OneLogin Due Diligence

Run due diligence on OneLogin: check compliance and get alerts when suppliers change.

United States · www.onelogin.com · 17 vendors

OneLogin develops a cloud-based identity and access management (IAM) platform. It provides solutions such as single sign-on (SSO), multi-factor authentication (MFA), and user provisioning. The company aims to simplify and secure access to applications and data for enterprises.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 17 sub-vendors.

Insights

Last updated 2026-08-14 · revision 2

17 direct vendors, 183 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

11 in-scope frameworks identified; showing 3.

HIPAA (source) — Evidence found

Evidence: https://www.onelogin.com/trust/compliance, https://www.onelogin.com/solutions/industries/healthcare

FedRAMP — No public evidence

Evidence: https://marketplace.fedramp.gov, https://www.onelogin.com/trust/compliance

CPRA — Evidence found

Evidence: https://www.onelogin.com/trust/privacy, https://www.onelogin.com/legal/privacy-policy

Financials

Three-year financials

Financial Resilience Score: 6/10

OneLogin's financial resilience is difficult to assess precisely due to its private status and lack of disclosed audited financials. However, the company benefits significantly from being a subsidiary of One Identity (Quest Software), which is ultimately backed by Clearlake Capital Group, a large private equity firm. This ownership structure provides access to substantial capital resources and integration into a broader IAM product portfolio including privileged access, identity governance, and Active Directory management. The company operates in the IAM/SaaS space, which typically features high gross margins (70-80%+) and strong net retention due to switching costs. OneLogin has an established customer base of thousands of enterprises across 40+ countries, including notable references like Airbus, Steelcase, and Pandora. Its product breadth spanning workforce identity and customer identity (CIAM) provides revenue diversification. However, significant risks temper this assessment. OneLogin faces intense competition from much larger players including Okta, Microsoft Entra ID, Ping Identity, ForgeRock, CyberArk, and JumpCloud. As a mid-tier competitor, it lacks the scale of market leaders. The 2017 data breach remains reputationally damaging for an identity vendor. Additionally, PE-owned software companies often carry meaningful debt loads, and the opacity of financials prevents verification of profitability or cash burn.

Key strengths: Backed by well-capitalized parent (Clearlake Capital via Quest Software/One Identity), Sticky SaaS/subscription model with typically high gross margins (70-80%+), Established customer base of thousands of enterprises across 40+ countries, Product breadth across workforce identity and CIAM, Raised ~US$170M in funding before acquisition, Reported ~US$1B valuation at 2019 funding round

Risk factors: Intense competition from Okta, Microsoft Entra ID, Ping Identity, ForgeRock, CyberArk, JumpCloud, Historical 2017 data breach damaged reputation as identity vendor, Financial opacity prevents verification of profitability, cash burn, or leverage, PE-owned software companies often carry meaningful debt loads, Product overlap risk post-acquisition with sister One Identity products, Macro pressure on SaaS spend and IAM market consolidation into platform vendors (especially Microsoft)

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report