SailPoint Identity Security Cloud Reviews

I'm working on the implementation. I have encountered various use cases for the solution. Among the most common are clients using life cycle management, role-based access control, policy evaluation, and risk scores. Clients have widely utilized password reset functionality. Recently, contractor onboarding directly from IdentityIQ has emerged as a use case.

Additionally, clients have used the platform for access management tasks such as requesting new access, adding or removing accesses, and creating accounts. Furthermore, integrations with ServiceNow have become viable.

The most powerful feature of the solution is its platform-based approach. Unlike other solutions, this tool offers a high level of customization. It is an open and flexible platform, allowing users to tailor it to their needs. This ability to customize and adapt the solution to individual requirements makes the solution stand out as a powerful product.

There is a need for further enhancements, specifically in the multifactor authentication capabilities.

I have been using the solution for the past five years. I’m using the most recent version.

The solution is highly stable.

The solution is scalable and super flexible. I have 50,000 users for the product. I rate it a ten out of ten.

There has been a return on investment.

The success of the implementation depends on customers knowing exactly what is needed from the solution. Assuming that the consultant or the product will handle everything is not the right approach. The customers should know what they need. Overall, I rate the solution a nine out of ten.

Our company uses the solution to manage the life cycle and access control of users. 

We implement for various clients in the banking or investment industries in the Middle East. We also have a couple of government customers. All customers use the solution for employee management.  

The access certification feature is valuable. 

The solution is very customizable. 

Certifications could include additional access levels or practices. 

On occasion, there are difficulties with the management control when you attempt to apply things in a certain manner. 

I have been using the solution for nine years. 

The stability is pretty good because it is a very customizable solution. If you don't know how to customize or if you make mistakes, then the solution can become unstable. 

If you have enough hardware to support the on-premises version, then the solution is scalable. You need enough hardware to support the number of identities you want to manage. 

Technical support is efficient and very, very good. If you raise a concern, support is readily available with a solution. Responses are received in a very timely manner. 

The setup is very, very easy. Identity IQ is the on-premises software for the solution and it is easy to setup. There are modules to install so the only thing you need is time to complete them. 

We implement the solution for customers. First you install and connect the web server. Then you install the database on top of it. If you want additional modules, then you can import the LT module on top. 

The pricing is based on the number of users and is reasonable. 

I highly recommend the solution and rate it a seven out of ten. 

We use the solution for identity and access governance. It is an automation tool for onboarding and offboarding processes.

It has multiple good features. It provides us with the information we need for onboarding any user or application, provisioning, de-provisioning, and other business processes. The product is easy and convenient to use. It has good features. The tool is quite stable and user-friendly. We can easily customize the processes.

The product must improve its support.

I have been using the solution for three years.

The tool is reliable and stable.

We have 1000 people using the solution in our organization. It is suitable for a small organization with less than 5000 employees.

The initial setup is easy.

The solution is not cheap.

I would recommend the product to others. The solution is easy to deploy. We get a lot of applications out of the box. Overall, I rate the solution a seven out of ten.

We have made use of versions six, seven and eight and are currently using 8.2, the latest. 

We use the solution to create connectors, such as those involving Active Directory and GDVC for Oracle. We implement the solution towards this end. 

Access certification and provisioning are two of the solutions most valuable features. 

While the setup is very easy, the real difficulty lies in creating the connectors for work service. 

When it comes to queries and analysis, I find the reporting module to be very low, very simple. 

The solution could have better graphical features, in respect of ADDQ, when it comes to diagrams and pictures. The results for reporting use graphical layout. There should be better graphics for the interface in respect of reporting. 

We have been SailPoint IdentityIQ partners with America for one year and currently make use of the solution, same as IdentityNow, which we do with batch one or two. 

The solution is very stable. 

The solution is scalable. 

The technical support and community for SailPoint is great. 

While the setup is very easy, the real difficulty lies in creating the connectors for work service.

The deployment time varies with the project and client and can last anywhere from three months to a year or two. We have a smaller project involving 100 employees and a larger, more difficult, one involving 10,000. The latter requires a longer deployment period and more connectors. 

