I use the solution in my company just to open some roles for new people or maybe those who need more particulars, so we just search for the roles and apply them to those. My company had dealt with some particular comments, like who had why the tool is needed and its justification in the business. , after which the managers approved it or whoever was in the top positions. It is basically for managing user access at the end of the day.

The solution's most valuable feature is its ease of use. It has functionality that allows me to search for or compare with others.

I don't use SailPoint that much because I have a particular role in my company. Considering the time since I last used the tool, it doesn't need anything more.

The product is unable to share suggestions with users. For example, if I put something like ABC, the tool will not be able to say something that is related to it. In some other tools, if I just start with the initials, it will show me the whole thing, but with SailPoint Identity Security Cloud, I couldn't find it. If I am just searching for a role, like PR or something, or if I write PR, it should provide me with some suggestive rules, which may be two, three, five, or whatever the role numbers. I have to write the full name, and then it will appear.

I have been using SailPoint Identity Security Cloud for two years. I don't remember the version of the solution since the client who uses it will have to update it by themselves.

I did not experience any breakdowns or bugs in the product.

More than 100 people in my team use the product.

Our company's client, who uses the product, takes care of the technical support for the solution.

The product's initial setup phase is not so difficult, so it is easy. There are no installation-related issues with the product.

The solution is deployed on an on-premises model.

As per my knowledge, it runs on a paid partnership model, but I am not sure about it.

One should definitely use the product since there are no prerequisites or things that you should know. The tool is very easy to use, and there is nothing in it that you should find very difficult to understand or learn.

It is easy for a beginner to learn to use the product for the first time.

I rate the product an eight out of ten.

As an academic institution, we have HR students and third parties.

The solution’s stability and performance are good.

The primary difference fundamentally is the state of the identity over time. So, the point-in-time identity drives the identity management, and that will improve the integrity of the identity management.

The connectors should be improved.

We had issues with the stability of the solution.

The solution is very scalable.

30-50 users are using this solution.

The initial setup depends on the type of proposition.

The product’s pricing depends on strategic servers. It is affordable for us to sustain ourselves.

I recommend the solution.

Overall, I rate the solution an eight out of ten.

I use the solution in my company for any customization that needs to be done. If something is not available out of the box, assuming that sometimes one may need to do some customization, it can be done easily with SailPoint IdentityIQ.

The most valuable features of the solution are the workflow and user access, which are the tool's two important features.

The disadvantage of the tool stems in the area of upgrades, especially if you need to do a lot of upgrades in terms of versions. Suppose a user is on SailPoint IdentityIQ Version 6.0 and needs to upgrade to SailPoint IdentityIQ Version 8.0. In that case, the product takes a lot of time, and there is a need to put in a lot of effort, making it an area where improvements are required.

The solution's technical support team's response time and skills need improvement since it is an area where there are shortcomings.

I have been using SailPoint IdentityIQ for eight years. I am the product's system integrator.

It is a pretty stable solution. Stability-wise, I rate the solution a ten out of ten.

Scalability-wise, I rate the solution an eight out of ten.

I deal with the tool's customers, handling small, medium, and large businesses.

I rate the technical support a six out of ten.

Neutral

The product's initial setup phase was satisfactory for our company.

I rate the product's deployment phase a nine on a scale of one to ten points, where one is difficult, and ten means it is easy to deploy.

Depending on the infrastructure where the product is required to be deployed, the deployment process, along with the updates, can take a week's time.

The product is expensive. People need to opt for a licensing plan for one year or three years.

The maintenance requirement depends on the size of the deployment. If the product is used to serve a very large enterprise-sized organization with many users, 15 to 20 people are required to take care of the maintenance. If 50,000 is the product's user base, there is a need to have four to five people to four support the product.

The product's integration capabilities with other solutions can be described as a straightforward process that the tool offers. As long as the application exposes some kind of interface, SailPoint IdentityIQ can integrate with it.

The tool's GUI is user-friendly.

The product requires one to invest in maintenance, upgrades, and other such areas. If it is a small-scale business, I usually suggest SaaS-based systems to such companies so that you don't have to take care of the maintenance. Medium to large-sized businesses can choose SailPoint IdentityIQ.

I rate the tool an eight out of ten.

We use the solution to certify account access. SailPoint is handling compliance for account certification.

They have certifications assigned to owners.  Different appliances like Windows and Unix assign these certifications. They need to initiate certification every six months for Windows and Linux to ensure they have certified those accounts on the operating systems. Then, they will authenticate with the account owner. The account owner will then perform the initial check to determine if they should keep those accounts within the organization. Afterward, they will complete their subscription and return to their direct manager for position verification. If there are no errors or discrepancies in their source certification, the manager will sign off, and the entire association will be closed. Then, the observation owner will generate the report. This report serves as evidence for internal auditors to prove they completed the certification. It's like a search engine flow.

