OneLogin Workforce Identity

OneLogin by One Identity is primarily used for identity and access management, with a focus on SSO and MFA. This allows users to access necessary applications through a centralized login rather than maintaining separate credentials for each application. Whether an employee needs access to Microsoft 365, Salesforce, or internal business applications, those apps are integrated with OneLogin by One Identity. Users log in once through the platform, complete MFA if necessary, and access applications they are authorized to use.

OneLogin by One Identity is also leveraged during onboarding and offboarding processes. New hires gain access based on their roles, and when someone leaves, their access is disabled centrally rather than relying on individual application teams to remove accounts.

OneLogin by One Identity's standout features are SSO and MFA, making the login process simpler for users and more secure. Centralized user and access management allows the IT team to manage multiple application access from one place. The reporting and user activity visibility is beneficial for troubleshooting access issues or reviewing security. Automation for onboarding and offboarding is crucial in large organizations as manual access management across applications is difficult. Integration with existing environments adds value, yet challenges still arise with legacy applications and varied authentication requirements.

Improving the integration of legacy applications would reduce manual work during implementation. Enhanced automation around access reviews and role changes could aid management as user applications grow. Additionally, simplifying the authentication process, particularly when using multiple devices, would improve user experience. Better automation could enhance access review and role change processes. OneLogin by One Identity is strong for modern applications, but making legacy integration easier would enhance its utility in enterprise environments.

I have been using OneLogin by One Identity for around two years.

OneLogin by One Identity has been stable overall. I have not experienced major downtime that significantly affected users. Occasionally, there are authentication issues or short service interruptions, but they have not impacted significantly. However, since authentication is centralized, maintaining availability is crucial as service disruptions can affect access to multiple applications.

OneLogin by One Identity scales well due to its cloud-based nature, allowing the organization to onboard new users and integrate additional applications without expanding IAM infrastructure. The challenge is not the number of users, but the environment's complexity. Adding applications can complicate integration and access policies, particularly with legacy or custom applications.

My experience with OneLogin by One Identity's customer support has been positive, rating it eight out of ten. During the implementation, the support was highly effective and deserving of a ten out of ten from my perspective.

The setup for OneLogin by One Identity was straightforward, but understanding the license's scope was crucial for assessing total implementation. Integrating with existing applications and directories was essential, as was considering the total cost beyond just licensing. Professional services, customization, and legacy application integration come with extra effort.

OneLogin by One Identity brings ROI by reducing manual work involved in user access management, rather than direct cost savings. Streamlined onboarding and centralized provisioning based on user roles save time. Central access disabling during offboarding minimizes the chance of leaving access active in applications. I have not formally measured a specific percentage, but I have observed less repetitive admin work, fewer manual steps, and easier troubleshooting of authentication issues.

The pricing and licensing for OneLogin by One Identity were straightforward. The cost depends on the number of users, features required, and level of functionality. While the initial setup cost was not a major concern, I ensured I understood the licensing scope and potential extra requirements. Integration with existing applications and directories was crucial to consider for total costs.

I considered alternatives such as Microsoft Entra ID, Okta, and Ping Identity, evaluating factors including SSO and MFA capability, application integration, user provisioning, security controls, ease of admin, and licensing. My focus was not on feature count, but on which product best fits within the existing environment.

Before implementing, assess organizational requirements instead of choosing OneLogin by One Identity based solely on features. Conduct a thorough review of applications, directories, and authentication processes. Test with crucial applications first to refine the user experience, then expand gradually.

Understand the licensing scope and integration effort needed, including with legacy systems, to have a complete view of the total cost of ownership.

When relying on AI capabilities, ensure they are governed carefully due to the sensitive nature of identity data, emphasizing human review in security decisions. Utilize AI as a support tool to identify risky behaviors but maintain human oversight.

Risk-based and adaptive authentication approaches enhance security without overwhelming users with unnecessary prompts. Strike the right balance in risk settings and review false positives for a smooth user experience.

I give OneLogin by One Identity an overall rating of eight out of ten.

