Safeguard for Privileged Passwords

I have been working with Safeguard by One Identity  platform for the last one year, which is the PAM solution. We are using it as a Privileged Access Management  solution as a point of security, as the first point of security towards managing PAM and PIM . We use it for securely managing privileged credentials, controlling administration access, and monitoring privileged sessions. We also monitor the vaults for compliance of the logs, which have been forwarded to our SIEM  platform for further security controls and monitoring.

We use it for our privileged sessions, which has been acting as a centralized password vaulting and automated credential rotation platform. The automated credential rotation feature is the best feature I have used, and I have never seen it in different products as of now.

The onboarding was seamless. We have onboarded approximately 500 to 1000 users to the PIM . Certain users have certain accesses that need to be limited over specific time frames and as per their administrative requirements. This has been managed through that platform, and we have not observed any kind of issues.

Secure Remote  Access feature is for our hybrid and remote employees, safeguarding our environment from external threat actors and preventing attackers from trying to access our network by using this Remote  Access Privileged Access feature.

The integration was quite easy. We have FortiGate and FortiClient  VPN in place, and it has been a seamless integration with this platform, enabling us to get access to the Remote Access  feature over OneLogin. We are now managing and getting access to our critical systems by using the jump host available with this feature.

This integration has improved our enhanced security. It has been acting as a centralized vault which reduces our risk of credential theft, misuse of credentials, and prevents compromised hosts and privileged accesses to our critical hosts through this integration.

I would rate this at eight.

The features I find most valuable are the password vaulting and the auto-rotation features like password security complexities and the OWASP Top 10 vulnerabilities. It is suggested to rotate the password into certain time frames which are recommended by the security team, and this has been performed by using this application. We have been monitoring session monitoring via the SIEM  tool. These logs have been forwarded there. MFA integration is also available, which has been helped by One Identity. We have managed OneLogin and One Identity implementations into our organization, and these real-time privilege alerts and vault alerts are being monitored. These are quite valuable things for us.

The features I liked the most about Safeguard by One Identity  are the password vaulting and the automatic password rotation feature. MFA integration with the OneLogin platform was seamless as the organization is the same for them. Detailed audit logs are also available while clearing our audits. While troubleshooting, we need those audit logs, which have been forwarded over the SIEM, with reports sent to the admin team to get those reviewed if there are any certain changes made by the team which are not known to them.

Privileged users and systems are getting protected by using these solutions, and all privileged users access this portal with their credentials quite easily. It has been eliminating their overhead to manage this manually or access manually. Admin overhead gets reduced due to it, and the overall efforts are reduced.

There were no negatives observed. All observations were positives like the self-service access granted to users. Users can request privileged access to the portal, reducing dependencies on administration for every request. Built-in approval workflows are also available, so all these efforts have been reduced from manual ones.

I would like to highlight a couple of points, which are UI modernization. In the new world of AI, we are thinking about how AI can be helpful for detection capabilities in PAM solutions and easier reporting flexibility. There should be a chatbot feature in Safeguard by One Identity so we can easily find out the SOPs and documentations. By using chatbots, we can directly ask queries to them, and they can respond with the solution or steps.

The chatbot is the only suggestion I have as of now.

I have not observed any stability issues.

As of now, we have implemented it for more than 250 users, and there have been no issues observed. It has been scalable.

The setup was quite simple and easy for us, with help from the support team, which has been quite helpful for us in implementing this feature.

The vendor support was with us during the implementation phase. They helped us with the initial implementation and all of the documentations.

For end users, we have rolled out SOPs on how to manage and access the tools which are in the environment and critical servers. The SOPs have been built for that. For management, training sessions have been introduced by this vendor like OneLogin.

The team was there to support us in terms of integrations.

This is our first PAM solution.

The setup was quite simple and easy for us, and getting help from the support team, which has been quite helpful for us in implementing this feature.

