IBM Tivoli Access Manager [EOL] vs Idira Privileged Access Manager comparison

Why PeerSpot?

The compared IBM and Idira by Palo Alto Networks solutions aren't in the same category. Idira by Palo Alto Networks is ranked #1 in PAM , with an average rating of 8.6, and holds a 8.6% mindshare. Additionally, 93% of IBM users are willing to recommend the solution, compared to 95% of Idira by Palo Alto Networks users who would recommend it.

IBM Tivoli Access Manager [...

Read 29 IBM Tivoli Access Manager [EOL] reviews

93% willing to recommend

Idira Privileged Access Man...

Read 231 Idira Privileged Access Manager reviews

27,682 Views
11,073 Comparison Views

95% willing to recommend

IBM Tivoli Access Manager [...

Idira Privileged Access Man...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between IBM Tivoli Access Manager [EOL] and Idira Privileged Access Manager based on real PeerSpot user reviews.

Find out what your peers are saying about Okta, Microsoft, One Identity and others in Single Sign-On (SSO).

To learn more, read our detailed Single Sign-On (SSO) Report (Updated: October 2026).

Buyer's Guide

Single Sign-On (SSO)

October 2026

Download the complete report

Helped 917,433 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

IBM Tivoli Access Manager [...

Average Rating

8.0

Reviews Sentiment

3.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Idira Privileged Access Man...

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

231

Ranking in other categories

User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (1st), Operational Technology (OT) Security (3rd)

Featured Reviews

it_user711612

Senior Consultant at a insurance company with 1,001-5,000 employees

Reverse proxy provides central control over authentication and authorization.

It is a single product that caters for all the business needs throughout the organization. It provides a seamless integration that in turn encourages most of the applications to use the SSO features Reverse proxy is the most valuable feature as it provides central control over authentication and…

Read full review

Singaravelu C

CyberArk Engineer at Tata Consultancy

Provides full visibility into user activity and ensures secure end-to-end access across critical systems

In CyberArk Privileged Access Manager, I see room for improvement as I am working in the on-premises networks, and now we are also having the cloud-based PAM. So there, everything is maintained by the CyberArk Privileged Access Manager team, and we are only maintaining the PSM servers. So it is already upgraded from the on-premises network to the cloud network. If you ask me what we can implement beyond that, I just need a few minutes to think about what new things, because it is already an end-to-end security on-premises itself. Now, when it comes to PCloud, Privileged Cloud, it is more secure than the on-premises networks because most of the things are handled using the cloud itself. So it is an already upgraded version; we do not need to implement something new. But if you think in that way, we can have a chance to implement our things. If anything could be improved in CyberArk Privileged Access Manager, I think we could build a small agent AI in my team, we could give access to these logs—the Vault logs, PSM logs, and CPM logs. Whenever the system is going down, the AI will automatically check. If we actually implement agent AI in CyberArk Privileged Access Manager, it will check the logs, and if any errors are coming, it automatically triggers alerts and gives the solution. That is the best improvement I can think of because these days, most things are done by agent AI. So if we also implement this agent AI in CyberArk Privileged Access Manager, we can add more features.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is a very stable and good product."

"Before the solution was implemented it took around 2-3 weeks to get all the necessary account information for a new employee in my organization, and since implementation this now only takes a few minutes."

"Some of the valuable features are: Reverse proxy Protected object space Ease of integration Multiple and robust AuthN and AuthZ mechanisms built-in No single point of failure (SPOF)"

"Flexibility to connect with different environments and product stability are the best features."

"It provided a secure and robust end to end security solution."

"OAuth 2 is now the de facto standard for API protection and scoped authorized delegation. IBM TAM now supports OAuth 2 and can act as fully compliant OAuth 2 authorization server."

"Provided more secure computing."

"Centralized policy management and reverse proxy-based architecture make it very flexible in terms of deployment, adoption, and implementation."

More IBM Tivoli Access Manager [EOL] pros

"We have accomplished our security goals. We have two-factor authenticated and vaulted our important accounts, so people can't just steal stuff from us."

"The most valuable feature is that it always provides flexibility, password quality and one-time user check-in and check-out."

