SailPoint Identity Security Cloud Reviews

We primarily use this solution to manage our identity. We use it for identity access and onboarding accounts and users.

Previously, when someone came on board, it took them almost a week or two to get access, to settle in, to be able to become productive. Now, with SailPoint, we can get all of that done within a few hours. It has decreased the onboarding process and increased productivity.

So far, we are still in the implementation phase, but one feature that is so valuable is the life cycle management of identity. We also like the integration with other systems. Is very robust and solid. They built some plugins that are really well thought out and they handle most of our requirements. We also like the user interface of the product.

The service could be improved with some more out-of-the-box features. If the solution could make the forms more customizable, for example. They are very generic and any changes you make to them, you are doing customization. The solution needs more templates that meet general needs.

I would like to see more Cloud management from this product. Right now they have some, but they are currently plug-ins. It does not handle the management of some of the groups or dynamic groups in the Cloud. I would like to see that in the future. I have heard that they are releasing one soon, but I'm not sure when. That will help us a lot because we are a hybrid solution company. We have some on-prem, some in the Cloud, and we want to manage both.

I've been using the solution for one and a half years.

When we were doing the request for proposal, we did evaluate stability and got some references from other big enterprise companies that use the product. So we knew, before we selected, we knew that they had a solid product. We've heard that from many of the references we received. But when they came and did the presentation for us, they impressed us. They knew the product, they listened to what we needed, what our pain points were, and they were able to answer our questions and provide us with answers to some of our use cases. We had our requirements and they were pretty much the only one from the other vendors that we selected that could meet ninety percent of all requirements. The rest, they were limited. They had some, or they were struggling on one feature, but not others. But SailPoint, they were strong in most of them.

In terms of scalability, they can handle it. That was one of our requirements is how they could scale. We asked what number of accounts they can handle, and they were way beyond those. Some of their previous implementation, some of the companies they implemented for, they were four times the size of our company. So we were aware that this solution could handle our growth.

I would say we have about eighteen thousand users. 

Right now we are using the solution for onboarding user accounts. Primary and secondary accounts. Our second phase will be managing groups and applications, access to new groups and applications. Then the third, we'll go a little bit with analytics with doing some risk-scoring. Beyond that, we might even use it for any new innovation or company comes with, in terms of managing access to devices and IOTs.

So far the integrators have been doing the support. I wish the support from SailPoint was a little bit faster than we've experienced so far. It has taken, sometimes, a couple of weeks to get feedback from them. At the same time, support played a big role in selecting the product.

Previously, we picked a product that got moved between so many companies and got bought and merged, so the support was really horrible. We had bad support back then.

The initial setup was straightforward. We knew our requirements, and we've got all the infrastructure required for the system. We didn't have a lot of issues with the product itself. There were some vulnerabilities in the product, but they addressed them in the next version. They were able to address them in version 7.3.

Our deployment took us about, I would say a week. We had to do it in different phases. 

The implementation strategy we had was to start with first, deploying development and QA systems. Then gather lessons learned from these systems, then go to production. That helped us a lot because we found out that we have a lot of concerns with our infrastructure. There were a lot of firewalls that we had to open to communicate with the external system, with the Cloud system that we needed to connect to. So, a lot of that was more like ad-hoc testing. Because we weren't sure how many of the firewall ports we needed to open and which ones we needed. That took a lot of our time. It was just the infrastructure from our end. In terms of the installation of the product and the implementation of it, that was very quick.

We have a big staff because we are integrating with so many other systems from HR to Active Directory to SAP. So the core team is about twelve to twenty people, but the extended team, I would say, if you combine them all together with all the work we've done, is probably more than thirty or forty. They are not all technical. Some of them were just there for governance or requirement gathering.

We use an integrator to do all the coding for us, and that worked very well. They knew the product. They've implemented for a while for other clients. The company we work with is called Edgile and we have had a great experience working with them. We work very well with them. We consider them our partners. They understand our requirements, and they give us their feedback and their best practices. So we have a good relationship.

