Overview
OneLogin is a workforce identity-as-a-service platform now owned by One Identity (a Quest Software business). The product provides single sign-on, multi-factor authentication, user provisioning, and a SmartFactor risk engine for adaptive authentication. OneLogin is positioned as a more economical alternative to Okta and Entra ID, with simpler per-user pricing and a faster path to production for mid-market estates.
Following its 2021 acquisition by One Identity, OneLogin has been integrated into the broader One Identity portfolio that includes Safeguard (PAM), Active Roles (AD management), and Identity Manager (IGA). The combined offering targets customers who want a single vendor across SSO, PAM, and identity governance, particularly in mid-market organisations that find SailPoint and Okta over-specified for their needs. OneLogin's SmartFactor adaptive authentication and Trusted Experience Platform for CIAM round out the workforce offering.
Key Features
- Single sign-on with 6,000+ SaaS application catalogue
- SmartFactor adaptive MFA with risk-based step-up
- OneLogin Protect mobile authenticator with push notifications
- SCIM-based user provisioning and de-provisioning
- Cloud directory with AD and LDAP synchronisation
- Desktop SSO for Windows and macOS
- Mappings and rules engine for attribute-based access control
- OneLogin Workflows for identity automation
- Trusted Experience Platform for customer identity scenarios
- Compliance reporting for SOX, HIPAA, PCI
- REST APIs and pre-built SDKs
- Integration with One Identity Safeguard for privileged access
Pricing
| Edition | Model | Typical Cost |
|---|---|---|
| Advanced (SSO only) | Per user / month | $4 |
| Professional | Per user / month | $8 |
| Unlimited | Per user / month | $8–12+ (depending on feature selection) |
| Standalone SSO | Per user / month | $2 |
Pricing verified from onelogin.com May 2026. Annual contracts standard; enterprise buyers with 500+ users typically negotiate 20–40% below list with 2–3 year terms.
Strengths
- Lower per-user list pricing than Okta or Entra ID P1
- Faster initial deployment than enterprise-grade IAM platforms
- SmartFactor adaptive MFA is competent and easy to configure
- Bundled with One Identity Safeguard for cost-effective PAM coverage
- Workflows engine is sufficient for common identity automation needs
Limitations
- Product investment has slowed since the One Identity acquisition; release cadence is lower than Okta or Entra
- App integration catalogue, while sizeable, lags Okta's in completeness for newer SaaS apps
- Identity governance features are basic compared to SailPoint or Saviynt
- Customer identity (Trusted Experience Platform) is less developed than Auth0
- Public roadmap and customer communication have been criticised by analysts since 2023