No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Tivoli Access Manager [EOL] vs Idira Privileged Access Manager comparison

The compared IBM and Idira by Palo Alto Networks solutions aren't in the same category. Idira by Palo Alto Networks is ranked #1 in PAM , with an average rating of 8.6, and holds a 9.9% mindshare. Additionally, 93% of IBM users are willing to recommend the solution, compared to 95% of Idira by Palo Alto Networks users who would recommend it.
Idira Privileged Access Man...
Read 230 Idira Privileged Access Manager reviews
  • 22,329 Views
  • 9,378 Comparison Views
95% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between IBM Tivoli Access Manager [EOL] and Idira Privileged Access Manager based on real PeerSpot user reviews.

Find out what your peers are saying about Okta, Microsoft, Cisco and others in Single Sign-On (SSO).

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Single Sign-On (SSO) Report (Updated: June 2026).
Buyer's Guide
Single Sign-On (SSO)
June 2026
Download the complete report
Helped 904,973 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Tivoli Access Manager [...
Average Rating
8.0
Reviews Sentiment
3.8
Number of Reviews
29
Ranking in other categories
No ranking in other categories
Idira Privileged Access Man...
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
230
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)
 

Featured Reviews

it_user711612 - PeerSpot reviewer
it_user711612
Senior Consultant at a insurance company with 1,001-5,000 employees
Reverse proxy provides central control over authentication and authorization.
It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…
Read full review
Atul-Gujar - PeerSpot reviewer
Atul-Gujar
CyberArk manager at a comms service provider with 10,001+ employees
Secures critical infrastructures with essential user session audit records
A potential area for improvement is enhancing support for cluster environments and distributed Vaults. Clients in multiple countries that need central access have different challenges that require better solutions from CyberArk. For financial services, CyberArk can improve incident response by ensuring fast support for critical priority tickets to meet compliance requirements. Providing more documentation on CyberArk is recommended for new team members to enhance their troubleshooting capabilities. I understand it's up to the client, but 99% fail to change the demo key, so it's crucial for CyberArk to emphasize changing the key and documenting it as part of the installation process.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"This product is highly recommended to meet access management and web single sign-on requirements."
"It provided a secure and robust end to end security solution."
"OAuth 2 is now the de facto standard for API protection and scoped authorized delegation. IBM TAM now supports OAuth 2 and can act as fully compliant OAuth 2 authorization server."
"Several SSO methods are supported out of box, federation based SSO (SAML / Oauth / OpenID etc) setup is easy, performance and scalability are very good, and the internal STS token service can be used for custom SSO tokens."
"It is one of the best products in the present market in the area of access management."
"It is a simple-to-deploy solution, with many features that are supported out-of-the-box without complicated setup."
"Provided more secure computing."
"The WebSEAL reverse proxy is great for protecting your critical systems."
More IBM Tivoli Access Manager [EOL] pros
"CyberArk Privileged Access Manager has been helpful in managing over 125,000 privileged accounts in a single environment for our client, and we have multiple CyberArk environments for different clients with different numbers of accounts."
"It does what it promised, it secures our platforms, has the scalability, and it is just a solid product."
"CyberArk is a very stable product and it's a stable product because it has a simple design and a simple architecture that allows you to leverage the economies of scale across the base of your infrastructure that you already have implemented. It doesn't really introduce any new complex pieces of infrastructure that would make it that much more difficult to scale."
"Password Vault's policy configuration is very good - when you receive an attack, you can segment the structure of the project in order to isolate parts or users."
"The most valuable features of CyberArk Privileged Access Manager include its search capabilities."
"All features of the CyberArk PAS solution are valuable."
"All of the features of CyberArk Privileged Access Manager are valuable."
"The most valuable feature of CyberArk Privileged Access Manager is the vault. I am satisfied with the interface and the documentation."
More Idira Privileged Access Manager pros
 

Cons

"Complex to install and run."
"The license model is pretty complex."
"Administration of the product can be improved a lot."
"The whole product could be made into one suite instead of multiple components which are essentially a part of the same infrastructure."
"Redundant Policy servers had to be manually configured using LB."
"Multi-factor authentication with social integration needs to improve."
"I have not tested the stability yet."
"Installation and configuration. If you don’t know the requirements of the supporting components, it could be complicated to install and this has been improved in the later versions that are renamed to IBM Tivoli Security Access Manager."
More IBM Tivoli Access Manager [EOL] cons
"Response time is not ideal, and reaching someone knowledgeable can take time."
"Sometimes, when we install their product, the BFN (Bridge to Future Networks) to the component manager, we have issues."
"Implementation documentation could use some improvement in a few areas."
"The major pain point that we have is the capacity of CyberArk due to the sheer volume of NPAs that we are managing. We are a large organization and we have hundreds of thousands of non-personal accounts to manage. We have already found out that there are certain capacity limitations within CyberArk that might introduce performance issues. From my perspective, something that would be valuable would be if the vault could hold more passwords and be more scalable."
"CyberArk Privileged Access Manager can be improved because I have experienced one issue where a user connected through RDP to a Linux server and the PAM could not fetch any commands or key store logging from the Linux server, which works fine on Windows servers."
"Report creation could be improved. The policies could be more customized."
"We found a lot of errors during the initial setup. They should work to improve the implementation experience and to remove errors from the process."
"Customers also want CyberArk's pricing to be better so that they can implement it further and have more licenses."
More Idira Privileged Access Manager cons
 

