OneLogin Workforce Identity logo

    OneLogin Workforce Identity

    Elevate organizational security with strong and adaptive authentication, preventing unauthorized access to your most critical systems, applications and sensitive data.

    Ratings and reviews

    4.2
    104 ratings
    3 star
    1 star
    49%
    50%
    0%
    1%
    0%
    44 AWS reviews
    |
    60 external reviews
    External reviews are from G2  and PeerSpot .

    Filters

    Review type

    AWS Marketplace reviews
    External reviews
    Reviews (104)
    Satvik Dumbre

    Centralized access control has protected franchise data and reduces manual permission management

    Reviewed on Oct 18, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for OneLogin by One Identity is for identity and access management, which establishes clear rules for authentication.

    A specific example of how I use OneLogin by One Identity for authentication is when a franchise owner visits our page and submits an inquiry form. The form needs to be handled securely, and only one authorized person should access it, ensuring secure account management through role-based permission and server-side authorization checks, which prevent unauthorized access. In our internal team, an employee responsible for reviewing franchise inquiries may need access to some inquiry records, while as an administrator, I can require additional privileges to maintain website settings and user accounts.

    I primarily use OneLogin by One Identity for permission and user access reduction, ensuring that if any employee wants to change their role or leaves, their access is reviewed and removed as appropriate. It provides a solid basis for assigning specific role-based permissions to employees and the same for user accounts, allowing users to access only their own account login information, preventing unauthorized checks.

    How has it helped my organization?

    OneLogin by One Identity has positively impacted my organization by aiding in the development of our site, making it quite useful for our internal team, and we are still in the process of rolling it out to our users. Friends of mine who manually created dashboards or handled identity access faced various security issues, so I believe it's a sound investment on our part.

    Since using OneLogin by One Identity from the beginning of our website development, I cannot provide specific metrics yet because we are still onboarding franchise owners, users, and leads; however, I have not experienced any security breaches thus far.

    What is most valuable?

    The best features OneLogin by One Identity offers, which stand out to me the most, include centralized identity and access management, making access policies easier to maintain as my business grows. Role-based access control allows me to assign permissions based on responsibilities rather than providing all users with the same level of access. Multi-factor authentication adds an essential layer of protection for both administrative and user-based accounts. I particularly appreciate multi-factor authentication because I find it is not commonly available in this price range, unlike offerings from Microsoft Teams and others.

    The impact of multi-factor authentication on my organization has resulted in users being a bit annoyed due to it being mandatory; however, we have observed significantly fewer password change requests from both users and our internal team. With multi-factor authentication implemented, we maintain greater security around our access portal storing substantial amounts of franchise data, company information, and leads, which must be protected from potential breaches. Multi-factor authentication is crucial in safeguarding our data, even if passwords are leaked.

    Regarding OneLogin by One Identity's AI capabilities, I find its governance and security to be top-notch. OneLogin by One Identity's AI capability is particularly useful for identifying and securing access.

    What needs improvement?

    One area for improvement for OneLogin by One Identity is the integration complexity; having clearer documentation, practical integration examples, and an easier configuration workflow would enable my development team to implement identity security more efficiently.

    Additionally, sometimes my internal team reports a lack of clear error messages during their login attempts, so providing accurate error messages would enhance the experience.

    I chose a nine out of ten mainly because of the need for clearer and simpler documentation.

    For how long have I used the solution?

    I have been using OneLogin by One Identity for around five months.

    What do I think about the stability of the solution?

    I have not encountered any stability issues with OneLogin by One Identity, as it has not crashed or shown problems when accessing my portal; it is stable in my view.

    What do I think about the scalability of the solution?

    Thus far, OneLogin by One Identity has shown scalability as we are still growing; we are currently on per-user charges and are considering other solutions as we progress.

    How are customer service and support?

    For customer support, I contacted them for basic queries and found them to be quite good, as they provided clear explanations.

    Which solution did I use previously and why did I switch?

    We have not used a different solution before; this is our first tool.

    What was our ROI?

    I have seen a good return on investment; we require fewer employees because we cannot solely depend on one solution, yet I believe my money and our investors' money are well spent.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup cost, and licensing has been quite good; the website was informative and we opted for their essential plan, which costs around six dollars per user per month.

    Which other solutions did I evaluate?

    Before choosing OneLogin by One Identity, we evaluated Microsoft ID and opted for OneLogin by One Identity due to its single sign-on feature, centralized user access, and favorable price range. Friends recommended it as a great option for a new startup.

    What other advice do I have?

    My advice for others considering OneLogin by One Identity is that it is a good choice, with reasonable pricing around three dollars, which translates to around three hundred Indian currency. The essential pack is priced around five hundred or six hundred. I recommend OneLogin by One Identity because of the single sign-on features; my experience with their sales team has been positive, as they understand our requirements and engage in helpful discussions. I rate OneLogin by One Identity a nine out of ten.

    MayankGarg

    Centralized sign-on has simplified secure access and has reduced password issues daily

    Reviewed on Oct 09, 2026
    Review provided by PeerSpot

    What is our primary use case?

    First of all, it is Mindfire Systems, not MindFresh Systems. Primarily, we are using OneLogin by One Identity to authenticate for secure access to all our organization's applications. Additionally, it simplifies login through a single sign-on, which is known as SSO. It reduces the need to manage multiple passwords and helps ensure that only authorized employees can access the tools and resources when they are needed.

    When starting my workday, I always use OneLogin by One Identity to access multiple work applications with a single sign-on instead of entering separate credentials for each application in our system. MFA adds an extra layer of security, while centralized access management helps protect company data, ensure better security, and makes daily work more convenient.

