Try our new research platform with insights from 80,000+ expert users
Hse Manager at a retailer with 10,001+ employees
Real User
Top 20
Comprehensive identity governance and compliance solution offering robust integration capabilities, extensive reporting features and a user-friendly interface
Pros and Cons
  • "One of the most valuable aspects of SailPoint is its open integration interface."
  • "Finding integration experts for SailPoint in the North American market can be challenging, and transitioning to a no-code or low-code setup could reduce dependence on specialized skills."

What is our primary use case?

The use case involved architecting solutions for LogLabs and Scotiabank, focusing on two main user groups: Identity and Access Management users utilizing various heterogeneous IEM platforms like Broadcom, and Active Directory users. The challenge revolved around implementing attestation and governance certification processes, requiring integration for both groups. Specifically, integrating with third-party systems for users on non-AD platforms and with AD for those utilizing it.

The primary objective was to leverage IdentityIQ for identity governance and compliance within the organization. With over two hundred thousand IdentityIQ instances in use and a continual influx, the focus was on streamlining identity governance processes, particularly for onboarding, offboarding, and conducting periodic attestations.

How has it helped my organization?

It effectively streamlined our user access management processes, serving as a central hub within our enterprise ecosystem. With various credentialing IdentityIQ access management solutions in place across the organization, SailPoint integrated seamlessly with these systems. It ingested events from these sources, generated reports, and initiated outgoing events and triggers to facilitate appropriate actions based on user and supervisor actions.

The policy management and risk-scoring capabilities of SailPoint IdentityIQ greatly benefited our organization. While we primarily focused on policy enforcement based on written guidelines for identity lifecycle management, we didn't extensively utilize a risk-based approach, as that fell under a separate area of resource management. However, within the policy feature set, SailPoint provided robust options. We were able to categorize users into different groups, such as office users, retail channel users, and backend users. Additionally, we could apply role-based access controls and differentiate between temporary and permanent employees, full-time and part-time staff, and those with specific time-based access requirements or temporary assignments within the organization.

The implementation of IdentityIQ significantly impacted our IT audit and compliance activities. SailPoint was introduced in response to an audit observation, as no prior system was in place and everything relied on manual processes. This lack of automation resulted in gaps and oversights. Implementing SailPoint IdentityIQ for attestation and governance effectively addressed this audit observation and closed the compliance gap.

It played a crucial role in addressing a complex identity management challenge within our company, particularly in the area of credential cleanup. Given the large user population, a dedicated team within the IAM pillar focused on this task. Before SailPoint, it was common to encounter instances where user identities remained active even after individuals had moved roles or left the company. For example, credentials associated with finance or treasury functions would still be accessible, even if the user had transitioned to a different department. Similarly, sensitive data access, such as payroll and HR systems, posed risks if not appropriately managed post-employee departure. SailPoint streamlined the process of managing these identities, effectively identifying and addressing instances where inactive accounts lingered, sometimes for extended periods, thus enhancing overall security and compliance efforts.

What is most valuable?

One of the most valuable aspects of SailPoint is its open integration interface. In my experience, it seamlessly connected with four different digital identity management solutions, offering both API and low-level code integration options. This flexibility, coupled with extensive documentation and strong support, ensured smooth integration without encountering issues like lost events or operational challenges. 

Additionally, its reporting capabilities are exceptional, providing detailed and granular insights without any issues. Reporting features are highly effective for managing user certifications and role management.

What needs improvement?

I believe SailPoint could benefit from embracing newer, no-code or low-code approaches, in addition to its already excellent integration and API capabilities. Finding integration experts for SailPoint in the North American market can be challenging, and transitioning to a no-code or low-code setup could reduce dependence on specialized skills. This shift could potentially make development and integration more user-friendly and accessible, opening up new possibilities for easier implementation and customization.

Buyer's Guide
SailPoint Identity Security Cloud
January 2025
Learn what your peers think about SailPoint Identity Security Cloud. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
838,713 professionals have used our research since 2012.

For how long have I used the solution?

