Centralized access monitoring has strengthened user security and simplified audit compliance
What is our primary use case?
My main use case for OneLogin is to monitor records and secure activities. I use it in my day-to-day work to monitor all user logins, IDs, and passwords, and to check which users have privilege to access particular folders, files, websites, or servers. I can check the logs and report any malicious login that occurs in the environment, then submit the report to my superiors.
My main use case is unique because it helps me secure every server. We have around 500 employees, and each uses different servers based on their departments. I give access privileges to particular users depending upon their servers, which prevents malicious logins and provides multi-factor authentication, creating a secondary layer of security. OneLogin also provides audit and compliance reports and data login, helping me understand user behavior and alerting customers regarding their input.
What is most valuable?
The best features OneLogin offers are password management, session management, analytics, and the safeguard on-demand scan. Password management stores and secures user passwords, and session management records all user actions, while analytics helps to detect threats in SaaS management.
I rely on password management the most because it automatically stores users' passwords and credentials, helping to provide smoother logins for the users. OneLogin has positively impacted my organization by giving complete clarity of all environments in a single console. Since I cannot monitor each of the 500 users individually, it gives a complete picture in that console, making it privileged software. Additionally, it helps in compliance and provides remote access with and without VPN, allowing users to log in anywhere, anytime.
What needs improvement?
OneLogin could be improved as it is a little slow when loading the cloud-based website, and anything in the roadmap would be appreciated. Regarding needed improvements, the support needs to be improved as the waiting time and escalation time are too long.
For how long have I used the solution?
I have been using OneLogin, this PAM solution, for more than two years.
What do I think about the stability of the solution?
OneLogin is stable, and it can handle growth very easily.
How are customer service and support?
My experience with customer support is that it is good but can be improved. I would suggest every organization to have a look at OneLogin as they will likely appreciate the product.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
I was using the ARCON PAM solution before choosing OneLogin.
What was our ROI?
As of now, I have not seen a return on investment.
What other advice do I have?
The specific outcomes include making audits easier. For example, if a user is out of the country and wants to access an in-house server, they can either connect via VPN or log in directly through a dedicated website, ensuring smooth access and providing logs.
I use SmartFactor Authentication to adjust authentication flows in real-time, depending on the risk score associated with the login attempt. This feature helps users access servers and websites, collects logs, and tracks compliance for login attempts, all of which is highlighted in the console.
My impression of the user identity synchronization across directories functionality is that it makes things easier because I can identify which user is accessing which directories, and synchronization is much simpler since it is in a public cloud.
The integration of phishing-resistant device trust impacts my authentication processes positively by making them more secure and easier. No one can access the server without passing multi-factor authentication, even with the right ID and password.
The end-user experience for signing in and authenticating to needed applications is very smooth for the users, and as of now, I have no complaints. I am satisfied with this product.
I have not used the adaptive login flows with Vigilance AI, so I cannot speak about it. HR-driven identity management plays a significant role in streamlining employee identity handling in my organization because it simplifies things and automates access based on department categories created for new hires.
I would rate this product an 8 out of 10.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Centralized security and smart authentication have protected accounts and reduced our costs
What is our primary use case?
My main use case for OneLogin is for security enhancement and account management. I use OneLogin mostly for security enhancement as well as users' account management, which includes the management of the client's accounts as well as team members' accounts.
What is most valuable?
The features I appreciate most about OneLogin involve the multi-factor authentication, which I consider one of the best features because it provides many options for increasing system and tool security. This helps us to see that our data and accounts are protected from threats, hackers, and unauthorized access. The MFA also helps us to add extra layers of security to the account.
The second feature I want to discuss is the integration feature; in this integration, many other features are exported from other tools and built into this single tool, which helps us to reduce manual effort and limit errors that could be caused by manual data exchange. All the information is gathered in a single place, and OneLogin has become a solution for all security purposes as well as the integration of other tools we use.
When we talk about security and usability, SmartFactor Authentication is a valuable tool because it helps in enhancing the tool's security. One of the valuable things I see is that it can detect errors and risks in authentication and provides advanced security for the tool, meaning that it can detect higher-risk logins and prevent unauthorized access. It also identifies non-compliant users and detects unsafe places, including anonymous IP addresses, which may be used by spies or phishers, providing strong security for the system.
