Safeguard for Privileged Passwords

My main use case for Safeguard by One Identity is managing privileged access across Windows and Linux environments on a day-to-day basis. I use it to securely store privileged credentials, rotate passwords, broker privileged sessions, and provide controlled access to administrators without exposing the actual credentials. I onboard privileged accounts into Safeguard by One Identity and configure automatic password rotation after check-in or on a scheduled basis. Administrators can also submit access requests through Safeguard by One Identity, and according to the policy, the access is automatically approved or requires some manager or security approval. The access is granted only for the approved time window. I launch RDP or SSH sessions directly through Safeguard by One Identity, and the sessions are recorded and can be reviewed later for auditing or investigations. I regularly use the reporting features to verify who accessed privileged accounts, when they accessed them, and what actions were performed during the recorded sessions. This is particularly useful for compliance requirements such as PCI DSS or NIST. I have also integrated Safeguard by One Identity with Active Directory for user authentication and role-based access control, allowing permissions to be managed through the AD groups.

The best features Safeguard by One Identity offers, in my opinion, are its password vaulting, session management, just-in-time access, and auditing capabilities. Together, they reduce the risk associated with privileged accounts while simplifying compliance. In most cases, every time we have auditing, the fact that all the accounts are secured and managed through Safeguard by One Identity is always seen as a good choice and a good thing to do.

One of my favorite features is the automatic password rotation because users will never know their effective password or what the passwords originally are. Another of my favorite features is the session management. The fact that it launches the RDP or SSH and records all the sessions, which can be monitored or replayed, ensures that all activities are recorded in the account page. This allows for a quick answer to, for instance, SOC colleagues that need to know what happened, when, and from whom.

I integrated Safeguard by One Identity with Active Directory so that administrators authenticate using their existing domain accounts. I leverage AD security groups to assign access rights, which made user provisioning and deprovisioning much easier. When someone joined or left the team, I only needed to update their AD group membership, and Safeguard by One Identity would automatically enforce the correct permissions. It also improves security because every privileged action is linked to an individual identity, while privileged passwords remain hidden and are rotated automatically after use.

In my opinion, the biggest challenge is that I do not have exact organization-wide metrics to share, but I think they should improve the overall use for new users and people who are not very familiar with PAM or IAM. They should facilitate the overall training. Perhaps on their website, they could improve their training and the certification process.

From my experience, the AI capabilities of Safeguard by One Identity generally produce relevant and useful insights, particularly for highlighting potentially risky privileged activity or surfacing information that deserves further investigation. I have not encountered major accuracy issues, but I also would not rely on AI alone for security decisions. In a PAM solution, AI should support analysts, while policy enforcement and final access decisions remain governed by established controls and human review.

The integration with those internal tools and ticketing services was initially difficult because of the documentation. It was somewhat difficult to interpret it properly and apply it to our infrastructure, but through modern tools such as AI, I was able to implement it properly.

I have been using Safeguard by One Identity every day for my working tasks since I started working in the cybersecurity field, approximately three to four years ago.

Safeguard by One Identity is stable.

Safeguard by One Identity's scalability is straightforward because it scales very effectively for enterprise environments. The platform is designed to manage a large number of privileged accounts, assets, and users while maintaining centralized control over credentials, access workflows, and session monitoring.

The customer support for Safeguard by One Identity is quite good. I would rate the customer support an 8 out of 10 since the support team is knowledgeable and helpful, especially when dealing with technical issues or complex configurations. The main areas for improvement would be faster resolution times for some advanced cases and more proactive guidance, but overall, the support experience has been positive.

Before Safeguard by One Identity, I had a more manual approach, relying on a combination of password management processes, spreadsheets, scripts, and existing administrative controls. I moved to Safeguard by One Identity because I needed a more centralized and mature PAM solution with strong governance, automation, and auditing capabilities.

Most of the users are not PAM specialists, so at first glance, they always encounter some issues with the overall use. However, after some brief training and documentation, they are able to perform the daily business as usual tasks. During my work experience, I have managed both cloud and on-premise solutions, but in my company, Safeguard by One Identity is still on-premises.

Aside from the Active Directory integration, I have integrated Safeguard by One Identity with SIEM so that the audit events are forwarded. I also use some automation and APIs for account onboarding, reporting, integration with internal tools, and integration with ticketing services.

I would say that I saw a positive return on investment with Safeguard by One Identity, although the biggest benefits were not just direct cost savings. The main return on investment came from reducing manual effort, improving security, and avoiding operational compliance costs associated with poorly controlled privileged access. I saved a lot of time, but before Safeguard by One Identity, a privileged access request could involve finding the right owner, confirming approval, sharing credentials securely, and later changing the password. Depending on the situation, this could take anywhere from 30 minutes to several hours. With Safeguard by One Identity, the same process could often be completed in a few minutes through an automated request and approval workflow, with the session launched directly from the platform.

The fact that Safeguard by One Identity has been implemented has improved the overall company image according to auditing. Moreover, it has improved our security posture and operational efficiency. I have eliminated password sharing, automated password rotation, and recorded privileged sessions, which by default significantly improve the security aspect. At the same time, integrating it with Active Directory and using automated workflows streamline access management, so administrators could get the access they needed without compromising security.

