IBM Tivoli Access Manager [EOL] vs Idira Privileged Access Manager comparison

Why PeerSpot?

The compared IBM and Idira by Palo Alto Networks solutions aren't in the same category. Idira by Palo Alto Networks is ranked #1 in PAM , with an average rating of 8.6, and holds a 8.6% mindshare. Additionally, 93% of IBM users are willing to recommend the solution, compared to 95% of Idira by Palo Alto Networks users who would recommend it.

IBM Tivoli Access Manager [...

Read 29 IBM Tivoli Access Manager [EOL] reviews

93% willing to recommend

Idira Privileged Access Man...

Read 230 Idira Privileged Access Manager reviews

25,894 Views
10,617 Comparison Views

95% willing to recommend

IBM Tivoli Access Manager [...

Idira Privileged Access Man...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between IBM Tivoli Access Manager [EOL] and Idira Privileged Access Manager based on real PeerSpot user reviews.

Find out what your peers are saying about Okta, Microsoft, Cisco and others in Single Sign-On (SSO).

To learn more, read our detailed Single Sign-On (SSO) Report (Updated: August 2026).

Buyer's Guide

Single Sign-On (SSO)

August 2026

Download the complete report

Helped 913,683 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

IBM Tivoli Access Manager [...

Average Rating

8.0

Reviews Sentiment

3.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Idira Privileged Access Man...

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

230

Ranking in other categories

User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)

Featured Reviews

it_user711612

Senior Consultant at a insurance company with 1,001-5,000 employees

Reverse proxy provides central control over authentication and authorization.

It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…

Read full review

Singaravelu C

CyberArk Engineer at Tata Consultancy

Provides full visibility into user activity and ensures secure end-to-end access across critical systems

In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Several SSO methods are supported out of box, federation based SSO (SAML / Oauth / OpenID etc) setup is easy, performance and scalability are very good, and the internal STS token service can be used for custom SSO tokens."

"It is one of the best products in the present market in the area of access management."

"It is a totally secure way of accessing clients through various application portals for more than ten EU countries, just by using single sign-on."

"Since its birth it is an unbelievable stable product."

"Before the solution was implemented it took around 2-3 weeks to get all the necessary account information for a new employee in my organization, and since implementation this now only takes a few minutes."

"The Verify feature: A push method which customers are going for."

"It has helped them to improve and control web and mobile application security."

"Capabilities of advanced security are enhanced to support strong, flexible authentifications and authentications based on risks as well as critical internet vulnerabilities."

More IBM Tivoli Access Manager [EOL] pros

"CyberArk is a very important tool for my organization."

"CyberArk Privileged Access Management's most valuable features are primarily its password vault functionality, specifically CyberArk's Core Privileged Manager and Privileged Session Manager."

"The voice technology is very good."

"PSM (Privilege Session Manager."

"The most valuable feature I find in CyberArk Privileged Access Manager is that we can record the sessions. It provides flexible workflows. I can change the workflow to specify if it needs one approval or two approvals, and I can approve my peer."

"The technical support for this solution is very good. If I was to rate it on a scale of one to five, I would give it a five."

"One of the best features of CyberArk Privileged Access Manager is the capability of Privileged Session Manager (PSM) because it provides visibility into user activities, audit ability, and traceability."

"Identity and access management are fundamental in cybersecurity."

More Idira Privileged Access Manager pros

Cons

"The self-service portal needs improvement."

"What I don’t particularly like is the flow duration."

"Yes, because there are so many moving parts it can often be difficult getting it right first time."

"The TAMeB policy server is not scalable."

"It was complex for us as we have multiple domains."

"The whole product could be made into one suite instead of multiple components which are essentially a part of the same infrastructure."

"Redundant Policy servers had to be manually configured using LB."

"The profiling element is incredibly robust, but also equally as complex, it requires an off-site course to be able to understand the context or the plethora of options available."

More IBM Tivoli Access Manager [EOL] cons

"The technical support is very poor."

"We found the initial setup quite difficult. There were a lot of errors and we found the process to be a bit complex."

"It could be more user-friendly. Sometimes I encounter issues, and I do not know what the issue is."

"CyberArk has two disadvantages; the first is that it's insanely expensive and the other is it's very complex."

"Three-year support (unlimited case and call support) is free with license purchase but I would say sometimes it's not sufficient to resolve the issues with this model."

"There are upwards of six components you need to set it up. And you might need anywhere from two to five servers. It takes some work to set that up, especially in a larger environment."