The solution is mainly geared toward SaaS, cloud-based services, which is the proper way to use it. I cannot think of a better use for it. 

We have hands on experience with SailPoint IdentityIQ. We work together with the SailPoint service professional and are in daily contact with their employees. 

I find the solution to be comprehensive. 

I would advise others to first create the connectors and provision in Active Directory or the the EHR system, human resource systems. One should implement the solution and the basic connectors, such as those concerning human resource applications or directory applications such as Active Directory. 

I rate SailPoint IdentityIQ as a nine out of ten. 

The solution is primarily used for governance. Clients also use it for single sign-on, to consolidate the access for B2C or B2B cases. Those are the main use cases that we've seen.

The ease of use is very good.

It's nice that everything comes out of the box in SailPoint. 

Deployment takes a bit of time, however, once it's done properly, everything becomes very organized and easy to use.

The solution is completely stable. It's one of the best solutions on the market.

The solution can scale. 

While you can scale the solution, it is expensive to do so. The solution, in general, is quite expensive. If the pricing was better, the adoption rate would be much higher. 

Deployment can take a while.

At least in the UAE, they need more presence on the ground. It would be good to have more people to assist us to help us adopt this technology and become certified on it. The bigger the channel here is, in the UAE, the more people will start to train on it, and the cost of the deployment will become cheaper when there is competition. Right now, there's some kind of monopoly. If you have two experts in the entire UAE, they're going to raise their prices so that the cost is very high. 

I've used the solution for two years at this point. 

The stability of the solution is excellent. There are no bugs or glitches and it doesn't crash or freeze. It's a very reliable product.

The solution is scalable, however, companies need to be mindful of the extra costs involved.

Technical support does not have a presence here in UAE. There's only one person that I was in contact with all the time. He's like the manager and a technical guy. He's a one-man show. That said, he's very good and very supportive. The company itself, however, does not have a presence here and they don't have an office. This one person just is mobile and is traveling most of the time.

The deployment requires someone specialized in the solution. It can be expensive to set up, however, once it's deployed and properly up and running, it's very easy to use. 

That said, the initial setup is not straightforward. Any IAM project takes some expertise to deploy, as it's not an easy technology to get going. it's the same as a SIEM solution. You need to have a good understanding of the technology and spend some time with the customer in order to completely understand his requirements. After that, you will be able to do a proper deployment.

The amount of personnel you need depends on the size of the environment, however, the bigger the environment, the more technical team you need. You need at least one expert on the site to handle the project, just one expert, who will put in the guidelines. After that, you can have, two or three junior people to do the repetitive tasks.

The license is expensive and the deployment is expensive. This is due to the fact that the experts in that field who know how to do a proper deployment are very rare, and their cost is really high. Usually, the cost of deploying about 5,000 licenses or 5,000 users, would be the equivalent to the cost of the license, which would be reaching up to around $90,000.

Users can sign up for a one-year or three-year contract.

I'm not a direct customer. I am a reseller of the product.

Usually, for this type of solution, everyone requests it to be on-prem, especially in the Gulf area. They prefer not to opt for the cloud solution. There's still some resistance in that area.

As a technology, I would rate it at a nine out of ten. It's very good. That said, in terms of pricing, I would rate it very low, at maybe a three to four. It's also making our lives very hard as system integrators. To sell it, due to the price tag, is very, very hard.

I would recommend it to other users and companies. Overall, the product is sound.

Less than half of my customers use the solution within the government for certification, identity process, and optimization of the roles and requirements for other areas. For the rest of my other customers, they are using the solution for their core systems. For example, they are doing vertical financial analytics. 

This solution has made my client's customers' journeys a lot better.

The most valuable feature for our customers and for us is the identity data warehouse. For financial analytics, this is the way to make the clusters better. 

The report functionality and dashboard of the access manager could be improved.

In the future, there should be improvements integrating into cloud ecosystems, such as AWS or Azure. At the moment we have to purchase many different solutions to have a fully operational intelligent identity package. There are some features lacking in identity and the DevOps solutions.

I have been using the solution for two years.

The solution is stable.

We did not have an issue with scaling the solution. My customers range from medium to large scale businesses using this solution.

