OneLogin Workforce Identity
Centralized identity workflows have simplified onboarding and secured temporary admin access
What is our primary use case?
My main use case for OneLogin is for identity management.
OneLogin helps me manage employees across apps, databases, clouds, and other platforms. For example, when someone joins or changes teams or leaves, access is created, changed, and removed properly. It also helps secure admin root access to accounts.
For a more practical example regarding my main use case, suppose a developer needs temporary admin access to a production server. Instead of giving them a permanent password, OneLogin can help me approve the request, grant them access for a limited time, record the session activity, and remove them afterwards.
A couple of features that I like about OneLogin is firstly the centralized access management that helps manage my users, groups, and permissions from one place instead of handling everything from multiple locations. Secondly, there is automation for onboarding and offboarding that specifically comes in handy when employees join, change teams, or leave. Access can be provisioned or removed with workflows instead of manual IT steps. Lastly, the self-service password reset is beneficial since OneLogin allows us to reset forgotten passwords or unlock accounts ourselves, greatly reducing the help desk workload.
What is most valuable?
OneLogin has positively impacted my organization by greatly reducing the manual workload for identity management. It has also made onboarding and offboarding feel more structured, faster, and less dependent on manual IT work. Now, new users can get the right access based on their role.
The ability to provide a seamless end-user experience for signing in and authenticating to needed applications is very important because it improves both security and user productivity. Employees can access tools they need through a single consistent login experience instead of remembering multiple passwords or going through different login flows for each application.
What needs improvement?
OneLogin can be improved by making the initial setup and configuration process simpler, especially for teams like mine that are new to identity and access management. Some workflows and policy integrations felt complex during setup. Better guided onboarding, clear documentation, and more in-product demonstrations would help admins get started faster.
Some points I want to mention regarding needed improvements include a faster and simpler setup for SSO and MFA policies, a better UI for admins, more helpful error messages during integration setups, and stronger reporting and audit dashboards.
The AI capability needs to be easier for admins and teams to use and to make governance and security easier to understand and act on. The output must be reliable and explainable, accessible to both technical and non-technical admins. Since access decisions are sensitive, AI should provide recommendations and risk signals, but final decisions should take place after thorough review.
For how long have I used the solution?
I have been working in my current field for over two years now.
What do I think about the stability of the solution?
OneLogin is stable as far as my experience goes.
What do I think about the scalability of the solution?
From a pricing perspective, OneLogin is really scalable since the pricing depends on the number of users and is per seat. Adding or removing a user is not much of a hassle for us, and there is no one-time fee up front that we have to pay.
How are customer service and support?
We required some help while onboarding to OneLogin, and the customer support was greatly helpful.
I would rate the customer support a nine out of ten.
Which solution did I use previously and why did I switch?
After switching to OneLogin, I noticed a return on investment. Previously, we primarily used a manual centralized identity management approach, which worked for a while. However, as our organization kept growing, managing SSO, MFA, and user provisioning became harder. We needed a more centralized and scalable solution for authentication and access management.
We evaluated several options before choosing OneLogin, including Okta, Microsoft Entra ID and Azure AD, and JumpCloud. We chose OneLogin because it offered a strong balance of SSO and MFA, directory integrations, user provisioning, and centralized access management at a practical cost.
How was the initial setup?
My advice for others looking into using OneLogin is to plan for immediate implementation properly before rollout. It is best to start by identifying the most important applications, user groups, MFA requirements, and directory integrations. A phased rollout works better in our case than trying to move everything at once.
What was our ROI?
Previously, the process required multiple manual steps and follow-ups with the IT and admin team. With OneLogin, role-based access and approval workflows have made the process more structured, reducing our onboarding time from weeks down to days.
After switching to OneLogin, I noticed a return on investment. Previously, we primarily used a manual centralized identity management approach, which worked for a while. However, as our organization kept growing, managing SSO, MFA, and user provisioning became harder. We needed a more centralized and scalable solution for authentication and access management.
What's my experience with pricing, setup cost, and licensing?
Regarding my experience with pricing, setup costs, and licensing, the pricing and licensing are generally based on a per-user subscription model, which makes it easier for us to scale as the organization grows. The cost depends on the plan and number of users. Feature requirements such as SSO, MFA, and advanced directory integrations are all included or mostly add-ons that can be managed easily.
What other advice do I have?
The AI capabilities that OneLogin offers can be useful in identity and governance. It can provide strong value in governance security by detecting risky access and unusual login behavior, finding patterns in data for large organizations. Additionally, it can prioritize access reviews and suggest least privileged improvements. However, AI decisions should be explainable and reviewed by admins, especially for sensitive security actions.