"They could improve CyberArk Privileged Access Manager by providing more reports. If I need to know the 10 most-used accounts for this week, that functionality can be made available in the reports."

"The solution that they proposed was not straightforward because of the backend processes of CyberArk."

More Idira Privileged Access Manager cons

Pricing and Cost Advice

"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."

"Compared to other solutions, it is costly."

"Its price is high. I have also worked with Delinea. CyberArk is comparatively expensive compared to other PAM solutions, such as Delinea, especially during renewal."

"It's expensive, certainly. But CyberArk is the leader in the market with regards to privileged access management. You pay a lot, but you are paying for the value that is being delivered."

"I'm a technician so I don't handle the licensing for CyberArk Privileged Access Manager, but I know that the price for the core license is about €140 per year. There's another type of license, the external vendor license, and that's about €600 and you can manage twenty devices. From what I know, the price for one device in a subscription is about €65 per year. You can buy the CyberArk Endpoint Privilege Manager too, or you can buy some other application or application license with CyberArk Privileged Access Manager, but all other features, such as the Analytics Server is included in the basic CyberArk license. With WALLIX, you need to buy separate licenses for the features."

"The main problem for the tool is its licensing. I work for a really big company. When you try to develop this as a service, usually you work with leverage teams who are formed with dozens of members. You might dedicate one FTE, or less, for something, e.g., an antivirus administrator. You might have half an FTE's effort dedicated to administering the antivirus, but then you have a team of about 30 users who might access that ticket. The problem is that CyberArk eliminated the possibility of concurrent users years ago. This is a big problem for companies who work with leverage teams. You need to pay for everyone. 40 licenses are used by 20 or 30 people. This is a big problem because licenses are not precisely cheap."

"CyberArk Privileged Access Manager is on the expensive side. It is very expensive."

"I believe that this solution is priced well. It's the market leader and I think that it's the best solution."

"The price of this solution is quite reasonable."

More Idira Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Single Sign-On (SSO) solutions are best for your needs.

See recommendations

913,683 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

15%

Construction Company

12%

Financial Services Firm

12%

Comms Service Provider

Outsourcing Company

13%

Financial Services Firm

11%

Manufacturing Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	2
Large Enterprise	18

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	42
Large Enterprise	175

Questions from the Community

Ask a question

Earn 20 points

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...

See all answers

What needs improvement with CyberArk Privileged Access Manager?

I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...

See all answers

Comparisons

Symantec Siteminder vs IBM Tivoli Access Manager [EOL]

Compared 12% of the time

Okta Platform vs IBM Tivoli Access Manager [EOL]

Compared 9% of the time

SailPoint Identity Security Cloud vs IBM Tivoli Access Manager [EOL]

Compared 8% of the time

Keeper Enterprise Password Manager vs IBM Tivoli Access Manager [EOL]

Compared 5% of the time

Idira Identity vs IBM Tivoli Access Manager [EOL]

Compared 5% of the time

More IBM Tivoli Access Manager [EOL] Competitors

Safeguard by One Identity vs Idira Privileged Access Manager

Compared 4% of the time

Teleport vs Idira Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs Idira Privileged Access Manager

Compared 3% of the time

Delinea Secret Server vs Idira Privileged Access Manager

Compared 2% of the time

NetWitness Platform vs Idira Privileged Access Manager

Compared 2% of the time

More Idira Privileged Access Manager Competitors

Product Reports

Buyer's Guide

IBM Tivoli Access Manager [EOL]

September 2026

Download IBM Tivoli Access Manager [EOL] product report

Buyer's Guide

Idira Privileged Access Manager

September 2026

Download Idira Privileged Access Manager product report

Also Known As

Tivoli Access Manager, IBM Security Access Manager

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

Overview

IBM Tivoli Access Manager is a robust and secure centralized policy management solution for e-business and distributed applications. IBM Tivoli Access Manager WebSEAL is a high performance, multi-threaded Web server that applies fine-grained security policy to the Tivoli Access Manager protected Web object space. WebSEAL can provide single sign-on solutions and incorporate back-end Web application server resources into its security policy.

IBM

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks

Sample Customers

Essex Technology Group Inc.

Rockwell Automation

Find out what your peers are saying about Okta, Microsoft, Cisco and others in Single Sign-On (SSO). Updated: August 2026.

DOWNLOAD NOW

913,683 professionals have used our research since 2012.

We monitor all Single Sign-On (SSO) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.