One Identity – Identity and Access Management

One Identity Fabric is a modern architectural framework that brings together different identity and access management solutions in a single, integrated platform. It offers full visibility, centralized management and stronger security for IAM environments, whether on-premises, hybrid or cloud.

Key Advantages

• Unified Platform – combines Identity Governance, Privileged Access Management, Access Management, and Active Directory (AD) and Entra ID protection and management, making identity and access management simple.
• Intelligent Orchestration – automates processes across IAM solutions, reducing human error and speeding up work.
• Built-In AI – uses artificial intelligence for risk analysis and to automate tasks such as anomaly detection and privileged access management.
• Improved Security – minimizes the risk of privilege escalation attacks and fully protects critical data.

One Identity Fabric integrates easily with Azure AD, Active Directory and other IAM solutions, enabling access management in hybrid environments with a unified approach for all users and systems.

syslog-ng is a powerful, flexible log management system created by Balázs Scheidler in 1998 and developed today by One Identity.

What Is syslog-ng?

• Centralized Log Management Platform – collects, parses and structures log messages from any source (servers, applications, network devices) and routes them to different destinations: files, databases, SIEM systems
• Flexible Formats and Protocols – supports syslog (RFC 3164/5424), JSON, journald, TCP, TLS and other standards.
• Big Data and SIEM Integration – can route logs to Hadoop, Elasticsearch, MongoDB, Kafka and SIEM platforms, improving their efficiency by optimizing incoming data.
• High Performance – processes hundreds of thousands of messages per second, suitable for large enterprise environments.
• Security and Reliability – encrypted data transfer, local buffering and mechanisms to prevent log loss.

Privileged Access Management (PAM) is a key information security mechanism that protects identities with elevated rights and capabilities beyond those of standard users. Privileged accounts need special attention, as they pose a serious risk to corporate security. With One Identity Safeguard, organizations protect and control privileged access across platforms and environments. One Identity Safeguard организациите защитават и контролират привилегирования достъп в различни платформи и среди.

Challenges for IT Administrators:

• Too many administrators with elevated rights;
• Shared passwords for root accounts;
• Constant privilege escalation;
• No centralized access policies;
• Insufficient visibility into permissions;
• The principle of least privilege is not enforced;
• No accountability or on-demand auditing.

Safeguard for Privileged Passwords automates, secures and simplifies the management of privileged passwords and certificates. It provides a centralized vault, access control and full accountability, reducing the risk of misuse and security breaches.

What You Get:

• Activity Center – create requests, review all activity and easily generate audit reports.
• Workflow Engine – customized processes with time restrictions, emergency access and approval automation.
• Approve Anywhere – a cloud platform for approving or denying access requests from any device.
• Account Discovery – automatically scans the network for privileged accounts, hosts and directories.
• Personal Vaults – secure password storage for every employee.
• High Performance – designed for distributed operation with load balancing and high throughput.

Safeguard On Demand is a SaaS privileged access management (PAM) solution that provides a secure, efficient and compliant way to control privileged accounts. It is certified to ISO/IEC 27001:2013 and conforms to the additional control guidance in ISO/IEC 27017:2015 and ISO/IEC 27018:2019.

What You Get:

• Account Discovery – automatically finds privileged accounts on your network, including hosts, directories and network resources.
• Credential Protection – stores privileged passwords and certificates in a secure vault
• Session Recording – records all session activity, from keystrokes to mouse movements and windows viewed.
• Real-Time Monitoring – monitors traffic and automatically runs predefined actions when certain conditions are met.
• Full Audit and Review – replay or search recorded events for complete accountability.
• Privileged Access Management – centralized management of access requests, approvals and permissions.

Safeguard On Demand combines the convenience of a cloud service with powerful security features to protect the most critical accounts in your organization.

Identity management is critical to every organization’s security. With the growth of cloud services, SaaS applications and hybrid infrastructures, companies face identity sprawl, where identities are scattered across many disconnected systems. Identity Sprawl – „разпиляване“ на идентичности в множество несвързани системи.

What Is Identity Sprawl and Why Is It a Problem?

Identity sprawl occurs when organizations use separate IAM solutions (Identity Governance and Administration – IGA, Privileged Access Management – PAM, Access Management – AM) that are not integrated. This leads to:

• Dozens of separate identity stores – directories, databases, SaaS accounts;
• No centralized visibility or control;;
• Higher risk of breaches and privilege abuse.

The Solution: Unified Identity Security Platform

UISP is a strategic architecture that brings all key IAM functions together in one platform: entitlement and privileged access management, authentication and behavior analytics, compliance and process automation. The platform correlates information from on-premises systems (UNIX/Linux, Windows, macOS), business applications (SAP, Oracle, ServiceNow, Salesforce) and cloud platforms (AWS, Google Cloud, Azure).