OneLogin has positively impacted us in many different ways, particularly in terms of cost, as our costs have been reduced compared to what we have been spending.
What needs improvement?
OneLogin can be improved mostly by maintaining and upgrading it. Everything is running well currently, so I have not identified any required improvements at this time.
I believe the initial setup should be more straightforward. The initial setup should include all instructions in a tour video, so when someone is running it, they can watch and realize how things are done, not only regarding domain booking but also having posted videos daily about added features. This would make it easier for the person installing initially to know what should be done and what has been added. This would help anyone, regardless of their coding skills, to learn how to install it through video explanations.
For how long have I used the solution?
I have been using OneLogin for one year.
What other advice do I have?
I purchased OneLogin through the AWS Marketplace. I would rate this product nine out of ten.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Centralized access has strengthened security and simplifies account lifecycle management
What is our primary use case?
My main use cases for OneLogin are vaulting and secure authorization. I use password vaulting to securely save our passwords so that we can log in without any hassle with only one click, which saves our time and keeps our passwords safe.
This leads to our systems being robust without any outside attacks, making it very beneficial for us.
What is most valuable?
OneLogin offers robust security and one-click termination to prevent unauthorized access, which are excellent features for us. OneLogin also meets our IMA and SSO requirements.
The one-click termination feature has helped us remove dormant accounts and dormant access. Whenever someone leaves or has access to the system, we can remove their access easily, which has been very helpful for us.
User identity synchronization has been a good functionality because whenever we have to give access to a user in different areas, this functionality is very helpful for us.
The integration of phishing-resistant device trust has been a very good addition to our system because it has protected us from any kind of phishing attack that can lead to a data breach.
The end-user experience has been quite good; it is fluid and smooth, which contributes to a good end-user experience.
What needs improvement?
OneLogin needs improvement as some features sometimes have glitches and connectivity issues that need to be addressed by the team.
In addition to the glitches and connectivity issues, when we want to integrate OneLogin with other software, there are fewer integration options available, so they need to increase the integration options.
For how long have I used the solution?
I have been using OneLogin for the last year.
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
OneLogin is scalable according to your needs, so it is quite scalable.
How are customer service and support?
The customer support has been quite good with OneLogin.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
We were not using any other software or solution before OneLogin.
What was our ROI?
We have not seen a return on investment yet, as it has only been six months since we started using OneLogin, so we have not broken down the ROI.
What's my experience with pricing, setup cost, and licensing?
Pricing has been quite economical, and the setup cost and licensing are also quite economical.
Which other solutions did I evaluate?
We have not evaluated any other options; OneLogin was the first one we reviewed, and we purchased it.
What other advice do I have?
We do not use the single sign-on feature.
HR-driven identity management plays a significant role because whenever we hire a new employee, we have to give credentials, and this has been quite a smooth process for both the HR department and the IT department.
The benefits of customer identity and access management for external clients in OneLogin are quite beneficial for us.
If you are looking for a cost-efficient solution for your company, then OneLogin is the solution that you need to move forward with. I would rate this product a 9 out of 10.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Single sign-on has simplified secure access and reduced support tickets across all applications
What is our primary use case?
OneLogin serves as my organization's single sign-on platform to simplify user login and avoid the need to remember multiple passwords. We have set one strong password in OneLogin that enables users to access all business applications in my organization securely and easily. We have integrated a significant number of business applications under OneLogin, where they are secure and simple to access.
OneLogin functions as a single sign-on platform to access all our business applications across the different departments in my organization. Most, if not all business applications support single sign-on, ensuring a smoother onboarding and offboarding experience with a centralized application dashboard and an easier login experience.
What is most valuable?
The best features OneLogin offers include integration, seamless integration, security, single sign-on, and encryption. All the features are very important, especially when working with two-factor authentication, which boosts the security layer in my organization. Additionally, the seamless integration with different applications and systems in my organization has been effective, particularly for promoting collaboration.
Since OneLogin is a cloud-based solution, we are able to access it on various devices as long as we are connected to the internet, and this has truly boosted our remote collaboration. Since we started using OneLogin, we have been able to access all our accounts utilizing personal smart devices. It has simplified how we log into different applications through one strong password, enabling us to save considerable time and cost. It has been very convenient for employees working remotely where they can collaborate effectively. OneLogin allows quick access through single sign-on and the ability to send a security pin with one tap. It has also reduced the number of support tickets through the self-service reset password portal.
