One Identity Identity Manager

What is One Identity Identity Manager?

One Identity Identity Manager is an IGA (Identity Governance and Administration) platform - a system that manages identities in an organization: who has access to what, why, and whether they should still have it.

Main functions:

• Provisioning - automatic account creation in systems (AD, SAP, Oracle, cloud)
• Access Certification - periodic access reviews (“Does John still need access to SAP?”)
• RBAC - business roles instead of individual permissions
• Self-service - users request access themselves

What problem does it solve?

flowchart LR
    subgraph Without IGA
        A[New employee] --> B[Ticket to IT]
        B --> C[Manual account creation]
        C --> D[Days of waiting]
    end

    subgraph With Identity Manager
        E[New employee in HR] --> F[Auto-provisioning]
        F --> G[Accounts in AD, SAP, O365]
        G --> H[Ready in minutes]
    end

    style A fill:#dc2626,stroke:#b91c1c,color:#fff
    style B fill:#dc2626,stroke:#b91c1c,color:#fff
    style C fill:#dc2626,stroke:#b91c1c,color:#fff
    style D fill:#dc2626,stroke:#b91c1c,color:#fff
    style E fill:#22c55e,stroke:#16a34a,color:#fff
    style F fill:#22c55e,stroke:#16a34a,color:#fff
    style G fill:#22c55e,stroke:#16a34a,color:#fff
    style H fill:#22c55e,stroke:#16a34a,color:#fff

Typical problems:

• Onboarding takes weeks (waiting for accounts)
• Incomplete offboarding (former employee still has access)
• Audit: “Who has access to system X?” - no answer
• Orphaned accounts - accounts without owner
• Excessive permissions - people have more access than needed

How does Identity Manager work?

flowchart TD
    A[HR System] --> B[Identity Manager]
    B --> C{Event?}
    C -->|New employee| D[Provisioning]
    C -->|Department change| E[Access update]
    C -->|Departure| F[Deprovisioning]

    D --> G[AD / Azure AD]
    D --> H[SAP]
    D --> I[Office 365]
    D --> J[Other systems]

    E --> G
    F --> G

    style A fill:#6366f1,stroke:#4f46e5,color:#fff
    style B fill:#8b5cf6,stroke:#7c3aed,color:#fff
    style C fill:#f59e0b,stroke:#d97706,color:#fff
    style D fill:#22c55e,stroke:#16a34a,color:#fff
    style E fill:#22c55e,stroke:#16a34a,color:#fff
    style F fill:#dc2626,stroke:#b91c1c,color:#fff

Main features

Integrations (Connectors)

Identity Manager connects to target systems through connectors:

For whom?

Identity Manager vs competition

Aspect	One Identity IM	SailPoint IdentityNow	Okta IGA	Microsoft Entra
Deployment	On-prem + SaaS	SaaS	SaaS	Cloud
SAP integration	Native	Connector	Connector	Limited
Complexity	Medium-high	Medium	Low	Low
Customization	High	Medium	Low	Low
Price	Competitive	Premium	Premium	Included in M365

One Identity advantage:

• Strong SAP integration
• Customization flexibility
• On-prem option for regulated industries
• Competitive price vs SailPoint

Specifications

Parameter	Value
Deployment	On-premises, SaaS (One Identity Manager On Demand)
Database	SQL Server
Connectors	100+ out-of-box
API	REST, SOAP, SCIM
Authentication	AD, SAML, OAuth, MFA
Compliance	SOX, GDPR, HIPAA, PCI DSS

FAQ

What’s the difference between IGA and IAM? IAM = access at login time. IGA = governance - who should have access, why, recertification.

How long does deployment take? Basic: 3-6 months. Full with multiple systems: 6-12 months.

Can I start with one system? Yes. Typically you start with AD + HR, then add more systems.

What about SaaS applications? Identity Manager supports cloud apps through SCIM and dedicated connectors.

Does it require programming? 80% configuration. Advanced workflow customization may require .NET.

How does access certification work? Manager gets list of employees and their permissions. Approves or rejects. Unapproved are automatically revoked.

Does nFlo deploy Identity Manager? Yes. Deployments, connector configuration, migrations from other IGA, HR integrations.