CyberArk vs One Identity

About One Identity

One Identity sells identity security software, including identity governance and administration products and privileged access management products. One Identity says it is evolving IAM to govern all AI assistants that initiate access requests, automate workflows and impersonate users. One Identity says IAM goes beyond managing people and must govern non-human identities, including AI agents. One Identity addresses Cloud Infrastructure Entitlement Management at the intersection of IGA and PAM. One Identity says its CIEM offering can extend governance to cloud-infrastructure objects and manage privileged access to cloud objects.^[1][7][8]

One Identity says most organizations are left with a sprawling tangle of accounts, groups and privileged access that is difficult to manage and hard to audit. One Identity says Active Roles is purpose-built to streamline Microsoft environments. Active Roles manages Active Directory, Entra ID and Microsoft 365 from a single interface. Active Roles applies role-based access control for zero standing privileges. Active Roles can ensure immediate least privilege for all accounts using automation and scripting. Active Roles aims to eliminate permanent access rights that have not been turned off and to give visibility and control of all Microsoft environments on a single system and console. Active Roles enforces administrative and governance policies inside Microsoft directories to prepare them for an IGA solution. Active Roles eliminates standing privileges and deploys Zero Trust Least Privilege for AD, Entra ID and Microsoft 365.^[9]

Identity Manager governs and secures an organization's data and users, meets uptime requirements, reduces risk and satisfies compliance. Identity Manager gives users access to data and applications they need, whether on-premises, hybrid or in the cloud. One Identity says Identity Manager scales governance across enterprise apps, including SAP, Oracle and ServiceNow. Identity Manager extends identity governance beyond on-premises applications to hybrid and SaaS applications. Identity Manager lets users request entitlements and group access via a shopping-cart selection menu. Identity Manager can automate remediation actions such as disabling accounts, flagging security incidents and launching targeted attestation. Identity Manager supports compliance regulations with user and privileged access reporting. Identity Manager lets line-of-business managers make application-access decisions without IT input. Identity Manager enhances existing SAP security models and connects accounts under governance. Identity Manager uses access insights in OneLogin to inform governance policy decisions.^[10]

Identity Manager On Demand is a fully managed SaaS and cloud identity governance solution. Identity Manager On Demand unifies security policies and satisfies governance needs while implementing a least-privileged model. Identity Manager On Demand lets users make read-only natural language queries to support compliance and reporting needs using AI.^[11]

One Identity says Safeguard fortifies privileged accounts and credentials. Safeguard On Demand is a SaaS-based PAM solution for managing privileged accounts. Safeguard On Demand combines a secure password safe, session management and a monitoring solution delivered from the cloud. Safeguard On Demand can automatically find privileged accounts on a network with host-, directory- and network-discovery capabilities. Safeguard On Demand records all session activity down to the keystroke, mouse movement and windows viewed.^[12]

Safeguard for Privileged Passwords automates, secures and simplifies granting privileged credentials. Safeguard for Privileged Passwords manages and protects privileged credentials with password vaulting. Safeguard for Privileged Passwords supports workflows with time restrictions, multiple approvers and emergency access. Safeguard for Privileged Passwords offers password management for all employees, not just privileged administrators. Safeguard for Privileged Sessions records and monitors privileged sessions to stop security threats in real time. Safeguard for Privileged Analytics detects anomalies and ranks them based on risk, using 13 different machine-learning algorithms. Safeguard for Privileged Analytics reduces alert noise generated by SIEMs by categorizing user events based on risk and deviation levels. Safeguard for Privileged Analytics integrates with Safeguard for Privileged Sessions to enable automated session termination whenever a highly suspicious event occurs.^[13][14]

NC-Access is a session manager for OS/390 or z/OS and interfaces with NC-Syncom and NC-Pass. One Identity says its SaaS solutions are developed, operated and supported within the scope of its Information Security Management System, which has achieved ISO/IEC 27001:2013 certification. One Identity's Information Security Management System is aligned to the additional control implementation guidance in ISO/IEC 27017:2015 and ISO/IEC 27018:2019. One Identity helps federal, state and local entities, plus military and intelligence agencies, address identity security.^{[1][12][15][16]}