No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Tivoli Access Manager [EOL] vs Idira Privileged Access Manager comparison

Why PeerSpot?
The compared IBM and Idira by Palo Alto Networks solutions aren't in the same category. Idira by Palo Alto Networks is ranked #1 in PAM , with an average rating of 8.6, and holds a 8.5% mindshare. Additionally, 93% of IBM users are willing to recommend the solution, compared to 95% of Idira by Palo Alto Networks users who would recommend it.
Idira Privileged Access Man...
Read 231 Idira Privileged Access Manager reviews
  • 30,034 Views
  • 11,413 Comparison Views
95% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between IBM Tivoli Access Manager [EOL] and Idira Privileged Access Manager based on real PeerSpot user reviews.

Find out what your peers are saying about Okta, Microsoft, One Identity and others in Single Sign-On (SSO).

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Single Sign-On (SSO) Report (Updated: October 2026).
Buyer's Guide
Single Sign-On (SSO)
October 2026
Download the complete report
Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Tivoli Access Manager [...
Average Rating
8.0
Reviews Sentiment
3.8
Number of Reviews
29
Ranking in other categories
No ranking in other categories
Idira Privileged Access Man...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
231
Ranking in other categories
User Activity Monitoring (2nd), Enterprise Password Managers (3rd), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (4th)
 

Featured Reviews

it_user711612 - PeerSpot reviewer
it_user711612
Senior Consultant at a insurance company with 1,001-5,000 employees
Reverse proxy provides central control over authentication and authorization.
It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…
Read full review
Mahmudul Hoque Khan - PeerSpot reviewer
Mahmudul Hoque Khan
Lead Engineer at intelQong Technology
Centralized access has improved privileged control and visibility yet still needs better integrations
While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creating access policies and quickly identifying unusual activities would make day-to-day administration more efficient. Stronger integration with existing identity data and secret management could be a significant improvement for Idira Privileged Access Manager. Deeper integration with cloud solutions would make it easier to correlate privileged access activity with other security events. I would also appreciate more flexible reporting and dashboards so administrators can swiftly see access patterns and unusual privileged access from a single view.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"SAML 2.0."
"I like the primary function of this product allowing the administration of user/network accounts with a fair amount of ease."
"OAuth 2 is now the de facto standard for API protection and scoped authorized delegation. IBM TAM now supports OAuth 2 and can act as fully compliant OAuth 2 authorization server."
"It is a simple-to-deploy solution, with many features that are supported out-of-the-box without complicated setup."
"Several SSO methods are supported out of box, federation based SSO (SAML / Oauth / OpenID etc) setup is easy, performance and scalability are very good, and the internal STS token service can be used for custom SSO tokens."
"Tivoli Access Manager's proxy product (WebSEAL) is extremely fast."
"The integration effort with the end application is quite straightforward and easy."
"Tivoli Access Manager (or IBM Security Access Manager) is a fully featured web authentication, sso and authorization product."
More IBM Tivoli Access Manager [EOL] pros
"Every aspect of the solution is very well integrated, and that gives comfort because it is a fail-safe kind of environment."
"CyberArk has a lot of modules."
"The implementation of the PSM proxy has reduced the specific risk of "insider attacks" on our domain controllers and SLDAP servers by eliminating direct user login by an open secure connection on the user's behalf without ever revealing the privileged credentials."
"BeyondTrust and ARCOS were introduced in market at that time; these tools are good but do not seem to be as user friendly as CyberArk PAM, which is more convenient in installing and deployment and easier to customize as per client requirement."
"This solution works very well, and the feedback from our customers is very good."
"The automatic rotation of credentials is probably the most useful feature."
"Technical support has been very responsive in navigating challenges. It is very easy to open a ticket."
"The support is always very responsive, accurate, and complete in their solutions."
More Idira Privileged Access Manager pros
 

Cons

"There is Java process that hangs in WebSphere almost every month."
"The whole product could be made into one suite instead of multiple components which are essentially a part of the same infrastructure."
"Complex to install and run."
"The pricing is always costly."
"Yes, because there are so many moving parts it can often be difficult getting it right first time."
"What I don’t particularly like is the flow duration."
"The TAMeB policy server is not scalable."
"Looking at their roadmap, they have a broad grasp of the security features which the industry needs."
More IBM Tivoli Access Manager [EOL] cons
"It is easily customized, and that customization makes it very easy to start trying to shoehorn the solution into roles it was never intended to fill."
"I would prefer that this is a fully-managed service, rather than have to manage the software ourselves and keep it up to date."
"The usual workload on the system is sometimes delayed by CyberArk, so any major work is getting delayed and may take twice the amount of time that it usually does."
"More than the product itself, there is room for improvement in the documentation. The documentation should be very detailed and very structured. It has a lot of good information, on one level, but I feel that it could be more elaborate and more structured."
"​It's hard to find competent resellers/support."
"The current user interface is a little dated. However, I hear there are changes coming in the next version."
"The tool’s pricing and scalability can be better."
"The PTA could be improved. Currently, companies often have multiple domains and sometimes it's difficult to implement CyberArk in this kind of infrastructure. For example, you can add CPM (Central Policy Manager) and PSM (Privileged Session Manager and PVWA (Password Vault Web Access) for access, but if you want to add PTA (Privileged Threat Analysis) to scan Vault logs, it is difficult because this component may be adding multiple domain environments."
More Idira Privileged Access Manager cons
 

