Symantec Identity Governance and Administration Reviews

We have three primary uses for the solution. We use it to centralize  accounts and directories. We also use it for  new registration of our new employees and for users to self-reset password.

Our customers get ROI by implementing Self User Registration & Self Reset

There are many valuable features within the solution. The product is easy to customize. It’s also highly secure.

The directory has room for improvement. Also, the dashboards and, in particular, the KPI dashboard that shows the current user’s information needs reworking.

It would be ideal if they could consolidate the workflow. Right now, because everything is on a different workflow engine, seamless integration cannot happen. If the solution offers a single workflow engine and a single reporting engine for all security targets, that would be ideal.

I’ve been using the solution for three to four years.

The solution is very stable.

This product is highly customizable and flexible in terms of handling customer requirements.

I’m not happy with technical support at all. It’s very limited.

Positive

Nop

With any identity management product, you’re going to have complexities, so the setup is not simple. It’s a complex infrastructure and implementation and it requires reasonable expertise from those handling the implementation.

Our team of technical consultants implemented to customer site

Secure Automated Mechanism to have centralize directory to manage Users.

Expensive solution & implementation takes time to implement

Yes 

For an organization looking for an identity management suite, it’s the kind of tool you can invest in the long term.

For those considering implementing the solution, I would recommend finding the right partners who have the right implementation experience to assist. There is no doubt this product has capabilities. The important thing is to find someone who understands the business requirements. It’s really important because statistically, 70% of identity management projects fail. Most of the time the product has the capabilities but the consultant doesn’t have the ability to customize the solution.

I’d rate the solution nine out of ten.

We offer solutions to financial and government institutions. Symantec Identity Governance and Administration is a part of our security solutions. We use it to create users and assign them privileges.

Self-registration and self-service password management are valuable features. The role modeling feature is also very useful. It allows you to model your enterprise role.

They provide a framework to develop your own connectors. A connector is a piece of software that integrates with the solutions that are not a part of the support matrix. Currently, it is difficult to create these connectors in this solution. Other solutions, such as NetIQ Identity, provide a better way to create your own connector.

Currently, there is no cloud version. It should have a full cloud version.

I have been using this solution for about seven years.

It is very stable. There are no issues.

It is easy to code into this solution. You just have to run a setup configuration and, in a few minutes, you have two services. In terms of the number of users, we have around 10,000 users.

When I started working with this solution, I had some issues, and they helped me a lot. I don't have any issues with their technical support.

Its latest version is very easy to set up. The deployment takes around one hour, and after that, you have to do some configurations. The duration for that depends on how many systems you have. It can take one or two months.

I would recommend this solution to others. It is a great solution. I like this solution, and that's why I have been using it for seven years. I would advise others to do proper role modeling before implementing this solution. Role modeling is really important for any identity management solution.

I would rate Symantec Identity Governance and Administration a nine out of ten.

We are using CA Identity Management product to provide an identity management service for the largest in the retail industry.

Performance is good, but the other side, the drawback with the CA Identity Manager is they don't have a connector to HR systems like SAP, or PeopleSoft, or Workday. That's a major drawback with the CA Identity Manager. For that we have to do lots of custom quoting to get data from HR systems.

The solution in which we have brought in CA Identity Manager, it is like combining multiple HR sources. It helps reduce thousands of hours of work.

Policy Xpress.

It needs to be connected to major HR systems. That is a major thing. And if they can connect it to GRC systems, that's good to have in an identity product.

Stability is very good. We have been using it the last three years. I haven't seen any issues.

I would evaluate them at five out of five. Every tech support guy who works at CA is good. I don't have any issues.

It was straightforward. Even when you're installing dependent software, like a database or something else, I consider it it straightforward.

When we are choosing a vendor we will go for whether they have the capability to connect to the target system. The basic feature would be connectivity. If the product doesn't have the capability to connect to that system, we will need to do something else to get or push this information to that system. Connectivity is the main thing.

I'd rate it seven out of 10. Those connectivity issues are the only reasons. Functionality-wise, it's good. The features that they have are good.

Automated provisioning removes manual labor and manual provisioning.

Automation is the best way it's improved the way we function because we don't have to perform manual work over identity-related controls.

A better information display for the approvals within the workflow would give them more information and the ability to comment back on a request as to why they're rejecting it. We've been telling them we'd like this improvement, and we hope to see it.

We have challenges because of the customization – it's difficult to do upgrades. We're just not doing the upgrade because we are a few versions behind, so now it's tough.

Performance is a challenge just in terms of the number of roles and endpoints that we're managing. We have 10 platforms that we manage and over 8000 endpoints – that’s our challenge.

