Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs SAP Identity Management comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Privileged Access ...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
224
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
SAP Identity Management
Average Rating
7.8
Reviews Sentiment
5.9
Number of Reviews
14
Ranking in other categories
User Provisioning Software (6th), Identity Management (IM) (14th)
 

Mindshare comparison

While both are Identity and Access Management solutions, they serve different purposes. CyberArk Privileged Access Manager is designed for Privileged Access Management (PAM) and holds a mindshare of 17.1%, down 22.3% compared to last year.
SAP Identity Management, on the other hand, focuses on Identity Management (IM), holds 2.5% mindshare, down 3.1% since last year.
Privileged Access Management (PAM)
Identity Management (IM)
 

Featured Reviews

Abdul Durrani - PeerSpot reviewer
Enables granular and secure access with just-in-time access and Zero Trust model
CyberArk provides a good amount of control over access types. However, as a future enhancement, having additional features for cross-platform integration would be beneficial. It would be good to have integrations with other tools and firewalls, such as Zscaler and CrowdStrike. Although I am not fully aware of recent updates, more cross-platform integration would be valuable. A SOC analyst would like to have centralized access in terms of information flowing in even for privileged access management. They would like to have control over everything instead of opening four to five tabs for different sorts of information. Cross-platform integration would help with that. Customers also want CyberArk's pricing to be better so that they can implement it further and have more licenses. Implementing a privileged access management solution can be challenging. It would be great if CyberArk could provide recommendations based on the compliance standards of an organization. It would help system admins ensure that all the required ports are closed and the systems are being managed properly. If any system is not being used anymore, any ports opened for that system need to be closed. Having such recommendations would be helpful.
Kiril Petkov - PeerSpot reviewer
Stable, especially if you're an experienced user and is suitable for managing access rights for accounts, process sharing, and file sharing, but it isn't straightforward to use or maintain
I'm not so happy about the features provided by SAP Identity Management, but I'm not sure where the problem lies, if it's a product issue, an issue with its deployment, or both. I find SAP Identity Management complicated to use. Maintaining it is also complex. The solution is integrated with only two core systems, so it's not compatible with all applications in terms of providing single sign-on, which makes no sense to me, so this is another area for improvement in SAP Identity Management. Still, the issue could be with the supplier my company is working with, as that supplier provides consultancy and deployment services. It's a popular, experienced, and well-ranked supplier in the local market. However, it's still not guaranteed that the business requirements have been understood correctly and that the deployment was done properly. What I'd like to see in SAP Identity Management in its next release is a more innovative way to use it for handling all access rights rather than having to use different products.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"CyberArk Privileged Access Manager's main benefit is it provides secure access to our servers. There are features to capture the user activity, it provides video recording processing. If the users are logged in to the server, we can see what activities they are performing. It's a very nice tool for Privileged Access Management. They have plenty of useful services and the solution has fulfilled our needs."
"CyberArk Privileged Access Manager has helped our organization remain compliant in the privileged access management space."
"One of the best features of CyberArk Privileged Access Manager is the capability of Privileged Session Manager (PSM) because it provides visibility into user activities, audit ability, and traceability."
"CyberArk probably has probably the best vault on the market because of the multiple layered security and each password getting its own encryption."
"Considering all those factors and being the best tool in the market for Privileged Access Management, it is recommended."
"It is very simple to use."
"I find the discovery feature, which includes credential management, session management, monitoring, and remediation within a session, to be very valuable."
"Password Vault's policy configuration is very good - when you receive an attack, you can segment the structure of the project in order to isolate parts or users."
"The tool's most valuable features are its access control and approval of access requests. The self-service password reset feature is efficient. Role management capabilities streamline user access by assigning and revoking roles."
"What I like about SAP Identity Management is that it's stable for experienced users and suitable for access management, not just for SAP accounts, but for Active Directory, including file sharing and process sharing."
"The setup process is straightforward."
"What I found most valuable in SAP Identity Management is process automation. The solution also gives transparency about what is happening and why which I find beneficial. Another feature I found valuable in SAP Identity Management is integration. It has very good integration."
"It provides basic automatic user administration and role provisioning to save time."
"Rather than implement a basic SSO, this solution assisted us with setting up two-factor authentication."
"What's most valuable in SAP Identity Management is that it's easily an out-of-the-box solution for connectivity with SAP applications. We do not have to do any customizations, and this makes the solution very compatible with most SAP applications. SAP Identity Management is also very user-friendly."
"The most valuable features of SAP Identity Management are business roles and automated user provisioning."
 

