Overview

Product video
OneLogin Customer Identity provides a comprehensive Customer Identity and Access Management (CIAM) solution built on top of an infrastructure that can handle millions of customer transactions. It seamlessly scales to match the pace of your business, ensuring smooth operation of your AWS applications.
UNIFIED CLOUD DIRECTORY: As you build customer applications on AWS, the OneLogin Cloud Directory centrally manages identities across your environment. Easily synchronize user information from an external directory and combine it with our automated user provisioning offering for full identity lifecycle management.
STRONG, FLEXIBLE AUTHENTICATION: Use MFA to deliver a secure login experience across all devices and touchpoints. Reduce friction during the login and account registration process with SAML, OIDC, and Social Login. Add risk-based, context-aware authentication with OneLogin SmartFactor to further protect your organization from account takeover threats.
DEVELOPER FRIENDLY: Provide personalized identity experiences to build trust and loyalty across your brand. Customize login pages, email domains and other touchpoints throughout the customer journey using our APIs and SDKs. Combine with AWS developer solutions to build your next-gen modern application.
Get Started Today! Our foundational offering includes Cloud Directory, social login and registration, customized branding, and base MFA using OneLogin Protect or other third-party providers. Upgrades available for Advanced Directory, SmartFactor Authentication, and more.
If interested in private offers, email us at partnercircle@oneidentity.com .
Highlights
- UNIFIED CLOUD DIRECTORY: The OneLogin Cloud Directory is a centralized identity store in the cloud. It can capture just the amount of profile data needed to authenticate the customer or be enriched with data from external sources.
- SOCIAL REGISTRATION AND LOGIN: Usernames and passwords are obstacles in the buying path. Eliminate friction in the customer registration and authentication process by allowing customers to use social login via Google, Facebook, LinkedIn, and more.
- MULTI-FACTOR AUTHENTICATION (MFA): Add strengthened protection with CIAM MFA or upgrade to CIAM SmartFactor Authentication to protect your users and apps from cyber threats.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide

Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
|---|---|---|
Customer Identity Foundations | Customer Identity up to 100,000 monthly active users | $9,600.00 |
Custom | Private offers available - email partners@onelogin.com | $9,600.00 |
Vendor refund policy
Please refer to the One Identity terms of service at https://www.onelogin.com/terms/ .
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
Subscription includes Standard Support. Additional support plans available via private offers. To learn more about OneLogin Customer Support, visit
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.


Standard contract
Customer reviews
Centralized access management has improved security and streamlines employee onboarding
What is our primary use case?
Our main use case for OneLogin Customer Identity is for employee access management. When a new employee joins, we set them up in OneLogin so they can securely access all our internal apps with just one login. This has simplified onboarding and kept everything secure.
We also use OneLogin Customer Identity to integrate with some third-party tools. Having everything tied together is convenient, so our team spends less time logging into separate systems and more time being productive.
What is most valuable?
The best features OneLogin Customer Identity offers are identity management, single sign-on because it saves a ton of time, and multi-factor authentication, which adds a strong layer of security. I really appreciate how easy it is to set up and manage groups and permissions.
Single sign-on really streamlines things. Our team logs in once and they get instant access to all the apps they need, which cuts down on password fatigue. Managing groups and permissions was a smooth process overall, but we did have to spend some time initially planning out the group structure to avoid overlap. Once it was set up, it has been really efficient.
The reporting and analytics are super helpful. We can see who is accessing what, when, and spot any unusual activity. This gives us a solid overview of how our team is using their support.
OneLogin Customer Identity has had a very positive impact on my organization. The biggest benefit has been improved security and better access management. Before using OneLogin Customer Identity, managing user accounts across multiple applications took a lot more time and effort. Now, with centralized authentication and single sign-on, our employees can access the tools they need quickly and securely. It has also reduced the number of password-related issues and support tickets, which saves time for both our IT team and end-users. From a security standpoint, features such as multi-factor authentication give us great confidence that only authorized users can access our systems. Overall, it has helped us improve operational efficiency, strengthen security, and provide a better user experience for our team.
