CyberArk IGA

My main use case for Idira IGA is to ensure our systems are properly secured, and we also make sure we are adhering to government policies while maintaining the standard and security of the data. When considering employee onboarding or offboarding, we manage how we provide access reviews and how permissions are leveraged when a role change happens for that particular employee.

When managing employee access during onboarding or role changes, I refer to managing the employee's access to development tools, cloud infrastructure, and enterprise applications. For instance, an engineer working on a cloud-based service needs access to GitHub repositories, Jira projects, and a couple of AWS deployments. When the engineer requests access to production environment systems, Idira IGA checks the employee's role through the approval workflow and routes the request to the appropriate manager or application owner.

The engineer receives least privilege access, which grants only the permissions needed to perform his task. Periodic access reviews are performed by a manager to determine whether the engineer still requires those permissions, and if an employee leaves the organization, unnecessary permissions are revoked to prevent any potential misuse.

One major aspect of my main use case is that we are primarily focused on keeping the data secure. The data needs to be secure, and only the privileges that are accessible and needed for a particular user are provided, instead of granting all different kinds of access to the user.

Idira IGA has positively impacted my organization in several significant ways. One example is faster access reviews. We have approximately 10,000 to 20,000 employees whose application permissions require quarterly review, and with AI-assisted automation, managers can now prioritize unusual or high-risk permissions instead of manually examining everything, resulting in a noticeable reduction of time allocation.

Additionally, we see faster onboarding for developers, as the automated standard access requests allow them to start working sooner and contribute to organizational growth by increasing productivity. I also see reduced security risk as an impact since engineers or employees who transition between projects may retain access that could lead to serious security concerns.

We save about 70 percent of our time now on access reviews and evidence collection due to the automation that has simplified the process. Previously, we conducted manual checks for various employees' permissions, which was a hectic task.

Automation has made a significant impact on our access reviews by reducing manual efforts, improving accuracy, and speeding up overall processes. Previously, our security team managing various projects manually assigned resources to new employees and managed roles and permissions, which was a complex task exacerbated by a large number of employees. With Idira IGA, we now streamline these processes, allowing our team to focus on enhancing productivity rather than getting bogged down in manual assignments.

I have seen improvements like saved time and increased organizational productivity since implementing Idira IGA, which automated previous manual processes.

The best features of Idira IGA include automated access provisioning, which helps automate the employee's access when they join, as well as revoke access when they leave. Role-based access governance ensures that employees receive access appropriate to their responsibilities, and identity risk visibility helps security teams identify excessive permissions and potential risks. Additionally, the audit and compliance feature provides visibility into access decisions and necessary licenses, making security management and the audit process significantly easier.

The feature that has had the biggest impact for my team is improved security, which helps us make decisions faster and assists in identifying excessive, outdated, and unnecessary permissions before they become security risks. Centralized identity governance and automated access management have been hugely beneficial for us.

The best features include automated access management, AI-assisted access reviews, and centralized identity governance.

Idira IGA's AI capabilities focus on how things can be automated, analyzing and recommending appropriate changes based on permission information. It identifies risky permissions and orphan accounts, providing a broader Idera platform that manages privileges and audits actions while delivering AI-driven access recommendations for least privilege access.

For a real-world example, if a developer moves to a different project but retains access to the previous project's environment, Idira IGA could help identify that access during a review and recommend its removal, allowing the manager or security team to validate the recommendation before executing the revocation. This results in reduced security risk, faster access reviews, and less manual effort.

Idira IGA generally meets our accuracy expectations, particularly with accurate access recommendations and effective risk identification to prioritize suspicious access. Automated governance workflows contribute to consistent access management. However, there are still areas needing improvement, such as managing false alarms when legitimate access is flagged as risky.

I perceive an area for improvement in Idira IGA, specifically in simplifying integrations with enterprise applications like AWS and Salesforce, where the complexity can increase the time and effort of implementation. Improved reporting needs focus on providing clear visibility into access risks and overdue certifications to move the business faster, alongside better automation for role changes to quickly identify outdated permissions.

I chose 9 out of 10 because the core capabilities address important enterprise security challenges. However, I would still like to see more accurate AI recommendations, fewer false positive alarms, and easier integration with existing applications to make it a perfect 10.

I have been using Idira IGA for more than six years.

Idira IGA is stable.

Idira IGA proves to be scalable across various systems, with no specific limits on the number of employees. It efficiently scans for new employees joining or being assigned to specific projects at regular intervals.

