SailPoint Identity Security Cloud Reviews

The initial setup isn't so difficult. 

The product can be flexible in the build. You can easily customize the workflows.

We can set everything up on the cloud, which makes things very easy. It can easily adapt to the PoC requirement and the set requirements on the app's online version.

The user interface needs some work. It could be more user-friendly.

Right now, it only offers a single sign-on, an SSO.

I raise requests on SailPoint, for example, if there is any server-related access needed. I use it more as an end-user, like raising simple tickets for identity access management.

SailPoint is more focused on IT security. I find that the approvals that flow through SailPoint are much better than what ServiceNow offers. SailPoint has an edge in terms of security since administrators have limited access, unlike ServiceNow where you can change everything. This adds a significant security advantage.

I have experience with AirPods IAQ, primarily for identity and access management. I work on engineering the entire workflow of IAQ, including lifecycle certifications and application integrations as they relate to access management.

We find flexibility to be one of the most valuable features. The solution can be customized to adapt the workflow to our industry, offering considerable flexibility. 

Additionally, it is considered a good solution for large companies due to its scalability and ability to cater to the needs of many customers. It has also enhanced security and provided significant flexibility for our specifications module.

We are proposing automated automation solutions like automatic JML processes, automation of different use cases, segregation of duties, and automation of entitlements. We are using the solution to reduce ticket count and are proposing a migration from SailPoint IQ to SailPoint Identity Security Cloud.

SailPoint Identity Security Cloud has reduced our effort and manual intervention as it is a cloud-based, SaaS-based solution managed by SailPoint itself. It offers high availability and reduces the total cost.

There were many use cases. We were looking for implementation of the Joined Mover Leaver and implementing birthright access, RBAC, and certification.

There are two things I find valuable. The product feature is quite nice and simple, especially in terms of the UI and implementation. Additionally, the customer support is very good. Whenever a consultation or solution guidance was needed, the team was available to answer questions and concerns. Furthermore, from a project management point of view, the tool supports audit success with features to segregate permanent and contractor employees, integrate with HR systems, and indicate other sources for contractors. These features are really beneficial.

We use this product for identity governance. There is the basic identity creation in the lifecycle followed by certification. I'm a company manager and implementer and we are customers of SailPoint.  

I think the certification module is perhaps one of the most valuable features. The options are pretty intuitive and you can usually set up the certification easily without much time or resource investment. It consists of two parts, both of which are useful. I like the pre-built out-of-the-box connectors that have a plug-and-play kind of feature. Identity IQ is easy to integrate with other systems and offers a lot of options. 

We are system integrators, so we implement and provide consulting around SailPoint. The product is used for identity governance, answering questions like who has access, what they have access to, and whether they should have access, especially for recertification. 

We create processes for role-based access control, attribute-based access control, and policy-based access control. We also handle joiners, movers, and leavers in the organization.

SailPoint helps save time and money, eliminate human error, ensure compliance, improve security, remove orphan identities, handle rogue identities, and ensure there are no redundant identities. 

Additionally, it reduces the operational overhead of audits.

The use case involved architecting solutions for LogLabs and Scotiabank, focusing on two main user groups: Identity and Access Management users utilizing various heterogeneous IEM platforms like Broadcom, and Active Directory users. The challenge revolved around implementing attestation and governance certification processes, requiring integration for both groups. Specifically, integrating with third-party systems for users on non-AD platforms and with AD for those utilizing it.

The primary objective was to leverage IdentityIQ for identity governance and compliance within the organization. With over two hundred thousand IdentityIQ instances in use and a continual influx, the focus was on streamlining identity governance processes, particularly for onboarding, offboarding, and conducting periodic attestations.

It effectively streamlined our user access management processes, serving as a central hub within our enterprise ecosystem. With various credentialing IdentityIQ access management solutions in place across the organization, SailPoint integrated seamlessly with these systems. It ingested events from these sources, generated reports, and initiated outgoing events and triggers to facilitate appropriate actions based on user and supervisor actions.

The policy management and risk-scoring capabilities of SailPoint IdentityIQ greatly benefited our organization. While we primarily focused on policy enforcement based on written guidelines for identity lifecycle management, we didn't extensively utilize a risk-based approach, as that fell under a separate area of resource management. However, within the policy feature set, SailPoint provided robust options. We were able to categorize users into different groups, such as office users, retail channel users, and backend users. Additionally, we could apply role-based access controls and differentiate between temporary and permanent employees, full-time and part-time staff, and those with specific time-based access requirements or temporary assignments within the organization.

The implementation of IdentityIQ significantly impacted our IT audit and compliance activities. SailPoint was introduced in response to an audit observation, as no prior system was in place and everything relied on manual processes. This lack of automation resulted in gaps and oversights. Implementing SailPoint IdentityIQ for attestation and governance effectively addressed this audit observation and closed the compliance gap.

It played a crucial role in addressing a complex identity management challenge within our company, particularly in the area of credential cleanup. Given the large user population, a dedicated team within the IAM pillar focused on this task. Before SailPoint, it was common to encounter instances where user identities remained active even after individuals had moved roles or left the company. For example, credentials associated with finance or treasury functions would still be accessible, even if the user had transitioned to a different department. Similarly, sensitive data access, such as payroll and HR systems, posed risks if not appropriately managed post-employee departure. SailPoint streamlined the process of managing these identities, effectively identifying and addressing instances where inactive accounts lingered, sometimes for extended periods, thus enhancing overall security and compliance efforts.