I evaluated other options before choosing Safeguard by One Identity, looking into products that are recognized in the market such as Delinea, Thycotic, HashiCorp, BeyondTrust, and CyberArk.

I would rate Safeguard by One Identity an 8 out of 10. It is much more reliable with strong capabilities around password vaulting, session management, privileged session recording, and automatic password rotation. It does a very good job of securing privileged accounts while remaining straightforward for an administrator.

When I think about Safeguard by One Identity's AI capabilities, my first association is governance and security rather than productivity. Any AI feature should enhance visibility, risk detection, and policy enforcement without compromising control over privileged access. AI is valuable when it helps identify risks, detect anomalous privileged activity, and improve visibility. Governance policies and human approval should continue to control privileged access.

First of all, I would advise you to take your time and read the manuals. For the overall implementation aspect, plan it carefully, focus on processes as much as technology. Start by identifying critical privileged accounts, define clear access policies, integrate with AD, and automate password management whenever possible. A phased rollout with good communication and training will help users adopt the platform and maximize security benefits.

I use Safeguard by One Identity's Cloud Assistant feature. The main benefits are that it strengthens protection for high-risk credentials without creating unnecessary friction for administrators. For highly sensitive passwords, such as domain administrator, root, or emergency or break-glass accounts, the Cloud Assistant adds an additional control before the access is granted. Instead of applying the same approval process for every privileged account, I can apply stronger controls only where they are needed most. Moreover, administrators can still get required access quickly while security controls run in the background, avoiding lengthy manual approval claims for routine access scenarios. The goal is not just to block access but to ensure that privileged access is controlled, monitored, and appropriate based on the risk level. Access activity can be tracked and audited, giving the security team better insights into how critical credentials are being used.

I have been working with Safeguard by One Identity platform for the last one year, which is the PAM solution. We are using it as a Privileged Access Management solution as a point of security, as the first point of security towards managing PAM and PIM. We use it for securely managing privileged credentials, controlling administration access, and monitoring privileged sessions. We also monitor the vaults for compliance of the logs, which have been forwarded to our SIEM platform for further security controls and monitoring.

We use it for our privileged sessions, which has been acting as a centralized password vaulting and automated credential rotation platform. The automated credential rotation feature is the best feature I have used, and I have never seen it in different products as of now.

The onboarding was seamless. We have onboarded approximately 500 to 1000 users to the PIM. Certain users have certain accesses that need to be limited over specific time frames and as per their administrative requirements. This has been managed through that platform, and we have not observed any kind of issues.

Secure Remote Access feature is for our hybrid and remote employees, safeguarding our environment from external threat actors and preventing attackers from trying to access our network by using this Remote Access Privileged Access feature.

The integration was quite easy. We have FortiGate and FortiClient VPN in place, and it has been a seamless integration with this platform, enabling us to get access to the Remote Access feature over OneLogin. We are now managing and getting access to our critical systems by using the jump host available with this feature.

This integration has improved our enhanced security. It has been acting as a centralized vault which reduces our risk of credential theft, misuse of credentials, and prevents compromised hosts and privileged accesses to our critical hosts through this integration.

I would rate this at eight.

The features I find most valuable are the password vaulting and the auto-rotation features like password security complexities and the OWASP Top 10 vulnerabilities. It is suggested to rotate the password into certain time frames which are recommended by the security team, and this has been performed by using this application. We have been monitoring session monitoring via the SIEM tool. These logs have been forwarded there. MFA integration is also available, which has been helped by One Identity. We have managed OneLogin and One Identity implementations into our organization, and these real-time privilege alerts and vault alerts are being monitored. These are quite valuable things for us.

The features I liked the most about Safeguard by One Identity are the password vaulting and the automatic password rotation feature. MFA integration with the OneLogin platform was seamless as the organization is the same for them. Detailed audit logs are also available while clearing our audits. While troubleshooting, we need those audit logs, which have been forwarded over the SIEM, with reports sent to the admin team to get those reviewed if there are any certain changes made by the team which are not known to them.

Privileged users and systems are getting protected by using these solutions, and all privileged users access this portal with their credentials quite easily. It has been eliminating their overhead to manage this manually or access manually. Admin overhead gets reduced due to it, and the overall efforts are reduced.

There were no negatives observed. All observations were positives like the self-service access granted to users. Users can request privileged access to the portal, reducing dependencies on administration for every request. Built-in approval workflows are also available, so all these efforts have been reduced from manual ones.

I would like to highlight a couple of points, which are UI modernization. In the new world of AI, we are thinking about how AI can be helpful for detection capabilities in PAM solutions and easier reporting flexibility. There should be a chatbot feature in Safeguard by One Identity so we can easily find out the SOPs and documentations. By using chatbots, we can directly ask queries to them, and they can respond with the solution or steps.

The chatbot is the only suggestion I have as of now.

I have not observed any stability issues.

As of now, we have implemented it for more than 250 users, and there have been no issues observed. It has been scalable.

The setup was quite simple and easy for us, with help from the support team, which has been quite helpful for us in implementing this feature.

The vendor support was with us during the implementation phase. They helped us with the initial implementation and all of the documentations.