Regarding the setup, it was quite easy and intuitive for us to get to know how we can onboard it. All the SOPs and the documentations are available on their portal, so it was easy.

The vendor support was with us during the implementation phase. They helped us with the initial implementation and all of the documentations.

This has been integrated with our SIEM platform, which is the central monitoring platform for the SOC environment for cybersecurity. The team has built certain use cases related to the threat environment for abnormality detection, unusual logins, and false logins. Such use cases have been built into the SIEM platform. This is the external integration.

The integration into the SIEM platform was supported by the syslog method, which has forwarded these logs. It was supported so that all of these details have been transferred to the SIEM easily, and all the fields and logs have been mapped as per the supported mechanism.

It took approximately three months to go into production.

I was not part of the admin team evaluating alternate solutions, so I am unable to answer this question. I am the user of this product as of the date.

Regarding the usability and functionality, the UI is quite intuitive and simple to handle for new users. Whenever new users are getting access to it, with the help of the documentations which are cleaner in format and easy to access, all of the things are in place with the help of the initial dashboards. We get to know what all of the functionalities are there.

While considering Safeguard by One Identity, customers can do the POCs if they want to, but however, in terms of feature-wise, it is a good product to have. It has all of the features required for a PAM solution. I rate this solution at eight out of ten.

My main use case for Safeguard by One Identity  is privileged identity access management, session monitoring, and password management.

In my day-to-day work, we onboard the most powerful accounts and privileged accounts across the applications, platforms, and network elements into the PAM system, which is Safeguard by One Identity , and it has the inbuilt capability that supports session management, password management, and analytics.

Safeguard by One Identity offers simple web GUI, easy onboarding and management, and less complex architecture as its best features.

The web GUI and easy onboarding help my team because even less trained people can easily navigate it, and trained individuals can start using the tool easily without requiring any development or additional skills; it is easy to navigate and work on.

Safeguard by One Identity has positively impacted my organization, as in the past, we were using TPAM , the older product from the same vendor of the Fab solution, but this is a new version, a new generation tool which supports most of the new version products and new protocols, and it works well.

Safeguard by One Identity has been built most of the time to support the most recent products and versions in the environment, but sometimes in real-time scenarios, companies might be running with legacy systems or applications; during that time, you might need to build a custom solution that is not flexible enough, and I think additional efforts are needed to build solutions to support legacy systems.

I chose a rating of seven because I believe the product still has improvements that need to be made in terms of supportability for new applications, such as SaaS solutions, and it does not have any native method of managing cloud-based applications, which I believe is an area to improve.

Regarding Safeguard by One Identity's AI capabilities, I do not believe it has really good governance and security; I think it probably needs to be upgraded to incorporate all AI agents or AI-specific security-related features which have not been covered in the current version.

I have been working in my current field for more than fifteen years.

I have been using Safeguard by One Identity for more than five years.

In terms of Safeguard by One Identity's reliability, I believe it is fine, and we do not see any major problems with it.

Since switching to this newer version, it improved compliance, the onboarding time reduced significantly, and it supports API calls and automation processes, so overall onboarding time has been significantly reduced.

I would advise others looking into using Safeguard by One Identity to consider it if they are looking for a budget-friendly option, easy installation, and quick setup; however, if companies require many custom solutions and support for legacy environments, it might not be a good fit, and they may need to explore other options. If any environment is trying to work with newer tools or AI-specific protections, this tool is probably not evolved to that level, so I believe you need to assess your requirements first. I would rate this product a 7.5 out of 10.

When a new system administrator needs to access a production server, instead of sharing the administrator password, they request access through Safeguard by One Identity , which securely provides the credentials or starts a monitored session, logging all activity. This has helped our team improve security, simplify audits, and ensure privileged passwords are never shared directly.

Safeguard by One Identity has become an important part of our privileged access workflow by enforcing security policies, reducing the risk of unauthorized access, and maintaining a compliance audit trail . It has made managing privileged accounts more secure and efficient for our IT team.