What needs improvement?
I had a positive experience overall, but there are a few areas where I think OneLogin Customer Identity could be improved. One area would be the initial setup and configuration process. While the platform is powerful, some of the advanced settings can be a bit complex for new administrators, and more guided setup options would be helpful. I would also appreciate more customization in reporting and dashboards. The existing reports are useful, but having additional flexibility to create custom reports and visualize data would make it even more valuable. Another improvement could be expanding the documentation and troubleshooting resources for advanced integrations. Most integrations work well, but when dealing with more complex environments, more detailed examples and best practices would help speed up implementation. These are relatively minor points overall. OneLogin Customer Identity has been really secure and easy to manage, and we are satisfied with the results.
Another area of improvement would be the user interface and the mobile experience. The overall interface is clean and functional, but some administrative sections can feel overwhelming, especially for new users or administrators who are not familiar with the identity management platform. These enhancements would be an improvement.
For how long have I used the solution?
I have been using OneLogin Customer Identity for about six months now, and it has really helped us streamline user access. It has been reliable for both multi-factor authentication and single sign-on.
What other advice do I have?
My advice to others looking into using OneLogin Customer Identity would be to start by clearly defining your identity and access management requirements. Before implementation, take time to understand your user groups, applications, access policies, and security requirements, as this will make the deployment process much smoother. I would also recommend planning your role and group structure carefully from the beginning. A well-designed access model can save a lot of administrative effort later and make onboarding, offboarding, and permission management much more efficient.
Another recommendation I would provide is to take full advantage of features such as single sign-on, multi-factor authentication, and automated user provisioning. These capabilities provide some of the biggest benefits in terms of security, user experience, and operational efficiency. Overall, OneLogin Customer Identity is a strong solution for organizations looking to improve security and simplify access management. If it is implemented with proper planning and governance, it can deliver significant benefits in both security and operational efficiency. I would rate this product a nine out of ten.
Centralized access has reduced errors and automation now streamlines multi app workflows
What is our primary use case?
My main use case for OneLogin Customer Identity involves addressing the integration of applications and resolving access issues that customers may experience. If customers face access problems, we must reach out to the IDM team, Identity and Access Management , to investigate what is wrong with their access process.
A specific example of using OneLogin Customer Identity to resolve an access problem occurred when a customer of mine was using an application and encountered access issues. We checked everything, such as his email and whether his SSO was configured correctly, and then reported the issue to the IDM team, which enabled access. The customer had only read access, so it was modified to provide him with modify access allowing him to use those applications effectively and complete his work on time.
While my main use case for OneLogin Customer Identity is quite positive, I can also say that the tool is really good, with continuous enhancements each year. Now, we are more frequently utilizing the AI tool, which will likely have a significant impact on the applications.
What is most valuable?
One of the best features OneLogin Customer Identity offers is that it is a third-party tool, and while the integration was initially tough to understand, we gradually learned how to integrate the applications our users and customers use in-house. Our customers are very happy with OneLogin Customer Identity, which allows them to access multiple applications without needing to register every time. After the initial registration, their user email ID is enabled, and this has made their work much smoother.
The integration process has saved considerable time for our team and customers because they only need to go to one portal to check their applications and log in from there. This efficiency allows them to work on other applications integrated with our in-house products, benefiting both customers and our in-house users and significantly reducing errors.
I want to add that the introduction of the AI tool opens opportunities for further enhancements, which we are actively working on as part of the product team. We aim to improve OneLogin Customer Identity to ensure it remains reliable and minimizes errors in the future.
The impact of OneLogin Customer Identity on our organization is positive because it reduces errors and decreases the workload. The automation of processes, especially concerning level one support that previously depended on service desk engineers, has been beneficial for our customers and users. Although there is a rare occurrence of issues that require following the P1, P2 process for resolution, the overall impact remains positive.