I feel that switching to OneLogin is a good move for us in terms of centralized access and identity management, and since we have transitioned to OneLogin, it has greatly reduced our manual work and offloaded much of our IT tasks. I would rate this product an eight out of ten overall.
Secure single sign-on has improved our login process and protects all employee accounts
What is our primary use case?
How has it helped my organization?
It simplifies the login process for our end-users, increases our security, saves us time, and reduces errors.
What is most valuable?
One password unlocks all, and there is one click login to all the platforms.
What needs improvement?
The mobile app is not the best, and it could be improved.
For how long have I used the solution?
I have been using the solution for 5 years.
Which solution did I use previously and why did I switch?
I previously used Microsoft Azure. OneLogin is incredible and easy to use. It provides robust security features that simplify our login processes.
What's my experience with pricing, setup cost, and licensing?
It is a must-have for every company looking to secure their accounts and avoid security breaches.
Which other solutions did I evaluate?
I considered Google Cloud CDN.
What other advice do I have?
It is cost-effective and easy to use.
Centralized access management has improved security and reduced password-related support work
What is our primary use case?
Our main use case for OneLogin is single sign-on, user authentication, and access management, which helps employees securely access multiple business applications with one set of credentials.
For example, our team uses OneLogin to secure access to Microsoft 365 and other internal business applications, allowing employees to sign in once through OneLogin and access all authorized applications.
We use OneLogin for user onboarding and offboarding, where access to required applications can be accessed quickly through OneLogin when a new employee joins, and access can be removed centrally when an employee leaves, improving security and reducing administrative efforts.
What is most valuable?
In my opinion, the best features OneLogin offers are single sign-in, multi-factor authentication, and centralized user management.
The multi-factor authentication feature adds an extra layer of security beyond password, requiring users to verify their identity via methods like Google Authenticator, significantly improving overall security.
OneLogin's user management and integrations are also very valuable, as it integrates with popular cloud applications and allows us to manage user access from a central location.
The integration of phishing-resistant device trust has strengthened our authentication processes by ensuring that only trusted devices can access company resources.
OneLogin has positively impacted our organization by improving both security and operational efficiency through centralized access management and SSO, which has reduced password-related support requests, saving time for both users and the IT team and enhancing overall security.
We don't track the exact figure, but based on our experience, OneLogin has reduced password-related support tickets by around 25 to 30% and has saved several hours of administrative work each month.
OneLogin is a strong platform overall, but the reporting and advanced configuration options could be more intuitive; some administrative tasks and policies configuration have a learning curve for new users, and improving the user interface and providing more detailed built-in reporting would make management more efficient.
What needs improvement?
OneLogin could improve some third-party integrations by making setup and troubleshooting more straightforward; while customer support is generally helpful, faster response times for complex issues would be beneficial.
To be honest, we don't use OneLogin for AI-driven features extensively, so I cannot comment deeply on its output accuracy or reliability.
At this point, we have covered the main areas of improvement; the only additional suggestion would be to continue enhancing the reporting dashboard and simplifying some advanced administrative workflows, as overall, OneLogin is a mature and reliable platform and the needed improvements are not major.
For how long have I used the solution?
I have been using OneLogin for two years.
What do I think about the stability of the solution?
OneLogin has been stable in my experience, with no significant downtime or reliability issues.
What do I think about the scalability of the solution?
OneLogin has scaled well with our organization's growth, handling an increased number of users and applications without any significant performance issues.
How are customer service and support?
Customer support has generally met our expectations, as the support team is very knowledgeable and helpful, with most issues being resolved in a timely manner.
Which solution did I use previously and why did I switch?
Before OneLogin, we had a directory application with a specific authentication method.
How was the initial setup?
Our experience with pricing, setup costs, and licensing for OneLogin has been positive, with the licensing being straightforward and the setup process relatively smooth.
What was our ROI?
We have seen a positive ROI, estimating a 25 to 30% reduction in password-related support tickets and several hours saved for IT administration tickets each month, even though we don't track exact numbers.
Which other solutions did I evaluate?
We reviewed a few other identity and access management solutions, including Microsoft Entra ID and Okta, before choosing OneLogin for its balance of security, ease of administration, integration capabilities, and overall value for our requirements.
What other advice do I have?
I rate OneLogin nine out of 10 for its strong security, reliable SSO, effective user management, and good overall user experience.
I chose nine out of 10 because OneLogin delivers very well on its core functions in MFA, user provisioning, and access management, improving security and simplifying administration for our team, but it doesn't attain a perfect 10 due to some advanced configurations being complex and the reporting capabilities needing to be more flexible.