Before Safeguard by One Identity, privileged passwords were managed manually, which increased the risk of passwords being shared. Now, administrators access systems through the password vault, and passwords are rotated automatically, reducing manual effort, strengthening security, and making audits much easier since all privileged access and user sessions are logged and can be reviewed whenever needed.

We do not have exact metrics, but we have definitely seen an improvement since using Safeguard by One Identity, as password management is much faster without the need for administrators to manually share or update privileged credentials. Security has improved through automated password rotation and controlled access, while audit preparation takes much less time because all privileged sessions and access records are available in one place.

Safeguard by One Identity's password vaulting feature keeps privileged passwords in a secure, encrypted vault, so administrators do not need to know or share the actual credentials, allowing team members to request access when needed and automatically rotate the password after use. This reduces the risk of password leaks, improves automation, and saves time since we do not have to manually manage privileged credentials.

Another feature I appreciate from Safeguard by One Identity is the session recording and auditing, which provides a complete record of privileged activity, very helpful for troubleshooting, security investigations, and compliance audits. Safeguard by One Identity's centralized management interface also makes it easier to manage privileged accounts across different systems from a single place.

Another improvement would be having more detailed documentation and step-by-step deployment guides, particularly for complex environments. Better performance on large-scale deployments, enhanced search and filtering in audit logs, and more flexible notification and approval workflows would also improve the overall experience, making administration simpler and reducing the learning curve.

This rating of 9 out of 10 reflects that it offers strong privileged access management with features such as secure password vaulting, session monitoring, and auditing. Safeguard by One Identity is not rated a 10 because the initial deployment can be complex, and the user interface and reporting could be more intuitive.

From what I have seen, Safeguard by One Identity's governance and security are strong overall, with role-based access control and detailed audit trails. If the AI features follow the same security model, I expect them to provide a good level of governance and protection.

We have not used the AI capabilities enough to fairly evaluate their accuracy or reliability, so I cannot comment from first-hand experience, especially since most of our users focus on privileged access management, password vaulting, and session monitoring rather than AI features.

Overall feedback from users regarding Safeguard by One Identity's usability and functionality has been positive, with users appreciating that privileged access is centralized and secure, as well as not having to manage or remember privileged passwords. Administrators find Safeguard by One Identity's audit and session recording features especially useful. Safeguard by One Identity's main feedback has been that the interface can take some time to learn and that some administrative tasks could be more intuitive.

I advise others looking into using Safeguard by One Identity to spend time planning the deployment and defining privileged access policies before implementation. Involving the security and infrastructure teams early to start with a small pilot before rolling it out across the organization is important. Providing basic training to administrators and end-users is also essential to ensure smooth adoption. When configured properly, Safeguard by One Identity is a strong solution for improving privileged access security and simplifying compliance.

Our main use case for One Identity Safeguard  is privileged access management, where we need to secure control and monitor highly sensitive privileged accounts.

We use One Identity Safeguard  for password storage and management for all privileged accounts, including admin accounts and service accounts. We also use it for Just-in-Time privileged access to provide the least privilege access possible for users.

One Identity Safeguard offers excellent features such as smart session auditing and forensics, transparent session proxy, password injection with no exposure, and real-time command and video blocking.

We rely most on smart session logging, smart session auditing, and forensics, which are valuable for our day-to-day tasks, along with password injection, which helps us securely pull passwords and automatically inject them into sessions, enhancing our security and aiding in auditing.

Regarding session proxy, One Identity Safeguard can sit on the network similar to a router, remaining completely transparent to both the user and the destination server while silently managing and injecting passwords and recording sessions in the background.

One Identity Safeguard has positively impacted our organization by contributing to a significant drop in compliance and audit overhead, aiding in the preparation of security audits that were previously chaotic, making the process much simpler now, and improving operational efficiency and admin satisfaction.

