OneLogin by One Identity vs. Tools4ever UMRA

OneLogin definitely has a range of people it could work for. Everything from individuals who just want a better login process. Small companies who are wanting a way to keep a better count of who has access to what, and large corporations that want to implement a login process that will reduce the number of helpdesk tickets due to forgotten passwords.

Incentivized

It is very well suited for tying multiple systems and services together, allowing for exchanges of information and account management. I'm not sure of instances that it is not well suited since solution was recommended by folks in education. With that being the case it suited our needs quite well.

• The application integration part is easy to deploy.
• The dashboard is good and user-friendly.
• The portal can be accessed from anywhere since we have gone to the cloud-based model.
• It provides a secure solution with certificate management that can restrict access from unauthorized apps.
• The technical support is good.

Incentivized

• Imports students and staff into our Active Directory and email system.
• It manages those same accounts, disabling accounts for folks who have left, and creating "Windows" when accounts should be enabled.
• It interacts with our Microsoft AD and our student management software seamlessly. Once accounts are in our AD environment, our student management and other systems create new email accounts automatically for us.

• Lack of administrative APIs for creating or setting up new connectors: This prevents the automated integration to federations and requires manual setup rather than discovery-based automated setup.
• Customization of the interface: The potential configuration of the interface are still limited at the moment (logo, primary and secondary colors, background). This prevents the usage of the platform as a communication medium or to organize the space in a more standard fashion (for our institution)
• There are some limitations with using the apps provisioning APIs that can lead to some termination or provisioning actions not being completed

Incentivized

• We have been attempting to get single sign on for students, so they have the ability to change their passwords on their own. The documentation of this process is very dated, and often support isn't even aware that their site issues/ references those older documents.
• During the initial buildup of our server Tools4ever UMRA support was a bit hit and miss, but I will say our ongoing support has been very good.
• Some integration tools had to be custom created.

OneLogin is very easy to use. The most complicated part is the user setup and even that is not difficult. After everything is working, using it day to day is trivial. All you have to do is have the application ready on your phone and you can use a single set of login credentials to access all of your tools securely.

Incentivized

There has never been an issue where I have needed to use the OneLogin support so it would be unfair to rate them anything other than a 10 on their ability to provide support. Like I said its a very basic platform that we use it for with no issues.

Incentivized

When our company used to use RSA SecurID, we had physical security devices for the two-factor security pin. If we wanted to remotely access an account from an unsecured network, we had to carry around an extra physical tag. While this was very secure, it was not convenient and make working remotely unappealing. Additionally, we would have to manually enter the security pin to gain access. OneLogin fixes both these concerns and makes Single Sign On security very easy to use.

Incentivized

• The one big benefit would be time-saving. It is a very convenient platform.
• The access outside of the office also allows me to work at home or in my spare time for additional business that needs to be taken care of.

Incentivized

• We save considerable work hours by a multitude of staff having the system manage and generate accounts for us on a daily basis.
• We have some peace of mind knowing accounts for staff and students who leave our district can no longer gain access to our systems because it automatically disables those accounts.
• Because of the way the system interacts with input that is put in, it automatically creates logical positions which dictate different levels, meaning it automatically sets up when staff gain access and lose access depending on the position they are filling.