One Identity Password Manager
One Identity Password Manager lets users securely reset passwords and unlock accounts themselves — deflecting the #1 helpdesk cost — with granular policy stronger than AD defaults.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The One Identity platform family
This page covers Password Manager — self-service password reset. The rest of the platform:
Quick facts
30-second orientation- Product
- Password Manager — self-service password reset
- Vendor
- One Identity (a Quest Software company · Aliso Viejo, CA)
- The category
- Self-Service Password Management (SSPR)
- Solves
- The #1 helpdesk cost + weak password policy
- Users get
- Reset passwords & unlock accounts, self-service, 24/7
- Admins get
- Granular password policy, enforced consistently
- Also
- Helpdesk-assisted reset · offline reset for remote PCs
- Part of
- One Identity Unified Identity Security Platform
- Deployment
- On-prem (web portal + Windows login)
- In India via
- TechBag — quotes, PoCs, GST invoicing, Tier-1 support
Understand identity & access management before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is SSPR?
Self-service password reset — users reset passwords and unlock accounts themselves, securely.
Plus stronger, enforced password policy.
Fragmented logins vs unified identity — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Unprotected / signature email | Password Manager (One Identity) |
|---|---|---|
| Password reset | A helpdesk call | Self-service, 24/7 |
| Locked out before login | Stuck, waiting | Reset from login screen |
| Remote/offline users | Stranded | Offline reset |
| Helpdesk tickets | The #1 category | Deflected |
| Identity verification | Agent-by-voice | Enforced, auditable |
| Password policy | Weak AD defaults | Granular, consistent, stronger |
| Coverage | Edge cases break it | Login, offline, helpdesk |
| The cost | Recurring, high | Measurably reduced |
Passwords are the #1 helpdesk cost — deflect the tickets and harden policy at once. Part of the One Identity platform; complements a passwordless direction.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Self-Service Portal
A web portal (and Windows login-screen extension) where users verify their identity and reset their own password or unlock their own account — 24/7, no helpdesk call.
Verification Methods
Configurable identity verification — security questions, one-time codes to email or phone, or integration with stronger authentication — before a self-service reset is allowed.
Policy Engine
Define and enforce granular password policies — length, complexity, history, dictionary and custom rules — consistently across the estate, stronger than native AD defaults.
Helpdesk Interface
A dedicated helpdesk console for assisted resets when self-service isn't used — with verification, so support staff reset securely and are audited.
Unified Platform
Part of One Identity's platform — self-service password management complementing governance, access and privileged identity across the portfolio.
Self-service password resets that stay governed — users unblocked, policy still enforced.
Twelve capabilities. Self-serve, secure, prove.
Password Manager deflects the biggest helpdesk cost with secure self-service reset, part of the One Identity portfolio.
Self-Service Reset
Users reset their own password from a web portal or the Windows login screen — no helpdesk call, any hour, closing the #1 ticket source.
Self-Service Unlock
Users unlock their own locked-out accounts themselves — the other big helpdesk driver, handled without a call.
Windows Login-Screen Reset
Reset directly from the Windows login screen — so a user locked out before they can even log in isn't stuck waiting for support.
Offline Reset
Reset passwords on remote or offline machines not connected to the corporate network — remote and travelling users aren't left stranded.
Identity Verification
Configurable verification — security questions, one-time codes, or stronger authentication — proves it's really the user before any reset.
Granular Password Policy
Define length, complexity, history, dictionary and custom rules — stronger, consistent password policy across the estate, beyond native AD defaults.
User Enrollment
Guided, enforced enrollment so users register their verification methods — driving self-service adoption and coverage across the workforce.
Password Sync
Keep passwords in sync across connected systems — one reset propagates, so users aren't juggling different passwords per system.
Helpdesk-Assisted Reset
A verified helpdesk console for assisted resets when needed — support resets securely and is audited, not by guesswork.
Reset Audit Trail
A record of every reset and unlock — self-service and assisted — who did what, when, for compliance and investigation.
Adoption Reporting
Dashboards on enrollment, self-service usage and ticket deflection — quantify the helpdesk savings and coverage.
Unified Identity Platform
Part of One Identity's platform — self-service password management complementing governance, access and privileged identity.
Watch One Identity Password Manager in action
The overview, getting started, and the core workflows.
Using the Administrative Interface in Password Manager
Configuring Password Manager as an admin.
Using Offline Password Reset in Password Manager
Resetting on offline/remote machines.
Password Policies in Password Manager
Defining and enforcing password policy.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Passwords are the breach. Own the identity layer.
Here’s what genuinely sets One Identity Password Manager apart in SSPR.
Passwords are the single biggest helpdesk cost
Forgotten passwords and lockouts are usually the largest source of helpdesk tickets, often 20 to 40 percent of calls, costing support time and user productivity. Password Manager lets users reset passwords and unlock accounts themselves, deflecting that category, with ROI you can measure in tickets and hours saved.
Secure self-service — 24/7, from anywhere
Self-service also means availability: a user locked out at 11pm or in another timezone can fix it from a web portal, the Windows login screen or an offline machine. Before any reset they must prove identity with security questions, one-time codes or stronger authentication, which beats a helpdesk agent verifying a voice.
Stronger, consistent password policy
Native Active Directory password policy is often weak, and weak passwords remain a leading cause of compromise. Password Manager enforces granular rules across the estate — length, complexity, history, dictionary and pattern checks, custom rules — beyond AD defaults, so users get easier self-service while the security bar actually rises.
