One Identity Manager v7.0.1

Identity and Access Management (IAM) is shifting as enterprises expand beyond perimeter-based security into mobile, remote, partner, and customer-driven access models. Organizations must support large populations of external users and new collaboration patterns captured in the “new ABC — the Agile Business, connected,” spanning B2E, B2C, and B2B relationships. As cloud adoption accelerates across IaaS, PaaS, and SaaS, security, identity administration, and governance must extend across hybrid environments at “Internet scale.” In this context, “identity is the new perimeter,” raising the importance of strong identity management, efficient administration, and durable governance integrated with existing infrastructure rather than replacing it with another monolithic suite.

One Identity, strengthened by the acquisition of Quest Software, positions its portfolio as mature and category-leading while continuing active innovation. One Identity Manager (v7.0.1) is presented as a comprehensive IAM/IAG suite with a new modular, component-based architecture that simplifies installation and reduces deployment time. It supports Oracle and MS SQL databases and introduces an automated, multi-threaded database scheduler to improve performance. While it lacks built-in Web Access Management and federation, these capabilities are delivered via One Identity Cloud Access Manager.

The suite emphasizes role management (including role mining), attestation/recertification, policy-based compliance controls with risk indexing and remediation, and extensive connector coverage across databases, enterprise systems, and cloud services. A redesigned 3-tier architecture uses an MS IIS-hosted REST application server with REST/JSON APIs, improved extensibility, persona-based web UI, and developer tooling. Additional capabilities include data governance for unstructured file access, integration with Privilege Management (including MFA-enabled password management), strong logging via NLog for SIEM integration, broad reporting formats, and flexible on-prem and cloud licensing editions. Strengths center on modernization, connectors, governance, and logging, while challenges include REST API maturity and emphasis on traditional enterprise use cases.

• One Identity Manager version 7.0.1 introduces a modular, component-based architecture for installing core and non-core components.
• One Identity Manager supports Oracle and MS SQL as underlying databases.
• An automated, multi-threaded database scheduler is included to improve performance.
• Web Access Management and federation are not included in One Identity Manager and are provided by One Identity Cloud Access Manager.
• Business role management supports mapping entitlements to organizational structures including departments, cost centers, locations, and project groups.
• Attestation can be performed on demand or scheduled, and recertification is supported.
• Version 7 adds a new connector architecture and a synchronization wizard for provisioning/deprovisioning and synchronization management.
• OAuth 2.0 authentication is available for claim-based authentication for web applications and fat clients.
• The application server is an MS IIS-hosted REST-based service providing a unified REST/JSON interface alongside existing SOAP and SPML interfaces.
• Report subscriptions support formats including HTML, PDF, RTF, TEXT, XLS, TIFF, XML, CSV, XPS, DOCX, and XLSX.

• “The landscape for Identity and Access Management (IAM) is changing substantially”
• “Traditional perimeter-based security, while still needed, is getting less important.”
• “identity is the new perimeter”
• “Customers looking for solutions in the above described areas are not looking for another identity and access management suite.”
• “They are rather looking for new solutions and concepts tying together their existing on-premise infrastructure with external cloud service offerings.”
• “This, however, has to be achieved at an Internet scale”
• “One Identity Manager (Identity Manager) is a mature, comprehensive IAM/IAG suite.”
• “Attestation can either be scheduled or on demand.”
• “Version 7 adds a new connector architecture which provides a unified framework for customising and deploying new and existing connectors.”
• “With version 7, One Identity has amply dispelled any such concerns.”