IBM Tivoli Access Manager [EOL] vs Idira Privileged Access Manager comparison

The compared IBM and Idira by Palo Alto Networks solutions aren't in the same category. Idira by Palo Alto Networks is ranked #1 in PAM , with an average rating of 8.6, and holds a 9.2% mindshare. Additionally, 93% of IBM users are willing to recommend the solution, compared to 95% of Idira by Palo Alto Networks users who would recommend it.

IBM Tivoli Access Manager [...

Read 29 IBM Tivoli Access Manager [EOL] reviews

93% willing to recommend

Idira Privileged Access Man...

Read 230 Idira Privileged Access Manager reviews

23,988 Views
9,835 Comparison Views

95% willing to recommend

IBM Tivoli Access Manager [...

Idira Privileged Access Man...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between IBM Tivoli Access Manager [EOL] and Idira Privileged Access Manager based on real PeerSpot user reviews.

Find out what your peers are saying about Okta, Microsoft, Cisco and others in Single Sign-On (SSO).

To learn more, read our detailed Single Sign-On (SSO) Report (Updated: July 2026).

Buyer's Guide

Single Sign-On (SSO)

July 2026

Download the complete report

Helped 908,800 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

IBM Tivoli Access Manager [...

Average Rating

8.0

Reviews Sentiment

3.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Idira Privileged Access Man...

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

230

Ranking in other categories

User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)

Featured Reviews

it_user711612

Senior Consultant at a insurance company with 1,001-5,000 employees

Reverse proxy provides central control over authentication and authorization.

It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…

Read full review

Atul-Gujar

CyberArk manager at a comms service provider with 10,001+ employees

Secures critical infrastructures with essential user session audit records

A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"OAuth 2 is now the de facto standard for API protection and scoped authorized delegation. IBM TAM now supports OAuth 2 and can act as fully compliant OAuth 2 authorization server."

"I like the primary function of this product allowing the administration of user/network accounts with a fair amount of ease."

"It is a simple-to-deploy solution, with many features that are supported out-of-the-box without complicated setup."

"The WebSEAL reverse proxy is great for protecting your critical systems."

"It is a totally secure way of accessing clients through various application portals for more than ten EU countries, just by using single sign-on."

"Tivoli Access Manager's proxy product (WebSEAL) is extremely fast."

"Capabilities of advanced security are enhanced to support strong, flexible authentifications and authentications based on risks as well as critical internet vulnerabilities."

"It has helped them to improve and control web and mobile application security."

More IBM Tivoli Access Manager [EOL] pros

"CyberArk PAM gives us a single pane of glass to manage and secure identities across multiple environments."

"The audit capabilities include video so that not only keystrokes but also mouse clicks are captured, providing safety and reassurance for anyone working in our infrastructure."

"They just released Marketplace, and they are constantly releasing updates to the components and adding new components, like Conjur. This is something that we ran into with Secret Server and DevOps, so it is already scalable, but becoming more so in the future."

"The PSM is excellent and the ability to write your own connectors and plugins is invaluable as far as flexibility goes."

"The most valuable features of CyberArk Privileged Access Manager include its search capabilities."

"What I appreciate about CyberArk Privileged Access Manager is that it is not only for password security; we can also manage their applications and platforms, and whenever a user logs in, end-to-end protection is handled, including monitoring user activity through PSM servers and reacting to threats with Privileged Threat Analysis."

"It is very simple to use."

"Regardless it's a good solution, it works, and the bank is happy with it."

More Idira Privileged Access Manager pros

Cons

"Administration of the product can be improved a lot."

"The user interface looks like it was designed for technical personnel only."

"Complex to install and run."

"An Amazon Machine Image (AMI) for the newer appliance versions for hosting the virtual appliances on AWS will help."

"The product has not been updated with emerging technologies over the years specifically around AJAX, REST and Mobile app integration."

"The initial set-up is a bit complex for a novice as the Linux version of it needs you to be somewhat good with Linux."

"There is Java process that hangs in WebSphere almost every month."

"Web Portal Manager does not implement the full set of functions found in the command line"

More IBM Tivoli Access Manager [EOL] cons

"The pricing is too expensive and should be reduced."

"With regards to potential improvements for the CyberArk product, I find the product quite expensive and I would like to see the cost reduced."

"One area for improvement is the plug-in development challenge. Although CyberArk provides a plug-in generator utility, it does not fully meet our needs, particularly for web-based applications. The plug-in generator currently works only for Telnet and SSH connections. We cannot generate a plug-in for web-based applications."

"On the UI level, things could be better."

"The price is high compared to Azure Key Vault. It's the most expensive solution."