We have been able to directly integrate it to different directories where we are able to collaborate remotely and work from home conveniently. The experience is very seamless with no technical hiccups or glitches. One simply uses OneLogin to sign in to multiple business applications where we can use different applications throughout the day. OneLogin prevents cybersecurity attacks before they happen, and we are more vigilant.
What needs improvement?
The only downside I see with OneLogin is that there are some limitations with using the apps provisioning APIs that can lead to some termination or provisioning action not being completed. Additionally, the customization of the frequent tab should be improved.
For how long have I used the solution?
I have been using OneLogin for the past seven years.
What do I think about the stability of the solution?
I have not experienced any downtime or lagging, so OneLogin is very stable.
What do I think about the scalability of the solution?
OneLogin is very scalable and handles my organization's growth efficiently.
How are customer service and support?
OneLogin's customer support is very proactive and supportive. We are able to reach them at any time, 24/7, and they have been able to solve all our issues on time since we started contacting them.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
We were using Salesforce Identity, but that was a long time ago.
How was the initial setup?
The pricing is very transparent, and the setup is also very straightforward.
What about the implementation team?
I purchased OneLogin through the AWS marketplace.
What was our ROI?
We have achieved significant savings through minimizing help desk tickets because if one wants to change or reset a password, there is a self-service reset password portal. Time has been saved through single sign-on where we use one strong password to sign into all our business applications, thus saving considerable time compared to what we were doing previously. OneLogin has also made it easier to roll out new services to our employees, increasing our engagement with clients and employees. Our IT operations now spend less time managing accounts and can focus on other tasks.
We have been able to save 50% of our cost and time.
What's my experience with pricing, setup cost, and licensing?
So far, OneLogin is very cost-effective and easy to use. Cost is transparent, customization is adequate, and the support is satisfactory.
Which other solutions did I evaluate?
Before choosing OneLogin, I evaluated Gluu as another option.
What other advice do I have?
OneLogin is a great password management solution that adds security to all our business applications and consolidates password management, saving time and costs. OneLogin is very easy to use, cost-effective, and bolsters organizational security. It simplifies password management and saves considerable time and cost through easy login into different applications, also enhancing productivity because employees can focus on their daily activities.
The main business problem we wanted to solve while switching to OneLogin was users having to remember too many passwords due to the number of systems we have. We also wanted to ensure security over our business applications. Since then, OneLogin has handled security and has simplified the login experience greatly.
I rate this product an 8 out of 10.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Centralized access has streamlined onboarding and strengthened secure authentication workflows
What is our primary use case?
My primary use case for OneLogin is centralized identity and access management with single sign-on and multi-factor authentication across multiple internal and cloud-based applications. I use OneLogin to manage user authentication for SaaS applications, internal tools, and third-party platforms. Instead of maintaining separate credentials for each application, OneLogin allows me to enforce a single, secure identity for users, which significantly reduces password fatigue and improves security. Additionally, OneLogin helps me with user lifecycle management, such as onboarding, role-based access control, and de-provisioning users when they have left the organization.
A good example of how I use OneLogin for onboarding is when a new employee joins the organization. Once the user is created in my directory, the account is automatically synced to OneLogin. Based on the user's role and department, OneLogin assigns them to predefined roles and groups. On the employee's first day, they receive a single set of credentials and can access all required applications through OneLogin SSO without IT having to manually grant access to each system. This process has significantly reduced onboarding time, minimized access-related errors, and ensured that new hires have secure and immediate access to the tools they need from day one.
What is most valuable?
OneLogin's core value is its SSO capability, which provides a powerful mix of identity and access management for me. Users log in once and get access to all their cloud and on-premises apps via a central portal. This eliminates password fatigue, reduces help desk tickets, and simplifies user workflows across multiple users. OneLogin incorporates risk-based authentication using machine learning. It analyzes context and prompts additional verification only when risk is evaluated. Seamless integration with existing identity sources such as Active Directory, Google Workspace, and others allows admins to centralize identity management.
The single sign-on feature has had the biggest impact on my team, immediately improving productivity and user experience from a day-to-day perspective. Employees no longer need to remember or manage multiple credentials for different applications, which reduced login issues and password reset requests significantly. For the IT team, SSO simplified access management because application access is controlled centrally through OneLogin instead of being handled separately for each system.