The customer support is great. Whenever I raise a request, they take care of the situation and resolve issues quickly. I would rate the customer support as a 9 out of 10.

We previously used Okta but found it too complex and costlier, which prompted us to switch to Idira IGA.

Our previous IGA solution took around three months to deploy, which included around one to two weeks for initial setup and configuration, two to four weeks for integration, and two weeks for access policies and approvals, totaling six to twelve weeks based on complexity and scope.

Idira IGA took us around three weeks to deploy. Compared to past solutions, our Idira deployment was much faster. The integrations were the longest component, but task-wise, the completion occurred at a much quicker pace.

There is a definite return on investment since we cut down significantly on manual efforts. The time spent resolving issues is now faster and more efficient, allowing users to work earlier with the right permissions.

We primarily only evaluated Idira IGA before making our decision.

I rate Idira IGA as 9 out of 10. Organizations looking into Idira IGA are likely to benefit significantly, especially larger enterprises that wish to streamline their processes while ensuring secure access.

However, smaller organizations might find the licensing a bit expensive.

I have been using Idira IGA for Identity and Governance and Administration, which is part of CyberArk. Recently, there was a Palo Alto acquisition, and after that, they rebranded the entire product towards Idira. In terms of identifying the owner of the secrets and making the compliance status of those secrets, I'm doing the governance and allocating the joiners, moving, and leaving workflow from SalePoint. SalePoint is also one of the combinations of CyberArk Idira.

My main use case for Idira IGA is primarily for joiner, mover, and leaver workflow. When any employee joins the organization, they get access automatically based on their role, based on the organizational level they are joining, and which team they are joining. All those prerequisites are filled in, and they will be getting all the access that is desired. This overall process requires creating workflows, and these workflows are triggered as soon as any employee joins, moves within the organization, or leaves the company, so access is also deprovisioned automatically.

Recently, I worked on a specific example of how I used Idira IGA for a joiner, mover, or leaver workflow, which includes different ways of connecting to various systems like a ServiceNow form and also a SalePoint form. Those forms are triggered by HR. As soon as the employee joins in, they can get the access. This is the main use case I have been working on with this particular overall process.

Idira IGA has impacted us significantly because it removes a lot of manual intervention and human intervention, making our lives easier.

I have an overall of metrics showing 1,000 plus users that usually join within one or two quarters in my organization, which is a huge impact and eliminates human error while also providing a faster way for an end user to get the best experience.

My team spends around two to three months on access reviews and evidence collection compared to before.

Idira IGA tool best describes the impact of automation on our access reviews. We usually create the workflows and provide all the relevant artifacts to the automation metadata, which connects to the back-end systems like ServiceNow, scanning all applications, correlating the data between who owns that and how it's accessed, and what are the permissions and RBAC permissions required.

We see a lot of improvement in terms of getting all the reports and ensuring the data we see is accurate, governance and compliance, risk-free audits, and with the help of this, we achieve our secure enterprise.

Idira IGA can offer governance, auditing, and administration towards the secrets or ownership of accounts or the users, making the environment or the platform compliant.

Idira IGA's AI capabilities ensure that it has a proper or desired ownership of those AI governance, helping to identify if something goes wrong with particular identities and can easily track down and eliminate risks, thus cleaning our attack surface.

Idira IGA can improve by adding AI bots as well, which will help if any end user is experiencing an issue or if anybody new to Idira IGA can easily understand with the help of the bot, which will provide more insights about how we can do the administration and the integration part.

I chose seven out of ten because it requires a few more improvements to make it more accessible or easy to understand regarding technical terminologies while we are doing the administration of the tool.

It also requires more LLM to be trained because it is a newly launched product and it requires a bit more time to get proper or accurate data to utilize moving forward so that we can rely on the responses we receive.

I have been using Idira IGA for the last four years.

Idira IGA is stable.

The scalability of Idira IGA is good; it provides 99.999% availability.

I feel that customer support is somewhat lacking; the supporting engineers do not have the necessary knowledge, and they will route inquiries here and there without providing solutions quickly. It takes a lot of time as they go back to check with the relevant team and get back to us. I would rate customer support four out of ten.

We previously used SalePoint, which required a lot of development skillsets from engineers. That is the reason why we did not want to have that dedicated engineer; we prefer something user-friendly that anybody can learn and get things done.

It took about two to three months to deploy our previous IGA solution, from setup to initial go-live. It took one to two months to deploy CyberArk Modern IGA.

