We use the solution for identity management and access governance.

We have a variety of connectors that facilitate seamless integration with SailPoint IdentityIQ, enabling you to connect with target systems. This integration allows for the reconciliation of user information and access, consolidating them under a single roof. You can conduct access governance processes efficiently

SailPoint provides functionalities for various stages, such as joiner, mover, and leaver. Additionally, it offers features for account locking, unlocking, disabling, and immediate termination, facilitating smooth user management processes. This includes handling scenarios like pre-hires and future hires and managing users who accept offers but do not join on the specified start date. With SailPoint IdentityIQ, organizations can efficiently handle these scenarios by leveraging its comprehensive identity management tools and processes suite.

SailPoint IdentityIQ is performing well. The primary purpose is to address the needs of identity management and access governance. However, competitors are advancing by offering integrated solutions encompassing access and privileged access management in a single unified platform. IdentityIQ's focus has remained primarily on identity and access governance, neglecting to expand its offerings to include these additional functionalities within its existing product. Enhancing their product by incorporating modules for access management, privileged access management, and third-party access governance could address this gap.

I have been using SailPoint IdentityIQ for 8.5 years. We are using the V8.3 of the solution.

The product is stable.

The solution is scalable.

I rate the solution’s scalability an 8 out of 10.

The initial setup is easy.

Before making a decision, it's essential to align your primary goals with the long-term roadmap of your organization. Consider factors such as whether your organization is a government or private entity and where you envision your organization heading in the next five to ten years. While cost can be a significant factor, it's important to assess the value and features offered by SailPoint IdentityIQ in relation to your organization's needs and future direction.

There have been many instances where we provided initial templates in building some of the connectors approximately eight or seven years ago. In response, my team developed a custom connector, which was reviewed and eventually incorporated into the SuccessFactors Connector by SailPoint. The previous version had limitations with subset deployments. SailPoint has introduced various solutions over time. For instance, they now handle deployment entirely, even for IdentityIQ, transitioning it into a SaaS application. SailPoint manages servers, applications, deployments, and server patches, relieving customers of these challenges. Customers access the product via a URL, focusing solely on utilizing it to address their needs. SailPoint continues to provide comprehensive solutions, including evolving IdentityIQ into a SaaS-capable platform, to support their customers' requirements.

In terms of solving identity management and access governance challenges, SailPoint IdentityIQ is certainly a strong contender. However, it's essential to clarify your specific goals—are you focused solely on identity management and access governance, or do you also require access management and privileged access management solutions?

Configuring IdentityIQ can be complex, requiring significant coding and effort, especially considering the intricacies of integrating with various target systems. The level of complexity can vary greatly depending on each system's specifications.

Overall, I rate the solution an 8 out of 10.

The solution is one of the main security products you need to control access and have visibility into what's happening in your organization. It helps with managing access to applications, ensuring governance, and obtaining certifications. 

The product's most valuable features are identity access control and access certifications. 

SailPoint IdentityIQ needs to improve its customization. It should also incorporate some standardized tools for implementation. 

I have been working with the product for seven years. 

The solution is stable as long as the implementation is correct. 

I rate SailPoint IdentityIQ's scalability an eight out of ten. 

I haven't contacted the technical support team yet. 

SailPoint IdentityIQ's usability depends on how well it is implemented. To set up the product, you must configure it like a web application. This involves setting up a web server and determining the number of servers needed based on the site's requirements. The setup process can vary in complexity depending on the client's environment. It can take a day to complete. 

SailPoint IdentityIQ is too expensive for small and medium companies. It is an expensive product. 

If a customer wants certain automation during the identity lifecycle - for example, when hiring someone, letting someone go, or moving someone from one organization to another - you can automate tasks based on various factors like their role or department. The product simplifies tasks, especially those where certain individuals require specific access levels based on their roles. With automation, administrators don't need to manually remember or assign access levels for each role or department. 

I rate the overall product a seven out of ten. 

