OpenText Identity Governance Reviews

You can run reports and verify the access each user has. There is a process that runs automatically for access review. It sends an email to the manager and provides a task for the manager to review the users and access. The manager can approve or reject, and then it goes to the application owner for further review. This feature is especially important in large customer environments, as manual review can be challenging.

The product allows you to check if a user has two accesses that should not be granted simultaneously. There's an approval process for this scenario. Primarily, it provides information for governance data.

NetIQ Identity Governance is not flexible. Sometimes, filtering information to provide users with options, such as selecting the application to which they want to request access, can be challenging. It needs to improve application integration as well.

I rate the tool's stability a nine out of ten. 

I rate NetIQ Identity Governance's scalability an eight to nine out of ten. 

The tool's deployment is easy; I rate it nine out of ten. You need one resource with the basic knowledge to run the scripts to deploy it. We document the process. It has a few variations from customer to customer. 

The project begins with an architect who assesses the customer's needs and the environment, whether on-premise, in the cloud, or SaaS-based. The architect then plans the installation and configuration of the environment. Following this, a system engineer or technical expert handles the installation process. Two resources will be involved in the maintenance. 

Along with the architect and system engineer, a developer must be present for the installation process. Additionally, another technical expert with knowledge of operating systems is required. This individual should understand how to manage certificates, particularly as they may expire over time. They should also have a basic understanding of Java to navigate the key stores and configure the product during installation.

In terms of pricing, the tool seems a bit cheaper compared to other SaaS solutions.

The solution is worth using because of its flexibility, especially in integrating applications. However, the time required for integration varies based on the quality of documentation provided for the application. You don't need to maintain servers or operating systems with SaaS, as the vendor handles that. The license might be slightly more expensive, but maintenance costs are lower. I rate the tool an eight out of ten. 

This solution has been around for a long time. It has had lots of successful deployments and releases. It's mature. It's not for everybody, but it's certainly a capable solution that serves clients well.

They haven't really evolved the product to the cloud, so they don't have a cloud solution. It's just deployable in the cloud, so in some cases that holds them back in a competitive situation. 

I don't know if they're intent on taking their solution to the cloud, but if they do, that would be one improvement. It would allow them to be competitive down market in medium to small enterprises. I don't know if they care to address that market or not because it doesn't seem like they've made that move, but that would be one way for them to do that.

As for additional features, I would suggest stronger integration. I think enabling more universal industry standard integrations would probably help them with different applications.

We have been reselling this solution for 10 years.

If the solution is deployed effectively, it is stable.

It is a scalable solution. 

It really depends on the use cases of the client, and what they want to accomplish with the solution. Standing it up and putting it into production is pretty straightforward. Addressing the use cases is where the rubber meets the road. That's where companies like GCA bring value. Standing it up is just the beginning. Actually implementing it to serve the needs of the business and use cases is what makes the solution effective, so it just depends on what the business is trying to accomplish. Identity governance and administration is never ever done. You implement it, and it touches every aspect of the business. If someone changes from SAP to Workday or something like that, it touches identity, and if a source of truth changes, then that affects the identity governance policy. It's the source of truth for all identity and provisioning to provisioning of access and services to an employee or a contractor or a customer, so it's never done.

Standing up the solution can probably be done in a matter of weeks. Effectively implementing it and integrating it with all the sources of truth that a company has, the applications that it touches, and if it needs to provision identities and connect them with access to applications could take years. It just depends on what the company's trying to accomplish, how much money they have to spend, and how quickly they want to act.

Anytime an IGA solution is implemented effectively, there is a huge return on investment. It enables much faster, more efficient provisioning of access for employees, contractors, and customers, and it enables you to do the related compliance and access certifications that come along with that much more efficiently as well because it captures all that information. There is a huge, huge benefit, and a huge ROI when it's done effectively.

It's expensive relative to the cloud solutions that are out there. It's priced different. The cloud solutions are all subscription-based now, so you pay a monthly subscription for access to the cloud solution, and their solution is still license-based, so it's different. If someone wants to spend OpEx on a cloud solution, or CapEx, they can do that. When you buy this solution, I think their licensing is still a perpetual license, so it has to be CapEx.

My advice for those considering this solution is that they should partner with GCA to do it effectively.

I would rate this solution as a seven out of ten. 

We have deployed this solution in banks and government institutions.

I really like the separation of the duties. It is the most ambitious model in the server because you have to create all the different rules, especially business rules. You have to check with the client and set different policies and rules, and then, you to have refine them. You will notice what is bad in the company and where the real problem is.
You may notice that someone has too much power or not enough power. You may also see that a particular group needs more power to obtain results.

With NetIQ, you have to install two or more products. It would be better if we could install one product and have one server and one dashboard.

The initial setup should be improved so that it is easier for new users.

I've been using it on and off since 2015.

It is stable. I haven't seen any problems with it.

