Overview
With One Identity Safeguard for Privileged Sessions, you can control, monitor and record privileged sessions of administrators, remote vendors and other high-risk users. Content of the recorded sessions is indexed to simplify searching for events and reporting so you can more easily meet your auditing and compliance requirements. In addition, Safeguard for Privileged Sessions serves as a proxy, and inspects the protocol traffic on the application level and can reject any traffic violating the protocol - thus making it an effective shield against attacks. In transparent mode, only minimal network changes are required and users do not have to change their workflow or client applications, which makes implementation a breeze. However, workflow can be configured so you can authenticate users, limit access to specific resources, authorize and view active connections, and receive an alert if connections exceed preset time limits. Safeguard can also monitor sessions in real time and execute various actions: if a risky command or application appears, it can send you an alert or immediately terminate the session.
To purchase via private offer, please visit: https://www.oneidentity.com/register/110890/
Highlights
- Full session audit, recording and replay, all session activity, down to the keystroke, mouse movement and windows viewed is captured, indexed and stored in tamper-proof audit trails that can be viewed like a video and searched like a database.
- REAL-TIME ALERTING AND BLOCKING: In the case of detecting a suspicious user action, Safeguard can log the event, send an alert or immediately terminate the session.
- PROXY ACCESS AND FULL TEXT SEARCH: Since users have no direct access to resources, the enterprise is protected against unauthorized and unfettered access to sensitive data and systems. With OCR auditors can do full text searches.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide

Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
All fees are non-refundable and non-cancellable except as required by law.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Customer reviews
Privileged access has been secured and sessions are monitored to strengthen accountability
What is our primary use case?
One Identity Safeguard is used for managing privileged passwords and monitoring sessions, which helps track admin activities and enforce secure access policies for the accounts. This is important for protecting critical resources like systems or applications, thereby improving both security and accountability.
Whenever an admin needs server access, they must request it through One Identity Safeguard . Once approval is granted based on the request, they can access the server, and the session is recorded, keeping everything monitored and controlled.
Whenever an admin accesses a server through One Identity Safeguard, they do not need to know the actual password. The system provides temporary access through the vault, ensuring secure and controlled usage of the applications.
What is most valuable?
The session monitoring and recordings are the best features of One Identity Safeguard, allowing us to review what actions were performed during a session. This helps us in both troubleshooting and audits.
One Identity Safeguard makes compliance easier and really helps in incident investigation as well as visibility.
One Identity Safeguard has impacted our organization positively because it has helped us standardize how privileged access is managed and has also reduced dependency on manual efforts in password handling, improving operational control overall. It has reduced errors, and the manual efforts have been significantly reduced.
What needs improvement?
One Identity Safeguard does not require any improvements at this time based on our current usage.
The initial setup of One Identity Safeguard is somewhat tricky and requires proper planning, so this aspect could be simplified.
For how long have I used the solution?
One Identity Safeguard has been in use for more than three years.
What do I think about the stability of the solution?
One Identity Safeguard is stable.
What do I think about the scalability of the solution?
From a scalability perspective, One Identity Safeguard is excellent and matches our organization's growth. We have seen a good response from the customer team, who are ready to provide support at any time we require it.
How are customer service and support?
We have found and seen a good response from the end-user and usability of One Identity Safeguard, as it is seamless and works well in our organization.
Which solution did I use previously and why did I switch?
One Identity Safeguard has been used since day one.
How was the initial setup?
The deployment of One Identity Safeguard took less than one month. It was straightforward, initially taking one or two days, and from this we have seen a smooth transition to One Identity Safeguard with no issues during the deployment.
What about the implementation team?
One-week training was provided for the users and the IT team to ensure they could manage One Identity Safeguard. The end-user access management is smooth as per usability, making for a great experience.
What was our ROI?
One Identity Safeguard has provided a good return on investment, which comes from the reduced risk of security incidents. Avoiding even one breach can have a significant cost. It has also reduced the time spent on password management, saving our team time in managing privileged accounts, and is helping with automation that reduces manual efforts.
What other advice do I have?
One Identity Safeguard is highly recommended because it is a wonderful solution, providing great usability, great security, and great visibility. One thing I would advise is to ensure your team is properly trained before deployment and plan the architecture and policies carefully, as this will help you get the best result. This review has been given a rating of nine out of ten.
Secure access has protected critical systems and now tracks all privileged activities
What is our primary use case?
One Identity Safeguard has been used by our organization for more than three years. The primary use case for One Identity Safeguard is to secure admin access to the servers and the network devices, which helps us to ensure only authorized users can access our critical systems and devices, and it also monitors all the privileged sessions.
What is most valuable?
One Identity Safeguard offers secure password vaulting, which ensures passwords are not shared or exposed, significantly improving security, and session monitoring and recording, allowing us to track all the admin activities easily.
These features help our team day-to-day by eliminating password sharing among the admins and ensuring secure access to critical systems, which reduces security risks, while tracking and controlling privileged access prevents misuse of admin accounts and improves overall system security.
