Symantec Identity Governance and Administration Reviews

• The user interface
• The synchronization with our HR system

I know that CA are always trying to improve and upgrading with improvements.

I've used it for 11 years, and it has improved greatly over time.

After a big update and upgrade, we have no problems with the system.

The system is very stable, it isn’t freezing and it handles everything very well.

They don’t give a resolution immediately. They tend to take time coming up with answers. We are not really satisfied with the customer service. They do solve problems in the end, it just takes time.

No, we didn’t use a previous solution. This is the first solution we ever implemented and we have been very satisfied ever since.

Initially it was a bit complicated as it was really something new in the market and the idea of identity management that works automatically and synchronizes with a HR system was not common. We were a pioneer. It was complicated to start these projects, the planning, architecture, and data mining that we had to do in the first step.

We did it by ourselves, and had to do a lot of thinking by ourselves to get to the step of implementation. It took a bit of time because at that point there was not a lot of knowledge on how to implement such a new solution, so it took time. After we passed this step it moved on. But today when you launch these projects, everyone has a lot of experience from over the years and knows the steps. In 2004 it was really a startup. Now we are specialists.

Yes, we have had a return on investment. All of the time saved on administration and user lifecycles. Now it’s all automatic. When a new employee is coming to the organization a new user is created, when I put it in the HR system a new user will be automatically created. Also when a user is let go, or has retired everything happens automatically. It helps because we have a lot of temporary employees that we bring in. It’s hard to imagine having to do this all manually.

I think the pricing is reasonable.

It gives us the ability to automate the IAM process.

• Automating the process for new employees, removing employees, and so on
• Self-service to grant access for applications and software
• Delegate some functions to the help desk
• Type group for some people with the same functions in the company

The provisioning manager could use improvements.

I've used it since 2008.

No issues encountered.

No issues encountered.

No issues encountered.

9/10

9/10

No previous solution was used.

The initial set-up was standard.

We used CA Spain.

It's very high.

Good prices and services.

We did, but I don't know which ones.

You should know well your company's HR processes and rules to control the automation process.

We have three primary uses for the solution. We use it to centralize  accounts and directories. We also use it for  new registration of our new employees and for users to self-reset password.

Our customers get ROI by implementing Self User Registration & Self Reset

There are many valuable features within the solution. The product is easy to customize. It’s also highly secure.

The directory has room for improvement. Also, the dashboards and, in particular, the KPI dashboard that shows the current user’s information needs reworking.

It would be ideal if they could consolidate the workflow. Right now, because everything is on a different workflow engine, seamless integration cannot happen. If the solution offers a single workflow engine and a single reporting engine for all security targets, that would be ideal.

I’ve been using the solution for three to four years.

The solution is very stable.

This product is highly customizable and flexible in terms of handling customer requirements.

I’m not happy with technical support at all. It’s very limited.

Positive

Nop

With any identity management product, you’re going to have complexities, so the setup is not simple. It’s a complex infrastructure and implementation and it requires reasonable expertise from those handling the implementation.

Our team of technical consultants implemented to customer site

Secure Automated Mechanism to have centralize directory to manage Users.

Expensive solution & implementation takes time to implement

Yes 

For an organization looking for an identity management suite, it’s the kind of tool you can invest in the long term.

For those considering implementing the solution, I would recommend finding the right partners who have the right implementation experience to assist. There is no doubt this product has capabilities. The important thing is to find someone who understands the business requirements. It’s really important because statistically, 70% of identity management projects fail. Most of the time the product has the capabilities but the consultant doesn’t have the ability to customize the solution.

I’d rate the solution nine out of ten.

This is the only IM solution I have come across. Using the implementation guide, I was able to implement the solution with ease. The IM is the most valuable feature to me. I also find the solution's documentation and community valuable.

I find the API boring. I also faced issues while integrating with CA SSO.

I have used this solution for three months.

There is a good level of technical support because the community is a good set of geeks.

The setup was easy because of the friendly product documentation and the community support.

Compared to other options, CA products are not that expensive.

I did not evaluate other options, since this product was just meant for a PoC.

I would not recommend this product to others. There are better products on the market, as I later came to know about Sailpoint, DELL IDM, and NetIQ.

We offer solutions to financial and government institutions. Symantec Identity Governance and Administration is a part of our security solutions. We use it to create users and assign them privileges.

Self-registration and self-service password management are valuable features. The role modeling feature is also very useful. It allows you to model your enterprise role.

