Safeguard for Privileged Sessions

My main use case for Safeguard by One Identity is to manage a secure privileged account and access a critical system. It helps us to control who can access sensitive resources and monitor privileged sessions, and also reduce the risk of unauthorized access. We mainly improve the security that maintains better control over privileged access across our environment.

A typical example of how I use Safeguard by One Identity to manage privileged accounts or access critical systems is when an administrator needs access to a critical server or application. Instead of giving them permanent privileged credentials, I can use Safeguard to control and manage the access. The user gets the required access for a specific period and the activity can be monitored and recorded. This gives us better control over privileged accounts and also provides an audit trail if we need to review the activity later.

Another important use case I have is managing access from different administrators and making sure that it has only the level of privilege necessary through actual need. Safeguard by One Identity helps us to centralize privileged account management and monitor our activity to maintain proper control over sensitive systems. This is especially useful for compliance and auditing, as we can have a clear record for privileged access and activities.

Safeguard by One Identity has had a positive impact on my organization by giving us better control and visibility over privileged access. It helps to reduce the risk of unauthorized access and makes it easier to monitor administrator activity. It has also improved our auditing process because we have a clear record of privileged sessions and access. Overall, it makes managing sensitive accounts more secure, which benefits our team.

While we have not measured a specific financial saving or percentage improvement, we have seen clear effective benefits. The centralized management and privileged account processes save time for our security team, especially when reviewing access or investigating administrator activities. The session recording and audit trails make compliance reviews easier because we can quickly provide evidence of who accessed which system and what they did. Overall, it has reduced manual efforts and improved our control over privileged access.

The features I find most useful in Safeguard by One Identity are privileged account management, session monitoring and recording, and rules for access control. I also appreciate the ability to manage privileged credentials, centralize and provide control, time-limited access, and auditing and reporting for compliance, as well as the capacity to provide better visibility into access and the actions performed.

The session monitoring and recording feature gives my team better visibility into when administrators access critical systems. If there is any unusual activity or error, we can review the session to understand exactly what happened. It also helps with audits because we have a clear record of privileged activity. In daily operations, it provides us with more control and confidence when managing sensitive systems.

One thing I would highlight is that Safeguard by One Identity is not just about managing privileged passwords. The session monitoring, access control, and auditing features are equally valuable.

I think Safeguard by One Identity could be improved by making the user interface a little simpler and more intuitive, especially for new administrators. Some configurations and advanced features take time to understand, and better reporting customization along with more automation around routine access management would also be useful. Additionally, these changes would make day-to-day management easier while enhancing the core security capabilities.

I think better interaction with other security identification management tools would make the experience smoother and save valuable time with more guidance, workflow, and clear documentation for complex configurations. A more customizable dashboard and various reporting options would save additional time for our security team. Overall, these improvements would make an already useful solution easier to manage.

I have been using Safeguard by One Identity for the last two years.

Safeguard by One Identity is stable. I would say that Safeguard by One Identity is very stable based on my experience. It has been reliable for managing privileged accounts and controlling access to critical systems. We have not faced any major stability or scalability issues, and it performs consistently in our organization.

Customer support has been good overall. The support team is responsive, valuable, knowledgeable, and especially helpful in configuration and troubleshooting. For example, resolving complex issues can take longer if there are ongoing cases, but overall, it has been a positive experience with our support team.

We were using a different access management solution before switching to Safeguard by One Identity. We decided to switch because we needed stronger centralized control, better session monitoring, and more robust privileged account management. Safeguard by One Identity also offers better visibility into historical activity and fits our security requirements more closely, so we felt it was a better solution overall for our environment.

The deployment of Safeguard by One Identity took around two to three weeks in our environment.

The deployment was not very disruptive for privileged users. There were some initial adjustments because they had to follow new access and approval processes, but the impact was minimal. In fact, having controlled access and a clear approval process made privileged access more secure without significantly affecting our day-to-day work.

We have seen a positive return on investment, mainly through time savings and improved efficiency rather than reducing headcount. Safeguard by One Identity has reduced the amount of manual work involved in managing privileged accounts, access approvals, and audit reviews. For example, tasks that previously took several hours of manual coordination can now be handled much faster through centralized control and automation. I don't have specific financial saving figures, but it has reduced administrative efforts and provided strong security control offering good value for us.

Our experience with the pricing and licensing was generally positive. The initial setup costs were reasonable considering the security and access control benefits we are getting. The licensing model was straightforward, although understanding the different options and requirements took some time during the evaluation. Overall, we felt the cost was justified by the value that Safeguard by One Identity provides in managing privileged access security.

We evaluated a few PAM solutions before selecting Safeguard by One Identity. The main options we considered were CyberArk and BeyondTrust. We compared them based on privileged access management, session control, integration capabilities, and overall cost. Safeguard by One Identity offers a good balance of features and fits well in our existing environment, which was the main reason we chose it.

