The Quest One Identity Solution from Quest Software is an interesting product. It can use not only an existing Active Directory structure to manage users and user accounts, but it can actually set up single sign-on based on user roles at the time the account is created. When a user is entered into the system and assigned a specific role, this product begins the workflow of giving logon rights as needed with little need for administrative interaction.
This product installs quite easily into the environment. The installation itself takes just a few minutes and consists of setting up the ActiveRoles Server and the client applications.
Administration is done from management console applications that have the look and feel of working inside Windows Active Directory. This makes administration of the product easy and familiar to system administrators. Everything that is done through the ActiveRoles console is instantaneously reflected in Active Directory.
Quest One integrates across several platforms and applications, which allows for ultimate user management, both at the logon level for workstations, but also in applications used in the environment. Systems that can integrate with this product include all Windows/Active Directory environments; all widely deployed Unix/Linux/Mac operating systems; any application that grants access through login, including web applications; and any OATH-compliant one-time password (OTP) solution.
Documentation is provided in the form of several installation and administration PDF manuals. All these guides are well organized and easy to follow with a good many screen shots, step-by-step instructions and configuration examples.
Quest includes one year of basic support in the purchase price of the tool. Additional support can be purchased at 20 percent of the license fee.
At a starting price of $7 per enabled user, this product provides a solid feature set at a reasonable price. We find this product to be a great value for the money based on its solid capability and ease of management.