SailPoint IdentityIQ Reviews

We used the product for identity and access management and access governance. The product manages the whole identity lifecycle for workplace identities.  

IdentityIQ takes care of the joiner (new accounts), the mover (transfer/role changes), and the lever (account termination), as well as looking at things like the certification phase. It covers the whole user lifecycle (Rehire) and provides market leading governance capabilities. It provides a centralised view of accounts and access for staff and helps uplift the security controls for the organisation.

It has improved the controls and reduced the risk of access management issues with the client organisations. While also improving efficiency around the JML processes through automation and reducing the reliance on people for some of the access provisioning requests.

The product's main features for the certification of users is the most prominent as well as the best feature. The out of the box connectors and accelerator pack are also great pieces to help improve the speed of delivery.

There is really not so much that SailPoint needs to improve. It has been in the market for a while and has well embedded as a market leader in the Identity Governance Space. We have just done an upgrade (v7-.8.1) and it was straight foward well tested and there was no major issues, we even managed to deploy to production a week ahead of schedule. We are now working with the client to leverage some of the new features and such, so there is not a lot that I can confirm that would be missing from a product that I was already happy with.  

The only thing about SailPoint that I might suggest to improve is the user interface could be improved from an administration point of view. From a request point of view we are leveraging ServiceNow and Sailpoints SNOW catalogue integration. Having had the opportunity to compare SailPoint and One Identity with past work, I personally prefer the One Identity's user interface, especially for user administration of the system. It could be simplified or somewhat more user-friendly for administrative tasks and functions.

We implemented the foundational release for a customer over over 12 months ago and since then we have worked closely with them to increase its functionality

IdentityIQ is a stable product. We have not experienced any problems with it and have not heard of any from our clients.  

The user group for this product are normally larger companies or enterprise businesses that have got full identity-governance requirements. That is the typical SailPoint customer requires more than just basic identity management automation.

As far as scalability of the product, it has got a lot of horizontal and vertical scaling opportunities that could be taken advantage, so scaling is not an issue.  

Overall the technical support is relatively good, especially from a customer point of view. I think that the support is working fine for the customers and that makes it better for us in selling their products. 

There is also a wealth of information online for the product for the Sailpoint community. 

This is a new implementation at this client they previously had no Identity governance in place

The initial setup of the product is relatively straightforward. The complexity really depends on the customer requirements, business rules or processes that influence how difficult the implementation gets. On average, it probably takes a couple of days to install the product. But once it is installed, then you have got to have the product usable and working with other solutions and other systems. For that, it needs to be configured to have that connectivity with those other systems. That is where some of the implementation time starts to add up. To install a base active directory kind of set up takes about two weeks. 

We have configured and setup some basic functionality for a client within these tight timeframes. To do that you will need real business buy in to clear hurdles out of the way for the dependencies for the install, the infrastructure, business requirements etc.

We are a service integrator so we help clients to do all their setup. We like to set the client up so that they are capable of doing their own maintenance with the software and system if they want to otherwise we offer a full range of support options. 

The client has had a positive reduction in the time taken to get a user on boarded and productive. There has also been a significant improvement in their access and Identity Management controls, reducing risk and closing audit items.

There are additional modules which are licenced separately that you can get added into the licensing if you want certain additional functionality, I find this a great model to ensure you only pay for what you need. 

I am currently dealing with SailPoint and One Identity at the same time in making some comparisons. They are both very good products with their pros and cons. 

The advice that I would give to people considering SailPoint is to be sure you get a good experienced service integrator to help you with the product. Somebody who has done it before knows the best ways to implement it and make the system work properly to meet your business application. They have the battle scars and can help you navigate around any potential issues

On a scale from one to ten where one is the worst and ten is the best, I would rate IdentityIQ as a nine-out-of-ten.  

I'm a consultant. I work with companies to evaluate it and sometimes help them implement it as well.

I'm using the most recent version. It's somewhere around version 8.

