Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

At One Identity, we are proud to share that Gartner has recognized us as a Challenger in the 2026 Gartner Magic Quadrant for Privileged Access Management (PAM). We believe our Challenger placement is a recognition that reflects how well we execute: we are delighting the customers we serve, retaining them over the long term, and building a position that is well suited for what comes next.

For years, identity governance has had a useful shorthand: Every identity needs an owner. This works reasonably well when the identity represents a person. There may be managers, application owners, entitlement owners, data owners and security teams surrounding the identity, but there is still a human being at the center. For example, Sarah in Finance has an identity. The organization determines what Sarah is permitted to access and execute, but Sarah will also be held accountable for her actions.

The most experienced identity governance leaders don't need to experience the wrong platform before they understand what to look for. They recognize early that a mature identity governance and administration (IGA) program requires real customization, hybrid support that doesn't degrade over time and vendor investment in both on-premises and software as a service (SaaS), and they choose Identity Manager by One Identity from the start, renewing for the same reasons they first signed.

A plain-language look at our new release and support policy — and what it means for you, no matter which product you run. For customers and partners, release and support practices have not always been easy to interpret. Different products used different terms for similar things — major and minor releases, patch releases, hotfixes — which made it hard to know which release to adopt, how long it would be supported, or whether a given update added functionality or only fixed something.

Identity security conversations often arrive at the same unfortunate scenario: a stolen token and breach only discovered once major damage is done. Experts Rob Kraczek, global strategist at One Identity, and Chris Ray, field CTO of security and risk at GigaOm, recently unpacked why 3 a.m. token theft has become less exception, more routine — among other things.

Managing user accounts, permissions and security access across a university environment involves significant administrative work. For institutions that rely on Microsoft Active Directory, keeping that infrastructure organized, secure and current can quickly become resource-intensive as student and staff populations shift each semester. This type of challenge grows when IT teams must handle onboarding, access changes and offboarding manually for each individual.

Authentication configuration issues, especially those tying into Kerberos, are a big call driver for the Active Roles by One Identity Support team. When Kerberos requirements are met, Integrated Windows Authentication typically attempts Kerberos before falling back to NTLM. Due to expected IIS functionality, we will see multiple HTTP requests which trigger authentication repeatedly.

Privileged access management (PAM) is one of the clearest ways to reduce identity-based risk and demonstrate security value. But ROI depends on more than simply deploying a PAM tool. Organizations need a solution that can be implemented efficiently, managed without unnecessary operational burden and scaled in a way that supports long-term cost control. For organizations evaluating PAM investments, these factors matter.

For years, sovereign cloud was basically a data center pin on a map. A vendor would point at Frankfurt or Paris and call it a day. That pitch doesn’t work anymore, and it stopped working fast. Between late 2024 and late 2025, the EU passed three separate rules that turned sovereignty from a talking point into something organizations now have to prove, on a schedule, with documentation, to a specific regulator.

No city is designed to become complex. It starts with a simple plan with a handful of streets and a few neighborhoods. Then it grows. New districts appear, roads extend, bridges get built and temporary solutions slowly become permanent. As cities grow, complexity compounds, perhaps because that growth was never planned for. Identity environments follow the same pattern.