Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs SAP Identity Management comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyberArk Privileged Access ...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
225
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
SAP Identity Management
Average Rating
7.8
Reviews Sentiment
5.9
Number of Reviews
14
Ranking in other categories
User Provisioning Software (6th), Identity Management (IM) (12th)
 

Mindshare comparison

While both are Identity and Access Management solutions, they serve different purposes. CyberArk Privileged Access Manager is designed for Privileged Access Management (PAM) and holds a mindshare of 16.9%, down 22.0% compared to last year.
SAP Identity Management, on the other hand, focuses on Identity Management (IM), holds 2.6% mindshare, down 2.9% since last year.
Privileged Access Management (PAM)
Identity Management (IM)
 

Featured Reviews

Abdul Durrani - PeerSpot reviewer
Enables granular and secure access with just-in-time access and Zero Trust model
CyberArk provides a good amount of control over access types. However, as a future enhancement, having additional features for cross-platform integration would be beneficial. It would be good to have integrations with other tools and firewalls, such as Zscaler and CrowdStrike. Although I am not fully aware of recent updates, more cross-platform integration would be valuable. A SOC analyst would like to have centralized access in terms of information flowing in even for privileged access management. They would like to have control over everything instead of opening four to five tabs for different sorts of information. Cross-platform integration would help with that. Customers also want CyberArk's pricing to be better so that they can implement it further and have more licenses. Implementing a privileged access management solution can be challenging. It would be great if CyberArk could provide recommendations based on the compliance standards of an organization. It would help system admins ensure that all the required ports are closed and the systems are being managed properly. If any system is not being used anymore, any ports opened for that system need to be closed. Having such recommendations would be helpful.
Kiril Petkov - PeerSpot reviewer
Stable, especially if you're an experienced user and is suitable for managing access rights for accounts, process sharing, and file sharing, but it isn't straightforward to use or maintain
I'm not so happy about the features provided by SAP Identity Management, but I'm not sure where the problem lies, if it's a product issue, an issue with its deployment, or both. I find SAP Identity Management complicated to use. Maintaining it is also complex. The solution is integrated with only two core systems, so it's not compatible with all applications in terms of providing single sign-on, which makes no sense to me, so this is another area for improvement in SAP Identity Management. Still, the issue could be with the supplier my company is working with, as that supplier provides consultancy and deployment services. It's a popular, experienced, and well-ranked supplier in the local market. However, it's still not guaranteed that the business requirements have been understood correctly and that the deployment was done properly. What I'd like to see in SAP Identity Management in its next release is a more innovative way to use it for handling all access rights rather than having to use different products.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The fact that I can put my vault here in a central location on one net for example, and I'll have a CPM in California, a CPM in Texas, a CPM in New York, a CPM in Florida, and actually be able to grow with my company and not necessarily have to continue to grow my vault until I get to a certain number accounts - yet I can still manage everything across the country, if not the world - I love that. I love the flexibility and the capability of being able to pull those components out."
"The risk of lost password and forbidden access to resources has been drastically reduced which increased the security level for the entire company,"
"The solution is very good for protecting full levels of data privacy."
"I find the discovery feature, which includes credential management, session management, monitoring, and remediation within a session, to be very valuable."
"CyberArk has been easy for us to implement and the adoption has been good. We've been able to standardize a bunch of things. We've been able to standardize relatively easily with the use of the platforms and managing the policies."
"The regulation of accounts is by far the most needed and valuable part of the application."
"Rather than multiple tools for maintaining regulatory compliance around passwords and privileged accounts, we have centralized as much as possible with CyberArk. This is now a one stop shop for end users to access their elevated credentials."
"It has helped us with our adoption with other teams, and it has also helped us to integrate it at the ground level."
"What I like about SAP Identity Management is that it's stable for experienced users and suitable for access management, not just for SAP accounts, but for Active Directory, including file sharing and process sharing."
"The setup process is straightforward."
"Rather than implement a basic SSO, this solution assisted us with setting up two-factor authentication."
"It provides basic automatic user administration and role provisioning to save time."
"What I found most valuable in SAP Identity Management is process automation. The solution also gives transparency about what is happening and why which I find beneficial. Another feature I found valuable in SAP Identity Management is integration. It has very good integration."
"The tool's most valuable features are its access control and approval of access requests. The self-service password reset feature is efficient. Role management capabilities streamline user access by assigning and revoking roles."
"The most valuable feature is the user experience for managing information."
"The most valuable features of SAP Identity Management are business roles and automated user provisioning."
 

