SailPoint Identity Security Cloud Reviews

We use SailPoint IdentityIQ for identity governance and access management. There is no other vendor as good as this product. 

I find the built-in connectors, lifecycle management, certification, and recertification features to be the most valuable.

Access management could be improved. SailPoint is known for its IT identity governance capabilities, but its access management features in one platform.

Comparing SailPoint's access management to that of competitors like CyberArk and Okta, there's a clear gap.

Additionally, regarding privilege access management, there's potential for improvement. If SailPoint can develop a connector for RPAQ, they could also extend their capabilities by adding more access management features and modules.

I have been using it for three years. I am currently using version 8.3.

We actually have a lot of challenges with some of our applications. Some of them are not working properly, and the issues are not fixed. We are encountering some problems.

Scalability is hard, especially when you are doing it in real time. But, it would be eliminated once we have the first version of IdentityNow. So, the main goal for now is just to eliminate maintenance costs or run the entire infrastructure. That's why we plan to migrate it to the SaaS version of SailPoint.

We have more than 10,000 end users. We use it daily, 24/7 operation.

Initially, I had difficulties, but with time, I gained experience. Especially integrating legacy applications like ARPAQ. Over time, it became easier, but integrating legacy apps remains a typical issue.

In terms of user experience, I don't have any complaints.  We are planning to migrate to the cloud.

We did it in-house with the help of a third-party vendor experienced in deploying SailPoint.

The deployment took a couple of weeks in a test environment before going into production.

We require maybe around four people because, in our company, we have different roles and responsibilities. So, from another perspective, from the system administrator, we require around four resources.

It is affordable licensing. 

Currently, we are looking for another option, which is EmpowerID.

Overall, I would rate the solution a nine out of ten. If you want to start, go better directly to the cloud, instead of installing it on-prem.

We use this product for identity governance. There is the basic identity creation in the lifecycle followed by certification. I'm a company manager and implementer and we are customers of SailPoint.  

I think the certification module is perhaps one of the most valuable features. The options are pretty intuitive and you can usually set up the certification easily without much time or resource investment. It consists of two parts, both of which are useful. I like the pre-built out-of-the-box connectors that have a plug-and-play kind of feature. Identity IQ is easy to integrate with other systems and offers a lot of options. 

The only issue I have with the product is that there are modules that need to be bought separately, and that makes the product prohibitive for some of the customers that I've worked with, particularly in the middle-tier range. The solution itself is expensive and then when you add the cost of the modules it becomes too much. They could provide something similar to what Okta offers and I believe this would give the company a lot more traction in the mid-size range of companies. I'd like to see SailPoint support for custom-based connectors.

I've been using this solution for three years. 

The solution is stable. There are a few bugs here and there, but that's expected for any kind of implementation that we do. It's a risk associated with each and every product. It's not the worst we've seen but there's definitely scope for improvement.

SailPoint is easy to scale.  They give you the bandwidth for that. 

The technical support is good. There are various levels of technical support that you can access depending on the licensing model you purchase. 

Positive

The initial setup is pretty simple and a straightforward mechanism. It does require some knowledge on how to set up and a basic understanding of networking protocols and other things, which is pretty complex. It's not something that's easy to learn and I think SailPoint could look at bringing out intuitive-based migration> There are 10 people in my team who deal with implementation and deployment and the time it takes generally depends on the scale of the setup. One of our larger projects took around three months. 

Licensing costs are high and since we're not an official partner, we're unable to offer any discounts to our customers. Companies often choose an alternative solution that is significantly cheaper and covers 90% of their use cases. I would expect SailPoint to be more price sensitive and have the capability to cater to even small clients and provide them with features necessary in their daily IM use cases. It would expose SailPoint to a larger audience and they'd have a larger implementation market.

I have evaluated a couple of other solutions. Okta is a pure access management product. They have recently launched their Identity Governance suite. Okta and Cisco are more into access management with more focus on providing MFA and access regulation in the traditional sense, rather than going into the governance side of things. SailPoint, on the other hand, is more into identity governance with their workflows more natively able to support use cases with certification. These are two different genres of product so you can't make a direct comparison. If you have Okta or Cisco Duo, you cannot expect it to do a certification. If you have SailPoint, you cannot expect it to do an MFA for you. The market is moving towards a combined product that does everything and I expect each of these products to basically expand more to support all the other use cases. 

Prior to purchase, be sure that SailPoint can solve all your use cases. Otherwise, you'll be unhappy with the amount of money that you're spending. 

I rate this solution seven out of 10. 

We use the solution to certify account access. SailPoint is handling compliance for account certification.