While risk-based authentication and identity source integrations are extremely important from a security and automation standpoint, SSO delivered the most visible and immediate value to both end-users and support teams, making it the most impactful feature overall.
OneLogin has positively impacted my organization both from a security and operational standpoint. It helped me standardize authentication across applications by enforcing single sign-on combined with multi-factor authentication. This significantly reduced the risk of weak or reused passwords and improved overall access control. Features such as centralized policies and conditional access also gave me better visibility and control over who can access what. For end-users, the experience is much smoother. Employees can access all required applications from a single portal, which improves productivity and reduces frustration. As a result, I have seen fewer support tickets related to login issues and password resets. Overall, OneLogin has helped me improve security, increase efficiency, and scale my identity management processes as the organization grows.
What needs improvement?
OneLogin has been a good experience, but there is a scope of improvement in every application, especially in the admin user interface and overall usability. For new administrators, the dashboard and configuration screens can feel complex and not always intuitive. Some advanced settings are deeply nested, which increases the learning curve. A more modern, streamlined UI and guided setup flows would improve the admin experience. Reporting and analytics is another area for improvement; while OneLogin provides basic audit logs and reports, more customizable and detailed reporting would be helpful. Additionally, documentation for advanced use cases such as complex integration, custom application, or troubleshooting provisioning issues could be more comprehensive and easier to follow.
Pricing transparency and packaging could be clearer, especially as organizations scale and add more advanced features. Overall, these are incremental improvements rather than major gaps, and addressing them would make OneLogin an even stronger IAM solution.
For how long have I used the solution?
I have been working in my current field for four years.
What do I think about the stability of the solution?
I have had no issues with downtime or reliability; OneLogin has been stable in my experience. Since implementation, I have not encountered significant downtime or system outages that affected end-users. The platform handles authentication requests, SSO, and directory synchronization reliably, even as the number of users and integrated solutions has grown. Overall, OneLogin's stability gives me confidence that it can support my organization's current needs and scale as we grow.
What do I think about the scalability of the solution?
OneLogin's scalability handles growth in both end-user count and the number of integrated applications very well. As my organization expands, adding new employees, departments, or SaaS applications does not negatively impact performance or system reliability. Role-based access controls, automated provisioning, and directory integration scale smoothly, allowing me to maintain consistent policies and workflows even as complexity increases.
How are customer service and support?
The customer support experience was excellent. I have contacted support on a few occasions, mainly for advanced configuration guidance, troubleshooting provisioning issues, and clarifying documentation for complex integrations. In each case, the support team was responsive, knowledgeable, and professional, providing actionable guidance that helped me resolve issues effectively.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
OneLogin is the first solution that I am using; I did not use any previous solution before OneLogin.
Before using OneLogin, I evaluated other options and access management solutions, including Okta, Azure Active Directory, and Ping Identity.
How was the initial setup?
I had a good experience with the user identity synchronization across directories functionality. OneLogin makes it relatively straightforward to integrate with multiple identity sources, including Active Directory, LDAP, and cloud-based directories. This synchronization ensures that any changes made in the primary directory, such as onboarding a new employee, updating roles, or offboarding a departing user, are automatically reflected across all connected applications. This functionality has significantly reduced manual work and errors for my IT team.
What was our ROI?
One of the most tangible benefits has been the time saved for both IT and end-users. With single sign-on and automated user provisioning, onboarding a new employee now takes under an hour compared to several hours or even days previously. Offboarding is instantaneous, which reduces security risk and frees IT resources for other critical tasks. I have also experienced a reduction in help desk support tickets related to password resets and login issues that are roughly 30 to 40 percent lower than before. From a security perspective, the automated lifecycle management and risk-based authentication features have reduced the likelihood of unauthorized access, which, while harder to quantify, protects the organization from potentially costly security incidents.
I have seen clear, measurable improvements since implementing OneLogin, including a reduction in support tickets related to login issues and password resets. After rolling out single sign-on and MFA through OneLogin, password-related tickets dropped by roughly 30 to 40 percent as users no longer needed to manage multiple credentials across different applications. I also saw improvements in onboarding efficiency, with the time required to provision access for a new employee reduced from several hours or even days to under one hour, since most access is now assigned automatically based on roles and groups. I have experienced fewer access-related incidents and better audit readiness due to centralized login and reporting.