For end users, we have rolled out SOPs on how to manage and access the tools which are in the environment and critical servers. The SOPs have been built for that. For management, training sessions have been introduced by this vendor like OneLogin.

The team was there to support us in terms of integrations.

This is our first PAM solution.

The setup was quite simple and easy for us, and getting help from the support team, which has been quite helpful for us in implementing this feature.

Regarding the setup, it was quite easy and intuitive for us to get to know how we can onboard it. All the SOPs and the documentations are available on their portal, so it was easy.

The vendor support was with us during the implementation phase. They helped us with the initial implementation and all of the documentations.

This has been integrated with our SIEM platform, which is the central monitoring platform for the SOC environment for cybersecurity. The team has built certain use cases related to the threat environment for abnormality detection, unusual logins, and false logins. Such use cases have been built into the SIEM platform. This is the external integration.

The integration into the SIEM platform was supported by the syslog method, which has forwarded these logs. It was supported so that all of these details have been transferred to the SIEM easily, and all the fields and logs have been mapped as per the supported mechanism.

It took approximately three months to go into production.

I was not part of the admin team evaluating alternate solutions, so I am unable to answer this question. I am the user of this product as of the date.

Regarding the usability and functionality, the UI is quite intuitive and simple to handle for new users. Whenever new users are getting access to it, with the help of the documentations which are cleaner in format and easy to access, all of the things are in place with the help of the initial dashboards. We get to know what all of the functionalities are there.

While considering Safeguard by One Identity, customers can do the POCs if they want to, but however, in terms of feature-wise, it is a good product to have. It has all of the features required for a PAM solution. I rate this solution at eight out of ten.

My main use case for Safeguard by One Identity is privileged identity access management, session monitoring, and password management.

In my day-to-day work, we onboard the most powerful accounts and privileged accounts across the applications, platforms, and network elements into the PAM system, which is Safeguard by One Identity, and it has the inbuilt capability that supports session management, password management, and analytics.

Safeguard by One Identity offers simple web GUI, easy onboarding and management, and less complex architecture as its best features.

The web GUI and easy onboarding help my team because even less trained people can easily navigate it, and trained individuals can start using the tool easily without requiring any development or additional skills; it is easy to navigate and work on.

Safeguard by One Identity has positively impacted my organization, as in the past, we were using TPAM, the older product from the same vendor of the Fab solution, but this is a new version, a new generation tool which supports most of the new version products and new protocols, and it works well.

Safeguard by One Identity has been built most of the time to support the most recent products and versions in the environment, but sometimes in real-time scenarios, companies might be running with legacy systems or applications; during that time, you might need to build a custom solution that is not flexible enough, and I think additional efforts are needed to build solutions to support legacy systems.

I chose a rating of seven because I believe the product still has improvements that need to be made in terms of supportability for new applications, such as SaaS solutions, and it does not have any native method of managing cloud-based applications, which I believe is an area to improve.

Regarding Safeguard by One Identity's AI capabilities, I do not believe it has really good governance and security; I think it probably needs to be upgraded to incorporate all AI agents or AI-specific security-related features which have not been covered in the current version.

I have been working in my current field for more than fifteen years.

I have been using Safeguard by One Identity for more than five years.

In terms of Safeguard by One Identity's reliability, I believe it is fine, and we do not see any major problems with it.

Since switching to this newer version, it improved compliance, the onboarding time reduced significantly, and it supports API calls and automation processes, so overall onboarding time has been significantly reduced.

I would advise others looking into using Safeguard by One Identity to consider it if they are looking for a budget-friendly option, easy installation, and quick setup; however, if companies require many custom solutions and support for legacy environments, it might not be a good fit, and they may need to explore other options. If any environment is trying to work with newer tools or AI-specific protections, this tool is probably not evolved to that level, so I believe you need to assess your requirements first. I would rate this product a 7.5 out of 10.

Safeguard by One Identity is primarily used for privileged access management, which helps us securely manage administrator accounts, store and rotate privileged passwords, control access to critical servers and network devices, and monitor user sessions for security and compliance.

When a new system administrator needs to access a production server, instead of sharing the administrator password, they request access through Safeguard by One Identity, which securely provides the credentials or starts a monitored session, logging all activity. This has helped our team improve security, simplify audits, and ensure privileged passwords are never shared directly.

Safeguard by One Identity has become an important part of our privileged access workflow by enforcing security policies, reducing the risk of unauthorized access, and maintaining a compliance audit trail. It has made managing privileged accounts more secure and efficient for our IT team.

Since implementing Safeguard by One Identity, we have improved the security of privileged accounts by eliminating the need to share passwords and enforcing controlled access. We have also reduced the time spent managing privileged credentials through automation tasks such as password rotation. During security audits, having a complete session log and access records has made it much easier to demonstrate compliance and investigate privileged activity when needed, enhancing our security and audit readiness.

Before Safeguard by One Identity, privileged passwords were managed manually, which increased the risk of passwords being shared. Now, administrators access systems through the password vault, and passwords are rotated automatically, reducing manual effort, strengthening security, and making audits much easier since all privileged access and user sessions are logged and can be reviewed whenever needed.