    OneLogin by One Identity is very useful, especially because it makes accessing different applications simple while maintaining security. Having centralized access management and single sign-on saves time during daily tasks. The features such as multi-factor authentication help protect company accounts. It makes managing access easier when team members join or leave the organization.

    How has it helped my organization?

    OneLogin by One Identity has improved our daily workflow by making access to work applications faster, simpler, quicker, and more convenient through single sign-on and multi-factor authentication. We see it reduces the time spent entering credentials and helps minimize password-related issues. MFA adds an extra layer of security while centralized access management makes it easier for the IT team to control all user permissions in our organization.

    The main improvement I have noticed is less time spent logging into different applications and handling password-related issues. The single sign-on makes it quicker to switch between work tools and helps in maintaining productivity throughout the day.

    What is most valuable?

    In my opinion, the best features of OneLogin by One Identity are single sign-on, multi-factor authentication, and centralized user access management. I appreciate how it lets me access multiple work applications without remembering different passwords for each one. The security features add an extra layer of protection, while centralized administration makes it easier for our IT team to manage permissions and control access to company resources.

    I always use single sign-on, primarily because I regularly switch between different work applications throughout the day. It saves my time by eliminating repeated logins and the need for remembering multiple passwords.

    When moving between project management tools and the internal system, I can access everything smoothly without interrupting my workflow. It also reduces password-related issues and makes my daily tasks more efficient and secure.

    We use Smart Factor Authentication because it balances security with convenience by adjusting authentication required based on login risk. When implemented well, it can help reduce unnecessary verification for routine logins while adding extra checks for suspicious activity.

    I find user identity synchronization across directories very useful. It helps keep employee information consistent and reduces manual administration when new users join, leave, or change their roles. Synchronized identity records can make it easier to maintain appropriate access across connected systems. Overall, it offers smoother user management and reduces the risk of outdated permissions.

    Phishing-resistant device trust can strengthen security by ensuring that access comes from trusted devices and using authentication methods that are harder to compromise through phishing. It encourages a more security-focused approach by considering both the user identity and the device being used. I see it can help reduce unauthorized access while keeping logins convenient for legitimate users. Clear device enrollment and recovery processes are also important to avoid disrupting daily work.

    OneLogin by One Identity provides a smooth sign-in experience through single sign-on, allowing users to access the applications they need without repeatedly entering their credentials. It saves time and reduces interruptions during daily work, ensuring better productivity, security, and maintaining transparency.

    What needs improvement?

    OneLogin by One Identity works well overall and does not impact our daily tasks, but the user interface could be more modernized, especially when searching for specific applications. I would also appreciate faster troubleshooting for login failures and clearer error messages. Additionally, I want better visibility into session status. Overall, the solution provides a smooth experience with reduced dependency on our IT team's support.

    The solution is helpful with our daily tasks, but I would appreciate a more modernized dashboard, faster troubleshooting for login issues, and smoother integration with all our work applications.

    I believe strong governance and security are very essential for AI capabilities. OneLogin by One Identity's focus on identity management, access control, and authentication provides a solid foundation for protecting sensitive information. I would appreciate clear transparency in how AI-driven decisions are made, along with detailed audit logs, strict access policies, and regular security assessments to ensure AI features remain reliable, trustworthy, and compliant.

    In my experience, I value accuracy and consistency in identity management because access decisions need to be reliable. OneLogin by One Identity performs well for everyday authentication and access control, and it makes it easier to access authorized applications. However, I would prefer clearer explanations for security alerts and access recommendations, along with transparent reporting, so the administrator can verify results and investigate unusual activity when needed.

    For how long have I used the solution?

    We have been using OneLogin by One Identity for the last two years.

    What do I think about the stability of the solution?

    OneLogin by One Identity is very stable.

    What do I think about the scalability of the solution?

    Based on my experience using OneLogin by One Identity for the last two years, the solution is wonderful and very scalable.

    How are customer service and support?

    Customer support is top-notch and always helps resolve customer queries.

    Which solution did I use previously and why did I switch?

    We did not use previous solutions.

    What was our ROI?

    We see a good ROI. It saves money and human resources. We see almost 50 to 60 percent savings.

    What's my experience with pricing, setup cost, and licensing?

    My experience with the pricing is that it is affordable. I always suggest it as it is recommended, and any small or large organization can easily afford it.

    Which other solutions did I evaluate?

    We did not consider alternate solutions.

    What other advice do I have?

    I would rate OneLogin by One Identity 9 out of 10. I always suggest OneLogin by One Identity to small and large organizations that want to implement single sign-on. It helps in quick sign-in and ensures better security to access applications within the organization. It saves you from remembering the password for each tool.

    UjjwalSACHDEVA

    Identity control has protected our medical platform and reduces costs through precise user tracking

    Reviewed on Oct 02, 2026
    Review provided by PeerSpot

    What is our primary use case?

    OneLogin by One Identity is used to manage external APIs while ensuring that a specific person only has access up to a certain API limit, after which they should purchase on that same identity, making our ecosystem safe for login users.

    A specific example of how I use OneLogin by One Identity is on our website where we have a service; if more users log in, it adds to our own cost, and we want to avoid that, so only one person can use that service, which also prevents bot usage on the platform and prevents different companies from logging in with different credentials to make fake accounts and extract information.

    OneLogin by One Identity prevents us from bot crawling, helps us keep track of how many active users we have, and there are many more cases in which we use it.

    How has it helped my organization?

    OneLogin by One Identity has had a positive impact on my organization in that the cost of running the platform for different users has reduced, as people cannot maintain new credentials or new IDs, making our ecosystem reliably closed for specific users to perform; our major USP of the platform is that it's a medical domain platform, so it should have a very limited amount of people, specifically genuine users.