One Identity Safeguard has positively impacted our organization by increasing visibility into privileged user activities, allowing us to track and audit all actions easily, which helps in compliance and security.
What needs improvement?
One Identity Safeguard provides great features with a smooth process and a very good amount of stability, so there is no need to improve as of now, but it might be required in the future.
For how long have I used the solution?
I have been working in my current field for more than eight years.
What do I think about the stability of the solution?
One Identity Safeguard is stable.
What do I think about the scalability of the solution?
One Identity Safeguard's scalability matches our organization's growth over time with no issues.
How are customer service and support?
Customer support has a very helpful nature and is very responsive to our technical team when they require technical support, providing 24/7 assistance based on the given timeline.
Which solution did I use previously and why did I switch?
We have not evaluated any other options, as we had confirmed from day one that we were going to procure One Identity Safeguard.
How was the initial setup?
The deployment of the solution has taken less than one month, and it was a great experience. Regarding deployment, we have not faced any disruptive issues; it was very smooth for our privileged users, and after a short initial adjustment, they were able to access the system through One Identity Safeguard without issues, thanks to training and clear communication that minimized disruptions.
What about the implementation team?
The training requirement was very minimal, taking less than one week for training the employees, and once they had a good amount of knowledge about One Identity Safeguard, they were ready to go.
What was our ROI?
We have seen a good amount of return on investment, saving our employees time and money while providing security; it has helped us reduce manual efforts by around 30 to 40 percent.
What's my experience with pricing, setup cost, and licensing?
The experience with the pricing, setup cost, and licensing was straightforward, and the sales team was very helpful during the procurement and implementation of the solution, making it a great experience.
Which other solutions did I evaluate?
One Identity Safeguard has been the only solution used since day one.
What other advice do I have?
For any organization, whether mid-size or large, looking into using One Identity Safeguard, it will be a really good solution for managing accessibility to critical devices with great security features and automation. Planning deployment carefully and understanding access requirements is essential, so start with the most critical systems first and then go for the less critical ones. This review has been rated 9 out of 10.
Privileged access has become controlled and audited with real-time session monitoring
What is our primary use case?
My main use case for One Identity Safeguard is to use it as a PAM tool for managing and monitoring privileged accounts. In every organization, there are special accounts such as admin or root accounts that have a very high level of access, and if these accounts are missed or compromised, it can create problems or damage. One Identity Safeguard helps us to control who uses these accounts and when they can use them.
A quick, specific example of how I use One Identity Safeguard to manage those privileged accounts involves a database administrator needing to make an urgent change to our production database. In the past, we would just use a shared admin password that everyone in the team knows, but now with One Identity Safeguard, the admin logs into the Safeguard portal and raises an access request for the production database. The request automatically goes to his manager, and based on the review, it gets approval. One Identity Safeguard connects the admin to the database without showing him the actual password, so he never knows about the credentials.
What is most valuable?
The excellent session recording and monitoring stand out as the best features of One Identity Safeguard. It is a compliance-based deployment and can work across on-premises as well as cloud environments.
Session recording and monitoring have benefited my organization by ensuring that every privileged session is monitored in real-time. Whenever any admin logs into the server through One Identity Safeguard, the system records it and the screen is viewed. The security team can watch live sessions if needed or review the recordings whenever they need them.
One Identity Safeguard has saved our compliance efforts, so generating audit reports that used to take days now takes a minute, which is a very good example of its efficiency.
One Identity Safeguard has positively impacted our organization by giving us complete visibility over all privileged access, making compliance audits much easier than before, and ensuring that access is not time-bound, allowing admins access only for the duration they need it.
Compliance audits have become much simpler with One Identity Safeguard, as every access request, approval, session, and action is logged automatically. The audit team can ask who accessed what system and when, and we are able to generate those types of reports in minutes, significantly reducing our efforts and costs.
What needs improvement?
I have not seen any issues with One Identity Safeguard solution. I do not wish to add more about needed improvements related to usability, integration, or support.
For how long have I used the solution?
I have been using One Identity Safeguard for more than three years.
What do I think about the stability of the solution?
One Identity Safeguard is stable.
What do I think about the scalability of the solution?
One Identity Safeguard is a very good solution from a scalability perspective, and we have not seen any issues with its scalability so far.
How are customer service and support?
The customer support team for One Identity Safeguard is good, responsive, and we have seen good responses multiple times.
Which solution did I use previously and why did I switch?
We are using One Identity Safeguard only and did not use a different solution before.
How was the initial setup?
The deployment of the solution took less than one month for my organization.
The deployment affected our privileged users smoothly, as I did not see any challenges or disruptive events with this solution.
The experience during the deployment was very smooth, as I have not seen any kind of challenges with the end-users.
What about the implementation team?
We have integrated our Active Directory with One Identity Safeguard.
The integration with Active Directory was complex during the initial setup, but later we found it to be very smooth, requiring proper planning in advance.
The integration with Active Directory has improved our efficiency and security because our users are syncing properly.
What was our ROI?
We have seen a good return on investment with One Identity Safeguard because the ROI did not come in a dramatic way; it came through multiple small savings that added up significantly over the years.