It is not only about that; it is including migrating from CyberArk on-premises to the privilege cloud, which took an overall of one to two months of effort to migrate all 50,000 accounts from on-premises to the privilege cloud of CyberArk.

CyberArk deployment was easier and faster because they have custom tools that help us deploy things in a faster way as we follow the standard instructions from the SOPs, eliminating human errors and making our lives easy. There are a few things that can be handled by the vendor back-end systems.

With the help of this, we complete the entire project and can spin up other projects, prioritizing other things without wasting time doing manual tasks, making this approach more helpful for us.

I have a separate way of procuring, as we have all the suite of CyberArk products and have taken care of it through our partner relationship.

We did not evaluate other options before choosing Idira IGA.

I would rate Idira IGA seven out of ten. I would definitely recommend Idira IGA to other teams and individuals, as it can help them get things ready faster and maintain compliance-free auditing alongside compliance status.

My main use case for Idira IGA is integrations with other external applications and reconciling AD accounts with other applications, which acts as an entitlement or access provisioning and de-provisioning mechanism primarily focused on the joiner, mover, leaver process.

A recent example of using Idira IGA for provisioning is when access is requested as a new employee joins the organization or moves from a different role, with the approval needed for either automatic or manual provisioning from ServiceNow, integrated with Idira IGA for mapping access to the relevant AD and application team, while the de-provisioning takes care of removing entitlement access when a user leaves the organization.

Idira IGA operates at a granular level of access control, ensuring everything is getting audited, with access certification being one of our primary use cases on a quarterly, biannual, or annual basis to validate access for existing employees, while plans are in place for non-human identity certification as well.

Idira IGA positively impacts my organization by enhancing security posture in terms of identity and access management, focusing on digital identity, not just human-based accounts but also involving non-human identity as well.

Since using Idira IGA, the integrated model ensures that provisioning and de-provisioning happen seamlessly without manual intervention, supporting audits with proper data and proof that validates integrations and minimizes manual errors for a great product.

Automation significantly reduces manual effort, improving accuracy and providing visibility for higher management.

Automation has lessened the labor involved in L1 level tasks for my team.

Using Idira IGA has dramatically improved efficiency, requiring fewer people with significant time saved, which is one of its best features.

The best features Idira IGA offers include its comprehensive product capabilities that allow for integration with other security tools, such as access management and PAM, while merging with network-level changes to add value.

The integrations with other security tools and network components, such as Palo Alto, help my team by enabling streamlined access provisioning, multi-factor authentication, and support for single sign-on to ensure that users do not have to validate multiple passwords.

Idira IGA needs more focus on non-human identities; as we move into Agentic AI or GenAI features, we should concentrate on setting guardrails for Agentic AI and related accounts, which is a primary area of improvement.

The user experience is easy and straightforward for integration, but reporting needs to provide timely information and proactive measures so necessary actions can be taken if issues arise, instead of only reacting to compromises.

Competitors such as SailPoint and Saviynt are strong and offer many features, and although Idira IGA is improving and evolving, there is still much customization needed.

Regarding Idira IGA's AI capabilities, there is uncertainty about how to set guardrails for AI, highlighting the need for enhancements in AI capabilities.

The accuracy and reliability of Idira IGA's AI output are really good, rating at seven to eight, though improvements are needed due to ongoing enhancements and feature developments.

I have been using Idira IGA for the last four or five years.

Idira IGA is stable.

Its scalability is really good.

I rate customer support as one of the best, especially when receiving premium or professional service; they respond accurately and provide help when support cases are raised.

I would rate customer support between eight and nine.

We previously used SailPoint for its integration and ease of use before switching to Idira IGA.

Idira IGA was previously on-premise, and we moved to a private cloud without using a public cloud.

We use AWS as our private cloud provider.

We purchased Idira IGA separately and deployed it on top of our existing AWS environment.

It took six months to deploy Idira IGA from setup to initial go-live.

The Idira IGA deployment was a little faster than past solutions; once all the prerequisites were set up, the process was quicker.

I prefer not to disclose specific numbers, but Idira IGA has brought a lot of value to the overall environment.

The experience with pricing, setup cost, and licensing was a bit costly, and for a larger environment, it took millions, depending on the number of licenses required.

Before choosing Idira IGA, we evaluated options such as Saviynt and the IBM IGI tool.

My advice for others considering Idira IGA is that it is beneficial as long as you validate it against your current requirements. I would rate Idira IGA an eight out of ten.