    Our time and resources of our own deployed GPUs and pipelines have diminished, so mostly thirty percent of the cost we used to run has reduced when we used to use external APIs.

    What is most valuable?

    One of the best features OneLogin by One Identity offers is user tracking, which allows me to track the user: when they log in, for how long they stayed on the platform, and other relevant metrics, making it good for user attraction analysis.

    When it comes to accessing analytics and reports for user tracking, I get most of the details because we have a very systematic and simple overlay on the data from One Identity that we project on the boards and graphs using other Python libraries, and it takes a maximum of around five to ten minutes.

    What needs improvement?

    I am on the data science end, but my DevOps team could provide more detailed feedback on improvements. From my perspective, OneLogin by One Identity could provide some good dashboards and visuals for the user logs and users, and track how the user is performing on the website, as this analysis can help.

    OneLogin by One Identity could provide a more attractive user interface for interaction.

    For how long have I used the solution?

    I have been using OneLogin by One Identity for one year.

    What do I think about the stability of the solution?

    OneLogin by One Identity is stable, and the costing is good, with no fluctuations or anything.

    Which other solutions did I evaluate?

    Before choosing OneLogin by One Identity, we did not really evaluate other options; we did not explore a lot.

    What other advice do I have?

    OneLogin by One Identity's governance and security are perfect, with no real concerns.

    In terms of OneLogin by One Identity's AI capabilities, the accuracy and reliability of its output are generally good; to be very honest, AI is not one hundred percent accurate, but the overall layers and agentic flows that OneLogin by One Identity might have implemented are giving good accuracy, even though reliability can be an issue in data science and AI.

    OneLogin by One Identity is mostly deployed in my organization on the public cloud, as we use websites where it acts as a layer for the users while they're coming and interacting with our services.

    For deploying OneLogin by One Identity in the cloud, we mostly use Azure as our local deployer.

    I would rate OneLogin by One Identity an eight on a scale of one to ten.

    Yasiru Perera

    Centralized identity has streamlined onboarding and simplified secure access across applications

    Reviewed on Sep 24, 2026
    Review from a verified AWS customer

    What is our primary use case?

    OneLogin by One Identity is used to manage user identities and single sign-ons, as well as manage access to individual applications used in our organization.

    A specific example of how OneLogin by One Identity manages access and single sign-on is through integration with our existing applications so that users have easy and secure access without the need for multiple credentials to other applications in the organization.

    In terms of our main use case, there are many integrations available, and they are very seamless and easy to use.

    What is most valuable?

    One of the best features that OneLogin by One Identity offers is its very broad spectrum of integrations with multiple applications, which is one of the best advantages for us.

    I find the ease of setting up these integrations to be very straightforward, and there is extensive documentation and many guides available on the platform for us to use.

    OneLogin by One Identity has positively impacted our organization because previously we managed access to individual applications separately, which was very tedious. With the integration of this identity manager, we were able to streamline our workflows; when users are onboarding to the organization, we can easily assign a set of application access and remove that access with one click during offboarding.

    What needs improvement?

    Overall, the experience with OneLogin by One Identity has been very good, but I feel there are some improvements that can be made, particularly regarding how the integrations happen and providing more support to some of the niche applications.

    For how long have I used the solution?

    We have been using OneLogin by One Identity for about five years.

    What other advice do I have?

    Regarding OneLogin by One Identity's AI capabilities, I find its accuracy and reliability of output to be very good so far, but it definitely needs verification from a human.

    My advice for others looking into using OneLogin by One Identity is that the management of identity and identity security is a critical topic in the industry, and it is essential for an organization to have a product OneLogin by One Identity to streamline their identity management.

    Overall, OneLogin by One Identity is doing a very good job in helping customers manage their identities, which is one of the most critical attack surfaces nowadays with the growing threat landscapes.

    I found this interview to be very straightforward and easy. I would rate this product an 8 out of 10.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Uththara Kothalawala

    Secure access has simplified daily logins and has improved password management for our clients

    Reviewed on Sep 15, 2026
    Review from a verified AWS customer

    What is our primary use case?

    OneLogin by One Identity is implemented as a distributor solution, providing implementation and support as we are a partner of One Identity. We provide a solution for Identity and Access Management requirements for our customers using One Identity. One customer stands out where we have implemented OneLogin by One Identity with a bundle solution that includes UEM, requiring both a device management solution and an Identity and Access Management solution. We provided OneLogin by One Identity to fulfill their Identity and Access Management requirement.

    What is most valuable?

    The best features OneLogin by One Identity offers include providing single sign-on options, which are very helpful for customers using those pages. For user experience, we have received mixed feedback, as some users find it very user-friendly, while non-technical users find it somewhat difficult. However, most users say it is user-friendly. OneLogin by One Identity has positively impacted my organization and our customers by making their environment secure, as users do not need to save their passwords in insecure ways, thereby making their environment more secure. For my customers, it has become very useful, and their daily life gets easier because they do not need to type the password repeatedly, which is very effective for them.

    What needs improvement?

    OneLogin by One Identity is a good solution with minimal improvements needed. In our country, many small and medium businesses find it not very affordable, so a subscription plan for those companies would make it better.

    For how long have I used the solution?

    I have been using OneLogin by One Identity for approximately two years.

    What do I think about the stability of the solution?

    In my experience, OneLogin by One Identity is a very stable solution.

    What do I think about the scalability of the solution?

    OneLogin by One Identity has really good scalability.

    How are customer service and support?

    Customer support is generally really good, although I have experienced some delays at times, but overall it is good.

