Try our new research platform with insights from 80,000+ expert users

IBM Tivoli Access Manager [EOL] vs Symantec Siteminder comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Tivoli Access Manager [...
Average Rating
8.0
Number of Reviews
29
Ranking in other categories
No ranking in other categories
Symantec Siteminder
Average Rating
8.0
Reviews Sentiment
6.2
Number of Reviews
73
Ranking in other categories
Single Sign-On (SSO) (12th), Web Access Management (1st), Access Management (11th)
 

Featured Reviews

it_user704022 - PeerSpot reviewer
I can integrate with in-house provisioning systems. The profiling element is complex.
There were scalability issues with 8.0.1. Whilst we could build a new VM with the underlying OS and prerequisites, IBM was always required to assist on-site as only they knew the complicated and fairly undocumented procedure to implement a new IMS server to the pool. In 8.2.1, this has been amplified tenfold as the solution moved from Apache on Windows to IBM WebSphere on Windows, which is incredibly complicated and requires multiple levels of specialist knowledge. This makes it nearly impossible for our company to expand the number of nodes in the WebSphere cluster without accidentally introducing new issues in the said cluster.
Siva Chalamarla - PeerSpot reviewer
Good access control and SSO but needs modernization
The access control and the SSO are the two most valuable features. Siteminder allows users to authenticate once and gain access to multiple applications without needing to reauthenticate for each application separately. For example, if you access one application in one tab, you do not need to provide it again if you are trying to access the same application. The portal has different applications built into it. It's similar to Google. If you open Google and try to access the maps in that Google, you do not need to authenticate in maps. You just need to authenticate in the starting phase. Only a particular group of people have access. Our guys will give an error called access denied or unauthorized access. It depends on the application. It is pretty easy to learn.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The Verify feature: A push method which customers are going for."
"SAML 2.0."
"Single Sign-On functionality is valuable because the core purpose of the product is to allow universal (or bespoke) SSO for application suites."
"The integration effort with the end application is quite straightforward and easy."
"OAuth 2 is now the de facto standard for API protection and scoped authorized delegation. IBM TAM now supports OAuth 2 and can act as fully compliant OAuth 2 authorization server."
"It is reliable."
"You can quickly deploy the entire product with a basic config within couple of hours."
"It is very scalable. We have a very large customer base: 75 million customers."
"It's agent-based. It's convenient to deploy and integrate."
"The most valuable feature is the Federation part of Single Sign On, which is customizable and is easily integrated with any customer application or any third party application."
"The solution is easy to use for our managers."
"A valuable feature of Siteminder is the way it handles bulk traffic. The features it has, in terms of routing the traffic and load balancing, are good."
"All of our applications get a point, click, and you are in, while we increase security at the same time."
 

Cons

"The self-service portal needs improvement."
"An Amazon Machine Image (AMI) for the newer appliance versions for hosting the virtual appliances on AWS will help."
"Looking at their roadmap, they have a broad grasp of the security features which the industry needs."
"Multi-factor authentication with social integration needs to improve."
"The profiling element is incredibly robust, but also equally as complex, it requires an off-site course to be able to understand the context or the plethora of options available."
"In future releases, I would like to see maybe more capabilities with some more modern authentication."
"If the reporting feature can be integrated into SSO itself that will be an icing on the cake."
"I would prefer to see their SAML integration be a more streamlined and easier interface."
"The support could be faster."
"CA has reporting at the moment. With the reporting, every particular segmented product has a reporting engine. I would like to see centralized reporting for all of them together."
"The GUIs are not very clear, especially when integrating with other products from CA."
"An area Siteminder could improve on is that there are a few limitations, in terms of new protocols for OpenID. If I want to have different scopes, the features are limited. They also do not have APIs exposed, which is a major drawback. API is a feature I would like to see included in the next release."
"The initial setup was complex, painful. But that is to be expected of any new setup. When you're a big bank like us, any kind of migration to a new product is hard. I expect it to be painful, and it was painful. But it's not something that you can avoid."
 

Pricing and Cost Advice

"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."
"The pricing is reasonable."
"The licensing is fair for this solution."
"The solution's pricing is competitive."
"Siteminder is a little costly. You pay for licensing, and they offer packages, so if you have less users, then you have to buy different products at different prices. If you have more of a user base, then the package is different. They also include other features—for example, if you have a database and you're using Siteminder, then it's good to use a Semantic-specific database, but if you are using less, then you have to purchase the database separately. Whereas if you are going for a bigger license, then it comes within the package. It depends on which plan you are using."
"Symantec Siteminder is expensive; they could definitely do better on the price."
"I recommend conducting a PoC on every available product before choose one."
"CA solutions are generally expensive but for the customer the ROI is big."
"The price is quite comparable to the other enterprise-level solutions in that market."
report
Use our free recommendation engine to learn which Single Sign-On (SSO) solutions are best for your needs.
831,020 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
35%
Insurance Company
12%
Manufacturing Company
8%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Ask a question
Earn 20 points
What do you like most about Symantec Siteminder?
It's agent-based. It's convenient to deploy and integrate.
What is your experience regarding pricing and costs for Symantec Siteminder?
The maintenance fee has increased, raising concerns about the overall cost to customers.
What needs improvement with Symantec Siteminder?
The maintenance cost has increased significantly, and we are concerned about this. We also need to consider the customization or development required for web authentication when using Active Direct...
 

Also Known As

Tivoli Access Manager, IBM Security Access Manager
Single Sign-On, SiteMinder, CA SSO, Layer7 SiteMinder
 

Learn More

 

Overview

 

Sample Customers

Essex Technology Group Inc.
British Telecom, CoreBlox, DBS, HMS, Itera ASA and Simeo
Find out what your peers are saying about Microsoft, Cisco, Ping Identity and others in Single Sign-On (SSO). Updated: January 2025.
831,020 professionals have used our research since 2012.