In terms of our phase one, to get people onboarded right away, within a day, that has saved us a lot of money. Also, the product discovered a lot of clean-up that we needed to do in the kind of systems that we integrate. Previously, we didn't know. So that helped us a lot in cleaning up some of our data. 

There are so many other features and other things that we can do probably, that we haven't gotten to that we know is going to save a lot in terms of the password reset support. Right now, our outsource company handles that. Once we start implementing that in a few more weeks, people will have self-service password resets. They don't need to call the help desk to get it unlocked. It costs us money, using the help desk. They will be able to do it themselves and it will save us money.

Group management and access to the application will help us too. Right now, that's all done through ticket requests and manual access implementation. In our next phase, that's all going to be automated where do you go to a form and select that and you get access, get approved and get access. It will save us a lot of time from the support respect.

The licensing fees are on a yearly basis. That's not my part of the job, so I don't know what the costs are. I handle Bio Supply management so I really don't know.

There are add-ons. A lot of them have to do with if we want any plug-in's. So if there's any new system that comes to our company that we want to integrate with, they sell their plug-ins as an add-on. It's not out-of-the-box. So integration with Active Directory, that was an add-on. Integration with SAP, that was an add-on. They are their own module. They are not packaged with the product that comes with it. You have to buy them separately. But, everybody needs them.

We had our previous vendor submit in our RFP, but they did not bring anything to the table that was new. There weren't many enhancements and improvements to the product and we really did not have a good experience with their support. 

We were looking at One Identity. SAPIEN was another one we looked at. Also, Okta, NetIQ, and Centrify. But, some of them were mainly cloud-based. Some of them were a mix of both, but more of cloud and less of on-prem. So, SailPoint was the right one that handled both.

We had some use cases that we gave to them and we needed them to answer how they would implement that use case. We wanted that feedback out of all of the vendors. SailPoint was the only one that came back with the right answers.

We have some old processes in place that need to be revisited and updated. Those, of course, made our implementation a little bit late and we ran into some issues.

One of the hurdles has been that people are used to the old method and when a new change comes in, a lot of people are not very open-minded to it. So it takes a lot of training and convincing about this new technology. We need to make changes to the way the form looks, the process. We had to make a lot of changes to the current processes. We had very outdated processes that were not working well for us because we had to get a lot of exceptions. And any exceptions you make, you tend to break automation and start doing manual processes, and that slows down productivity. 

That was a little bit frustrating and a lesson learned. Feedback from the client and explaining to them why we're changing some of the processes, policies, and standards was challenging. But we had to do a lot of cleanup before doing the implementation. We had an old system that was there for more than seven years. So that product was almost at the end of its life and we had a lot of complaints from the client that they were fed up with it. They wanted a change. But they were not expecting a change to the forms and the processes. They were expecting us to just solve the issues and move on, not a big system change. So we're training people. We created a lot of videos for them to play back when they request things. That helped a lot. We created a blog for them to give us any of their feedback. So we can make improvements because we are still in phase two of our implementation. We still have three more phases to go.

For advice, I would say to make sure you gather your requirements first. Make sure you have more thoughts, make sure you know what your pain points are and what are you expecting to get out of the product that you select. That will help you a lot in selecting the right vendors. Secondly, have some solid use cases, and when you use those use cases, most of the time you should know the answer to the questions. That will help you in identifying who can meet your requirements.

Do your diligence in terms of getting some references. Specifically, references for a current implementation from another customer. Getting that information from that customer will help you a lot in terms of how their implementation went, and what their pain points were in implementation.

I would give the solution a nine out of ten. When every possible manual process we have right now can get automated, I'll give it a ten. We still have some processes that we have to do manually.

The solution is brilliant in all aspects. SailPoint’s technical value exceeds what OpenText proposes. It is a really good product.

We faced some issues while integrating the solution with a third-party tool.

I have been working with the tool since October 2023.

The tool is stable.

The tool is very scalable. Even if the implementation exceeds the number of users decided previously, the tool will fulfill the needs and will still be stable. The solution is not suitable for small companies. The cost will be high.

The support is very good. I rate the support team an eight and a half out of ten.

