NetIQ Identity Manager Reviews

Event driven provisioning and powerful Development and documentation tool - Designer are the most valuable features on NetIQ Identity manager

Identity and access management processes have developed to become automatic and fast. While the source of identity information is the HR data, user rights can reflect the user role(s) in an organization.

The UI for requesting and approving rights have been a little outdated, however, in the most recent version that has been addressed. Also, the amount of work from box to production has been improved a lot during the years, but for sure - there is always a need for a capable project team to fit the product to the processes of an organization.

12 years.

High amount of skill with the product and overall knowledge of IAM are useful to avoid issues on IAM deployment. The issues are normally due to data quality, which can be fixed with the products Analyzer application.

Product is stable. At certain points, there have been bugs - but NetIQ Support has been able to help with those kind of situations

Product is very scalable. It is matter of optimizing the rules used during the integration process.

7/10.

9/10.

No previous solution used.

IM products are someway framework solutions. Deploying a solution to an organization requires co-operation with many stakeholders and knowledge on the systems to integrate.

With a normal integration, for example with AD, it's a matter of configuration, but integration with the HR system it's a matter of designing processes - for example if the system is not a standard out of the box system.

I have been a consultant on customer implementation projects.

• Sell the idea at the CEO level
• Get sponsors for a project
• Get a capable project team
• Choose a consultant who knows the product and not only the IDM processes.

The Role Based Provisioning Module feature is by far the best thing about the product; using roles and entitlements for access and provisioning makes old group based obsolete.

It has reduced time and resource costs due to automation of previously hand-managed tasks like provisioning, granting access, distribution and access to different enterprise connected applications.

Definitely documentation is among the most lacking features of the product. Also, the ability to run all components on Windows OS is needed.

I've used it for one year in different customer environments and licenses.

Deployment is pretty easygoing, though some trouble might arise if the customer's security policy is overly strict or the infrastructure has a bad design.

Stability wise I would rate the product 8 out of 10. Some known quirks and bugs give unwanted resource hogs that can be a headache at the wrong moment.

No major problems as of yet.

Scalability becomes an issue if the vision changes from the initial implementation. Not being flexible and having to rewrite quite a bit of code for even a simple added feature makes it difficult.

9/10.

8/10.

We previously used Microsoft Forefront Identity Manager.

Initial setup is straightforward if done by vendor requirements.

We used a vendor team, and their level of expertise is 9/10.

• Four hours for installation
• Development hours vary
• Two hours weekly maintenance and check-ups

We also looked at Quest OneIdentity, Oracle Identity Manager and Tivoli Identity Manager.

• It is a money saver in the long run
• As long as you set your requirements from the get-go there won't be overhead further along