- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
One Identity Password Manager
Secure the front door. Email is where most attacks arrive — One Identity Password Manager lets users securely reset passwords and unlock accounts themselves — deflecting the #1 helpdesk cost — with granular policy stronger than AD defaults.
Buy through TechBag
Same software. Better outcome — at no extra cost.
Free, vendor-neutral, 30 minutes
How it’s rated
Full scoreboard ↓Quick answer
One Identity Password Manager is a self-service password management solution — it lets users securely reset their own passwords and unlock their own accounts, without calling the helpdesk, while giving the organisation stronger, consistently-enforced password policies. Password problems are deceptively expensive: forgotten passwords and locked-out accounts are, for most organisations, the single largest source of helpdesk tickets, costing real money and lost productivity every day; and weak, inconsistently-enforced password rules are a genuine security risk. Password Manager tackles both. Users verify their identity through configurable methods — security questions, one-time codes, or integration with stronger authentication — and then reset their password or unlock their account themselves, from a web portal or the Windows login screen, at any hour. Meanwhile administrators define and enforce granular password policies (length, complexity, history, dictionary checks) consistently across the estate, stronger than native Active Directory defaults. It also offers a helpdesk interface for assisted resets and offline reset for remote machines. It is part of One Identity's Unified Identity Security Platform (a Quest Software company), complementing the wider identity portfolio. TechBag scopes, PoCs and quotes it in INR/GST.
The One Identity platform family
This page covers Password Manager — self-service password reset. The rest of the platform:
Quick facts
30-second orientation- Product
- Password Manager — self-service password reset
- Vendor
- One Identity (a Quest Software company · Aliso Viejo, CA)
- The category
- Self-Service Password Management (SSPR)
- Solves
- The #1 helpdesk cost + weak password policy
- Users get
- Reset passwords & unlock accounts, self-service, 24/7
- Admins get
- Granular password policy, enforced consistently
- Also
- Helpdesk-assisted reset · offline reset for remote PCs
- Part of
- One Identity Unified Identity Security Platform
- Deployment
- On-prem (web portal + Windows login)
- In India via
- TechBag — quotes, PoCs, GST invoicing, Tier-1 support
Understand email security before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is SSPR?
Self-service password reset — users reset passwords and unlock accounts themselves, securely.
Plus stronger, enforced password policy.
Unprotected inbox vs AI email security — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Unprotected / signature email | Password Manager (One Identity) |
|---|---|---|
| Password reset | A helpdesk call | Self-service, 24/7 |
| Locked out before login | Stuck, waiting | Reset from login screen |
| Remote/offline users | Stranded | Offline reset |
| Helpdesk tickets | The #1 category | Deflected |
| Identity verification | Agent-by-voice | Enforced, auditable |
| Password policy | Weak AD defaults | Granular, consistent, stronger |
| Coverage | Edge cases break it | Login, offline, helpdesk |
| The cost | Recurring, high | Measurably reduced |
Passwords are the #1 helpdesk cost — deflect the tickets and harden policy at once. Part of the One Identity platform; complements a passwordless direction.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Self-Service Portal
A web portal (and Windows login-screen extension) where users verify their identity and reset their own password or unlock their own account — 24/7, no helpdesk call.
Verification Methods
Configurable identity verification — security questions, one-time codes to email or phone, or integration with stronger authentication — before a self-service reset is allowed.
Policy Engine
Define and enforce granular password policies — length, complexity, history, dictionary and custom rules — consistently across the estate, stronger than native AD defaults.
Helpdesk Interface
A dedicated helpdesk console for assisted resets when self-service isn't used — with verification, so support staff reset securely and are audited.
Unified Platform
Part of One Identity's platform — self-service password management complementing governance, access and privileged identity across the portfolio.
One agent on every machine, one console over all of them — modules attach without a second operational world.
Twelve capabilities. Self-serve, secure, prove.
Password Manager deflects the biggest helpdesk cost with secure self-service reset, part of the portfolio, and paired with the human firewall.
Self-Service Reset
Users reset their own password from a web portal or the Windows login screen — no helpdesk call, any hour, closing the #1 ticket source.
Self-Service Unlock
Users unlock their own locked-out accounts themselves — the other big helpdesk driver, handled without a call.
Windows Login-Screen Reset
Reset directly from the Windows login screen — so a user locked out before they can even log in isn't stuck waiting for support.
Offline Reset
Reset passwords on remote or offline machines not connected to the corporate network — remote and travelling users aren't left stranded.
Identity Verification
Configurable verification — security questions, one-time codes, or stronger authentication — proves it's really the user before any reset.
Granular Password Policy
Define length, complexity, history, dictionary and custom rules — stronger, consistent password policy across the estate, beyond native AD defaults.
User Enrollment
Guided, enforced enrollment so users register their verification methods — driving self-service adoption and coverage across the workforce.
Password Sync
Keep passwords in sync across connected systems — one reset propagates, so users aren't juggling different passwords per system.
Helpdesk-Assisted Reset
A verified helpdesk console for assisted resets when needed — support resets securely and is audited, not by guesswork.