Positive

The implementation is straightforward. It depends on the environment and customers’ needs. However, it is easy.

The pricing must be improved. The pricing is a little bit higher than other tools. The solution must provide different prices for different countries. All countries are not equally rich.

SailPoint IdentityIQ is more efficient than Micro Focus. We chose SailPoint IdentityIQ because it is stable and the support is good.

We are distributors. Our main competitor is Micro Focus. It is now OpenText. I will recommend the product instead of other tools. It is one of the best IAM products in the market. The price is the only issue. Overall, I rate the tool an eight and a half out of ten.

We use SailPoint IdentityIQ mainly for employees. It's not a customer identity and access management tool. It's mainly for the workforce. All my clients choose SailPoint IdentityIQ because they need some tool that will govern and do the compliance at their end. We are mainly integrating all the applications for the organization, just like their HR, to do the governance in just one place, namely in SailPoint IdentityIQ. We're using SailPoint IdentityIQ for provisioning, granting access, taking access, automatic onboarding, and off-boarding. We also use SailPoint IdentityIQ for employees' joiner, mover, and leaver workflow. We use SailPoint IdentityIQ for automatically reprovisioning all the roles and accesses.

The most selling modules for SailPoint are the compliance manager and the life cycle manager. In addition, the password manager module is replacing the call center for any organization by doing self-service password services, resetting passwords, and unlocking accounts.

SailPoint IdentityIQ has a primitive AI engine. It doesn't compare to the autonomous engine that uses machine learning and deep learning in ForgeRock.

It would be great to have an autonomous engine that uses machine learning and deep learning to find orphan accounts, accesses not used by employees and extra accesses.

I have been doing a SailPoint IdentityIQ pre sales presentation for two years and a real product implementation for six months.

SailPoint IdentityIQ is a stable solution, and I rate it a nine out of ten for stability.

I rate SailPoint IdentityIQ less than five out of ten for scalability. To increase scalability, you need to increase servers, which is not easy.

The technical support in the Middle East is being done through partners. SailPoint IdentityIQ has no physical presence in the Middle East except through its partners and distributors. However, SailPoint IdentityIQ's remote support is always available. SailPoint IdentityIQ's technical support is good because they are always available when the partners or the implementation team face any issues.

Positive

The initial setup of SailPoint IdentityIQ was very easy, and I rate it a ten out of ten. We have an automatic deployment engine, so the deployment takes around an hour, not long.

SailPoint IdentityIQ is highly-priced, and I rate it an eight out of ten for pricing.

Our clients using SailPoint IdentityIQ are mainly in the banking sector, and the others are part of the Saudi Arabia government and ministry. For 12 years, SailPoint IdentityIQ twelve has been the leader of Gartner Magic Quadrant. All the market reports suggest SailPoint IdentityIQ when you're doing governance and compliance for your workforce. SailPoint IdentityIQ is even replacing other solutions like IBM and ServiceNow.

SailPoint IdentityIQ is a stable and reliable workforce identity and access management solution. If you're looking for a solution for the workforce, you should opt for SailPoint IdentityIQ, and if you're looking for a solution for the customer base, you should choose ForgeRock.

Overall, I rate SailPoint IdentityIQ a ten out of ten.

Our company uses the solution to manage the life cycle and access control of users. 

We implement for various clients in the banking or investment industries in the Middle East. We also have a couple of government customers. All customers use the solution for employee management.  

The access certification feature is valuable. 

The solution is very customizable. 

Certifications could include additional access levels or practices. 

On occasion, there are difficulties with the management control when you attempt to apply things in a certain manner. 

I have been using the solution for nine years. 

The stability is pretty good because it is a very customizable solution. If you don't know how to customize or if you make mistakes, then the solution can become unstable. 

If you have enough hardware to support the on-premises version, then the solution is scalable. You need enough hardware to support the number of identities you want to manage. 

Technical support is efficient and very, very good. If you raise a concern, support is readily available with a solution. Responses are received in a very timely manner. 