Cons

"The initial setup has room for improvement to be more straightforward."
"Pricing is a concern for me because it is not very user-friendly for startups, new users, or very small organizations."
"The initial setup of CyberArk Privileged Access Manager difficulty depends on the environment that you are implementing it into. However, it typically is simple."
"This is probably a common thing, but they do ask for a lot of log files, a lot of information. They ask you to provide a lot of information to them before they're willing to give you anything at all upfront. It would be better if they were a little more give-and-take upfront: "Why don't you try these couple of things while we take your log files and stuff and go research them?" A little bit of that might be more helpful."
"One area for improvement is the user interface. It needs significant enhancements."
"Sometimes the infrastructure team is hesitant to provide more resources."
"The reporting should be improved. There should be more customization."
"We require IAM (identify and access management) capability at the administrator level because we need more identification."
"SAP Identity Management can improve risk analysis and authority checks."
"I have encountered issues with the host authentication feature."
"It needs to have the SSO for the HANA modules that SAP is releasing."
"The pricing could be better."
"Research and marketing need to be improved."
"What needs improvement in SAP Identity Management is its compatibility with third-party applications. We'd like to get connectors or plugin settings to make it easier to manage other applications, whether SAP or non SAP applications. As SAP Identity Management is not compatible with non SAP applications, some of the clients are looking for other IDM applications such as SalePoint and Saviynt, so this is an issue we've observed in the solution."
"For SAP support in Brazil, everything is in English, which poses a difficulty for many customers."
"A lack of startup connectors to different systems, and could have better connectors for SAP IDM."
 

Pricing and Cost Advice

"CyberArk DNA is free if you purchase the CyberArk solution. There is no additional charge for CyberArk DNA, which is great."
"The cost is high compared to other products."
"CyberArk Enterprise Password Vault is a very expensive product."
"If you are looking at implementing this solution, buy the training and go to it."
"The product's licensing is yearly. I would rate the solution's pricing a six out of ten."
"The pricing is slightly higher compared to other solutions, but it is reasonable because there are better security features."
"Generally, I don't get involved in the licensing or the purchasing side of it, but I do know that the licenses are expensive."
"I would rate the cost of CyberArk Privileged Access Manager seven out of ten with ten being the most expensive."
"When evaluating the price of any product, I first look at how it meets my business requirements and if it meets requirements adequately and predictively. Currently, I don't see this from SAP Identity Management, so pricing for it is expensive, in my opinion."
"I rate the solution's pricing a four out of ten."
"The licensing cost varies depending on the specific requirements and deployment size."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
860,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
18%
Financial Services Firm
14%
Computer Software Company
13%
Manufacturing Company
7%
Manufacturing Company
15%
Computer Software Company
11%
Energy/Utilities Company
8%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What do you like most about SAP Identity Management?
The tool's most valuable features are its access control and approval of access requests. The self-service password reset feature is efficient. Role management capabilities streamline user access b...
What needs improvement with SAP Identity Management?
I have encountered issues with the host authentication feature.
What is your primary use case for SAP Identity Management?
Our clients utilize the tool to automate user provisioning and manage identity, security, and user roles within their IT environment. It is configured as a tenant for this purpose, and it includes ...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
SAP NetWeaver Identity Management, NetWeaver Identity Management
 

Overview

 

Sample Customers

Rockwell Automation
State of Indiana, Automotive Resources International (ARI), Alliander N.V., Chemion Logistik GmbH, Seoul National University Bundang Hospital (SNUBH)
Find out what your peers are saying about CyberArk, Delinea, One Identity and others in Privileged Access Management (PAM). Updated: June 2025.
860,592 professionals have used our research since 2012.