"Making the reports more editable would be beneficial."

"With PAS, they escalate our problems in due time, not so much with EPM."

"Our DevOps team is looking in the direction of cloud, because we are not in it today. We are hoping to build it with Conjur from the ground up."

More Idira Privileged Access Manager cons

Pricing and Cost Advice

"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."

"I'm a technician so I don't handle the licensing for CyberArk Privileged Access Manager, but I know that the price for the core license is about €140 per year. There's another type of license, the external vendor license, and that's about €600 and you can manage twenty devices. From what I know, the price for one device in a subscription is about €65 per year. You can buy the CyberArk Endpoint Privilege Manager too, or you can buy some other application or application license with CyberArk Privileged Access Manager, but all other features, such as the Analytics Server is included in the basic CyberArk license. With WALLIX, you need to buy separate licenses for the features."

"The solution is cost-effective for the features."

"The main problem for the tool is its licensing. I work for a really big company. When you try to develop this as a service, usually you work with leverage teams who are formed with dozens of members. You might dedicate one FTE, or less, for something, e.g., an antivirus administrator. You might have half an FTE's effort dedicated to administering the antivirus, but then you have a team of about 30 users who might access that ticket. The problem is that CyberArk eliminated the possibility of concurrent users years ago. This is a big problem for companies who work with leverage teams. You need to pay for everyone. 40 licenses are used by 20 or 30 people. This is a big problem because licenses are not precisely cheap."

"This product is very expensive."

"CyberArk Privileged Access Manager is perceived to be somewhat overpriced compared to similar market products. It is a little bit overvalued. It could come down a little bit for my liking. However, the industry-leading reputation and the quality of service justify the high price point to some extent."

"The pricing for CyberArk Privileged Access Manager is quite expensive, and the pricing varies from region to region. In APAC, CyberArk Privileged Access Manager can be obtained for less than in North America, according to my understanding."

"CyberArk is very expensive and there are additional fees for add-ons."

"Before we bought it, they were licensing each function individually, which got complicated and very expensive. When we decided to buy it, it was much more straightforward and still quite expensive, but it brings a lot of value and risk reduction to the organization."

More Idira Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Single Sign-On (SSO) solutions are best for your needs.

See recommendations

908,800 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

14%

Outsourcing Company

13%

Financial Services Firm

13%

Marketing Services Firm

11%

Financial Services Firm

12%

Manufacturing Company

10%

Outsourcing Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	2
Large Enterprise	18

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	42
Large Enterprise	175

Questions from the Community

Ask a question

Earn 20 points

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...

See all answers

What needs improvement with CyberArk Privileged Access Manager?

I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...

See all answers

Comparisons

Symantec Siteminder vs IBM Tivoli Access Manager [EOL]

Compared 13% of the time

SailPoint Identity Security Cloud vs IBM Tivoli Access Manager [EOL]

Compared 8% of the time

Okta Platform vs IBM Tivoli Access Manager [EOL]

Compared 8% of the time

Idira Identity vs IBM Tivoli Access Manager [EOL]

Compared 5% of the time

Keeper Enterprise Password Manager vs IBM Tivoli Access Manager [EOL]

Compared 4% of the time

More IBM Tivoli Access Manager [EOL] Competitors

Safeguard by One Identity vs Idira Privileged Access Manager

Compared 4% of the time

Teleport vs Idira Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs Idira Privileged Access Manager

Compared 3% of the time

Saviynt Identity Cloud vs Idira Privileged Access Manager

Compared 3% of the time

Delinea Secret Server vs Idira Privileged Access Manager

Compared 3% of the time

More Idira Privileged Access Manager Competitors

Product Reports

Buyer's Guide

IBM Tivoli Access Manager [EOL]

July 2026

Download IBM Tivoli Access Manager [EOL] product report

Buyer's Guide

Idira Privileged Access Manager

July 2026

Download Idira Privileged Access Manager product report

Also Known As

Tivoli Access Manager, IBM Security Access Manager

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

Overview

IBM Tivoli Access Manager is a robust and secure centralized policy management solution for e-business and distributed applications. IBM Tivoli Access Manager WebSEAL is a high performance, multi-threaded Web server that applies fine-grained security policy to the Tivoli Access Manager protected Web object space. WebSEAL can provide single sign-on solutions and incorporate back-end Web application server resources into its security policy.

IBM

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks

Sample Customers

Essex Technology Group Inc.

Rockwell Automation

Find out what your peers are saying about Okta, Microsoft, Cisco and others in Single Sign-On (SSO). Updated: July 2026.

DOWNLOAD NOW

908,800 professionals have used our research since 2012.

We monitor all Single Sign-On (SSO) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.