Symantec Identity Governance and Administration Reviews

Our primary use case of this solution is for managing identities and environment controllers in order to make it more unified and standard. 

I like that it is easy to diagnose. It has a version of a virtual appliance so we can download it, run it, configure it, and it would take about 10 to 15 minutes to configure the cluster or so.

It's easy to deploy, it's two versions, the manual deployment version, if it can be prepared in clusters it'll take one or two days. But the software appliance will take from 15 to 20 minutes.

They should easier and better integration with other software. It's hard to create custom integration rules with other software, like Oracle. This needs to be improved to give the customer an easier way to integrate.

I have been using this solution for the past two to three years. 

It is stable. If I had to rate the stability from one to ten, I would give it an 8.5.

Technical support from CA is not very good. I would give them a seven out of ten for their assistance and their knowledge. They could use improvement. 

I would rate it an eight out of ten.

To make it a ten, it should have more remote capabilities. There should be better partnerships with remoting tools. They need more remote partners and better dashboards.

Our customers find it easy to use.

It provides a user-friendly front-end to manage LDAP-based users.

The interface is modern, but could have been made even easier to use for the customers.

I managed it for approximately three years.

No issues encountered.

No issues encountered.

It's a little bit difficult to support.

It's reasonable. The support is not the quickest to respond and does not have a mature process in terms of what logs must be gathered, and what to gather before raising a case.

CA provided assistance with augmentation of the existing solution, they provided quite a good level of support during the project.

Ease of use for the configuration of provisioning accounts through an account template concept for an OOTB connector.

It does not requires an extensive programming or development background. The screen of the admin tool creates an account on the system to CA IAM, which provides it to the OOTB connector, then you can simply configure CA IAM to do the provisioning. CA IAM can help with the automation of user provisioning at the same level as the system admin. 

When comparing it to other products, you can set up CA IAM in a PoC very quickly to demonstrate its provisioning capabilities.

It fits for organizations having simple, basic provisioning requirements. If your organization has complex provisioning use cases and requirements, then you must have an architect and developer on the team to help bridge the gap that CA IAM cannot provide.

The product has a lot of need for improvement. Our issues are being raised back to the vendor as enhancements.

We have encountered issues with stability.

We have encountered issues with scalability.

Our experience with the technical support team is good. CA technical support is very keen to help their customers. 

Most issues are solved by the our team, but at least, their team has provided moral support to us.

We did previously use a different solution, and we switched for several reasons.

The initial setup can be both straightforward and complex. This is up to an organization's requirements of the CA Identity Manager solution.

This product is the same as other CA IDM product, which can help improve organizations, similar to the messaging on the product brochure.

In real life, it is up to the skill of the implementation team as to how they can configure the product to serve the business processes of the organization. The reason why some IDM projects have failed comes from implementation. The team must be good at the functional, technical, and designing of business processes. The product could be mediocre, but the implementation team must be top gun. Choose an implementation team wisely, especially when your requirements and processes are complex. A good product under a poor team cannot bring about the result seen on the product brochure.

The connector is free, and bundled with the product.

The product is considered good, in the top five. Looking at the product features carefully if your organization has complex provisioning requirements and business processes to find gaps.

Finally, always search for the best implementation team, who has skills and experience.

The most valuable features of this product are the legacy interfacing - interfaces with our mainframe - as well as provisioning.

It gives the end users power for their other access requests.

User interface and usability are mainly the features that need improvement.

I'm not sure if the new release includes 508 compliance for blind and deaf users. That would be a nice feature to include, especially for the government space.

The stability of this product is okay.

Scalability of this product is something that we need to look into.

The technical support team is good. Actually, we have a CA support team onsite which is good. They have been able to answer all our questions.

I wasn't involved in the decision-making process for purchasing this product since it was taken a while back.

I wasn’t involved in the initial setup process.

User interface is an important feature, especially in the sector from where I am coming from. Later releases are just allowing a user to know what to do in the product.

I would wish others good luck while purchasing this product.

• User-friendly UI
• In built connectors for various endpoints

It's provided a centralized platform to manage the lifecycle of all identities across different endpoint systems such as Active Directory, Salesforce, etc.

It should be better when doing custom connections.

I've used it for one year and two months.

There were very few issues.

At times we had issues with CA Identity Manager tasks getting hung in an "In Progress" state. We had to restart the instances, but that happens very seldom.

No issues encountered.

8/10.

7/10.

No previous solution was in place.

It was complex due to the vast number of identities in the organization.

It was implemented in-house.

It's more than satisfactory.

Connector Development (connector Express) and Policy Express enhanced feature which is improving every time with new releases.

Self service portal helps the user to manage approval, delegation, password management and its bulk task capability resolves lot of problem.

Custom connector, web service configuration and use.

4 years

Easy, I can say it's the best on the market with small amount of manpower.

No issues encountered.

No issues encountered.

Good but more skilled people required according to geographical location.

Good.

No previous solution used.

Straightforward, as it was simple with few resources needed.

Self implemented.

As far as valuable features go, one of the first ones is self-provisioning. The best thing is that our internal employees can provision their own access using the tool rather than contacting an internal group. Its built-in workflow handles all the needed approvals before it will provision the access.

The big benefit is that the end users have an easier process requesting security access. It’s a faster process for them so people get up and running faster and can do their jobs.

We’re in the middle of an upgrade with IM to 12.6. Once that’s done, we will get a better feel for what’s available; they’re deprecating some of the functionality in their provisioning manager product.

It would be nice to have someone at CA that can handle some of the more technical questions we have.

We have some stability issues. We go through waves every few months where it goes up and down lot. The product will look as if it’s available, but a request you submit will get stuck. There will be times where you can’t even log into it and it’s completely unavailable.

Our team hasn’t used their support directly, but our IT support team raises tickets and has a good working relationship with CA support. Sometimes getting a resolution is an ongoing problem. They are always helpful and there’s a good level of interaction, but we’re not necessarily always getting a solution. Sometimes CA points to our environment which could be the case, as opposed to their product.

It was so complex. For us, it was a wholesale process change in our organization, not just the solution implementation, so it was lengthy. A lot of that time was spent internally going from one provisioning model to another. We had a lot of customization requests from CA who helped.

They’re reactive to our needs but don’t really understand our environment. A more in-depth understanding of our environment would help dig deep enough to help us get to where we need to be.

They should have a handle on the role methodology that they’re going to pursue and use in their solution. That can get out of hand and become ridiculously unmanageable. That’s where we kind of jumped in and didn’t have anyone to guide us and provide an alternate perspective. We got into a methodology before understanding that’s the road we should have gone down.

I find that the propagation of identities is what is most valuable about the solution.

It would be great if they could enable social media identities. That’s the one thing we would like to have.

I've used it for five years.

The installation was OK. We had some problems with operating it, and because we use other products in the suite it made upgrading more complex. We do have a lot of other of their products also.

We’re only using it for employees, so the stability is handled very well.

We're not putting too many users into the system, so it handles this very well.

They have been very proactive.

They have been very proactive.

It was done in-house.

We have a functional need. Therefore it was considered as more of an expense rather than an investment.

We looked at Oracle Identity and Access Management Suite that was the major contender at the time.

I would be clear on what is the price for your customer and their identities. If you are going to manage partners, customers and other entities the numbers can get quite large, so it’s important to understand what you are getting.

We did a number of things in our deployment which made life more difficult on us. All in all it’s a positive relationship. The only concern we have is with the social logins and clouds.