Previously, we dealt with multiple tools, including ServiceNow , that required manual logins across different browsers, creating many challenges. After implementing OneLogin Customer Identity, we launched all internal applications on OneLogin Customer Identity, allowing customers to log into just one application and access everything without hassle. This consolidation has created an automated system, leading to positive customer feedback about the significant impact on their workload.
What needs improvement?
OneLogin Customer Identity can improve by focusing on enhancements that promote reliability and independence from other applications. These improvements will better serve our customers and make the product even more dependable.
There are many potential enhancements, with one of the best being the implementation of passwordless authentication. Transitioning from traditional password authentication to biometric verification would greatly enhance security and user experience.
For how long have I used the solution?
I have been using OneLogin Customer Identity for about four years.
What do I think about the stability of the solution?
OneLogin Customer Identity is stable.
What do I think about the scalability of the solution?
At the moment, I have not faced any challenges with OneLogin Customer Identity's scalability. The difficulties experienced during integration were due to it being a new product for us, but now that I have hands-on experience, it has proven to be a reliable tool for our customers.
How are customer service and support?
My experience with customer support for OneLogin Customer Identity has been positive.
What other advice do I have?
My advice for others looking into using OneLogin Customer Identity is to be specific to the domain, understand the MFA setup, and know how to handle locked accounts and forgotten passwords, guiding users on how to connect with the IT department. We also aim to provide hands-on experiences that help users familiarize themselves with OneLogin Customer Identity's access process.
I would recommend OneLogin Customer Identity to large organizations because it is very effective at saving time for customers. It is crucial for customers to understand how the MFA works and be familiar with lockout policies and password reset procedures. OneLogin Customer Identity can provide a direct link for users to reset their passwords without intervention. Moreover, I suggest enabling passwordless authentication, especially for customers using personal devices.
The accuracy and reliability of OneLogin Customer Identity's output are sometimes problematic, but these issues are being addressed with collaboration between internal teams focused on security and product development.
Regarding OneLogin Customer Identity's AI capabilities, my thoughts focus on governance and security. When it comes to the security and governance of the AI features, I am aware that while AI has potential, it can also pose risks, especially when it involves breaking the code. Tools like Microsoft Copilot and ChatGPT show that there are challenges, indicating that the AI features still need significant improvements for data security.
I rate OneLogin Customer Identity an 8 out of 10 at the moment because it is functioning really well. I chose 8 out of 10 because I believe no tool can be 100% perfect; every product needs improvement and enhancement over time, which is why I deducted two points.
Unified customer identity has delivered seamless branded logins and secure passwordless access
What is our primary use case?
OneLogin Customer Identity has multiple use cases. I deployed this customer identity platform for about one and a half years with a customer whose primary use case was wanting a seamless customer experience that could provide customized branded registration and login experiences according to their wishes. We defined it according to their requirements. They also wanted feasible customer authentication and authorization that implements MFA options such as biometrics, passkeys, and SMS.
There can also be use cases for centralized identity management, which consolidates identities across multiple brands or applications into a single directory for better management and insights. In this case, the customer had three different environments and wanted central management. For that, we used OneLogin Customer Identity . They also wanted better and secure migration of legacy users. They had very old user data, so we used the migration hook, which is the best feature in OneLogin . It allows users to log in with their old credentials which are validated against an external database, and it is easily migrated seamlessly to OneLogin during the login process.
What is most valuable?
OneLogin Customer Identity has a feature of passwordless authentication. For social registration to speed up the user experience, we used passwordless authentication. They have that feature in their user and settings folder.
OneLogin Customer Identity has some core categories. If a customer wants to use APIs related to authentication, we build a custom login page, then manage multi-factor authentication, then establish a secure user session. It depends on the client's needs. We have used a couple of APIs there. Then it comes to their administration APIs, which allow you to programmatically develop user management, which creates, updates, and deletes customer records. It has enough support of APIs.
What needs improvement?
There are some issues I dislike about OneLogin Customer Identity. Customers are still facing performance inconsistencies. Many times users have reported issues such as slow loading times, some occasional browser extension failures, and long session timeout behaviors.
