No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Tivoli Access Manager [EOL] vs Idira Privileged Access Manager comparison

The compared IBM and Idira by Palo Alto Networks solutions aren't in the same category. Idira by Palo Alto Networks is ranked #1 in PAM , with an average rating of 8.6, and holds a 9.8% mindshare. Additionally, 93% of IBM users are willing to recommend the solution, compared to 95% of Idira by Palo Alto Networks users who would recommend it.
Idira Privileged Access Man...
Read 230 Idira Privileged Access Manager reviews
  • 20,873 Views
  • 8,767 Comparison Views
95% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between IBM Tivoli Access Manager [EOL] and Idira Privileged Access Manager based on real PeerSpot user reviews.

Find out what your peers are saying about Microsoft, Okta, One Identity and others in Single Sign-On (SSO).

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Single Sign-On (SSO) Report (Updated: June 2026).
Buyer's Guide
Single Sign-On (SSO)
June 2026
Download the complete report
Helped 900,644 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Tivoli Access Manager [...
Average Rating
8.0
Reviews Sentiment
3.8
Number of Reviews
29
Ranking in other categories
No ranking in other categories
Idira Privileged Access Man...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
230
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (3rd), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)
 

Featured Reviews

it_user711612 - PeerSpot reviewer
it_user711612
Senior Consultant at a insurance company with 1,001-5,000 employees
Reverse proxy provides central control over authentication and authorization.
It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…
Read full review
Atul-Gujar - PeerSpot reviewer
Atul-Gujar
CyberArk manager at a comms service provider with 10,001+ employees
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Tivoli Access Manager (or IBM Security Access Manager) is a fully featured web authentication, sso and authorization product."
"It is a simple-to-deploy solution, with many features that are supported out-of-the-box without complicated setup."
"It provides good scalability and reliability, not to mention the overall availability of the service."
"It is one of the best products in the present market in the area of access management."
"The combination of TAM with IDM in IBM Tivoli Identity Manager helped us to realize robust and secure authentication infrastructure in accordance with industry regulations and laws."
"Since its birth it is an unbelievable stable product."
"Centralized policy management and reverse proxy-based architecture make it very flexible in terms of deployment, adoption, and implementation."
"The SSO, URL-based access control, OAuth 2 and OIDC are the most valuable features."
More IBM Tivoli Access Manager [EOL] pros
"The product enables us manage passwords of highly privileged (service) accounts, which are not tied to a person, and they include a full audit trail and approval workflow functionality."
"CyberArk Privileged Access Manager has made our operations more streamlined. There is an approval process, so it helps us keep tabs on who's working on what and for how long."
"On the EBB user side, we were able to secure all the server root passwords and admin for Windows. This was a big win for us."
"CyberArk is good as a technology partner for ensuring that we maintain a strong security posture throughout our digital transformation."
"It does what it promised, it secures our platforms, has the scalability, and it is just a solid product."
"CyberArk is a more secure product - much better than Thycotic."
"I have used other privileged account management tools in the past; this, by far, outranks them as far as features and usability."
"We know when passwords will be expiring so we can force users to change their passwords, as well as requiring specific password requirements for length, complexity, etc."
More Idira Privileged Access Manager pros
 

Cons

"This product is also available in the appliance offering which has not yet matured and has many issues."
"I have not tested the stability yet."
"The profiling element is incredibly robust, but also equally as complex, it requires an off-site course to be able to understand the context or the plethora of options available."
"Multi-factor authentication with social integration needs to improve."
"Administration of the product can be improved a lot."
"The license model is pretty complex."
"The product has not been updated with emerging technologies over the years specifically around AJAX, REST and Mobile app integration."
"The user interface looks like it was designed for technical personnel only."
More IBM Tivoli Access Manager [EOL] cons
"There is a little bit of confusion in the implementation part, especially when one tries to understand the actual working of the product."
"They are sometimes not flexible with things. For instance, from one day to another, there might be something that had been done years ago by CyberArk, then they say, "We do not support that." You then have to initiate a complaint and start working with them. Things might become complicated and months pass while you are working with them. Usually, they are good and fast, but sometimes they seem to be blocked with problems, e.g., you will suddenly be working with another team instead of the team that you were working with the day before."
"The downside is that it's a big program. To scale excessively, locally, on an on-prem application, takes a lot of servers."
"The major pain point that we have is the capacity of CyberArk due to the sheer volume of NPAs that we are managing."
"As we have not yet moved to the core licensing model, we don't have the benefit of PSM and a few other things that were not previously included."
"Our DevOps team is looking in the direction of cloud, because we are not in it today. We are hoping to build it with Conjur from the ground up."
"Their post-sale support area requires a big improvement."
"It's expensive and you're not getting anything new. It's just a control, but in terms of risk, you are covering a big impact on the company."
More Idira Privileged Access Manager cons
 