"Automatic password management, which will automatically change passwords based on compliance requirements."

"The combination of CPM and PSM resolves a lot of use cases."

"It is a great product when it comes to security, and from the security point of view, I would advise a new user to use this tool and deploy it in your environment since the security is unbeatable."

"The solution is stable and reliable."

"When we started with RPA, there was a requirement that every credential and the bots themselves be protected through the PAM system. From the get-go, we've had CyberArk in the middle... We've got a pretty robust RPA implementation with our PAM platform. Users, bots, the credentials — everything is managed via our PAM solution."

"The product is an important security measure against credential theft. It ensures session isolation and password rotation including pushing passwords to the endpoints."

More Idira Privileged Access Manager pros

Cons

"Administration of the product can be improved a lot."

"Web Portal Manager does not implement the full set of functions found in the command line"

"There were endless issues with stability in version 8.0.1."

"The product has not been updated with emerging technologies over the years specifically around AJAX, REST and Mobile app integration."

"There is only a single step-up authentication path, but I have sometimes seen the need for several steps or a divergent path."

"Redundant Policy servers had to be manually configured using LB."

"It was complex for us as we have multiple domains."

"The whole product could be made into one suite instead of multiple components which are essentially a part of the same infrastructure."

More IBM Tivoli Access Manager [EOL] cons

"The one place where we found that this product really needs to improve is the cloud."

"They can work on the pricing part. Its pricing is a big challenge here."

"Based on the user experience that I see on a day-to-day basis, some changes could be made to the Privileged Session Manager tool to make it more user-friendly. The user interface of that tool could be more advanced and understandable to laymen, rather than being more of a developer tool."

"Technical support is average. They are not so great, because the first level support partner or distributor has to provide the support and customers cannot contact CyberArk support directly."

"We'd like to see the creation of some kind of memo field for each device account, which could be used, in our network at least, to leave a note about the device for either the security or network engineering team members."

"Having a centralized place to manage the solution has been something that I have always wanted, and they are starting to understand that and bring things back together."

"Perhaps improve the user registry integration. It is already fine, but a bit atypical."

"It can be made user-friendly, in the sense of the console is pretty outdated."

More Idira Privileged Access Manager cons

Pricing and Cost Advice

"The IBM prices are, as ever, extortionate, even with a business partnership, and high levels of discounts."

"The product's licensing is yearly. I would rate the solution's pricing a six out of ten."

"CyberArk is very expensive and there are additional fees for add-ons."

"I'm aware that the organization had purchased licensing for almost all of CyberArk's solutions including licensing for PTA, EPM, and the Application Identity Manager. But when it comes to PSM, this is one of the components where there's an additional charge for any extra PSMs that you want to deploy. I believe that there's some rider where the vendor has a bit of leeway to, at times, charge a premium on whatever additional services you may require above the board."

"Cost efficiency is the number one thing that can be improved in my mind. This would change lots of companies minds on purchasing the product."

"The license CyberArk Privileged Access Manager is on an annual basis."

"I'm a technician so I don't handle the licensing for CyberArk Privileged Access Manager, but I know that the price for the core license is about €140 per year. There's another type of license, the external vendor license, and that's about €600 and you can manage twenty devices. From what I know, the price for one device in a subscription is about €65 per year. You can buy the CyberArk Endpoint Privilege Manager too, or you can buy some other application or application license with CyberArk Privileged Access Manager, but all other features, such as the Analytics Server is included in the basic CyberArk license. With WALLIX, you need to buy separate licenses for the features."

"I would rate the cost of CyberArk Privileged Access Manager seven out of ten with ten being the most expensive."

"Pricing and licensing depend on the environment."

More Idira Privileged Access Manager pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Single Sign-On (SSO) solutions are best for your needs.

See recommendations

917,433 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

14%

Financial Services Firm

11%

Construction Company

11%

Manufacturing Company

Outsourcing Company

12%

Financial Services Firm

12%

Manufacturing Company

10%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	2
Large Enterprise	18

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	43
Large Enterprise	175

Questions from the Community

Ask a question

Earn 20 points

How does Sailpoint IdentityIQ compare with CyberArk PAM?

We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...