They provide a framework to develop your own connectors. A connector is a piece of software that integrates with the solutions that are not a part of the support matrix. Currently, it is difficult to create these connectors in this solution. Other solutions, such as NetIQ Identity, provide a better way to create your own connector.

Currently, there is no cloud version. It should have a full cloud version.

I have been using this solution for about seven years.

It is very stable. There are no issues.

It is easy to code into this solution. You just have to run a setup configuration and, in a few minutes, you have two services. In terms of the number of users, we have around 10,000 users.

When I started working with this solution, I had some issues, and they helped me a lot. I don't have any issues with their technical support.

Its latest version is very easy to set up. The deployment takes around one hour, and after that, you have to do some configurations. The duration for that depends on how many systems you have. It can take one or two months.

I would recommend this solution to others. It is a great solution. I like this solution, and that's why I have been using it for seven years. I would advise others to do proper role modeling before implementing this solution. Role modeling is really important for any identity management solution.

I would rate Symantec Identity Governance and Administration a nine out of ten.

Automated provisioning removes manual labor and manual provisioning.

Automation is the best way it's improved the way we function because we don't have to perform manual work over identity-related controls.

A better information display for the approvals within the workflow would give them more information and the ability to comment back on a request as to why they're rejecting it. We've been telling them we'd like this improvement, and we hope to see it.

We have challenges because of the customization – it's difficult to do upgrades. We're just not doing the upgrade because we are a few versions behind, so now it's tough.

Performance is a challenge just in terms of the number of roles and endpoints that we're managing. We have 10 platforms that we manage and over 8000 endpoints – that’s our challenge.

We have challenges because of the customization. It's difficult to do upgrades. We are a few versions behind so doing the upgrade is tough.

When we've used them, they've been good.

It was set up in 2005 prior to when I joined the company.

We always look at the stability and the amount of endpoints and attributes that can be included, plus the ease of use. Make sure that it can accurately serve your needs, especially from an endpoint point-of-view. You need all your users to be able to use it seamlessly without scalability issues.

It loses points on the upgrade process. We require CA's help each time, and the upgrades, especially with our number of users, has been a challenge.

We take identity management seriously and CA IDM is helping us to accomplish that goal.

We have streamlined the identity management process, but we are not completely utilizing all the features of CA IDM. This product is a milestone/cornerstone for us to accomplish our identity management goals.

We have been making strides in that area, but we still have more improvements to do. We are not there yet, but we hope to be there soon.

An improvement that we would like to see in a later version is taking it to the cloud. We have it on-premise and we foresee a lot of scalability challenges so taking it to the cloud might be a very good option for us.

This solution is very stable. I have no problems in that aspect.

We have not yet tried to scale this product.

We do use CA technical support. They are extremely professional and very skilled at what they do. I would give them a rating of 7/10.

We were not using any other solution prior to this one.

This was our go-to-solution from the outset. CA was a part of our solution always.

I was personally not involved in the initial setup. After it had been completely set-up, we took over the operations from another company. From what I have heard, it was quite straightforward.

I would advise to do a lot of analysis before you get in because the product itself has a lot of capabilities. However, understanding and making sure that all these capabilities are captured, is very important for implementation.

The first criteria while selecting a vendor was how much support we could get from the vendor. This was our primary concern because a lot of identity management software vendors provided the same solution but the level of support was very important for us. The second criteria is what niche capability the product brings in and how it stands out from the competition.

To use this tool to its fullest capability is our problem. The process is not there yet to completely utilize this solution.

The most valuable features include governance certification and creation of rules. Ones the rules are created, they're put into IdentityMinder so that IdentityMinder can use those rules to provision all the users from provisioning or de-provisioning based on HR processes to create targeted endpoints. One of the targeted endpoints is used as the authentication alteration source for CS. What Identity Governance does is that it allows us to see the full, big picture of all this inter-connectivity.

The product is great with good fundamentals from its Integrity days some 16 years ago. The product is still living on the same principles, even as federation, cloud, B2B, and add-ons came into the picture. It has the core fundamentals and it's still sophisticated.

The technical support for this particular product is really poor and needs a lot of work.

The stability of it seems good so far. Right now we are using rule mining, rule certifications, rule accessibility and GovernanceMinder. They're working fantastically.

Technical support is a fail.

I wasn't involved in the setup.

Be sure to define your scope properly.