The big one now is that they're adding AI and machine learning to figure out automated approvals and make recommendations to their reviewers. So, if I bring up Doug McPherson and it says he has access to this application, the system will make a review based on peer group analysis. That's one of the biggest new things. The problem used to be that people would get everything loaded on, and they created too much work for themselves. Now, they can use these policies and start to let the machine pick the less risky things. If it says it should be approved, then automatically approve it. It's definitely a time saver for a lot of people.

It has got a great user interface, and it just does the job.

It tends to be more expensive, but at the end of the day, it works.

I have been using it for probably 15 years. 

Its stability is very good. It's running so well now. I'd rate it a nine out of ten in terms of stability.

Its scalability is awesome. They've got customers with over a million users, so it'll scale to what you need. It has a very scalable architecture.

I'm a consultant, and I implement it for clients. I've worked with clients from 5,000 users and up to about 400,000 users.

I'd rate them really high. They have a group called Expert Services. They rely on third parties like me or the big four, like the Deloittes and the PWs, to do the implementation, but they maintain a group that they call their Expert Services. It has about a hundred people you can go to for the hardest things. If you were on the edge of performance issues and any other issues, you can bring in their experts. It's a really good team. It's more expensive than the other guys, but it's worth it.

IdentityIQ is difficult to begin with, but compared to its competitors, it'd be an eight out of ten in terms of ease of setup.

The deployment duration varies. They've got examples of people being up and running in a month. For massive companies with hundreds or thousands of employees, it takes a couple of years to get fully implemented, but they've got ways where you can implement it almost by a business unit, so you can be up and running and then slowly, you add the rest of the company to the implementation.

In terms of the number of people required, the actual SailPoint team would be three to four people, and then they use the business analysts in the company to help onboard the application. That's a really nice methodology where I can spread the workload over a bunch of people instead of having to rely on one person and get those backlogs and lineups form. For example, I can have a business analyst from the business units I'm working with help me onboard applications. That really speeds it up.

In terms of the deployment model, they have a SaaS version, but you can do it on-prem, and you can also do it with the hybrid model.

It depends on your company, but I've seen ROIs in 14 to 18 months. So, it's great.

It's all competitive. Initially, the prices look a bit higher, but once it gets into a competitive situation, they meet the market. I'd rate it an eight out of ten in terms of pricing. It tends to be more expensive, but it works.

They've got such a big lead in the market from a capabilities point of view. They're going after the cloud, so they're doing a lot in the cloud management area and making that easier for clients to implement it for managing the applications in the cloud space or all their SaaS applications. That's one of the big areas. They just did the acquisition of SecZetta, which provides management for third parties. For partners and third parties you work with, it can help automate the management of access to those people.

I'd rate it a nine out of ten because what it does is hard. The work that they implement isn't simple because the companies are so big. It works and does the job. It's not the product that causes problems; it's generally working with the company and its processes, but the product is bulletproof.

We have different use cases depending on the project. For example, we use it for user management, account management, user lifecycle, certifications, reporting, SODs, and governance. We use everything that SailPoint IdentityIQ provides.

Our user lifecycle takes less time with SailPoint IdentityIQ. Previously, it would take around one day to get all the users access, and now it is an automatic process with a good authentication authorization mechanism.

When deployed on-premises, it gives us a lot of areas to customize and provides many out-of-box features. For example, it offers different out-of-box connectors where we can connect with multiple forest configurations. There are also out-of-box connectors for CyberArk, Okta, and other applications, but SailPoint IdentityIQ has more enriched out-of-box connectors than the others.

There's a lot of customization required to improve the user experience. It would also be helpful if there were some out-of-box options for filtering.

We have been using this solution for seven years. We are currently using version 8.2 or 8.3. We have also used versions 6.0, 6.1, 6.2 and 6. 3. It is deployed on-premises and on cloud.

The stability and performance are very good.

Scalability is good, but if the number of users significantly increases, it requires different web servers and becomes difficult to manage. In addition, SailPoint IdentityIQ doesn't provide any SIM tool, so we have to implement it if required. Without it, we have to work locally, going into the logs for eServers by ourselves, and there isn't a central log factory where we can see all the logs for the SailPoint IdentityIQ.