I have been working with it for almost four years.

What do I think about the stability of the solution?

In my experience, SailPoint IdentityIQ has been stable. While stability may be influenced by the capabilities of other parties involved, I haven't encountered any significant stability issues.

What do I think about the scalability of the solution?

We aimed to implement SailPoint IdentityIQ across our entire enterprise, encompassing over two hundred thousand users. While we were informed that it could scale up to fifty-five to sixty thousand users with ease, scalability considerations required additional backend server resources. This scalability, however, is subject to various factors, including the complexity of integrations and the environment. Ours was particularly complex, involving integration with four distinct IdentityIQ digital identity solutions. I would rate it seven out of ten.

We plan to expand our usage of SailPoint IdentityIQ in the future, with the aim of establishing it as the central product for identity and governance across our organization.

How are customer service and support?

Initially, there were numerous interactions with tech support, but after resolving some initial issues, the process became much smoother. While we faced challenges with offshore support resources, the onshore and nearshore teams provided excellent assistance. I would rate it five out of ten.

How would you rate customer service and support?

Neutral

Which solution did I use previously and why did I switch?

Broadcom was previously utilized for similar purposes, but it lacked certain capabilities, particularly in terms of traceability and governance functionalities like attestation, recertification, and periodic certifications. Additionally, Broadcom faced support issues and relied on outdated technologies which presented challenges. SailPoint, on the other hand, was sought as a more contemporary and comprehensive solution to address these limitations, offering numerous advantages over Broadcom.

How was the initial setup?

On a scale of one to ten, I would rate the initial setup of SailPoint as a two. It's rarely an easy process, and the ease of setup depends on the resources allocated. However, compared to my experiences with other enterprise systems, SailPoint's setup was relatively better. Its out-of-the-box integration with Broadcom and Active Directory was particularly advantageous, addressing around thirty-five to forty percent of our challenges without requiring additional customization.

What about the implementation team?

The deployment timeline for the initial pilot involving two hundred and fifty users spanned approximately six months from start to finish, including user acceptance testing and production rollout. Similar to other solutions, this process comprised both technical aspects, such as deploying VMs and servers within Azure and configuring settings, as well as procedural and integration components. Integration efforts, in particular, required additional time due to complexities. The selection and onboarding of users, which involved manual processes, also contributed to the duration. However, despite the comprehensive nature of the deployment, there were no significant obstacles encountered along the way. Leveraging a third-party consultancy for implementation, specifically one proficient in SailPoint, proved beneficial as they brought in skilled consultants familiar with the product, facilitating a smoother deployment process. 

From a technological standpoint, our team consisted of two architects, three developers, and project management staff, totaling approximately ten to fourteen internal members. Additionally, we engaged external resources, ranging from four full-time to six to eight part-time personnel, depending on project demands. These resources included database roles, developers, and analysts, some of whom were pulled from Broadcom and Active Directory teams. For ongoing maintenance, a team of six individuals was allocated, with three working full-time on operational tasks and others providing support as needed. This setup ensured smooth operations and support, with dedicated personnel available for day-to-day activities and issue resolution.

What's my experience with pricing, setup cost, and licensing?

I found the pricing to be relatively high. The pilot project for two hundred and fifty users over an eighteen-month period amounted to nearly two million dollars, which I considered to be a significant investment.

What other advice do I have?

As an architect, I feel quite comfortable with this product from end to end. Given my positive experiences and advocacy for SailPoint, I would rate it eight out of ten.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1200654 - PeerSpot reviewer
Senior Manager at a consultancy with 10,001+ employees
Real User
Top 5Leaderboard
Governance features with secure environments and helpful customizations
Pros and Cons
  • "The governance features, such as certification and provisioning, are the most beneficial for enhancing security."
  • "The interface can improve, and the product could become a little cheaper."

What is our primary use case?

I am more like a consultant helping customers use SailPoint Identity Security Cloud and do not represent the client.

How has it helped my organization?