Pricing and Cost Advice

"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."
"Pricing and licensing depend on the environment."
"If you are looking at implementing this solution, buy the training and go to it."
"This solution is considered to be more expensive than others out there on the market today."
"CyberArk is good at what they do, and the price reflects that. You have to pay the price for the same."
"CyberArk Enterprise Password Vault is a very expensive product."
"CyberArk DNA is free if you purchase the CyberArk solution. There is no additional charge for CyberArk DNA, which is great."
"Before we bought it, they were licensing each function individually, which got complicated and very expensive. When we decided to buy it, it was much more straightforward and still quite expensive, but it brings a lot of value and risk reduction to the organization."
"I do not have any opinions to add about the pricing of the product."
More Idira Privileged Access Manager pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Single Sign-On (SSO) solutions are best for your needs.
See recommendations
904,973 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
15%
Financial Services Firm
14%
Outsourcing Company
11%
Marketing Services Firm
11%
Financial Services Firm
13%
Manufacturing Company
10%
Outsourcing Company
8%
Construction Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise18
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise42
Large Enterprise175
 

Questions from the Community

Ask a question
Earn 20 points
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
See all answers
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
My thoughts on the pricing of CyberArk Privileged Access Manager depend entirely on the vendors' requirements. If they want their things to be secure, they have to spend accordingly. We have four t...
See all answers
What needs improvement with CyberArk Privileged Access Manager?
I believe account discovery and rolling support need to be improved. Account discovery is important when integrating with other systems, as other PAM solutions can perform account discovery and onb...
See all answers
 

Comparisons

Symantec Siteminder vs IBM Tivoli Access Manager [EOL] Logo
Symantec Siteminder vs IBM Tivoli Access Manager [EOL]
Compared 13% of the time
SailPoint Identity Security Cloud vs IBM Tivoli Access Manager [EOL] Logo
SailPoint Identity Security Cloud vs IBM Tivoli Access Manager [EOL]
Compared 8% of the time
Okta Platform vs IBM Tivoli Access Manager [EOL] Logo
Okta Platform vs IBM Tivoli Access Manager [EOL]
Compared 8% of the time
Idira Identity vs IBM Tivoli Access Manager [EOL] Logo
Idira Identity vs IBM Tivoli Access Manager [EOL]
Compared 5% of the time
Keeper Enterprise Password Manager vs IBM Tivoli Access Manager [EOL] Logo
Keeper Enterprise Password Manager vs IBM Tivoli Access Manager [EOL]
Compared 5% of the time
More IBM Tivoli Access Manager [EOL] Competitors
One Identity Safeguard vs Idira Privileged Access Manager Logo
One Identity Safeguard vs Idira Privileged Access Manager
Compared 4% of the time
Teleport vs Idira Privileged Access Manager Logo
Teleport vs Idira Privileged Access Manager
Compared 3% of the time
Keeper Enterprise Password Manager vs Idira Privileged Access Manager Logo
Keeper Enterprise Password Manager vs Idira Privileged Access Manager
Compared 3% of the time
Saviynt Identity Cloud vs Idira Privileged Access Manager Logo
Saviynt Identity Cloud vs Idira Privileged Access Manager
Compared 3% of the time
Delinea Secret Server vs Idira Privileged Access Manager Logo
Delinea Secret Server vs Idira Privileged Access Manager
Compared 3% of the time
More Idira Privileged Access Manager Competitors
 

Product Reports

Buyer's Guide
IBM Tivoli Access Manager [EOL]
July 2026
IBM Tivoli Access Manager [EOL] reportDownload IBM Tivoli Access Manager [EOL] product report
Buyer's Guide
Idira Privileged Access Manager
July 2026
Idira Privileged Access Manager reportDownload Idira Privileged Access Manager product report
 

Also Known As

Tivoli Access Manager, IBM Security Access Manager
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

IBM Tivoli Access Manager is a robust and secure centralized policy management solution for e-business and distributed applications. IBM Tivoli Access Manager WebSEAL is a high performance, multi-threaded Web server that applies fine-grained security policy to the Tivoli Access Manager protected Web object space. WebSEAL can provide single sign-on solutions and incorporate back-end Web application server resources into its security policy.
IBM

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

  • Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
  • Privilege Session Manager: Offers comprehensive session recording and monitoring.
  • Privileged Threat Analytics: Detects and alerts on potential credential threats.
  • Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

  • Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
  • Compliance Support: Ensures alignment with compliance policies through automated processes.
  • Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
  • Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks
 

Sample Customers

Essex Technology Group Inc.
Rockwell Automation
Buyer's Guide
Single Sign-On (SSO)
June 2026
Download Free Report
Find out what your peers are saying about Okta, Microsoft, Cisco and others in Single Sign-On (SSO). Updated: June 2026.
DOWNLOAD NOW
904,973 professionals have used our research since 2012.

We monitor all Single Sign-On (SSO) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.