Cyberark Secrets Manager vs. SailPoint Identity Security Cloud

Cyberark Conjur is well-suited and includes the following: > Securing access to sensitive data in multi-cloud environments. > Providing secure access to secrets and credentials for 3rd party services and applications

Incentivized

I think SailPoint Identity Security Cloud does certain things well but it falls short in other areas. For example, it's UI, particularly around certification campaigns, lacks the customizability needed to meet customer needs. I do like that SailPoint is constantly enhancing SailPoint Identity Security Cloud and making it better, but to me it seems that there is a definite gap in testing those enhancements prior to release while relying on customers to test enhancements.

Incentivized

• Provide allow-list
• verifying authority
• validate access

Incentivized

• It's flexible enough to connect to both modern and legacy applications through APIs, SCIM, and web services.
• Connects to everything and makes requests easy. It plugs into our stack without custom work. Staff can request access through the web or directly from a Teams bot.
• It handles the onboarding/offboarding particularly well.

Incentivized

• Searching containers can be difficult if you're not sure which you're looking for.
• Initial authorization can be slow, specifically if the first instance failed.

Incentivized

• The use of a Distinguished name and the lack of a clear support model for the task that is necessary for this process to work is not a good idea.
• In a hybrid model where application automation is not fully rolled-out, means that there can be inconsistency in the process, which leads to duplicate accounts.
• Certification: The functionality is a bit clunky and could be designed with the end-user experience in mind (Although this might be due to our version of IIQ)

Incentivized

Its a best tool for a CISO, works very well, easy to use, great connectors and integrations, great reports, automated reviews, full compliance, great support to a JML (Joiners, Movers and Leavers) project;

It is a very flexible system in some ways, almost too flexible as if you dont have a clear end target, based on what is possible, then it can be difficult to decide what you want to do exactly. If you have clear manual systems and a clear understanding of how SailPoint Identity Security Cloud can address those processes then it is worth while.

Incentivized

Support for Customizations is very limited.

Incentivized

The first journey isn't easy because you need to win your internal process and problem concern and Sailpoint have many experience to support this phase, and make the real difference into the client experience;

Cyberark Conjur has been a great asset to our company as it is a one stop shop that holds individuals, teams, departments, and the entire company accountable for the safety network. Not only do you have to be authorized to access Cyberark Conjuryou have to reauthorize to open, copy, or see individual passwords or accounts leaving a cyber trace of all your actions. There's no way to accidently get into something you're not supposed to be in.

Incentivized

The on-prem SailPoint IdentityIQ platform provides the necessary customization that is required in our dynamic environment. Although we may look at a cloud-based Identity Management service again in the future, (there are many advantages), our identity management, authentication, and application assignment processes cannot be quickly consolidated to a single cloud-based service at this time.

• Before Cyberark we put passwords in a spread sheet - leaving exposure to theft.
• Gives security compliance to our company
• Keeps company and teams secure and safe.

Incentivized

• Over 300,000 password change/reset calls avoided to the helpdesk annually.
• 1,000 plus accounts with proper accesses provisioned via automated birthright processes weekly versus 1-2 days of manual provisioning and approvals. With a call center population that churns many people per week, this brings many dollars of efficiency to the operations teams.
• Flexibility on terminations to manage accounts and access for target applications based on regulatory or business rules to ensure compliance and avoid fines for non-compliance.

Incentivized