NetIQ Identity Manager is by far the most flexible product available, and the pricing is incredibly good, even if you're not situated in the BeNeLux.

We use NetIQ Identity Manager to sync employee data from HR systems to LDAP directories and various applications like SAP, automatically provisioning user accounts based on criteria such as department and job function, while additional access is assigned through workflow processes, streamlining user provisioning across multiple applications.

NetIQ Identity Manager supports compliance and audit processes through reporting capabilities that provide insights into user access. Additionally, the Identity Governance product facilitates access reviews, allowing for the generation of reports to prompt access reassignments or cancellations based on predefined criteria.

One challenge we have encountered is integrating applications without defined APIs or lacking expertise in integration from application administrators, prolonging integration timelines.

Role-based access control in NetIQ Identity Manager improves our security posture by enabling us to track user roles and associated access across applications, detecting potential security breaches, and ensuring visibility into user access permissions at any given time.

Since implementing NetIQ Identity Manager, we have seen significant improvements in managing the user lifecycle. First-day access provisioning is streamlined, reducing manual processes and saving time, especially during periods of high employee onboarding. Enhanced access control and reporting capabilities ensure comprehensive user information for auditing purposes, facilitating better security and compliance measures.

Overall, based on my experience and flexibility, I would rate NetIQ Identity Manager a nine out of ten. It is highly flexible with many connectors, allowing for diverse integrations. While some solutions like Salesforce may connect more easily, they lack the flexibility of NetIQ Identity Manager.

Do not look at features; look at real-time implementation experience.

You need organization support, high-level support from management to do the change needed to implement it right.

I would rate it as nine and a half out of ten because there is always something to improve.

Overall, I would rate the solution a seven out of ten. If finances are a major consideration, then it's a good option. However, if budget is not a constraint, I would opt for one of the more mature players in the field. 

Technology and thinking in identity and access management have evolved, and unfortunately, NetIQ has not kept pace with these changes as well as some competitors.

If we get experienced support engineers, NetIQ is a good option. Other than support issues, the product is quite good. Overall, I rate the tool a seven out of ten.

I would advise others to read the manuals carefully and do the testing systems first. That's because it has all the bells and whistles when it comes to features, but they are not so easy. It is a full package for everything, but it is not so easy to implement. You should basically clarify things because there are different kinds of doors for different kinds of things.

I would rate this solution an eight of 10.

I rate NetIQ Identity Manager an eight out of ten.

Get executive buy-in and know that a tool isn’t going to fix bad processes.

The way it was implemented for the company was mostly for HR integration. So we would synchronize data from SAPHR to an Active Directory. So all the new hiring, all the user provisioning was made by HR on the SAP system. This system was responsible for creating the accounts on the network and mailboxes and all that from that system. So no one has ever created a user manually in AD. It's all automatic.

It's a solid product, it's a mature product. You just need to make sure that your IT personnel is properly trained. When you purchase a license, make sure you have support engaged as part of your contract and you'll get your team trained.

I would also recommend a proof of concept for sure. That way you can show clients how flexible the product is.

I would give the solution a rating of nine out of ten.

• Sell the idea at the CEO level
• Get sponsors for a project
• Get a capable project team
• Choose a consultant who knows the product and not only the IDM processes.

I would recommend this solution to others.

I rate NetIQ Identity Manager a nine out of ten.

Analyze if you want to unify the keys of different identities of the same user or if you want to propagate an identity in several platforms. The latter option is recommended, although it demands more effort.

Go little by little. Install the core in a new metadirectory, separate from the production one, and implement the one-to-one connectors. This is advisable because the impact on the end user is high (in the positive sense) since it is still a change. Then, take advantage of all of its functionalities, as it is common to see that after installation, several connectors do not use other parts of the tool. For example, the role-based authorization flows, circuits to request a device, or automation of response by the loss of passwords.

Do not confuse identity management with single sign-on. This is another discipline and there are other products for it.

• It is a money saver in the long run
• As long as you set your requirements from the get-go there won't be overhead further along

Be sure data quality and code quality is good from the start. Going back over a production environment just makes things hard.

I would recommend this product, Its quite flexible and quick to start with.