There is also complex implementation and configuration. Setting up this product can be demanding, particularly for an organization with a complex application, legacy applications, or larger application data which requires extensive custom workflows or a need for advanced branding. This will take a larger amount of time for deployment. Customization is easy but it takes time to customize, so it depends on the situation.
Occasional service interruptions also occur. During my tenure, some users reported occasional outages or connectivity glitches which disrupted access to business applications.
For how long have I used the solution?
I have used it for almost one and a half years, starting from 2024 to mid-2025.
What do I think about the scalability of the solution?
In terms of scalability for OneLogin Customer Identity, I don't think it has great scalability because many times users have reported issues about their loading browser extension and sometimes their session timeout. That was a disturbing performance. I don't recommend it for a client if they have a larger user base. If they are a very small-scale organization, then they should prefer OneLogin Customer Identity.
How are customer service and support?
OneLogin Customer Identity has region-wise technical support. If we work in Asia, they have dedicated support people. If you are working from the USA, then they have a dedicated support system from the USA. They have a dedicated support system and availability depends on the package purchased. If a customer has purchased a P1 level package, then they are available immediately. If the customer has purchased a P2, then they are available in two hours. If customers purchase a P3 level product, then they are available in 24 hours. The time varies depending on the price they have purchased.
Which solution did I use previously and why did I switch?
How was the initial setup?
Deployment of OneLogin Customer Identity is moderate. It depends on the client's requirement. Some clients want three applications and one AD base, which took almost 20 to 25 days for complete deployment. Some clients have larger application integration, which took almost six months for step-by-step integration. It takes time depending on the client's requirement and the number of applications to be deployed.
What about the implementation team?
I was a developer as well as support and admin. I had a team of 10 people. Out of that, we were six developers and four were support and admin. We collectively worked on it.
What's my experience with pricing, setup cost, and licensing?
I'm not sure of the exact rate, but OneLogin Customer Identity is cheaper than Okta. Okta is costly, and OneLogin is cheaper. It depends on the client and their budget. If they don't have a large budget, then they can prefer OneLogin Customer Identity, and if they have enough budget, then they should go for Okta.
Which other solutions did I evaluate?
I prefer Okta more than OneLogin. People should choose Okta if they want advanced customization and extensive third-party integration. Okta has around 7,000 pre-built applications. They have very extensive third-party integration and a very large user base. They are very good in support as well as documentation. People should choose Okta over OneLogin. For OneLogin, if a customer is looking for a cost-effective solution with faster setup and excellent simple-to-use workflows, then they should go for OneLogin.
What other advice do I have?
Speed is moderate and quality is good. For support, I would rate it as eight out of 10, and for quality, it is a full 10 out of 10 because I haven't faced any issues and they have supported us a lot of times. Overall, I would rate OneLogin Customer Identity as seven out of 10.
Centralized identity has strengthened banking security and is improving user authentication
What is our primary use case?
I have been dealing with OneLogin Customer Identity for around one and a half years. The major use case for identity management includes a multifactor authentication module and identity management for both internal and external CIAM (Customer Identity Management ). Since it deals with financial and banking, it is crucial to identify the customer accessing core banking and mobile banking, as well as managing internal identities such as privileged access management and employee-to-employee management.
What is most valuable?
The biggest benefit of OneLogin Customer Identity for cybersecurity in a banking environment is the ability to manage many virtual machines, servers, and applications that require different credentials and privileges by using single sign-on, which automates the process. It can be challenging to remember every application's password, so managing access centrally with single sign-on and multifactor authentication is recommended for both financial institution customers and internal employees.
Furthermore, identity access management encompasses more than just credentials and privileges; it includes user identity, behavior, and characteristics, driven by machine learning, and is increasingly required in my country, Ethiopia.
Passwordless login may improve user satisfaction and security in general by functioning in a manner similar to single sign-on, as it allows users to log in using their email account to access LinkedIn and other social media in a similar fashion.