What's my experience with pricing, setup cost, and licensing?
Pricing is clear and competitive; while it is not the cheapest solution in the market, I found that the cost is justified given the combination of SSO, MFA, adaptive authentication, and lifecycle management features I receive. The initial setup cost was moderate. Basic single sign-on and directory integrations were straightforward to implement and did not require significant professional services. In terms of licensing, OneLogin's plans are flexible and allow me to scale user count and add advanced features as needed. I was able to align my subscription with the specific features I use, which helped optimize cost without paying for functionality I do not need. Overall, the pricing, setup, and licensing structure are transparent and deliver a good return on investment, especially when considering the operational efficiency and security improvements gained from using OneLogin.
What other advice do I have?
I would like to add a few more points about how I use OneLogin based on my experience. The process has significantly reduced the onboarding time, as I have mentioned.
I do use OneLogin Smart Factor Authentication to adjust authentication flows in real time, though in a targeted way rather than across all use cases. I have configured smart factor policies to evaluate contextual signals such as user location, device, IP reputation, and login behavior. When the risk level is low and the user is logging in from a known device or trusted network, the authentication experience is kept simple. If OneLogin detects higher risk, such as a login attempt from a new location, unfamiliar device, or unusual behavior, it dynamically enforces additional verification steps such as MFA. This approach allows me to maintain strong security without creating unnecessary friction for users during normal, low-risk access.
My impression of OneLogin's ability to provide a seamless end-user experience is very positive. The single sign-on functionality ensures that users only need to remember one set of credentials to access all their applications, which eliminates password fatigue and reduces login-related frustration. Employees can access everything from email to collaboration tools, project management systems, and internal dashboards through a single portal. MFA is integrated smoothly and supports various options such as push notifications, authenticator applications, and biometrics. Overall, the login and authentication experience is intuitive and fast, which has resulted in fewer support tickets, improved productivity, and higher user satisfaction. From a usability perspective, it successfully balances security with convenience, which is essential for widespread adoption across the organization.
I have used the adaptive login flows with Vigilance AI, and they have added an extra layer of security and intelligence to my authentication process. Vigilance AI analyzes contextual signals such as device, location, IP reputation, and user behavior to dynamically assess risk during each login attempt. Based on that assessment, OneLogin adjusts the authentication flow in real time, for example, prompting additional verification steps only when unusual or high-risk activity is detected. This approach has been very effective in reducing the risk of unauthorized access while keeping the experience smooth for trusted users.
The integration of phishing-resistant device trust has had a positive impact on my authentication processes by ensuring that only trusted devices can access my systems. OneLogin adds an additional layer of security beyond traditional credentials and MFA. This reduces the risk of account compromise even if user credentials are exposed, as access attempts from untrusted or unmanaged devices are automatically blocked or require additional verifications. For end-users, the experience remains largely seamless on their managed devices, while potentially risky login attempts are automatically mitigated. Overall, phishing-resistant device trust strengthens security without adding unnecessary friction, making my authentication process both safer and more effective.
The role that HR-driven identity management plays in streamlining employee identity handling in my organization is critical. By integrating OneLogin with my HR systems, I automate key parts of the employee's lifecycle. When a new employee is added to the HR system, OneLogin automatically provisions accounts, assigns roles, and grants access to the necessary applications based on their department and job function. Similarly, when an employee's role changes or leaves the organization, access is updated or revoked automatically. Overall, HR-driven identity management ensures a consistent, efficient, and secure process for managing employee identities, which saves time, reduces risk, and improves the overall user experience.
I would recommend others looking into using OneLogin to plan integrations carefully, identifying which applications, directories, and systems they want to connect upfront. Mapping out roles, user roles, and access policies in advance will make onboarding smoother. Start simple, then expand; begin with core features such as single sign-on and multi-factor authentication. Once a team is comfortable, implement advanced features such as smart factor adaptive authentication and device trust policies. Provide training for IT admins on advanced configurations, and monitor and review policies regularly.
OneLogin has strengthened my security posture, streamlined user onboarding and offboarding, and provided a seamless experience for employees accessing multiple applications. I would rate this solution an eight overall for organizations looking for a robust enterprise IAM solution that balances security and usability.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)