The number of users depends on the project. There are projects with millions of users and others with 100,000 or 300,000 users. Also, the number of people required for deployment depends on the number of servers and users. However, if I were to estimate, it requires an average of three people, but if the server and the UI server increase, it becomes challenging to look at the logs.

Compared to SailPoint IdentityIQ, Saviynt provides a way to select servers. From the UI, you can choose different servers and see the logs.

SailPoint IdentityIQ is being used at full capacity, and I am currently working as an architect for both Saviynt and SailPoint IdentityIQ. If I were to compare solutions, there is no comparison with SailPoint in the market right now, and SailPoint is way ahead. Solutions like Saviynt and Omada have features such as logs, clarity of the risk and SODs that are not as good in SailPoint IdentityIQ.

We have not used technical support directly, but our clients use them, and we have not heard of any problems.

We previously worked with IBM IM products like ISIM and Oracle IM, and we switched to SailPoint IdentityIQ because it is an enhancing product. SailPoint IdentityIQ is the best in feature enhancement.

It was straightforward to implement, which is an advantage with products deployed on-premises. However, there is minimal documentation around the firewall on SailPoint community sites. For example, sometimes, we want to configure SailPoint IdentityIQ for our developers in a development version, and we don't want it to connect inside a company's firewall. But that is not addressed in the architectural documents. The documentation covers areas like check configuration or DR configuration but does not mention options for different networking structures between a web server and a product and how it works. Deployment is dependent on the project. Sometimes we complete it ourselves, and other times it's done by a third party.

There is an ROI. I have worked in this domain for 12 years on different continents and have not heard of people replacing SailPoint IdentityIQ on-premise with other solutions.

I rate the price a six out of ten, with one being least expensive and ten being most expensive.

I rate this solution an eight out of ten. If deployment is done on-premises, SailPoint IdentityIQ is best, but Saviynt or Omada is better if it is cloud.

Regarding advice, SailPoint IdentityIQ is the most customizable product. However, it is good to minimize customization and use more out-of-box functionality because it becomes a hassle in the long term to manage customization in the IM product. In addition, it will be good if there is better log management in future releases.

Less than half of my customers use the solution within the government for certification, identity process, and optimization of the roles and requirements for other areas. For the rest of my other customers, they are using the solution for their core systems. For example, they are doing vertical financial analytics. 

This solution has made my client's customers' journeys a lot better.

The most valuable feature for our customers and for us is the identity data warehouse. For financial analytics, this is the way to make the clusters better. 

The report functionality and dashboard of the access manager could be improved.

In the future, there should be improvements integrating into cloud ecosystems, such as AWS or Azure. At the moment we have to purchase many different solutions to have a fully operational intelligent identity package. There are some features lacking in identity and the DevOps solutions.

I have been using the solution for two years.

The solution is stable.

We did not have an issue with scaling the solution. My customers range from medium to large scale businesses using this solution.

The customer support process is slow at times because they do not have proper language support for my clients in Latin America speaking Spanish. There is good support for English but not Spanish.

The solution was easy to install for me but might not be for someone who is not used to the
methodology.

We have three implementation consultants, one project manager, and two engineers as part of our deployment team. The number of people sent to a project depends on the environment in which the solution is being implemented. For example, The relation is one person per three systems, if you need to make more than 20 in three months, we will have to supply more people. The implementation took approximately six months.

For the ordinary maintenance activities for administration solutions, we provide normally one person to support four customers.

The price of the solution could improve, it is not priced well for smaller businesses to afford. We have one customer that has 2,000 identities and another one with 8,000.

We have evaluated Oracle, IBM, and Micro Trend solutions. 

The methodology is very important, the methodology guides me and the customer to obtain the goal. Between all these solutions, this is the biggest difference. Additionally, the facility to build the data warehouse identity in order to have real identity governance is important. More specifically, the facility to create integration with the system and the way to make the governance of the data connectors are important because in other solutions you have to develop the code for the connectors. This includes low-level coding and business rules that have to be put in the DAT code, it takes a lot of time to have the functionality that you desire.