Analytics is valuable in OneLogin to optimize customer identity strategy by characterizing user behavior and characteristics for security posture. It helps identify unusual activities or deviations from normal behavior, enabling actions such as blocking access or sending notifications. Each user has unique characteristics, making identity management encompass more than just a password and username.
What needs improvement?
I see areas for improvement with OneLogin as most clients require a market reference or evaluator report, such as a Gartner report, to be convinced to use a new product. Many vendors lack clear documentation or site references. Clarity in documentation, similar to that with Thales and Fortinet, simplifies our job and helps us convince clients by providing links to credible sources.
There may be latency issues with OneLogin Customer Identity, as most of these security products are virtual and software-based. Latency and performance depend on the physical server, and fulfilling vendor-recommended resource requirements will ensure functionality; thus, if those requirements are met, there should be no issues.
For how long have I used the solution?
I have been in the domain of identity management for more than one and a half years, with a strong focus on cybersecurity products, not limited to OneLogin Customer Identity.
What do I think about the scalability of the solution?
I see no limitations regarding scalability with OneLogin Customer Identity.
What was our ROI?
I am not certain about ROI related to OneLogin Customer Identity, but it is vital to protect financial institutions' resources and core banking, which I consider a significant ROI. Protecting these assets is crucial, especially for financial institutions, to mitigate risks.
Which other solutions did I evaluate?
Compared with CyberArk, I would say OneLogin Customer Identity is affordable. Comparing OneLogin Customer Identity with CyberArk technically, I think CyberArk is better; I have had CyberArk for around two years or more, and I know of two or three customers in Ethiopian financial institutions using CyberArk Identity Access Management . According to Gartner, CyberArk is superior, but we are also competitive with OneLogin Customer Identity.
What other advice do I have?
I have worked in presales and deployment in my country, Ethiopia, specifically with load balancers. I have been involved in presales and deployment with the F5 load balancer and Radware load balancer.
For the F5 load balancer in presales, I have been involved with LTM (Local Traffic Manager) and ASM (Advanced Application Firewall) for the WAF in a single appliance, which integrates WAF and load balancer in a single appliance. In deployment after-sales, I have worked with the basic load balancer only, specifically not for the WAF; however, in terms of WAF deployment, I have experience in FortiWAF deployment, presales, and deployment, while for load balancer, I have worked with Radware ADC load balancer and F5 LTM.
I do work with F5 Silverline Managed Services for firewall and Web Application Firewall. I do not work with F5 Distributed Cloud Services , as most of our customers' current need is on-premises products and solutions.
I do not work with NGINX products such as NGINX App Protect or NGINX Ingress Controller . I have experience with LTM, WAF, and BIG-IQ, the central manager.
For other products regarding identity management, I have been involved with CyberArk in presales only. For CyberArk, I work only with Identity Access Management . I do not work with CyberArk IGA powered by Zilla, as CyberArk's offerings are on-premises.
For Fortinet products, I am involved with Fortinet WAF, specifically on-premises and the physical appliance. For Fortinet AppSec, the application monitoring is a cloud-based software as a service, and as I highlighted earlier, most of my clients, such as financial institutions and banks, need on-premises solutions; thus, for the majority of the vendors, I have been involved in the on-premises solutions.
For API capability, I think this is common and a must for the majority of the vendors, as API is essential for integration; for instance, in identity management, integrating with SIEM to centralize logs is crucial for security management, allowing security operators to analyze logs for attacks or activities. API integration with third-party applications is vital; the customer typically handles third-party API sections, while we manage our product integration using vendor support procedures.
For the centralized management console, I note that in terms of deployment, if the IAM application, specifically OneLogin Customer Identity, is deployed in a main data center, DR, and various servers as high availability in a multi-deployment architecture, central management is indispensable. It allows management of configurations and operations centrally from one machine instead of logging into multiple instances.