OneLogin by One Identity is used for centralized identity and access management for employees, allowing secure access to multiple work applications through a single identity instead of managing separate credentials. It utilizes automated provisioning and de-provisioning, enabling prompt access assignment based on roles when new employees join, and the removal of access when they leave. This goes beyond SSO and MFA, as access policies are enforced based on role and user context, with updates occurring automatically when someone changes departments. OneLogin by One Identity supports role and attribute-based provisioning for entitlement management, and integrates features like smart factor authentication for high-risk login attempts.

One of the biggest positive impacts of OneLogin by One Identity has been the reduction of administrative workload while improving security through automated provisioning for new employees and removing access during offboarding. It minimizes the manual work involved in accessing individual applications with automated lifecycle management, which handles central login itself. The onboarding and offboarding processes have transitioned from hours to minutes. We have seen a thirty to forty percent reduction in onboarding and provisioning times as application access is assigned automatically based on roles instead of being configured manually.

Additionally, there has been a fifty percent reduction in password and access-related help desk tickets thanks to SSO and self-service password reset features. Positive results come mainly from automation in user provisioning and de-provisioning, paired with improved MFA and risk-based authentication collectively lowering the risk of unauthorized access.

OneLogin by One Identity offers valuable features such as single sign-on, multi-factor authentication, identity lifecycle management, and smart factor authentication, centralizing access to both cloud and on-premise applications. It supports role and attribute-based provisioning for entitlement management, offers real-time directory synchronization, and adaptive login flows with Vigilance AI. Additionally, its Smart Factor Authentication feature effectively balances security and usability, enhancing the authentication process by requiring stronger verification in case of unusual login behavior. The integration of phishing-resistant device trust significantly impacts authentication processes, adding another layer of security beyond verifying users' credentials.

A specific area in the valuable features is the automated provisioning and de-provisioning processes that reduce the risk of someone retaining access they no longer need. The lifecycle management feature automates these processes, making day-to-day access much easier to manage. OneLogin by One Identity helps in maintaining the directory infrastructure while centralizing SSO, MFA, and identity lifecycle management for both on-premise and cloud infrastructures. Additionally, it provides a seamless end-user experience by granting access through a single login, thereby reducing password-related support requests.

Reporting and analytics in OneLogin by One Identity can be improved, as filtering and customization options for more complex requests are limited. It does not support document exportation or sufficiently modify standard reports to relate to specific applications and administration data. There is also a need for further expansion of native integrations and automation operations. Greater coverage in the API for programmatically managing configuration and broader flexibility in dashboards would significantly enhance administrative experiences.

Enhancements in provisioning diagnostics, reporting flexibility, and simpler troubleshooting for complex integrations would greatly improve the administrative experience.

I have been using OneLogin by One Identity for about two years.

OneLogin by One Identity is quite stable from my point of view, as I have been using it for a while and have found it to be very reliable in our overall day-to-day operations. The MFA and directory synchronization features remain dependable, and we have not experienced any major outages impacting significant user activity. I rate its stability at ten out of ten.

OneLogin by One Identity demonstrates excellent scalability. We have been able to add more users, applications, and access policies without needing to revise our identity architecture significantly. My experience with scalability has been favorable; I rate it as really good, at nine out of ten, given its effectiveness in managing resources, authentication, and related processes like MFA, SSO, onboarding, and offboarding.

Customer support for OneLogin by One Identity has been exceptional. We reached out to OneLogin by One Identity support several times, primarily for directory synchronization, provisioning, and application integration issues, and our overall experience has been very positive. The engineers we interacted with demonstrated technical expertise and aimed to identify root causes rather than merely providing generic troubleshooting steps. Their support portals and knowledge base are valuable resources, allowing many common configuration issues to be addressed without opening a ticket. One Identity provides multiple support tiers, including critical twenty-four seven coverage for issues, depending on the chosen support plan.

I rate customer support at a solid nine out of ten, as they have been responsive and highly knowledgeable, especially when I needed help with specific synchronization, provisioning, and application integration concerns. Their availability for twenty-four seven support is also something I appreciate, contributing to my high rating.