The sign-in experience is very smooth and user-friendly; single sign-on allows users to access multiple applications with one login, reducing password management burdens and improving productivity while maintaining security.
Smart Factor Authentication applies additional verification when a login appears high-risk, such as from a new device or unfamiliar location, and it does a good job balancing security and usability.
The User Identity Synchronization across directories functionality has helped us by keeping user identities synchronized across systems automatically, which reduces manual efforts and improves accuracy, making user management more efficient.
Overall, OneLogin has been a reliable and effective identity management solution for our organization, with its MFA and user provisioning capabilities improving security and simplifying access management.
I recommend OneLogin to organizations looking for a secure and easy-to-manage identity and access management solution.
Automated access management has reduced onboarding delays and simplified daily user operations
What is our primary use case?
OneLogin provides secure and simple access to business applications while maintaining centralized control over user identity and authentication policies.
When employees join our company, their application access is provided through OneLogin based on their roles and responsibilities, which depends on the department. This allows new joiners to start working immediately without waiting for manual access requests.
How has it helped my organization?
OneLogin has provided strong access security for our organization, and day-to-day operations are more efficient for both users and administrators.
We have observed approximately 45 to 50% fewer password-related support tickets, faster user onboarding by nearly 60%, and reduced errors.
What is most valuable?
The most valuable features of OneLogin are unified application access, multifactor authentication, and automated user provisioning.
Automated user provisioning has had the most significant impact for my team. Before OneLogin, creating and removing access across multiple systems required several manual steps. Today, most processes happen automatically, which reduces delays and the risk of human errors.
What needs improvement?
The initial setup could be more simplified; apart from this, everything is perfect and a very smooth solution.
For how long have I used the solution?
I have been working in my current field for more than two years.
What do I think about the stability of the solution?
OneLogin is a stable solution.
What do I think about the scalability of the solution?
OneLogin has excellent scalability, making it a scalable solution.
How are customer service and support?
Our experience with the customer support team for OneLogin has been positive, as cases are generally handled professionally and the technical resources are knowledgeable.
I would rate the customer support for OneLogin eight out of 10.
Which solution did I use previously and why did I switch?
We have not switched from a different solution; we have been using OneLogin from day one.
How was the initial setup?
The initial setup could be more simplified; apart from this, everything is perfect and a very smooth solution.
What was our ROI?
We are receiving a positive return on investment with OneLogin since we have seen a reduced amount of time spent managing user accounts by 50% and shortened onboarding cycles, allowing us to save time and money.
What's my experience with pricing, setup cost, and licensing?
The pricing, setup cost, and licensing for OneLogin are handled by a different team.
Which other solutions did I evaluate?
We have not evaluated other options before choosing OneLogin.
What other advice do I have?
My advice for others looking into using OneLogin would be to spend time planning the identity and identity architecture before jumping into deployment and to define proper user roles. Using multifactor authentication from the beginning and automating provisioning will be helpful. I would rate this review nine out of 10.
Identity workflows have transformed onboarding speed and now support secure passwordless access
What is our primary use case?
My main use case for OneLogin is to enforce workforce identity, and we implemented this in Malaysia's biggest retail client, so all of their employees' applications can be securely accessed through single sign-on using OneLogin.
We also created an employee onboarding workflow using OneLogin, so when a user's account gets created in OneLogin, their account is SCIM provisioned into different applications. The account is synchronized using Saviyant into OneLogin as well, so this is my day-to-day activity with OneLogin.
OneLogin was used across the entire organization, and there were both power users and regular users. The power users managed the platform and used the APIs to create custom requirements, while the regular users used it for their SSO, MFA, and other identity management.
What is most valuable?
In my experience, one of the best features of OneLogin is its passwordless login, which I saw as ahead of its time, as it allowed creating logins with MFA without passwords, which is now a significant trend in the market.
The most important feature of OneLogin that we ended up using is definitely SSO and its APIs to manage users and groups programmatically using custom scripts and Saviyant workflows.
OneLogin has impacted the organization I implemented it for by allowing swift onboardings, as onboarding definitely helped in bringing new employees on board very quickly. It has many built-in application connectors to onboard new apps quickly, and it helped in connecting with our organization, which is very large, as we migrated many applications and onboarded new applications because of the ease that OneLogin provides.
What needs improvement?
During implementation, there were not many features that I remember not using in practice. Mostly, there were certain APIs that we were experimenting with earlier but did not use, so we created custom scripts for them, especially around auto-implementing MFA for new joiners, although we later shifted that process.
For how long have I used the solution?