Regarding OneLogin Customer Identity, for deployment options and license comparisons with other vendors, I am involved in the presales; if we win an opportunity, we will deploy together with vendors. After deployment, I will assess the ease of deployment, such as for Fortinet products where I have been involved with SIEM , next-generation firewall, and WAF along with F5 and Radware load balancers. For OneLogin Customer Identity specifically, it is still in progress, and I will provide updates once I am involved in the deployment.
My overall review rating for OneLogin Customer Identity is 8 out of 10.
Strong security and single sign-on have boosted remote productivity and protected sensitive data
What is our primary use case?
My main use case for OneLogin Customer Identity is to ensure security and privacy on HIPAA and PCI-compliant platforms while easily storing employee passwords so that the tech team is not consistently bombarded by forgetfulness from the employees. This has solved both our privacy concerns as well as improved the flow of priority tickets for our technology team.
OneLogin Customer Identity helps us securely store our credentials, which is vital because strong, long passwords are a must for security nowadays but almost impossible for humans to remember. Storing passwords in notes is a security breach by itself, so when OneLogin Customer Identity encrypts all the sensitive data before saving it, it also gives us easy access whenever we need to log in to our applications.
It is very easy to use OneLogin Customer Identity. Logging in and accessing all the business applications under one tool is very straightforward, which provides sufficient security for all our applications and keeps everyone focused because they can open tabs of how they will be doing what they will be doing during the day, thereby improving productivity in my organization.
How has it helped my organization?
OneLogin Customer Identity has positively impacted our organization by significantly improving our security. We have enhanced our security by approximately eighty percent, especially for our business applications. We do not have to fear data breaches or losing our data with a frictionless sign-in that saves us time.
The time savings from OneLogin Customer Identity has allowed us to log in and access our multiple business applications, enabling us to collaborate remotely. Since we just have to log in to OneLogin Customer Identity to access the business applications, we can multitask on projects or tasks, thereby increasing productivity.
What is most valuable?
The best features OneLogin Customer Identity offers include the ability to store credentials for different applications, one-click login to all platforms, top-notch security for our application, privacy and security for compliance, ease of employee efficiency, and enhanced security for remote workers. It also includes easy, secure storing of passwords for multiple software within the company.
I find myself relying on enhanced security for remote workers most often. The privacy and security for compliance is excellent as it has allowed us to show investors all the privacy measures we have implemented for our software and partners.
What needs improvement?
OneLogin Customer Identity's mobile app is not the best and could use some improvements for easy use on the go or at home or remotely.
The needed improvements for the mobile app could also include enhancing the user interface to be more user-friendly and easy to customize to fit a user's preference or needs.
For how long have I used the solution?
I have been using OneLogin Customer Identity for the past six years and a few months.
What do I think about the stability of the solution?
OneLogin Customer Identity is very stable; I have not experienced downtime.
What do I think about the scalability of the solution?
OneLogin Customer Identity is very scalable because it handles all my organization's business applications under one roof where they are secure, easy to log in, and save a lot of time.
How are customer service and support?
The customer support for OneLogin Customer Identity is top-notch.
I would rate the customer support eight out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I previously used Microsoft Azure and Google Cloud CDN .
I switched from Microsoft Azure and Google Cloud CDN to OneLogin Customer Identity because it is very easy to use and cost-effective compared to Microsoft Azure.
How was the initial setup?
OneLogin Customer Identity is very easy to set up and log in, making everything very easy.
What was our ROI?
We have seen a return on investment because we have improved our security significantly, and the frictionless sign-in saves us time.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing has been that the price is one of the most cost-effective tools, especially regarding great signing and security.
Which other solutions did I evaluate?
Before choosing OneLogin Customer Identity, I evaluated other options, including Vasco eDiscovery .
What other advice do I have?
My advice for others looking into using OneLogin Customer Identity is that it is a must-have for every company looking to secure their accounts and avoid security breaches.
My user experience using OneLogin Customer Identity has been very positive so far, and I would recommend it to everyone who values their privacy and security. It is also a great solution for forgotten passwords because you just have to remember one password now to unlock everything. I have rated this product nine out of ten overall.