We do not have exact metrics, but we have definitely seen an improvement since using Safeguard by One Identity, as password management is much faster without the need for administrators to manually share or update privileged credentials. Security has improved through automated password rotation and controlled access, while audit preparation takes much less time because all privileged sessions and access records are available in one place.

Safeguard by One Identity's best features are secure password vaulting, automatic password rotation, and privileged session monitoring.

Safeguard by One Identity's password vaulting feature keeps privileged passwords in a secure, encrypted vault, so administrators do not need to know or share the actual credentials, allowing team members to request access when needed and automatically rotate the password after use. This reduces the risk of password leaks, improves automation, and saves time since we do not have to manually manage privileged credentials.

Another feature I appreciate from Safeguard by One Identity is the session recording and auditing, which provides a complete record of privileged activity, very helpful for troubleshooting, security investigations, and compliance audits. Safeguard by One Identity's centralized management interface also makes it easier to manage privileged accounts across different systems from a single place.

Overall, we are satisfied with Safeguard by One Identity, but there are a few areas for improvement. Safeguard by One Identity's user interface could be more modern and intuitive, especially for new administrators, and the initial deployment and configuration can be complex.

Another improvement would be having more detailed documentation and step-by-step deployment guides, particularly for complex environments. Better performance on large-scale deployments, enhanced search and filtering in audit logs, and more flexible notification and approval workflows would also improve the overall experience, making administration simpler and reducing the learning curve.

I have been using Safeguard by One Identity for about two years, but I have used Safeguard for one year.

Safeguard by One Identity is now stable.

Our experience with Safeguard by One Identity's scalability has been positive. It has scaled well as we have added more users, servers, and privileged accounts, continuing to perform reliably without requiring major changes to the deployment. Safeguard by One Identity's centralized management and role-based access control have made it easier to support growth while maintaining consistent security policies.

Our experience with customer support has been positive, with the support team being responsive when we needed assistance with configuration and troubleshooting, and their technical guidance being generally helpful.

We did not use a dedicated privileged access management solution before Safeguard by One Identity. We mainly relied on manual password management and built-in administrative controls.

Safeguard by One Identity's deployment took about two to three weeks, with most time spent on planning, integration with Active Directory, configuring privileged accounts and policies, and testing and validating access before moving into production.

Administrators required a few days of training to learn the deployment, policy configuration, password vaulting, and session management features of Safeguard by One Identity. For end users, the learning curve was much smaller, typically requiring just a short training session or documentation to understand how to request and use privileged access, with the platform being straightforward once the initial setup and onboarding were complete.

We have seen a positive return on investment from Safeguard by One Identity, mainly through improved security and operational efficiency. We do not track exact financial metrics, but administrators spend less time managing privileged passwords and preparing for audits because password rotation, session logging, and access control are automated.

Safeguard by One Identity's pricing is on the higher side, but it remains reasonable considering the security and privileged access management capabilities it provides. Safeguard by One Identity's licensing model is straightforward once understood, although planning the required licenses takes some time, and the initial setup requires an investment in deployment and configuration. However, after implementation, the solution delivers good value by improving security, simplifying privileged access management, and reducing administrative effort.

Before selecting Safeguard by One Identity, we evaluated other privileged access management solutions, including CyberArk, BeyondTrust, and Delinea. We chose Safeguard by One Identity because it offered the features we needed for privileged access management along with strong security controls, straightforward integration with our existing environment, and a good balance between functionality and cost.

I rate Safeguard by One Identity a 9 out of 10 overall.

This rating of 9 out of 10 reflects that it offers strong privileged access management with features such as secure password vaulting, session monitoring, and auditing. Safeguard by One Identity is not rated a 10 because the initial deployment can be complex, and the user interface and reporting could be more intuitive.

From what I have seen, Safeguard by One Identity's governance and security are strong overall, with role-based access control and detailed audit trails. If the AI features follow the same security model, I expect them to provide a good level of governance and protection.

We have not used the AI capabilities enough to fairly evaluate their accuracy or reliability, so I cannot comment from first-hand experience, especially since most of our users focus on privileged access management, password vaulting, and session monitoring rather than AI features.

Overall feedback from users regarding Safeguard by One Identity's usability and functionality has been positive, with users appreciating that privileged access is centralized and secure, as well as not having to manage or remember privileged passwords. Administrators find Safeguard by One Identity's audit and session recording features especially useful. Safeguard by One Identity's main feedback has been that the interface can take some time to learn and that some administrative tasks could be more intuitive.

I advise others looking into using Safeguard by One Identity to spend time planning the deployment and defining privileged access policies before implementation. Involving the security and infrastructure teams early to start with a small pilot before rolling it out across the organization is important. Providing basic training to administrators and end-users is also essential to ensure smooth adoption. When configured properly, Safeguard by One Identity is a strong solution for improving privileged access security and simplifying compliance.

Our main use case for One Identity Safeguard is privileged access management, where we need to secure control and monitor highly sensitive privileged accounts.

We use One Identity Safeguard for password storage and management for all privileged accounts, including admin accounts and service accounts. We also use it for Just-in-Time privileged access to provide the least privilege access possible for users.