Pricing and Cost Advice

"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."
"I'm aware that the organization had purchased licensing for almost all of CyberArk's solutions including licensing for PTA, EPM, and the Application Identity Manager. But when it comes to PSM, this is one of the components where there's an additional charge for any extra PSMs that you want to deploy. I believe that there's some rider where the vendor has a bit of leeway to, at times, charge a premium on whatever additional services you may require above the board."
"Pricing is a problem. CyberArk is expensive compared to other products I know. It is similar to buying a German car. It comes with all the bells and whistles, but some companies may find it too expensive."
"Licensing fees are paid on a yearly basis."
"If you are looking at implementing this solution, buy the training and go to it."
"CyberArk DNA is free if you purchase the CyberArk solution. There is no additional charge for CyberArk DNA, which is great."
"Quite expensive"
"Pricing and licensing depend on the environment."
"I'm a technician so I don't handle the licensing for CyberArk Privileged Access Manager, but I know that the price for the core license is about €140 per year. There's another type of license, the external vendor license, and that's about €600 and you can manage twenty devices. From what I know, the price for one device in a subscription is about €65 per year. You can buy the CyberArk Endpoint Privilege Manager too, or you can buy some other application or application license with CyberArk Privileged Access Manager, but all other features, such as the Analytics Server is included in the basic CyberArk license. With WALLIX, you need to buy separate licenses for the features."
More Idira Privileged Access Manager pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Single Sign-On (SSO) solutions are best for your needs.
See recommendations
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
17%
Financial Services Firm
11%
Construction Company
11%
Manufacturing Company
9%
Outsourcing Company
12%
Financial Services Firm
11%
Manufacturing Company
11%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise18
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise43
Large Enterprise175
 

Questions from the Community

Ask a question
Earn 20 points
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
See all answers
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
The pricing is reasonable compared to other software options we evaluated, and it is straightforward. However, overall costs depend on deployment size and licensing requirements.
See all answers
What needs improvement with CyberArk Privileged Access Manager?
While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creat...
See all answers
 

Comparisons

Symantec Siteminder vs IBM Tivoli Access Manager [EOL] Logo
Symantec Siteminder vs IBM Tivoli Access Manager [EOL]
Compared 11% of the time
Okta Platform vs IBM Tivoli Access Manager [EOL] Logo
Okta Platform vs IBM Tivoli Access Manager [EOL]
Compared 9% of the time
SailPoint Identity Security Cloud vs IBM Tivoli Access Manager [EOL] Logo
SailPoint Identity Security Cloud vs IBM Tivoli Access Manager [EOL]
Compared 8% of the time
Keeper Enterprise Password Manager vs IBM Tivoli Access Manager [EOL] Logo
Keeper Enterprise Password Manager vs IBM Tivoli Access Manager [EOL]
Compared 6% of the time
Ping Identity Platform vs IBM Tivoli Access Manager [EOL] Logo
Ping Identity Platform vs IBM Tivoli Access Manager [EOL]
Compared 5% of the time
More IBM Tivoli Access Manager [EOL] Competitors
Safeguard by One Identity vs Idira Privileged Access Manager Logo
Safeguard by One Identity vs Idira Privileged Access Manager
Compared 3% of the time
Keeper Enterprise Password Manager vs Idira Privileged Access Manager Logo
Keeper Enterprise Password Manager vs Idira Privileged Access Manager
Compared 3% of the time
NetWitness Platform vs Idira Privileged Access Manager Logo
NetWitness Platform vs Idira Privileged Access Manager
Compared 3% of the time
Teleport vs Idira Privileged Access Manager Logo
Teleport vs Idira Privileged Access Manager
Compared 3% of the time
F5 BIG-IP Access Policy Manager (APM) vs Idira Privileged Access Manager Logo
F5 BIG-IP Access Policy Manager (APM) vs Idira Privileged Access Manager
Compared 2% of the time
More Idira Privileged Access Manager Competitors
 

Product Reports

Buyer's Guide
IBM Tivoli Access Manager [EOL]
October 2026
IBM Tivoli Access Manager [EOL] reportDownload IBM Tivoli Access Manager [EOL] product report
Buyer's Guide
Idira Privileged Access Manager
October 2026
Idira Privileged Access Manager reportDownload Idira Privileged Access Manager product report
 

Also Known As

Tivoli Access Manager, IBM Security Access Manager
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

IBM Tivoli Access Manager is a robust and secure centralized policy management solution for e-business and distributed applications. IBM Tivoli Access Manager WebSEAL is a high performance, multi-threaded Web server that applies fine-grained security policy to the Tivoli Access Manager protected Web object space. WebSEAL can provide single sign-on solutions and incorporate back-end Web application server resources into its security policy.
IBM

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

  • Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
  • Privilege Session Manager: Offers comprehensive session recording and monitoring.
  • Privileged Threat Analytics: Detects and alerts on potential credential threats.
  • Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

  • Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
  • Compliance Support: Ensures alignment with compliance policies through automated processes.
  • Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
  • Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks
 

Sample Customers

Essex Technology Group Inc.
Rockwell Automation
Buyer's Guide
Single Sign-On (SSO)
October 2026
Download Free Report
Find out what your peers are saying about Okta, Microsoft, One Identity and others in Single Sign-On (SSO). Updated: October 2026.
DOWNLOAD NOW
920,769 professionals have used our research since 2012.

We monitor all Single Sign-On (SSO) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.