The use case involved architecting solutions for LogLabs and a major Canadian bank , focusing on two main user groups: Identity and Access Management users utilizing various heterogeneous IEM platforms like Broadcom, and Active Directory users. The challenge revolved around implementing attestation and governance certification processes, requiring integration for both groups. Specifically, integrating with third-party systems for users on non-AD platforms and with AD for those utilizing it.

The primary objective was to leverage IdentityIQ for identity governance and compliance within the organization. With over two hundred thousand IdentityIQ instances in use and a continual influx, the focus was on streamlining identity governance processes, particularly for onboarding, offboarding, and conducting periodic attestations.

It effectively streamlined our user access management processes, serving as a central hub within our enterprise ecosystem. With various credentialing IdentityIQ access management solutions in place across the organization, SailPoint integrated seamlessly with these systems. It ingested events from these sources, generated reports, and initiated outgoing events and triggers to facilitate appropriate actions based on user and supervisor actions.

The policy management and risk-scoring capabilities of SailPoint IdentityIQ greatly benefited our organization. While we primarily focused on policy enforcement based on written guidelines for identity lifecycle management, we didn't extensively utilize a risk-based approach, as that fell under a separate area of resource management. However, within the policy feature set, SailPoint provided robust options. We were able to categorize users into different groups, such as office users, retail channel users, and backend users. Additionally, we could apply role-based access controls and differentiate between temporary and permanent employees, full-time and part-time staff, and those with specific time-based access requirements or temporary assignments within the organization.

The implementation of IdentityIQ significantly impacted our IT audit and compliance activities. SailPoint was introduced in response to an audit observation, as no prior system was in place and everything relied on manual processes. This lack of automation resulted in gaps and oversights. Implementing SailPoint IdentityIQ for attestation and governance effectively addressed this audit observation and closed the compliance gap.

It played a crucial role in addressing a complex identity management challenge within our company, particularly in the area of credential cleanup. Given the large user population, a dedicated team within the IAM pillar focused on this task. Before SailPoint, it was common to encounter instances where user identities remained active even after individuals had moved roles or left the company. For example, credentials associated with finance or treasury functions would still be accessible, even if the user had transitioned to a different department. Similarly, sensitive data access, such as payroll and HR systems, posed risks if not appropriately managed post-employee departure. SailPoint streamlined the process of managing these identities, effectively identifying and addressing instances where inactive accounts lingered, sometimes for extended periods, thus enhancing overall security and compliance efforts.

One of the most valuable aspects of SailPoint is its open integration interface. In my experience, it seamlessly connected with four different digital identity management solutions, offering both API and low-level code integration options. This flexibility, coupled with extensive documentation and strong support, ensured smooth integration without encountering issues like lost events or operational challenges. 

Additionally, its reporting capabilities are exceptional, providing detailed and granular insights without any issues. Reporting features are highly effective for managing user certifications and role management.

I believe SailPoint could benefit from embracing newer, no-code or low-code approaches, in addition to its already excellent integration and API capabilities. Finding integration experts for SailPoint in the North American market can be challenging, and transitioning to a no-code or low-code setup could reduce dependence on specialized skills. This shift could potentially make development and integration more user-friendly and accessible, opening up new possibilities for easier implementation and customization.

I have been working with it for almost four years.

In my experience, SailPoint IdentityIQ has been stable. While stability may be influenced by the capabilities of other parties involved, I haven't encountered any significant stability issues.

We aimed to implement SailPoint IdentityIQ across our entire enterprise, encompassing over two hundred thousand users. While we were informed that it could scale up to fifty-five to sixty thousand users with ease, scalability considerations required additional backend server resources. This scalability, however, is subject to various factors, including the complexity of integrations and the environment. Ours was particularly complex, involving integration with four distinct IdentityIQ digital identity solutions. I would rate it seven out of ten.

We plan to expand our usage of SailPoint IdentityIQ in the future, with the aim of establishing it as the central product for identity and governance across our organization.