One Identity Safeguard offers excellent features such as smart session auditing and forensics, transparent session proxy, password injection with no exposure, and real-time command and video blocking.

We rely most on smart session logging, smart session auditing, and forensics, which are valuable for our day-to-day tasks, along with password injection, which helps us securely pull passwords and automatically inject them into sessions, enhancing our security and aiding in auditing.

Regarding session proxy, One Identity Safeguard can sit on the network similar to a router, remaining completely transparent to both the user and the destination server while silently managing and injecting passwords and recording sessions in the background.

One Identity Safeguard has positively impacted our organization by contributing to a significant drop in compliance and audit overhead, aiding in the preparation of security audits that were previously chaotic, making the process much simpler now, and improving operational efficiency and admin satisfaction.

One Identity Safeguard could be improved by providing a unified management experience, as historically it has been split into logical units, and it would be beneficial if they could provide out-of-the-box reports and visualization, addressing the high resource overhead for privileged analytics.

Regarding One Identity Safeguard's AI capabilities, I believe they are still in the transformation phase, particularly with session monitoring, and once implemented fully, the advanced role mining and peer group analysis provided will help us improve further.

I cannot provide feedback on the accuracy and reliability of One Identity Safeguard's AI capabilities because we are not currently using the AI version; we may be deploying it next year.

I have been using One Identity Safeguard for more than six years.

In my experience, One Identity Safeguard is stable.

One Identity Safeguard's scalability works effectively in our large organization, as it successfully handles everything we need.

The customer support for One Identity Safeguard is very good, providing timely responses based on the SLA, with high-priority tickets receiving responses within an hour. I would rate the customer support around eight.

Before switching to One Identity Safeguard, we were using Thycotic Server, which was not as user-friendly, leading us to switch to One Identity Safeguard.

The deployment of One Identity Safeguard was very quick, taking only one or two days.

The deployment affected our privileged users smoothly, as we transitioned from another solution where users adapted quickly due to One Identity Safeguard being user-friendly.

We provided training for users that took approximately one week, plus one month of training for administrators, which was very helpful for getting everyone on board.

Before choosing One Identity Safeguard, we evaluated CyberArk, but it was more costly, which influenced our decision to consider One Identity Safeguard due to its lower cost.

My advice for others considering One Identity Safeguard is to define the architecture early, as it will be helpful, and to consider using One Identity Manager alongside it, as they can integrate effectively. I would rate this solution an eight overall.

One Identity Safeguard is primarily utilized in my organization for managing the company's privileged accounts.

I use One Identity Safeguard to record and audit privileged sessions in order to meet regulatory requirements.

The best features that One Identity Safeguard offers is the centralized approach to managing privileged accounts. Specifically, the centralized approach has helped us significantly reduce the time spent on managing privileged account passwords.

One Identity Safeguard has positively impacted my organization. After implementation, we were able to reduce the time spent on security incidents related to compromised passwords. Before using One Identity Safeguard, two administrators spent approximately twenty hours a month on manual credential management, and after implementation, this time was reduced to about five hours a month, which represented a savings of thirty hours per month.

I think the aspects that could be improved in One Identity Safeguard include the learning curve, since the installation is complex and expert guidance is required in the first steps.

The upgrade process could also be simpler.

I have been using One Identity Safeguard for one year.

One Identity Safeguard is a stable solution.

I perceive the scalability of One Identity Safeguard as good, as it adapts well to the growth of my organization.

We have been able to continue adding more credentials and more users to the tool.

My experience with One Identity Safeguard's customer support has been positive, as the team usually responds within reasonable time frames and shows a good level of technical knowledge.

I would rate customer support eight out of ten.

Before implementing One Identity Safeguard, we did not have another tool.

One Identity Safeguard is implemented on a local server in my organization.

The implementation of One Identity Safeguard took about eight months in our organization.

The implementation affected privileged users with a learning curve, since they had to start using the tool, but it was resolved over time.

One month of training and another month of support was needed for both administrators and end users to use the tool efficiently.

I have seen a return on investment with the platform, having experienced a reduction of around thirty working hours per month for privileged credential management.

My experience with the licensing, installation, and pricing of One Identity Safeguard was within expectations since that was taken into account when evaluating the tool.

Users have told us that the interface is intuitive, that the team becomes familiar with the platform, and the integration with Windows environments is quite complete.

For the moment, we have not integrated the platform with other areas of our business, as we are still working on that.

I would advise other companies that are considering implementing One Identity Safeguard to thoroughly review their internal processes so they can adapt them to the tool.

I have given this review an overall rating of nine.

Currently, for our business case, we have multiple scenarios with One Identity Safeguard, but I haven't used the transparent mode much. The transparent mode that I am aware of is that One Identity Safeguard privileged sessions have that transparent mode where the administrator and target server allow users to continue connecting to servers exactly as they would normally, which can be useful.

This is a good feature to have.

I use the secure remote access for privileged users.

I do not use any physical appliances, virtual appliances, or on-demand versions with One Identity Safeguard. The primary business use case we have for it is secure privileged account management, including credential vaulting, enforcing password rotation, and providing secure privileged session access. These are the proper business use cases on which we implement it. It helps us reduce the risk associated with privileged credentials while supporting compliance and security monitoring.

