Symantec Identity Governance and Administration Reviews

As far as valuable features go, one of the first ones is self-provisioning. The best thing is that our internal employees can provision their own access using the tool rather than contacting an internal group. Its built-in workflow handles all the needed approvals before it will provision the access.

The big benefit is that the end users have an easier process requesting security access. It’s a faster process for them so people get up and running faster and can do their jobs.

We’re in the middle of an upgrade with IM to 12.6. Once that’s done, we will get a better feel for what’s available; they’re deprecating some of the functionality in their provisioning manager product.

It would be nice to have someone at CA that can handle some of the more technical questions we have.

We have some stability issues. We go through waves every few months where it goes up and down lot. The product will look as if it’s available, but a request you submit will get stuck. There will be times where you can’t even log into it and it’s completely unavailable.

Our team hasn’t used their support directly, but our IT support team raises tickets and has a good working relationship with CA support. Sometimes getting a resolution is an ongoing problem. They are always helpful and there’s a good level of interaction, but we’re not necessarily always getting a solution. Sometimes CA points to our environment which could be the case, as opposed to their product.

It was so complex. For us, it was a wholesale process change in our organization, not just the solution implementation, so it was lengthy. A lot of that time was spent internally going from one provisioning model to another. We had a lot of customization requests from CA who helped.

They’re reactive to our needs but don’t really understand our environment. A more in-depth understanding of our environment would help dig deep enough to help us get to where we need to be.

They should have a handle on the role methodology that they’re going to pursue and use in their solution. That can get out of hand and become ridiculously unmanageable. That’s where we kind of jumped in and didn’t have anyone to guide us and provide an alternate perspective. We got into a methodology before understanding that’s the road we should have gone down.

I find that the propagation of identities is what is most valuable about the solution.

It would be great if they could enable social media identities. That’s the one thing we would like to have.

I've used it for five years.

The installation was OK. We had some problems with operating it, and because we use other products in the suite it made upgrading more complex. We do have a lot of other of their products also.

We’re only using it for employees, so the stability is handled very well.

We're not putting too many users into the system, so it handles this very well.

They have been very proactive.

They have been very proactive.

It was done in-house.

We have a functional need. Therefore it was considered as more of an expense rather than an investment.

We looked at Oracle Identity and Access Management Suite that was the major contender at the time.

I would be clear on what is the price for your customer and their identities. If you are going to manage partners, customers and other entities the numbers can get quite large, so it’s important to understand what you are getting.

We did a number of things in our deployment which made life more difficult on us. All in all it’s a positive relationship. The only concern we have is with the social logins and clouds.

Identity Policy and its Ability to support Account Provisioning to RACF and AD/Exchange.

This solution was implemented for a Financial Client to automate account provisioning across various disparate systems (more than 80 systems across 5 countries). From an HR perspective, when an employee leaves the organisation, suspension, transfer and removal of access to systems can be completed within 7 days in comparison to up to 30 days when handling it manually. Access to system(s) can now be approved and granted within 3 working days going through a self-service application and approval process.

Lack of a comprehensive attestation component/product and easy to use workflow that supports both attestation and provisioning. However, currently CA does have a product for attestation.

3 years

Main issues were with migration of data from a 8.x to 12.5 sp2.

No stability issues.

No scalability issues

7/10

8/10

No previous solution used.

Initial Setup is considered straightforward due to its wizard based installation. However, it is complicated due to HA requirements.

Compilation of data for Attestation manually may take 3-6 months or more if the organisation has large number of assets distributed across several countries. The need to maintain up-to-date access list on every asset also poses a challenge.

The most valuable aspects of Symantec Identity Governance and Administration are all the features, it is the most complete solution on the market. It has features, such as scanners and portals, it has everything.

I have been using Symantec Identity Governance and Administration for approximately 10 years.

We have approximately 2,000 users using Symantec Identity Governance and Administration in my organization. It is scalable.

The support from Symantec Identity Governance and Administration could improve.

The price of Symantec Identity Governance and Administration could improve.

I rate Symantec Identity Governance and Administration an eight out of ten.

• Self-service
• Role-based provisioning
• Access

It's saved on administration time, and reduced the wait time for access. It's also improved our compliance.

• Installation and upgrading is complex
• User Interface

I've used it for six years.

We did have some issues, but we were able to resolve them.

Yes, as Jboss cannot handle too much load.

Yes, when feeding many users.

It's good.

It's very good.

No previous solution was used.

It was complex because many servers are needed to follow best practice. Many manual steps are time consuming. If you add the Governance component for full IAG, it will be even more complex, because it is not properly integrated with IdM but more a separate product.

We used a vendor team who had a high level of experience.

We also looked at options from IBM and Oracle.

You should use a vendor team for the design and initial implementation.

Provisioning. It has performed well.

It has been good to keep zero day. We have almost zero day provisioning, where the user shows up on the first day of work and he has the necessary access, birthright roles, and such. Therefore, there has been good, internal performance improvement and user experience.

It has good endpoint support and endpoint connectivity to different versioning endpoints.

Identity Manager has a lack of entitlement support, unlike other products that I have worked with. Other products have a focus on the entitlement that a user has, where you can pick and choose access as an entitlement, and add it to the user or remove from the user. With CA it is all role-based, that is kind of a sticking point with me, so we have to work around that.

It is pretty good. Relatively stable. We have definitely had some downtime, but overall it is good.

We just have a two node cluster, so we have not really scaled. However, I imagine it is easy enough to scale those nodes, so it is scalable since it is a clustered app.

Technical support is great.

The initial setup was very complex. The product is just basically a conglomerate of a bunch of other products that were bought and pieced together. So it is still my one main gripe of Identity Manager. It is too many moving pieces; too many parts that were kind of stuck together. It makes it very complex. 10 servers and 10 different apps running to make it happen, and it is only getting worse now that Identity Plural is on top, which is supposed to be making it better, but we will cross that bridge sometime next year.

Policy Xpress makes modifications to how our user data is handled so easy.

This product has allowed me to take the repetitive tasks away from a person so the value of a person is better.

An out of the box way to control when a policy executes.

Five years.

No, not after someone explained a way to use Screen Logical Attributes to control the execution of policies.

No issues encountered.

No issues encountered.

I love their customer service.

I'd rate them 10/10. I have my go to techs.

We didn't have a solution previously.

Identity managment is a complex animal no matter what product you use.

We used a vendor team who I would rate as 10/10.

Look at training from the vendor not just their perfect scenarios but real world issues. Make sure your users have the skills needed to manage the product.

Extremely good customization possible with respect to local language support.

In our environment we have build separate environments and roles structures based on language and look and feel for their products.

4 years.

Only minor issues.

Sometimes, earlier only due to lack of RAM. Now it's stable most often.

Haven't faced any so far.

8 out of 10.

7 out of 10.

It was a little complex.

No other options evaluated.

Perform a pre-implementation analysis as to what level you would like to implement the solution (only role mapping/provisioning/AD sync etc) and to how it can meet your needs.