I have been working with OneLogin for almost five years now.
Which solution did I use previously and why did I switch?
Before we landed on OneLogin for this environment, the client was part of a larger group that was already using OneLogin, and we segregated the tenant from the group tenant to an individual tenant for this company, which is now a Malaysian-owned company in the retail sector.
How was the initial setup?
When I first implemented OneLogin for that client, it took close to six months for everything to get up and running. The initial tenant onboarding was quick, but since it was mostly a migration, the company was separating from a larger group, which involved a multi-month migration and over 160 applications.
What about the implementation team?
The scope of that work is definitely part of a larger team managing identity and access for the client, as we were a team of 10 members managing different tools, with OneLogin being one of them.
We also had Saviyant for user provisioning and UAR and certification campaigns, alongside several of our own Node.js written programs to do the identity provisioning, so we were at least a team of 10 members at that time.
Which other solutions did I evaluate?
We evaluated other IAM tools including PingOne, but we decided to stick with OneLogin as it was a known experience for the end users as well as for the application administrators, and since we were already using a larger part of the group, we tried to keep the same experience and went with OneLogin.
What other advice do I have?
When I am working in OneLogin on a normal day or week, the first thing I typically do in the platform is handling SSO configurations, so I add applications and interact with application stakeholders, learn about the applications, and then finally decide who gets to access them and how the access would be granted.
My team did need formal training when working with OneLogin, and while it was mostly intuitive, we still had training through OneLogin given as part of the compliance.
Now that OneLogin is in place with Saviyant, we are able to onboard users very quickly by connecting with the HRMS, reducing the process to a few minutes compared to the lot of manual work we used to do earlier creating accounts in AD and synchronizing them. I would rate this solution highly for its effectiveness and integration capabilities.
Centralized identity has streamlined secure access and improved collaboration and compliance
What is our primary use case?
OneLogin is an excellent solution for security and compliance. My main use case is that it is used for ensured security and privacy on a HIPAA and PCI compliant platform with the ease of storing my employees' passwords so that my tech team is not constantly bombarded by password reset requests from employees.
I can give a specific example of how I use OneLogin for security and compliance in my organization, where it solved both my privacy concerns as well as provided a more efficient flow of priority tickets for my technology team and allowed me to show my investors additional privacy and security measures, which built their trust in my organization.
What is most valuable?
OneLogin offers the best features by ensuring internal users have a seamless experience when accessing business applications so that they do not have to remember multiple passwords, and it also provides centralized control over the identity of the business apps.
For the seamless experience and centralized control I mentioned, I would say the productivity has increased since my team does not have to waste a lot of time logging into multiple business applications, as they just have to use one password to log in to all my business applications, which has allowed them to focus more on their daily tasks, thereby saving considerable time.
OneLogin's application integration is easy to deploy, and the dashboard is good and user-friendly. It also provides a secure solution with certificate management that can restrict access from unauthorized users.
OneLogin has positively impacted my organization by saving time, as I have seen an increase in time-saving because my team just has to use one password to log in to all my business applications, which allows me to strategically allocate that time to more strategic projects and tasks, thereby increasing productivity in my organization. It has also enhanced user experience with centralized control over identity, restricting access from unauthorized apps and providing complete visibility of access.
I can share that there has been a huge collaboration improvement, with internal and external collaboration improving from 40 to 55 percent, and remote collaboration has also improved since OneLogin is very secure and allows only authorized personnel to log into the apps, which has significantly increased my time-saving.
What needs improvement?
I have not experienced a lot of challenges regarding OneLogin's functionality, but I believe the audit trail could be improved.
Customizing landing pages would be a nice addition to OneLogin, even though I have not faced major challenges.
For how long have I used the solution?
I have been using OneLogin for about three years.
How are customer service and support?
According to my experience with the support, they have been responsive, so I do not have any issues with the support. However, OneLogin does not have the ability to set a custom timeout on rotating security codes.
What other advice do I have?
I would advise others looking into using OneLogin to know that it is a very helpful tool that secures all business applications in a cost-effective way. It is very easy to use for new users with its intuitive and user-friendly interface, making it accessible even for non-technical individuals, and I highly recommend it because of its security and compliance capabilities.
Regarding OneLogin's AI capabilities, I consider the security and governance aspects carefully. In discussing OneLogin's AI features, I find that risk-based authentication and anomaly detection operate within OneLogin's existing security framework, ensuring that data stays encrypted and access controls are enforced.
Concerning OneLogin's AI capabilities, I find that the accuracy and reliability of risk detection have been solid for me, as the AI reliably flags unusual logins and access patterns, such as logins from new locations or devices, with an accuracy rate of 85 to 90 percent, as most alerts are legitimate risks and not noise.