Pricing and Cost Advice

"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."
"CyberArk is good at what they do, and the price reflects that. You have to pay the price for the same."
"CyberArk Enterprise Password Vault is a very expensive product."
"This product is very expensive."
"I would rate the cost of CyberArk Privileged Access Manager seven out of ten with ten being the most expensive."
"Cost efficiency is the number one thing that can be improved in my mind. This would change lots of companies minds on purchasing the product."
"I hope to learn how the pricing works so that I can understand it better, but I am certain it is not inexpensive."
"Since CyberArk is at the top of the Gartner list, the cost is indeed on the higher side, but customers must discern which entities are essential to purchase. They should weigh the cost against the quality received."
"With reducing the privileged account access, there has been a huge improvement. They are now bringing more accounts on a little at a time."
More Idira Privileged Access Manager pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Single Sign-On (SSO) solutions are best for your needs.
See recommendations
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Construction Company
14%
Marketing Services Firm
13%
Outsourcing Company
13%
Financial Services Firm
13%
Manufacturing Company
11%
Construction Company
6%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise18
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise42
Large Enterprise175
 

Questions from the Community

Ask a question
Earn 20 points
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
See all answers
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...
See all answers
What needs improvement with CyberArk Privileged Access Manager?
I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...
See all answers
 

Comparisons

Symantec Siteminder vs IBM Tivoli Access Manager [EOL] Logo
Symantec Siteminder vs IBM Tivoli Access Manager [EOL]
Compared 13% of the time
SailPoint Identity Security Cloud vs IBM Tivoli Access Manager [EOL] Logo
SailPoint Identity Security Cloud vs IBM Tivoli Access Manager [EOL]
Compared 8% of the time
Okta Platform vs IBM Tivoli Access Manager [EOL] Logo
Okta Platform vs IBM Tivoli Access Manager [EOL]
Compared 7% of the time
Idira Identity vs IBM Tivoli Access Manager [EOL] Logo
Idira Identity vs IBM Tivoli Access Manager [EOL]
Compared 5% of the time
Keeper Enterprise Password Manager vs IBM Tivoli Access Manager [EOL] Logo
Keeper Enterprise Password Manager vs IBM Tivoli Access Manager [EOL]
Compared 4% of the time
More IBM Tivoli Access Manager [EOL] Competitors
One Identity Safeguard vs Idira Privileged Access Manager Logo
One Identity Safeguard vs Idira Privileged Access Manager
Compared 4% of the time
Teleport vs Idira Privileged Access Manager Logo
Teleport vs Idira Privileged Access Manager
Compared 3% of the time
Delinea Secret Server vs Idira Privileged Access Manager Logo
Delinea Secret Server vs Idira Privileged Access Manager
Compared 3% of the time
Keeper Enterprise Password Manager vs Idira Privileged Access Manager Logo
Keeper Enterprise Password Manager vs Idira Privileged Access Manager
Compared 3% of the time
Saviynt Identity Cloud vs Idira Privileged Access Manager Logo
Saviynt Identity Cloud vs Idira Privileged Access Manager
Compared 3% of the time
More Idira Privileged Access Manager Competitors
 

Product Reports

Buyer's Guide
IBM Tivoli Access Manager [EOL]
June 2026
IBM Tivoli Access Manager [EOL] reportDownload IBM Tivoli Access Manager [EOL] product report
Buyer's Guide
Idira Privileged Access Manager
June 2026
Idira Privileged Access Manager reportDownload Idira Privileged Access Manager product report
 

Also Known As

Tivoli Access Manager, IBM Security Access Manager
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

IBM Tivoli Access Manager is a robust and secure centralized policy management solution for e-business and distributed applications. IBM Tivoli Access Manager WebSEAL is a high performance, multi-threaded Web server that applies fine-grained security policy to the Tivoli Access Manager protected Web object space. WebSEAL can provide single sign-on solutions and incorporate back-end Web application server resources into its security policy.
IBM

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

  • Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
  • Privilege Session Manager: Offers comprehensive session recording and monitoring.
  • Privileged Threat Analytics: Detects and alerts on potential credential threats.
  • Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

  • Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
  • Compliance Support: Ensures alignment with compliance policies through automated processes.
  • Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
  • Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks
 

Sample Customers

Essex Technology Group Inc.
Rockwell Automation
Buyer's Guide
Single Sign-On (SSO)
June 2026
Download Free Report
Find out what your peers are saying about Microsoft, Okta, One Identity and others in Single Sign-On (SSO). Updated: June 2026.
DOWNLOAD NOW
900,644 professionals have used our research since 2012.

We monitor all Single Sign-On (SSO) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.