They have certifications assigned to owners.  Different appliances like Windows and Unix assign these certifications. They need to initiate certification every six months for Windows and Linux to ensure they have certified those accounts on the operating systems. Then, they will authenticate with the account owner. The account owner will then perform the initial check to determine if they should keep those accounts within the organization. Afterward, they will complete their subscription and return to their direct manager for position verification. If there are no errors or discrepancies in their source certification, the manager will sign off, and the entire association will be closed. Then, the observation owner will generate the report. This report serves as evidence for internal auditors to prove they completed the certification. It's like a search engine flow.

The UI is complex, but the background functionality is robust and well-designed to perform SailPoint IdentityIQ certifications.

The benefit of using SailPoint IdentityIQ is that it significantly reduces the workload for certification processes. Before implementing IdentityIQ, the corporation relied heavily on manual methods to gather accounts and permissions for review. Each host machine had to be checked manually to ensure account collection accuracy, followed by manually identifying accounts for certification. This entire process was labor-intensive, with human involvement at every step.

It took about a month to gather notification data and initiate the certification process. Tracking the status of certifications was challenging since it was managed through Excel, making it difficult to determine completion percentages. Once all certifications were completed,  SailPoint shifted through Excel sheets to finalize reports.

With IdentityIQ, the process is streamlined, reducing the time required for certification, and it also has an automated aggregation of accounts, assets, and groups. There's no opportunity for human error or intentional concealment of accounts, enhancing security.

SailPoint IdentityIQ could offer more options, such as free online training for partners.

I have been using SailPoint IdentityIQ for 3 years.

The product is stable.

The solution is scalable.

The support team is quite responsive and understanding. Initially, they provide prompt responses, but their answers can be quite general. They could offer more precise guidance on addressing specific issues.

Neutral

The initial setup is not straightforward and takes around a month to complete. Two persons are required to deploy the solution. An experienced person is needed to use IdentityIQ.

The implementation involves installing the application and the database on different machines. Then, we will proceed with the integration based on the data we receive from SailPoint. After that, we will discuss with the customer the connections they need to close accounts and the rules for creating accounts. 

Once this process is complete, we will check for related accounts and generate a report accordingly. This report will be sent to the responsible owner, who will be identified through SailPoint. We will assist the customer in assigning those accounts to the correct owner. Following that, we'll assist in setting up the business decision template and help the customer launch their subscription, guiding them through each step and aiding the manager in signing off on certifications.

The capabilities for intelligence analysis are quite flexible, allowing users to generate the required reports quickly. It's pretty adaptable in terms of report generation and audit search.

The IQ Connector is supported by most major packaged software, making it convenient to acquire the connector from the SailPoint marketplace. The integration process is relatively straightforward.

Maintenance is easy. 

Overall, I rate the solution a nine out of ten.

We use the solution for identity management and access governance.

We have a variety of connectors that facilitate seamless integration with SailPoint IdentityIQ, enabling you to connect with target systems. This integration allows for the reconciliation of user information and access, consolidating them under a single roof. You can conduct access governance processes efficiently

SailPoint provides functionalities for various stages, such as joiner, mover, and leaver. Additionally, it offers features for account locking, unlocking, disabling, and immediate termination, facilitating smooth user management processes. This includes handling scenarios like pre-hires and future hires and managing users who accept offers but do not join on the specified start date. With SailPoint IdentityIQ, organizations can efficiently handle these scenarios by leveraging its comprehensive identity management tools and processes suite.

SailPoint IdentityIQ is performing well. The primary purpose is to address the needs of identity management and access governance. However, competitors are advancing by offering integrated solutions encompassing access and privileged access management in a single unified platform. IdentityIQ's focus has remained primarily on identity and access governance, neglecting to expand its offerings to include these additional functionalities within its existing product. Enhancing their product by incorporating modules for access management, privileged access management, and third-party access governance could address this gap.

I have been using SailPoint IdentityIQ for 8.5 years. We are using the V8.3 of the solution.

The product is stable.

The solution is scalable.

I rate the solution’s scalability an 8 out of 10.

The initial setup is easy.

Before making a decision, it's essential to align your primary goals with the long-term roadmap of your organization. Consider factors such as whether your organization is a government or private entity and where you envision your organization heading in the next five to ten years. While cost can be a significant factor, it's important to assess the value and features offered by SailPoint IdentityIQ in relation to your organization's needs and future direction.