I rate this review a 9 out of 10.
Centralized identity has reduced manual access work and now automates secure user lifecycle management
What is our primary use case?
My main use case for OneLogin is that we use this solution as our centralized identity provider to maintain and manage authentication, authorization, and secure access to both cloud and on-premises applications.
What is most valuable?
OneLogin offers several best features such as federated single sign-on, risk-based authentication, automated user provisioning, and the most important, centralized access governance.
I mostly rely on automated user lifecycle management within OneLogin, as it automatically provisions and de-provisions users' accounts, helping our nation improve security and reduce the manual work of the administrator.
OneLogin has positively impacted my organization in several ways, as it has really improved both security and user productivity, allowing employees to securely access multiple applications with the help of single sign-on, which has significantly reduced password-related issues.
The outcomes since adopting OneLogin are very positive, saving our time with a reduced workload by 30 to 40 percent, and user provisioning, including onboarding or off-boarding, has become very fast by 60 to 80 percent.
What needs improvement?
Based on my experience, the only improvement needed for OneLogin is customization of the dashboard; apart from this, all the features are very useful and scalable.
For how long have I used the solution?
I have been working in my current field for almost two years.
What do I think about the stability of the solution?
OneLogin is a very stable solution.
What do I think about the scalability of the solution?
I believe OneLogin is a scalable solution.
How are customer service and support?
The customer support for OneLogin has been very good and responsive; they are knowledgeable and able to troubleshoot effectively.
Which solution did I use previously and why did I switch?
We have not switched from a different solution; we have been using OneLogin since the beginning.
How was the initial setup?
My advice for organizations considering OneLogin is to start with a clear identity and access management strategy before deployment. They should take time to understand their applications, user groups, and access policies, enabling all necessary features including MFA or single sign-on and leveraging automated provisioning and de-provisioning to reduce administrative workload.
What about the implementation team?
We have a partnership with the vendor, and it goes beyond being just a customer.
What was our ROI?
I must say we have seen a great return on investment, with saved time and money, as the automation features have significantly improved our user provisioning and de-provisioning processes.
What's my experience with pricing, setup cost, and licensing?
The pricing, setup cost, and licensing for OneLogin are managed by our management team, not by us.
Which other solutions did I evaluate?
We have not evaluated other options apart from OneLogin.
What other advice do I have?
Regarding OneLogin's AI capabilities, I think its governance and security are supported by strong AI-driven and adaptive security capabilities, centralized identity management, role-based access control, and MFA with detailed auto audit logging. OneLogin provides accurate and reliable AI output, particularly when assessing login risk based on user behavior and device information, effectively identifying potential suspicious authentication attempts.
We do use OneLogin's SmartFactor Authentication for balancing security and usability, and when a user logs in from a trusted device and known location, they are granted seamless access; however, if the login is from an unfamiliar device or location, it is flagged as a potential threat and requires additional authentication.
My impression of the user identity synchronization across directories functionality in OneLogin is very smooth, as users are synchronized from the directory and group across our directory services and connected applications seamlessly.
The impact of integrating phishing-resistant device trust on our authentication processes is that it has strengthened our applications and authentication by ensuring only trusted devices can access them, significantly reducing the risk of credential theft.
My impression of OneLogin's ability to provide a seamless end-user experience for signing in and authenticating to needed applications is very positive, as it offers a smooth, user-friendly authentication experience.
We do use adaptive login flows with Vigilance AI, which have proven very effective in improving our ability to detect and respond to risky authentication attempts. I would rate this review a 9 out of 10.
Centralized access has strengthened authentication with seamless sign-on and smart risk-based MFA
What is our primary use case?
I have been testing OneLogin for about six months. Single sign-on, multi-factor authentication, and user lifecycle management are my main use cases for OneLogin, and these are the things I have been testing with it. I have an application which I wanted to integrate with OneLogin for user lifecycle management. I want to provision my users to it and provide single sign-on to that application. When signing into that application, I also want it to integrate multi-factor authentication with it. These are the basic examples that I tried with OneLogin.
What is most valuable?
Single sign-on works reliably with OneLogin, and SCIM provisioning is also strong in OneLogin. Additionally, directory integrations are solid with OneLogin. OneLogin has more apps to integrate with, providing a great catalog. Smart Factor Authentication is a really worth mentioning feature that I appreciate.
OneLogin's app catalog already has pre-existing connectors, which reduces the normal effort to create a custom one. Regarding Smart Factor Authentication, it reduces multi-factor authentication friction. Multi-factor authentication is only prompted when the risk score is calculated as high, and Smart Factor Authentication decides this. These features are what I appreciate.
