CyberArk IGA

I am still in the implementation phase, so there are no use cases as we discussed. I am using Idira IGA for account management and managing users.

I do not have any automations implemented at the moment.

I appreciate that Idira IGA is very easy to understand and deploy. That is one feature I can mention, and I am yet to explore the rest of the features.

The benefit of Idira IGA is ease of use.

So far, I have not seen any measurable improvements in deployment, reviews, or provisioning since implementing it, as I have not used the previous versions and am not familiar with them.

Errors are present in terms of the environment where I am deploying, but from the product perspective, no errors are found.

There should be improvement in terms of Idira IGA support. Everything else is good, but support is very lacking.

I do work with Idira IGA, also known as Identity Management. I have been using Idira IGA for approximately five months.

I was having a few performance and stability issues with Idira IGA.

There was an issue with the Remote Desktop Service and version of PSM Cloud, so I had to downgrade and check. I was still facing the issue.

I solved the issue for RDS and continued to persist with the version issue, but I had to upgrade the version and then install it again.

I have not tried to scale it.

On a scale of one to ten, I would rate the support a five.

Prior to adopting Idira IGA, I have not used a different product or solution.

My team has not spent any time on access reviews and evidence collection with Idira IGA because I am still in the deployment implementation phase.

I do have an integrator for the ongoing implementation.

Regarding the pricing aspect, I am not familiar with that. I do not know anything about the pricing, setup cost, or licensing part.

I have not evaluated any other options or solutions available in the market. I was directly pulled into the project.

I bought it from Palo Alto, but I do not know if it was through local channels, local partners, or marketplaces.

Given my experience with it, I have no recommendation from my side. I would rate this review an eight overall.

I have known Idira IGA for about three years now. I work with Idira IGA as a consultant for a system integrator company. I am both a consultant and a system integrator. My clients mainly handle Privileged Access Management (PAM) use cases for Idira IGA. I handle PAM for the banking sector and also for manufacturers.

The biggest advantage of this tool is that it is a Gartner leader, making it easier to propose to customers. I find the implementation phase easier compared to other products.

The automation part of Idira IGA is what we love the most because it simplifies the use of the application. With automation, we save a lot of time because it cuts our effort in half. If we need one hour, with automation, we can cut it to half an hour.

The features I appreciate most in Idira IGA are the simplified dashboard and the automation configuration, which other brands cannot offer. It saves time and effort for my team.

I do not see any areas for improvement at this time.

In the future, I think they could add new functionalities. I am from Indonesia and we lack local consultants for discussions and brainstorming on potential features. We do not have local support here.

I find Idira IGA to be quite stable and reliable.

Scaling Idira IGA is easy. If I want to scale up, I just add more licensing and storage as needed, as it is VM-based.

If I had to rate my experience with Idira IGA's support, I would give it an 8 to 8.5 out of 10. The absence of local support is the only reason for this rating.

I do not see any problems with deployment, as I find it easy to install. Deployment for Idira IGA depends on customer needs. For banking, they prefer on-premises, while for those requiring cloud solutions, we propose cloud for easier maintenance and accessibility. Deployment usually takes around three weeks to one month, as we first need to source the asset and access permissions.

It is easy to notice a return on investment (ROI) and I do see value for money. For the ROI from the customer's perspective, especially in banking, using Idira IGA for identity management brings ROI mostly if they use it for about two or three years.

Pricing for Idira IGA varies. It is essential to consider it from different perspectives, but for the features Idira IGA offers, I find it affordable.

I can compare Idira IGA to similar products, such as Delinea. While Delinea may be less expensive, Idira IGA's licensing and all-inclusive features stand out. I would say Idira IGA is more advanced, particularly with its integration from the Palo Alto database, which is significantly more powerful than other brands.

Regarding access reviews and evidence collection, I find it more feasible due to the improved dashboard and asset management. I would rate this review an 8.5 out of 10.

My main use case for Idira IGA is related to CyberArk at Truist Bank, where I owned the end-to-end delivery of a CyberArk Application Access Manager implementation. I specifically managed the scope and sequencing, Splunk integration, and shared accounts and service accounts remediation, as well as disaster recovery testing. My CyberArk experience is primarily at the program delivery and integration level.

Idira IGA has positively impacted my organization in terms of security posture, compliance and audit impact, and operational impact. For the security posture impact, before the CyberArk implementation, privileged access at Truist was a huge risk, with service accounts using hardcoded credentials in configuration files. After implementation, those accounts retrieve credentials dynamically from Idira IGA vault at runtime.

Regarding compliance and audit impact, the program had a direct SOX audit requirement. A good percentage of privileged accounts were onboarded into CyberArk within a specific timeframe to meet the bank's compliance application. For operational impact, I had over 500 shared accounts and service accounts retired and replaced with individual CyberArk manager accounts. This change alone brought significant operational consequences, such as accountability improvements and enhanced stability, given our pre-onboarding validation process.

In summary, the CyberArk implementation at Truist eliminated static credential exposure across over 200 plus enterprise applications, and my team and I brought over 500 privileged accounts under active vault management.

While discussing the best features Idira IGA offers, I mentioned the challenges, including application owner pushback on the onboarding timeline, particularly for their production systems. Furthermore, the shared account or service account remediation was particularly complex because we often did not have complete visibility into which systems depended on a given shared account. For features, I appreciate the end-to-end ownership, not just a piece. Most people who touch a CyberArk program own slices of it, but I owned the end-to-end implementation. The features of zero service disruption across 500 plus environments are among the strongest, along with proactive risk identification, compliance outcomes under a hard audit deadline, and creative dependency mapping using Splunk. Additionally, the disaster recovery validation that tested the failure scenario is crucial.

