SailPoint Identity Security Cloud Reviews

We use SailPoint IdentityIQ mainly for employees. It's not a customer identity and access management tool. It's mainly for the workforce. All my clients choose SailPoint IdentityIQ because they need some tool that will govern and do the compliance at their end. We are mainly integrating all the applications for the organization, just like their HR, to do the governance in just one place, namely in SailPoint IdentityIQ. We're using SailPoint IdentityIQ for provisioning, granting access, taking access, automatic onboarding, and off-boarding. We also use SailPoint IdentityIQ for employees' joiner, mover, and leaver workflow. We use SailPoint IdentityIQ for automatically reprovisioning all the roles and accesses.

The most selling modules for SailPoint are the compliance manager and the life cycle manager. In addition, the password manager module is replacing the call center for any organization by doing self-service password services, resetting passwords, and unlocking accounts.

SailPoint IdentityIQ has a primitive AI engine. It doesn't compare to the autonomous engine that uses machine learning and deep learning in ForgeRock.

It would be great to have an autonomous engine that uses machine learning and deep learning to find orphan accounts, accesses not used by employees and extra accesses.

I have been doing a SailPoint IdentityIQ pre sales presentation for two years and a real product implementation for six months.

SailPoint IdentityIQ is a stable solution, and I rate it a nine out of ten for stability.

I rate SailPoint IdentityIQ less than five out of ten for scalability. To increase scalability, you need to increase servers, which is not easy.

The technical support in the Middle East is being done through partners. SailPoint IdentityIQ has no physical presence in the Middle East except through its partners and distributors. However, SailPoint IdentityIQ's remote support is always available. SailPoint IdentityIQ's technical support is good because they are always available when the partners or the implementation team face any issues.

Positive

The initial setup of SailPoint IdentityIQ was very easy, and I rate it a ten out of ten. We have an automatic deployment engine, so the deployment takes around an hour, not long.

SailPoint IdentityIQ is highly-priced, and I rate it an eight out of ten for pricing.

Our clients using SailPoint IdentityIQ are mainly in the banking sector, and the others are part of the Saudi Arabia government and ministry. For 12 years, SailPoint IdentityIQ twelve has been the leader of Gartner Magic Quadrant. All the market reports suggest SailPoint IdentityIQ when you're doing governance and compliance for your workforce. SailPoint IdentityIQ is even replacing other solutions like IBM and ServiceNow.

SailPoint IdentityIQ is a stable and reliable workforce identity and access management solution. If you're looking for a solution for the workforce, you should opt for SailPoint IdentityIQ, and if you're looking for a solution for the customer base, you should choose ForgeRock.

Overall, I rate SailPoint IdentityIQ a ten out of ten.

We have different use cases depending on the project. For example, we use it for user management, account management, user lifecycle, certifications, reporting, SODs, and governance. We use everything that SailPoint IdentityIQ provides.

Our user lifecycle takes less time with SailPoint IdentityIQ. Previously, it would take around one day to get all the users access, and now it is an automatic process with a good authentication authorization mechanism.

When deployed on-premises, it gives us a lot of areas to customize and provides many out-of-box features. For example, it offers different out-of-box connectors where we can connect with multiple forest configurations. There are also out-of-box connectors for CyberArk, Okta, and other applications, but SailPoint IdentityIQ has more enriched out-of-box connectors than the others.

There's a lot of customization required to improve the user experience. It would also be helpful if there were some out-of-box options for filtering.

We have been using this solution for seven years. We are currently using version 8.2 or 8.3. We have also used versions 6.0, 6.1, 6.2 and 6. 3. It is deployed on-premises and on cloud.

The stability and performance are very good.

Scalability is good, but if the number of users significantly increases, it requires different web servers and becomes difficult to manage. In addition, SailPoint IdentityIQ doesn't provide any SIM tool, so we have to implement it if required. Without it, we have to work locally, going into the logs for eServers by ourselves, and there isn't a central log factory where we can see all the logs for the SailPoint IdentityIQ.

The number of users depends on the project. There are projects with millions of users and others with 100,000 or 300,000 users. Also, the number of people required for deployment depends on the number of servers and users. However, if I were to estimate, it requires an average of three people, but if the server and the UI server increase, it becomes challenging to look at the logs.

Compared to SailPoint IdentityIQ, Saviynt provides a way to select servers. From the UI, you can choose different servers and see the logs.

SailPoint IdentityIQ is being used at full capacity, and I am currently working as an architect for both Saviynt and SailPoint IdentityIQ. If I were to compare solutions, there is no comparison with SailPoint in the market right now, and SailPoint is way ahead. Solutions like Saviynt and Omada have features such as logs, clarity of the risk and SODs that are not as good in SailPoint IdentityIQ.

