Symantec IGA vs. Tivoli Identity Manager

If an organization is looking for a good comprehensive identity management/governance suite that is easy to implement, CA identity manager may be a good/robust product. It is best to understand specific use case for your organization and try out the product before a final purchase decision as is the case with all sw products.

It's probably really best suited if you have a business where you have disparate systems but need a way to synchronize the user account information including the passwords between them. If you just have a Windows Active Directory environment only, there probably is no real need for something like this, but if you do this will help manage them easily.

• It has complete identity management and governance capabilities equipped with a simple, intuitive user experience and helps simplify processes such as user access requests and access certifications. This in turn helps in improved productivity and user satisfaction.

• Easily create and manage user accounts from a web interface.
• Intuitive GUI.

• Bringing on new users and removing existing user when new employee/contractors join or leave an organization can be improved by linking directly to HR module.
• The slightly complicated GUI makes drill down difficult for a new user.

• Sometimes it feels unresponsive and we have to restart the services.

Besides the random issue where it gets unresponsive and we have to restart the services or reboot the server, it's been really solid. I've only had to contact support 1 time in the 15 years I've used it which is saying more than most other software. The cost of maintenance is also very cheap compared to some of the other software we use.

The final contenders were CA and Oracle - Oracle was tedious to implement and maintain while on the other hand CA was easy to implement and maintain and came at a much lower price.

• For us, it was a fairly easy implementation over 60 day period that provided ROI fairly quickly

• It has helped us all these years to not have to waste time managing users on multiple systems.
• It controls our password policy for our domain.