Start with Identity
Subscribe
IGA

One Identity

Founded 2017Aliso Viejo, CA, USAQuest Software (Clearlake-backed); separation to an independent company announced June 2026, not yet confirmed closedScore 4.1/5Evaluated 2026-09-20Website ↗

Capability scores

Methodology →
Authentication
3.5
SSO & Federation
3.5
Authorization
4.0
Lifecycle & Provisioning
4.5
MFA & Passwordless
3.0
Governance & Audit
4.5
Developer Experience
3.0
Deployment Flexibility
4.0
Pricing Transparency
3.0
Support & Ecosystem
4.0

Scored 0–5 against a published rubric. Independent analysis, no vendor sponsorship.

Overview

One Identity offers a broad identity governance (IGA) portfolio spanning Identity Manager for governance and provisioning, Safeguard for privileged access, Active Roles for Active Directory management, and OneLogin for workforce access. Its position is built on breadth: covering several identity disciplines under one vendor rather than excelling at a single one. It reports more than 7,500 customers managing over 125 million identities as of May 2025.

The structural picture is changing. On 24 June 2026 One Identity announced it will become an independent company with a new global headquarters in Cork, Ireland, under CEO Praerit Garg, with over 80 percent of engineering based in Europe. The separation was described as progressing through 2026 and we could not confirm it has closed. Post-separation ownership has not been disclosed: no investor, valuation, or deal structure has been published. Parent Quest Software still described itself as Clearlake-backed in September 2026, in a release that did not mention One Identity at all. Buyers signing multi-year deals should ask where the contract lands.

What it is good at

Provisioning and lifecycle depth are genuine strengths, with mature role management, certification, and connector coverage suited to complex enterprises. The real advantage is consolidation: governance, PAM, and AD management from one vendor give a unified story for procurement and audit, and the Microsoft and Active Directory integration is deep, which fits the many enterprises still anchored on AD. Development is active across the line, with Identity Manager shipping 9.x and Cloud PAM Essentials offering SaaS privileged access with no appliance. Identity Manager 8.1 achieved NIAP Common Criteria certification in April 2020, a credential few IGA vendors hold, though it applies to a version six releases behind current.

Where it falls short

The breadth comes at the cost of modern polish. Cloud-native organisations expecting the interface quality of newer governance tools often find the experience dated, and deployments can be heavy. Teams wanting a single best-of-breed governance product rather than a suite will find more focused depth elsewhere.

Two practical cautions. Safeguard for Privileged Passwords carried CVE-2024-45488, a CVSS 9.8 unauthorized-access flaw, though it affects virtual appliance installations only and no One Identity CVE appears in the CISA KEV catalog. And the ownership transition above adds genuine procurement uncertainty that competitors do not carry right now.

Pricing

Quote-based with nothing published, even on AWS Marketplace where Safeguard directs buyers to a separate billing relationship. One reseller SKU suggests Cloud PAM Essentials licenses per managed identity user rather than per managed account. Model the all-in cost with the TCO calculator.

Best for, and who should look elsewhere

Choose One Identity when unifying IGA, PAM, and AD management under one vendor in a Microsoft-heavy enterprise is the goal, and you are comfortable with the pending separation. For the category leaders, compare SailPoint vs Saviynt; for modern cloud-first governance, see ConductorOne and Lumos; for access visibility, see Veza.

Bottom line

A broad, consolidation-friendly governance suite strongest for Microsoft-heavy enterprises wanting IGA, PAM, and AD management from one vendor, now carrying the added question of who will own it.

