Symantec Identity Governance and Administration Reviews

The features that I find most valuable are the creation of access and admin roles. You can also manage many different applications -- more than one hundred -- in only one box. It also adds a level of security that we didn't have previously.

We can identify a role for each application or for a group of applications. It's great in helping us organize and provide access to different apps.

Because it's software on our network, there are sometimes load-balancing issues or latency delays.

We've had no issues with deployment.

It's always stable. We have different boxes installed and have never had a stability issue.

Nobody's complaining about it and we have 100,000 users, even though they're usually not all being authenticated at the same time.

We use technical support for issues and installations and they always help us. The biggest issues took a few weeks.

The upgrades were complex, like from R6 to R12. Sometimes the import/export process was not working properly, but, we just opened a case and they figured it out for us.

Learn well how to use it. Train. Get CA training if you can as that would be the best.

Our primary use case of this solution is for managing identities and environment controllers in order to make it more unified and standard. 

I like that it is easy to diagnose. It has a version of a virtual appliance so we can download it, run it, configure it, and it would take about 10 to 15 minutes to configure the cluster or so.

It's easy to deploy, it's two versions, the manual deployment version, if it can be prepared in clusters it'll take one or two days. But the software appliance will take from 15 to 20 minutes.

They should easier and better integration with other software. It's hard to create custom integration rules with other software, like Oracle. This needs to be improved to give the customer an easier way to integrate.

I have been using this solution for the past two to three years. 

It is stable. If I had to rate the stability from one to ten, I would give it an 8.5.

Technical support from CA is not very good. I would give them a seven out of ten for their assistance and their knowledge. They could use improvement. 

I would rate it an eight out of ten.

To make it a ten, it should have more remote capabilities. There should be better partnerships with remoting tools. They need more remote partners and better dashboards.

Our customers find it easy to use.

It provides a user-friendly front-end to manage LDAP-based users.

The interface is modern, but could have been made even easier to use for the customers.

I managed it for approximately three years.

No issues encountered.

No issues encountered.

It's a little bit difficult to support.

It's reasonable. The support is not the quickest to respond and does not have a mature process in terms of what logs must be gathered, and what to gather before raising a case.

CA provided assistance with augmentation of the existing solution, they provided quite a good level of support during the project.

We use the private cloud deployment model of this solution. 

Word mining and risk campaigns are the most valuable features of this solution.

I would like to have differential campaigns. In the next release, there should be the provisioning of your certifications. When you remove access or grant extra access to someone, it would be good to have direct provisioning to different sources.

It's stable and runs well. 

Technical support is good and efficient. 

The initial setup was easy. Sometimes upgrades are a little bit complex. There are many components where you have to apply a patch to each component of the solution. For the installation, I would say it's a little bit complex. It's a little bit complex to set up but when it's okay, it runs fine.

My advice to someone implementing this solution is to take a few days to plan with professional services for the setup. 

I would rate it between a six and seven out of ten. Not a ten because of the complex setup and because we had some issues applying some patches. 

Ease of use for the configuration of provisioning accounts through an account template concept for an OOTB connector.

It does not requires an extensive programming or development background. The screen of the admin tool creates an account on the system to CA IAM, which provides it to the OOTB connector, then you can simply configure CA IAM to do the provisioning. CA IAM can help with the automation of user provisioning at the same level as the system admin. 

When comparing it to other products, you can set up CA IAM in a PoC very quickly to demonstrate its provisioning capabilities.

It fits for organizations having simple, basic provisioning requirements. If your organization has complex provisioning use cases and requirements, then you must have an architect and developer on the team to help bridge the gap that CA IAM cannot provide.

The product has a lot of need for improvement. Our issues are being raised back to the vendor as enhancements.

We have encountered issues with stability.

We have encountered issues with scalability.

Our experience with the technical support team is good. CA technical support is very keen to help their customers. 

Most issues are solved by the our team, but at least, their team has provided moral support to us.

We did previously use a different solution, and we switched for several reasons.

The initial setup can be both straightforward and complex. This is up to an organization's requirements of the CA Identity Manager solution.

This product is the same as other CA IDM product, which can help improve organizations, similar to the messaging on the product brochure.

In real life, it is up to the skill of the implementation team as to how they can configure the product to serve the business processes of the organization. The reason why some IDM projects have failed comes from implementation. The team must be good at the functional, technical, and designing of business processes. The product could be mediocre, but the implementation team must be top gun. Choose an implementation team wisely, especially when your requirements and processes are complex. A good product under a poor team cannot bring about the result seen on the product brochure.

The connector is free, and bundled with the product.

The product is considered good, in the top five. Looking at the product features carefully if your organization has complex provisioning requirements and business processes to find gaps.

Finally, always search for the best implementation team, who has skills and experience.

The most valuable features of this product are the legacy interfacing - interfaces with our mainframe - as well as provisioning.

It gives the end users power for their other access requests.

User interface and usability are mainly the features that need improvement.

I'm not sure if the new release includes 508 compliance for blind and deaf users. That would be a nice feature to include, especially for the government space.

The stability of this product is okay.

Scalability of this product is something that we need to look into.

The technical support team is good. Actually, we have a CA support team onsite which is good. They have been able to answer all our questions.

I wasn't involved in the decision-making process for purchasing this product since it was taken a while back.

I wasn’t involved in the initial setup process.

User interface is an important feature, especially in the sector from where I am coming from. Later releases are just allowing a user to know what to do in the product.

I would wish others good luck while purchasing this product.

• User-friendly UI
• In built connectors for various endpoints

It's provided a centralized platform to manage the lifecycle of all identities across different endpoint systems such as Active Directory, Salesforce, etc.

It should be better when doing custom connections.

I've used it for one year and two months.

There were very few issues.

At times we had issues with CA Identity Manager tasks getting hung in an "In Progress" state. We had to restart the instances, but that happens very seldom.

No issues encountered.

8/10.

7/10.

No previous solution was in place.

It was complex due to the vast number of identities in the organization.

It was implemented in-house.

It's more than satisfactory.

Connector Development (connector Express) and Policy Express enhanced feature which is improving every time with new releases.

Self service portal helps the user to manage approval, delegation, password management and its bulk task capability resolves lot of problem.

Custom connector, web service configuration and use.

4 years

Easy, I can say it's the best on the market with small amount of manpower.

No issues encountered.

No issues encountered.

Good but more skilled people required according to geographical location.

Good.

No previous solution used.

Straightforward, as it was simple with few resources needed.

Self implemented.