Nobody left stranded
Self-service fails at the edge cases, so Password Manager covers them: Windows login-screen reset for users locked out before they log in, offline reset for remote laptops off the corporate network, a secure helpdesk interface for assisted resets, and enforced enrollment so users register verification methods.
Part of a unified identity platform
Password Manager sits in One Identity’s Unified Identity Security Platform with Identity Manager, Safeguard, OneLogin and Active Roles, so it complements your identity stack rather than adding a silo. Passwordless is growing, and OneLogin supports it, but passwords will stay pervasive for years, so managing them cheaply is still high-ROI.
The honest scope
Password Manager does one job well: self-service reset and stronger password policy, with login-screen, offline and helpdesk coverage. It is not a full identity platform; the direction of travel is passwordless (which OneLogin delivers), and Entra ID includes self-service reset for all-Microsoft shops.
The numbers behind the platform
What your self-service-password journey looks like
Password-cost scoping
Your password-ticket volume and cost, your lockout and remote-user pain, and your current password policy. TechBag scopes it free.
Deploy & enroll
Password Manager deployed; verification methods and password policy configured; guided enrollment driving user coverage.
Self-service live
Self-service reset and unlock live via portal and Windows login screen; offline reset for remote users; helpdesk console for assisted cases.
Tickets deflected
The #1 ticket category deflected, password policy stronger, ROI measurable in support hours returned. TechBag models it in INR/GST.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“Password resets were 30% of our helpdesk tickets. Self-service deflected almost all of them — the ROI was obvious within the first month.”
“The Windows login-screen reset is the killer feature. Users locked out before they can even log in fix it themselves instead of calling us in a panic.”
“Offline reset handled our travelling and remote users — the edge case that broke our old tool. Nobody's stranded now.”
“We got stronger, consistent password policy beyond AD defaults while making life easier for users. Security and UX improved together.”
“Verification before reset means it's genuinely secure self-service, not a back door. One-time codes and questions, enforced and audited.”
“Enrollment enforcement got us real coverage — users actually registered their methods, so the deflection numbers held up in practice.”
“It does one thing extremely well. For a big workforce drowning in password calls, it's one of the easiest business cases we've made.”
“Being part of the One Identity platform means it fits our wider identity stack rather than being another disconnected tool.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and review-site grids score satisfaction, not fit for your estate. So here’s TechBag’s synthesis of the identity & access market — tap any vendor to see why it sits where it does.
TechBag Identity & Access Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Dedicated SSPR with strong coverage and policy in a unified platform. This page.
Password Self-Service × Platform Breadth
The grid nobody publishes — self-service password depth vs identity-platform breadth.
Deep coverage (login/offline/helpdesk) + policy, unified with the identity platform.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Password Manager vs the SSPR field
Native tooling, bundled Entra and point tools — honest lanes; the edge is deep coverage (login-screen, offline, helpdesk) and policy, in a unified platform.
| Dimension | Password Manager | Microsoft Entra SSPR | Point SSPR tools | Native AD | Helpdesk only |
|---|---|---|---|---|---|
| Self-service reset & unlock | Full | Yes | Yes | None | None |
| Coverage (login screen / offline) | A strength | Cloud-focused | Varies | None | None |
| Password policy strength | Granular | Cloud policy | Varies | Basic | None |
| Fit & platform | Unified identity platform | Microsoft suite | Standalone | N/A | N/A |
| Best fit | Organisations wanting dedicated SSPR with strong coverage and policy, in a unified platform | All-in on Microsoft Entra | A quick standalone SSPR | Nobody serious about the cost | Nobody wanting to pay per call |
Which identity & access management approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Password Manager if…
- Password tickets are a major helpdesk cost you want to deflect
- You need strong coverage — login-screen and offline reset
- You want granular password policy beyond AD defaults
- You want SSPR within a unified identity platform
Choose Microsoft Entra SSPR if…
- You're all-in on Microsoft Entra and want its bundled self-service reset
Choose a point SSPR tool if…
- You want a quick standalone reset tool and don't need the coverage depth
Move toward passwordless if…
- Your strategy is to reduce password reliance (OneLogin passwordless)
Helpdesk only if…
- Rarely — paying per reset call is the expensive status quo
What could this save you?
Drag the sliders (count users; IT-hour cost as loaded incident rate). Estimates assume ~1.5 hours per user per year of manual effort this tool automates away, with ~70% of that effort removed — the avoided-risk value is the larger, unpriced win. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
One Identity Password Manager prices per user. TechBag baselines your password-ticket cost and scopes it in one GST quote.
Password Manager
Best for helpdesk savings
- Self-service reset & unlock, 24/7
- Login-screen & offline coverage
- Granular password policy
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
+ Identity platform
Best for a broader strategy
- Complements governance & access
- A path toward passwordless (OneLogin)
- TechBag scopes the mix
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Measure YOUR password-ticket volume and cost — the deflection ROI you're targeting.
Confirm reset from the Windows login screen — for users locked out before they can log in.
Test offline reset for remote/travelling users on machines off the corporate network.
Configure identity verification (questions, one-time codes, stronger auth) so self-service is genuinely secure.
Define granular policy — length, complexity, history, dictionary — stronger than AD defaults.
Enforce enrollment so users register methods and coverage is real — deflection depends on it.
Consider whether passwordless (OneLogin) is your longer-term strategy alongside SSPR.
Right-size per user — TechBag scopes and quotes in INR/GST.
Questions buyers ask
Ready to deflect your biggest helpdesk cost?
Scope an SSPR PoC (self-service reset and unlock, login-screen and offline coverage), baseline your password-ticket savings, or let a TechBag advisor plan your password management and policy.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.