Smart Factor Authentication is something and the best feature I have implemented with this. It allows organizations, if implemented on a large scale, to provide better authentication when the risk is high by prompting the user for multi-factor authentication, which reduces entity risk. This is something that has an impact.
When integrating Smart Factor Authentication, in a normal scenario, if a user is not a desk risk, then the usual authentication process will be followed. More multi-factor authentication fatigue will not be asked for that user, which reduces the friction for that user to log in and access the applications. Multi-factor authentication is enabled only when the risk factor of that user is high, then I ask the user about multi-factor authentication so that I can confirm that the user is genuine. With that, I can improve the security layer in any organization that uses OneLogin.
OneLogin's ability to provide a seamless end-user experience for signing in and authenticating to needed applications is pretty good. The experience is very seamless in authenticating with the application using OneLogin.
What needs improvement?
OneLogin's online documentation could be improved with more information and clearer step-by-step instructions, which would help beginners understand these things better. OneLogin's APIs are limited regarding what can be done with the exposed APIs, and any SAML integration or custom SAML integration in any of the identity and access management platforms takes manual effort, which is something OneLogin could improve.
In custom SAML integration, I cannot improve anything. OneLogin could improve some user interface elements which would make users feel more comfortable integrating a custom solution.
Regarding artificial intelligence capabilities in OneLogin, that area still needs to be improved because the artificial intelligence developments in the security industry are not fully developed within OneLogin's capabilities.
More improvements are needed, specifically regarding APIs and user interface, but the remaining features are already good.
For how long have I used the solution?
I have been working in my current field for almost two and a half to three years.
What do I think about the stability of the solution?
OneLogin is stable.
What do I think about the scalability of the solution?
OneLogin's scalability is pretty good. It can work with large-scale users and applications, and in consideration of scalability, I would rate it an eight.
How are customer service and support?
Customer support is also good, but it is slow. If I have an issue, the resolution will be taken and support will be given, but it is not really quick.
Which solution did I use previously and why did I switch?
I did not switch to OneLogin. I have used many solutions previously. Comparatively, OneLogin is also one of the good ones.
How was the initial setup?
I did not actually implement OneLogin. I tested it on my local machine. OneLogin was tested on my local machine, and for the test one, it is on the cloud.
What about the implementation team?
I am using some setup that is given and generated by OneLogin tenant, though I did not go through the deployment setup myself.
What's my experience with pricing, setup cost, and licensing?
I did not go through that phase yet because I did not actually take the license. As far as I know about the license, I have seen them, and it is pretty much acceptable for the solutions and features that OneLogin is providing.
Which other solutions did I evaluate?
I have evaluated other options like Okta, Microsoft Entra ID, and Ping Identity as alternatives.
What other advice do I have?
This is a great feature, and how I balance this is something which is significant. When the integration of phishing-resistant device trust is not secure, I stop the authentication at that point and do not continue or give the session.
OneLogin does not have any human resources-driven identity management. As far as I configured it, I did not use any human resources system to get the users from. I used Active Directory integration. With Active Directory, the directory integrations are smooth. My organization may have human resources applications, but I have not tested them with OneLogin.
Time-saving reduces the payments along with the licensing cost for the applications that I use. I have less knowledge in this area regarding pricing and return on investment, because I would have to implement it to truly understand. Plan my policies and users, groups, and other things accordingly so that I get the best out of it.
OneLogin is a cool product for organizations to use for security. I would rate this review an eight overall.
Single sign-on has simplified identity workflows but customization and advanced features need work
What is our primary use case?
My use cases for OneLogin mainly include SSO integration and user onboarding, user lifecycle management from the source directory, which is Active Directory, and the different sources supported by OneLogin. I use this product for Single Sign-On, user onboarding, and user lifecycle management.
The integration of phishing-resistant device trust with OneLogin impacts my authentication processes positively because OneLogin has its own MFA provider, OneLogin Protect, which provides good service and push notifications to avoid phishing and other issues.
What is most valuable?
OneLogin is user-friendly, and any administrator can handle it easily. It has plenty of applications to integrate for Single Sign-On and supports multiple protocols. It is easier and faster, and it has good service.
The user identity synchronization across directories functionality in OneLogin enables real-time user synchronization operations. It supports real-time synchronization, and as soon as a user is created on the directory side, it reflects within a second. The speed of onboarding is efficient, and it supports load balancing. If one directory connection fails, it supports multiple directory connections.
