One Identity Manager
One Identity Manager automates the identity lifecycle, runs access reviews and enforces segregation of duties — settling who can reach what, for what reason, and whether that should continue.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The One Identity platform family
This page covers Identity Manager — the IGA flagship. The rest of the platform:
Quick facts
30-second orientation- Product
- One Identity Manager — IGA & access governance
- Vendor
- One Identity (a Quest Software company · Aliso Viejo, CA)
- The category
- Identity Governance & Administration (IGA)
- Answers
- Who has access to what, why, and should they still
- Automates
- Joiner-mover-leaver lifecycle & provisioning
- Governs
- Access reviews · SoD · role management · requests
- The standing
- A recognised IGA leader — a SailPoint alternative
- Part of
- One Identity Unified Identity Security Platform
- Deployment
- On-prem or Identity Manager On Demand (SaaS)
- In India via
- TechBag — quotes, PoCs, GST invoicing, Tier-1 support
Understand identity & access management before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is IGA?
Identity governance & administration — governing and evidencing which people can reach which resources in your systems.
One Identity Manager is a governance-first IGA leader.
Fragmented logins vs unified identity — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Unprotected / signature email | Identity Manager (One Identity) |
|---|---|---|
| Who has access to what | Nobody can say | Governed, on demand |
| Joiner-mover-leaver | Manual & error-prone | Automated end to end |
| Leavers' accounts | Linger (orphaned) | Deprovisioned on HR change |
| Access creep | Piles up over years | Removed at recertification |
| Segregation of duties | Unenforced / by spreadsheet | Policy-engine enforced |
| Access requests | IT tickets | Business self-service catalogue |
| Reviews | Ad hoc / never | Scheduled certification |
| The audit | A scramble | An export |
Access sprawls — creep, orphaned accounts, unenforced SoD. Govern the lifecycle and prove it. Part of the One Identity platform.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Identity Lifecycle
Automates provisioning, changes and deprovisioning across connected systems as people are hired, move roles and leave — so access is always correct, and no leaver keeps live accounts.
Access Governance
Runs periodic access-certification campaigns so managers re-attest who should keep what — closing the access-creep and orphaned-account gaps auditors flag and attackers exploit.
Segregation of Duties
Enforces segregation-of-duties rules so no one accumulates a toxic combination of entitlements (e.g. create-and-approve-a-payment) — with detection and prevention.
Access Request
A business-friendly request-and-approval experience — users request the access they need from a shop-like catalogue, the right approver signs off, fulfilment is automatic.
Roles & Connectors
Deep role structures, entitlement management and hundreds of connectors to applications and directories — the governance-first model One Identity Manager is built on.
Every joiner, mover and leaver governed in one model — access reviewed and evidenced, not assumed.
Twelve capabilities. Automate, govern, prove.
One Identity Manager governs the whole identity estate — lifecycle automated, access reviewed, SoD enforced, part of the One Identity portfolio.
Automated Provisioning
Provisions, changes and deprovisions access automatically across connected systems as people join, move and leave — the joiner-mover-leaver engine.
Hundreds of Connectors
Connects to the applications, directories and systems that hold your entitlements — SAP, Active Directory, Entra ID, cloud apps and more.
Access Request Catalogue
A shop-like catalogue where users request the access they need — the business-friendly front door, not an IT ticket queue.
Approval Workflows
Multi-step approval chains you configure, routing each access request to the correct sign-off — with delegation, escalation and audit.
Role Management
Deep role structures and role mining — bundle entitlements into business roles so access is granted by role, not one permission at a time.
Segregation of Duties
Detects and prevents toxic entitlement combinations — the SoD conflicts (like create-and-approve-a-payment) auditors and regulators require you to control.
Access Certification
Periodic recertification campaigns where managers re-attest who should keep what access — closing access creep and orphaned accounts.
Policy & Compliance Rules
Enforces access policy across the estate — who can have what under which conditions — turning compliance rules into automated controls.
