Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs IBM Tivoli Access Manager [EOL] vs SailPoint Identity Security Cloud comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Featured Reviews

Atul-Gujar - PeerSpot reviewer
CyberArk manager at a comms service provider with 10,001+ employees
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
it_user711612 - PeerSpot reviewer
Senior Consultant at a insurance company with 1,001-5,000 employees
Reverse proxy provides central control over authentication and authorization.
It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…
ND
Principle at a manufacturing company with 10,001+ employees
User access management excels but needs enhancements with integration capabilities
I was aware of that because I used to manage these solutions earlier on, but it was purchased by the Procurement team, so I was not involved in any of those.There are certain details I may not be able to disclose currently, but we can speak in general about a number of products and tools that are ongoing. I have not been using access management controls here, so I don't have the latest features or details or hands-on experience in that space. I cannot share all the details about the improvements in security operations since we were exploring some products, but I'm familiar with Saviynt as I was one of their partners for other solutions, and currently, I cannot disclose a lot of performance related to my current roles.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We have demoted a lot of domain admins and taken a lot of that away from people, giving it a shared account structure."
"The access control feature and privilege and role-based assignment are outstanding."
"We found the initial setup to be easy."
"CyberArk Privileged Access Manager's main benefit is it provides secure access to our servers. There are features to capture the user activity, it provides video recording processing. If the users are logged in to the server, we can see what activities they are performing. It's a very nice tool for Privileged Access Management. They have plenty of useful services and the solution has fulfilled our needs."
"It enables companies to automate password management on target systems gaining a more secure access management approach."
"It is a leading solution and one of the best SaaS solutions in the market."
"For me, CyberArk Privileged Access Manager's most valuable features are password and session management."
"Thus far I can say technical support is excellent. We haven't had any issues or difficulties."
"SAML 2.0."
"The integration effort with the end application is quite straightforward and easy."
"The Verify feature: A push method which customers are going for."
"OAuth 2 is now the de facto standard for API protection and scoped authorized delegation. IBM TAM now supports OAuth 2 and can act as fully compliant OAuth 2 authorization server."
"Single Sign-On functionality is valuable because the core purpose of the product is to allow universal (or bespoke) SSO for application suites."
"SailPoint has an edge in terms of security since administrators have limited access, unlike ServiceNow where you can change everything. This adds a significant security advantage."
"This solution has improved our organization through its ease of application onboarding, approvals, provisioning, and lifecycle UI performance."
"The most selling modules for SailPoint are the compliance manager and the life cycle manager."
"Access certification and provisioning are two of the solutions most valuable features."
"​The Certification and Provisioning features are most valuable."
"It is a stable tool, which we run in our complex environment."
"The solution is very good at the management of the identity lifecycle."
"The tool is quite stable and user-friendly."
 

Cons

"There was a functionality of the solution that was missing. I had noticed it in Beyond Trust, but not in this solution. But, recently they have incorporated something similar."
"The technical support is very poor."
"CyberArk Privileged Access Manager could improve the integration docking, it should have more layers. For example, integration with OpenShift."
"The issue of technical support is crucial, as there are not many specialized partners available in Brazil to provide this service. While English language support is of good quality, there is a significant shortage of partners capable of meeting the demand locally."
"It's a big program. To scale excessively, locally, on an on-prem application, takes a lot of servers."
"If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution."
"The initial setup could be simplified. Right now, in comparison to its nearest competitors, it's quite complex."
"The stability depends on the infrastructure it is installed on, which is important because CyberArk does not have the hardware appliance."
"The profiling element is incredibly robust, but also equally as complex, it requires an off-site course to be able to understand the context or the plethora of options available."
"Multi-factor authentication with social integration needs to improve."
"The self-service portal needs improvement."
"Looking at their roadmap, they have a broad grasp of the security features which the industry needs."
"An Amazon Machine Image (AMI) for the newer appliance versions for hosting the virtual appliances on AWS will help."
"The solution needs to have more out-of-the-box integration with different applications and solutions."
"In general, I have handled Okta and OpenText and noted that those companies have a longer history in the market, which gives them an advantage over SailPoint Identity Security Cloud and Saviynt in aspects like account provisioning and life cycle management."
"The solution's technical support team's response time and skills need improvement since it is an area where there are shortcomings."
"One needs to understand that SailPoint is into full-fledged IAM practice with a long-term vision, and customers will get a quick ROI with best practices implementation."
"It is too technical. You need really good technical skills in Java and other technologies, which are hard to find. If they can make it easier so that things can be done with a few clicks, it will be great."
"SailPoint IdentityIQ could be cheaper."
"What it doesn't do is provide notice in the event of a vulnerability or offense from the security."
"Finding integration experts for SailPoint in the North American market can be challenging, and transitioning to a no-code or low-code setup could reduce dependence on specialized skills."
 

Pricing and Cost Advice

"I do not have any opinions to add about the pricing of the product."
"I would rate the tool’s pricing a six out of ten."
"CyberArk Enterprise Password Vault is a very expensive product."
"Network and security licenses are currently being managed by other outsource vendors, so they are facing some type of problems in the digital aspect."
"There are no additional costs other than the standard licensing fees."
"Its price can be reduced."
"It is not a cheap solution. It is expensive as compared with other solutions. However, it is one of the best solutions in their domain."
"The solution is cost-effective for the features."
"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."
"We pay an annual licensing cost for SailPoint IdentityIQ."
"SailPoint IdentityIQ is highly-priced, and I rate it an eight out of ten for pricing."
"The product is expensive. I rate its pricing an eight out of ten."
"The pricing is a little bit higher than other tools."
"It is a costly solution. Its cost, for sure, should be reduced."
"SailPoint is higher in price as compared to Saviynt. The initial cost of SailPoint is very high. There are additional costs to the standard licensing fees."
"I rate the solution a seven on a scale where one is cheap and ten is too expensive. In short, the solution falls under the higher side of pricing."
"It's difficult to say that the solution saved costs because it is quite expensive."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
881,821 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Manufacturing Company
10%
Computer Software Company
9%
Government
6%
No data available
Financial Services Firm
16%
Manufacturing Company
10%
Computer Software Company
9%
Healthcare Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise40
Large Enterprise173
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise18
By reviewers
Company SizeCount
Small Business21
Midsize Enterprise8
Large Enterprise42
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If the...
Ask a question
Earn 20 points
What is your experience regarding pricing and costs for SailPoint IdentityIQ?
The product is expensive. People need to opt for a licensing plan for one year or three years.
What advice do you have for others considering SailPoint IdentityIQ?
You can use SailPoint Atlas to take identity security to the next level. In SailPoint IIQ, writing a custom connector...
What do you like most about SailPoint IdentityNow?
It significantly reduces the workload for certification processes.
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
Tivoli Access Manager, IBM Security Access Manager
IdentityIQ, IdentityNow, Cloud Infrastructure Entitlement Management, Intello
 

Overview

 

Sample Customers

Rockwell Automation
Essex Technology Group Inc.
Adobe, AXA Technology Services, Cuna Mutual Group, Equifax, ING Direct, Orrstown Bank, Rockwell Automation, SallieMae, Spirit Aerosystems, TEL
Find out what your peers are saying about CyberArk, One Identity, Delinea and others in Privileged Access Management (PAM). Updated: January 2026.
881,821 professionals have used our research since 2012.