SailPoint Identity Security Cloud Reviews

I am more like a consultant helping customers use SailPoint Identity Security Cloud and do not represent the client.

The organization's operational expenses do get reduced, roughly by fifteen percent. The service integration with products like Microsoft's and SAP's is effective.

The governance features, such as certification and provisioning, are the most beneficial for enhancing security.

The interface can improve, and the product could become a little cheaper.

I have been using SailPoint Identity Security Cloud for ten years.

In terms of stability, SailPoint Identity Security Cloud is rated eight out of ten. It's quite stable.

Regarding scalability, I would rate it an eight out of ten.

Technical support is responsive and helpful, and I would rate them seven out of ten.

Neutral

The installation is not done by us; it is handled by SailPoint professional services, and we only do the configuration.

SailPoint manages the installation, while we configure the solution.

Organizations have seen a reduction in operational expenses by about fifteen percent.

SailPoint Identity Security Cloud is considered expensive, and the kinds of customizations many of our clients expect are not allowed.

We are working with Microsoft and Saviynt, among other vendors.

I'd rate the solution eight out of ten.

I use the solution in my company for any customization that needs to be done. If something is not available out of the box, assuming that sometimes one may need to do some customization, it can be done easily with SailPoint IdentityIQ.

The most valuable features of the solution are the workflow and user access, which are the tool's two important features.

The disadvantage of the tool stems in the area of upgrades, especially if you need to do a lot of upgrades in terms of versions. Suppose a user is on SailPoint IdentityIQ Version 6.0 and needs to upgrade to SailPoint IdentityIQ Version 8.0. In that case, the product takes a lot of time, and there is a need to put in a lot of effort, making it an area where improvements are required.

The solution's technical support team's response time and skills need improvement since it is an area where there are shortcomings.

I have been using SailPoint IdentityIQ for eight years. I am the product's system integrator.

It is a pretty stable solution. Stability-wise, I rate the solution a ten out of ten.

Scalability-wise, I rate the solution an eight out of ten.

I deal with the tool's customers, handling small, medium, and large businesses.

I rate the technical support a six out of ten.

Neutral

The product's initial setup phase was satisfactory for our company.

I rate the product's deployment phase a nine on a scale of one to ten points, where one is difficult, and ten means it is easy to deploy.

Depending on the infrastructure where the product is required to be deployed, the deployment process, along with the updates, can take a week's time.

The product is expensive. People need to opt for a licensing plan for one year or three years.

The maintenance requirement depends on the size of the deployment. If the product is used to serve a very large enterprise-sized organization with many users, 15 to 20 people are required to take care of the maintenance. If 50,000 is the product's user base, there is a need to have four to five people to four support the product.

The product's integration capabilities with other solutions can be described as a straightforward process that the tool offers. As long as the application exposes some kind of interface, SailPoint IdentityIQ can integrate with it.

The tool's GUI is user-friendly.

The product requires one to invest in maintenance, upgrades, and other such areas. If it is a small-scale business, I usually suggest SaaS-based systems to such companies so that you don't have to take care of the maintenance. Medium to large-sized businesses can choose SailPoint IdentityIQ.

I rate the tool an eight out of ten.

Less than half of my customers use the solution within the government for certification, identity process, and optimization of the roles and requirements for other areas. For the rest of my other customers, they are using the solution for their core systems. For example, they are doing vertical financial analytics. 

This solution has made my client's customers' journeys a lot better.

The most valuable feature for our customers and for us is the identity data warehouse. For financial analytics, this is the way to make the clusters better. 

The report functionality and dashboard of the access manager could be improved.

In the future, there should be improvements integrating into cloud ecosystems, such as AWS or Azure. At the moment we have to purchase many different solutions to have a fully operational intelligent identity package. There are some features lacking in identity and the DevOps solutions.

I have been using the solution for two years.

The solution is stable.

We did not have an issue with scaling the solution. My customers range from medium to large scale businesses using this solution.

The customer support process is slow at times because they do not have proper language support for my clients in Latin America speaking Spanish. There is good support for English but not Spanish.

The solution was easy to install for me but might not be for someone who is not used to the
methodology.