Initially, there were numerous interactions with tech support, but after resolving some initial issues, the process became much smoother. While we faced challenges with offshore support resources, the onshore and nearshore teams provided excellent assistance. I would rate it five out of ten.

Neutral

Broadcom was previously utilized for similar purposes, but it lacked certain capabilities, particularly in terms of traceability and governance functionalities like attestation, recertification, and periodic certifications. Additionally, Broadcom faced support issues and relied on outdated technologies which presented challenges. SailPoint, on the other hand, was sought as a more contemporary and comprehensive solution to address these limitations, offering numerous advantages over Broadcom.

On a scale of one to ten, I would rate the initial setup of SailPoint as a two. It's rarely an easy process, and the ease of setup depends on the resources allocated. However, compared to my experiences with other enterprise systems, SailPoint's setup was relatively better. Its out-of-the-box integration with Broadcom and Active Directory was particularly advantageous, addressing around thirty-five to forty percent of our challenges without requiring additional customization.

The deployment timeline for the initial pilot involving two hundred and fifty users spanned approximately six months from start to finish, including user acceptance testing and production rollout. Similar to other solutions, this process comprised both technical aspects, such as deploying VMs and servers within Azure and configuring settings, as well as procedural and integration components. Integration efforts, in particular, required additional time due to complexities. The selection and onboarding of users, which involved manual processes, also contributed to the duration. However, despite the comprehensive nature of the deployment, there were no significant obstacles encountered along the way. Leveraging a third-party consultancy for implementation, specifically one proficient in SailPoint, proved beneficial as they brought in skilled consultants familiar with the product, facilitating a smoother deployment process. 

From a technological standpoint, our team consisted of two architects, three developers, and project management staff, totaling approximately ten to fourteen internal members. Additionally, we engaged external resources, ranging from four full-time to six to eight part-time personnel, depending on project demands. These resources included database roles, developers, and analysts, some of whom were pulled from Broadcom and Active Directory teams. For ongoing maintenance, a team of six individuals was allocated, with three working full-time on operational tasks and others providing support as needed. This setup ensured smooth operations and support, with dedicated personnel available for day-to-day activities and issue resolution.

I found the pricing to be relatively high. The pilot project for two hundred and fifty users over an eighteen-month period amounted to nearly two million dollars, which I considered to be a significant investment.

As an architect, I feel quite comfortable with this product from end to end. Given my positive experiences and advocacy for SailPoint, I would rate it eight out of ten.

The solution is brilliant in all aspects. SailPoint’s technical value exceeds what OpenText proposes. It is a really good product.

We faced some issues while integrating the solution with a third-party tool.

I have been working with the tool since October 2023.

The tool is stable.

The tool is very scalable. Even if the implementation exceeds the number of users decided previously, the tool will fulfill the needs and will still be stable. The solution is not suitable for small companies. The cost will be high.

The support is very good. I rate the support team an eight and a half out of ten.

Positive

The implementation is straightforward. It depends on the environment and customers’ needs. However, it is easy.

The pricing must be improved. The pricing is a little bit higher than other tools. The solution must provide different prices for different countries. All countries are not equally rich.

SailPoint IdentityIQ is more efficient than Micro Focus. We chose SailPoint IdentityIQ because it is stable and the support is good.

We are distributors. Our main competitor is Micro Focus. It is now OpenText. I will recommend the product instead of other tools. It is one of the best IAM products in the market. The price is the only issue. Overall, I rate the tool an eight and a half out of ten.

We use SailPoint IdentityIQ for identity and life cycle management management for devices. It helps us with access certification, password management, and other essential functionalities.

SailPoint IdentityIQ has a good and straightforward user interface. They also have a lot of resources and documentation available to understand the process.

The product’s cloud offering could be flexible.

We have been using SailPoint IdentityIQ for six to seven months.

I rate the product’s stability an eight out of ten.

We have large-scale institutes as our customers for SailPoint IdentityIQ. I rate its scalability an eight out of ten.

The technical support team responds within an acceptable time frame and is knowledgeable.

