Enzoic for Active Directory vs. SailPoint Identity Security Cloud

I think SailPoint Identity Security Cloud does certain things well but it falls short in other areas. For example, it's UI, particularly around certification campaigns, lacks the customizability needed to meet customer needs. I do like that SailPoint is constantly enhancing SailPoint Identity Security Cloud and making it better, but to me it seems that there is a definite gap in testing those enhancements prior to release while relying on customers to test enhancements.

Incentivized

• It's flexible enough to connect to both modern and legacy applications through APIs, SCIM, and web services.
• Connects to everything and makes requests easy. It plugs into our stack without custom work. Staff can request access through the web or directly from a Teams bot.
• It handles the onboarding/offboarding particularly well.

Incentivized

• The use of a Distinguished name and the lack of a clear support model for the task that is necessary for this process to work is not a good idea.
• In a hybrid model where application automation is not fully rolled-out, means that there can be inconsistency in the process, which leads to duplicate accounts.
• Certification: The functionality is a bit clunky and could be designed with the end-user experience in mind (Although this might be due to our version of IIQ)

Incentivized

Its a best tool for a CISO, works very well, easy to use, great connectors and integrations, great reports, automated reviews, full compliance, great support to a JML (Joiners, Movers and Leavers) project;

It is a very flexible system in some ways, almost too flexible as if you dont have a clear end target, based on what is possible, then it can be difficult to decide what you want to do exactly. If you have clear manual systems and a clear understanding of how SailPoint Identity Security Cloud can address those processes then it is worth while.

Incentivized

Support for Customizations is very limited.

Incentivized

The first journey isn't easy because you need to win your internal process and problem concern and Sailpoint have many experience to support this phase, and make the real difference into the client experience;

The on-prem SailPoint IdentityIQ platform provides the necessary customization that is required in our dynamic environment. Although we may look at a cloud-based Identity Management service again in the future, (there are many advantages), our identity management, authentication, and application assignment processes cannot be quickly consolidated to a single cloud-based service at this time.

• Over 300,000 password change/reset calls avoided to the helpdesk annually.
• 1,000 plus accounts with proper accesses provisioned via automated birthright processes weekly versus 1-2 days of manual provisioning and approvals. With a call center population that churns many people per week, this brings many dollars of efficiency to the operations teams.
• Flexibility on terminations to manage accounts and access for target applications based on regulatory or business rules to ensure compliance and avoid fines for non-compliance.

Incentivized