One Identity Manager

Identity Governance and Administration (IGA) unifies identity provisioning and access governance to manage end-to-end identity lifecycle processes, entitlements, workflows, policies, roles, access certification, segregation-of-duties (SoD) analysis, reporting, and access intelligence. Identity provisioning handles access fulfillment and entitlement administration across the lifecycle, while access governance equips the business—often via self-service—to manage workflows, run reports, execute certification campaigns, and perform SoD checks. An emerging access intelligence layer adds analytics and machine learning-driven pattern recognition for process optimization, role design, automated reviews, and anomaly detection. Weak IGA foundations increase exposure to risks such as identity theft, unauthorized changes, access creep, role bloat, delayed fulfillment, orphaned accounts/roles, and SoD conflicts that can enable internal fraud.

IGA tools consolidate identity data from systems of record (e.g., HR, ERP) and correlate accounts, entitlements, and attributes across connected targets for centralized management of identities, groups, and roles. Demand is rising for integrations with IT Service Management tools to unify access requests and password functions within broader helpdesk portals, and with Privileged Access Management and Data Access Governance for broader governance coverage, including unstructured data.

One Identity Manager—core to One Identity’s portfolio within Quest Software—offers a mature, modular IGA suite with strong provisioning and access governance, flexible workflow customization, and support for joiner/mover/leaver processes. It provides on-premises and cloud-related deployment options, including managed single-tenant and private data center models, plus extensions via the Starling SaaS platform. Distinguishing capabilities include SAP-certified integration (including SAP S/4HANA) and a shopping-cart access request model with entitlement/role change simulation. It also offers Data Governance for unstructured repositories (e.g., NTFS, NAS, SharePoint, OneDrive) and integrates tightly with Safeguard privileged access management. Strengths center on usability, connector breadth, advanced role/SoD support, and integration depth; challenges include training needs, partial Docker-based components without cloud-native architecture, and a limited but growing services network.

• Identity provisioning focuses on administering access fulfillment and entitlements throughout an identity lifecycle.
• Access governance provides tools to manage workflows and access entitlements, run reports, conduct access certification campaigns, and perform SoD checks.
• Access intelligence is an analytics layer above identity provisioning and access governance that provides business-related insights for decision making.
• IGA covers identity lifecycle management, access entitlements, workflow and policy management, role management, access certification, SoD risk analysis, reporting, and access intelligence.
• Identity information is consolidated from repositories and systems of record such as HR and ERP systems for correlation and centralized administration.
• One Identity is a Quest Software business based in California.
• One Identity Manager is the core product of One Identity’s IAM portfolio and originated from the acquisition of Völcker Informatik.
• One Identity Manager supports joiner, mover, and leaver (JML) processes and access review as part of access governance processes.
• One Identity Manager is certified by SAP and supports SAP S/4HANA integration.
• One Identity Manager supports Microsoft SQL Server as its underlying database.

• “Governance moves beyond simple reporting and dashboarding to offer advanced capabilities that include machine learning techniques enabling pattern recognition to deliver valuable intelligence for process optimization, role design, automated reviews and anomaly detection.”
• “IGA concerns the capabilities in IAM that broadly deal with end-to-end identity life-cycle management, access entitlements, workflow and policy management, role management, access certification, SoD risk analysis, reporting and access intelligence.”
• “The identity information including user accounts, associated access entitlements and other identity attributes are collected from across the connected target systems for correlation and management of individual identities, user groups as well as roles through a centralized administration console.”
• “The integration with other enterprise systems such as IT Service Management (ITSM) tools as well as Privileged Access Management (PAM) tools have become in-demand in the industry.”
• “One Identity Manager builds on a sophisticated, consistent concept which allows for intuitive user experience, rapid customization and easy deployment.”
• “The product builds on a modular architecture, where various components support capabilities such as policy management and enforcement, workflows, or role management.”
• “It has a very flexible framework for customization of workflows, up to the support of complex and interrelated workflows.”
• “With a shopping cart-based approach for access requests, features such as the ability to simulate the effect of changes to access entitlements or role definitions remain unique.”
• “Recent enhancements also include product re-architecture to make its core components available on Docker container, to allow a hybrid and more scalable infrastructure.”
• “Process-driven approach requires some training, but is highly efficient.”