Neutral

I used Oracle for a three-year-long project. I encountered constant challenges with incompatibility, or bugs and glitches using it.

I rate the initial setup process a seven out of ten. It takes a couple of days to complete.

The product is expensive. I rate its pricing an eight out of ten.

I rate SailPoint IdentityIQ an eight out of ten. I recommend it to others as it is used widely and has a knowledge base. I advise organizations to streamline their processes rather than to customize the products.

We use SailPoint IdentityIQ for identity governance and access management. There is no other vendor as good as this product. 

I find the built-in connectors, lifecycle management, certification, and recertification features to be the most valuable.

Access management could be improved. SailPoint is known for its IT identity governance capabilities, but its access management features in one platform.

Comparing SailPoint's access management to that of competitors like CyberArk and Okta, there's a clear gap.

Additionally, regarding privilege access management, there's potential for improvement. If SailPoint can develop a connector for RPAQ, they could also extend their capabilities by adding more access management features and modules.

I have been using it for three years. I am currently using version 8.3.

We actually have a lot of challenges with some of our applications. Some of them are not working properly, and the issues are not fixed. We are encountering some problems.

Scalability is hard, especially when you are doing it in real time. But, it would be eliminated once we have the first version of IdentityNow. So, the main goal for now is just to eliminate maintenance costs or run the entire infrastructure. That's why we plan to migrate it to the SaaS version of SailPoint.

We have more than 10,000 end users. We use it daily, 24/7 operation.

Initially, I had difficulties, but with time, I gained experience. Especially integrating legacy applications like ARPAQ. Over time, it became easier, but integrating legacy apps remains a typical issue.

In terms of user experience, I don't have any complaints.  We are planning to migrate to the cloud.

We did it in-house with the help of a third-party vendor experienced in deploying SailPoint.

The deployment took a couple of weeks in a test environment before going into production.

We require maybe around four people because, in our company, we have different roles and responsibilities. So, from another perspective, from the system administrator, we require around four resources.

It is affordable licensing. 

Currently, we are looking for another option, which is EmpowerID.

Overall, I would rate the solution a nine out of ten. If you want to start, go better directly to the cloud, instead of installing it on-prem.

We use the solution for identity and access governance. It is an automation tool for onboarding and offboarding processes.

It has multiple good features. It provides us with the information we need for onboarding any user or application, provisioning, de-provisioning, and other business processes. The product is easy and convenient to use. It has good features. The tool is quite stable and user-friendly. We can easily customize the processes.

The product must improve its support.

I have been using the solution for three years.

The tool is reliable and stable.

We have 1000 people using the solution in our organization. It is suitable for a small organization with less than 5000 employees.

The initial setup is easy.

The solution is not cheap.

I would recommend the product to others. The solution is easy to deploy. We get a lot of applications out of the box. Overall, I rate the solution a seven out of ten.

I'm working on the implementation. I have encountered various use cases for the solution. Among the most common are clients using life cycle management, role-based access control, policy evaluation, and risk scores. Clients have widely utilized password reset functionality. Recently, contractor onboarding directly from IdentityIQ has emerged as a use case.

Additionally, clients have used the platform for access management tasks such as requesting new access, adding or removing accesses, and creating accounts. Furthermore, integrations with ServiceNow have become viable.

The most powerful feature of the solution is its platform-based approach. Unlike other solutions, this tool offers a high level of customization. It is an open and flexible platform, allowing users to tailor it to their needs. This ability to customize and adapt the solution to individual requirements makes the solution stand out as a powerful product.

There is a need for further enhancements, specifically in the multifactor authentication capabilities.

I have been using the solution for the past five years. I’m using the most recent version.

The solution is highly stable.

The solution is scalable and super flexible. I have 50,000 users for the product. I rate it a ten out of ten.

There has been a return on investment.

The success of the implementation depends on customers knowing exactly what is needed from the solution. Assuming that the consultant or the product will handle everything is not the right approach. The customers should know what they need. Overall, I rate the solution a nine out of ten.