Fischer Identity as a Service vs. OneLogin by One Identity

Fischer is well suited for the use case scenarios where an institution has not previously used any identity management and needs to quickly provide services to meet regulatory or other deadlines. It also works well when you can implement in smaller batches of user accounts and grow over time. We have found it less appropriate for cases where we have needed to set up on-off temporary or special access. Fischer has worked with us on out-of-band provisioning but we had to pay for extra Fischer professional services to make that work.

Incentivized

OneLogin is very convenient. Users can register their own iPhone or Android to act as their authorization device, meaning they will likely always have access to the OneLogin security code. The OneLogin application then allows the users to hit a button instead of inputting the security code to validate their two-factor authorization. OneLogin is great for businesses who need to enforce secure access into their various systems and tools. By consolidating the security into a single login with security device two-factor authorization, it makes it safe and easy to manage.

Incentivized

• Integration with ERP
• Integration with Account Directory
• Integration with Office 365
• Password Reset Portal

Incentivized

• Connects with a lot of different vendors, tools, and sites. It is also customizable to where you can add almost any site you are logging into. This makes it especially useful for team members who may use a tool that other team members within the company do not use.
• It works. I've used a few keychain apps that work for a little while, or never work, and this app works 99.99% of the time. Only on one experience have I experienced issue access sites and that was due to user error.
• It's easy to update passwords and usernames within the app. It allows password resets to be an easy process and lowers the time in updating items everywhere.

Incentivized

• Reducing the frequency (twice a month) of scheduled outages. But I believe they are making progress toward developing a more robust cloud infrastructure that will eliminate the need for such frequent downtimes.
• There are some less than intuitive administration tools, which could be improved. Fisher is always willing to help us when we don't understand the proper way to configure using the tools.
• I would like a streamlined way to move changes from our test environment into our production (live) environment instead of having to duplicate the effort.

Incentivized

• Lack of administrative APIs for creating or setting up new connectors: This prevents the automated integration to federations and requires manual setup rather than discovery-based automated setup.
• Customization of the interface: The potential configuration of the interface are still limited at the moment (logo, primary and secondary colors, background). This prevents the usage of the platform as a communication medium or to organize the space in a more standard fashion (for our institution)
• There are some limitations with using the apps provisioning APIs that can lead to some termination or provisioning actions not being completed

Incentivized

OneLogin is very easy to use. The most complicated part is the user setup and even that is not difficult. After everything is working, using it day to day is trivial. All you have to do is have the application ready on your phone and you can use a single set of login credentials to access all of your tools securely.

Incentivized

There has never been an issue where I have needed to use the OneLogin support so it would be unfair to rate them anything other than a 10 on their ability to provide support. Like I said its a very basic platform that we use it for with no issues.

Incentivized

It does deliver as advertised, provided you do your homework and understand the expected outcome before going live. Poor planning can turn the project into a nightmare. It can save the company a good deal of man hours and money by bringing about identity management automation, a self-service portal, and customizable email notifications for all of the identity owners and other stakeholders. For example, you can inform your HR team upon successful account creation and disablement. You can proactively reach out to users informing them about their account extirpation status, etc.

Incentivized

OneLogin has a lesser cost as compared to other solutions. It also has a successful POC, partner expertise, integration with in-house and cloud-based apps, and provides restriction of access from unauthorized devices. It is a secure solution with industry-standard encryption, a good dashboard, and a cloud-based solution. In my opinion, there is not too much effort involved in the integration and it provides good OEM support.

Incentivized

• Fischer has had a positive impact by providing self-serve identity and password management tools that our constituents can use at their convience, not tied to our operational hours.
• Fisher Identity as a Service has been a significant cost, but it is anticipated that it saves our students significant time and effort that they can better dedicate to their academic pursuits.
• Negative initial reaction--as this was a new way of doing things, there was a period of confusion among our college constituent that required additional communication and instruction

Incentivized

• The one big benefit would be time-saving. It is a very convenient platform.
• The access outside of the office also allows me to work at home or in my spare time for additional business that needs to be taken care of.

Incentivized