One Identity Safeguard could be improved by providing a unified management experience, as historically it has been split into logical units, and it would be beneficial if they could provide out-of-the-box reports and visualization, addressing the high resource overhead for privileged analytics.

Regarding One Identity Safeguard's AI capabilities, I believe they are still in the transformation phase, particularly with session monitoring, and once implemented fully, the advanced role mining and peer group analysis provided will help us improve further.

I cannot provide feedback on the accuracy and reliability of One Identity Safeguard's AI capabilities because we are not currently using the AI version; we may be deploying it next year.

I have been using One Identity Safeguard for more than six years.

In my experience, One Identity Safeguard is stable.

One Identity Safeguard's scalability works effectively in our large organization, as it successfully handles everything we need.

The customer support for One Identity Safeguard is very good, providing timely responses based on the SLA, with high-priority tickets receiving responses within an hour. I would rate the customer support around eight.

Before switching to One Identity Safeguard, we were using Thycotic Server, which was not as user-friendly, leading us to switch to One Identity Safeguard.

The deployment of One Identity Safeguard was very quick, taking only one or two days.

The deployment affected our privileged users smoothly, as we transitioned from another solution where users adapted quickly due to One Identity Safeguard being user-friendly.

We provided training for users that took approximately one week, plus one month of training for administrators, which was very helpful for getting everyone on board.

Before choosing One Identity Safeguard, we evaluated CyberArk, but it was more costly, which influenced our decision to consider One Identity Safeguard due to its lower cost.

My advice for others considering One Identity Safeguard is to define the architecture early, as it will be helpful, and to consider using One Identity Manager  alongside it, as they can integrate effectively. I would rate this solution an eight overall.

One Identity Safeguard  is primarily utilized in my organization for managing the company's privileged accounts.

I use One Identity Safeguard  to record and audit privileged sessions in order to meet regulatory requirements.

The best features that One Identity Safeguard offers is the centralized approach to managing privileged accounts. Specifically, the centralized approach has helped us significantly reduce the time spent on managing privileged account passwords.

One Identity Safeguard has positively impacted my organization. After implementation, we were able to reduce the time spent on security incidents related to compromised passwords. Before using One Identity Safeguard, two administrators spent approximately twenty hours a month on manual credential management, and after implementation, this time was reduced to about five hours a month, which represented a savings of thirty hours per month.

I think the aspects that could be improved in One Identity Safeguard include the learning curve, since the installation is complex and expert guidance is required in the first steps.

The upgrade process could also be simpler.

I have been using One Identity Safeguard for one year.

One Identity Safeguard is a stable solution.

I perceive the scalability of One Identity Safeguard as good, as it adapts well to the growth of my organization.

We have been able to continue adding more credentials and more users to the tool.

My experience with One Identity Safeguard's customer support has been positive, as the team usually responds within reasonable time frames and shows a good level of technical knowledge.

I would rate customer support eight out of ten.

Before implementing One Identity Safeguard, we did not have another tool.

One Identity Safeguard is implemented on a local server in my organization.

The implementation of One Identity Safeguard took about eight months in our organization.

The implementation affected privileged users with a learning curve, since they had to start using the tool, but it was resolved over time.

One month of training and another month of support was needed for both administrators and end users to use the tool efficiently.

I have seen a return on investment with the platform, having experienced a reduction of around thirty working hours per month for privileged credential management.

My experience with the licensing, installation, and pricing of One Identity Safeguard was within expectations since that was taken into account when evaluating the tool.

Users have told us that the interface is intuitive, that the team becomes familiar with the platform, and the integration with Windows environments is quite complete.

For the moment, we have not integrated the platform with other areas of our business, as we are still working on that.

I would advise other companies that are considering implementing One Identity Safeguard to thoroughly review their internal processes so they can adapt them to the tool.

I have given this review an overall rating of nine.