There have been many instances where we provided initial templates in building some of the connectors approximately eight or seven years ago. In response, my team developed a custom connector, which was reviewed and eventually incorporated into the SuccessFactors Connector by SailPoint. The previous version had limitations with subset deployments. SailPoint has introduced various solutions over time. For instance, they now handle deployment entirely, even for IdentityIQ, transitioning it into a SaaS application. SailPoint manages servers, applications, deployments, and server patches, relieving customers of these challenges. Customers access the product via a URL, focusing solely on utilizing it to address their needs. SailPoint continues to provide comprehensive solutions, including evolving IdentityIQ into a SaaS-capable platform, to support their customers' requirements.

In terms of solving identity management and access governance challenges, SailPoint IdentityIQ is certainly a strong contender. However, it's essential to clarify your specific goals—are you focused solely on identity management and access governance, or do you also require access management and privileged access management solutions?

Configuring IdentityIQ can be complex, requiring significant coding and effort, especially considering the intricacies of integrating with various target systems. The level of complexity can vary greatly depending on each system's specifications.

Overall, I rate the solution an 8 out of 10.

We use SailPoint IdentityIQ for identity and life cycle management management for devices. It helps us with access certification, password management, and other essential functionalities.

SailPoint IdentityIQ has a good and straightforward user interface. They also have a lot of resources and documentation available to understand the process.

The product’s cloud offering could be flexible.

We have been using SailPoint IdentityIQ for six to seven months.

I rate the product’s stability an eight out of ten.

We have large-scale institutes as our customers for SailPoint IdentityIQ. I rate its scalability an eight out of ten.

The technical support team responds within an acceptable time frame and is knowledgeable.

Neutral

I used Oracle for a three-year-long project. I encountered constant challenges with incompatibility, or bugs and glitches using it.

I rate the initial setup process a seven out of ten. It takes a couple of days to complete.

The product is expensive. I rate its pricing an eight out of ten.

I rate SailPoint IdentityIQ an eight out of ten. I recommend it to others as it is used widely and has a knowledge base. I advise organizations to streamline their processes rather than to customize the products.

We use the solution for identity management and access requests.

The solution's most valuable feature is its integration with Slack for the notification of access requests.

The solution needs to have more out-of-the-box integration with different applications and solutions. I would like to see the solution integrated with MFA tools like Gemalto, SafeNet, and One Identity.

Many consultancies charge a lot of money for services to implement the solution, which increases the project cost.

I have been using SailPoint Identity Security Cloud for about one year.

SailPoint Identity Security Cloud is a very stable solution.

I rate the solution a nine out of ten for stability.

Previously, around 10,000 users were working with the solution. Our customers for SailPoint Identity Security Cloud are mostly medium and enterprise businesses.

I rate the solution’s scalability ten out of ten.

The solution’s technical support is very good.

Positive

The solution's initial setup is a little complicated, but that's often because a project is complicated. The setup could be easier, but it needs to be flexible to meet a project's demands.

On a scale from one to ten, where one is difficult and ten is easy, I rate the solution's initial setup a six out of ten.

The solution can be deployed in some hours. Yeah. It's generally a quick process to deploy the solution. Since it's a cloud service, it's all about trying to get that cloud service to talk to your applications. It's reasonably quick to have things ready, but you need to configure the tool to talk to your systems. The solution can be deployed either on-premises or in the cloud.

It's difficult to say that the solution saved costs because it is quite expensive. Automation may make things easier and less error-prone, but it doesn't save on human power.

The solution's role management capabilities enhance access controls. They help control different types of access and what people can have access to.

The solution has introduced some AI functionalities to improve identity management. However, SailPoint seems uncertain about how the AI had been trained and how the customer data would be safeguarded. AI is used in terms of learning and some security and access requests.

SailPoint Identity Security Cloud is mostly used in the energy utility sector. New users should know what you're trying to achieve with SailPoint Identity Security Cloud. You need to control the tool rather than the tool control what you do. Make sure you understand what you're trying to do with your project. SailPoint Identity Security Cloud is a very good tool that does a lot of things, but you have to configure it to do what you want.

Overall, I rate the solution an eight out of ten.

The solution is one of the main security products you need to control access and have visibility into what's happening in your organization. It helps with managing access to applications, ensuring governance, and obtaining certifications. 

The product's most valuable features are identity access control and access certifications. 

SailPoint IdentityIQ needs to improve its customization. It should also incorporate some standardized tools for implementation. 

I have been working with the product for seven years. 

The solution is stable as long as the implementation is correct. 

I rate SailPoint IdentityIQ's scalability an eight out of ten. 

I haven't contacted the technical support team yet. 