Reset Audit Trail
A record of every reset and unlock — self-service and assisted — who did what, when, for compliance and investigation.
Adoption Reporting
Dashboards on enrollment, self-service usage and ticket deflection — quantify the helpdesk savings and coverage.
Unified Identity Platform
Part of One Identity's platform — self-service password management complementing governance, access and privileged identity.
Watch One Identity Password Manager in action
The overview, getting started, and protecting M365 email.
Using the Administrative Interface in Password Manager
Configuring Password Manager as an admin.
Using Offline Password Reset in Password Manager
Resetting on offline/remote machines.
Password Policies in Password Manager
Defining and enforcing password policy.
Want a live, India-context walkthrough on your own fleet?
Book a guided demo →The endpoint catches what arrives. Email stops it arriving.
Here’s what genuinely sets One Identity Password Manager apart in SSPR.
Passwords are the single biggest helpdesk cost
It is one of the most consistent facts in IT support: forgotten passwords and locked-out accounts are, for most organisations, the single largest source of helpdesk tickets — often 20 to 40 percent of all calls. Every one of those tickets costs real money in support time and, worse, costs the locked-out user productivity while they wait, unable to work. Multiply that across a whole workforce, day after day, and password resets quietly become one of the most expensive recurring problems in the organisation. Password Manager attacks this directly: by letting users securely reset their own passwords and unlock their own accounts without calling support, it deflects the largest category of tickets entirely. The ROI is unusually tangible — you can measure the tickets deflected and the support hours returned — which is why self-service password reset is one of the most reliably cost-justified identity tools an organisation can deploy.
Secure self-service — 24/7, from anywhere
The value of self-service is not just cost — it is availability. A user who forgets their password at 11pm, or is locked out first thing before a critical meeting, or is travelling in a different timezone, shouldn't have to wait for the helpdesk to open. Password Manager lets them resolve it themselves, at any hour, from a web portal, directly from the Windows login screen (crucial when they can't even log in), and even from remote or offline machines. Crucially, self-service does not mean insecure: before any reset, the user must prove their identity through configurable verification — security questions, one-time codes sent to a registered email or phone, or integration with stronger authentication — so it is genuinely them, not an attacker resetting their way in. It replaces the security-theatre of a helpdesk agent verifying a caller by voice with consistent, enforced, auditable verification.
Stronger, consistent password policy
The second problem Password Manager solves is that native password policy — especially Active Directory's — is often weak and inconsistently applied, and yet weak passwords remain a leading cause of account compromise. Password Manager lets administrators define and enforce granular password policies across the estate: minimum length, complexity requirements, password history to prevent reuse, dictionary and pattern checks to block common and guessable passwords, and custom rules — all more capable than AD defaults and applied consistently. This directly improves security posture: the passwords protecting your accounts are stronger and harder to guess or crack. Pairing self-service convenience with stronger enforced policy is the ideal combination — users get an easier experience while the organisation actually raises the security bar, rather than trading one for the other.
Nobody left stranded
A self-service password tool is only as good as its coverage — the edge cases are where users get stuck and revert to calling support (or worse, get locked out of work entirely). Password Manager is built to handle them. The Windows login-screen integration means a user who is locked out before they can even log in isn't stranded. Offline reset handles remote and travelling users on machines not connected to the corporate network — a real-world scenario that trips up simpler tools. And for the times self-service genuinely isn't the right path, a dedicated helpdesk interface lets support perform assisted resets securely, with verification and audit. Enrollment is guided and can be enforced so users actually register their verification methods and are covered. This attention to the edge cases is what turns self-service from a nice idea into a reliable deflection of the largest ticket category in practice, not just in theory.
Part of a unified identity platform
Password Manager isn't a standalone point tool bolted on from a random vendor — it is part of One Identity's Unified Identity Security Platform, alongside identity governance (Identity Manager), privileged access (Safeguard), access management (OneLogin) and Active Directory management (Active Roles). That matters for organisations building a coherent identity strategy: self-service password management complements the wider portfolio rather than adding another disconnected silo, it comes from a vendor with deep identity expertise and enterprise support, and it can align with the broader identity lifecycle and directory management you may already run. Even as passwordless authentication grows (and One Identity's OneLogin supports that direction), passwords remain pervasive across the vast majority of systems for years to come — so securely and cheaply managing them, within a unified identity platform, remains a highly practical, high-ROI investment.
The honest scope
Password Manager is a focused, high-ROI tool that does one job — self-service password reset and stronger password policy — very well, with the coverage (login-screen, offline, helpdesk) that makes it reliable in practice. Its honest boundary is that it is a password-management tool, not a full identity platform: it deflects tickets and hardens password policy, but the strategic direction of travel is toward passwordless and phishing-resistant authentication (which One Identity's OneLogin delivers), reducing reliance on passwords altogether. Microsoft's Entra ID also includes self-service password reset for organisations all-in on Microsoft. Password Manager's edge is being a capable, dedicated SSPR with strong coverage and policy, from a unified identity vendor. TechBag scopes whether dedicated SSPR, native tooling, or a move toward passwordless best fits your estate.
