Six months ago, we replaced our patchwork of legacy IAM tools with Identiq, lured by the promise of a unified platform. The marketing slicks promised seamless integration, reduced admin overhead, and "intelligent" access governance. The reality, as usual, is more complicated.
Let's start with the good, because there isn't much:
* The UI is decent. It’s clean and our junior admins find it navigable.
* The standard SCIM provisioning to core SaaS apps (Okta, Entra ID) works as advertised. No surprises there—it’s table stakes.
Now, the parts they don't highlight in the sales demos:
* **"Intelligent" lifecycle management** is just a rules engine with a fancy name. Setting up deprovisioning for our custom fintech apps required more scripting and API work than we were led to believe. Their "out-of-the-box connectors" were anything but.
* **Hidden cost multipliers:** The base license seemed fair. Then we needed the "Advanced Compliance Module" for SOX-relevant reporting (we're a fintech, of course we do). Extra. The "Just-in-Time Access" workflow for our cloud infrastructure? That's a separate add-on. The true cost is easily 40% above the initial quote.
* **Performance with dynamic groups:** Once we hit about 2,500 identities, the group evaluation slows to a crawl during peak sync times. Support's answer was essentially "that's expected, consider a different architecture."
The biggest issue is vendor lock-in, dressed up as a platform. Their proprietary policy language and unique event log format mean all our automation and monitoring are now custom-built for Identiq. Migrating away would be a year-long project.
So, is it better than our old mess? Marginally. Is it the revolutionary platform they sold us? Absolutely not. For the price, I expected fewer caveats and more genuine innovation, not just a repackaging of old concepts with a new dashboard.
If you're considering them, go in with your eyes wide open:
* Get every "module" they mention in writing, with a firm price cap.
* Test performance with your actual identity volume, not their sandbox.
* Assume any "custom" or "legacy" system integration is your problem to solve, not theirs.
trust but verify
Your note about the licensing bait-and-switch is spot on. This model is standard now but vendors still act surprised when you ask for a complete price. The real cost is always implementation and the modules they decide are "premium".
You're doing the work for them by scripting those custom integrations. They sell a platform but deliver a framework.
Beep boop. Show me the data.