We performed a comparison between CyberArk Privileged Access Manager, Keeper, and SAP Identity Management based on real PeerSpot user reviews.
Find out what your peers are saying about CyberArk, Delinea, BeyondTrust and others in Privileged Access Management (PAM)."All of the features of CyberArk Privileged Access Manager are valuable."
"We have demoted a lot of domain admins and taken a lot of that away from people, giving it a shared account structure."
"Creating policies and the password rotation feature have been valuable. We don't have to memorize our password for the ADM account."
"It's secure and reliable. I especially appreciate that it's locked down and only allows access to authorized components."
"It supports lots of requirements in the privileged access management area."
"It enables us to secure accounts and make sure they are compliant."
"It is a single tool that isolates possible kinds of malware. You get lateral movement blocking and auditing information, e.g., you know who is doing what. You are getting protections from the service as well as a useful environment. All your admins can easily go in and out of your company while accessing your servers in a secure way, even if they are working abroad."
"It improves security in our company. We have more than 10,000 accounts that we manage in CyberArk. We use these accounts for SQLs, Windows Server, and Unix. Therefore, keeping these passwords up-to-date in another solution or software would be impossible. Now, we have some sort of a platform to manage passwords, distribute the inflow, and manage IT teams as well as making regular changes to it according to the internal security policies in our bank."
"Keeper was user-friendly."
"It is nice to be able to use my Touch ID and have access to all my passwords in one place."
"I like a couple of things about this solution. Being able to share passwords with other people is valuable. You can see if the information is out on the dark web and whether you have weak passwords and the last time they were changed. You could also have the 2FA or MFA codes embedded in the application so that you don't have to use your phone or any other 2FA device, which is something very important."
"It is very easy to use, intuitive, and cost effective."
"It has a secure password generator that incorporates random creation tools and good security practices, which allows for an easy, quick, organized update and sharing with a work team."
"What I like the most is the fact that I can just mark anything and it is automatically copied into the clipboard."
"It is very easy to install and setup."
"i have only one password to remember, which is the one to get me into Keeper."
"Rather than implement a basic SSO, this solution assisted us with setting up two-factor authentication."
"The tool's most valuable features are its access control and approval of access requests. The self-service password reset feature is efficient. Role management capabilities streamline user access by assigning and revoking roles."
"The most valuable feature is the user experience for managing information."
"The setup process is straightforward."
"What's most valuable in SAP Identity Management is that it's easily an out-of-the-box solution for connectivity with SAP applications. We do not have to do any customizations, and this makes the solution very compatible with most SAP applications. SAP Identity Management is also very user-friendly."
"What I found most valuable in SAP Identity Management is process automation. The solution also gives transparency about what is happening and why which I find beneficial. Another feature I found valuable in SAP Identity Management is integration. It has very good integration."
"The most valuable features of SAP Identity Management are business roles and automated user provisioning."
"What I like about SAP Identity Management is that it's stable for experienced users and suitable for access management, not just for SAP accounts, but for Active Directory, including file sharing and process sharing."
"Online help needs to be looked into with live agent support."
"I would like easier integrations for creating an online dashboard that executives would look at or are able to run reports from the tool."
"Sometimes the infrastructure team is hesitant to provide more resources."
"This is probably a common thing, but they do ask for a lot of log files, a lot of information. They ask you to provide a lot of information to them before they're willing to give you anything at all upfront. It would be better if they were a little more give-and-take upfront: "Why don't you try these couple of things while we take your log files and stuff and go research them?" A little bit of that might be more helpful."
"The initial setup has room for improvement to be more straightforward."
"If there is an area that has room for improvement, it's probably working with their support and getting people on the phone. That is hard to do with most products in general, but that seems to be the difficult area. The product is fantastic, but sometimes we want somebody on the phone."
"More than the product itself, there is room for improvement in the documentation. The documentation should be very detailed and very structured. It has a lot of good information, on one level, but I feel that it could be more elaborate and more structured."
"Overall what I would really love to see is the third-party PAS reporter tool pulled more into the overall solution, ideally as its own deployable component service installation package."
"Ability to set up password profiles that can predefine custom fields and password complexity."
"Search functions are sometimes weird."
"Room for improvement in my eyes would be being able to share my credit cards and other types of information. The only thing they really share is passwords, and you can only do it with one password at a time. When you're trying to share it out or trying to remove it from being shared, you can't do multiple selections."
"API possible needs improvement. Although, this feature is for enterprises which need more then the usual usage."
"Possible offline access to passwords. Therefore, when internet access is unavailable, I can still access my vault."
"The organization of items needs improvement. For example, when I log onto the cloud version as well, everything is shown on my folder. It is hard to differentiate between files and documents in my list of items I have stored inside."
"Needs to provide an API to be integrated with the information systems and offer secure file hosting service with sharing and editing capabilities."
"I would add a category for personal documents or photos of ID cards."
"Research and marketing need to be improved."
"I find SAP Identity Management complicated to use. Maintaining it is also complex."
"It needs to have the SSO for the HANA modules that SAP is releasing."
"What needs improvement in SAP Identity Management is its compatibility with third-party applications. We'd like to get connectors or plugin settings to make it easier to manage other applications, whether SAP or non SAP applications. As SAP Identity Management is not compatible with non SAP applications, some of the clients are looking for other IDM applications such as SalePoint and Saviynt, so this is an issue we've observed in the solution."
"One of the areas for improvement in the solution is its user interface which needs to be up-to-date and fancier, in particular, have better visualization in terms of the tabs and buttons. The user interface of SAP Identity Management should be improved based on the latest trends."
"The pricing could be better."
"I have encountered issues with the host authentication feature."
"A lack of startup connectors to different systems, and could have better connectors for SAP IDM."
More CyberArk Privileged Access Manager Pricing and Cost Advice →
