SailPoint IdentityIQ Reviews

• Certification
• Full Life Cycle management of IT system accounts

• It has, for the first time, consolidated a single view of a user's access to the company's multiple IT systems
• This has now allowed us to confidently cleanup a large proportion of accounts that could not previously have been easily identified as no longer required
• Furthermore, it has forced ownership of non-user/non-individual accounts and accountability of them

• Reporting and some GUI aspects. Reporting lacks the flexibility of retrieving the vast amount of data that we know is in the database, but not easily accessible
• Scheduling also comes short, specifically when it comes to multiple jobs that are interdependent (e.g. preventing certain groups of jobs from running concurrently)

Five years across different companies.

Yes - Some application connectors (namely Lotus Notes) - have some fundamental flaws. But the major issue was cleaning up, what we expected to be, authoritative data - specifically HR data, and users not in HR (eg. contractors, etc) and ensuring global consistency and adherence to standards.

Not of the core product, but some issues with some of the connectors (especially Lotus Notes, and ServiceNow). This has led to some issues with daily batch jobs which either time out, hang, or are terminated and this has in turn, we suspect, created some internal DB link corruptions.

Not yet. Though current nightly batch jobs range from completing within 8 hours to 48 hours, with no obvious reasons as to why

Very good.

Very good.

Yes we did. We switched because the solution no longer offered support as it was sold to Sailpoint.

It was complex. Identity and account management is very heavily dependent on the accuracy, authority, and timing of the source data. As the implementation progressed, we became aware more and more that some of the missing detail (especially around the exceptions of when a central unique Employee number is actually "central" or consistent, or the complexity of some of the attributes - e.g. whether their validity is date dependent, allowing for multiple values, etc) will cause issues in the proposed processes and the timing of providing access when required.

We used a vendor whose level of expertise was excellent.

No ROI as of yet.

It was two years give or take.

Yes - NetIQ, Oracle, and SAP.

Spend double the time/money up front in fully understanding your business requirements, opportunities for process changes. Also ensure you get a detailed understanding of identity and access business processes and understand your HR (and other authoritative) data source.

1. Very user friendly unified UI (for users and administrators)
2. An excellent out-of-the-box features (hierarchical RBAC, flexible provisioning policies, role-mining, certifications, life-cycle events, etc)
3. Modest hardware requirements
4. A large list of out-of-the-box connectors (with no additional charge)
5. Using only standard java technologies (java, beanshell, HTML, jsp, JavaScript, XML, some Apache projects)
6. Possibility to deploy the solution on different DBMS and application servers of your choice
7. Very fast implementation of the solution with custom modifications

1. The price is very high
2. The partnership program is very inflexible
3. Provisioning. This functionality sometimes require too much coding to implement some customers' requirements
4. "Ease of use." IdentityIQ has a function that can be described as duplication (this can depend on the point of view) for example, groups, population, and work-groups
5. Implement the support of organizational structure

About one year.

Yes, of course. Every time, when you implement a project for a customer you will encounter some issues.  The primary question - how quickly the vendor will help you with issues, or how strong are the programmers and engineers in your team to find a solution in-house.

No, I didn't.

No, I didn't.

Of course. In addition to SailPoint IdentityIQ I have experience in implementing MS FIM 2010, OIM 11gR2, and Oracle Waveset (Sun IDM) 8.

In my opinion this is the best product and I agree with Gartner which described it as the best product in the "Identity Governance and Administration Magic Quadrant" in 2013-2014.

I would say it's simple (compared with OIM 11gR2, but more difficult when compared with MS FIM 2010 R2).
IdentityIQ has very good documentation and you shouldn't face problems with the installation.

With an internal team. All team members have very strong experience in the IDM sphere, including working experience with other IDM vendors (Sun, Oracle, IBM).

SailPoint IdentityIQ is a very good product (in my opinion - it is the best product and it took the leading place in Gartner's Magic Quadrant two years in a row) and I can recommend it to all who are looking for a very strong IDM solution (if the price suits you).

Certification of user's access, enabling the organization to have a strict governance of what its employees are for entitled to currently.

By using this product the organization has moved from manual access governance done previously to automated governance which has a full audit trail, and this is very beneficial.

Some of the features like multi-aggregation and self healing feature in case of corrupted certificates would be pretty useful which would enable easy debugging in case of issues.

More than two years.

No, the deployment is pretty straightforward.

No, the product is pretty stable given it has sufficient clustering and HA catered for seamless 24x7 high volume access.

Yes, with a growing number of certificates there was slowness in the overall certificate generation time which I believe is corrected in the upcoming release of the solution.

7/10.

8/10.

Yes, we used Aveksa's access governance which seemed to have a lot of issues with regards to aggregation and certificate generation which prompted the switch to Sailpoint.

It was pretty straightforward, just need to follow installation documentation properly.

It was done by the in-house team.

Aveksa was compared with Sailpoint identityIQ and Sailpoint IdentityIQ fared better in terms of performance and features.

If you are looking for a product that would suit your access governance needs then perhaps Sailpoint identity IQ is a good option, but if you require automatic remediation capabilities as well then you might need to integrate it with an identity management product like OIM.

Security and administration for any new/current access.

Manage process and search information.

It improves the function for CMS - the website is a centralized system to manage accounts and access for CMS applications.

It allowed to implement the automated processes when a new employee is hired. It allows to have a main central process for new hires.

I've used it for three years now.

No, but we encountered some bugs after the implementation and they were fixed.

A few of them - they were connection and performance issues but they both have been fixed.

Yes. We needed to contact Sailpoint directly to address the issue.

It was ok.

It needs to improve SLA.

The client made the decision.

Both vendor team and in-house.

I wasn't involved in the process, but other solutions were evaluated before choosing this one.

Verify the requirements and the growth.

We primarily use this solution for simplifying the IAM lifecycle, naming conventions, and application onboarding.

This solution has improved our organization through its ease of application onboarding, approvals, provisioning, and lifecycle UI performance.

I have found all of the features valuable and easy to use.

I think that the onboarding framework could be improved.

SailPoint IIQ Features:

• Compliance controls
• Access request and automated provisioning
• Password management
• Data access governance
• Role lifecycle management

Great product to manage the access control of users.

• Provides good authorization and authentication system functionality.
• Keeps data safe.

• Report generation
• Compliance manager dashboard reporting
• Policy violation
• Access certification, etc.

Needs to focus on automation wherein provisioning of work can be improved and access certification should be automated without the intervention from a manager for approval.

Not applicable.

Building/expanding a directory tree for my customers was the most valuable tool. Another was the ability to remove someone from the network with just a few clicks.  It was fairly easy to learn and the layout of the controls had an intuitive feel.

The organization is moving to replace several tools with this one tool.

Broke down several times during my 4 months but overall the delays were mostly minor.

I used it for four months.

I was an Identity Access Management operator for a company contracted as an outsource for a major global company. My involvement was brief. I was part time help while looking for full time employment in an unrelated field.

User provisioning and the role management features are good.

The advanced provisioning features require more improvement.

I have used this solution for seven years.

I would rate the technical support a 4/5.

The setup was straightforward.

I did evaluate other options.

I would recommend this product based on the customer requirements.