We have three implementation consultants, one project manager, and two engineers as part of our deployment team. The number of people sent to a project depends on the environment in which the solution is being implemented. For example, The relation is one person per three systems, if you need to make more than 20 in three months, we will have to supply more people. The implementation took approximately six months.

For the ordinary maintenance activities for administration solutions, we provide normally one person to support four customers.

The price of the solution could improve, it is not priced well for smaller businesses to afford. We have one customer that has 2,000 identities and another one with 8,000.

We have evaluated Oracle, IBM, and Micro Trend solutions. 

The methodology is very important, the methodology guides me and the customer to obtain the goal. Between all these solutions, this is the biggest difference. Additionally, the facility to build the data warehouse identity in order to have real identity governance is important. More specifically, the facility to create integration with the system and the way to make the governance of the data connectors are important because in other solutions you have to develop the code for the connectors. This includes low-level coding and business rules that have to be put in the DAT code, it takes a lot of time to have the functionality that you desire.

This is a mature solution, you can easily configure the connectors using a GUI interface. It makes the process a lot simpler. The business rules are model-specific and governed to reach the goals. This solution is straightforward to implement than another technology.

I have my doubts about what is the best way to set up this solution. It is not only an issue with this solution but for others as well. We have two flavors of the solutions, software-as-a-service(SaaS) and on-premise. None of our customers is ready to choose one of those because if you are on-premise, generally, it is fully featured. It is easier to integrate with another system but it is not going to satisfy the customers that want a solution on the Cloud.

On the other hand, SaaS or Cloud solution may be better for you but you might have a lot of legacy systems that are not ready to work perfectly with a SaaS solution. At this point, the main issue is to figure out what solution is best at the present time, on-premise or SaaS. This decision can be very difficult.

You need to be careful with the decisions you make because if you choose an on-premise solution right now you most likely are going to be on the cloud in three years. You need to keep this in mind. The industry is going in that direction.

I rate SailPoint IdentityIQ a nine out of ten.

I use the solution in my company just to open some roles for new people or maybe those who need more particulars, so we just search for the roles and apply them to those. My company had dealt with some particular comments, like who had why the tool is needed and its justification in the business. , after which the managers approved it or whoever was in the top positions. It is basically for managing user access at the end of the day.

The solution's most valuable feature is its ease of use. It has functionality that allows me to search for or compare with others.

I don't use SailPoint that much because I have a particular role in my company. Considering the time since I last used the tool, it doesn't need anything more.

The product is unable to share suggestions with users. For example, if I put something like ABC, the tool will not be able to say something that is related to it. In some other tools, if I just start with the initials, it will show me the whole thing, but with SailPoint Identity Security Cloud, I couldn't find it. If I am just searching for a role, like PR or something, or if I write PR, it should provide me with some suggestive rules, which may be two, three, five, or whatever the role numbers. I have to write the full name, and then it will appear.

I have been using SailPoint Identity Security Cloud for two years. I don't remember the version of the solution since the client who uses it will have to update it by themselves.

I did not experience any breakdowns or bugs in the product.

More than 100 people in my team use the product.

Our company's client, who uses the product, takes care of the technical support for the solution.

The product's initial setup phase is not so difficult, so it is easy. There are no installation-related issues with the product.

The solution is deployed on an on-premises model.

As per my knowledge, it runs on a paid partnership model, but I am not sure about it.

One should definitely use the product since there are no prerequisites or things that you should know. The tool is very easy to use, and there is nothing in it that you should find very difficult to understand or learn.

It is easy for a beginner to learn to use the product for the first time.

I rate the product an eight out of ten.

We use SailPoint IdentityIQ for identity governance and access management. There is no other vendor as good as this product. 

I find the built-in connectors, lifecycle management, certification, and recertification features to be the most valuable.

Access management could be improved. SailPoint is known for its IT identity governance capabilities, but its access management features in one platform.

Comparing SailPoint's access management to that of competitors like CyberArk and Okta, there's a clear gap.

Additionally, regarding privilege access management, there's potential for improvement. If SailPoint can develop a connector for RPAQ, they could also extend their capabilities by adding more access management features and modules.

I have been using it for three years. I am currently using version 8.3.