The customer support process is slow at times because they do not have proper language support for my clients in Latin America speaking Spanish. There is good support for English but not Spanish.

The solution was easy to install for me but might not be for someone who is not used to the
methodology.

We have three implementation consultants, one project manager, and two engineers as part of our deployment team. The number of people sent to a project depends on the environment in which the solution is being implemented. For example, The relation is one person per three systems, if you need to make more than 20 in three months, we will have to supply more people. The implementation took approximately six months.

For the ordinary maintenance activities for administration solutions, we provide normally one person to support four customers.

The price of the solution could improve, it is not priced well for smaller businesses to afford. We have one customer that has 2,000 identities and another one with 8,000.

We have evaluated Oracle, IBM, and Micro Trend solutions. 

The methodology is very important, the methodology guides me and the customer to obtain the goal. Between all these solutions, this is the biggest difference. Additionally, the facility to build the data warehouse identity in order to have real identity governance is important. More specifically, the facility to create integration with the system and the way to make the governance of the data connectors are important because in other solutions you have to develop the code for the connectors. This includes low-level coding and business rules that have to be put in the DAT code, it takes a lot of time to have the functionality that you desire.

This is a mature solution, you can easily configure the connectors using a GUI interface. It makes the process a lot simpler. The business rules are model-specific and governed to reach the goals. This solution is straightforward to implement than another technology.

I have my doubts about what is the best way to set up this solution. It is not only an issue with this solution but for others as well. We have two flavors of the solutions, software-as-a-service(SaaS) and on-premise. None of our customers is ready to choose one of those because if you are on-premise, generally, it is fully featured. It is easier to integrate with another system but it is not going to satisfy the customers that want a solution on the Cloud.

On the other hand, SaaS or Cloud solution may be better for you but you might have a lot of legacy systems that are not ready to work perfectly with a SaaS solution. At this point, the main issue is to figure out what solution is best at the present time, on-premise or SaaS. This decision can be very difficult.

You need to be careful with the decisions you make because if you choose an on-premise solution right now you most likely are going to be on the cloud in three years. You need to keep this in mind. The industry is going in that direction.

I rate SailPoint IdentityIQ a nine out of ten.

We use SailPoint IdentityIQ mainly for employees. It's not a customer identity and access management tool. It's mainly for the workforce. All my clients choose SailPoint IdentityIQ because they need some tool that will govern and do the compliance at their end. We are mainly integrating all the applications for the organization, just like their HR, to do the governance in just one place, namely in SailPoint IdentityIQ. We're using SailPoint IdentityIQ for provisioning, granting access, taking access, automatic onboarding, and off-boarding. We also use SailPoint IdentityIQ for employees' joiner, mover, and leaver workflow. We use SailPoint IdentityIQ for automatically reprovisioning all the roles and accesses.

The most selling modules for SailPoint are the compliance manager and the life cycle manager. In addition, the password manager module is replacing the call center for any organization by doing self-service password services, resetting passwords, and unlocking accounts.

SailPoint IdentityIQ has a primitive AI engine. It doesn't compare to the autonomous engine that uses machine learning and deep learning in ForgeRock.

It would be great to have an autonomous engine that uses machine learning and deep learning to find orphan accounts, accesses not used by employees and extra accesses.

I have been doing a SailPoint IdentityIQ pre sales presentation for two years and a real product implementation for six months.

SailPoint IdentityIQ is a stable solution, and I rate it a nine out of ten for stability.

I rate SailPoint IdentityIQ less than five out of ten for scalability. To increase scalability, you need to increase servers, which is not easy.

The technical support in the Middle East is being done through partners. SailPoint IdentityIQ has no physical presence in the Middle East except through its partners and distributors. However, SailPoint IdentityIQ's remote support is always available. SailPoint IdentityIQ's technical support is good because they are always available when the partners or the implementation team face any issues.

Positive

The initial setup of SailPoint IdentityIQ was very easy, and I rate it a ten out of ten. We have an automatic deployment engine, so the deployment takes around an hour, not long.

SailPoint IdentityIQ is highly-priced, and I rate it an eight out of ten for pricing.

