IBM Tivoli Access Manager Review
Simplified deployment of web applications. Very stable product.

Valuable Features

Protection of web applications

Improvements to My Organization

Simplified deployment of web applications. The ISAM products centralises authentication and authorization giving a shorter time-to-market in the development of new web sites/applications

Room for Improvement

Since ISAM 7, and especially version 8 IBM has moved from software-install to appliance based (virtual or hardware) this really improves the speed of new patches and releases. IBM promised to release a new appliance-firmware every quarter, so far they kept their promise.

Use of Solution

10+ years.

Deployment Issues

You do need to train to add to your skill set, and need to fully understand the possibilities and features which takes a while. Since I've been using it for over 10 years it is no longer difficult for me to deploy. Of course with new version some things change, so reading the documentation is quite useful sometimes.

Stability Issues

Since its birth it is an unbelievable stable product. I know of a deployment that did not receive any maintenance for several years and it was still working.

Scalability Issues

Nope, it is designed to be very flexible. It can handle any size website.

Customer Service and Technical Support

Customer Service:

We as a Premium Business Partner have some advantages in being able to contact the developers more easily. Our customers can raise tickets, and depending on their contract, they are suitably assisted by IBM.

Technical Support:

It has been good for long time.

Previous Solutions

Nope, somehow I ended up a IBM Business Partners, always using ISAM. But are also using IBM Security Identity Manager, IBM Security Directory Server, IBM Security Directory Integrator, IBM Federated Identity Manager. Basically all IBM Security Identity and Access Management offerings except IBM Tivoli Access Manager for ESSO (confusing naming, but a really different product that does not really combine with all the others in my humble opinion).

Initial Setup

With the firmware appliance it is easy as pie.

Implementation Team

I'm part of a IBM Premium Business Partner, we are specialised in IBM IAM deployments. In many occasions IBM Netherlands is requesting our services to get the job done.


An ROI, is for most customers not easy to make being a security solution. It gives more hassle than not using it, insurance-wise you could say. Once a customer has chosen it they stick with it, I did not see many customers abandoning it due to ISAM not performing or not being satisfied.

Other Advice

Ensure you got your team trained and get external expertise for your architectural design and first deployments. While learning on the job, your team can take over after a while.

Disclosure: My company has a business relationship with this vendor other than being a customer: IBM Premier Business Partner. I'm personally involved in contributing to the official IBM Security exams, and an official instructor for these products for over ten years

Add a Comment

Why do you like it?

Sign Up with Email