OneLogin
OneLogin provides cloud-based identity and access management software that secures workforce, customer, and partner access to applications and devices.
Operating headquarters
Aliso Viejo, CA, USFounded
2009OneLogin provides cloud-based identity and access management software that secures workforce, customer, and partner access to applications and devices.
OneLogin was named a Leader in Gartner's November 2020 Magic Quadrant for Access Management, and since October 2021 it is delivered inside One Identity's Unified Identity Security Platform spanning PAM, IGA, Active Directory management and IAM.
It positions on value — 'enterprise-grade security without the enterprise cost' — with published self-serve tiers starting at $3/user/month, 8,000+ prebuilt connectors, and a 9.4/10 TrustRadius score across 81 reviews where users highlight SSO breadth and granular access control.
Source: oneidentity.com
OneLogin disclosed breaches in August 2016 and May 2017; the 2017 incident exposed the possible ability to decrypt customer data, and Gartner analyst Avivah Litan publicly used it to criticize cloud SSO as a single point of failure. In October 2025 the company patched a high-severity IAM vulnerability (CVE-2025-59363) reported to let attackers use API keys to steal OIDC secrets and impersonate apps.
Its OneLogin Protect mobile authenticator rates 2.0/5 on the App Store (580 ratings) and 2.5/5 on Google Play (~2,060 reviews), with users citing device-transfer lockouts; TrustRadius reviewers note time-consuming phased implementations. It competes at smaller scale than Okta and Microsoft's bundled Entra — okta.com is the highest-similarity site to onelogin.com on Similarweb.
Source: krebsonsecurity.com
Sales motion is hybrid: published self-serve tiers ($3-$10/user/month) with a 30-day free trial and a free developer tier, while Enterprise, B2B, CIAM and EDU plans route to contact sales; small businesses are directed to reseller/MSP partners, and careers run through parent One Identity, which mentions quota-carrying sales roles.
Paid search: Google Ads Transparency shows 48 ads pointing to onelogin.com under verified advertiser One Identity LLC (US). Paid social: Meta Ad Library returns ~17 keyword-matched ads but none from OneLogin's own page — paidSocialOwnAdsUnobtainable:facebookAdsLibrary. Influencer/creator: no first-party ambassador, affiliate, or sponsored-creator page found — influencerProgramUnobtainable:onelogin.com.
Earned reach: ~21,046 LinkedIn followers; 81 TrustRadius reviews at 9.4/10; PeerSpot reports OneLogin mindshare of 4.1% (up from 2.5% prior year); ~1,048 monthly Wikipedia pageviews (Aug 2026); sustained coverage in TechCrunch, SiliconANGLE and Krebs; Similarweb shows direct traffic at 45.64% of desktop visits and ~0% paid keywords, with referrals led by education domains.
Source: onelogin.com
Rivalry — high: named competitors include Okta (top-similarity site to onelogin.com), Microsoft Entra, Ping Identity, CyberArk, SailPoint, Auth0, JumpCloud and Duo across LinkedIn-similar and Similarweb competitor sets.
New entrants — medium: building a trusted credential-broker requires capital and security credibility; OneLogin needed $175M+ in funding, and its own breaches show the stakes, yet cloud delivery lowers distribution barriers.
Substitutes — medium: bundled Microsoft Entra SSO, passwordless/passkey flows, and platform-native IAM can replace dedicated SSO/MFA for some buyers.
Buyer power — medium-high: enterprise buyers with 100+ apps weigh per-user pricing against Okta/Microsoft alternatives; published $3-10/user/month tiers cap pricing power but switching costs (directory integration, provisioning) retain customers.
Supplier power — low-to-medium: SaaS delivery on cloud infrastructure; no concentrated external dependency evidenced in sources.
Source: linkedin.com
Mordor Intelligence values the IAM security services market at $19.04 billion in 2025, projecting growth from $21.42 billion in 2026 to $36.29 billion by 2031 (11.12% CAGR); access management held a 35.19% revenue share in 2025, large enterprises drove 72.58% of spending, and North America held 43.77% share. Demand drivers cited include credential-theft campaigns, machine identities outnumbering human identities up to 45:1, zero-trust mandates, and FIDO2/passkey adoption, with average breach cost reaching $4.88 million in 2024.
Forrester separately forecasts the global IAM market reaching $27.5 billion in 2029 at a 15.3% CAGR (search-result citation; report page not fetched).
Source: mordorintelligence.com
OneLogin publishes per-user pricing for Workforce Identity: Basic $3/user/month (authentication, limited user management), Essentials $6/user/month (full user management, unlimited lifecycle management, advanced directory), Business $10/user/month (adds SmartFactor adaptive auth, desktop MFA, HR directory sync, RADIUS/VLDAP, Smart Hooks, REST connectors), and Enterprise at call-for-pricing (adds LDAP sync, delegated administration, multiple brands, API access management, OneLogin Access for on-prem apps).
OneLogin Workflows is a $2/user/month add-on; Enterprise Sandbox, B2B Identity, CIAM Plus and the EDU plan are contact-sales only. A 30-day free trial and a free developer trial support self-serve evaluation; small businesses are routed to reseller/MSP partners. Pricing is USD and applies to US customers; regional pricing goes through local teams.
Source: onelogin.com
Strengths: Gartner Magic Quadrant Leader for Access Management (Nov 2020); integration into One Identity's PAM/IGA/ADMS/IAM platform; published value pricing from $3/user/month; 8,000+ app connectors; 9.4/10 TrustRadius score.
Weaknesses: 2016-2017 breach history including possible decryption of customer data; OneLogin Protect rated 2.0-2.5 stars on mobile stores; implementation described as time-consuming and phased; smaller scale than Okta/Microsoft.
Opportunities: IAM security services growing to $36.29B by 2031 at 11.12% CAGR; expanding CIAM, B2B and EDU lines; machine-identity and passkey transitions; cross-sell into One Identity's 11k+ enterprise base.
Threats: Okta and Microsoft Entra bundling/scale (Okta-Auth0 $6.5B deal framed the 2021 acquisition context); credential-theft and session-hijack campaigns; renewed vulnerability disclosures (CVE-2025-59363).
Source: oneidentity.com