Our clients using SailPoint IdentityIQ are mainly in the banking sector, and the others are part of the Saudi Arabia government and ministry. For 12 years, SailPoint IdentityIQ twelve has been the leader of Gartner Magic Quadrant. All the market reports suggest SailPoint IdentityIQ when you're doing governance and compliance for your workforce. SailPoint IdentityIQ is even replacing other solutions like IBM and ServiceNow.

SailPoint IdentityIQ is a stable and reliable workforce identity and access management solution. If you're looking for a solution for the workforce, you should opt for SailPoint IdentityIQ, and if you're looking for a solution for the customer base, you should choose ForgeRock.

Overall, I rate SailPoint IdentityIQ a ten out of ten.

We have different use cases depending on the project. For example, we use it for user management, account management, user lifecycle, certifications, reporting, SODs, and governance. We use everything that SailPoint IdentityIQ provides.

Our user lifecycle takes less time with SailPoint IdentityIQ. Previously, it would take around one day to get all the users access, and now it is an automatic process with a good authentication authorization mechanism.

When deployed on-premises, it gives us a lot of areas to customize and provides many out-of-box features. For example, it offers different out-of-box connectors where we can connect with multiple forest configurations. There are also out-of-box connectors for CyberArk, Okta, and other applications, but SailPoint IdentityIQ has more enriched out-of-box connectors than the others.

There's a lot of customization required to improve the user experience. It would also be helpful if there were some out-of-box options for filtering.

We have been using this solution for seven years. We are currently using version 8.2 or 8.3. We have also used versions 6.0, 6.1, 6.2 and 6. 3. It is deployed on-premises and on cloud.

The stability and performance are very good.

Scalability is good, but if the number of users significantly increases, it requires different web servers and becomes difficult to manage. In addition, SailPoint IdentityIQ doesn't provide any SIM tool, so we have to implement it if required. Without it, we have to work locally, going into the logs for eServers by ourselves, and there isn't a central log factory where we can see all the logs for the SailPoint IdentityIQ.

The number of users depends on the project. There are projects with millions of users and others with 100,000 or 300,000 users. Also, the number of people required for deployment depends on the number of servers and users. However, if I were to estimate, it requires an average of three people, but if the server and the UI server increase, it becomes challenging to look at the logs.

Compared to SailPoint IdentityIQ, Saviynt provides a way to select servers. From the UI, you can choose different servers and see the logs.

SailPoint IdentityIQ is being used at full capacity, and I am currently working as an architect for both Saviynt and SailPoint IdentityIQ. If I were to compare solutions, there is no comparison with SailPoint in the market right now, and SailPoint is way ahead. Solutions like Saviynt and Omada have features such as logs, clarity of the risk and SODs that are not as good in SailPoint IdentityIQ.

We have not used technical support directly, but our clients use them, and we have not heard of any problems.

We previously worked with IBM IM products like ISIM and Oracle IM, and we switched to SailPoint IdentityIQ because it is an enhancing product. SailPoint IdentityIQ is the best in feature enhancement.

It was straightforward to implement, which is an advantage with products deployed on-premises. However, there is minimal documentation around the firewall on SailPoint community sites. For example, sometimes, we want to configure SailPoint IdentityIQ for our developers in a development version, and we don't want it to connect inside a company's firewall. But that is not addressed in the architectural documents. The documentation covers areas like check configuration or DR configuration but does not mention options for different networking structures between a web server and a product and how it works. Deployment is dependent on the project. Sometimes we complete it ourselves, and other times it's done by a third party.

There is an ROI. I have worked in this domain for 12 years on different continents and have not heard of people replacing SailPoint IdentityIQ on-premise with other solutions.

I rate the price a six out of ten, with one being least expensive and ten being most expensive.

I rate this solution an eight out of ten. If deployment is done on-premises, SailPoint IdentityIQ is best, but Saviynt or Omada is better if it is cloud.

Regarding advice, SailPoint IdentityIQ is the most customizable product. However, it is good to minimize customization and use more out-of-box functionality because it becomes a hassle in the long term to manage customization in the IM product. In addition, it will be good if there is better log management in future releases.