We have not used technical support directly, but our clients use them, and we have not heard of any problems.

We previously worked with IBM IM products like ISIM and Oracle IM, and we switched to SailPoint IdentityIQ because it is an enhancing product. SailPoint IdentityIQ is the best in feature enhancement.

It was straightforward to implement, which is an advantage with products deployed on-premises. However, there is minimal documentation around the firewall on SailPoint community sites. For example, sometimes, we want to configure SailPoint IdentityIQ for our developers in a development version, and we don't want it to connect inside a company's firewall. But that is not addressed in the architectural documents. The documentation covers areas like check configuration or DR configuration but does not mention options for different networking structures between a web server and a product and how it works. Deployment is dependent on the project. Sometimes we complete it ourselves, and other times it's done by a third party.

There is an ROI. I have worked in this domain for 12 years on different continents and have not heard of people replacing SailPoint IdentityIQ on-premise with other solutions.

I rate the price a six out of ten, with one being least expensive and ten being most expensive.

I rate this solution an eight out of ten. If deployment is done on-premises, SailPoint IdentityIQ is best, but Saviynt or Omada is better if it is cloud.

Regarding advice, SailPoint IdentityIQ is the most customizable product. However, it is good to minimize customization and use more out-of-box functionality because it becomes a hassle in the long term to manage customization in the IM product. In addition, it will be good if there is better log management in future releases.

SailPoint IdentityIQ is used for reporting and identity, account, and access management.

The most valuable features of SailPoint IdentityIQ are the reporting because it is better than other solutions. The workflows can be customized to our requirements and the overall features are good.

If you compare Saviynt and Okta Workforce Identity versus SailPoint IdentityIQ, SailPoint IdentityIQ needs to improve its UI.

I have been using SailPoint IdentityIQ for approximately four years.

When using SailPoint IdentityIQ you need to tell them the capacity you want, and they will provide the solution with the appropriate license. For example, you have to tell them initially that you will have 50,000 users using the solution then they will tell you how much service you will need to deploy.

The technical support is not very good but it is good. They can improve.

I have previously used Saviynt and Okta Workforce Identity.

The initial setup of SailPoint IdentityIQ is easy. The time of deployment can take approximately two days.

We did the implementation of SailPoint IdentityIQ in-house.

My advice to others is if you are new to the identity access management world, and you are starting with SailPoint IdentityIQ, you have the best tool in your hand to start with. You can receive complete exposure to all the types of operations or workflows.

I rate SailPoint IdentityIQ a nine out of ten.

We use this solution predominantly for the leaver process. 

This solution is easy to configure. 

The mover process for this solution could be improved. 

We have used this solution for six months. 

This is a stable solution. 

This is a scalable solution.

The initial setup is straightforward. This took one week. 

We have a monthly subscription for this solution. 

I would rate this solution an eight out of ten. 

We have a central server and use SailPoint to provide us access to all user/admin accounts/files. There are a lot of integration options that we have not taken advantage of yet - it is possible that in the future, a customer will want to integrate their HR system with SailPoint.

This solution is great for providing control access across your environment.

I would like for the next release to have a more user-friendly interface.

This is a stable solution that is widely used because it is dominant within the industry.

This solution can be expanded so I would say that it is scalable. The solution can accommodate thousands of users, there are maybe sixty of seventy thousand users within my organization.

Technical support is good.

This solution takes a long tome to deploy, but it is not complex to setup. A medium-scale deployment will take you about one year.

The system requires about ten to fifteen people to maintain from various teams i.e. active directory, access management, security etc.

You are able to get discounts if you plan to use the tool for the long-term i.e. discounts for 5+ years of usage.

I would recommend this solution to anyone looking into it and would rate it an eight out of ten.

We use Identity IQ for user onboarding, offboarding, profile management and to manage user access across various platforms in our organization. 

SailPoint has allowed us to ensure the right people have the right access and to the rights things.

The prices could be slightly reduced to match other products in the market. 

The UI of the solution could be more customizable so we could change the workflows to suit our needs.  There is not much customization offered in SailPoint connectors. We had to customize the out-of-the-box connector to meet our needs and keep track of this customization for future upgrades. 

I have been using this solution for seven years. 

This is a stable solution. 

We moved from Oracle Identity Manager to SailPoint and the initial setup was not straightforward. It took two to three days and was done is small steps. 

We implemented the solution in-house but received assistance leading up to the implementation from a third party company for three months.

From the backend perspective, when we have needed certain functionality and it has not been possible within the solution, we have reached out to SailPoint for assistance. 

I would rate it an eight out of ten. 

We used it to manage our complete lifecycle completely. We migrated from CA Integrated Manager to SailPoint in my previous firm. Typical use cases include onboarding contractors, lifecycle management, and employee lifecycle management for user certification. Other use cases include password reset and any application group-level provisioning.