    Which solution did I use previously and why did I switch?

    I have only used One Identity and did not previously use a different solution.

    What was our ROI?

    OneLogin by One Identity is a very time-saving solution based on my experience.

    Which other solutions did I evaluate?

    I did not evaluate other options before choosing OneLogin by One Identity, as it is the only One Identity solution we considered.

    What other advice do I have?

    Regarding OneLogin by One Identity's AI capabilities, its governance and security is good, and I do not see any need for improvement in that area. I think its accuracy and reliability of output are around 75% to 80%.

    I did not deploy the Smart Factor Authentication feature for any of our customers, so I do not know how it would affect our environment. Regarding user identity synchronization across directories functionality in OneLogin by One Identity, I find it to be a good feature with no issues in my experience. The integration of phishing-resistant device trust has a good impact on my authentication processes. My impression of OneLogin by One Identity's ability to provide a seamless end-user experience for signing in and authenticating to needed applications is very good, and customers are using it without any issues. I did not use the adaptive login flows with Vigilance AI. HR-driven identity management plays a significant role in streamlining employee identity handling in our customer's environments, improving their business flow.

    My advice for others looking into using OneLogin by One Identity is to do a POC before purchasing to match their requirements with the solution, as it is overall a good solution. I rate this product a 10 overall.

    Which deployment model are you using for this solution?

    Private Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Nikita B

    Centralized access has streamlined onboarding and strengthened authentication for all users

    Reviewed on Sep 07, 2026
    Review provided by PeerSpot

    What is our primary use case?

    OneLogin by One Identity is primarily used for identity and access management, with a focus on SSO and MFA. This allows users to access necessary applications through a centralized login rather than maintaining separate credentials for each application. Whether an employee needs access to Microsoft 365, Salesforce, or internal business applications, those apps are integrated with OneLogin by One Identity. Users log in once through the platform, complete MFA if necessary, and access applications they are authorized to use.

    OneLogin by One Identity is also leveraged during onboarding and offboarding processes. New hires gain access based on their roles, and when someone leaves, their access is disabled centrally rather than relying on individual application teams to remove accounts.

    What is most valuable?

    OneLogin by One Identity's standout features are SSO and MFA, making the login process simpler for users and more secure. Centralized user and access management allows the IT team to manage multiple application access from one place. The reporting and user activity visibility is beneficial for troubleshooting access issues or reviewing security. Automation for onboarding and offboarding is crucial in large organizations as manual access management across applications is difficult. Integration with existing environments adds value, yet challenges still arise with legacy applications and varied authentication requirements.

    What needs improvement?

    Improving the integration of legacy applications would reduce manual work during implementation. Enhanced automation around access reviews and role changes could aid management as user applications grow. Additionally, simplifying the authentication process, particularly when using multiple devices, would improve user experience. Better automation could enhance access review and role change processes. OneLogin by One Identity is strong for modern applications, but making legacy integration easier would enhance its utility in enterprise environments.

    For how long have I used the solution?

    I have been using OneLogin by One Identity for around two years.

    What do I think about the stability of the solution?

    OneLogin by One Identity has been stable overall. I have not experienced major downtime that significantly affected users. Occasionally, there are authentication issues or short service interruptions, but they have not impacted significantly. However, since authentication is centralized, maintaining availability is crucial as service disruptions can affect access to multiple applications.

    What do I think about the scalability of the solution?

    OneLogin by One Identity scales well due to its cloud-based nature, allowing the organization to onboard new users and integrate additional applications without expanding IAM infrastructure. The challenge is not the number of users, but the environment's complexity. Adding applications can complicate integration and access policies, particularly with legacy or custom applications.

    How are customer service and support?

    My experience with OneLogin by One Identity's customer support has been positive, rating it eight out of ten. During the implementation, the support was highly effective and deserving of a ten out of ten from my perspective.

    How was the initial setup?

    The setup for OneLogin by One Identity was straightforward, but understanding the license's scope was crucial for assessing total implementation. Integrating with existing applications and directories was essential, as was considering the total cost beyond just licensing. Professional services, customization, and legacy application integration come with extra effort.

    What was our ROI?

    OneLogin by One Identity brings ROI by reducing manual work involved in user access management, rather than direct cost savings. Streamlined onboarding and centralized provisioning based on user roles save time. Central access disabling during offboarding minimizes the chance of leaving access active in applications. I have not formally measured a specific percentage, but I have observed less repetitive admin work, fewer manual steps, and easier troubleshooting of authentication issues.

    What's my experience with pricing, setup cost, and licensing?

    The pricing and licensing for OneLogin by One Identity were straightforward. The cost depends on the number of users, features required, and level of functionality. While the initial setup cost was not a major concern, I ensured I understood the licensing scope and potential extra requirements. Integration with existing applications and directories was crucial to consider for total costs.

    Which other solutions did I evaluate?

    I considered alternatives such as Microsoft Entra ID, Okta, and Ping Identity, evaluating factors including SSO and MFA capability, application integration, user provisioning, security controls, ease of admin, and licensing. My focus was not on feature count, but on which product best fits within the existing environment.

    What other advice do I have?

    Before implementing, assess organizational requirements instead of choosing OneLogin by One Identity based solely on features. Conduct a thorough review of applications, directories, and authentication processes. Test with crucial applications first to refine the user experience, then expand gradually.

    Understand the licensing scope and integration effort needed, including with legacy systems, to have a complete view of the total cost of ownership.

    When relying on AI capabilities, ensure they are governed carefully due to the sensitive nature of identity data, emphasizing human review in security decisions. Utilize AI as a support tool to identify risky behaviors but maintain human oversight.