Data Governance
Extends governance to unstructured data — who can access which files and folders — a common blind spot in access reviews.
Audit-Ready Attestation
Full, defensible evidence of each person’s access, the reason for it, its approver and its last review date — the export auditors expect.
Governance Reporting
Dashboards and reports on access, requests, reviews and SoD violations — visibility for security, business owners and auditors.
Identity Manager On Demand
The same governance delivered as a SaaS service — faster to deploy and operate, without running the full on-prem stack yourself.
Watch One Identity Manager in action
The overview, getting started, and the core workflows.
What is Identity Manager by One Identity?
The IGA flagship, explained.
Identity Manager — Overview #2: Key Features
The core governance capabilities.
Identity Manager — Overview #1: ADM vs. IGA
How administration differs from governance.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Passwords are the breach. Own the identity layer.
Here’s what genuinely sets One Identity Manager apart in IGA.
It answers the three questions governance must answer
Every access audit asks who has access to what, why, and whether they should still have it, and few organisations can answer. One Identity Manager keeps a governed model of every identity and entitlement across connected systems, records the role, request or approval behind each grant, and drives reviews, so an audit becomes an export.
The lifecycle runs itself — no leaver keeps access
Manual joiner-mover-leaver processes leave new hires waiting, let role-changers pile up access, and keep leavers’ accounts alive for attackers to use. One Identity Manager automates the lifecycle: right access on day one, old access removed on a move, and deprovisioning everywhere the moment the HR record changes.
Governance-first, built by business users
One Identity Manager was built as a governance platform, with a deep data model of identities, roles, entitlements and policies. It hands control to business users: managers run reviews, owners approve requests from a catalogue and manage roles. That governance-first depth makes it a genuine enterprise alternative to SailPoint.
Segregation of duties, enforced
SoD rules block toxic pairings, such as one person both setting up a vendor and approving what it is paid. Enforcing that manually is effectively impossible; One Identity Manager encodes SoD rules, flags existing violations and blocks new ones at request time, which SOX and RBI/SEBI controls often require.
Part of a unified identity platform
One Identity Manager is part of One Identity’s Unified Identity Security Platform with Safeguard, OneLogin and Active Roles, giving one vendor and a shared model across governance, privileged and workforce identity. An access review can see privileged entitlements, and a lifecycle change flows through to AD and cloud.
The honest scope
One Identity Manager is deep, enterprise-grade IGA and a genuine alternative to SailPoint, which has more market share and mindshare. Any full IGA programme is a substantial project needing role design and phased rollout; smaller estates may suit Securden IGA, and Entra ID covers some governance for all-Microsoft shops.
The numbers behind the platform
What your identity-governance journey looks like
Governance scoping
Your systems, compliance drivers (SOX/RBI/SEBI/ISO), access-creep and orphaned-account risks and roles. TechBag scopes it free.
Connect & model
On-prem or On Demand stood up; key systems connected; identities and entitlements imported; the initial role model and SoD rules defined.
Automate & review
Joiner-mover-leaver automation live on the first systems; access-request catalogue open to the business; first certification campaign run.
Governed & audit-ready
Automated lifecycle, enforced SoD, scheduled reviews and audit as an export. TechBag models it in INR/GST.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“We can finally answer who has access to what and why, with evidence, and lifecycle automation closed our orphaned accounts.”
“RBI and SOX want proof no one can create and approve a payment. Identity Manager enforces SoD, not a spreadsheet.”
“The access-request catalogue lets business managers run their own reviews and approvals, so IT is no longer the bottleneck.”
“Certification campaigns used to be a quarterly nightmare of spreadsheets. Now managers re-attest in the tool and access creep is actually controlled.”
“The governance-first data model is genuinely deep — roles, entitlements, policy. It's a real SailPoint alternative for enterprise IGA.”
“It’s a serious platform and project: plan role design and phase the rollout. Rushed, IGA hurts; done right, it transforms access.”