I like IdentityIQ's granular attachment management and certification customization features. 

I've used IdentityIQ for the last year and a half.

IdentityIQ is pretty stable compared to our previous solution, and we're satisfied with the performance.

We haven't had any issues with scalability. What we built earlier matched our requirements, so Identity IQ was scalable as per our need when we added more users or applications. We have about 100,000 users. 

We've used their engagement and peer services team since the beginning. 

It was a standard installation. It wasn't too complicated or easy. It is a typical out-of-the-box installation. We could do it all ourselves with our in-house engineering capability. We need at least one engineer for deployment and maintenance and 10 people for support. It's a multi-year project for us split into three phases. I was there for phase one and part of the second phase. The third phase is ongoing.

The price of IdentityIQ could be lower. There are additional costs when you buy the licenses, and they force the customers to pay for them. Overall, enterprise pricing should be more transparent. It's a yearly license. 

I rate IdentityIQ 7.5 out of 10. 

We used the product for identity and access management and access governance. The product manages the whole identity lifecycle for workplace identities.  

IdentityIQ takes care of the joiner (new accounts), the mover (transfer/role changes), and the lever (account termination), as well as looking at things like the certification phase. It covers the whole user lifecycle (Rehire) and provides market leading governance capabilities. It provides a centralised view of accounts and access for staff and helps uplift the security controls for the organisation.

It has improved the controls and reduced the risk of access management issues with the client organisations. While also improving efficiency around the JML processes through automation and reducing the reliance on people for some of the access provisioning requests.

The product's main features for the certification of users is the most prominent as well as the best feature. The out of the box connectors and accelerator pack are also great pieces to help improve the speed of delivery.

There is really not so much that SailPoint needs to improve. It has been in the market for a while and has well embedded as a market leader in the Identity Governance Space. We have just done an upgrade (v7-.8.1) and it was straight foward well tested and there was no major issues, we even managed to deploy to production a week ahead of schedule. We are now working with the client to leverage some of the new features and such, so there is not a lot that I can confirm that would be missing from a product that I was already happy with.  

The only thing about SailPoint that I might suggest to improve is the user interface could be improved from an administration point of view. From a request point of view we are leveraging ServiceNow and Sailpoints SNOW catalogue integration. Having had the opportunity to compare SailPoint and One Identity with past work, I personally prefer the One Identity's user interface, especially for user administration of the system. It could be simplified or somewhat more user-friendly for administrative tasks and functions.

We implemented the foundational release for a customer over over 12 months ago and since then we have worked closely with them to increase its functionality

IdentityIQ is a stable product. We have not experienced any problems with it and have not heard of any from our clients.  

The user group for this product are normally larger companies or enterprise businesses that have got full identity-governance requirements. That is the typical SailPoint customer requires more than just basic identity management automation.

As far as scalability of the product, it has got a lot of horizontal and vertical scaling opportunities that could be taken advantage, so scaling is not an issue.  

Overall the technical support is relatively good, especially from a customer point of view. I think that the support is working fine for the customers and that makes it better for us in selling their products. 

There is also a wealth of information online for the product for the Sailpoint community. 

This is a new implementation at this client they previously had no Identity governance in place

The initial setup of the product is relatively straightforward. The complexity really depends on the customer requirements, business rules or processes that influence how difficult the implementation gets. On average, it probably takes a couple of days to install the product. But once it is installed, then you have got to have the product usable and working with other solutions and other systems. For that, it needs to be configured to have that connectivity with those other systems. That is where some of the implementation time starts to add up. To install a base active directory kind of set up takes about two weeks. 

We have configured and setup some basic functionality for a client within these tight timeframes. To do that you will need real business buy in to clear hurdles out of the way for the dependencies for the install, the infrastructure, business requirements etc.

We are a service integrator so we help clients to do all their setup. We like to set the client up so that they are capable of doing their own maintenance with the software and system if they want to otherwise we offer a full range of support options. 

The client has had a positive reduction in the time taken to get a user on boarded and productive. There has also been a significant improvement in their access and Identity Management controls, reducing risk and closing audit items.

There are additional modules which are licenced separately that you can get added into the licensing if you want certain additional functionality, I find this a great model to ensure you only pay for what you need. 

I am currently dealing with SailPoint and One Identity at the same time in making some comparisons. They are both very good products with their pros and cons. 

The advice that I would give to people considering SailPoint is to be sure you get a good experienced service integrator to help you with the product. Somebody who has done it before knows the best ways to implement it and make the system work properly to meet your business application. They have the battle scars and can help you navigate around any potential issues

On a scale from one to ten where one is the worst and ten is the best, I would rate IdentityIQ as a nine-out-of-ten.