There are no problems with scalability.

The technical support from Micro Focus is decent. It is good, but it is not perfect. The time of response needs to be better.

If you are installing it for the first time and have no prior experience, then the initial setup may be hard. Once you have more experience, you will be fine.

IdentityIQ from Sailpoint is better than NetIQ Identity Governance because it works like one product, whereas all the NetIQ products are separate. With IdentityIQ, you have to install one product, and everything is in the same place. You can do everything with one server and one dashboard, so I prefer the IdentityIQ from Sailpoint to Identity Governance from NetIQ.

I would give NetIQ Identity Governance an eight on a scale from one to ten.

When it comes to our clients here in Chile and Argentina, we implement the solution in respect of permissions, discovering accounts and launching access certification. We use the solution for internal auditing purposes. 

I like the queries and find the catalog to be comparatively powerful. The study sticks graphics are great and simple to use. The current model of the access certification is great. The business role comes with a great model, as well. We make use of all the models. 

We need more collectors and find them to be very old. The Sales Force collector is too old, as is the one for Azure Active Directory. There are too few collectors, numbering around five. 

The maintenance setup should be addressed. I do not feel the solution to be sufficiently stable. 

Technical support is horrible. 

The Identity Manager integrative capabilities with EDM should have better functioning, as it is not useful. Much work is needed in this regard. Identity Manager is the other Micro Focus solution. 

We have much experience with NetIQ Identity Governance and have been implementing it for four years. 

I rate the stability as so so. The solution is not very stable. 

The solution is scalable.

The technical support is lousy. 

The solution was very easy to set up. 

I feel NetIQ Identity Governance to be good for discovering accounts through simple implementation. 

I rate NetIQ Identity Governance as a six out of ten. 

We use the solution for access certification, the configuration of duties, and role mining.

All three functionalities, access certification, the configuration of duties, and role mining - especially role mining - are very advanced compared with the competition.

The solution is intuitive and easy to use.

The product is easy to install.

I have found the stability to be quite good. 

According to past experience, it scales well. 

I'd like for better integration with the rest of the identity suite of Micro Focus. For example, I know that in the role up of the solution, they expect to use a common product, a very tight integrated solution with both functionalities, Identity Management and Identity Governance. Both products are separate with connectors between each other, which is a disadvantage as they were both developed by the same vendor. Therefore, they should be, from the beginning, part of an integrated solution. They need to offer something that is fully integrated, which will be very good for customers.

The product could use more advanced features related to Identity Intelligence.

Micro Focus has a product where they combine identity functionalities. Interset which is a data mining tool is a very big flash solution, which combines with the Identity Framework and gives users Identity Intelligence. Micro Focus is starting down this path of showing or gaining more advanced features, which is very good. I expect to see an evolution on this front.

We have been a Micro Focus partner for more than ten years now, however, Identity Governance, we only implemented about four years ago. We had Identity Manager before that and we started with that nearly 10 years ago. It is an older product.

The solution is stable. there are no bugs or glitches. It doesn't crash or freeze. It's reliable. 

Since the first product we implemented, we have customers that we support via contract where they can call us in case the product fails or something happens. They rarely call us. They usually ask about how to improve new integrations, however, we rarely had support issues with this product in the past - and definitely nothing in relation to stability.

The largest implementation we made with this product was in a bank in Chile and they had more than 12,000 identities. It scaled very well. We were a little worried at first as we had never done something that big. However, it scaled perfectly. There was no problem. I don't know if it would hold up if we implemented it in a bigger customer, for example, someone with 100,000 identities. I don't know for sure how it would behave in this case. That said, I've never had an issue.

In initial implementation is very easy. It's not too difficult. 

We usually deliver this kind of project with a team of three people. One project manager is typically involved just in the project management task and then one functional guy, as we have to interact sometimes with the business side and the access certification, et cetera. You have to tell them about the purpose and the interface and how we expect them to respond. Then, there are one or two technical people needed that implement the software at the beginning and then integrate each application of the customer. We usually have a mix of compromise and cloud applications and different flavors and types of architectures. Each project depends on how many applications the customer wants to integrate. Sometimes you need two or three technical people working in parallel just to achieve on the timeline of the project.

With Identity Governance, you have less risk of fraud. It's not a question of how many managers return the costs of efficiency. If you want to improve inefficiency, you have to go to Identity Management. However, with Governance, the return you get is related to the fraud you prevent. Therefore, you definitely have a return on investment as you avoid trouble in the future. 

We are partners. 

We are using the latest version of the solution, which may be version 4.5.

This solution is a very good first step where you don't need to have all the processes formally defined or all the privileges well assigned. It doesn't matter as it allows you to gain visibility and start deleting the unnecessary privileges and to start erasing accounts or deleting accounts that no longer are necessary. You can do this due to the fact that you can match every identity to the corresponding employee profile. For example, if an account doesn't exist in human resources, then you can delete it as an orphan account easily. It allows our customers or any organization to mature in the path of implementing in a second step, an Identity Manager, which is the second tool that they can add. Once they have the privileges well defined, and they start to formally automate all the processes.

