Government · head to head
CitizenLab vs One Identity

One Identity
Cybersecurity
Quest-owned identity governance, PAM and Active Directory management
- From
- On request
- Free plan
- No
The short version
- Each has a real cost: CitizenLab citizenLab has rebranded to Go Vocal and the product now sells under govocal.com; One Identity the portfolio is assembled from separate acquisitions, so components are separately licensed, separately administered and do not present one console, which raises operational cost.
- They diverge on capability: CitizenLab covers Participatory Budgeting, One Identity covers Identity Manager.
- Prices and features above were last checked on 1 September 2026.
Where they differ
Only the attributes on which CitizenLab and One Identity actually diverge.
| Attribute | CitizenLab | One Identity |
|---|---|---|
| Starting price | $500/month | On request |
| Pricing model | subscription | quote |
| Platforms | Web, Ios, Android | Web, Windows, Linux |
| Category | Government | Cybersecurity |
| Founded | 2015 | Unknown |
Identical on both: free tier (No), user rating (Not yet rated).
What each one covers
Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.
Only in CitizenLab
- Participatory Budgeting
- Idea Management
- Online Consultations
- Surveys & Polls
- AI-powered Analysis
- Single Sign-On
- Open Data Portals
- GIS Systems
Only in One Identity
- Identity Manager
- Safeguard
- Active Roles
- OneLogin
- Password Manager
- syslog-ng
- Starling connectors
What people use each for
The jobs each tool is most often brought in to do.
CitizenLab
- Running community consultation and participatory budgeting for a citynot One Identity
- Collecting resident input through surveys, ideation, mapping and votingnot One Identity
- Centralising engagement data across multiple municipal departmentsnot One Identity
One Identity
- An organisation whose authoritative directory will remain on premises Active Directory and needs delegated administration with attribute-level controlnot CitizenLab
- A government or defence environment requiring privileged session management on a hardened physical appliance rather than a cloud servicenot CitizenLab
- A manufacturer with SAP and Active Directory needing provisioning governed under one certification processnot CitizenLab
- An enterprise consolidating Active Directory after an acquisition and needing automated account lifecycle across both forestsnot CitizenLab
Where each one falls short
Documented limitations, not opinions. Every one is a constraint you would hit in normal use.
CitizenLab
- CitizenLab has rebranded to Go Vocal and the product now sells under govocal.com
- No prices are published on the plans page; every tier requires scheduling a demo
- The Essential plan allows only 1 active project and 1 admin seat, with no project manager seats
- Standard is limited to 4 admin seats and 5 project manager seats, and Premium to 8 admin seats and 25 project manager seats
- Standard restricts Sensemaking to Light, capped at 30 inputs; auto-insights require Premium
- The integrated Konveio document annotation and Echo blended engagement methods are excluded from Standard and require Premium
- Auto-translation on Premium is limited to 3 languages
- Custom fonts and other premium styling options are Premium only
- Priority support is Premium only
- Plans are split by population band, with separate ladders for cities under and over 100K population
One Identity
- The portfolio is assembled from separate acquisitions, so components are separately licensed, separately administered and do not present one console, which raises operational cost.
- Identity Manager implementations are customisation-heavy and commonly run over a year, with the services spend exceeding the licence cost in the first year.
- Quest has changed private equity ownership more than once since the Dell separation, and buyers should ask directly about product investment commitments before signing a multi-year deal.
- Product documentation and support sit behind a customer portal, which makes independent evaluation before purchase harder than with vendors that publish openly.
- The cloud-native and developer experience trails the pure-play identity vendors, so organisations moving decisively to SaaS applications find the on premises heritage becomes a constraint rather than an asset.
Pricing, plan by plan
CitizenLab
$500/month- Government$500/month
- Participatory Budgeting
- Idea Collection
- Surveys
One Identity
On request- Identity Manager$undefined/year
- Priced per managed identity
- On premises or hosted
- Access certification and provisioning
- Safeguard$undefined/year
- Priced per privileged user or per appliance
- Hardened appliance option for session management
- Licensed separately from Identity Manager
- Active Roles$undefined/year
- Priced per managed Active Directory account
- Delegated administration and automated provisioning
- Licensed separately
Which should you pick?
Choose CitizenLab if
- You need participatory budgeting.
- You work on Web, Ios, Android.
- You also want idea management.
Choose One Identity if
- You need identity manager.
- You work on Web, Windows, Linux.
- You also want safeguard.
Questions people ask
- Is CitizenLab or One Identity better?
- Neither clearly leads. CitizenLab starts at $500/month and One Identity at On request, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
- Which is cheaper, CitizenLab or One Identity?
- CitizenLab starts at $500/month and One Identity at On request.
- Does CitizenLab or One Identity run on more platforms?