The UI is complex, but the background functionality is robust and well-designed to perform SailPoint IdentityIQ certifications.

The benefit of using SailPoint IdentityIQ is that it significantly reduces the workload for certification processes. Before implementing IdentityIQ, the corporation relied heavily on manual methods to gather accounts and permissions for review. Each host machine had to be checked manually to ensure account collection accuracy, followed by manually identifying accounts for certification. This entire process was labor-intensive, with human involvement at every step.

It took about a month to gather notification data and initiate the certification process. Tracking the status of certifications was challenging since it was managed through Excel, making it difficult to determine completion percentages. Once all certifications were completed,  SailPoint shifted through Excel sheets to finalize reports.

With IdentityIQ, the process is streamlined, reducing the time required for certification, and it also has an automated aggregation of accounts, assets, and groups. There's no opportunity for human error or intentional concealment of accounts, enhancing security.

SailPoint IdentityIQ could offer more options, such as free online training for partners.

I have been using SailPoint IdentityIQ for 3 years.

The product is stable.

The solution is scalable.

The support team is quite responsive and understanding. Initially, they provide prompt responses, but their answers can be quite general. They could offer more precise guidance on addressing specific issues.

Neutral

The initial setup is not straightforward and takes around a month to complete. Two persons are required to deploy the solution. An experienced person is needed to use IdentityIQ.

The implementation involves installing the application and the database on different machines. Then, we will proceed with the integration based on the data we receive from SailPoint. After that, we will discuss with the customer the connections they need to close accounts and the rules for creating accounts. 

Once this process is complete, we will check for related accounts and generate a report accordingly. This report will be sent to the responsible owner, who will be identified through SailPoint. We will assist the customer in assigning those accounts to the correct owner. Following that, we'll assist in setting up the business decision template and help the customer launch their subscription, guiding them through each step and aiding the manager in signing off on certifications.

The capabilities for intelligence analysis are quite flexible, allowing users to generate the required reports quickly. It's pretty adaptable in terms of report generation and audit search.

The IQ Connector is supported by most major packaged software, making it convenient to acquire the connector from the SailPoint marketplace. The integration process is relatively straightforward.

Maintenance is easy. 

Overall, I rate the solution a nine out of ten.

We use the solution for identity management and access governance.

We have a variety of connectors that facilitate seamless integration with SailPoint IdentityIQ, enabling you to connect with target systems. This integration allows for the reconciliation of user information and access, consolidating them under a single roof. You can conduct access governance processes efficiently

SailPoint provides functionalities for various stages, such as joiner, mover, and leaver. Additionally, it offers features for account locking, unlocking, disabling, and immediate termination, facilitating smooth user management processes. This includes handling scenarios like pre-hires and future hires and managing users who accept offers but do not join on the specified start date. With SailPoint IdentityIQ, organizations can efficiently handle these scenarios by leveraging its comprehensive identity management tools and processes suite.

SailPoint IdentityIQ is performing well. The primary purpose is to address the needs of identity management and access governance. However, competitors are advancing by offering integrated solutions encompassing access and privileged access management in a single unified platform. IdentityIQ's focus has remained primarily on identity and access governance, neglecting to expand its offerings to include these additional functionalities within its existing product. Enhancing their product by incorporating modules for access management, privileged access management, and third-party access governance could address this gap.

I have been using SailPoint IdentityIQ for 8.5 years. We are using the V8.3 of the solution.

The product is stable.

The solution is scalable.

I rate the solution’s scalability an 8 out of 10.

The initial setup is easy.

Before making a decision, it's essential to align your primary goals with the long-term roadmap of your organization. Consider factors such as whether your organization is a government or private entity and where you envision your organization heading in the next five to ten years. While cost can be a significant factor, it's important to assess the value and features offered by SailPoint IdentityIQ in relation to your organization's needs and future direction.

There have been many instances where we provided initial templates in building some of the connectors approximately eight or seven years ago. In response, my team developed a custom connector, which was reviewed and eventually incorporated into the SuccessFactors Connector by SailPoint. The previous version had limitations with subset deployments. SailPoint has introduced various solutions over time. For instance, they now handle deployment entirely, even for IdentityIQ, transitioning it into a SaaS application. SailPoint manages servers, applications, deployments, and server patches, relieving customers of these challenges. Customers access the product via a URL, focusing solely on utilizing it to address their needs. SailPoint continues to provide comprehensive solutions, including evolving IdentityIQ into a SaaS-capable platform, to support their customers' requirements.