    Risk-based and adaptive authentication approaches enhance security without overwhelming users with unnecessary prompts. Strike the right balance in risk settings and review false positives for a smooth user experience.

    I give OneLogin by One Identity an overall rating of eight out of ten.

    Schakravarty Chakrabarti

    Single sign-on has simplified access to cloud apps and reduced password reset workload

    Reviewed on Sep 06, 2026
    Review from a verified AWS customer

    What is our primary use case?

    The main use case for OneLogin by One Identity when I was using it at IQ was having one single user ID and one single password that gave me access to applications that were assigned to my profile.

    Any cloud application is a use case for OneLogin by One Identity. Let me take the example of Salesforce. Salesforce uses your email as your user ID to log in, and sometimes your email has been used for another Salesforce instance, another Salesforce application, or another one you've used at a different company. Using OneLogin by One Identity, it had the SAML page that connected with Salesforce. OneLogin by One Identity had my user ID and password that was synced with Active Directory. If Salesforce was an assigned application, it would appear in my OneLogin by One Identity screen once I logged in, and I could just launch the application.

    What is most valuable?

    Based on my experience, some of the best features OneLogin by One Identity offers include built-in SAML pages that can be utilized by most cloud application providers. It also allows for a second login option directly to the SaaS application if you're using external contractors. OneLogin by One Identity didn't restrict that privilege, especially for support organizations, where you had an offshore support organization that needed one-time access to the application. You don't need to give them OneLogin by One Identity licenses or Active Directory accounts. You could have them use user ID and password to connect while your employees used OneLogin by One Identity. OneLogin by One Identity provided that additional security, which an application user ID and password could not provide. OneLogin by One Identity enforced multi-factor authentication, which wasn't enforced in many cloud applications.

    OneLogin by One Identity has positively impacted my organization in that one big benefit was onboarding and offboarding. From an onboarding perspective, it was easier to train the user to have just one application to log into, which was OneLogin by One Identity. Offboarding was amazing. When a person left, I didn't have to search which applications they had access to. Once their Active Directory account was disabled and OneLogin by One Identity was disabled, they had access to none of the company's confidential applications and data.

    What needs improvement?

    The multi-factor authentication did improve security. In terms of productivity, initially it was a challenge. People were not used to getting SMS messages on their phones, especially if it's not a company provided phone. Some people even complained that they didn't want to use their phone to get work-related SMS messages even if it's multi-factor authentication. It didn't provide smoothness or ease in operations to begin with. Eventually, it helped because users did not have to remember so many user IDs and passwords. It was only one user ID and password for OneLogin by One Identity. So we had fewer trouble tickets and service requests and challenges with password resets and other issues. Eventually, user satisfaction was improved.

    The only thing I find confusing, regardless of OneLogin by One Identity or other applications, is the reliance on Microsoft Authenticator and there are too many MFA applications. If OneLogin by One Identity could centralize and have one application such as Microsoft Authenticator or any other application, even if it was a biometric that supported OneLogin by One Identity multi-factor authentication, that would help because it's sometimes difficult having so many MFA authenticator applications to manage.

    For how long have I used the solution?

    I have been working in my current field for probably thirty years.

    What do I think about the stability of the solution?

    OneLogin by One Identity is stable.

    What do I think about the scalability of the solution?

    We scaled OneLogin by One Identity globally, so it is very scalable.

    How are customer service and support?

    There is room for improvement regarding customer support for OneLogin by One Identity.

    Which solution did I use previously and why did I switch?

    We didn't have an IAM solution before using OneLogin by One Identity.

    How was the initial setup?

    OneLogin by One Identity was initially deployed on-premises and then we moved it to a private cloud.

    What about the implementation team?

    We used AWS for our private cloud deployment of OneLogin by One Identity.

    What was our ROI?

    I can definitely mention that I don't have the metrics, but I can share that from a service desk perspective, the number of password reset calls reduced. As the calls reduced for password resets, which was the highest number of calls before OneLogin by One Identity, we could optimize our service desk employees and repurpose the ones that were needed for project work.

    What's my experience with pricing, setup cost, and licensing?

    I did not purchase OneLogin by One Identity through the AWS Marketplace. It was directly through a OneLogin by One Identity reseller or through the direct company, but not through the marketplace.

    Which other solutions did I evaluate?

    Before choosing OneLogin by One Identity, Okta was the only option we looked at.

    What other advice do I have?

    I would ask anyone looking into using OneLogin by One Identity to take a phased approach, either going by region in a multi-company organization or by company because sometimes you have small integration issues to resolve, especially with cloud applications and rules. Make sure that you resolve that with a smaller impacted population rather than implementing something globally in a large scale and then having bigger problems to deal with.

    I rate OneLogin by One Identity a nine on a scale of one to ten. I choose nine for my rating of OneLogin by One Identity because I believe even the best of us have an opportunity to improve. We can never be a ten, or we should not be a ten. We should always aspire to improve.

    Regarding OneLogin by One Identity's AI capabilities, my impression of its governance and security is excellent. My impression of its accuracy and reliability of output is also excellent.

    We reviewed SmartFactor Authentication for OneLogin by One Identity, but had not implemented it while I was at IQ.

    My impression of the User Identity Synchronization across directories functionality in OneLogin by One Identity is that it is very strong, actually in most single sign-on providers.

    The integration of phishing-resistant device trust on my authentication processes is that I don't want to mix the two together. OneLogin by One Identity is, to me, a case where phishing should be managed through other services rather than OneLogin by One Identity. OneLogin by One Identity is, in my mind, an identity and access management solution. It's not an email security management solution.

