Symantec Identity Governance and Administration Reviews

Policy Xpress makes modifications to how our user data is handled so easy.

This product has allowed me to take the repetitive tasks away from a person so the value of a person is better.

An out of the box way to control when a policy executes.

Five years.

No, not after someone explained a way to use Screen Logical Attributes to control the execution of policies.

No issues encountered.

No issues encountered.

Customer Service:

I love their customer service.

Technical Support:

I'd rate them 10/10. I have my go to techs.

We didn't have a solution previously.

Identity managment is a complex animal no matter what product you use.

We used a vendor team who I would rate as 10/10.

Look at training from the vendor not just their perfect scenarios but real world issues. Make sure your users have the skills needed to manage the product.

Extremely good customization possible with respect to local language support.

In our environment we have build separate environments and roles structures based on language and look and feel for their products.

4 years.

Only minor issues.

Sometimes, earlier only due to lack of RAM. Now it's stable most often.

Haven't faced any so far.

Customer Service:

8 out of 10.

Technical Support:

7 out of 10.

It was a little complex.

No other options evaluated.

Perform a pre-implementation analysis as to what level you would like to implement the solution (only role mapping/provisioning/AD sync etc) and to how it can meet your needs.

The simplicity, easy installation and configuration.

I worked on this product as a consultant implementing it at various client locations so I cannot really answer this question from my own organization's point of view. But the tremendous value at client locations has been a centralized and simplified identity provisioning and management solution.

Been quite a while since I worked on it so I can't really comment on how far the product has come in the past 2-3 years.

For almost 2 years at various engagements

Nothing major encountered.

None encountered.

No. The product gives flexibility with respect to application servers and databases so scalability more depends on the platform you choose.

Customer Service:

Very good.

Technical Support:

Very good.

Clients I have worked at either didn't have an existing solution or had older versions of the same product.

It is straightforward if you read the product documentation and understand the architecture before your set it up.

The major plus points are simplicity, but do ensure you have the right resources before you implement this product.

• User provisioning
• Web services

Enabled enhanced delegated control to application owners and third party support reducing overhead cost to support desk and directory services teams

GUI/Web interface

10+ years.

Numerous. Despite having a Linux/JBOSS version it does not perform at the same level of proficiency as Windows/.NET.

Yes

No

Customer Service:

9 out of 10.

Technical Support:

7 out of 10,

Complex, documentation was inadequate as was professional services.

Combination, and experience for professional services was less than adequate.

We evaluated Novell and Oracle as well, and for our needs this was still the best solution.

Be prepared for issues with the web interface and avoid heavy customization.

Identity Policy and its Ability to support Account Provisioning to RACF and AD/Exchange.

This solution was implemented for a Financial Client to automate account provisioning across various disparate systems (more than 80 systems across 5 countries). From an HR perspective, when an employee leaves the organisation, suspension, transfer and removal of access to systems can be completed within 7 days in comparison to up to 30 days when handling it manually. Access to system(s) can now be approved and granted within 3 working days going through a self-service application and approval process.

Lack of a comprehensive attestation component/product and easy to use workflow that supports both attestation and provisioning. However, currently CA does have a product for attestation.

3 years

Main issues were with migration of data from a 8.x to 12.5 sp2.

No stability issues.

No scalability issues

Customer Service:

7/10

Technical Support:

8/10

No previous solution used.

Initial Setup is considered straightforward due to its wizard based installation. However, it is complicated due to HA requirements.

Compilation of data for Attestation manually may take 3-6 months or more if the organisation has large number of assets distributed across several countries. The need to maintain up-to-date access list on every asset also poses a challenge.

Provisioning server and Policy Xpress.

It provides a robust provisioning facility which enables admin configuration. Complex provisioning rules are quick to change when business requirements do.

Workflow engine and workflow configuration. Also, the user interface has a lot of room for improvement.

2 years.

Yes, we encountered many product issues during deployment, and some were identified as product limitations.

So far no, the product works well and it's stable.

Not at this moment.

Customer Service:

The customer representatives of CA are good and they always give quick responses.

Technical Support:

The support is helpful, the response time is fast, and their knowledge is good.

Yes we used Oracle Identity and Oracle Waveset.

Yes the setup is straightforward and it can be done quickly.

I am working within a vendor team.

Yes, Oracle Identity Manager

The ongoing support of the product is extremely important.

Connector Development (connector Express) and Policy Express enhanced feature which is improving every time with new releases.

Self service portal helps the user to manage approval, delegation, password management and its bulk task capability resolves lot of problem.

Custom connector, web service configuration and use.

4 years

Easy, I can say it's the best on the market with small amount of manpower.

No issues encountered.

No issues encountered.

Customer Service:

Good but more skilled people required according to geographical location.

Technical Support:

Good.

No previous solution used.

Straightforward, as it was simple with few resources needed.

Self implemented.

• Allows individual users to work in a controlled and secure environment, whereby user authentication, access control, password administration, and smooth workflow are ensured. • Even if a user forgets theirs access information or password, Identity Manager helps users to restore access. This reduces the cost of help-desk support while making the daily operations much smoother. • Large sized organizations require Identity Manager to ensure that their network and systems are secure for use or for access by delegated users. • It ensures that business workflow is in compliance with secure standards of technology infrastructure.

• Cost is the only demerit of Identity Manager because it requires updates of software and technology as users keep multiplying. Identity Manager is also prone to hackers and therefore needs to be regularly checked for security threats and intrusions. • Users must be trained to use the system.

Medium to large sized organizations require Identity Manager in order to allocate their technology costs in a much better way. After a one time heavy installation cost, companies do not need to worry about user password/access issues that may occur on a daily basis.