This is how we utilize it.

The best features of One Identity Safeguard are multiple features similar to any PAM solution that we use for our security purposes. The strongest feature of One Identity Safeguard is a centralized privileged credential vault, which eliminates the need for administrators to know or manually manage privileged passwords. The automated password rotation and secure checkout process significantly reduce credential exposure.

This is the best aspect that I have experienced, along with another feature that is session management. The session recording and replay provide excellent visibility for investigation, compliance audits, and insider threat monitoring. These features are the best in One Identity Safeguard that I have seen compared to multiple other PAM solutions.

One Identity Safeguard has improved our organization from the security perspective, which is the main aspect that we have seen in it. VPN elimination and reduced credential exposure have helped us manage credentials in a more secure way. We work in a Security Operations Center, and it has helped us significantly from a SOC perspective.

One area that has room for improvement in One Identity Safeguard is native integration with newer cloud platforms and SaaS applications and security tools. We have a SOAR application in our environment, which is Cortex XSOAR, and it would be better if One Identity Safeguard could have native integration with this application so that anyone executing playbooks through the SOAR could request One Identity Safeguard access through it. This would be one improvement that we suggest regarding native integration with newer cloud platforms.

Reporting and dashboard customization with One Identity Safeguard should be better improved. While it is already present, monitoring multiple servers and technologies that we have integrated with One Identity Safeguard could be managed better if more reporting and dashboard customization options were available.

I have been using the solution for one and a half years.

From a stability perspective, I rate One Identity Safeguard as being stable in our production environment and it performs reliably with minimal unplanned downtime. I would rate it 8 out of 10.

The scalability of One Identity Safeguard is that the solution scales in the enterprise environment with multiple privileged accounts, servers, and administrators. It overall supports growth without any significant performance issues. When deployed according to best practices, I would rate it 9 out of 10.

I use the regular support for One Identity Safeguard. I rate support from 1 to 10 overall as 9 because compared to other customer PAM solutions that we have like iRage PAM and Commvault PAM, this is superior and offers a more advanced procedure.

I use the secure remote access for privileged users.

One Identity Safeguard provides VPN-less remote access where administrators, vendors, and third-party users can securely connect with privileged resources without using traditional VPN. This is the main advantage because having VPN connectivity between these three user types would otherwise present a vulnerability. Additionally, the clientless browser-based access allows users to connect through a web browser without installing client software, which simplifies onboarding and remote administration.

It is not important to me that secure remote access with One Identity Safeguard does not use VPN, because it already eliminates VPN-related risks for privileged users and it was very helpful. VPN usage would be a key concern when connecting in such cases, but this particular secure access eliminates VPN-related risks and provides a complete audit trail for remote administrative activities.

I compare One Identity Safeguard with other vendors based on the features that I have mentioned, such as stability and customer support, as well as scalability. This is the best product that I can recommend. It would be an excellent tool for the medium to large enterprise looking for a mature privileged access management solution. Compared to other solutions, it has a better feature set and better capabilities, which makes it a superior tool.

I am not aware of the pricing for One Identity Safeguard because I am an end user of this product. The pricing must be handled by our finance team, so I am not informed about this aspect.

The deployment of One Identity Safeguard did not disruptively affect my privileged users in any way.

I have integrated One Identity Safeguard with multiple options available, such as our Active Directory.

My experience with integration of One Identity Safeguard was not difficult. The integration with Active Directory or any enterprise infrastructure was straightforward. However, configuring the policies and onboarding privileged assets required careful planning and workflow understanding. Overall, it was straightforward and simple with no complex details.

The amount of training required to start using One Identity Safeguard is minimal. Because in our environment we have multiple PAM solutions or other integrated solutions, One Identity Safeguard was much easier in comparison.

I rate this review 9 out of 10.

One Identity Safeguard is used to securely manage privileged accounts and protect administrative credentials sessions across our IT environment. It helps control access to critical systems and enforce security.

A common scenario involves system administrators who need temporary access to Windows or Linux production servers for maintenance or troubleshooting. Instead of sharing privileged passwords, they request access through One Identity Safeguard. One Identity Safeguard securely stores these credentials, grants time-limited access after approval, records the entire privileged session, and automatically revokes access once the maintenance is complete. This reduces the risk of credential exposure while maintaining security.

The best features of One Identity Safeguard are its secure password vault, automated password rotation, and privileged session monitoring. I also appreciate the approval workflow for granting temporary privileged access, which helps ensure least privilege policies. The session recording and searchable audit logs are especially useful during security reviews and compliance audits, as they provide clear visibility into who accessed critical systems, when they were accessed, and what actions were performed.

The session recording and search features are straightforward to use. Every privileged session is automatically recorded in user activity and commands, so there is no need for manual intervention. When investigating an incident or reviewing administrative actions, I can search sessions using filters such as user, target, system, date, or time range. Finding a specific session usually takes only a few minutes, and the playback feature makes it easy to see exactly what happened during the session. This has been very helpful for troubleshooting, internal audits, and compliance reviews.