We previously used Microsoft Entra ID, formerly Azure Active Directory, for many of our identity and authentication needs, alongside various manual processes for application access. We evaluated OneLogin by One Identity because we wanted a more flexible, natural identity platform featuring straightforward SSO, MFA, directory integration, and automated provisioning for onboarding.

The initial deployment was relatively straightforward, particularly for basic SSO and MFA functionalities, though integrating and configuring more advanced provisioning policies required some additional planning.

We have seen a return on investment. The onboarding and offboarding processes have reduced costs by around ten to twenty percent. Time savings are notable as onboarding and offboarding durations have decreased by up to forty percent. Positive results come mainly from automation in user provisioning and de-provisioning, paired with a roughly fifty percent reduction in password-related help desk requests.

Additionally, while security ROI is harder to quantify, faster onboarding processes, effective MFA, and risk-based authentication collectively lower the risk of unauthorized access. In summary, the combining time savings, reduced support loads, and enhanced security truly validate the licensing cost.

Our experience regarding pricing, setup cost, and licensing for OneLogin by One Identity has been generally positive, though it is not the cheapest identity management solution, especially as the number of users increases. However, the cost is justified by the significant reduction in manual administrative tasks, fewer password-related support requests, faster onboarding and offboarding times, and improved access security.

Before choosing OneLogin by One Identity, we also evaluated Okta, Microsoft Entra ID, and Ping Identity. These were our primary alternatives as they offer comparably robust capabilities surrounding SSO, MFA, and identity management. Ultimately, we chose OneLogin by One Identity because it provided the right balance of functionality, ease of administration, integration with hybrid directories, and cost aligned with our requirements without adding unnecessary complexities.

My advice for others considering OneLogin by One Identity is to plan the implementation carefully before rolling it out company-wide. Identify critical applications and define roles and access policies, and determine how your directories will serve as the source of truth. It is also wise to execute the rollout in phases, starting with a small group of users. Investing time in the initial configuration will allow OneLogin by One Identity to significantly simplify identity management while providing a smoother and more secure authentication experience for users.

Regarding user identity synchronization functionality, my impression is very positive. It has been extremely beneficial in our hybrid environment. OneLogin by One Identity directly synchronizes identity information, providing a consistent way to manage it between our on-premise Active Directory and cloud applications. The main advantage is that when users are added, updated, disabled, or moved to different groups in the directory, those changes can automatically flow through OneLogin by One Identity to connected applications without requiring IT teams to update each system manually. It has made onboarding and offboarding processes more straightforward and effective, ensuring user access remains aligned across both on-premise and cloud environments.

I give this review an overall rating of ten out of ten.

OneLogin by One Identity is being used as a PAM solution managing approximately 20,000 machines, with 60% being VMs and 40% being cloud-based access management. OneLogin by One Identity is also used for monitoring purposes with two devices deployed: one for session management and another for security management. Both devices provide strong privileged access management capability, including password vaulting, session monitoring, session recording, and session access for all users accessing the system. Reports can be generated whenever required.

An extra server takes backups from the sessions, and sessions that are not stored in OneLogin by One Identity are stored locally as history when long-term retention is needed. The integration of phishing-resistant device trust through OneLogin by One Identity has positively impacted authentication processes by helping identify phishing users effectively since awareness of who will access the system is maintained.

The standout features of OneLogin by One Identity include session monitoring, which provides access for the last year to see who accessed the system, what happened, and what commands they ran. If something happens with a Linux machine, potential attacks or issues can be investigated. For network-wide issues, monitoring and session recording can be reviewed and compared. A comprehensive audit trail can be generated and the kind of compliance desired on security investigations can be applied. Automated password rotation and role-based access are supported. For cloud monitoring, SCIM provisioning is used, and the system is authenticated through Azure, now Entra, by role-based access.

For large enterprise organizations that are also vendors for clients with differing requirements, all built-in features are considered, but sometimes new features based on client requirements need to be inbuilt. Customizing OneLogin by One Identity could be improved with processes to implement new features quickly without having to wait for months. For example, token-based access was needed, and implementing token-based or SCIM provisioning features took time. Reducing the time window for implementing custom solutions would enhance the product.

