SailPoint Identity Security Cloud Reviews

We have different use cases depending on the project. For example, we use it for user management, account management, user lifecycle, certifications, reporting, SODs, and governance. We use everything that SailPoint IdentityIQ provides.

Our user lifecycle takes less time with SailPoint IdentityIQ. Previously, it would take around one day to get all the users access, and now it is an automatic process with a good authentication authorization mechanism.

When deployed on-premises, it gives us a lot of areas to customize and provides many out-of-box features. For example, it offers different out-of-box connectors where we can connect with multiple forest configurations. There are also out-of-box connectors for CyberArk, Okta, and other applications, but SailPoint IdentityIQ has more enriched out-of-box connectors than the others.

There's a lot of customization required to improve the user experience. It would also be helpful if there were some out-of-box options for filtering.

We have been using this solution for seven years. We are currently using version 8.2 or 8.3. We have also used versions 6.0, 6.1, 6.2 and 6. 3. It is deployed on-premises and on cloud.

The stability and performance are very good.

Scalability is good, but if the number of users significantly increases, it requires different web servers and becomes difficult to manage. In addition, SailPoint IdentityIQ doesn't provide any SIM tool, so we have to implement it if required. Without it, we have to work locally, going into the logs for eServers by ourselves, and there isn't a central log factory where we can see all the logs for the SailPoint IdentityIQ.

The number of users depends on the project. There are projects with millions of users and others with 100,000 or 300,000 users. Also, the number of people required for deployment depends on the number of servers and users. However, if I were to estimate, it requires an average of three people, but if the server and the UI server increase, it becomes challenging to look at the logs.

Compared to SailPoint IdentityIQ, Saviynt provides a way to select servers. From the UI, you can choose different servers and see the logs.

SailPoint IdentityIQ is being used at full capacity, and I am currently working as an architect for both Saviynt and SailPoint IdentityIQ. If I were to compare solutions, there is no comparison with SailPoint in the market right now, and SailPoint is way ahead. Solutions like Saviynt and Omada have features such as logs, clarity of the risk and SODs that are not as good in SailPoint IdentityIQ.

We have not used technical support directly, but our clients use them, and we have not heard of any problems.

We previously worked with IBM IM products like ISIM and Oracle IM, and we switched to SailPoint IdentityIQ because it is an enhancing product. SailPoint IdentityIQ is the best in feature enhancement.

It was straightforward to implement, which is an advantage with products deployed on-premises. However, there is minimal documentation around the firewall on SailPoint community sites. For example, sometimes, we want to configure SailPoint IdentityIQ for our developers in a development version, and we don't want it to connect inside a company's firewall. But that is not addressed in the architectural documents. The documentation covers areas like check configuration or DR configuration but does not mention options for different networking structures between a web server and a product and how it works. Deployment is dependent on the project. Sometimes we complete it ourselves, and other times it's done by a third party.

There is an ROI. I have worked in this domain for 12 years on different continents and have not heard of people replacing SailPoint IdentityIQ on-premise with other solutions.

I rate the price a six out of ten, with one being least expensive and ten being most expensive.

I rate this solution an eight out of ten. If deployment is done on-premises, SailPoint IdentityIQ is best, but Saviynt or Omada is better if it is cloud.

Regarding advice, SailPoint IdentityIQ is the most customizable product. However, it is good to minimize customization and use more out-of-box functionality because it becomes a hassle in the long term to manage customization in the IM product. In addition, it will be good if there is better log management in future releases.

The product is for identity management.

There are lots of features. It depends on what your use cases are. Basically, how the entitlements are handled is very good. It's the complete lifecycle of entitlements. That is what the best feature is about the product.

It offers a single source of truth. Everything can be handled from one tier.

I focused on the functionality. We needed to implement everything properly, and those functionalities were pre-built in the product. We didn't have an issue in that sense.

The interface is simple and very usable. I have used other products and didn't see their interface as better than SailPoint. 

The product is stable.

It is scalable. 

I wouldn't be able to point out any shortcomings. Right now, also I'm not working on the product as much. 

The user interface could be slightly improved. It could be made simpler and more user-friendly, however, it is good enough right now. 

I've used the solution for more than a year. 

It is stable. There are no bugs or glitches. It doesn't crash or freeze. It's reliable. 

The scalability is good. 