This is a mature solution, you can easily configure the connectors using a GUI interface. It makes the process a lot simpler. The business rules are model-specific and governed to reach the goals. This solution is straightforward to implement than another technology.

I have my doubts about what is the best way to set up this solution. It is not only an issue with this solution but for others as well. We have two flavors of the solutions, software-as-a-service(SaaS) and on-premise. None of our customers is ready to choose one of those because if you are on-premise, generally, it is fully featured. It is easier to integrate with another system but it is not going to satisfy the customers that want a solution on the Cloud.

On the other hand, SaaS or Cloud solution may be better for you but you might have a lot of legacy systems that are not ready to work perfectly with a SaaS solution. At this point, the main issue is to figure out what solution is best at the present time, on-premise or SaaS. This decision can be very difficult.

You need to be careful with the decisions you make because if you choose an on-premise solution right now you most likely are going to be on the cloud in three years. You need to keep this in mind. The industry is going in that direction.

I rate SailPoint IdentityIQ a nine out of ten.

The solution is primarily used for governance. Clients also use it for single sign-on, to consolidate the access for B2C or B2B cases. Those are the main use cases that we've seen.

The ease of use is very good.

It's nice that everything comes out of the box in SailPoint. 

Deployment takes a bit of time, however, once it's done properly, everything becomes very organized and easy to use.

The solution is completely stable. It's one of the best solutions on the market.

The solution can scale. 

While you can scale the solution, it is expensive to do so. The solution, in general, is quite expensive. If the pricing was better, the adoption rate would be much higher. 

Deployment can take a while.

At least in the UAE, they need more presence on the ground. It would be good to have more people to assist us to help us adopt this technology and become certified on it. The bigger the channel here is, in the UAE, the more people will start to train on it, and the cost of the deployment will become cheaper when there is competition. Right now, there's some kind of monopoly. If you have two experts in the entire UAE, they're going to raise their prices so that the cost is very high. 

I've used the solution for two years at this point. 

The stability of the solution is excellent. There are no bugs or glitches and it doesn't crash or freeze. It's a very reliable product.

The solution is scalable, however, companies need to be mindful of the extra costs involved.

Technical support does not have a presence here in UAE. There's only one person that I was in contact with all the time. He's like the manager and a technical guy. He's a one-man show. That said, he's very good and very supportive. The company itself, however, does not have a presence here and they don't have an office. This one person just is mobile and is traveling most of the time.

The deployment requires someone specialized in the solution. It can be expensive to set up, however, once it's deployed and properly up and running, it's very easy to use. 

That said, the initial setup is not straightforward. Any IAM project takes some expertise to deploy, as it's not an easy technology to get going. it's the same as a SIEM solution. You need to have a good understanding of the technology and spend some time with the customer in order to completely understand his requirements. After that, you will be able to do a proper deployment.

The amount of personnel you need depends on the size of the environment, however, the bigger the environment, the more technical team you need. You need at least one expert on the site to handle the project, just one expert, who will put in the guidelines. After that, you can have, two or three junior people to do the repetitive tasks.

The license is expensive and the deployment is expensive. This is due to the fact that the experts in that field who know how to do a proper deployment are very rare, and their cost is really high. Usually, the cost of deploying about 5,000 licenses or 5,000 users, would be the equivalent to the cost of the license, which would be reaching up to around $90,000.

Users can sign up for a one-year or three-year contract.

I'm not a direct customer. I am a reseller of the product.

Usually, for this type of solution, everyone requests it to be on-prem, especially in the Gulf area. They prefer not to opt for the cloud solution. There's still some resistance in that area.

As a technology, I would rate it at a nine out of ten. It's very good. That said, in terms of pricing, I would rate it very low, at maybe a three to four. It's also making our lives very hard as system integrators. To sell it, due to the price tag, is very, very hard.

I would recommend it to other users and companies. Overall, the product is sound.