In terms of solving identity management and access governance challenges, SailPoint IdentityIQ is certainly a strong contender. However, it's essential to clarify your specific goals—are you focused solely on identity management and access governance, or do you also require access management and privileged access management solutions?

Configuring IdentityIQ can be complex, requiring significant coding and effort, especially considering the intricacies of integrating with various target systems. The level of complexity can vary greatly depending on each system's specifications.

Overall, I rate the solution an 8 out of 10.

The solution is one of the main security products you need to control access and have visibility into what's happening in your organization. It helps with managing access to applications, ensuring governance, and obtaining certifications. 

The product's most valuable features are identity access control and access certifications. 

SailPoint IdentityIQ needs to improve its customization. It should also incorporate some standardized tools for implementation. 

I have been working with the product for seven years. 

The solution is stable as long as the implementation is correct. 

I rate SailPoint IdentityIQ's scalability an eight out of ten. 

I haven't contacted the technical support team yet. 

SailPoint IdentityIQ's usability depends on how well it is implemented. To set up the product, you must configure it like a web application. This involves setting up a web server and determining the number of servers needed based on the site's requirements. The setup process can vary in complexity depending on the client's environment. It can take a day to complete. 

SailPoint IdentityIQ is too expensive for small and medium companies. It is an expensive product. 

If a customer wants certain automation during the identity lifecycle - for example, when hiring someone, letting someone go, or moving someone from one organization to another - you can automate tasks based on various factors like their role or department. The product simplifies tasks, especially those where certain individuals require specific access levels based on their roles. With automation, administrators don't need to manually remember or assign access levels for each role or department. 

I rate the overall product a seven out of ten. 

The use case involved architecting solutions for LogLabs and Scotiabank, focusing on two main user groups: Identity and Access Management users utilizing various heterogeneous IEM platforms like Broadcom, and Active Directory users. The challenge revolved around implementing attestation and governance certification processes, requiring integration for both groups. Specifically, integrating with third-party systems for users on non-AD platforms and with AD for those utilizing it.

The primary objective was to leverage IdentityIQ for identity governance and compliance within the organization. With over two hundred thousand IdentityIQ instances in use and a continual influx, the focus was on streamlining identity governance processes, particularly for onboarding, offboarding, and conducting periodic attestations.

It effectively streamlined our user access management processes, serving as a central hub within our enterprise ecosystem. With various credentialing IdentityIQ access management solutions in place across the organization, SailPoint integrated seamlessly with these systems. It ingested events from these sources, generated reports, and initiated outgoing events and triggers to facilitate appropriate actions based on user and supervisor actions.

The policy management and risk-scoring capabilities of SailPoint IdentityIQ greatly benefited our organization. While we primarily focused on policy enforcement based on written guidelines for identity lifecycle management, we didn't extensively utilize a risk-based approach, as that fell under a separate area of resource management. However, within the policy feature set, SailPoint provided robust options. We were able to categorize users into different groups, such as office users, retail channel users, and backend users. Additionally, we could apply role-based access controls and differentiate between temporary and permanent employees, full-time and part-time staff, and those with specific time-based access requirements or temporary assignments within the organization.

The implementation of IdentityIQ significantly impacted our IT audit and compliance activities. SailPoint was introduced in response to an audit observation, as no prior system was in place and everything relied on manual processes. This lack of automation resulted in gaps and oversights. Implementing SailPoint IdentityIQ for attestation and governance effectively addressed this audit observation and closed the compliance gap.

It played a crucial role in addressing a complex identity management challenge within our company, particularly in the area of credential cleanup. Given the large user population, a dedicated team within the IAM pillar focused on this task. Before SailPoint, it was common to encounter instances where user identities remained active even after individuals had moved roles or left the company. For example, credentials associated with finance or treasury functions would still be accessible, even if the user had transitioned to a different department. Similarly, sensitive data access, such as payroll and HR systems, posed risks if not appropriately managed post-employee departure. SailPoint streamlined the process of managing these identities, effectively identifying and addressing instances where inactive accounts lingered, sometimes for extended periods, thus enhancing overall security and compliance efforts.

One of the most valuable aspects of SailPoint is its open integration interface. In my experience, it seamlessly connected with four different digital identity management solutions, offering both API and low-level code integration options. This flexibility, coupled with extensive documentation and strong support, ensured smooth integration without encountering issues like lost events or operational challenges. 

Additionally, its reporting capabilities are exceptional, providing detailed and granular insights without any issues. Reporting features are highly effective for managing user certifications and role management.