The organization's operational expenses do get reduced, roughly by fifteen percent. The service integration with products like Microsoft's and SAP's is effective.

What is most valuable?

The governance features, such as certification and provisioning, are the most beneficial for enhancing security.

What needs improvement?

The interface can improve, and the product could become a little cheaper.

For how long have I used the solution?

I have been using SailPoint Identity Security Cloud for ten years.

What do I think about the stability of the solution?

In terms of stability, SailPoint Identity Security Cloud is rated eight out of ten. It's quite stable.

What do I think about the scalability of the solution?

Regarding scalability, I would rate it an eight out of ten.

How are customer service and support?

Technical support is responsive and helpful, and I would rate them seven out of ten.

How would you rate customer service and support?

Neutral

How was the initial setup?

The installation is not done by us; it is handled by SailPoint professional services, and we only do the configuration.

What about the implementation team?

SailPoint manages the installation, while we configure the solution.

What was our ROI?

Organizations have seen a reduction in operational expenses by about fifteen percent.

What's my experience with pricing, setup cost, and licensing?

SailPoint Identity Security Cloud is considered expensive, and the kinds of customizations many of our clients expect are not allowed.

Which other solutions did I evaluate?

We are working with Microsoft and Saviynt, among other vendors.

What other advice do I have?

I'd rate the solution eight out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company has a business relationship with this vendor other than being a customer:
Flag as inappropriate
PeerSpot user
Buyer's Guide
SailPoint Identity Security Cloud
January 2025
Learn what your peers think about SailPoint Identity Security Cloud. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
838,713 professionals have used our research since 2012.
Commercial and Technical Professional Manager at Evolution Technologies Group
Real User
Invaluable identity data warehouse, easy to configure, and straightforward to implement
Pros and Cons
  • "The most valuable feature for our customers and for us is the identity data warehouse."
  • "The report functionality and dashboard of the access manager could be improved."

What is our primary use case?

Less than half of my customers use the solution within the government for certification, identity process, and optimization of the roles and requirements for other areas. For the rest of my other customers, they are using the solution for their core systems. For example, they are doing vertical financial analytics. 

How has it helped my organization?

This solution has made my client's customers' journeys a lot better.

What is most valuable?

The most valuable feature for our customers and for us is the identity data warehouse. For financial analytics, this is the way to make the clusters better. 

What needs improvement?

The report functionality and dashboard of the access manager could be improved.

In the future, there should be improvements integrating into cloud ecosystems, such as AWS or Azure. At the moment we have to purchase many different solutions to have a fully operational intelligent identity package. There are some features lacking in identity and the DevOps solutions.

For how long have I used the solution?

I have been using the solution for two years.

What do I think about the stability of the solution?

The solution is stable.

What do I think about the scalability of the solution?

We did not have an issue with scaling the solution. My customers range from medium to large scale businesses using this solution.

How are customer service and technical support?

The customer support process is slow at times because they do not have proper language support for my clients in Latin America speaking Spanish. There is good support for English but not Spanish.

How was the initial setup?

The solution was easy to install for me but might not be for someone who is not used to the
methodology.

What about the implementation team?

We have three implementation consultants, one project manager, and two engineers as part of our deployment team. The number of people sent to a project depends on the environment in which the solution is being implemented. For example, The relation is one person per three systems, if you need to make more than 20 in three months, we will have to supply more people. The implementation took approximately six months.

For the ordinary maintenance activities for administration solutions, we provide normally one person to support four customers.

What's my experience with pricing, setup cost, and licensing?

The price of the solution could improve, it is not priced well for smaller businesses to afford. We have one customer that has 2,000 identities and another one with 8,000.

Which other solutions did I evaluate?

We have evaluated Oracle, IBM, and Micro Trend solutions. 

The methodology is very important, the methodology guides me and the customer to obtain the goal. Between all these solutions, this is the biggest difference. Additionally, the facility to build the data warehouse identity in order to have real identity governance is important. More specifically, the facility to create integration with the system and the way to make the governance of the data connectors are important because in other solutions you have to develop the code for the connectors. This includes low-level coding and business rules that have to be put in the DAT code, it takes a lot of time to have the functionality that you desire.

