Before I used CA Identity Suite, it was a separately installed component, nowadays offered as a Virtual Appliance, and that saves considerable time for installing and controlling it.

Deployment Express saves time for modifications and things like that. 

User attestation and role mining capability for governance.

We have used CA's security stack. We have used CA Identity Manager, CA SSO, CA Privileged Access Manager Server Control, CA Identity Governance and CA Strong Authentication. The total integration of the product was very beneficial for us. Additionally, the CA Identity Suite was able to replace our old mainframe based identity suite with a newer generation, more rapid development tool, which helped us to achieve our roadmap and reach the destination which we were looking for. It was a two year journey. We started with the end in mind. It was pretty helpful in achieving that journey.

Single Sign-On is valuable. We're moving away from the OHSON products and we chose CA on the identity side. 

One of the good things I noticed, but which we haven't started using yet, is the SIGMA portal, which used to be an IDMLogic product.

The most valuable feature is the speed of implementation. Now with the Virtual Appliance, it's much faster. In the past, to implement this kind of solution, it would take so many weeks. Now, it takes one day, or minutes, and we have the deployment ready.

The security has been improved. 

The customization of the user experience and the scheme of the solution is very easy.

The most important feature is the integration between the various modules of Identity Suite with the enterprise assets, as well as integration between the components of the suite.

My favorite feature of the suite is, of course, the provisioning aspect of it. It allows you to provision accounts within minutes instead of waiting weeks. That's a huge benefit for business at the end of the day, so that you can get your workers up and running in a timely fashion.

We use it for password resets as well. A user no longer has to call the help desk for a password reset since they can do it on their own time. They're not waiting on the phone for a long time because they can reset their password right away and continue with their day.

We also use Identity Governance for access verifications. We no longer have a paper process of going around to each manager and have them sign off. It's a real comprehensive way of ensuring that controls are in place and their access is certified on a timely basis.

I find the UI much simpler than the previous version. The documentation in the current version is better as well, even though the documentation is still a bit confusing.

Policy Express is now included in the UI, which saves time and effort, however the analysis and basis of the policy express is still complex. People who are used to different technologies that have more linear layout may find it difficult.

The most valuable feature is the recertification campaign capabilities.

I found all of the features to be quite valuable, especially the identity manager, governance, and identity portal. All of the features are helpful.