    From a user perspective, with the right amount of training and documentation, OneLogin by One Identity provides a very seamless end-user experience for signing in and authenticating to needed applications. They're simply logging into an application like Citrix in the good old days, and once you get into the MetaFrame, you launch your app. OneLogin by One Identity is the same. Once you log into OneLogin by One Identity, you have all your apps in a single form or single page.

    I wasn't involved in the decision-making for pricing, setup cost, and licensing for OneLogin by One Identity.

    Which deployment model are you using for this solution?

    Private Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Alishan Haider

    Centralized access has transformed onboarding, cut manual work, and improves everyday security

    Reviewed on Aug 30, 2026
    Review from a verified AWS customer

    What is our primary use case?

    OneLogin by One Identity is used for centralized identity and access management for employees, allowing secure access to multiple work applications through a single identity instead of managing separate credentials. It utilizes automated provisioning and de-provisioning, enabling prompt access assignment based on roles when new employees join, and the removal of access when they leave. This goes beyond SSO and MFA, as access policies are enforced based on role and user context, with updates occurring automatically when someone changes departments. OneLogin by One Identity supports role and attribute-based provisioning for entitlement management, and integrates features like smart factor authentication for high-risk login attempts.

    How has it helped my organization?

    One of the biggest positive impacts of OneLogin by One Identity has been the reduction of administrative workload while improving security through automated provisioning for new employees and removing access during offboarding. It minimizes the manual work involved in accessing individual applications with automated lifecycle management, which handles central login itself. The onboarding and offboarding processes have transitioned from hours to minutes. We have seen a thirty to forty percent reduction in onboarding and provisioning times as application access is assigned automatically based on roles instead of being configured manually.

    Additionally, there has been a fifty percent reduction in password and access-related help desk tickets thanks to SSO and self-service password reset features. Positive results come mainly from automation in user provisioning and de-provisioning, paired with improved MFA and risk-based authentication collectively lowering the risk of unauthorized access.

    What is most valuable?

    OneLogin by One Identity offers valuable features such as single sign-on, multi-factor authentication, identity lifecycle management, and smart factor authentication, centralizing access to both cloud and on-premise applications. It supports role and attribute-based provisioning for entitlement management, offers real-time directory synchronization, and adaptive login flows with Vigilance AI. Additionally, its Smart Factor Authentication feature effectively balances security and usability, enhancing the authentication process by requiring stronger verification in case of unusual login behavior. The integration of phishing-resistant device trust significantly impacts authentication processes, adding another layer of security beyond verifying users' credentials.

    A specific area in the valuable features is the automated provisioning and de-provisioning processes that reduce the risk of someone retaining access they no longer need. The lifecycle management feature automates these processes, making day-to-day access much easier to manage. OneLogin by One Identity helps in maintaining the directory infrastructure while centralizing SSO, MFA, and identity lifecycle management for both on-premise and cloud infrastructures. Additionally, it provides a seamless end-user experience by granting access through a single login, thereby reducing password-related support requests.

    What needs improvement?

    Reporting and analytics in OneLogin by One Identity can be improved, as filtering and customization options for more complex requests are limited. It does not support document exportation or sufficiently modify standard reports to relate to specific applications and administration data. There is also a need for further expansion of native integrations and automation operations. Greater coverage in the API for programmatically managing configuration and broader flexibility in dashboards would significantly enhance administrative experiences.

    Enhancements in provisioning diagnostics, reporting flexibility, and simpler troubleshooting for complex integrations would greatly improve the administrative experience.

    For how long have I used the solution?

    I have been using OneLogin by One Identity for about two years.

    What do I think about the stability of the solution?

    OneLogin by One Identity is quite stable from my point of view, as I have been using it for a while and have found it to be very reliable in our overall day-to-day operations. The MFA and directory synchronization features remain dependable, and we have not experienced any major outages impacting significant user activity. I rate its stability at ten out of ten.

    What do I think about the scalability of the solution?

    OneLogin by One Identity demonstrates excellent scalability. We have been able to add more users, applications, and access policies without needing to revise our identity architecture significantly. My experience with scalability has been favorable; I rate it as really good, at nine out of ten, given its effectiveness in managing resources, authentication, and related processes like MFA, SSO, onboarding, and offboarding.

    How are customer service and support?

    Customer support for OneLogin by One Identity has been exceptional. We reached out to OneLogin by One Identity support several times, primarily for directory synchronization, provisioning, and application integration issues, and our overall experience has been very positive. The engineers we interacted with demonstrated technical expertise and aimed to identify root causes rather than merely providing generic troubleshooting steps. Their support portals and knowledge base are valuable resources, allowing many common configuration issues to be addressed without opening a ticket. One Identity provides multiple support tiers, including critical twenty-four seven coverage for issues, depending on the chosen support plan.

    I rate customer support at a solid nine out of ten, as they have been responsive and highly knowledgeable, especially when I needed help with specific synchronization, provisioning, and application integration concerns. Their availability for twenty-four seven support is also something I appreciate, contributing to my high rating.

    Which solution did I use previously and why did I switch?

    We previously used Microsoft Entra ID, formerly Azure Active Directory, for many of our identity and authentication needs, alongside various manual processes for application access. We evaluated OneLogin by One Identity because we wanted a more flexible, natural identity platform featuring straightforward SSO, MFA, directory integration, and automated provisioning for onboarding.

    How was the initial setup?

    The initial deployment was relatively straightforward, particularly for basic SSO and MFA functionalities, though integrating and configuring more advanced provisioning policies required some additional planning.

    What was our ROI?

    We have seen a return on investment. The onboarding and offboarding processes have reduced costs by around ten to twenty percent. Time savings are notable as onboarding and offboarding durations have decreased by up to forty percent. Positive results come mainly from automation in user provisioning and de-provisioning, paired with a roughly fifty percent reduction in password-related help desk requests.

