TrustRadius: an HG Insights company

SailPoint Identity Security Cloud

Score8.2 out of 10

59 Reviews and Ratings

What is SailPoint Identity Security Cloud?

SailPoint Identity Security for the cloud enterprise manages risk from the explosion of technology access. The solution gives businesses visibility while automating and accelerating the management of all user identities, entitlements, systems, data and cloud services.

Read more details.

Videos

Top Performing Features

  • ID-Management Access Control

    Authorization or restriction of access to information depending on role

    Category average: 9

  • Account Provisioning and De-provisioning

    Capabilities for creating user accounts based on roles, group memberships and business processes

    Category average: 8.5

  • Multi-Factor Authentication

    Using multiple, independent components to gain access

    Category average: 8.9

Areas for Improvement

  • Password Management

    Self-help capabilities the help users recover forgotten passwords, etc.

    Category average: 8.3

  • ID Management Workflow Automation

    Automated sequence of tasks to simplify processes

    Category average: 8.3

  • ID Risk Management

    Identification, evaluation, and prioritization of risks with procedures to minimize, impacts of unplanned consequences

    Category average: 8.2

Who Buys & Uses SailPoint Identity Security Cloud

Pros

  • Automates Joiner, Mover, Leaver (JML) processes efficiently
  • Provides robust integration options with various business applications
  • Streamlines user account lifecycle management

Cons

  • High operational complexity and steep learning curve for users
  • Identified gaps in connectors and integration options for some applications
  • Challenges reported with product support responsiveness and documentation access

Doesnt meet expectations

Use Cases and Deployment Scope

We need a solution that will achieve compliance and security while being stable. Aspects of governance that are of particular importance to us are certification campaigns, and lifecycle management. In my experience, while SailPoint Identity Security Cloud does solve for some of these things in some ways, the tool is very rigid and doesn't meet operational demands.

Pros

  • Lifecycle management
  • Direct provisioning
  • Constant enhancement of the product

Cons

  • Certification Campaigns
  • Testing enhancements to ensure bugs are ironed out prior to release
  • Product support (though this is getting better)
  • Addressing and taking serious customer concerns

Return on Investment

  • Buggy enhancements have hurt trust
  • I've had to educate support on how the tool works previously which has definitely hurt internal trust in a big way

Usability

Alternatives Considered

SecurEnds

Other Software Used

ServiceNow IT Service Management

The Best IGA IDM tool for a CISO

Use Cases and Deployment Scope

SailPoint Identity Security Cloud is our choose for an IGA (identity governance and administration) solution plataform, that implements the automated process for JML (Joiners, Movers and Leavers) that controls the entire Identity Lifecycle into our Company, integrated with our sources, like ERP (Enterprise Resource Planning) and MS AD (Microsoft Active Directory). User created tool that controls movement and access needed, make the access in a minimum privilege for each case, review user and groups and terminate the access if necessary.

Pros

  • Joiners
  • Movers
  • Leavers
  • Legal
  • HR
  • Compliance
  • Reviews
  • RBAC

Cons

  • Continue creating new connectors

Return on Investment

  • Fair Cost
  • Avaiable (Non Stop)
  • Trustable

Usability

Other Software Used

Fortinet FortiGate, CrowdStrike Falcon, CrowdStrike Falcon Complete Next-Gen MDR, CrowdStrike Falcon Data Protection, CrowdStrike Falcon Spotlight, CheckPoint, Check Point Harmony Email & Office, Check Point CloudGuard, Check Point Harmony SASE, Check Point Infinity Portal

IGA in the Government Sector

Use Cases and Deployment Scope

Management of privileged access for our community of over 100 vendors.
Role-based access for our largest business divisions.

Pros

  • Provides connectors to business applications
  • Uses AI to assist with role definitions
  • Use of workflows to enforce just-in-time access to privileged roles
  • Integration between SailPoint Identity Security Cloud (ISC) and NERM

Cons

  • Should be able to enforce time limits of access to all roles and access profiles.
  • Allow attributes such as application ownerships to be assigned to identities.
  • Provide simple queries to report all entitlements for which an identity is a business owner
  • Provide attributes to link AD and EID groups to business applications without needing to rely on naming conventions

Return on Investment

  • Significant is service desk calls for assignment of entitlements.
  • Great operational benefit in cases business roles can be quickly assigned where staff need to cover for others in critical situations.

Usability

Alternatives Considered

Saviynt

Other Software Used

Okta, Zscaler Internet Access

From Manual to Automated Governance.

Use Cases and Deployment Scope

We use SailPoint Identity Security Cloud as our central platform for managing user access and identity governance across systems and business applications. It helps us address challenges around manual provisioning, onboarding and offboarding, access management, and audit requirements by automating joiner, mover, leaver processes, access requests, provisioning, and access reviews.

Pros

  • It's flexible enough to connect to both modern and legacy applications through APIs, SCIM, and web services.
  • Connects to everything and makes requests easy. It plugs into our stack without custom work. Staff can request access through the web or directly from a Teams bot.
  • It handles the onboarding/offboarding particularly well.

Cons

  • Simpler query capabilities.
  • Built-in connectors and add-ons behind paywall.
  • Limited support for webservice customization.

Return on Investment

  • Faster hands-off onboarding and offboarding of users.

Usability

Other Software Used

Microsoft Entra ID

Market leading cloud identity management platform

Use Cases and Deployment Scope

We use ISC to:
Provide a single pane of glass of all of our identities
Manage joiners, movers leavers
Manage account provisioning and deprovisioning

This addresses the high manual effort previously required to manage identity and access across the organisation.

Pros

  • Minimal maintenance
  • Wide array of application connectivity options
  • Relatively customisable

Cons

  • Roles should allow disabling deprovisioning of access when role criteria is no longer met
  • Gatekeeping of documentation behind paywalls
  • Support staff seem undertrained and unenthusiastic
  • OS updates on VAs are too slow, introducing long-lasting security risks

Return on Investment

  • Quicker turnaround of IT access for joiners
  • Better visibility of identities
  • Less flexibility compared to prior solutions

Usability

Other Software Used

Splunk Enterprise, Microsoft Entra ID, CyberArk Privileged Access Management