We actually have a lot of challenges with some of our applications. Some of them are not working properly, and the issues are not fixed. We are encountering some problems.

Scalability is hard, especially when you are doing it in real time. But, it would be eliminated once we have the first version of IdentityNow. So, the main goal for now is just to eliminate maintenance costs or run the entire infrastructure. That's why we plan to migrate it to the SaaS version of SailPoint.

We have more than 10,000 end users. We use it daily, 24/7 operation.

Initially, I had difficulties, but with time, I gained experience. Especially integrating legacy applications like ARPAQ. Over time, it became easier, but integrating legacy apps remains a typical issue.

In terms of user experience, I don't have any complaints.  We are planning to migrate to the cloud.

We did it in-house with the help of a third-party vendor experienced in deploying SailPoint.

The deployment took a couple of weeks in a test environment before going into production.

We require maybe around four people because, in our company, we have different roles and responsibilities. So, from another perspective, from the system administrator, we require around four resources.

It is affordable licensing. 

Currently, we are looking for another option, which is EmpowerID.

Overall, I would rate the solution a nine out of ten. If you want to start, go better directly to the cloud, instead of installing it on-prem.

The third party is the non-payroll staff of the University. IdentityNow is used to manage services.

We are happy with the SailPoint IdentityIQ’s stability.

SailPoint IdentityIQ could be cheaper.

I have been using SailPoint IdentityIQ for a few years.

SailPoint IdentityIQ is a scalable solution. We onboarded about 30,000 students, 7,000 staff, and 7,000 third parties that we need to manage on the platform. They use it themselves, and we just need to manage the numbers on the platform. People are managing it administratively within IT with five to six people.

We have engaged with SailPoint IdentityIQ's technical support and faced no problems with them.

The solution’s initial setup is complex.

We implemented SailPoint IdentityIQ through a consultant. The solution’s deployment takes around seven months.

We have seen a return on investment with SailPoint IdentityIQ because it manages our risks.

We pay an annual licensing cost for SailPoint IdentityIQ.

SailPoint IdentityIQ is deployed on-cloud in our organization. SailPoint IdentityIQ covers our whole portfolio, and its growth will depend on the growth of our numbers.

I would advise other users to be very sure of what they want to achieve and select the right product instead of being brand specific. In our case, SailPoint IdentityIQ matched the capabilities we sought.

Overall, I rate SailPoint IdentityIQ a seven out of ten.

SailPoint started as a product for certification and governance. This is their most mature module and the first portion of the tool my clients want to implement.

But other valuable features are the strong user interface, quick ability to stand up solution, and many out of box connector.

This product, when implemented correctly, can streamline access control operations, reduce risk by provisioning and de-provisioning access quickly and hold approvers accountable for decisions on access.

There seems to be a rush to add new features in SailPoint. I would prefer cutting the amount of features in half to increase the stability, reduce the resource utilization and reduce bugs..

I have been using IdentityIQ and other Identity and Access Management solutions for over 3 years

We encountered major issues with the Active Directory connector caching configurations and concurrent major release upgrades. If you are running SailPoint 5.3, you need to update to 5.5, 6.0, 6.1, and 6.2 before upgrading to 6.3, it was a mess.

Although it seems to be getting better, for each deployment it seems a new set of bugs appear. There has never been a deployment where we have not encountered a product bug. If you are looking to do a deployment it may be better to deploy on the previous version with the latest patch than with a new version (e.g. 6.2.5 instead of 6.3).

Being based on Java, this tool is very heavy in memory and in processing. Word of advice, for large implementations be sure to use Intel processors. SailPoint supports Unix deployments, but it really is only better for smaller environments

SailPoint has a strong account management and support team, each company has an account manager and they are available to escalate issues quickly. Do not hesitate to escalate issues if they are time sensitive, sometimes it is tough to get their attention if something needs to be resolved quickly.

Similar to customer service, the technical support is strong. It might take a few times back and forth to get them out of the “try this and send us your logs” cycle, but getting them on a WebEx or LiveMeeting is a great way to watch them shine.

The initial setup is very straight forward and it takes around 30 minutes end to end. It is a Java app on a web server; you can do it locally very quickly.