“Being able to see privileged entitlements (Safeguard) inside the same governance reviews is the payoff of the unified platform.”
“Identity Manager On Demand let us get governance without running the full on-prem stack — faster to value for a lean team.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and review-site grids score satisfaction, not fit for your estate. So here’s TechBag’s synthesis of the identity & access market — tap any vendor to see why it sits where it does.
TechBag Identity & Access Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Governance-first IGA leader, business-user-driven, unified with PAM/access.
Governance Depth × Platform Breadth
A comparison vendors rarely show — IGA governance depth set against identity-suite breadth.
Deep governance unified with the wider identity platform.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
One Identity Manager vs the IGA field
The IGA leaders and the lighter options — honest lanes; the edge is deep, business-driven governance unified with privileged and workforce identity.
| Dimension | One Identity Manager | SailPoint | Saviynt | Securden IGA | No IGA |
|---|---|---|---|---|---|
| Standing & heritage | IGA leader, governance-first | The market leader | Strong IGA | Lighter IGA | The gap |
| Governance depth | Deep | Deepest | Strong | Good | None |
| Lifecycle automation | Strong | Strong | Strong | Good | Manual |
| Business-user experience | A strength | Can be IT-heavy | Good | Simple | None |
| Simplicity & cost | Enterprise-grade | Enterprise-grade | Moderate | Simple, per-user | Free |
| Best fit | Enterprises wanting deep, business-driven IGA, unified with PAM/access | The deepest standalone IGA | Cloud-native governance | Simpler / price-sensitive IGA | Nobody with regulated access |
Which identity & access management approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose One Identity Manager if…
- You want deep, governance-first IGA that business users can run
- Lifecycle automation and SoD enforcement are priorities
- You want governance unified with PAM, access and AD on one platform
- You're evaluating an enterprise alternative to SailPoint
Choose SailPoint if…
- You want the deepest standalone IGA market leader
Choose Saviynt if…
- You want cloud-native governance as a converged platform
Choose Securden IGA if…
- You want simpler, per-user, price-sensitive governance (hub live)
No IGA if…
- Never — ungoverned access is an audit failure and breach path
One Identity Manager is one of 22 identity governance products TechBag carries. The Identity Governance guide narrows them to a shortlist and shows the reasoning. →
What could this save you?
Drag the sliders (count users; IT-hour cost as loaded incident rate). Estimates assume ~1.5 hours per user per year of manual effort this tool automates away, with ~70% of that effort removed — the avoided-risk value is the larger, unpriced win. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
One Identity Manager prices per identity (on-prem or Identity Manager On Demand). TechBag scopes it for your governance programme in one GST quote.
Identity Manager
Best for access governance
- Joiner-mover-leaver automation
- Access reviews & certification
- Segregation of duties enforced
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
+ Identity platform
Best for a unified programme
- Governance unified with Safeguard PAM
- OneLogin access + Active Roles
- TechBag scopes the mix
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Confirm connectors for YOUR key systems — SAP, AD, Entra ID, cloud apps, HR — where your entitlements actually live.
Test joiner-mover-leaver end to end — a leaver deprovisioned everywhere the moment HR changes.
Run a certification campaign — managers re-attesting access — and confirm it's genuinely business-friendly.
Encode YOUR toxic combinations and confirm the policy engine detects existing and prevents new violations.
Test the access-request catalogue and approval workflow — the business self-service experience.
Confirm the role model fits your organisation — role mining, business roles, entitlement bundling.
IGA is a real project — for lighter needs compare Securden IGA (hub live); for the deepest standalone, SailPoint.
Right-size on-prem vs On Demand and per-identity — TechBag scopes and quotes in INR/GST.
Questions buyers ask
Ready to govern who has access to what?
Scope an IGA PoC (automate the lifecycle, run a certification campaign, enforce SoD), map it to your compliance obligations, or let a TechBag advisor plan your governance programme.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.