Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs SAP Identity Management comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.1
CyberArk Privileged Access Manager enhances security by automating tasks, improving compliance, reducing breaches, and increasing efficiency and ROI.
No sentiment score available
 

Customer Service

Sentiment score
6.5
CyberArk's support is efficient and knowledgeable, but challenges exist in response times, communication, and handling complex cases.
Sentiment score
9.0
SAP Identity Management's support is praised for expertise, but response times vary; direct contact or forums may expedite help.
Response times seem to correlate with the strength of the relationship with the CyberArk account manager, with quicker responses when rapport is strong.
They are helpful, but complex issues can take a long time to resolve, which can delay solutions for urgent customer issues.
CyberArk's customer service has improved recently and is now very responsive.
 

Scalability Issues

Sentiment score
7.7
CyberArk Privileged Access Manager is highly scalable and versatile, though complexity in licensing and configurations may pose challenges.
Sentiment score
6.3
SAP Identity Management's scalability is debated; praised for flexibility but criticized for database maintenance and role optimization challenges.
We started small and expanded it to an enterprise level, and are now moving to the cloud for further growth.
We have different operating systems, database systems, and decentralized infrastructure.
I find SaaS to be more promising in scalability.
 

Stability Issues

Sentiment score
7.8
CyberArk Privileged Access Manager is stable, with issues mainly from configuration, infrastructure, or resource limitations rather than the software.
Sentiment score
6.5
SAP Identity Management is mostly stable; some versions have issues, but recent updates enhance performance and user satisfaction.
Proper fine-tuning and expertise ensure the product performs well.
Overall, the stability of the solution is high.
It has a large customer base and positive feedback within my network.
 

Room For Improvement

CyberArk Privileged Access Manager needs UI, integration, and performance improvements, simpler setup, cost-effectiveness, and more plugins for usability.
SAP Identity Management needs UI, performance, and compatibility improvements, with better integration, compliance, risk analysis, and pricing enhancements.
They want everything to be on the cloud, but even in the SaaS version of CyberArk Privileged Access Manager, they need to deploy some servers on-premises.
In the long term, I would like to see these processes simplified, especially for on-premise installations.
Incorporating automated onboarding and offboarding features directly into the product would reduce the maintenance burden on administrators.
 

Setup Cost

CyberArk Privileged Access Manager is costly, especially for small businesses, though discounts exist for larger purchases.
SAP Identity Management pricing is seen as costly, with value perception affected by inadequate alignment with business requirements.
CyberArk is expensive compared to other products I know.
CyberArk's SaaS solution is particularly expensive.
CyberArk is comparatively expensive compared to other PAM solutions, such as Delinea, especially during renewal.
 

Valuable Features

CyberArk Privileged Access Manager enhances security with password management, session monitoring, integration flexibility, and real-time auditing for compliance.
SAP Identity Management is praised for flexibility, integration, user experience, and suitability for SAP and non-SAP systems.
CyberArk Privileged Access Manager helps ensure data privacy because we now know who is using which credentials and at what time.
For me, CyberArk Privileged Access Manager's most valuable features are password and session management.
After giving access, it continually checks if the user is the same user.
 

Categories and Ranking

CyberArk Privileged Access ...
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
197
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (3rd), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
SAP Identity Management
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
13
Ranking in other categories
User Provisioning Software (8th), Identity Management (IM) (15th)
 

Mindshare comparison

While both are Identity and Access Management solutions, they serve different purposes. CyberArk Privileged Access Manager is designed for Privileged Access Management (PAM) and holds a mindshare of 20.9%, down 23.8% compared to last year.
SAP Identity Management, on the other hand, focuses on Identity Management (IM), holds 2.7% mindshare, down 3.9% since last year.
Privileged Access Management (PAM)
Identity Management (IM)
 

Featured Reviews

SatishIyer - PeerSpot reviewer
Lets you ensure relevant, compliant access in good time and with an audit trail, yet lacks clarity on MITRE ATT&CK
When I was a component owner for PAM's Privileged Threat Analytics (PTA) component, what I wanted was a clear mapping to the MITRE ATT&CK framework, a framework which has a comprehensive list of use cases. We reached out to the vendor and asked them how much coverage they have of the uses cases found on MITRE, which would have given us a better view of things while I was the product owner. Unfortunately they did not have the capability of mapping onto MITRE's framework at that time. PTA is essentially the monitoring interface of the broker (e.g. Privileged Access Management, the Vault, CPM, PSM, etc.), and it's where you can capture your broker bypass and perform related actions. For this reason, we thought that this kind of mapping would be required, but CyberArk informed us that they did not have the capability we had in mind with regard to MITRE ATT&CK. I am not sure what the situation is now, but it would definitely help to have that kind of alignment with one of the more well-known frameworks like MITRE. For CyberArk as a vendor, it would also help them to clearly spell out in which areas they have full functionality and in which ares they have partial or none. Of course, it also greatly benefits the customers when they're evaluating the product.
Kiril Petkov - PeerSpot reviewer
Stable, especially if you're an experienced user and is suitable for managing access rights for accounts, process sharing, and file sharing, but it isn't straightforward to use or maintain
I'm not so happy about the features provided by SAP Identity Management, but I'm not sure where the problem lies, if it's a product issue, an issue with its deployment, or both. I find SAP Identity Management complicated to use. Maintaining it is also complex. The solution is integrated with only two core systems, so it's not compatible with all applications in terms of providing single sign-on, which makes no sense to me, so this is another area for improvement in SAP Identity Management. Still, the issue could be with the supplier my company is working with, as that supplier provides consultancy and deployment services. It's a popular, experienced, and well-ranked supplier in the local market. However, it's still not guaranteed that the business requirements have been understood correctly and that the deployment was done properly. What I'd like to see in SAP Identity Management in its next release is a more innovative way to use it for handling all access rights rather than having to use different products.
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
824,067 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
32%
Financial Services Firm
12%
Computer Software Company
11%
Manufacturing Company
6%
Manufacturing Company
16%
Computer Software Company
16%
Energy/Utilities Company
9%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
CyberArk Privileged Access Manager comes at a high cost. But the solution is worth its price.
What do you like most about SAP Identity Management?
The tool's most valuable features are its access control and approval of access requests. The self-service password reset feature is efficient. Role management capabilities streamline user access b...
What needs improvement with SAP Identity Management?
I have encountered issues with the host authentication feature.
What is your primary use case for SAP Identity Management?
Our clients utilize the tool to automate user provisioning and manage identity, security, and user roles within their IT environment. It is configured as a tenant for this purpose, and it includes ...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
SAP NetWeaver Identity Management, NetWeaver Identity Management
 

Learn More

Video not available
 

Overview

 

Sample Customers

Rockwell Automation
State of Indiana, Automotive Resources International (ARI), Alliander N.V., Chemion Logistik GmbH, Seoul National University Bundang Hospital (SNUBH)
Find out what your peers are saying about CyberArk, Delinea, One Identity and others in Privileged Access Management (PAM). Updated: December 2024.
824,067 professionals have used our research since 2012.