The initial setup is very straight forward and it takes around 30 minutes end to end. It is a Java app on a web server so you can do it locally and very quickly.

We have had deployments with combinations of consultants, vendor hours(~200), and in house teams. The vendor help has always been very good, albeit sometimes you may get a fresh college graduate as an expert.

We achieve two returns in the investment in a SailPoint implementation. We were able to streamline access control related business processes and reduce identity management and access control risks, including potential audit/regulatory findings.

The other major players in the Identity Management space are Oracle OIM/OIA, Aveska and CA Technologies Identity Management. We had evaluated all via a vendor scorecard.

It is very difficult to go at this alone. If you are interested in implementing send your engineers to the SailPoint provisioning training and get a few experienced consultants to help you.

We primarily use this solution to manage our identity. We use it for identity access and onboarding accounts and users.

Previously, when someone came on board, it took them almost a week or two to get access, to settle in, to be able to become productive. Now, with SailPoint, we can get all of that done within a few hours. It has decreased the onboarding process and increased productivity.

So far, we are still in the implementation phase, but one feature that is so valuable is the life cycle management of identity. We also like the integration with other systems. Is very robust and solid. They built some plugins that are really well thought out and they handle most of our requirements. We also like the user interface of the product.

The service could be improved with some more out-of-the-box features. If the solution could make the forms more customizable, for example. They are very generic and any changes you make to them, you are doing customization. The solution needs more templates that meet general needs.

I would like to see more Cloud management from this product. Right now they have some, but they are currently plug-ins. It does not handle the management of some of the groups or dynamic groups in the Cloud. I would like to see that in the future. I have heard that they are releasing one soon, but I'm not sure when. That will help us a lot because we are a hybrid solution company. We have some on-prem, some in the Cloud, and we want to manage both.

I've been using the solution for one and a half years.

When we were doing the request for proposal, we did evaluate stability and got some references from other big enterprise companies that use the product. So we knew, before we selected, we knew that they had a solid product. We've heard that from many of the references we received. But when they came and did the presentation for us, they impressed us. They knew the product, they listened to what we needed, what our pain points were, and they were able to answer our questions and provide us with answers to some of our use cases. We had our requirements and they were pretty much the only one from the other vendors that we selected that could meet ninety percent of all requirements. The rest, they were limited. They had some, or they were struggling on one feature, but not others. But SailPoint, they were strong in most of them.

In terms of scalability, they can handle it. That was one of our requirements is how they could scale. We asked what number of accounts they can handle, and they were way beyond those. Some of their previous implementation, some of the companies they implemented for, they were four times the size of our company. So we were aware that this solution could handle our growth.

I would say we have about eighteen thousand users. 

Right now we are using the solution for onboarding user accounts. Primary and secondary accounts. Our second phase will be managing groups and applications, access to new groups and applications. Then the third, we'll go a little bit with analytics with doing some risk-scoring. Beyond that, we might even use it for any new innovation or company comes with, in terms of managing access to devices and IOTs.

So far the integrators have been doing the support. I wish the support from SailPoint was a little bit faster than we've experienced so far. It has taken, sometimes, a couple of weeks to get feedback from them. At the same time, support played a big role in selecting the product.

Previously, we picked a product that got moved between so many companies and got bought and merged, so the support was really horrible. We had bad support back then.

The initial setup was straightforward. We knew our requirements, and we've got all the infrastructure required for the system. We didn't have a lot of issues with the product itself. There were some vulnerabilities in the product, but they addressed them in the next version. They were able to address them in version 7.3.

Our deployment took us about, I would say a week. We had to do it in different phases. 

The implementation strategy we had was to start with first, deploying development and QA systems. Then gather lessons learned from these systems, then go to production. That helped us a lot because we found out that we have a lot of concerns with our infrastructure. There were a lot of firewalls that we had to open to communicate with the external system, with the Cloud system that we needed to connect to. So, a lot of that was more like ad-hoc testing. Because we weren't sure how many of the firewall ports we needed to open and which ones we needed. That took a lot of our time. It was just the infrastructure from our end. In terms of the installation of the product and the implementation of it, that was very quick.