One Identity Safeguard is a strong privileged access management solution, though there are a few areas in which it could be improved. The initial deployment and configuration can be complex, especially for organizations with larger hybrid environments. The user interface could be more intuitive, particularly for first-time administrators, and some reporting and dashboard customization options could be more flexible. I would also like to see broader native integration with cloud platforms and DevOps tools to simplify privileged access management across modern infrastructure.

I have been using One Identity Safeguard for the last eight months.

One Identity Safeguard is stable.

The scalability of One Identity Safeguard has been good for our environment. As more systems and privileged users have been added, expanding the deployment has been straightforward without requiring major changes to the existing setup. The virtual appliance architecture has made it easy to grow as needed, and I have not experienced any significant performance issues while onboarding additional servers or accounts. Overall, One Identity Safeguard has scaled well to meet our current requirements.

Customer support is definitely outstanding. I would rate the customer support a ten out of ten.

I did not previously use a different solution.

The initial deployment took almost three weeks. Most of the time was spent on planning, configuration, policies, integration with other existing directory services, testing privileged access workflows, and validating session recording before rolling it out to the administrators. Once the initial setup was complete, onboarding additional systems and users was relatively straightforward.

The deployment of One Identity Safeguard caused very little disruption to our privileged users. During the rollout, administrators had to learn the new access request and approval process, which required a short adjustment period. After that, the workflow became routine. Instead of using shared administrator passwords, users simplified the request for access through One Identity Safeguard and received time-limited access when approved. Overall, the transition was smooth, and the improved security and accountability outweighed the small learning curve.

The administrators who manage One Identity Safeguard required approximately two to three days of training to become comfortable with the deployment, policy configuration, and ongoing administration. End-users, such as system administrators requesting privileged access, needed only a short onboarding session of around one to two hours to understand the access request processes, approval workflow, and how to start a privileged session. After the initial training, most users were able to use the solution without significant issues.

I have seen a positive return on investment from One Identity Safeguard, mainly through time savings and improved operational efficiency rather than reduced headcount. Before implementing One Identity Safeguard, collecting privileged access records for security reviews and audits was a manual process that often took several hours. With centralized audit logs and session recording, I have reduced the effort by approximately thirty to forty percent, and in many cases, I can gather the required evidence in about an hour. I also spend less time managing shared administrator passwords and investigating privileged activities because everything is centrally recorded and searchable. While I have not reduced staff, I have been able to spend more time on proactive security work instead of administrative tasks.

My experience with pricing, setup cost, and licensing has been overall positive. One Identity Safeguard is positioned as an enterprise product, so the licensing cost is not inexpensive, but I felt it was justified by the security features and compliance benefits it provides. The licensing process was straightforward, and there were no unexpected setup costs beyond the time required for deployment and configuration. Overall, the total cost of ownership has been reasonable for the value it delivers in securing privileged access.

I did not evaluate other options before choosing One Identity Safeguard.

One Identity Safeguard has been deployed in a hybrid environment. The core privileged access management components are hosted on-premises to manage access to critical internal systems, while they also integrate with cloud-based resources. This setup gives us the flexibility to secure both traditional infrastructure and cloud workloads from a single privileged access management platform.

Microsoft Azure is primarily used for our cloud-based resources.

The virtual appliance deployment was chosen because it was easier to deploy in our existing virtualized infrastructure, required less hardware management than physical appliances, and offered the flexibility to scale as our environment grows. It also simplified backup, maintenance, and software updates while providing the same core privileged access management capabilities we needed.

Overall, the feedback from our users regarding One Identity Safeguard's usability and functionality has been positive. Administrators appreciate that they no longer need to know or share privileged passwords, and the approval workflow is straightforward once they become familiar with it. The session recording and audit features are also well-received because they make troubleshooting and compliance review much easier. The main feedback has been that the interface has a learning curve for new users, and the initial setup and policy configuration can be a bit complex. However, after onboarding, most users find the platform reliable and easy to use for their day-to-day privileged access tasks.

At this stage, One Identity Safeguard has not been integrated with DevOps pipelines, RPA platforms, or other advanced business systems. It is primarily used for privileged access management, secure credential storage, password rotation, and session monitoring for our infrastructure.

My advice for others looking into using One Identity Safeguard would be to spend enough time planning the deployment before implementation. Identify your privileged accounts, define clear access policies and approval workflows, and involve both the security and infrastructure teams early in the project. Start with a small group of critical systems to validate the configuration and user experience before expanding across the environment. Also, provide basic training for administrators and end-users so they can understand the new privileged access process. Taking this approach makes the rollout smoother and helps you get the most value from the solution. I rate this solution a ten out of ten overall.

One Identity Safeguard is used primarily to secure privileged accounts and control administrative access to critical systems. On a day-to-day basis, it is used for password vaulting, access approval, and monitoring privileged sessions to ensure secure and compliant access management.

Password vaulting is a key function in daily operations. When a server administrator needs temporary access to a production system, they request access through One Identity Safeguard, receive approval, and the activity is logged automatically. This approach has improved security and made it significantly easier to track privileged access during audits and reviews.

Improved control over privileged access across the organization has been achieved. Before One Identity Safeguard, managing administrative credentials and tracking privileged activities involved more manual effort, but after implementation, access became more secure and easier to audit. It has helped reduce the risk of unauthorized access and improved the overall security and compliance posture.