SailPoint IdentityIQ's usability depends on how well it is implemented. To set up the product, you must configure it like a web application. This involves setting up a web server and determining the number of servers needed based on the site's requirements. The setup process can vary in complexity depending on the client's environment. It can take a day to complete. 

SailPoint IdentityIQ is too expensive for small and medium companies. It is an expensive product. 

If a customer wants certain automation during the identity lifecycle - for example, when hiring someone, letting someone go, or moving someone from one organization to another - you can automate tasks based on various factors like their role or department. The product simplifies tasks, especially those where certain individuals require specific access levels based on their roles. With automation, administrators don't need to manually remember or assign access levels for each role or department. 

I rate the overall product a seven out of ten. 

The solution is brilliant in all aspects. SailPoint’s technical value exceeds what OpenText proposes. It is a really good product.

We faced some issues while integrating the solution with a third-party tool.

I have been working with the tool since October 2023.

The tool is stable.

The tool is very scalable. Even if the implementation exceeds the number of users decided previously, the tool will fulfill the needs and will still be stable. The solution is not suitable for small companies. The cost will be high.

The support is very good. I rate the support team an eight and a half out of ten.

Positive

The implementation is straightforward. It depends on the environment and customers’ needs. However, it is easy.

The pricing must be improved. The pricing is a little bit higher than other tools. The solution must provide different prices for different countries. All countries are not equally rich.

SailPoint IdentityIQ is more efficient than Micro Focus. We chose SailPoint IdentityIQ because it is stable and the support is good.

We are distributors. Our main competitor is Micro Focus. It is now OpenText. I will recommend the product instead of other tools. It is one of the best IAM products in the market. The price is the only issue. Overall, I rate the tool an eight and a half out of ten.

The third party is the non-payroll staff of the University. IdentityNow is used to manage services.

We are happy with the SailPoint IdentityIQ’s stability.

SailPoint IdentityIQ could be cheaper.

I have been using SailPoint IdentityIQ for a few years.

SailPoint IdentityIQ is a scalable solution. We onboarded about 30,000 students, 7,000 staff, and 7,000 third parties that we need to manage on the platform. They use it themselves, and we just need to manage the numbers on the platform. People are managing it administratively within IT with five to six people.

We have engaged with SailPoint IdentityIQ's technical support and faced no problems with them.

The solution’s initial setup is complex.

We implemented SailPoint IdentityIQ through a consultant. The solution’s deployment takes around seven months.

We have seen a return on investment with SailPoint IdentityIQ because it manages our risks.

We pay an annual licensing cost for SailPoint IdentityIQ.

SailPoint IdentityIQ is deployed on-cloud in our organization. SailPoint IdentityIQ covers our whole portfolio, and its growth will depend on the growth of our numbers.

I would advise other users to be very sure of what they want to achieve and select the right product instead of being brand specific. In our case, SailPoint IdentityIQ matched the capabilities we sought.

Overall, I rate SailPoint IdentityIQ a seven out of ten.

The whole package is useful. It matches the item to the management, so I can't pinpoint any specific individual feature.

We are satisfied with the product overall. But the challenging point has been that we are buying the service and support from CyberIAM, but the SailPoint has remained unchanged. The average support has been a big disappointment.

Another problem we face is that we have around 450 to 500 data applications in our environment, and everyone wants customized identity management for their specific application. It takes a huge amount of time to onboard all of them, and maybe that's the only weakness.

I have been working with SailPoint IdentityIQ for two years. We have been implementing it for over two years now, but we are still in the process of getting all of our legacy applications on board.

It is a stable product.

It is a scalable product.

We are only the second customer in Europe who is using the consulting services. The majority of the service is with customers on the US side, and we have been fighting on this topic for at least 18 months, which has been quite a downside. But otherwise, technically, the platform is really good. We have had a lot of service breaks because of the lack of support.

Neutral

The platform deployment was pretty easy. But when you start to onboard the applications, it becomes more complex. The whole configuration depends on the application architecture and how you should set it up. All the cases are different, and that can be quite challenging.

All of the good products, like SailPoint, are expensive. But when you qualify the cost and then have to weigh the benefits and opportunities it gives you, it's a bit difficult to say whether it's expensive. SailPoint is expensive on the market but also produces real value.

We had some smaller implementations with different products, but not similar ones.

We presented our project to a vendor and then did a proof of concept with several products before selecting SailPoint IdentityIQ.

It is suitable for both small and enterprise-level companies. I would advise reaching out to a company that has already implemented it and asking their experts how they feel about using it. Once you get benchmarking information, it becomes easy to make the decision.

Overall, I would rate it an eight out of ten. There is room for improvement with regard to their technical support and complex configuration.