One Identity: frequently asked questions

Is One Identity still part of Quest Software?
For now, but that is changing. On 24 June 2026 One Identity announced it will become an independent company with a new global headquarters in Cork, Ireland, led by CEO Praerit Garg, with more than 80 percent of its engineering organisation based in Europe. The announcement described milestones being shared as the transition progressed through 2026, and we could not confirm the separation has legally closed as of September 2026. Post-separation ownership has not been disclosed: no investor, sponsor, valuation, or deal structure has been published. Quest Software still described itself as Clearlake-backed in a September 2026 release, and that release did not mention One Identity at all.
How much does One Identity cost?
One Identity does not publish list pricing for any product. Every quote runs through sales, and even the Safeguard listing on AWS Marketplace states that pricing is handled through a separate billing relationship with the vendor rather than shown. One reseller SKU for Cloud PAM Essentials is priced per managed identity user rather than per managed account, which is a weak but useful signal about the licensing basis. Treat the per-user figures published by procurement aggregators as unsourced; they disagree with each other.
Did lenders take over Quest Software?
No. Quest went through two debt restructurings in 2025, and Clearlake Capital retained control throughout. In May 2025 Quest raised 350 million dollars in new term loans from existing lenders, with a second exchange following around August 2025. Trade press reported the debt load rising from roughly 2.1 billion dollars at the 2022 buyout to over 3.5 billion by mid-2024. These were liability management exercises, not a change of control, and the frequently repeated claim that lenders seized Quest equity is not supported by any primary source.
Are there known One Identity security vulnerabilities?
The most serious is CVE-2024-45488, a CVSS 9.8 critical flaw in Safeguard for Privileged Passwords below versions 7.5.2, 7.4.2, and 7.0.5.1 LTS, allowing unauthorized access through a cookie handling issue. Its scope is narrower than the score suggests: it affects virtual appliance installations on VMware and Hyper-V only. Also recorded are CVE-2024-40595 in Safeguard for Privileged Sessions (5.3) and CVE-2025-56689 (4.6, marked disputed). No One Identity, OneLogin, or Quest CVE appears in the CISA KEV catalog as of September 2026, so none is known to be exploited. No 2026 CVEs were found.
Is OneLogin still supported or has it been discontinued?
OneLogin is still a going product, not sunset. One Identity acquired it in October 2021, and as of 2026 it has a live release-notes feed, an active support hub, a 30-day free trial, and it was named as a One Identity product in the June 2026 independence announcement. No end-of-life notice exists. That said, buyers should note OneLogin reached FedRAMP Ready status in 2019 and there is no evidence it ever converted to full FedRAMP authorization, which are materially different things.
Is One Identity Common Criteria certified?
Identity Manager 8.1 achieved NIAP Common Criteria certification in April 2020 against the Protection Profile for Enterprise Security Management, Identity and Credential Management version 2.1. That certification is for a six-year-old version while the shipping line is 9.x, and NIAP archives listings once assurance maintenance lapses, so the present-tense claim needs the version and date qualifier. One Identity states it holds ISO 27001 and issues SOC 1 and SOC 2 Type 2 reports, though its published ISO page still references the superseded 27001:2013 revision.
What are the best One Identity alternatives?
SailPoint and Saviynt are the category leaders for pure identity governance depth. ConductorOne and Lumos are the strongest modern cloud-first options if the dated interface is the objection. Veza is the choice when access visibility rather than lifecycle is the real problem. For the privileged access half of the portfolio, compare Safeguard against CyberArk, Delinea, and BeyondTrust rather than against IGA vendors.
Who is One Identity best for?
Microsoft-heavy enterprises that want identity governance, privileged access, and Active Directory management from a single vendor rather than assembling best-of-breed tools. One Identity reports more than 7,500 customers managing over 125 million identities as of May 2025, and says 80 or more of the Fortune 100 are customers. Buyers who want only governance, or who expect modern cloud-native interfaces, will usually find more depth and better polish elsewhere.

More IGA vendors

All IGA →

Related on Start with Identity

Last reviewed By SWI Community TeamSuggest a correctionHow we research

By SWI Community Team · Last evaluated 2026-09-20

Independent, community-driven analysis. No vendor sponsorship. Compiled from public research and community input and verified on a best-effort basis, so details may be incomplete or out of date. Scores are opinions, not advice. Trademarks belong to their owners; mention does not imply affiliation or endorsement. See the full disclaimer, or send corrections to [email protected].