• Centralized data and policies – full visibility into all roles and access;
• Process automation – fewer human errors and faster provisioning;
• AI analytics and continuous authentication – real-time anomaly detection;
• Incident Response – automated alerts and adaptive controls.

OneLogin is a leading identity and access management (IAM) solution that offers a unified platform for secure authentication, centralized management and process automation. Built for hybrid and cloud environments, it helps organizations protect their data, reduce risk and improve the user experience.

Key Advantages

• Single Sign-On (SSO) – secure, easy access to all applications, on-premises and cloud, with a single sign-in.
• Multi-Factor Authentication (MFA) – adaptive protection with context-based factors, including biometrics and risk analysis.
• Identity Lifecycle Management – automates onboarding, role changes and offboarding.
• Integration with Key Systems – Active Directory, LDAP, SAP, Oracle, AWS, Google Cloud, ServiceNow and more than 6,000 applications through prebuilt connectors.
• Adaptive Security – context-based policies that respond to risks in real time.

Active Roles is a solution for managing and protecting Active Directory and Entra ID (Azure AD), including Microsoft 365 resources, since these are managed through Entra ID. From a single console, you can administer AD and Entra ID user accounts, groups and roles, as well as Microsoft 365 licenses and mailboxes. When you create or change an account through Active Roles, the changes are automatically reflected in Microsoft 365.

Основни функции:

• Single Console for AD, Entra ID and Microsoft 365 – manage all users, groups and resources from one place.
• Account Lifecycle Automation – create, modify and remove accounts, including assigning or revoking Microsoft 365 licenses.
• Delegated Access with RBAC – safely delegate role-based rights without compromising security.
• Audit and Compliance – full traceability of actions for regulatory requirements.

Key Advantages

• Zero Trust security – to prevent breaches;
• Easier day-to-day work for administrators by automating routine tasks;
• Policy consistency – the same rules for on-premises and cloud environments;
• Audit readiness – traceability of all actions and events;
• Flexible architecture – a modular design that grows with your business needs.

Safeguard for Privileged Sessions provides complete control, monitoring and recording of privileged sessions by administrators, remote vendors and other high-risk users. It delivers protection, transparency and real-time audit readiness.

What You Get:

• Complete Session Control – all activity is captured, indexed and stored in a secure environment, ensuring traceability and tamper protection. Recordings can be replayed for analysis and audit.
• Real-Time Alerting and Blocking – monitors traffic and user actions to detect and block suspicious activity before it becomes a threat.
• Analytics-Ready – collects and analyzes privileged user behavior data for early detection of risks and anomalies.
• Wide Protocol Support – SSH, Telnet, RDP, HTTPS, ICA, VNC and more, depending on your needs.
• Privileged Access Management – centralized requesting, granting and approval of privileged rights.

Safeguard for Privileged Sessions is a key building block of a Zero Trust environment, providing full visibility, control and protection for the most critical sessions in your organization.

Safeguard for Privileged Analytics lets you identify high-risk accounts, monitor suspicious behavior and uncover previously unknown threats, both inside and outside your organization. It uses machine learning and behavioral analytics to detect anomalies, rank risk and prioritize actions to prevent breaches.

What You Get:

• Real-Time Threat Analytics – monitors and visualizes privileged user behavior.
• Behavioral Baseline – builds a profile of normal behavior from data in your IT environment; deviations are detected by 13 machine learning algorithms.
• Screen Content Analysis – tracks commands, windows and screen content during a session to identify misuse or identity theft.
• Behavioral Biometrics – analyzes keystroke dynamics and mouse movements for continuous biometric authentication.
• Risk Ranking – highlights the most suspicious events and gives security analysts a prioritized list.
• Automated Response – integration with Safeguard for Privileged Sessions allows sessions to be terminated automatically when behavior is highly suspicious or malicious.

Safeguard Authentication Services lets users sign in to non-Windows systems such as UNIX, Linux and macOS with their Active Directory (AD) credentials. It provides a single identity and centralized access management across heterogeneous environments.

What You Get:

• Active Directory Authentication – integrates UNIX, Linux and macOS systems with AD.
• Change Control and Monitoring – change tracking, alerting and monitoring.
• Group Policy for UNIX, Linux and macOS – configuration and security policies across platforms.
• Single Sign-On (SSO) – one sign-in for access to multiple systems and applications.
• Simplified Identity and Access Management – centralized administration that reduces complexity and risk.
• Flexible Deployment – supports various architectures and integration scenarios.
• Two-Factor Authentication – an extra layer of security for critical systems.