The numbers behind the platform
What your self-service-password journey looks like
Password-cost scoping
Your password-ticket volume and cost, your lockout and remote-user pain, and your current password policy. TechBag scopes it free.
Deploy & enroll
Password Manager deployed; verification methods and password policy configured; guided enrollment driving user coverage.
Self-service live
Self-service reset and unlock live via portal and Windows login screen; offline reset for remote users; helpdesk console for assisted cases.
Tickets deflected
The #1 ticket category deflected, password policy stronger, ROI measurable in support hours returned. TechBag models it in INR/GST.
Trusted across regulated industries in 100+ countries
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“Password resets were 30% of our helpdesk tickets. Self-service deflected almost all of them — the ROI was obvious within the first month.”
“The Windows login-screen reset is the killer feature. Users locked out before they can even log in fix it themselves instead of calling us in a panic.”
“Offline reset handled our travelling and remote users — the edge case that broke our old tool. Nobody's stranded now.”
“We got stronger, consistent password policy across the estate — better than AD defaults — while making life easier for users. Rare to improve security and UX at once.”
“Verification before reset means it's genuinely secure self-service, not a back door. One-time codes and questions, enforced and audited.”
“Enrollment enforcement got us real coverage — users actually registered their methods, so the deflection numbers held up in practice.”
“It does one thing extremely well. For a big workforce drowning in password calls, it's one of the easiest business cases we've made.”
“Being part of the One Identity platform means it fits our wider identity stack rather than being another disconnected tool.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the email security market — tap any vendor to see why it sits where it does.
TechBag Email-Security Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Dedicated SSPR with strong coverage and policy, in a unified platform. This page's product.
Detection × Portfolio Integration
The grid nobody publishes — how strong the email detection is vs how integrated with the wider security portfolio.
Deep coverage (login/offline/helpdesk) + policy, unified with the identity platform.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Password Manager vs the SSPR field
Native tooling, bundled Entra and point tools — honest lanes; the edge is deep coverage (login-screen, offline, helpdesk) and policy, in a unified platform.
| Dimension | Password Manager | Microsoft Entra SSPR | Point SSPR tools | Native AD | Helpdesk only |
|---|---|---|---|---|---|
| Self-service reset & unlock | Full | Yes | Yes | None | None |
| Coverage (login screen / offline) | A strength | Cloud-focused | Varies | None | None |
| Password policy strength | Granular | Cloud policy | Varies | Basic | None |
| Fit & platform | Unified identity platform | Microsoft suite | Standalone | N/A | N/A |
| Best fit | Organisations wanting dedicated SSPR with strong coverage and policy, in a unified platform | All-in on Microsoft Entra | A quick standalone SSPR | Nobody serious about the cost | Nobody wanting to pay per call |
Which email-security approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Password Manager if…
- ✓Password tickets are a major helpdesk cost you want to deflect
- ✓You need strong coverage — login-screen and offline reset
- ✓You want granular password policy beyond AD defaults
- ✓You want SSPR within a unified identity platform
Choose Microsoft Entra SSPR if…
- ✓You're all-in on Microsoft Entra and want its bundled self-service reset
Choose a point SSPR tool if…
- ✓You want a quick standalone reset tool and don't need the coverage depth
Move toward passwordless if…
- ✓Your strategy is to reduce password reliance (OneLogin passwordless)
Helpdesk only if…
- ✓Rarely — paying per reset call is the expensive status quo
What do email threats cost you?
Drag the sliders (count users; IT-hour cost as loaded incident rate). Estimates assume ~1.5 hours per user per year handling email threats that reach the inbox without AI filtering, with ~70% removed by stopping the mass at the gateway — the avoided-breach value (most attacks start here) is the larger, unpriced win. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models actual device counts and modules.
Three ways to consume it
One Identity Password Manager prices per user. TechBag baselines your password-ticket cost and scopes it in one GST quote.
Password Manager
Best for helpdesk savings
- Self-service reset & unlock, 24/7
- Login-screen & offline coverage
- Granular password policy
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
+ Identity platform
Best for a broader strategy
- Complements governance & access
- A path toward passwordless (OneLogin)
- TechBag scopes the mix
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your device counts and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Measure YOUR password-ticket volume and cost — the deflection ROI you're targeting.
Confirm reset from the Windows login screen — for users locked out before they can log in.
Test offline reset for remote/travelling users on machines off the corporate network.
Configure identity verification (questions, one-time codes, stronger auth) so self-service is genuinely secure.
Define granular policy — length, complexity, history, dictionary — stronger than AD defaults.
Enforce enrollment so users register methods and coverage is real — deflection depends on it.
Consider whether passwordless (OneLogin) is your longer-term strategy alongside SSPR.
Right-size per user — TechBag scopes and quotes in INR/GST.
Questions buyers ask
Ready to deflect your biggest helpdesk cost?
Scope an SSPR PoC (self-service reset and unlock, login-screen and offline coverage), baseline your password-ticket savings, or let a TechBag advisor plan your password management and policy.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.