This is a mature solution, you can easily configure the connectors using a GUI interface. It makes the process a lot simpler. The business rules are model-specific and governed to reach the goals. This solution is straightforward to implement than another technology.

What other advice do I have?

I have my doubts about what is the best way to set up this solution. It is not only an issue with this solution but for others as well. We have two flavors of the solutions, software-as-a-service(SaaS) and on-premise. None of our customers is ready to choose one of those because if you are on-premise, generally, it is fully featured. It is easier to integrate with another system but it is not going to satisfy the customers that want a solution on the Cloud.

On the other hand, SaaS or Cloud solution may be better for you but you might have a lot of legacy systems that are not ready to work perfectly with a SaaS solution. At this point, the main issue is to figure out what solution is best at the present time, on-premise or SaaS. This decision can be very difficult.

You need to be careful with the decisions you make because if you choose an on-premise solution right now you most likely are going to be on the cloud in three years. You need to keep this in mind. The industry is going in that direction.

I rate SailPoint IdentityIQ a nine out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Technical Account Manager at Infoarchi
Real User
Top 20
Manage certifications and reduce the workload for certification processes
Pros and Cons
  • "It significantly reduces the workload for certification processes."
  • "The UI is complex."

What is our primary use case?

We use the solution to certify account access. SailPoint is handling compliance for account certification.

They have certifications assigned to owners.  Different appliances like Windows and Unix assign these certifications. They need to initiate certification every six months for Windows and Linux to ensure they have certified those accounts on the operating systems. Then, they will authenticate with the account owner. The account owner will then perform the initial check to determine if they should keep those accounts within the organization. Afterward, they will complete their subscription and return to their direct manager for position verification. If there are no errors or discrepancies in their source certification, the manager will sign off, and the entire association will be closed. Then, the observation owner will generate the report. This report serves as evidence for internal auditors to prove they completed the certification. It's like a search engine flow.

How has it helped my organization?

The UI is complex, but the background functionality is robust and well-designed to perform SailPoint IdentityIQ certifications.

What is most valuable?

The benefit of using SailPoint IdentityIQ is that it significantly reduces the workload for certification processes. Before implementing IdentityIQ, the corporation relied heavily on manual methods to gather accounts and permissions for review. Each host machine had to be checked manually to ensure account collection accuracy, followed by manually identifying accounts for certification. This entire process was labor-intensive, with human involvement at every step.

It took about a month to gather notification data and initiate the certification process. Tracking the status of certifications was challenging since it was managed through Excel, making it difficult to determine completion percentages. Once all certifications were completed,  SailPoint shifted through Excel sheets to finalize reports.

With IdentityIQ, the process is streamlined, reducing the time required for certification, and it also has an automated aggregation of accounts, assets, and groups. There's no opportunity for human error or intentional concealment of accounts, enhancing security.

What needs improvement?

SailPoint IdentityIQ could offer more options, such as free online training for partners.

For how long have I used the solution?

I have been using SailPoint IdentityIQ for 3 years.

What do I think about the stability of the solution?

The product is stable.

What do I think about the scalability of the solution?

The solution is scalable.

How are customer service and support?

The support team is quite responsive and understanding. Initially, they provide prompt responses, but their answers can be quite general. They could offer more precise guidance on addressing specific issues.

How would you rate customer service and support?

Neutral

How was the initial setup?

The initial setup is not straightforward and takes around a month to complete. Two persons are required to deploy the solution. An experienced person is needed to use IdentityIQ.

The implementation involves installing the application and the database on different machines. Then, we will proceed with the integration based on the data we receive from SailPoint. After that, we will discuss with the customer the connections they need to close accounts and the rules for creating accounts. 

Once this process is complete, we will check for related accounts and generate a report accordingly. This report will be sent to the responsible owner, who will be identified through SailPoint. We will assist the customer in assigning those accounts to the correct owner. Following that, we'll assist in setting up the business decision template and help the customer launch their subscription, guiding them through each step and aiding the manager in signing off on certifications.