Integrating with third-party authentication providers through OneLogin is manageable because it has built-in authenticators that are supportive, including hardware token-based authentication. I have also used the built-in MFA configurations for OneLogin.
I have used the adaptive login flows with Vigilance AI, which automatically triggers MFA based on the severity and risk score, making it a good feature provided by OneLogin security policies.
The ability of Vigilance AI to detect risky behavior and adjust authentication factors affects my processes significantly because it tracks multiple factors such as location and IPs in real-time. When a user suddenly relocates to a different location or logs in from a different IP address, it detects it as high risk and triggers the adaptive MFA factor for more security.
HR-driven identity management plays a crucial role in streamlining employee identity handling in my organization since OneLogin has an HRMS system to integrate for user onboarding, such as Workday. It also supports OneLogin developer APIs for customization, allowing for real-time onboarding for any other HRMS systems.
Enforcing MFA at the desktop level, regardless of online or offline status, impacts our security protocols because OneLogin Protect requires an internet connection, while other supported MFA factors, such as Google Authenticator, are TOTP-based and can be handled offline. Thus, both scenarios are usable.
The benefits of customer identity and access management for external clients in OneLogin are evident as it supports user registration flows and user authentication using OIDC flows. This product is customizable for CIAM use cases and supports MFA enrollment through the APIs, allowing for scalability to onboard multiple users efficiently.
OneLogin's SmartFactor Authentication adjusts authentication flows in real time depending on the risk score associated with login attempts, which is completely dependent on Vigilance AI detecting behaviors, device locations, and IP repetition to assess risk scores.
OneLogin's ability to provide a seamless end user experience for signing in and authenticating to needed applications is positive because it features a seamless authentication flow with multiple SSO protocols, such as OIDC and SAML. For different supported protocol applications, it seamlessly redirects to OneLogin for authentication and completes the MFA and authentication processes efficiently, redirecting to the respective application afterward.
What needs improvement?
More customization should be available in OneLogin, such as customizable branding and better API support, including multiple APIs for policy management and more user-friendly APIs.
I would appreciate seeing missing features such as an authorization server included in the future, and functionalities such as IdP redirection routing rules should be added.
For how long have I used the solution?
I have been using OneLogin for more than four years for OneLogin implementation such as SSO and integration, and IIM implementation for the organization.
What do I think about the stability of the solution?
OneLogin is stable.
I have not had any performance issues, crashes, or downtimes with OneLogin. If there is maintenance mode, they notify the administrator by email, and they have the status.onelogin.com portal to check the availability of different services.
What do I think about the scalability of the solution?
I can onboard multiple users to manage user lifecycle management effectively with OneLogin.
I generally use OneLogin for about 50,000 to 60,000 users, but there are some limitations for more than that. The API gets failed sometimes, not responding, and background jobs take too much time to process CSV onboarding, leading to some issues.
How are customer service and support?
OneLogin provides support, and I can raise tickets for any difficulty. They offer efficient support.
Which solution did I use previously and why did I switch?
In my previous experience, I have worked with multiple products such as Okta and Entra ID before switching to OneLogin.
How was the initial setup?
The initial setup process of OneLogin is straightforward. The account sign-up is easier than others, making it good.
What about the implementation team?
I am responsible for deploying OneLogin for different organizations.
My organization is a partner of OneLogin, not just a system integrator or implementer of the product.
What was our ROI?
OneLogin provides measurable benefits and good ROI for beginners and small organizations that want a user-friendly UI, making it a preferable option for that audience.
What's my experience with pricing, setup cost, and licensing?
I am not much aware of the pricing, setup costs, and licensing part of OneLogin, but I know that it tends to be on the lesser side compared to competitors, making it cheaper than others.
Which other solutions did I evaluate?
The key differences between OneLogin and its competitors include functionality balance, where OneLogin offers limited functionalities suitable for day-to-day use, while competitors such as Okta have major features including automation with Okta workflow.
What other advice do I have?
I have not tried integrating with any third-party authenticators, but I have used the built-in authenticators only.
Based on my experience, I would recommend OneLogin for its simplicity and easier administration for small organizations, but I would not recommend it for organizations seeking more feature-oriented and deeper IAM capabilities.
I have over six years of experience in the IAM domain. I overall rate OneLogin as a product at seven out of ten.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Single sign-on has simplified daily vpn access and saves support teams time with secure mfa logins
What is our primary use case?
What is most valuable?
What I appreciate most about OneLogin is definitely SSO, which avoids us having to enter the password, saving time. Since I work in the technical support department, it saves our time in what would otherwise be a time-consuming process where we would avoid entering credentials repeatedly whenever we connect to the required VPN and the tools.