The setup is very, very easy. Identity IQ is the on-premises software for the solution and it is easy to setup. There are modules to install so the only thing you need is time to complete them. 

We implement the solution for customers. First you install and connect the web server. Then you install the database on top of it. If you want additional modules, then you can import the LT module on top. 

The pricing is based on the number of users and is reasonable. 

I highly recommend the solution and rate it a seven out of ten. 

We use the solution for identity management and access governance.

We have a variety of connectors that facilitate seamless integration with SailPoint IdentityIQ, enabling you to connect with target systems. This integration allows for the reconciliation of user information and access, consolidating them under a single roof. You can conduct access governance processes efficiently

SailPoint provides functionalities for various stages, such as joiner, mover, and leaver. Additionally, it offers features for account locking, unlocking, disabling, and immediate termination, facilitating smooth user management processes. This includes handling scenarios like pre-hires and future hires and managing users who accept offers but do not join on the specified start date. With SailPoint IdentityIQ, organizations can efficiently handle these scenarios by leveraging its comprehensive identity management tools and processes suite.

SailPoint IdentityIQ is performing well. The primary purpose is to address the needs of identity management and access governance. However, competitors are advancing by offering integrated solutions encompassing access and privileged access management in a single unified platform. IdentityIQ's focus has remained primarily on identity and access governance, neglecting to expand its offerings to include these additional functionalities within its existing product. Enhancing their product by incorporating modules for access management, privileged access management, and third-party access governance could address this gap.

I have been using SailPoint IdentityIQ for 8.5 years. We are using the V8.3 of the solution.

The product is stable.

The solution is scalable.

I rate the solution’s scalability an 8 out of 10.

The initial setup is easy.

Before making a decision, it's essential to align your primary goals with the long-term roadmap of your organization. Consider factors such as whether your organization is a government or private entity and where you envision your organization heading in the next five to ten years. While cost can be a significant factor, it's important to assess the value and features offered by SailPoint IdentityIQ in relation to your organization's needs and future direction.

There have been many instances where we provided initial templates in building some of the connectors approximately eight or seven years ago. In response, my team developed a custom connector, which was reviewed and eventually incorporated into the SuccessFactors Connector by SailPoint. The previous version had limitations with subset deployments. SailPoint has introduced various solutions over time. For instance, they now handle deployment entirely, even for IdentityIQ, transitioning it into a SaaS application. SailPoint manages servers, applications, deployments, and server patches, relieving customers of these challenges. Customers access the product via a URL, focusing solely on utilizing it to address their needs. SailPoint continues to provide comprehensive solutions, including evolving IdentityIQ into a SaaS-capable platform, to support their customers' requirements.

In terms of solving identity management and access governance challenges, SailPoint IdentityIQ is certainly a strong contender. However, it's essential to clarify your specific goals—are you focused solely on identity management and access governance, or do you also require access management and privileged access management solutions?

Configuring IdentityIQ can be complex, requiring significant coding and effort, especially considering the intricacies of integrating with various target systems. The level of complexity can vary greatly depending on each system's specifications.

Overall, I rate the solution an 8 out of 10.

I'm a consultant. I work with companies to evaluate it and sometimes help them implement it as well.

I'm using the most recent version. It's somewhere around version 8.

The big one now is that they're adding AI and machine learning to figure out automated approvals and make recommendations to their reviewers. So, if I bring up Doug McPherson and it says he has access to this application, the system will make a review based on peer group analysis. That's one of the biggest new things. The problem used to be that people would get everything loaded on, and they created too much work for themselves. Now, they can use these policies and start to let the machine pick the less risky things. If it says it should be approved, then automatically approve it. It's definitely a time saver for a lot of people.

It has got a great user interface, and it just does the job.

It tends to be more expensive, but at the end of the day, it works.

I have been using it for probably 15 years. 

Its stability is very good. It's running so well now. I'd rate it a nine out of ten in terms of stability.

Its scalability is awesome. They've got customers with over a million users, so it'll scale to what you need. It has a very scalable architecture.

I'm a consultant, and I implement it for clients. I've worked with clients from 5,000 users and up to about 400,000 users.