See all answers

What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?

The pricing is reasonable compared to other software options we evaluated, and it is straightforward. However, overall costs depend on deployment size and licensing requirements.

See all answers

What needs improvement with CyberArk Privileged Access Manager?

While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creat...

See all answers

Comparisons

Symantec Siteminder vs IBM Tivoli Access Manager [EOL]

Compared 11% of the time

Okta Platform vs IBM Tivoli Access Manager [EOL]

Compared 9% of the time

SailPoint Identity Security Cloud vs IBM Tivoli Access Manager [EOL]

Compared 8% of the time

Keeper Enterprise Password Manager vs IBM Tivoli Access Manager [EOL]

Compared 5% of the time

Idira Identity vs IBM Tivoli Access Manager [EOL]

Compared 4% of the time

More IBM Tivoli Access Manager [EOL] Competitors

Safeguard by One Identity vs Idira Privileged Access Manager

Compared 3% of the time

Keeper Enterprise Password Manager vs Idira Privileged Access Manager

Compared 3% of the time

Teleport vs Idira Privileged Access Manager

Compared 3% of the time

NetWitness Platform vs Idira Privileged Access Manager

Compared 3% of the time

F5 BIG-IP Access Policy Manager (APM) vs Idira Privileged Access Manager

Compared 2% of the time

More Idira Privileged Access Manager Competitors

Product Reports

Buyer's Guide

IBM Tivoli Access Manager [EOL]

October 2026

Download IBM Tivoli Access Manager [EOL] product report

Buyer's Guide

Idira Privileged Access Manager

October 2026

Download Idira Privileged Access Manager product report

Also Known As

Tivoli Access Manager, IBM Security Access Manager

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault

Overview

IBM Tivoli Access Manager is a robust and secure centralized policy management solution for e-business and distributed applications. IBM Tivoli Access Manager WebSEAL is a high performance, multi-threaded Web server that applies fine-grained security policy to the Tivoli Access Manager protected Web object space. WebSEAL can provide single sign-on solutions and incorporate back-end Web application server resources into its security policy.

IBM

CyberArk Privileged Access Manager safeguards privileged accounts through password management, credential rotation, and session recording. With seamless integration and real-time monitoring, it ensures robust security across platforms.

CyberArk Privileged Access Manager is recognized for its extensive capabilities in managing and securing privileged accounts. It offers vital functionalities such as automatic password rotation, real-time session monitoring, and cross-platform integration through APIs and custom connectors. Users find the flexibility in workflows and granular access controls beneficial, particularly in protecting access across cloud and on-prem infrastructures. However, improvements in its interface, installation process, plugin support, and integration with third-party tools are often suggested. Pricing is a concern for many, along with the need for better dashboard reporting, user provisioning, and enhanced documentation. Organizations leverage this tool for encrypting and monitoring critical account activities and automating password management to bolster security.

What are the key features of CyberArk Privileged Access Manager?

Enterprise Password Vault: Provides secure storage and management of enterprise credentials.
Privilege Session Manager: Offers comprehensive session recording and monitoring.
Privileged Threat Analytics: Detects and alerts on potential credential threats.
Integration Capabilities: Easily integrates with multiple systems using APIs and custom connectors.

What benefits or ROI should users expect?

Enhanced Security: Automates and centralizes password management, reducing risk of account misuse.
Compliance Support: Ensures alignment with compliance policies through automated processes.
Operational Efficiency: Streamlines security operations with real-time monitoring and integration.
Adaptability: Protects privileged access across diverse infrastructure setups including cloud and on-prem.

CyberArk Privileged Access Manager finds substantial use in industries such as finance, healthcare, and technology, where the protection of privileged accounts is critical. These sectors rely on its capabilities to manage application credentials securely and provide safe access for developers, administrators, and vendors across various infrastructures.

Idira by Palo Alto Networks

Sample Customers

Essex Technology Group Inc.

Rockwell Automation

Find out what your peers are saying about Okta, Microsoft, One Identity and others in Single Sign-On (SSO). Updated: October 2026.

DOWNLOAD NOW

917,433 professionals have used our research since 2012.

We monitor all Single Sign-On (SSO) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.