What other advice do I have?

The capabilities for intelligence analysis are quite flexible, allowing users to generate the required reports quickly. It's pretty adaptable in terms of report generation and audit search.

The IQ Connector is supported by most major packaged software, making it convenient to acquire the connector from the SailPoint marketplace. The integration process is relatively straightforward.

Maintenance is easy. 

Overall, I rate the solution a nine out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer: Implementer
PeerSpot user
reviewer2514855 - PeerSpot reviewer
System Engineer at a consultancy with 10,001+ employees
MSP
Top 10
Provides ease of use to users
Pros and Cons
  • "The solution's most valuable feature is its ease of use."
  • "The product is unable to share suggestions with users."

What is our primary use case?

I use the solution in my company just to open some roles for new people or maybe those who need more particulars, so we just search for the roles and apply them to those. My company had dealt with some particular comments, like who had why the tool is needed and its justification in the business. , after which the managers approved it or whoever was in the top positions. It is basically for managing user access at the end of the day.

What is most valuable?

The solution's most valuable feature is its ease of use. It has functionality that allows me to search for or compare with others.

What needs improvement?

I don't use SailPoint that much because I have a particular role in my company. Considering the time since I last used the tool, it doesn't need anything more.

The product is unable to share suggestions with users. For example, if I put something like ABC, the tool will not be able to say something that is related to it. In some other tools, if I just start with the initials, it will show me the whole thing, but with SailPoint Identity Security Cloud, I couldn't find it. If I am just searching for a role, like PR or something, or if I write PR, it should provide me with some suggestive rules, which may be two, three, five, or whatever the role numbers. I have to write the full name, and then it will appear.

For how long have I used the solution?

I have been using SailPoint Identity Security Cloud for two years. I don't remember the version of the solution since the client who uses it will have to update it by themselves.

What do I think about the stability of the solution?

I did not experience any breakdowns or bugs in the product.

What do I think about the scalability of the solution?

More than 100 people in my team use the product.

How are customer service and support?

Our company's client, who uses the product, takes care of the technical support for the solution.

How was the initial setup?

The product's initial setup phase is not so difficult, so it is easy. There are no installation-related issues with the product.

The solution is deployed on an on-premises model.

What's my experience with pricing, setup cost, and licensing?

As per my knowledge, it runs on a paid partnership model, but I am not sure about it.

What other advice do I have?

One should definitely use the product since there are no prerequisites or things that you should know. The tool is very easy to use, and there is nothing in it that you should find very difficult to understand or learn.

It is easy for a beginner to learn to use the product for the first time.

I rate the product an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Flag as inappropriate
PeerSpot user
Security Architect at a financial services firm with 5,001-10,000 employees
Real User
Top 5Leaderboard
Offers built-in connectors, lifecycle management, certification, and recertification features
Pros and Cons
  • "I find the built-in connectors, lifecycle management, certification, and recertification features to be the most valuable."
  • "Scalability is hard, especially when you are doing it in real time."

What is our primary use case?

We use SailPoint IdentityIQ for identity governance and access management. There is no other vendor as good as this product. 

What is most valuable?

I find the built-in connectors, lifecycle management, certification, and recertification features to be the most valuable.

What needs improvement?

Access management could be improved. SailPoint is known for its IT identity governance capabilities, but its access management features in one platform.

Comparing SailPoint's access management to that of competitors like CyberArk and Okta, there's a clear gap.

Additionally, regarding privilege access management, there's potential for improvement. If SailPoint can develop a connector for RPAQ, they could also extend their capabilities by adding more access management features and modules.

For how long have I used the solution?

I have been using it for three years. I am currently using version 8.3.

What do I think about the stability of the solution?

We actually have a lot of challenges with some of our applications. Some of them are not working properly, and the issues are not fixed. We are encountering some problems.

What do I think about the scalability of the solution?