I would recommend Safeguard by One Identity to organizations that need stronger control and visibility for privileged access. My advice would be to clearly identify previous account and access requirements before deploying and to plan the integration properly. Initially configuring it can take some time, but once set up, it significantly improves security, monitoring, and compliance. I would also recommend spending some time training administrators so they can fully utilize the platform.

We use the cloud assistant feature. It provides an extra layer of security for critical privileged passwords and helps us maintain better control over access. At the same time, the approval process remains straightforward and does not add significant delays to day-to-day operations. Overall, it gives us better security without complicating the access process unnecessarily.

We have integrated Safeguard by One Identity with various parts of our business, mainly our identity and access management infrastructure. This helps us centralize privileged access and apply the same security controls across different systems. We also use it for our cloud and server environments.

The integration with our identity and access management provider and cloud server environments was relatively straightforward overall. There was some initial configuration and testing required, especially around connecting with our identity management and cloud environments. Once the integration was set up, day-to-day management became much easier. The documentation and support were helpful during the setup, although some of the more advanced configurations took a little extra effort.

From a security perspective, I think the AI capabilities need a strong control over access, data handling, and monitoring. In my experience, I am comfortable using AI as support for security operations, but I would still prefer to keep human review for important privileged access decisions. Overall, I would say the governance and security approach is good, provided AI security is properly configured and monitored.

I would say the AI output is generally accurate and useful for supporting security operations. It can help identify patterns and provide useful insights, but I still validate results before making important security or privileged decisions. I regard AI as a useful support tool rather than something to rely on completely without human review.

Overall, I have had a positive experience with Safeguard by One Identity. The biggest benefit for us is strong control over privileged access, along with session monitoring and auditing capabilities. It has helped improve security and streamline privileged account management. There are still areas that could improve, such as the user interface and advanced configurations, but I find the overall solution relevant and effective. I would rate this review a 9 out of 10.

I have been using Safeguard by One Identity for a couple of years now. My main use case for Safeguard by One Identity is managing and securing privileged access across the organization, which includes password vaulting, session management, and controlling access to critical systems.

A specific example of how I use it day-to-day involves session monitoring, recording, audits, and password rotation, as all those things help manage and secure access.

Safeguard by One Identity has positively impacted my organization as it automated the solution, making the process smoother, cheaper, and reliable. I believe it has reduced the time spent on the process by 20%, and it also reduced costs.

The best features Safeguard by One Identity offers include privileged access, privileged password management, session monitoring and recording, alerting feature, password vaulting, session recording, and automated access workflow.

The automated access workflow saves time, makes the process automated, and reduces risk and defects for my team day-to-day.

Improving usability and simplifying configuration would be beneficial to enhance Safeguard by One Identity.

I have been working in my current field for over 15 years.

Safeguard by One Identity is a stable solution overall.

Safeguard by One Identity's scalability is strong as it scales well in the enterprise environment, allowing systems to scale beyond the limit of one application, with the ability to add multiple nodes for password management.

The customer support for Safeguard by One Identity is quite positive, offering good documentation and reliable response times with consistent support. I would rate the customer support an eight on a scale of one to ten.

I have not previously used a different solution.

The deployment of the solution took about eight weeks. The deployment was a smooth process with a short learning curve for our privileged users. Very small to moderate training was required to start using the solution as a short walkthrough and quick documentation check was enough to understand and begin using it.

We have not integrated Safeguard by One Identity with any other parts of our business yet, but it is something we would be looking at in the future.

I have seen a return on investment as it saved approximately 25% of the manual effort that was required before and also saved about 15 to 20% of the cost of implementation.

My experience with pricing, setup cost, and licensing is mostly positive as I find it quite cost-effective and it has a good licensing structure.

Before choosing Safeguard by One Identity, I evaluated other options such as CyberArk and BeyondTrust, but Safeguard by One Identity clearly stands out among them.

My advice for others looking into using Safeguard by One Identity is to have a planned plan before implementation, identify what your systems are and the privileged accounts, and prioritize those needs, along with getting all the approvals for session policies, password rotation, approval workflows, and session monitoring.

I would rate this review a nine on a scale of one to ten.

My main use case for Safeguard by One Identity involves the management of domain privileged accounts, therefore integrations with Active Directory, specifically for applying these to Windows and Linux servers, where RDP and SSH sessions are monitored, along with password management via the SPP module of Safeguard. Recordings are carried out through SPS, and so far it has never happened that we had to implement restrictive policies that customized the standard connection policy.

In addition, we have also implemented SPS with the SIEM for sending reports and monitoring functionalities, as well as security alerts and notifications. We have also implemented access via OAuth 2.0 for SPP access and, on some occasions, have implemented web applications through the insertion of an RDP application on a server.