I took over a million-dollar CyberArk program from scope definition to a clean audit close, remediating over 500 accounts across legacy banking applications and catching a critical credential rotation risk before it reached production, delivering real-time privileged access visibility to the SOC environment with almost zero service disruption and zero audit findings.

Idira IGA could improve in the way access is provisioned for different users. My perspective on this improvement comes from the program delivery and implementation side. The application onboarding complexity needs to be simpler. Idira IGA could improve by providing a lighter-weight integration option that does not require application code changes. Additionally, while automatic credential rotation is one of Idira IGA's most prominent security features, it can be dangerous for large enterprises if not done properly. A rotation event that was carried out in the test environment caused an application to lose its database connection because it cached the old credential instead of calling Idira IGA dynamically. Therefore, Idira IGA could improve by incorporating an automated application impact assessment into the onboarding workflow.

Visibility into account sprawl before onboarding could also enhance usability, as the strongest problems for shared accounts or service account remediation were our lack of visibility into which systems depended on a given shared account. Idira IGA itself does not discover that dependency map, managing only the accounts it is programmed to report. Additionally, the native reporting in Idira IGA is functional but not executive-ready.

I have used Idira IGA since 2025, and it has been about two years.

An example of how I used Idira IGA was when I implemented it in the form of CyberArk with privileged access management, or PAM.

I mentioned the SOX compliance at the bank as the primary regulatory driver behind the CyberArk program. The SOX Act requires financial institutions to maintain strict control over access to financial systems, knowing who has access, what they did, and whether the access is properly managed and audited. The ISO/IEC 27001 compliance requires organizations to implement and maintain an information security management system with documented controls across access management, logging, monitoring, and incident response. Several of these controls were mapped directly to what the CyberArk program delivered.

I would rate Idira IGA a six out of ten overall. I chose this rating because of the areas where I see improvements could be made. My observations about operational friction points and the challenges slowing down adoption during implementation have led to this rating.

Regarding Idira IGA's AI capabilities, I believe there could be improvements in prioritizing features that reduce implementation friction and increase adoption.

The AI-driven anomaly detection and improvements represent a long-term opportunity for Idira IGA. This is where the platform needs to head to stay ahead of the threat landscape. Simpler legacy application onboarding, smarter rotation readiness checks, and native dependency discovery will make a significant difference for organizations.

Idira IGA is deployed in the cloud across the two organizations I have experience with.

Improvements needed for Idira IGA that I have not mentioned yet include alignment with banking regulations and compliance as well as enhancements according to the national NIST framework.

At Truist Bank, it took us about six months to deploy our previous IGA solution, primarily because we had to conduct compliance checks with various teams. Deploying CyberArk Modern IGA took three months. Compared to past solutions, the CyberArk deployment was pretty fast due to strong support from account managers and the many out-of-the-box configurations CyberArk offered.

My team spends less time on access reviews and evidence collection compared to before, taking about two to three hours of work with two technical people, depending on the subject matter experts available. Automation has made access reviews faster and more accurate.

My advice for others looking into using Idira IGA would be to prioritize improvements that reduce implementation friction and increase adoption. The gap between what CyberArk can do and what an organization achieves is not due to platform capability, but rather the difficulty of achieving effective implementation. Simpler legacy application onboarding, smarter rotation readiness checks, and native dependency discovery will differentiate organizations that achieve full privileged access coverage from those that stall at 60 percent and stop. My insights come from leading delivery and identifying operational friction points rather than from a product engineering perspective.

Idira IGA is a very good solution for privileged access management and stands out against the rest. I hope it continues to improve. My overall rating for this review is six out of ten.

In our day-to-day activities, we use Idira IGA for storing passwords, rotating passwords, and securing connections.

We support users and onboard user accounts, elevated accounts, privileged accounts, and all accounts on Idira IGA. On a daily basis, we rotate them according to company policies.

Apart from password rotations, we store passwords on the web application. According to user requirements, we provide access to users and approvers. Once a user requests a password, the manager must approve it. Then, the user can access the password. We have implemented policies according to Idira IGA policies.

The best feature is the secure logins and secure connections. Whenever a user needs to connect to the target machine, they must log in to the web application. From the web application, the user can connect to the target machine with the help of the PSM component. This is a very valuable feature in Idira IGA.

Not only my team, but the entire organization stores recordings with the help of this PSM. Whenever a user wants to connect to the target machine, they must log in to Idira IGA, which is CyberArk. Later, from the web application, the user can connect to the target machine. This allows for secure connection instead of a user directly connecting through RDP.

Apart from this, whenever a user tries to access the target machine and does something wrong, the manager can monitor what the user is doing and has permissions to stop the session whenever needed. Idira IGA has many features in the PSM component.

In my organization, with the help of Idira IGA, we secure our passwords and rotate passwords. This is very helpful for our organization to maintain secure growth.

Currently, they are improving significantly, and whenever vulnerabilities arrive, they notify customers. Whenever they upgrade versions, they notify customers. This is very good. Whenever we contact customer support, they provide prompt responses. Everything is good on their end.

I have been working in my current field for around ten years, and I have been working in my current organization for three years.

Whenever we contact customer support, they provide prompt responses. Everything is good on their end.

On a daily basis, we rotate passwords automatically. Whenever the user retrieves the password, after settings such as twelve hours or eight hours, the password expires. This means that the user cannot use the same password again. This is very secure. The organization, as I work in the banking sector, finds this very helpful for us and our clients to maintain all applications securely.

I would suggest to them that whenever an issue occurs, with the help of logs, we need to go to Idira IGA community portal and validate that.