I believe SailPoint could benefit from embracing newer, no-code or low-code approaches, in addition to its already excellent integration and API capabilities. Finding integration experts for SailPoint in the North American market can be challenging, and transitioning to a no-code or low-code setup could reduce dependence on specialized skills. This shift could potentially make development and integration more user-friendly and accessible, opening up new possibilities for easier implementation and customization.

I have been working with it for almost four years.

In my experience, SailPoint IdentityIQ has been stable. While stability may be influenced by the capabilities of other parties involved, I haven't encountered any significant stability issues.

We aimed to implement SailPoint IdentityIQ across our entire enterprise, encompassing over two hundred thousand users. While we were informed that it could scale up to fifty-five to sixty thousand users with ease, scalability considerations required additional backend server resources. This scalability, however, is subject to various factors, including the complexity of integrations and the environment. Ours was particularly complex, involving integration with four distinct IdentityIQ digital identity solutions. I would rate it seven out of ten.

We plan to expand our usage of SailPoint IdentityIQ in the future, with the aim of establishing it as the central product for identity and governance across our organization.

Initially, there were numerous interactions with tech support, but after resolving some initial issues, the process became much smoother. While we faced challenges with offshore support resources, the onshore and nearshore teams provided excellent assistance. I would rate it five out of ten.

Neutral

Broadcom was previously utilized for similar purposes, but it lacked certain capabilities, particularly in terms of traceability and governance functionalities like attestation, recertification, and periodic certifications. Additionally, Broadcom faced support issues and relied on outdated technologies which presented challenges. SailPoint, on the other hand, was sought as a more contemporary and comprehensive solution to address these limitations, offering numerous advantages over Broadcom.

On a scale of one to ten, I would rate the initial setup of SailPoint as a two. It's rarely an easy process, and the ease of setup depends on the resources allocated. However, compared to my experiences with other enterprise systems, SailPoint's setup was relatively better. Its out-of-the-box integration with Broadcom and Active Directory was particularly advantageous, addressing around thirty-five to forty percent of our challenges without requiring additional customization.

The deployment timeline for the initial pilot involving two hundred and fifty users spanned approximately six months from start to finish, including user acceptance testing and production rollout. Similar to other solutions, this process comprised both technical aspects, such as deploying VMs and servers within Azure and configuring settings, as well as procedural and integration components. Integration efforts, in particular, required additional time due to complexities. The selection and onboarding of users, which involved manual processes, also contributed to the duration. However, despite the comprehensive nature of the deployment, there were no significant obstacles encountered along the way. Leveraging a third-party consultancy for implementation, specifically one proficient in SailPoint, proved beneficial as they brought in skilled consultants familiar with the product, facilitating a smoother deployment process. 

From a technological standpoint, our team consisted of two architects, three developers, and project management staff, totaling approximately ten to fourteen internal members. Additionally, we engaged external resources, ranging from four full-time to six to eight part-time personnel, depending on project demands. These resources included database roles, developers, and analysts, some of whom were pulled from Broadcom and Active Directory teams. For ongoing maintenance, a team of six individuals was allocated, with three working full-time on operational tasks and others providing support as needed. This setup ensured smooth operations and support, with dedicated personnel available for day-to-day activities and issue resolution.

I found the pricing to be relatively high. The pilot project for two hundred and fifty users over an eighteen-month period amounted to nearly two million dollars, which I considered to be a significant investment.

As an architect, I feel quite comfortable with this product from end to end. Given my positive experiences and advocacy for SailPoint, I would rate it eight out of ten.

The solution is brilliant in all aspects. SailPoint’s technical value exceeds what OpenText proposes. It is a really good product.

We faced some issues while integrating the solution with a third-party tool.

I have been working with the tool since October 2023.

The tool is stable.

The tool is very scalable. Even if the implementation exceeds the number of users decided previously, the tool will fulfill the needs and will still be stable. The solution is not suitable for small companies. The cost will be high.

The support is very good. I rate the support team an eight and a half out of ten.

Positive

The implementation is straightforward. It depends on the environment and customers’ needs. However, it is easy.

The pricing must be improved. The pricing is a little bit higher than other tools. The solution must provide different prices for different countries. All countries are not equally rich.

SailPoint IdentityIQ is more efficient than Micro Focus. We chose SailPoint IdentityIQ because it is stable and the support is good.

We are distributors. Our main competitor is Micro Focus. It is now OpenText. I will recommend the product instead of other tools. It is one of the best IAM products in the market. The price is the only issue. Overall, I rate the tool an eight and a half out of ten.