- CitizenLab runs on Web, Ios, Android. One Identity runs on Web, Windows, Linux.
- What is CitizenLab best used for?
- CitizenLab is most often used for running community consultation and participatory budgeting for a city, collecting resident input through surveys, ideation, mapping and voting, centralising engagement data across multiple municipal departments. Of those, running community consultation and participatory budgeting for a city and collecting resident input through surveys, ideation, mapping and voting are not what One Identity is typically brought in for.
- What can CitizenLab do that One Identity cannot?
- CitizenLab covers Participatory Budgeting, Idea Management, Online Consultations, Surveys & Polls. One Identity covers Identity Manager, Safeguard, Active Roles, OneLogin.
Answered from the vendors’ own pages
CitizenLab: How many projects can Essential tier teams manage?
The Essential tier is designed for teams starting small and is limited to 1 active project with 1 admin seat and no project manager seats.
SourceOne Identity: Is One Identity the same company as Quest?
Yes. One Identity is Quest Software's identity and access management business unit, not a separate vendor.
CitizenLab: How many projects can Standard and Premium tiers manage?
Both Standard and Premium tiers support unlimited projects. Standard includes 4 admin seats and 5 project manager seats, while Premium includes 8 admin seats and 25 project manager seats.
SourceOne Identity: Does it include privileged access?
Safeguard provides it, but it is licensed separately from Identity Manager. Neither includes the other.
CitizenLab: Does Enterprise tier have any user seat limits?
No, the Enterprise tier is designed for organizations aiming to embed engagement deeply within their infrastructure and includes unlimited admin seats and project managers.
SourceOne Identity: Why choose this over SailPoint or Saviynt?
Almost always because of Active Directory depth via Active Roles or an appliance requirement for privileged sessions. For cloud-first estates the specialists are the stronger choice.
CitizenLab: What are the specific pricing amounts for each tier?
Specific pricing amounts are not disclosed on the plans page. The company directs interested organizations to talk to their team for personalized pricing offers.
SourceRelated pages
More on One Identity
Other head to heads
- CitizenLab vs CivicPlus
- CitizenLab vs Granicus
- CitizenLab vs Accela
- CitizenLab vs DocuWare
- CitizenLab vs Zencity
- CitizenLab vs Polco
- CitizenLab vs Nextdoor for Government
- CitizenLab vs Ring Neighbors
- CitizenLab vs CentralSquare
- CitizenLab vs CityView
- CitizenLab vs PublicInput
- CitizenLab vs MyRec.com
- CitizenLab vs NEXGEN Asset Management
- CitizenLab vs NextRequest
- CitizenLab vs Trimble Unity Maintain
- CitizenLab vs VUEWorks
- CitizenLab vs American Legal Publishing
- CitizenLab vs Bang the Table
- CitizenLab vs Saviynt
- CitizenLab vs Delinea
- CitizenLab vs Omada Identity
- CitizenLab vs BeyondTrust
- CitizenLab vs Netwrix
- CitizenLab vs Infisical
- CitizenLab vs HashiCorp Boundary
- CitizenLab vs Teleport
- CitizenLab vs JumpCloud
- CitizenLab vs Idira
- CitizenLab vs March Networks
- CitizenLab vs Akeyless
- CitizenLab vs LogicManager
- CitizenLab vs Mullvad VPN
- CitizenLab vs Private Internet Access
- CitizenLab vs Quantexa
- CitizenLab vs Termly
- CitizenLab vs Transcend
- One Identity vs CivicPlus
- One Identity vs Granicus
- One Identity vs Accela
- One Identity vs DocuWare
- One Identity vs Zencity
- One Identity vs Polco
- One Identity vs Nextdoor for Government
- One Identity vs Ring Neighbors
- One Identity vs CentralSquare
- One Identity vs CityView
- One Identity vs PublicInput
- One Identity vs MyRec.com
- One Identity vs NEXGEN Asset Management
- One Identity vs NextRequest
- One Identity vs Trimble Unity Maintain
- One Identity vs VUEWorks
- One Identity vs American Legal Publishing
- One Identity vs Bang the Table
- One Identity vs Saviynt
- One Identity vs Delinea
- One Identity vs Omada Identity
- One Identity vs BeyondTrust
- One Identity vs Netwrix
- One Identity vs Infisical
- One Identity vs HashiCorp Boundary
- One Identity vs Teleport
- One Identity vs JumpCloud
- One Identity vs Idira
- One Identity vs March Networks
- One Identity vs Akeyless
- One Identity vs LogicManager
- One Identity vs Mullvad VPN
- One Identity vs Private Internet Access
- One Identity vs Quantexa
- One Identity vs Termly
- One Identity vs Transcend