Documentation-wise, OneLogin by One Identity is one of the best found for any product, so there are no concerns there. Support-wise, OneLogin by One Identity is doing a great job. Support and management, including contacting OneLogin by One Identity for issues, are always straightforward.

OneLogin by One Identity has been in use for the last four years with no concerns.

OneLogin by One Identity is very stable. Whenever problems are encountered, quick responses are received from OneLogin by One Identity's support team.

Regarding scalability, if more resources are needed to manage clients and machines, resources can be easily scaled. The black box machine can be attached as required; currently, five are used for session management and five for password rotation. As many as needed can be added depending on the resources required to support the cluster. Scaling is very easy and can be done at any time.

OneLogin by One Identity's support team is doing a great job, which is why the product has been used for the last four and a half years. Support and management, including contacting OneLogin by One Identity for issues, are always straightforward. Whenever problems are encountered, quick responses are received from OneLogin by One Identity's support team.

CyberArk was previously used before switching to OneLogin by One Identity. After conversations with both sales teams, the sales pitch of OneLogin by One Identity stood out compared to CyberArk. OneLogin by One Identity was found to be a better solution in cost and resource management, which is why the switch was made.

OneLogin by One Identity was deployed four years ago and is continuously being used with no issues. Currently, over 20,000 VMs and cloud environments are managed by OneLogin by One Identity. A cluster-based deployment is used, geo-redundant across three sites. It took one and a half months to build the lab environment. Once all problems and requirements for the environment setup were identified, the production deployment took around one month.

Since OneLogin by One Identity was implemented, a transition occurred from the old version, which was the TPAM solution. OneLogin by One Identity acquired that particular solution, and the transition was made to OneLogin by One Identity access management. This transition gave the capability to monitor, conduct comprehensive audits, and manage all resources easily whenever needed. Access control for admin personnel is very easy, and access can be managed. Whenever a system is required to be removed from the sync or out of the cluster, it is straightforward to remove from OneLogin by One Identity's Safeguard. The earlier PAM solution was quite difficult to set up, and this one has API Swagger development, making it easy to communicate. Whenever audits are needed, the REST API can be called, which is the biggest advantage.

Once all problems and requirements for the environment setup were identified, the production deployment took around one month. In terms of return on investment, significant savings are being made. After implementation, fewer engineers in the team were needed to manage OneLogin by One Identity. Onboarding is automated, so there is no need to worry about the onboarding process, and using REST API calls for access management simplifies automation.

Significant savings are being made in terms of return on investment. After implementation, fewer engineers in the team were needed to manage OneLogin by One Identity. Onboarding is automated, so there is no need to worry about the onboarding process, and using REST API calls for access management simplifies automation. OneLogin by One Identity's Safeguard detailed Swagger build is quite helpful. Implementation time has been cut by 60 to 70%, and the number of people required for management has decreased by at least 60 to 70%. Once architecture is defined and deployed in the cluster, scaling becomes easy, and integration is straightforward for adding new systems.

Regarding pricing, setup costs, and licensing, the virtual licensing option is suitable for small or midsize organizations. The black box developed by OneLogin by One Identity is not costly concerning the security features being provided.

Multiple options were evaluated before choosing OneLogin by One Identity, with CyberArk being one of them.

My advice for others considering OneLogin by One Identity is that if a solution is needed that can scale easily in the future and currently does not manage many users and machines, OneLogin by One Identity can be chosen. If monitoring capabilities and session recording are needed, OneLogin by One Identity is one of the best solutions to recommend based on experience.

OneLogin by One Identity is a well-designed and impressive product. Even with the new AI features, it will change how security is implemented with policies, offering admins options to implement changes. If new features are needed, OneLogin by One Identity's Safeguard is always ready to help with implementation and provide those solutions. As a user, the user identity synchronization across directories functionality is really valuable to have.

The AI features in OneLogin by One Identity are new, so many components have not been implemented yet. Just started looking into the agent and its available AI functionality, so it cannot be fully assessed at this time. However, given the way the product is built and its architecture, it should be 100% useful for users.

The overall review rating for OneLogin by One Identity is ten out of ten.