Scalability is hard, especially when you are doing it in real time. But, it would be eliminated once we have the first version of IdentityNow. So, the main goal for now is just to eliminate maintenance costs or run the entire infrastructure. That's why we plan to migrate it to the SaaS version of SailPoint.

We have more than 10,000 end users. We use it daily, 24/7 operation.

How was the initial setup?

Initially, I had difficulties, but with time, I gained experience. Especially integrating legacy applications like ARPAQ. Over time, it became easier, but integrating legacy apps remains a typical issue.

In terms of user experience, I don't have any complaints.  We are planning to migrate to the cloud.

What about the implementation team?

We did it in-house with the help of a third-party vendor experienced in deploying SailPoint.

The deployment took a couple of weeks in a test environment before going into production.

We require maybe around four people because, in our company, we have different roles and responsibilities. So, from another perspective, from the system administrator, we require around four resources.

What's my experience with pricing, setup cost, and licensing?

It is affordable licensing. 

Which other solutions did I evaluate?

Currently, we are looking for another option, which is EmpowerID.

What other advice do I have?

Overall, I would rate the solution a nine out of ten. If you want to start, go better directly to the cloud, instead of installing it on-prem.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Tomi Pitkanen - PeerSpot reviewer
Head of ICT Security at Neste
Real User
Top 20
Good scalability and provides value for its cost
Pros and Cons
  • "It is a scalable product."
  • "We have had a lot of service breaks because of the lack of support."

What is most valuable?

The whole package is useful. It matches the item to the management, so I can't pinpoint any specific individual feature.

What needs improvement?

We are satisfied with the product overall. But the challenging point has been that we are buying the service and support from CyberIAM, but the SailPoint has remained unchanged. The average support has been a big disappointment.

Another problem we face is that we have around 450 to 500 data applications in our environment, and everyone wants customized identity management for their specific application. It takes a huge amount of time to onboard all of them, and maybe that's the only weakness.

For how long have I used the solution?

I have been working with SailPoint IdentityIQ for two years. We have been implementing it for over two years now, but we are still in the process of getting all of our legacy applications on board.

What do I think about the stability of the solution?

It is a stable product.

What do I think about the scalability of the solution?

It is a scalable product.

How are customer service and support?

We are only the second customer in Europe who is using the consulting services. The majority of the service is with customers on the US side, and we have been fighting on this topic for at least 18 months, which has been quite a downside. But otherwise, technically, the platform is really good. We have had a lot of service breaks because of the lack of support.

How would you rate customer service and support?

Neutral

How was the initial setup?

The platform deployment was pretty easy. But when you start to onboard the applications, it becomes more complex. The whole configuration depends on the application architecture and how you should set it up. All the cases are different, and that can be quite challenging.

What's my experience with pricing, setup cost, and licensing?

All of the good products, like SailPoint, are expensive. But when you qualify the cost and then have to weigh the benefits and opportunities it gives you, it's a bit difficult to say whether it's expensive. SailPoint is expensive on the market but also produces real value.

Which other solutions did I evaluate?

We had some smaller implementations with different products, but not similar ones.

We presented our project to a vendor and then did a proof of concept with several products before selecting SailPoint IdentityIQ.

What other advice do I have?

It is suitable for both small and enterprise-level companies. I would advise reaching out to a company that has already implemented it and asking their experts how they feel about using it. Once you get benchmarking information, it becomes easy to make the decision.

Overall, I would rate it an eight out of ten. There is room for improvement with regard to their technical support and complex configuration.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
IT Engineer at a energy/utilities company with 1,001-5,000 employees
Real User
ROI has been outstanding and our user onboarding time has been significantly decreased
Pros and Cons
  • "We like the integration with other systems."
  • "I would like to see more Cloud management from this product."

What is our primary use case?

We primarily use this solution to manage our identity. We use it for identity access and onboarding accounts and users.

How has it helped my organization?

Previously, when someone came on board, it took them almost a week or two to get access, to settle in, to be able to become productive. Now, with SailPoint, we can get all of that done within a few hours. It has decreased the onboarding process and increased productivity.

