RSA Identity Governance and Lifecycle Reviews

What is our primary use case?

I use this solution for joiners/movers/leavers along with the add-back, role-based access control, and certification.

What is most valuable?

The data collection is excellent and easy to do. It does not require a lot of configuration nor does it require rules to be written like other competitors do.

What needs improvement?

This product is missing a lot of features which other competitors are providing. One of the key features that are missing right now is risk scoring. Additionally, there is not much scope for customization - everything is hard-coded and predefined, so it does not allow the developers to make many modifications.

What do I think about the stability of the solution?

I think the solution is stable for the most part with occasional performance issues. In my opinion, it is not meant for larger companies.

What do I think about the scalability of the solution?

The solution is quite easy to scale.

How are customer service and support?

I was working on a very critical project involving cluster deployment and needed RSA technical support to help us configure the cluster in our environment for on-premise. They assigned two engineers. One was not available until the last moment even though we contacted them nearly one month in advance. For that whole month, we were not told what we needed for the update, then just one day before the actual upgrade, they came out and said that they require physical access, a CD to be inserted in the data center, etc.  Our project ended up being delayed as a result. The other engineer, in the middle of the upgrade, told us he was not sure what kind of architecture we were using. Support needs to improve their communication and efficiency as a whole.

How was the initial setup?

Setup is straightforward and takes a team of roughly five members three to four months to complete depending on the size of the environment.

Which other solutions did I evaluate?

Competitors include SailPoint, CyberArk, 300, and Clarity.

What other advice do I have?

It is important to note that this solution runs on Oracle database only. So, even if your organization already has a database, they will still need to purchase another one. This also would require them to get a separate team of Oracle experts. Additionally, there is no automatic load or failback process. Overall this solution is best for a customer without many advanced tools within their environment who do not require integration with identify management. 

Which deployment model are you using for this solution?

On-premises