We have a big staff because we are integrating with so many other systems from HR to Active Directory to SAP. So the core team is about twelve to twenty people, but the extended team, I would say, if you combine them all together with all the work we've done, is probably more than thirty or forty. They are not all technical. Some of them were just there for governance or requirement gathering.

We use an integrator to do all the coding for us, and that worked very well. They knew the product. They've implemented for a while for other clients. The company we work with is called Edgile and we have had a great experience working with them. We work very well with them. We consider them our partners. They understand our requirements, and they give us their feedback and their best practices. So we have a good relationship.

In terms of our phase one, to get people onboarded right away, within a day, that has saved us a lot of money. Also, the product discovered a lot of clean-up that we needed to do in the kind of systems that we integrate. Previously, we didn't know. So that helped us a lot in cleaning up some of our data. 

There are so many other features and other things that we can do probably, that we haven't gotten to that we know is going to save a lot in terms of the password reset support. Right now, our outsource company handles that. Once we start implementing that in a few more weeks, people will have self-service password resets. They don't need to call the help desk to get it unlocked. It costs us money, using the help desk. They will be able to do it themselves and it will save us money.

Group management and access to the application will help us too. Right now, that's all done through ticket requests and manual access implementation. In our next phase, that's all going to be automated where do you go to a form and select that and you get access, get approved and get access. It will save us a lot of time from the support respect.

The licensing fees are on a yearly basis. That's not my part of the job, so I don't know what the costs are. I handle Bio Supply management so I really don't know.

There are add-ons. A lot of them have to do with if we want any plug-in's. So if there's any new system that comes to our company that we want to integrate with, they sell their plug-ins as an add-on. It's not out-of-the-box. So integration with Active Directory, that was an add-on. Integration with SAP, that was an add-on. They are their own module. They are not packaged with the product that comes with it. You have to buy them separately. But, everybody needs them.

We had our previous vendor submit in our RFP, but they did not bring anything to the table that was new. There weren't many enhancements and improvements to the product and we really did not have a good experience with their support. 

We were looking at One Identity. SAPIEN was another one we looked at. Also, Okta, NetIQ, and Centrify. But, some of them were mainly cloud-based. Some of them were a mix of both, but more of cloud and less of on-prem. So, SailPoint was the right one that handled both.

We had some use cases that we gave to them and we needed them to answer how they would implement that use case. We wanted that feedback out of all of the vendors. SailPoint was the only one that came back with the right answers.

We have some old processes in place that need to be revisited and updated. Those, of course, made our implementation a little bit late and we ran into some issues.

One of the hurdles has been that people are used to the old method and when a new change comes in, a lot of people are not very open-minded to it. So it takes a lot of training and convincing about this new technology. We need to make changes to the way the form looks, the process. We had to make a lot of changes to the current processes. We had very outdated processes that were not working well for us because we had to get a lot of exceptions. And any exceptions you make, you tend to break automation and start doing manual processes, and that slows down productivity. 

That was a little bit frustrating and a lesson learned. Feedback from the client and explaining to them why we're changing some of the processes, policies, and standards was challenging. But we had to do a lot of cleanup before doing the implementation. We had an old system that was there for more than seven years. So that product was almost at the end of its life and we had a lot of complaints from the client that they were fed up with it. They wanted a change. But they were not expecting a change to the forms and the processes. They were expecting us to just solve the issues and move on, not a big system change. So we're training people. We created a lot of videos for them to play back when they request things. That helped a lot. We created a blog for them to give us any of their feedback. So we can make improvements because we are still in phase two of our implementation. We still have three more phases to go.

For advice, I would say to make sure you gather your requirements first. Make sure you have more thoughts, make sure you know what your pain points are and what are you expecting to get out of the product that you select. That will help you a lot in selecting the right vendors. Secondly, have some solid use cases, and when you use those use cases, most of the time you should know the answer to the questions. That will help you in identifying who can meet your requirements.

Do your diligence in terms of getting some references. Specifically, references for a current implementation from another customer. Getting that information from that customer will help you a lot in terms of how their implementation went, and what their pain points were in implementation.

I would give the solution a nine out of ten. When every possible manual process we have right now can get automated, I'll give it a ten. We still have some processes that we have to do manually.