We only used support for a few months initially and they were very, very good. There was no problem at that time. After that, we are on our own. We have our own experts. They have been experts in SailPoint for a long, long time. Therefore, we are reaching out to SailPoint support directly - until and unless there is a shortcoming or a bug in the product. I have not come across any yet.

Positive

We had legacy systems. That's why we moved to SailPoint.

The setup was pretty good. We have five people that can handle deployment and maintenance. 

The pricing was taken care of by management. I don't know about the exact cost.

I'm a customer. We have bought the product, and we are using it. It's in our organization.

I am not sure which version of the solution we're using. It might be one version behind. 

Whether or not this is the right solution for others depends on your use cases. If your use cases align with those, this is the best product to use. The client that I'm working with has their use cases aligned with this solution, and we haven't had to customize much. Most of the functionality's in-built.

I'd rate the product ten out of ten. It covers the functionality we need.

We use this solution predominantly for the leaver process. 

This solution is easy to configure. 

The mover process for this solution could be improved. 

We have used this solution for six months. 

This is a stable solution. 

This is a scalable solution.

The initial setup is straightforward. This took one week. 

We have a monthly subscription for this solution. 

I would rate this solution an eight out of ten. 

We have a central server and use SailPoint to provide us access to all user/admin accounts/files. There are a lot of integration options that we have not taken advantage of yet - it is possible that in the future, a customer will want to integrate their HR system with SailPoint.

This solution is great for providing control access across your environment.

I would like for the next release to have a more user-friendly interface.

This is a stable solution that is widely used because it is dominant within the industry.

This solution can be expanded so I would say that it is scalable. The solution can accommodate thousands of users, there are maybe sixty of seventy thousand users within my organization.

Technical support is good.

This solution takes a long tome to deploy, but it is not complex to setup. A medium-scale deployment will take you about one year.

The system requires about ten to fifteen people to maintain from various teams i.e. active directory, access management, security etc.

You are able to get discounts if you plan to use the tool for the long-term i.e. discounts for 5+ years of usage.

I would recommend this solution to anyone looking into it and would rate it an eight out of ten.

We use Identity IQ for user onboarding, offboarding, profile management and to manage user access across various platforms in our organization. 

SailPoint has allowed us to ensure the right people have the right access and to the rights things.

The prices could be slightly reduced to match other products in the market. 

The UI of the solution could be more customizable so we could change the workflows to suit our needs.  There is not much customization offered in SailPoint connectors. We had to customize the out-of-the-box connector to meet our needs and keep track of this customization for future upgrades. 

I have been using this solution for seven years. 

This is a stable solution. 

We moved from Oracle Identity Manager to SailPoint and the initial setup was not straightforward. It took two to three days and was done is small steps. 

We implemented the solution in-house but received assistance leading up to the implementation from a third party company for three months.

From the backend perspective, when we have needed certain functionality and it has not been possible within the solution, we have reached out to SailPoint for assistance. 

I would rate it an eight out of ten. 

We used it to manage our complete lifecycle completely. We migrated from CA Integrated Manager to SailPoint in my previous firm. Typical use cases include onboarding contractors, lifecycle management, and employee lifecycle management for user certification. Other use cases include password reset and any application group-level provisioning.

I like IdentityIQ's granular attachment management and certification customization features. 

I've used IdentityIQ for the last year and a half.

IdentityIQ is pretty stable compared to our previous solution, and we're satisfied with the performance.

We haven't had any issues with scalability. What we built earlier matched our requirements, so Identity IQ was scalable as per our need when we added more users or applications. We have about 100,000 users. 

We've used their engagement and peer services team since the beginning. 

It was a standard installation. It wasn't too complicated or easy. It is a typical out-of-the-box installation. We could do it all ourselves with our in-house engineering capability. We need at least one engineer for deployment and maintenance and 10 people for support. It's a multi-year project for us split into three phases. I was there for phase one and part of the second phase. The third phase is ongoing.

The price of IdentityIQ could be lower. There are additional costs when you buy the licenses, and they force the customers to pay for them. Overall, enterprise pricing should be more transparent. It's a yearly license. 

I rate IdentityIQ 7.5 out of 10. 

We have made use of versions six, seven and eight and are currently using 8.2, the latest. 

We use the solution to create connectors, such as those involving Active Directory and GDVC for Oracle. We implement the solution towards this end. 