A specific example of a project where Safeguard by One Identity played a central role is when there was no management of privileged accounts and access occurred without monitoring, resulting in direct access to critical systems. The customer requested the implementation of Safeguard by One Identity to resolve this situation, so we implemented both modules, SPP and SPS, importing the entire pool of privileged accounts needing maintenance, which included password management.

We also included all the most critical targets requiring SPS to record all activities performed on the machine. We added all the users needing access to these targets with these accounts and configured the various entitlements, allowing for much cleaner and more controlled governance of privileged accounts.

So far, all cases have been fairly simple and have been fully covered. There was one instance where a customer needed to integrate the SIEM not via the standard connection provided by One Identity but requested integration via APIs, which are not yet currently available. On the other hand, we encountered some critical situations regarding web applications, which were handled by customizing the script using AutoIt. It would be beneficial if One Identity implemented web application management more similarly to how CyberArk does.

In my experience, the best features offered by Safeguard by One Identity are quite basic for a PAM product, though there are certainly aspects that can be improved. For example, making RDP application integration a more integral part of the product would help, as it currently requires fairly heavy customizations done externally to Safeguard. Overall, all the basic functionalities are there.

The main positive aspect of Safeguard by One Identity is that privileged account management is delegated to SPP, making it much more difficult for credential thefts to succeed. If they did occur, SPP would neutralize all the efforts made to retrieve the passwords within a day since passwords are rotated daily, for example. Moreover, undesired access is reduced to a minimum because it would be reported immediately, allowing for the reconstruction of events thanks to the recordings made by SPS.

Safeguard by One Identity has had a positive impact on my organization and my clients' projects, as several customers ended up satisfied after implementation and continued to use the product. There have never been any complaints, which indicates that the customer's needs were effectively addressed.

Based on my experience, Safeguard by One Identity could be improved by having stronger integration, perhaps starting with the ability to add API connections for the SIEM. It would also be beneficial to have a stronger implementation of RDP applications for web applications. Adding more supported platforms or updating the list could be helpful.

Regarding features and usability, we had a customer who needed to implement AS/400 systems, which were not supported. We attempted to establish privileged connections, but it was not possible, even after requesting support from One Identity, who were unable to solve the situation. It might be appropriate to either remove AS/400 from the supported platforms or address this issue.

I have been using Safeguard by One Identity since 2021, starting with theoretical courses provided by One Identity, during which I spent three months studying the product. Starting from February 2022, I began implementing the solutions for various customers who needed a PAM solution.

Based on my experience, Safeguard by One Identity is quite stable. We have never encountered issues.

Safeguard by One Identity excels in terms of scalability. From that standpoint, it is very scalable and quite easy to increase the numbers, always within license constraints. No issues were encountered during expansion of Safeguard by One Identity. If any slowdowns arose, we addressed them by increasing the appliance's resources.

Unfortunately, my experience with Safeguard by One Identity's customer support is not very positive. They tend to respond slowly, generally do not find solutions effectively, and it is challenging to request calls that could resolve issues more quickly. From this perspective, support could improve significantly. Customer support is not very active, not very fast, nor efficient, which indicates they should work on enhancing efficiency.

Before choosing Safeguard by One Identity, I had used CyberArk, which I must say is a bit more complete and more user-oriented, especially concerning support.

I implemented Safeguard by One Identity in both ways. There are customers who wanted an on-demand solution, which we integrated without any issues, and then there are customers who preferred on-premise installations, where we downloaded the required ISOs, installed them on virtual machines, configured the appliances, and set up the clusters independently.

Generally, it takes about five to six months to achieve full operability with all systems active, though this timeframe is mainly due to delays on the customer side.

In terms of the deployment's effect on privileged users, the transition was quite smooth. No one complained about the change, as the management process did not change much. Instead of going directly through SSH and RDP clients, they simply had to use the interface with the connection package already prepared.

The amount of training needed to start using Safeguard by One Identity amounts to a couple of weeks for both those who manage it and end users.

The company I work for is a One Identity partner.

I do not know if a return on investment has been obtained with Safeguard by One Identity, as I only deal with implementation. I imagine customers have seen improvements in security, but I am unaware of cost savings.

Before selecting Safeguard by One Identity, we typically evaluate CyberArk or Delinea as the main solutions to consider. This was the first PAM solution used by these customers, as it was the first option and the initial solution.

Safeguard by One Identity has had a positive impact on my organization and my clients' projects, as several customers ended up satisfied after implementation and continued to use the product. There have never been any complaints, which indicates that the customer's needs were effectively addressed.

My advice to others considering using Safeguard by One Identity is that if you are looking for a product that handles the basics at a fairly low price, then it is appropriate for your needs. However, if you are looking for a product that allows for a lot of customization, perhaps it is not the most suitable choice. I would rate this product a seven out of ten.