It saves us a full time employee in account management and once it's in place it is not expensive at all because of the extremely low license fee that is charged by NetIQ in the Netherlands.

We use it for manual provisioning, where we log incidents on our service management platform. We have two types of automated provisioning. 

• One type involves provisioning accounts and group memberships directly in various LDAP directories. 

• The other type of auto-provisioning is fully customized for specific needs. 

We use all three main types of provisioning. However, it has not improved access management by itself since they are different products. Where Identity Manager and access management products potentially leverage each other is in instances where Identity Manager provisions in all directories, which makes it easier for applications to authorize users or for leveraging password authentication from an Access Manager. Aside from that, they are independent products.

NetIQ Identity Manager easily integrates with our existing IT infrastructure.

NetIQ Identity Manager provides workflow and forms that allow all managers to initiate new employee provisioning under the control of the HR or finance department. This reduces the number of accounts created out of control.

NetIQ Identity Manager can integrated with Identity Governance administration and this is a great benefit when governance needs are present.

We learned a lot about what not to do when we implement our next solution. We were implementing an HCM solution at nearly the same time as NetIQ so that was definitely something I would not recommend doing if at all possible.

We did an exercise, but it was a long time ago. I know that we had a lot of manual work that we saved by using the product. So on a monthly basis, we would hire ten or so users per day, ten times, over twenty days, so two hundred in total.

Each user would take between ten and fifteen minutes, so let's say two hundred times twenty minutes, is four thousand minutes, or sixty-six hours. There were more functions that we'd do as well.

I would say you would save like around one-hundred person-hours, per person per month. That's big savings.

Has facilitated the synchronization from eDirectory to AD and helped with Automating some SQL tasks.

Identity and access management processes have developed to become automatic and fast. While the source of identity information is the HR data, user rights can reflect the user role(s) in an organization.

For many years we had Novell eDirectory as the main directory, to which was added LDAP, AS400, Active Directory, Google, and SAP.

The greater strength was to keep the identities synchronized without failures in both attributes and passwords. The provisioning of identities at reasonable times greatly reduces the time of a new user's registration.

It has reduced time and resource costs due to automation of previously hand-managed tasks like provisioning, granting access, distribution and access to different enterprise connected applications.

Being event based, it allows data changes and passwords to propagate to applications in real time. This makes business workflows efficient and instant from both a process and technology perspective.

• Roles and Resource Management
• Segregation of Duties
• Approval Workflows
• Event Based Identity Synchronization.