Symantec Identity Governance and Administration Reviews

Our customers find it easy to use.

It provides a user-friendly front-end to manage LDAP-based users.

The interface is modern, but could have been made even easier to use for the customers.

I managed it for approximately three years.

No issues encountered.

No issues encountered.

It's a little bit difficult to support.

It's reasonable. The support is not the quickest to respond and does not have a mature process in terms of what logs must be gathered, and what to gather before raising a case.

CA provided assistance with augmentation of the existing solution, they provided quite a good level of support during the project.

Policy Xpress makes modifications to how our user data is handled so easy.

This product has allowed me to take the repetitive tasks away from a person so the value of a person is better.

An out of the box way to control when a policy executes.

Five years.

No, not after someone explained a way to use Screen Logical Attributes to control the execution of policies.

No issues encountered.

No issues encountered.

I love their customer service.

I'd rate them 10/10. I have my go to techs.

We didn't have a solution previously.

Identity managment is a complex animal no matter what product you use.

We used a vendor team who I would rate as 10/10.

Look at training from the vendor not just their perfect scenarios but real world issues. Make sure your users have the skills needed to manage the product.

Extremely good customization possible with respect to local language support.

In our environment we have build separate environments and roles structures based on language and look and feel for their products.

4 years.

Only minor issues.

Sometimes, earlier only due to lack of RAM. Now it's stable most often.

Haven't faced any so far.

8 out of 10.

7 out of 10.

It was a little complex.

No other options evaluated.

Perform a pre-implementation analysis as to what level you would like to implement the solution (only role mapping/provisioning/AD sync etc) and to how it can meet your needs.

• User provisioning
• Web services

Enabled enhanced delegated control to application owners and third party support reducing overhead cost to support desk and directory services teams

GUI/Web interface

10+ years.

Numerous. Despite having a Linux/JBOSS version it does not perform at the same level of proficiency as Windows/.NET.

Yes

No

9 out of 10.

7 out of 10,

Complex, documentation was inadequate as was professional services.

Combination, and experience for professional services was less than adequate.

We evaluated Novell and Oracle as well, and for our needs this was still the best solution.

Be prepared for issues with the web interface and avoid heavy customization.

Provisioning. It has performed well.

It has been good to keep zero day. We have almost zero day provisioning, where the user shows up on the first day of work and he has the necessary access, birthright roles, and such. Therefore, there has been good, internal performance improvement and user experience.

It has good endpoint support and endpoint connectivity to different versioning endpoints.

Identity Manager has a lack of entitlement support, unlike other products that I have worked with. Other products have a focus on the entitlement that a user has, where you can pick and choose access as an entitlement, and add it to the user or remove from the user. With CA it is all role-based, that is kind of a sticking point with me, so we have to work around that.

It is pretty good. Relatively stable. We have definitely had some downtime, but overall it is good.

We just have a two node cluster, so we have not really scaled. However, I imagine it is easy enough to scale those nodes, so it is scalable since it is a clustered app.

Technical support is great.

The initial setup was very complex. The product is just basically a conglomerate of a bunch of other products that were bought and pieced together. So it is still my one main gripe of Identity Manager. It is too many moving pieces; too many parts that were kind of stuck together. It makes it very complex. 10 servers and 10 different apps running to make it happen, and it is only getting worse now that Identity Plural is on top, which is supposed to be making it better, but we will cross that bridge sometime next year.

As far as valuable features go, one of the first ones is self-provisioning. The best thing is that our internal employees can provision their own access using the tool rather than contacting an internal group. Its built-in workflow handles all the needed approvals before it will provision the access.

The big benefit is that the end users have an easier process requesting security access. It’s a faster process for them so people get up and running faster and can do their jobs.

We’re in the middle of an upgrade with IM to 12.6. Once that’s done, we will get a better feel for what’s available; they’re deprecating some of the functionality in their provisioning manager product.

It would be nice to have someone at CA that can handle some of the more technical questions we have.

We have some stability issues. We go through waves every few months where it goes up and down lot. The product will look as if it’s available, but a request you submit will get stuck. There will be times where you can’t even log into it and it’s completely unavailable.

Our team hasn’t used their support directly, but our IT support team raises tickets and has a good working relationship with CA support. Sometimes getting a resolution is an ongoing problem. They are always helpful and there’s a good level of interaction, but we’re not necessarily always getting a solution. Sometimes CA points to our environment which could be the case, as opposed to their product.

It was so complex. For us, it was a wholesale process change in our organization, not just the solution implementation, so it was lengthy. A lot of that time was spent internally going from one provisioning model to another. We had a lot of customization requests from CA who helped.

They’re reactive to our needs but don’t really understand our environment. A more in-depth understanding of our environment would help dig deep enough to help us get to where we need to be.

They should have a handle on the role methodology that they’re going to pursue and use in their solution. That can get out of hand and become ridiculously unmanageable. That’s where we kind of jumped in and didn’t have anyone to guide us and provide an alternate perspective. We got into a methodology before understanding that’s the road we should have gone down.

• Group management
• Task delegation
• Access granularity

It allowed local departments to manage the people in their own groups, without any help from the IT department.

Better recovery for the application server with the DB connectivity.

Two years.

Yes, at some point CA support repaired the bug.

Yes, sometimes the connection with the DB is lost, and it isn't fully recovered without restarting the server.

No issues encountered.

7/10.

7/10.

No previous solution used.

I think it depends on your background, but as soon as you understand the terminology it's not so complex.

We did an in-house implementation.

Engineering and operational.

Do a good gathering of your requirements and make sure you are creating the system architecture it in the right way.

Connector Development (connector Express) and Policy Express enhanced feature which is improving every time with new releases.

Self service portal helps the user to manage approval, delegation, password management and its bulk task capability resolves lot of problem.

Custom connector, web service configuration and use.

4 years

Easy, I can say it's the best on the market with small amount of manpower.

No issues encountered.

No issues encountered.

Good but more skilled people required according to geographical location.

Good.

No previous solution used.

Straightforward, as it was simple with few resources needed.

Self implemented.