CyberArk Privileged Access Management vs. Tivoli Identity Manager (legacy)

I always recommend CyberArk based on my experiences at several different jobs and industries. It does a great job of helping you create all kinds of use cases and approval flows for accessing and using privileged accounts. It also does a great job securing local admin passwords on servers. End-users of the system are able to quickly and easily start utilizing the more secure method of obtaining credentials in minimal time with minimal overhead/tax on their work time.

Incentivized

It's probably really best suited if you have a business where you have disparate systems but need a way to synchronize the user account information including the passwords between them. If you just have a Windows Active Directory environment only, there probably is no real need for something like this, but if you do this will help manage them easily.

Incentivized

• storing password safely
• storing passwords in one central place
• "remembering" a password for a whole team and/or single persons
• securing access to certain passwords by groups or team

Incentivized

• Fully customizable
• Automate various portions of various applications
• Great at Access Management (but also Release, Change, Event, etc)

Incentivized

• The initial product cost is a little on the higher side, which might turn off small & medium enterprises.
• As it talks about security, it has a lot of hardware/software requirements for the initial setup, which might make the rollout timeline a little lengthy.
• Product should be easy to customize based on different industry's needs.

Incentivized

• Sometimes it feels unresponsive and we have to restart the services.

Incentivized

I've been an engineer and architect in the Identity space for many years and CyberArk is the #1 tool I've found to help me secure accounts and credentials. I've architected CyberArk and built the implementation from the ground up twice in previous roles and found it here upon my arrival at my current job. I wouldn't want to have to live without it as it helps me sleep at night

Incentivized

Besides the random issue where it gets unresponsive and we have to restart the services or reboot the server, it's been really solid. I've only had to contact support 1 time in the 15 years I've used it which is saying more than most other software. The cost of maintenance is also very cheap compared to some of the other software we use.

Incentivized

Manage Engine's Password Management solution can accomplish the same features however, their system is cumbersome and not as user friendly to operate. It is however great for small teams. Pleasant Solutions Password Manager Pro can accomplish some of the same things, but the web browser interface is not user friendly at all

Incentivized

I haven't used anything but Tivoli in this space.

Incentivized

• A positive impact is passing SOX audits when it comes to privileged account management. Making sure we are compliant with password expiration policies and complexities.

Incentivized

• It has helped us all these years to not have to waste time managing users on multiple systems.
• It controls our password policy for our domain.

Incentivized