Access certification and provisioning are two of the solutions most valuable features. 

While the setup is very easy, the real difficulty lies in creating the connectors for work service. 

When it comes to queries and analysis, I find the reporting module to be very low, very simple. 

The solution could have better graphical features, in respect of ADDQ, when it comes to diagrams and pictures. The results for reporting use graphical layout. There should be better graphics for the interface in respect of reporting. 

We have been SailPoint IdentityIQ partners with America for one year and currently make use of the solution, same as IdentityNow, which we do with batch one or two. 

The solution is very stable. 

The solution is scalable. 

The technical support and community for SailPoint is great. 

While the setup is very easy, the real difficulty lies in creating the connectors for work service.

The deployment time varies with the project and client and can last anywhere from three months to a year or two. We have a smaller project involving 100 employees and a larger, more difficult, one involving 10,000. The latter requires a longer deployment period and more connectors. 

The solution is mainly geared toward SaaS, cloud-based services, which is the proper way to use it. I cannot think of a better use for it. 

We have hands on experience with SailPoint IdentityIQ. We work together with the SailPoint service professional and are in daily contact with their employees. 

I find the solution to be comprehensive. 

I would advise others to first create the connectors and provision in Active Directory or the the EHR system, human resource systems. One should implement the solution and the basic connectors, such as those concerning human resource applications or directory applications such as Active Directory. 

I rate SailPoint IdentityIQ as a nine out of ten. 

The solution is primarily used for governance. Clients also use it for single sign-on, to consolidate the access for B2C or B2B cases. Those are the main use cases that we've seen.

The ease of use is very good.

It's nice that everything comes out of the box in SailPoint. 

Deployment takes a bit of time, however, once it's done properly, everything becomes very organized and easy to use.

The solution is completely stable. It's one of the best solutions on the market.

The solution can scale. 

While you can scale the solution, it is expensive to do so. The solution, in general, is quite expensive. If the pricing was better, the adoption rate would be much higher. 

Deployment can take a while.

At least in the UAE, they need more presence on the ground. It would be good to have more people to assist us to help us adopt this technology and become certified on it. The bigger the channel here is, in the UAE, the more people will start to train on it, and the cost of the deployment will become cheaper when there is competition. Right now, there's some kind of monopoly. If you have two experts in the entire UAE, they're going to raise their prices so that the cost is very high. 

I've used the solution for two years at this point. 

The stability of the solution is excellent. There are no bugs or glitches and it doesn't crash or freeze. It's a very reliable product.

The solution is scalable, however, companies need to be mindful of the extra costs involved.

Technical support does not have a presence here in UAE. There's only one person that I was in contact with all the time. He's like the manager and a technical guy. He's a one-man show. That said, he's very good and very supportive. The company itself, however, does not have a presence here and they don't have an office. This one person just is mobile and is traveling most of the time.

The deployment requires someone specialized in the solution. It can be expensive to set up, however, once it's deployed and properly up and running, it's very easy to use. 

That said, the initial setup is not straightforward. Any IAM project takes some expertise to deploy, as it's not an easy technology to get going. it's the same as a SIEM solution. You need to have a good understanding of the technology and spend some time with the customer in order to completely understand his requirements. After that, you will be able to do a proper deployment.

The amount of personnel you need depends on the size of the environment, however, the bigger the environment, the more technical team you need. You need at least one expert on the site to handle the project, just one expert, who will put in the guidelines. After that, you can have, two or three junior people to do the repetitive tasks.

The license is expensive and the deployment is expensive. This is due to the fact that the experts in that field who know how to do a proper deployment are very rare, and their cost is really high. Usually, the cost of deploying about 5,000 licenses or 5,000 users, would be the equivalent to the cost of the license, which would be reaching up to around $90,000.

Users can sign up for a one-year or three-year contract.

I'm not a direct customer. I am a reseller of the product.

Usually, for this type of solution, everyone requests it to be on-prem, especially in the Gulf area. They prefer not to opt for the cloud solution. There's still some resistance in that area.

As a technology, I would rate it at a nine out of ten. It's very good. That said, in terms of pricing, I would rate it very low, at maybe a three to four. It's also making our lives very hard as system integrators. To sell it, due to the price tag, is very, very hard.

I would recommend it to other users and companies. Overall, the product is sound.