OneLogin provides a good end-user experience for signing in and authenticating to needed applications, which involves time-consuming efforts when users or employees are completely occupied with different tasks. Since we work in IT, we might have multiple passwords to get into different tools. However, when it comes to OneLogin, we avoid this complexity; we just have to remember one tab, and when we note down our user account, it directly asks for OneLogin with multifactor authentication, where we just have to authenticate it to get in successfully.
What needs improvement?
OneLogin is going well currently. As for optimizations in OneLogin, it would be useful to have an option on OneLogin site to remember the user ID. Currently, we do not have that option, and every time we log in, we have to enter our OneLogin username and then get it authenticated. If a 'Remember Me' option were available, we could directly proceed with the authentication instead of having to enter our username every time. This is the one point we have identified.
For how long have I used the solution?
I have been using OneLogin for the past two years.
What do I think about the stability of the solution?
OneLogin is stable. I have been using it for the past two to three years and have not faced any issues with it. It is very stable. For some tools, there are notifications or expiry alerts for the concerned tool or MFA factors, but here we do not have anything as such.
We had outages, but in our team, we have a different department for escalation, so we escalated to the concerned OneLogin support team, and they fixed that issue.
What do I think about the scalability of the solution?
I find OneLogin to be mid-level scalable because I use only the first level of access, so we have not checked the in-depth functionality. I am happy with the level of scalability that OneLogin provides.
How are customer service and support?
My thoughts on the technical support and customer service of OneLogin are that it plays a major role for us to assist users. We use it for the connection of VPN, which allows us to get into remote sessions with users, and it is essential for us to take remote sessions with users and assist them in resolving their issues in a timely manner.
I do not often communicate with the technical support specialists of OneLogin. We just have a mail ID, so if we face any issue, we can send them an email for assistance. Till now, I have not faced any issues with OneLogin; it is running smoothly.
Which solution did I use previously and why did I switch?
From the beginning, we started using OneLogin. First, we were using Microsoft credentials to get into the tools, and later it upgraded to OneLogin.
How was the initial setup?
I found the initial setup of OneLogin to be very easy because it is just about downloading the application and setting it up through scanning the URL on OneLogin portal. The process was very simple, and there was no complex issue I faced during the setup process.
What about the implementation team?
We have a KB article provided by my team, which we use to set it up or configure the applications, reset, etc. I have found the documentation sufficient; all necessary details were very simple and clearly mentioned by our SMEs, so we have not faced any issues with the given articles.
Which other solutions did I evaluate?
I have evaluated other solutions, such as Delivery, which works similar to OneLogin. Delivery DID account exactly works as OneLogin, but it inserts different account profile accounts.
What other advice do I have?
We use OneLogin Okta as an MFA for OneLogin process to adjust authentication flows in real time, depending on the risk score associated with the login attempt.
We do not use the SmartFactor Authentication of OneLogin, as even Okta is an authentication process; it is a multifactor authenticator.
I use Okta and OneLogin simultaneously.
I was not part of the decision-making process.
I am aware of setting up OneLogin for Symantec and Okta setup on the mobile applications, including the basic configuration.
I am not aware of the pricing and licensing of OneLogin.
I have not worked on the user identity synchronization across directories functionality of OneLogin yet.
The integration of phishing-resistant device trust impacts our authentication processes positively because we have a team that verifies everything, and they guide us to configure it. All the configuration and security information is checked by our security team, and based on their updates, we proceed.
Integrating the single sign-on feature with third-party authentication providers is very easy; I have not faced any difficulties. When we try to connect with third parties, I have assisted users in setting up OneLogin accounts for access to particular third-party tools, and there are not many difficulties. We just have to understand the process.
When you understand the product usage, you will not face any issues with it.
I have not used the adaptive login flows with Vigilance AI.
I do not have any insights regarding the role of HR-driven identity management in streamlining employee identity handling in my organization.
In MFA, at the desktop support or customer support level, MFA plays a major role that includes security, compliance, and also a two-way authentication process.
MFA is important for us because it ensures our data is safe, avoiding security issues related to our accounts. If any unauthorized attempt occurs, we receive notifications on our mobile devices, ensuring that it is not possible for others to access our account without our consent. This is a significant advantage of OneLogin or MFA.
In OneLogin, customer identity and access management for external clients is not something I go in-depth with; I assist users only in configuring OneLogin and setting up MFAs. We have two MFAs in OneLogin: Symantec and Okta. My role is to help users set up either of the MFAs to ensure they can access their client VPNs based on requirements successfully without issues.
I rate this review a 9 out of 10.