We have challenges because of the customization. It's difficult to do upgrades. We are a few versions behind so doing the upgrade is tough.

When we've used them, they've been good.

It was set up in 2005 prior to when I joined the company.

We always look at the stability and the amount of endpoints and attributes that can be included, plus the ease of use. Make sure that it can accurately serve your needs, especially from an endpoint point-of-view. You need all your users to be able to use it seamlessly without scalability issues.

It loses points on the upgrade process. We require CA's help each time, and the upgrades, especially with our number of users, has been a challenge.

This is the only IM solution I have come across. Using the implementation guide, I was able to implement the solution with ease. The IM is the most valuable feature to me. I also find the solution's documentation and community valuable.

I find the API boring. I also faced issues while integrating with CA SSO.

I have used this solution for three months.

There is a good level of technical support because the community is a good set of geeks.

The setup was easy because of the friendly product documentation and the community support.

Compared to other options, CA products are not that expensive.

I did not evaluate other options, since this product was just meant for a PoC.

I would not recommend this product to others. There are better products on the market, as I later came to know about Sailpoint, DELL IDM, and NetIQ.

The features that I find most valuable are the creation of access and admin roles. You can also manage many different applications -- more than one hundred -- in only one box. It also adds a level of security that we didn't have previously.

We can identify a role for each application or for a group of applications. It's great in helping us organize and provide access to different apps.

Because it's software on our network, there are sometimes load-balancing issues or latency delays.

We've had no issues with deployment.

It's always stable. We have different boxes installed and have never had a stability issue.

Nobody's complaining about it and we have 100,000 users, even though they're usually not all being authenticated at the same time.

We use technical support for issues and installations and they always help us. The biggest issues took a few weeks.

The upgrades were complex, like from R6 to R12. Sometimes the import/export process was not working properly, but, we just opened a case and they figured it out for us.

Learn well how to use it. Train. Get CA training if you can as that would be the best.

• The user interface
• The synchronization with our HR system

I know that CA are always trying to improve and upgrading with improvements.

I've used it for 11 years, and it has improved greatly over time.

After a big update and upgrade, we have no problems with the system.

The system is very stable, it isn’t freezing and it handles everything very well.

They don’t give a resolution immediately. They tend to take time coming up with answers. We are not really satisfied with the customer service. They do solve problems in the end, it just takes time.

No, we didn’t use a previous solution. This is the first solution we ever implemented and we have been very satisfied ever since.

Initially it was a bit complicated as it was really something new in the market and the idea of identity management that works automatically and synchronizes with a HR system was not common. We were a pioneer. It was complicated to start these projects, the planning, architecture, and data mining that we had to do in the first step.

We did it by ourselves, and had to do a lot of thinking by ourselves to get to the step of implementation. It took a bit of time because at that point there was not a lot of knowledge on how to implement such a new solution, so it took time. After we passed this step it moved on. But today when you launch these projects, everyone has a lot of experience from over the years and knows the steps. In 2004 it was really a startup. Now we are specialists.

Yes, we have had a return on investment. All of the time saved on administration and user lifecycles. Now it’s all automatic. When a new employee is coming to the organization a new user is created, when I put it in the HR system a new user will be automatically created. Also when a user is let go, or has retired everything happens automatically. It helps because we have a lot of temporary employees that we bring in. It’s hard to imagine having to do this all manually.

I think the pricing is reasonable.

Managing identities at a financial services institution.

We're implementing it currently, so I have no real measure of how it's going to perform, but so far so good.

• Streamlines user access
• Consolidates applications
• Access in one place

User access control.

Customer reporting. One of the big things we had asked for is for the Identity tool to actually do more kinds of reporting for audit purposes. It doesn't really track any of the metrics that are useful to us, at this point.

Can't comment yet. Not up.

I've used Identity Manager before for a different client. The scalability is good.

Tech support is very good. We actually have a CA team onsite.

The client is using different solutions for different things. So they have instances of a number of different tools that have the same functionalities as CA, but for different items. So yes, they did have other solutions as well.

Most of the complexities are because of the business itself and the complexities that they have within their current infrastructure. The complexities are not really coming from CA's product.

I was not there when they made this selection. I'm sure they evaluated the normal ones, SailPoint, CA, Oracle.

It's early but so far I give it a seven out of 10. Most of the issues we've had with it are coming from business complexity rather than the product itself. The support's been good from CA.

In terms of advice to a colleague who is looking for a similar solution, that's difficult because I've done SalePoint and CA. It's up to them. It's based on the organization itself, so they have to do more evaluation than what I can provide for them. I'd recommend they do their research and pick what's best for them, but I'd say we have no problems with CA's software.