What is most valuable?

So far, we are still in the implementation phase, but one feature that is so valuable is the life cycle management of identity. We also like the integration with other systems. Is very robust and solid. They built some plugins that are really well thought out and they handle most of our requirements. We also like the user interface of the product.

What needs improvement?

The service could be improved with some more out-of-the-box features. If the solution could make the forms more customizable, for example. They are very generic and any changes you make to them, you are doing customization. The solution needs more templates that meet general needs.

I would like to see more Cloud management from this product. Right now they have some, but they are currently plug-ins. It does not handle the management of some of the groups or dynamic groups in the Cloud. I would like to see that in the future. I have heard that they are releasing one soon, but I'm not sure when. That will help us a lot because we are a hybrid solution company. We have some on-prem, some in the Cloud, and we want to manage both.

For how long have I used the solution?

I've been using the solution for one and a half years.

What do I think about the stability of the solution?

When we were doing the request for proposal, we did evaluate stability and got some references from other big enterprise companies that use the product. So we knew, before we selected, we knew that they had a solid product. We've heard that from many of the references we received. But when they came and did the presentation for us, they impressed us. They knew the product, they listened to what we needed, what our pain points were, and they were able to answer our questions and provide us with answers to some of our use cases. We had our requirements and they were pretty much the only one from the other vendors that we selected that could meet ninety percent of all requirements. The rest, they were limited. They had some, or they were struggling on one feature, but not others. But SailPoint, they were strong in most of them.

What do I think about the scalability of the solution?

In terms of scalability, they can handle it. That was one of our requirements is how they could scale. We asked what number of accounts they can handle, and they were way beyond those. Some of their previous implementation, some of the companies they implemented for, they were four times the size of our company. So we were aware that this solution could handle our growth.

I would say we have about eighteen thousand users. 

Right now we are using the solution for onboarding user accounts. Primary and secondary accounts. Our second phase will be managing groups and applications, access to new groups and applications. Then the third, we'll go a little bit with analytics with doing some risk-scoring. Beyond that, we might even use it for any new innovation or company comes with, in terms of managing access to devices and IOTs.

How are customer service and technical support?

So far the integrators have been doing the support. I wish the support from SailPoint was a little bit faster than we've experienced so far. It has taken, sometimes, a couple of weeks to get feedback from them. At the same time, support played a big role in selecting the product.

Which solution did I use previously and why did I switch?

Previously, we picked a product that got moved between so many companies and got bought and merged, so the support was really horrible. We had bad support back then.

How was the initial setup?

The initial setup was straightforward. We knew our requirements, and we've got all the infrastructure required for the system. We didn't have a lot of issues with the product itself. There were some vulnerabilities in the product, but they addressed them in the next version. They were able to address them in version 7.3.

Our deployment took us about, I would say a week. We had to do it in different phases. 

The implementation strategy we had was to start with first, deploying development and QA systems. Then gather lessons learned from these systems, then go to production. That helped us a lot because we found out that we have a lot of concerns with our infrastructure. There were a lot of firewalls that we had to open to communicate with the external system, with the Cloud system that we needed to connect to. So, a lot of that was more like ad-hoc testing. Because we weren't sure how many of the firewall ports we needed to open and which ones we needed. That took a lot of our time. It was just the infrastructure from our end. In terms of the installation of the product and the implementation of it, that was very quick.

We have a big staff because we are integrating with so many other systems from HR to Active Directory to SAP. So the core team is about twelve to twenty people, but the extended team, I would say, if you combine them all together with all the work we've done, is probably more than thirty or forty. They are not all technical. Some of them were just there for governance or requirement gathering.

What about the implementation team?

We use an integrator to do all the coding for us, and that worked very well. They knew the product. They've implemented for a while for other clients. The company we work with is called Edgile and we have had a great experience working with them. We work very well with them. We consider them our partners. They understand our requirements, and they give us their feedback and their best practices. So we have a good relationship.

What was our ROI?