The most valuable features of One Identity Safeguard are password vaulting, session monitoring, and approval-based access controls. These features help secure privileged accounts, improve visibility into administrative activities, and ensure that access to critical systems is properly controlled and audited.

Session monitoring has been particularly useful during troubleshooting and audit reviews. When a question arose about a configuration change on a critical server, the recorded session could be reviewed to quickly understand what actions were performed. The approval workflow is another significant feature, as it ensures that privileged access is granted only when needed and follows the appropriate authorization process, which strengthens governance and accountability.

Centralized password management is also greatly appreciated, as it reduces the need for administrators to know or store privileged credentials directly, which improves security and simplifies access management. One Identity Safeguard brings access control, auditing, and credential management together in a single solution, making day-to-day administration more efficient.

One Identity Safeguard has had a very positive impact on operations because it is used in daily activities. Improved control over privileged access across the organization has been achieved. Before One Identity Safeguard, managing administrative credentials and tracking privileged activities involved more manual effort, but after implementation, access became more secure and easier to audit. It has helped reduce the risk of unauthorized access and improved the overall security and compliance posture.

There is room for improvement in One Identity Safeguard in several areas. One area for improvement would be reporting and analytics. While the available reports are useful, having more customizable dashboards and deeper insights into privileged access trends would help security teams make faster decisions. A more streamlined user experience for access requests and approvals would be beneficial, especially in large environments where many privileged access requests are processed daily.

Integration and reporting flexibility represent another area where One Identity Safeguard could improve. While the existing capabilities are solid, having more out-of-the-box integrations and easier customization options would reduce administrative effort. More proactive insights around privileged access, users, and security trends would help security teams identify potential risks faster and improve overall visibility across the environment.

More proactive alerting and recommendations would be a valuable addition. Highlighting unusual privileged access patterns or providing suggestions for policy optimization would help administrators respond faster. Additional dashboard customization options would allow teams to tailor views and reports based on their specific operational and security requirements.

One Identity Safeguard has been in use for one and a half years.

One Identity Safeguard is a stable and dependable platform. It has been used regularly for privileged access management and has performed consistently with very few issues. Most challenges were related to configuration changes or integrations rather than product stability itself.

One Identity Safeguard is scalable. Additional systems, privileged accounts, and users were able to be onboarded without major changes to the platform. The centralized management approach helped keep administrative efficiency even as privileged access requirements expanded.

Customer support for One Identity Safeguard is good.

A different solution was used previously. Native administrative tools and manual processes were primarily relied upon for managing privileged accounts and credentials. The switch to One Identity Safeguard was made because stronger security controls, centralized credential management, better auditing, and more visibility into privileged access activities across the environment were needed.

The deployment of One Identity Safeguard took approximately two to three months from initial planning to full production rollout. Most of the time was spent on requirements gathering, onboarding critical systems, configuring access policies, and testing workflows. The actual installation was relatively quick, but proper planning and validation were important for a successful deployment.

The integration of One Identity Safeguard with existing systems was fairly straightforward. Since established identity and infrastructure systems were already in place, connecting One Identity Safeguard to those environments was not particularly difficult. The main effort was around planning access policies, onboarding privileged accounts, and testing workflows. Once configured, the integration worked smoothly and provided a more centralized approach to privileged access management.

A return on investment is evident with One Identity Safeguard. A specific benefit has been the reduction in time spent managing privileged credentials and access requests. Before One Identity Safeguard, access approvals and credential management involved more manual coordination. After implementation, this process became centralized and automated, which reduced administrative efforts and improved response times. While headcount was not reduced, the team spent less time on routine access management tasks and more time on security and operational improvements.

Pricing for One Identity Safeguard is at an enterprise level. There is an investment involved, but the security, auditing, and privileged access management capabilities justify the cost. From a setup perspective, the deployment was manageable. Most of the effort was spent on planning access policies, onboarding systems, and configuring workflows rather than the installation itself.

Different options were evaluated before selecting One Identity Safeguard. PAM solutions, including CyberArk Privilege Access Manager and BeyondTrust Privileged Remote Access, were considered. One Identity Safeguard was selected because it offered a good combination of privileged access controls, password vaulting, auditing capabilities, and ease of administration that matched the requirements.

One Identity Safeguard provides many helpful benefits. Improved visibility into privileged activities has been achieved, and having a centralized platform for managing access requests, credentials, and session records has made administration more organized and reduced the amount of manual tracking required by the team. It has also helped follow security and compliance requirements more consistently.

For organizations looking into using One Identity Safeguard, the recommendation is to start by clearly defining privileged access policies and identifying the most critical accounts and systems. This makes the implementation process much smoother. Starting with a smaller deployment, validating workflows and access controls, and then expanding gradually is also recommended. This helps users adapt to the platform while allowing the team to realize value quickly.

The deployment of One Identity Safeguard had minimal disruption for privileged users because the solution was introduced in phases. There was a short adjustment period while users became familiar with the new access request and approval process. After the initial onboarding, most users appreciated the centralized access management and improved security controls. Overall, the transition was smooth and did not significantly impact day-to-day operations. The review rating for One Identity Safeguard is eight out of ten.