    Additionally, while security ROI is harder to quantify, faster onboarding processes, effective MFA, and risk-based authentication collectively lower the risk of unauthorized access. In summary, the combining time savings, reduced support loads, and enhanced security truly validate the licensing cost.

    What's my experience with pricing, setup cost, and licensing?

    Our experience regarding pricing, setup cost, and licensing for OneLogin by One Identity has been generally positive, though it is not the cheapest identity management solution, especially as the number of users increases. However, the cost is justified by the significant reduction in manual administrative tasks, fewer password-related support requests, faster onboarding and offboarding times, and improved access security.

    Which other solutions did I evaluate?

    Before choosing OneLogin by One Identity, we also evaluated Okta, Microsoft Entra ID, and Ping Identity. These were our primary alternatives as they offer comparably robust capabilities surrounding SSO, MFA, and identity management. Ultimately, we chose OneLogin by One Identity because it provided the right balance of functionality, ease of administration, integration with hybrid directories, and cost aligned with our requirements without adding unnecessary complexities.

    What other advice do I have?

    My advice for others considering OneLogin by One Identity is to plan the implementation carefully before rolling it out company-wide. Identify critical applications and define roles and access policies, and determine how your directories will serve as the source of truth. It is also wise to execute the rollout in phases, starting with a small group of users. Investing time in the initial configuration will allow OneLogin by One Identity to significantly simplify identity management while providing a smoother and more secure authentication experience for users.

    Regarding user identity synchronization functionality, my impression is very positive. It has been extremely beneficial in our hybrid environment. OneLogin by One Identity directly synchronizes identity information, providing a consistent way to manage it between our on-premise Active Directory and cloud applications. The main advantage is that when users are added, updated, disabled, or moved to different groups in the directory, those changes can automatically flow through OneLogin by One Identity to connected applications without requiring IT teams to update each system manually. It has made onboarding and offboarding processes more straightforward and effective, ensuring user access remains aligned across both on-premise and cloud environments.

    I give this review an overall rating of ten out of ten.

    reviewer2878287

    Modern identity access has streamlined onboarding and strengthened secure workforce authentication

    Reviewed on Aug 16, 2026
    Review from a verified AWS customer

    What is our primary use case?

    My main use case for OneLogin by One Identity involves single sign-on and multi-factor authentication.

    A specific example of how I use single sign-on and multi-factor authentication with OneLogin by One Identity includes during user onboarding, user offboarding, role-based access control, and identity lifecycle management.

    What is most valuable?

    The best features OneLogin by One Identity offers include advanced directory integration, single sign-on integration, integration with LDAP and Active Directory, as well as Workday.

    Out of those features, the LDAP integration and Active Directory stand out the most for me because they really made a difference.

    OneLogin by One Identity has positively impacted my organization by cutting implementation time by fifty to eighty percent and decreasing the workforce required to implement it by fifty percent.

    What needs improvement?

    OneLogin by One Identity can be improved by addressing the responsiveness time for requests, which is a bit slow, as well as the limited API limitation.

    For how long have I used the solution?

    I have been working in my current field for over five years.

    What do I think about the stability of the solution?

    OneLogin by One Identity is stable, and I find it to be a pretty stable solution.

    What do I think about the scalability of the solution?

    OneLogin by One Identity has very good scalability and is a very scalable solution.

    How are customer service and support?

    The customer support is very quick and overall pretty good.

    I would rate the customer support on a scale of one to ten as a nine.

    Which solution did I use previously and why did I switch?

    I have not previously used a different solution.

    Before choosing OneLogin by One Identity, I evaluated other options such as Okta.

    What was our ROI?

    I have seen a return on investment, with a fifty percent cost save and fifty to eighty percent fewer people required in terms of implementation.

    What's my experience with pricing, setup cost, and licensing?

    I find that in terms of pricing, setup cost, and licensing, it is very suitable for medium to large organizations, making it very cost-effective.

    What other advice do I have?

    Regarding OneLogin by One Identity's AI capabilities, I think its governance and security make it a pretty secure solution with a lot of integration, so it is a very good solution overall.

    Regarding OneLogin by One Identity's AI capabilities, I find it to be pretty accurate in terms of the features available.

    I do not use the solution's Smart Factor Authentication to adjust authentication flows in real-time depending on the risk score associated with the login attempt.

    My impression of the user identity synchronization across directories functionality is that it is secure, has secure access to resources such as data and applications, as well as fast access with easy authentication.

    The integration of phishing-resistant device trust has positively impacted my authentication processes by reducing risk and helping users effectively in terms of awareness about who has access to the system and how it is maintained.

    I have not used the adaptive login flows with Vigilance AI.

    My advice to others looking into using OneLogin by One Identity is to consider this solution because it is quite scalable and has a lot of integration, as well as good monitoring capabilities and session recording, making it well-designed and a good product overall.

    I would rate this review an eight out of ten.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Adil-Khan

    Privileged access has been centralized and automation reduces audit and onboarding effort

    Reviewed on Aug 07, 2026
    Review provided by PeerSpot

    What is our primary use case?

    OneLogin by One Identity is being used as a PAM solution managing approximately 20,000 machines, with 60% being VMs and 40% being cloud-based access management. OneLogin by One Identity is also used for monitoring purposes with two devices deployed: one for session management and another for security management. Both devices provide strong privileged access management capability, including password vaulting, session monitoring, session recording, and session access for all users accessing the system. Reports can be generated whenever required.