In terms of our phase one, to get people onboarded right away, within a day, that has saved us a lot of money. Also, the product discovered a lot of clean-up that we needed to do in the kind of systems that we integrate. Previously, we didn't know. So that helped us a lot in cleaning up some of our data. 

There are so many other features and other things that we can do probably, that we haven't gotten to that we know is going to save a lot in terms of the password reset support. Right now, our outsource company handles that. Once we start implementing that in a few more weeks, people will have self-service password resets. They don't need to call the help desk to get it unlocked. It costs us money, using the help desk. They will be able to do it themselves and it will save us money.

Group management and access to the application will help us too. Right now, that's all done through ticket requests and manual access implementation. In our next phase, that's all going to be automated where do you go to a form and select that and you get access, get approved and get access. It will save us a lot of time from the support respect.

What's my experience with pricing, setup cost, and licensing?

The licensing fees are on a yearly basis. That's not my part of the job, so I don't know what the costs are. I handle Bio Supply management so I really don't know.

There are add-ons. A lot of them have to do with if we want any plug-in's. So if there's any new system that comes to our company that we want to integrate with, they sell their plug-ins as an add-on. It's not out-of-the-box. So integration with Active Directory, that was an add-on. Integration with SAP, that was an add-on. They are their own module. They are not packaged with the product that comes with it. You have to buy them separately. But, everybody needs them.

Which other solutions did I evaluate?

We had our previous vendor submit in our RFP, but they did not bring anything to the table that was new. There weren't many enhancements and improvements to the product and we really did not have a good experience with their support. 

We were looking at One Identity. SAPIEN was another one we looked at. Also, Okta, NetIQ, and Centrify. But, some of them were mainly cloud-based. Some of them were a mix of both, but more of cloud and less of on-prem. So, SailPoint was the right one that handled both.

We had some use cases that we gave to them and we needed them to answer how they would implement that use case. We wanted that feedback out of all of the vendors. SailPoint was the only one that came back with the right answers.

What other advice do I have?

We have some old processes in place that need to be revisited and updated. Those, of course, made our implementation a little bit late and we ran into some issues.

One of the hurdles has been that people are used to the old method and when a new change comes in, a lot of people are not very open-minded to it. So it takes a lot of training and convincing about this new technology. We need to make changes to the way the form looks, the process. We had to make a lot of changes to the current processes. We had very outdated processes that were not working well for us because we had to get a lot of exceptions. And any exceptions you make, you tend to break automation and start doing manual processes, and that slows down productivity. 

That was a little bit frustrating and a lesson learned. Feedback from the client and explaining to them why we're changing some of the processes, policies, and standards was challenging. But we had to do a lot of cleanup before doing the implementation. We had an old system that was there for more than seven years. So that product was almost at the end of its life and we had a lot of complaints from the client that they were fed up with it. They wanted a change. But they were not expecting a change to the forms and the processes. They were expecting us to just solve the issues and move on, not a big system change. So we're training people. We created a lot of videos for them to play back when they request things. That helped a lot. We created a blog for them to give us any of their feedback. So we can make improvements because we are still in phase two of our implementation. We still have three more phases to go.

For advice, I would say to make sure you gather your requirements first. Make sure you have more thoughts, make sure you know what your pain points are and what are you expecting to get out of the product that you select. That will help you a lot in selecting the right vendors. Secondly, have some solid use cases, and when you use those use cases, most of the time you should know the answer to the questions. That will help you in identifying who can meet your requirements.

Do your diligence in terms of getting some references. Specifically, references for a current implementation from another customer. Getting that information from that customer will help you a lot in terms of how their implementation went, and what their pain points were in implementation.

I would give the solution a nine out of ten. When every possible manual process we have right now can get automated, I'll give it a ten. We still have some processes that we have to do manually.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Download our free SailPoint Identity Security Cloud Report and get advice and tips from experienced pros sharing their opinions.
Updated: January 2025
Buyer's Guide
Download our free SailPoint Identity Security Cloud Report and get advice and tips from experienced pros sharing their opinions.