I'd rate them really high. They have a group called Expert Services. They rely on third parties like me or the big four, like the Deloittes and the PWs, to do the implementation, but they maintain a group that they call their Expert Services. It has about a hundred people you can go to for the hardest things. If you were on the edge of performance issues and any other issues, you can bring in their experts. It's a really good team. It's more expensive than the other guys, but it's worth it.

IdentityIQ is difficult to begin with, but compared to its competitors, it'd be an eight out of ten in terms of ease of setup.

The deployment duration varies. They've got examples of people being up and running in a month. For massive companies with hundreds or thousands of employees, it takes a couple of years to get fully implemented, but they've got ways where you can implement it almost by a business unit, so you can be up and running and then slowly, you add the rest of the company to the implementation.

In terms of the number of people required, the actual SailPoint team would be three to four people, and then they use the business analysts in the company to help onboard the application. That's a really nice methodology where I can spread the workload over a bunch of people instead of having to rely on one person and get those backlogs and lineups form. For example, I can have a business analyst from the business units I'm working with help me onboard applications. That really speeds it up.

In terms of the deployment model, they have a SaaS version, but you can do it on-prem, and you can also do it with the hybrid model.

It depends on your company, but I've seen ROIs in 14 to 18 months. So, it's great.

It's all competitive. Initially, the prices look a bit higher, but once it gets into a competitive situation, they meet the market. I'd rate it an eight out of ten in terms of pricing. It tends to be more expensive, but it works.

They've got such a big lead in the market from a capabilities point of view. They're going after the cloud, so they're doing a lot in the cloud management area and making that easier for clients to implement it for managing the applications in the cloud space or all their SaaS applications. That's one of the big areas. They just did the acquisition of SecZetta, which provides management for third parties. For partners and third parties you work with, it can help automate the management of access to those people.

I'd rate it a nine out of ten because what it does is hard. The work that they implement isn't simple because the companies are so big. It works and does the job. It's not the product that causes problems; it's generally working with the company and its processes, but the product is bulletproof.

The product is for identity management.

There are lots of features. It depends on what your use cases are. Basically, how the entitlements are handled is very good. It's the complete lifecycle of entitlements. That is what the best feature is about the product.

It offers a single source of truth. Everything can be handled from one tier.

I focused on the functionality. We needed to implement everything properly, and those functionalities were pre-built in the product. We didn't have an issue in that sense.

The interface is simple and very usable. I have used other products and didn't see their interface as better than SailPoint. 

The product is stable.

It is scalable. 

I wouldn't be able to point out any shortcomings. Right now, also I'm not working on the product as much. 

The user interface could be slightly improved. It could be made simpler and more user-friendly, however, it is good enough right now. 

I've used the solution for more than a year. 

It is stable. There are no bugs or glitches. It doesn't crash or freeze. It's reliable. 

The scalability is good. 

We only used support for a few months initially and they were very, very good. There was no problem at that time. After that, we are on our own. We have our own experts. They have been experts in SailPoint for a long, long time. Therefore, we are reaching out to SailPoint support directly - until and unless there is a shortcoming or a bug in the product. I have not come across any yet.

Positive

We had legacy systems. That's why we moved to SailPoint.

The setup was pretty good. We have five people that can handle deployment and maintenance. 

The pricing was taken care of by management. I don't know about the exact cost.

I'm a customer. We have bought the product, and we are using it. It's in our organization.

I am not sure which version of the solution we're using. It might be one version behind. 

Whether or not this is the right solution for others depends on your use cases. If your use cases align with those, this is the best product to use. The client that I'm working with has their use cases aligned with this solution, and we haven't had to customize much. Most of the functionality's in-built.

I'd rate the product ten out of ten. It covers the functionality we need.

We use this solution predominantly for the leaver process. 

This solution is easy to configure. 

The mover process for this solution could be improved. 

We have used this solution for six months. 

This is a stable solution. 

This is a scalable solution.

The initial setup is straightforward. This took one week. 

We have a monthly subscription for this solution. 

I would rate this solution an eight out of ten.