We use this product for identity governance. There is the basic identity creation in the lifecycle followed by certification. I'm a company manager and implementer and we are customers of SailPoint.  

I think the certification module is perhaps one of the most valuable features. The options are pretty intuitive and you can usually set up the certification easily without much time or resource investment. It consists of two parts, both of which are useful. I like the pre-built out-of-the-box connectors that have a plug-and-play kind of feature. Identity IQ is easy to integrate with other systems and offers a lot of options. 

The only issue I have with the product is that there are modules that need to be bought separately, and that makes the product prohibitive for some of the customers that I've worked with, particularly in the middle-tier range. The solution itself is expensive and then when you add the cost of the modules it becomes too much. They could provide something similar to what Okta offers and I believe this would give the company a lot more traction in the mid-size range of companies. I'd like to see SailPoint support for custom-based connectors.

I've been using this solution for three years. 

The solution is stable. There are a few bugs here and there, but that's expected for any kind of implementation that we do. It's a risk associated with each and every product. It's not the worst we've seen but there's definitely scope for improvement.

SailPoint is easy to scale.  They give you the bandwidth for that. 

The technical support is good. There are various levels of technical support that you can access depending on the licensing model you purchase. 

Positive

The initial setup is pretty simple and a straightforward mechanism. It does require some knowledge on how to set up and a basic understanding of networking protocols and other things, which is pretty complex. It's not something that's easy to learn and I think SailPoint could look at bringing out intuitive-based migration> There are 10 people in my team who deal with implementation and deployment and the time it takes generally depends on the scale of the setup. One of our larger projects took around three months. 

Licensing costs are high and since we're not an official partner, we're unable to offer any discounts to our customers. Companies often choose an alternative solution that is significantly cheaper and covers 90% of their use cases. I would expect SailPoint to be more price sensitive and have the capability to cater to even small clients and provide them with features necessary in their daily IM use cases. It would expose SailPoint to a larger audience and they'd have a larger implementation market.

I have evaluated a couple of other solutions. Okta is a pure access management product. They have recently launched their Identity Governance suite. Okta and Cisco are more into access management with more focus on providing MFA and access regulation in the traditional sense, rather than going into the governance side of things. SailPoint, on the other hand, is more into identity governance with their workflows more natively able to support use cases with certification. These are two different genres of product so you can't make a direct comparison. If you have Okta or Cisco Duo, you cannot expect it to do a certification. If you have SailPoint, you cannot expect it to do an MFA for you. The market is moving towards a combined product that does everything and I expect each of these products to basically expand more to support all the other use cases. 

Prior to purchase, be sure that SailPoint can solve all your use cases. Otherwise, you'll be unhappy with the amount of money that you're spending. 

I rate this solution seven out of 10. 

There are a lot of use cases. About 90% of our clients are using this solution for internal identity management. Only one client is using SailPoint for external customers. 

About 70% or 80% of deployments are on the cloud, and about 30% or 20% of deployments are on-premise. We have two customers who have on-premise deployments.

It provides a lot of out-of-the-box functionalities. You don't have to do too much custom development like other solutions such as Microsoft or NetIQ. It also has a lot of out-of-the-box connectors for different sources, directories, databases, etc.

Its cloud version is working very well, and its pricing is okay. Its value for money is fine for most of the customers. It is also very flexible. They have frequent new releases and patches for fixing errors and things like that.

They can work on their strategy for the on-premise version. They have to decide whether and for how long they will support the on-premise version. The new features first appear in the cloud, and after that, they are released for the on-premise version. In the cloud, you have more options and flexibility, which is absolutely normal. They have to have a clear strategy regarding whether they'll support the on-premises version with the same focus. The licensing for on-premise and cloud is a little bit different. They can make it the same.

We have been using this solution for three years.

It is absolutely stable.

It is scalable. It can support tens of millions of identities. We have a total of nine clients. Eight clients use it internally. One client is using SailPoint for external customers, and it is a very large deployment. They have about a million and a half customers.

We do not offer support because support is provided by SailPoint, but we can act as the first line of support. We have around seven people who are actively doing SailPoint tasks.