Cons

"When something comes out, it's generally airtight and works as advertised. However, sometimes they are a little bit slow to keep up with what's coming out. In 2017, for example, they released support for Windows Server 2016, which had been out for a year or so."
"One thing that could be improved is to create of a better alternative for fixing group policy fees. We currently use Microsoft, but they have introduced new policies that may not be compatible."
"Sometimes critical issues require follow-ups, as the support team doesn't always recognize the urgency of a critical ticket immediately."
"PAM could be more user-friendly and CyberArk could update the documentation to include more real-world examples. You have to learn it yourself through trial and error. In particular, the online documentation should have more information about troubleshooting."
"There are upwards of six components you need to set it up. And you might need anywhere from two to five servers. It takes some work to set that up, especially in a larger environment."
"As a customer, I might need a plugin for a specific product, or an application, and CyberArk might have already worked with some other client on it. There has to be some platform where it is available for everybody else to go and grab it, instead of my having to reinvent the wheel."
"There is room for improvement in the availability of custom connectors on the marketplace for this solution. Additionally, their services for the CICD pipeline and ease of integration could be improved."
"Transitioning from a traditional on-premises deployment to the privileged cloud has resulted in losing access to many logs and administrative tools typically available on the back end."
"I have encountered issues with the host authentication feature."
"A lack of startup connectors to different systems, and could have better connectors for SAP IDM."
"SAP Identity Management can improve risk analysis and authority checks."
"One of the areas for improvement in the solution is its user interface which needs to be up-to-date and fancier, in particular, have better visualization in terms of the tabs and buttons. The user interface of SAP Identity Management should be improved based on the latest trends."
"Research and marketing need to be improved."
"It needs to have the SSO for the HANA modules that SAP is releasing."
"I find SAP Identity Management complicated to use. Maintaining it is also complex."
"For SAP support in Brazil, everything is in English, which poses a difficulty for many customers."
 

Pricing and Cost Advice

"Pricing is a problem. CyberArk is expensive compared to other products I know. It is similar to buying a German car. It comes with all the bells and whistles, but some companies may find it too expensive."
"It's per-company, license-based."
"Licensing fees are paid on a yearly basis."
"If you are looking at implementing this solution, buy the training and go to it."
"It can be an expensive product."
"From a client perspective, CyberArk's pricing is fair but there is a significant increase each year. They should limit the price increase because this could potentially drive customers to other partners. Price changes should be at defined intervals. There should not be sudden jumps."
"Pricing is quite high and it could be improved."
"The pricing for CyberArk is on the higher side compared to other Privileged Access Management products. Something should be done regarding enterprise licensing for long-standing customers."
"When evaluating the price of any product, I first look at how it meets my business requirements and if it meets requirements adequately and predictively. Currently, I don't see this from SAP Identity Management, so pricing for it is expensive, in my opinion."
"I rate the solution's pricing a four out of ten."
"The licensing cost varies depending on the specific requirements and deployment size."
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
865,140 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
15%
Manufacturing Company
9%
Government
7%
Manufacturing Company
14%
Computer Software Company
11%
Energy/Utilities Company
8%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What do you like most about SAP Identity Management?
The tool's most valuable features are its access control and approval of access requests. The self-service password reset feature is efficient. Role management capabilities streamline user access b...
What needs improvement with SAP Identity Management?
One area that could be improved with SAP Identity Management, other than support, is user engagement from an implementation perspective. It would be beneficial for SAP to extend their events and wo...
What is your primary use case for SAP Identity Management?
The use cases for SAP Identity Management include the logistics company, and we also have a beverage company that is using SAP Identity Management. We did not make the migration for them, but we im...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
SAP NetWeaver Identity Management, NetWeaver Identity Management
 

Overview

 

Sample Customers

Rockwell Automation
State of Indiana, Automotive Resources International (ARI), Alliander N.V., Chemion Logistik GmbH, Seoul National University Bundang Hospital (SNUBH)
Find out what your peers are saying about CyberArk, Delinea, One Identity and others in Privileged Access Management (PAM). Updated: July 2025.
865,140 professionals have used our research since 2012.