onboarding/offboarding processes improved.
* The xPress technologies (connector xPress/Policy xPress/Config xPress) * Integration with API Management and other CA solutions * Facility to publish the web services of any task of Identity Manager * Ease of integration to leverage authentication processes managed by Identity Manager and called by external applications * You do not depend on the supplier to change screens and validate field, create notifications, etc. * True integration between CA Identity Manager and CA Identity Governance for better use of compliance approved roles, data exchange and improved customer experience * Availability to implement in the cloud * Take advantage of important features of Identity Manager and Identity Governance on the Portar offered by Identity Suite (best user experience) and less technicall knowlegde need What about Identity Governance and integration with Identity Manager? This solution makes a seamless integration, leveraging the power of Identity Manager connectors it import the data obtained to Identity Governance; in the opposite direction, the results campaigns from Governance have the ability to update in automatic way the information in Identity Manager, enabling materialization of privileges changes and fulfilling a RBAC model (It is the business strategy to the lowest level of privileges in applications) Through the implementation of "Identity Suite Virtual Appliance" have created a supremely quick and convenient way to install (Identity Manager / Governance / Portal) with even high availability. Multiple scenarios available on a single console.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It gives us attribute-level control and the AD management features work very well."
"Because of Active Roles, we're able to synchronize on an even more regular basis. It enables us to provide even more information to the Active Directory, which helped us to group our users in a more consistent manner."
"Active Roles improved the management of users, groups, and AD objects in the organization."
"Active Roles is easy to configure. It isn't a plug-and-play solution, and you need expertise to set it up. However, once you have your templates, it's easy to deploy in a highly decentralized environment. The custom configuration for our customers is fantastic, especially the web interface."
"The AD and AAD management features of this solution are really good... They offer added value by showing more fields such as password age and the statuses of some things that we normally wouldn't see."
"It's valuable to us in that it resembles the native tools that most people have grown accustomed to... Active Roles resembles traditional tools, such as from Microsoft. That is really good because it eases the way people interact with the tool."
"Secure access is the most valuable feature."
"The most valuable features include auditing, dynamic grouping, and creating dynamic groups based on AD attributes."
"There are many valuable features within the solution. The product is easy to customize. It’s also highly secure."
"I like that it is easy to diagnose. It has a version of a virtual appliance so we can download it, run it, configure it, and it would take about 10 to 15 minutes to configure the cluster or so."
"It is easy to use, and does not requires an extensive programming or development background."
"Provisioning engine (on the back-end, separate from front-end components, that's part of layered architecture)."
"The solution is easy to scale."
"I've used it to manage users, create and update, delete users, change passwords, and assign and change rules."
"When comparing it to other products, you can set up CA IAM in a PoC very quickly to demonstrate its provisioning capabilities."
"The scalability potential is there if a company needs to expand."
 

Cons

"For the AAD management feature, it needs to improve the objects that we can manage and the security."
"When doing a workflow, we would like a bit better feedback on the screen, as we're trying to get it to work. For example, there is a "Find" function that you need set up in a workflow to do some of the automation. It is not the easiest to get a result from those finds when you're trying to do that. In the MMC, they have a couple different types of workflows. In this particular case, we use their workflow functionality to find all of X within the environment, then if you find it, do X, Y, and Z. You can have multiple steps. When you do that search function within that workflow, it's really hard to find out, "Is my search working?" It would be nice if there was some feedback on the screen so you could see if your search is working properly within the workflow."
"The user and group management in Azure AD could be better. Our focus these days is dynamic sharing with several on-prem Microsoft applications like SharePoint."
"In terms of improvement, it could be made even more user-friendly for administrators when they need to create new workflows and rule sets."
"The solution needs an attestation process that includes certification and recertification attestation."
"For ActiveRoles, it would be good if the product supports multi-scripting language. You can use only VBScript."
"Active Roles could add more options for web customization. Our requirements are exceedingly specific. We'd like to get the web interface down to just five buttons, but in some cases, we can only get to six. The web interface in the current version is less customizable than in the previous one."
"Another issue we have with the product is that we run a lot of custom tasks. You have to program them to run on one particular host and there's no automatic failover to a second host. If that host is down when a task is supposed to run, it has to wait until the next time it runs when that host is up."
"Symantec should develop a SaaS solution for cloud environments to make the solution available in various marketplaces for easy deployment."
"In the next release, there should be provisioning of your certifications."
"The Identity tool needs to do more kinds of reporting for audit purposes. It doesn't really track any of the metrics that are useful to us, at this point."
"Provisioning has a dependency on Windows.​"
"They should easier and better integration with other software."
"There are times that it takes too long to generate reports and to run the assessment tools to collect the information."
"The solution is not the best or the fastest available."
"The drawback with the CA Identity Manager is they don't have a connector to HR systems like SAP, or PeopleSoft, or Workday. That's a major drawback with the CA Identity Manager. For that we have to do lots of custom quoting to get data from HR systems. And if they could connect it to GRC systems, that's good to have in an identity product."
 

Pricing and Cost Advice

"It's expensive."
"The licensing model is a simple user-based model, not that much complicated."
"The pricing is on the higher end."
"It's fairly priced."
"The pricing for Active Roles is expensive but not as expensive as other solutions like Okta."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"The connector is free, and bundled with the product."
"Pricing and licensing models are adequate and reasonable."
"The price is flexible for our existing customers."
"The product has a good price in competition with another product with the same solution."
"The price is based on the number of users."
"Compared to other options, CA products are not that expensive."
"I do not recall the approximate prices or licensing models, although I do so that it was priced per user number."
"Symantec keeps increasing the price. I rate its pricing a seven on a scale of ten."
report
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
824,067 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
11%
Healthcare Company
9%
Government
8%
Computer Software Company
26%
Financial Services Firm
17%
Manufacturing Company
8%
Real Estate/Law Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for One Identity Active Roles?
The pricing for Active Roles is expensive but not as expensive as other solutions like Okta.
What needs improvement with One Identity Active Roles?
Active Roles can fix many little problems that have never been resolved and have lingered for years, continuing to annoy people. For example, you can't search by object GUIDs. The manual says you c...
What do you like most about Symantec Identity Governance and Administration?
The product’s most valuable feature is flexibility. It can be customized as per the customer’s requirements.
What is your experience regarding pricing and costs for Symantec Identity Governance and Administration?
The pricing has been very reasonable, but licensing costs vary based on the customer. It follows a user-based licensing model.
What needs improvement with Symantec Identity Governance and Administration?
Symantec should develop a SaaS solution for cloud environments to make the solution available in various marketplaces for easy deployment. It should also offer bundle installation instead of one by...
 

Also Known As

Quest Active Roles
CA Identity Suite, Symantec IGA, Layer7 Identity Suite, CA Identity Manager (CA IDM), CA Identity Minder, CA IAM, CA Identity Manager (CA IDM), CA Identity Governance
 

Overview

 

Sample Customers

City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Acciona, Core Blox, DBS
Find out what your peers are saying about One Identity Active Roles vs. Symantec Identity Governance and Administration and other solutions. Updated: December 2024.
824,067 professionals have used our research since 2012.