How you govern the user life cycle is the second step. We usually suggest clients start with Identity Governance and then continue with Identity Management just to automate. That said, usually, the customers are not mature enough to automate as they don't want to automate something that is badly defined. If you have a mess in your systems, you first have to clean and then automate. Identity Governance is very good for cleaning.

I'd rate the solution at an eight out of ten.

I use NetIQ Identity Governance to certify access.

NetIQ Identity Governance has improved the security of my company.

The most valuable features are the stability and scalability of NetIQ Identity Governance.

The initial setup has room for improvement.

I have been using the solution for one year.

I give the stability a nine out of ten.

I give the scalability a nine out of ten.

The technical support is good.

Positive

The initial setup is a five out of ten.

We can see a return on investment after two years of use.

I give the cost a nine out of ten.

I give the solution a nine out of ten.

NetIQ Identity Governance can benefit an organization by reducing risk.

NetIQ Identity Governance is used for review and control access to main business applications. As the Identity Lifecycle is made by NetIQ Identity Manager with provisioning drivers and workflows, NetIQ Identity Governance will do the access review in order to make sure users and accounts are properly activated and deactivated with the rights permissions and accesses.

NetIQ Identity Governance helps to prepare audits and to be "audit ready" every time. With the different connectors, you can collect user accounts and permissions from many different applications. By combining Identity Governance with File reporter you can also collect NTFS permissions from Windows servers.

The access review feature and risk evaluation are very useful. When doing a review you can either make manual or automatic fulfillment to immediately apply the manager's decision to the system, like removing or adding new permissions to the user account.

Some out-of-the-box connectors are still missing. We need more connectors to cloud applications like AWS. The next release will include a new analytic module that may improve monitoring and reporting. Currently, the data governance can be integrated with the help of Micro Focus Filer reporter, but it would be nice to have the date connector integrated with fulfillment as well.

I have been using this solution for two years.

NetIQ Identity Governance 3.6 is now released and provide new features :

- Improved reviewer experience and enhancements for compliance administrator to define and configure review processes. For example, there is now a “Save-as” capability for review definitions.
- Ability to review business role definition. Authorized users can conduct periodic and ad-hoc reviews of each business role by requiring a responsible person to review the role’s general information (name, description, etc.), membership criteria, and access authorizations.
- Enhanced self-review policy
- Enhanced multistage review

This release makes it easier to onboard applications into the governance system and includes the following enhancements:
- Separates the process of defining an application in the governance system from collecting the data for the application. This enables a business user to drive the process and also includes the ability to collect application information directly from a CMDB system.
- Ability to collect the authorization data for multiple applications by defining and running a single Application Data Collector.
- Ability to merge manually created application with collected application
- Ability to edit application attributes
- Ability to add custom attributes to applications

The access review is the solution’s most valuable feature. You can do an access review on different applications, rights, and permissions.

The solution should provide more connectors in future releases. The solution also should offer more monitoring.

The solution is stable.

The solution is scalable.

We’re very satisfied with technical support. Usually we get people with the right knowledge who understand the solution very well.

The initial setup is very straightforward. It’s simple.

We’re a NetIQ partner.

I’d rate the solution eight out of ten.

• Risk Analysis Engine
• Business-IT Role Mining, Certifications
• Dynamic Grouping
• Life Cycle Management
• Provisioning Integration Modules with IDM solutions
• Intuitive and customized Dashboards
• Advanced Analytics

It automated and completed the user's Life Cycle management (which was manual in many cases), while validation of user's access is being performed for any of his Access Requests. More than that, it helped to build a firm RBAC module with its Role Mining tool and it helped the organization to lower the risk of access to critical applications by non-authorized users and by that it helped push the organization to compliance and readiness for auditing and regulations approval.

The installation process can be improved. The Workflow Designer interface can be improved as well.

For about a year.

Not particularly.

No issues encountered.

No issues encountered.

Pretty satisfying.

No previous solution used.

Was a bit complex, the Installation process can be definitely improved and re-designed. There is no installation wizard. Instead, lots of manual third party software installations and configurations.

We used a vendor team who were very high skilled.

Calculating ROI for identity-audit-risk management solutions is hard, because you cannot measure in bills what breaches you prevented and what these potential breaches financial damage could be. Anyway I could say that in terms of financial saving, this solution saved a lot of long manual expensive audits right after the very first project stage of getting visibility.

• RSA-Aveksa
• CA-Eurikify

Put 80% of your focus on the business process design (not on the technological side at all!) - and do it way before the project has even begun. Do not forget that it's a business-focused project so start from defining the business demands, then go to a final business design - only after - initiate the the technical project.