Their support is very good. My colleagues, as well as our customers, have shared that the support is very good.

We had some experience with Microsoft and IBM in the past, but these solutions are not so good. They're very expensive, and Microsoft and IBM are not flexible in pricing. 

We decided to go with SailPoint because, as a company, they are flexible. Their partner discounts are also good. SailPoint is a really good company. It is a new generation company like some of the other competitors and vendors.

Its installation is easy, but it depends on how many and what types of identity sources you have. If you have well-defined sources, such as active directory, LDAP directory, or some other application directories, it is very easy, but if you have only databases with identities, it could be challenging. It is not always easy to deploy identity management solutions in organizations because there are too many identity sources that have to be integrated.

The deployment duration depends on the scale, complexity, and number of sources. Typically, in enterprise organizations, it could take from six to nine months to cover the whole organization. It can even take a year. For customers with less than 20,000 or 30,000 active users, you can deploy it in less than three months.

Its price is okay. It provides good value for money.

It is subscription-based. You can go for a one-year or three-year subscription.

I would absolutely recommend this product. It is a good product.

I would rate SailPoint IdentityIQ a nine out of ten.

We're using SailPoint IdentityIQ for these purposes: user access, authentication, and governance review access.

SailPoint IdentityIQ has improved my organization as it's used mainly to provide access to first-time users and also for other actions around managing access.

A feature of SailPoint IdentityIQ that I like best is that it has good integration with other platforms. My company is using ADP here in Brazil, and SailPoint IdentityIQ works very, very well with it. My company is also using the solution for governance evaluation, segregation, and other access tests. For my company, SailPoint IdentityIQ is a very important solution, especially because it's automated, and there's a huge audit and risk issue here in Brazil.

In the past, we had a lot of problems with SailPoint IdentityIQ, particularly in providing access and provisioning. There were some gaps in the operation of the solution because they were manual rather than automated, and the users and administrators were given access directly via Active Directory, and it wasn't appropriate for us at the time to use.

In terms of integration, we could provide a more automated solution after a minimum number of years, but not in the SailPoint IdentityIQ platform, but there were problems in the registration, for example, with putting information inside ADP, but in general, we were able to solve those problems, and after implementing SailPoint IdentityIQ  we had increased evaluations.

I've been using SailPoint IdentityIQ for two years.

SailPoint IdentityIQ is a stable solution.

We didn't have contact with the technical support for SailPoint IdentityIQ because we're using a third party for support.

Ten of our administrators used Append to control executive activities prior to using SailPoint IdentityIQ, but in general, we found SailPoint IdentityIQ to be more useful in maintaining information, access roles, and permissions. The solution does exactly what we needed it to do.

The initial setup for SailPoint IdentityIQ was straightforward.

We used a third party to implement SailPoint IdentityIQ, particularly in the beginning, but nowadays, we can implement the solution on our own. In the beginning, we had a problem with the rules inside the platform, but the third party helped us in solving the problem and installed and configured SailPoint IdentityIQ appropriately.

Right now, I'm not sure if there's ROI from SailPoint IdentityIQ, but within a few months or so, there will be.

In terms of pricing, SailPoint IdentityIQ is affordable. It's not cheap, and it's not expensive, so the solution is in the middle, price-wise. It also didn't have additional costs, even if my company had different teams that took care of auditing and provisioning and projects that used SailPoint IdentityIQ.

We evaluated other solutions, but SailPoint IdentityIQ proved to be more adequate for us to use, and we found that not a single solution or tool was exactly better than SailPoint IdentityIQ.

I'm not sure about the version of SailPoint IdentityIQ my company is using, but it's probably the newest version.

My company has ten administrators of SailPoint IdentityIQ and around one thousand users. Ten technicians maintain the solution. My company maintains the solution and always keeps it updated, so integrating other solutions to SailPoint IdentityIQ won't be a problem.

In terms of rating SailPoint IdentityIQ, nine is a good score for me. My company is very happy with the solution.

My company is a customer of SailPoint IdentityIQ.