    An extra server takes backups from the sessions, and sessions that are not stored in OneLogin by One Identity are stored locally as history when long-term retention is needed. The integration of phishing-resistant device trust through OneLogin by One Identity has positively impacted authentication processes by helping identify phishing users effectively since awareness of who will access the system is maintained.

    What is most valuable?

    The standout features of OneLogin by One Identity include session monitoring, which provides access for the last year to see who accessed the system, what happened, and what commands they ran. If something happens with a Linux machine, potential attacks or issues can be investigated. For network-wide issues, monitoring and session recording can be reviewed and compared. A comprehensive audit trail can be generated and the kind of compliance desired on security investigations can be applied. Automated password rotation and role-based access are supported. For cloud monitoring, SCIM provisioning is used, and the system is authenticated through Azure, now Entra, by role-based access.

    What needs improvement?

    For large enterprise organizations that are also vendors for clients with differing requirements, all built-in features are considered, but sometimes new features based on client requirements need to be inbuilt. Customizing OneLogin by One Identity could be improved with processes to implement new features quickly without having to wait for months. For example, token-based access was needed, and implementing token-based or SCIM provisioning features took time. Reducing the time window for implementing custom solutions would enhance the product.

    Documentation-wise, OneLogin by One Identity is one of the best found for any product, so there are no concerns there. Support-wise, OneLogin by One Identity is doing a great job. Support and management, including contacting OneLogin by One Identity for issues, are always straightforward.

    For how long have I used the solution?

    OneLogin by One Identity has been in use for the last four years with no concerns.

    What do I think about the stability of the solution?

    OneLogin by One Identity is very stable. Whenever problems are encountered, quick responses are received from OneLogin by One Identity's support team.

    What do I think about the scalability of the solution?

    Regarding scalability, if more resources are needed to manage clients and machines, resources can be easily scaled. The black box machine can be attached as required; currently, five are used for session management and five for password rotation. As many as needed can be added depending on the resources required to support the cluster. Scaling is very easy and can be done at any time.

    How are customer service and support?

    OneLogin by One Identity's support team is doing a great job, which is why the product has been used for the last four and a half years. Support and management, including contacting OneLogin by One Identity for issues, are always straightforward. Whenever problems are encountered, quick responses are received from OneLogin by One Identity's support team.

    Which solution did I use previously and why did I switch?

    CyberArk was previously used before switching to OneLogin by One Identity. After conversations with both sales teams, the sales pitch of OneLogin by One Identity stood out compared to CyberArk. OneLogin by One Identity was found to be a better solution in cost and resource management, which is why the switch was made.

    How was the initial setup?

    OneLogin by One Identity was deployed four years ago and is continuously being used with no issues. Currently, over 20,000 VMs and cloud environments are managed by OneLogin by One Identity. A cluster-based deployment is used, geo-redundant across three sites. It took one and a half months to build the lab environment. Once all problems and requirements for the environment setup were identified, the production deployment took around one month.

    Since OneLogin by One Identity was implemented, a transition occurred from the old version, which was the TPAM solution. OneLogin by One Identity acquired that particular solution, and the transition was made to OneLogin by One Identity access management. This transition gave the capability to monitor, conduct comprehensive audits, and manage all resources easily whenever needed. Access control for admin personnel is very easy, and access can be managed. Whenever a system is required to be removed from the sync or out of the cluster, it is straightforward to remove from OneLogin by One Identity's Safeguard. The earlier PAM solution was quite difficult to set up, and this one has API Swagger development, making it easy to communicate. Whenever audits are needed, the REST API can be called, which is the biggest advantage.

    What about the implementation team?

    Once all problems and requirements for the environment setup were identified, the production deployment took around one month. In terms of return on investment, significant savings are being made. After implementation, fewer engineers in the team were needed to manage OneLogin by One Identity. Onboarding is automated, so there is no need to worry about the onboarding process, and using REST API calls for access management simplifies automation.

    What was our ROI?

    Significant savings are being made in terms of return on investment. After implementation, fewer engineers in the team were needed to manage OneLogin by One Identity. Onboarding is automated, so there is no need to worry about the onboarding process, and using REST API calls for access management simplifies automation. OneLogin by One Identity's Safeguard detailed Swagger build is quite helpful. Implementation time has been cut by 60 to 70%, and the number of people required for management has decreased by at least 60 to 70%. Once architecture is defined and deployed in the cluster, scaling becomes easy, and integration is straightforward for adding new systems.

    What's my experience with pricing, setup cost, and licensing?

    Regarding pricing, setup costs, and licensing, the virtual licensing option is suitable for small or midsize organizations. The black box developed by OneLogin by One Identity is not costly concerning the security features being provided.

    Which other solutions did I evaluate?

    Multiple options were evaluated before choosing OneLogin by One Identity, with CyberArk being one of them.

    What other advice do I have?

    My advice for others considering OneLogin by One Identity is that if a solution is needed that can scale easily in the future and currently does not manage many users and machines, OneLogin by One Identity can be chosen. If monitoring capabilities and session recording are needed, OneLogin by One Identity is one of the best solutions to recommend based on experience.

    OneLogin by One Identity is a well-designed and impressive product. Even with the new AI features, it will change how security is implemented with policies, offering admins options to implement changes. If new features are needed, OneLogin by One Identity's Safeguard is always ready to help with implementation and provide those solutions. As a user, the user identity synchronization across directories functionality is really valuable to have.

    The AI features in OneLogin by One Identity are new, so many components have not been implemented yet. Just started looking into the agent and its available AI functionality, so it cannot be fully assessed at this time. However, given the way the product is built and its architecture, it should be 100% useful for users.

    The overall review rating for OneLogin by One Identity is ten out of ten.