What's my experience with pricing, setup cost, and licensing?
I had a great experience with the pricing and setup cost of One Identity Safeguard, and there were no challenges.
Which other solutions did I evaluate?
We have not evaluated other options before choosing One Identity Safeguard.
What other advice do I have?
I would advise others looking into using One Identity Safeguard to implement it in their environment and not wait for a security incident to occur. Most organizations consider access management only after something goes wrong and an account gets compromised, but by then the damage is already done. One Identity Safeguard is a tool you want in place before something bad happens, so this is highly recommended by us. I have given this review a rating of eight.
Session monitoring has strengthened audits and now provides secure controlled vendor access
What is our primary use case?
Our main use case for One Identity Safeguard is to manage and secure privileged accounts, session monitoring, and recording for audit purposes while also providing controlled access to vendors or our internal team, and enforcing least privilege access.
What is most valuable?
The best feature of One Identity Safeguard , in my opinion, is its session monitoring, which includes full visibility with session recording, user-friendly access control, and helps in a compliance-ready environment.
The session monitoring feature of One Identity Safeguard stands out because it provides full visibility on which user is accessing which servers at what time, collecting all these logs and also providing data that can be used for audit purposes.
One Identity Safeguard has positively impacted our organization by providing strong security, compliance, and the data required for audits, making it really helpful.
What needs improvement?
One Identity Safeguard is working perfectly for our organization. The initial setup could be simplified, and more documentation would be needed for faster implementation.
For how long have I used the solution?
I have been using One Identity Safeguard for more than two years.
What do I think about the stability of the solution?
One Identity Safeguard is stable.
What do I think about the scalability of the solution?
One Identity Safeguard is excellent regarding scalability.
How are customer service and support?
Customer support is good; they are technical experts and efficiently resolve issues.
How was the initial setup?
The deployment of One Identity Safeguard took less than two weeks to fully implement and use.
What about the implementation team?
We have integrated One Identity Safeguard with Active Directory.
The integration with Active Directory was straightforward.
The integration with Active Directory has simplified our work for managing user data.
What was our ROI?
There is a very good return on investment from One Identity Safeguard, as we are saving time along with money.
What other advice do I have?
I advise anyone looking for a solution for security audits, session monitoring, or access control to consider One Identity Safeguard as one of the best solutions available in the market, so it is highly recommended.
Identity controls have strengthened protection and simplify revoking access across user accounts
What is our primary use case?
My main use case for One Identity Safeguard in day-to-day work is to provide identity across all user accounts and domains, and it improves security across the enterprise by providing enhanced features with respect to this identity solution.
I primarily use One Identity Safeguard for protecting security across all user accounts, enterprise data accounts, assets, as well as privileged access, domain user, and admin accounts, giving SSO features and providing security across all user accounts.
What is most valuable?
One Identity Safeguard offers the ability to identify and revoke access easily for terminated accounts, which reduces risk and simplifies control of access in case of detected threats.
It reduces a lot of risk and saves time; every account is synced, and it can grant access with role-based permissions across all users quickly, alerting us if any threat is detected.
I find that the deployment of One Identity Safeguard is very easy, with good integration and scalability of user accounts, enhancing feature capabilities and providing strong product support.
What needs improvement?
The user interface can be improved for better searching of user accounts, and if One Identity enhances its support in that area, it would be very helpful.
If One Identity improves integration during migration from other platforms, it will definitely enhance the overall experience.
If the integration and connectivity can be improved during deployment, it would greatly aid the overall experience.
For how long have I used the solution?
I have been using One Identity Safeguard for more than two years.
What do I think about the stability of the solution?
As of now, I have not experienced any downtime or reliability issues with One Identity Safeguard.
What do I think about the scalability of the solution?
One Identity Safeguard's scalability features are good, allowing me to improve the scale in terms of resources and user accounts.
How are customer service and support?
For small issues, I have raised support cases with One Identity, and the team has been very cooperative and responsive in providing support and documentation.
Which solution did I use previously and why did I switch?
I previously used SailPoint, but One Identity Safeguard is better in terms of product features.
How was the initial setup?
The deployment took three phases: first, I got support from the vendor for integration, second, I deployed across all users, and finally , I identified any associated risks.
I performed the deployment in different stages for not all users, ensuring that privileged user accounts transitioned smoothly onto One Identity Safeguard.
What about the implementation team?
I had some formal sessions from the vendor that provided visibility into improved features, capability, enhanced security control, user accessibility, and granting access, and the team is very comfortable now.
What was our ROI?
I saved both money and time as a result of using One Identity Safeguard.
What's my experience with pricing, setup cost, and licensing?
I did not face any challenges with pricing, setup costs, and licensing, but for improved features, I need to address licensing.
Which other solutions did I evaluate?
Before choosing One Identity Safeguard, I evaluated Saviynt, Delinea, and Octa, finding One Identity Safeguard to be the most suitable.
What other advice do I have?
In the context of increasing cyber threats across organizations, I would advise others that using One Identity Safeguard is crucial for protection. I would rate this review a 9 out of 10.