CyberArk Modern Identity Governance Automation

Name: CyberArk Modern Identity Governance Automation
Brand: CyberArk
Rating: 4.4 (188 reviews)

Leader

CyberArk is the global leader in identity security.

Est 1999|Valuation $20.6B|Raised $1.5B

LinkedIn 325K|Website|Web traffic 444K|FTEs 4,000|HQ Newton, MA

MarketsIdentity Provider (IdP) & Single Sign-On (SSO)Identity Governance & Administration (IGA)

CyberArk Modern Identity Governance Automation screenshot

Published Sep 30, 2026

01Common complaints

If an organization only requires basic lifecycle provisioning and the environment is heavily Microsoft-centric

Consolidation to cloud-provider identity tooling may be more cost-effective and operationally simpler in such cases.

If a procurement process requires a long track record of peer reviews and benchmarks specific to the IGA module

Public review volume for the product under current branding is relatively limited; organizations that rely heavily on large peer review datasets may prefer incumbent IGA vendors with broader independent review coverage.

If the team has low tolerance for enterprise platform complexity

Community discussions about the vendor’s broader product lines sometimes reference operational friction and upgrade complexity. Even when a specific module is delivered as SaaS, platform engagement models and operational expectations can introduce overhead.

If published data residency and hosting details are required upfront

Data residency and hosting region options are not clearly documented on core product pages; such details should be confirmed during procurement.

Limited independent validation of vendor-reported performance claims

Vendor materials include quantitative efficiency claims. Independent verification via pilot programs and customer references is recommended.

Limited public review volume for the specific IGA module under current vendor branding

Some review platforms report insufficient review counts for the acquired product prior to acquisition, which limits crowd-sourced confidence.

Integration maintenance risk

Automation approaches that interact with application user interfaces can be brittle when applications update UIs. This is a general automation trade-off; organizations should evaluate maintenance burden.

Perception risks from broader product line discussions

Community sentiment about the vendor’s other products (for example, privileged access management) can influence expectations and procurement decisions for new modules.

1) If an organization only requires basic lifecycle provisioning and the environment is heavily Microsoft-centric - Consolidation to cloud-provider identity tooling may be more cost-effective and operationally simpler in such cases. 2) If a procurement process requires a long track record of peer reviews and benchmarks specific to the IGA module - Public review volume for the product under current branding is relatively limited; organizations that rely heavily on large peer review datasets may prefer incumbent IGA vendors with broader independent review coverage. 3) If the team has low tolerance for enterprise platform complexity - Community discussions about the vendor’s broader product lines sometimes reference operational friction and upgrade complexity. Even when a specific module is delivered as SaaS, platform engagement models and operational expectations can introduce overhead. 4) If published data residency and hosting details are required upfront - Data residency and hosting region options are not clearly documented on core product pages; such details should be confirmed during procurement. 1) Limited independent validation of vendor-reported performance claims - Vendor materials include quantitative efficiency claims. Independent verification via pilot programs and customer references is recommended. 2) Limited public review volume for the specific IGA module under current vendor branding - Some review platforms report insufficient review counts for the acquired product prior to acquisition, which limits crowd-sourced confidence. 3) Integration maintenance risk - Automation approaches that interact with application user interfaces can be brittle when applications update UIs. This is a general automation trade-off; organizations should evaluate maintenance burden. 4) Perception risks from broader product line discussions - Community sentiment about the vendor’s other products (for example, privileged access management) can influence expectations and procurement decisions for new modules.

Deal disqualifiers (poor fit)

Very small organizations that can be served by native cloud provider identity controls
Organizations requiring fully transparent self-serve pricing and card-based procurement
Environments with highly bespoke legacy applications where UI-based automation maintenance risk is unacceptable

02Why they buy

Unique selling points described in vendor materials (to be validated in a proof-of-concept):

Automation approaches for applications without APIs and stated integration breadth; this may be a differentiator where many legacy SaaS or custom apps exist.
Automated campaign management and packaging of evidence to support audit processes; effectiveness depends on entitlement quality and reviewer workflows.
Use of machine learning or profile-generation techniques to recommend entitlements or roles; these concepts should be validated for accuracy and operational relevance during evaluation.

Where competitors may have clearer advantages:

Some competitors have broader community support, longer IGA market presence, and procurement models that may align more closely with certain enterprise requirements.

Unique selling points described in vendor materials (to be validated in a proof-of-concept): - Automation approaches for applications without APIs and stated integration breadth; this may be a differentiator where many legacy SaaS or custom apps exist. - Automated campaign management and packaging of evidence to support audit processes; effectiveness depends on entitlement quality and reviewer workflows. - Use of machine learning or profile-generation techniques to recommend entitlements or roles; these concepts should be validated for accuracy and operational relevance during evaluation. Where competitors may have clearer advantages: - Some competitors have broader community support, longer IGA market presence, and procurement models that may align more closely with certain enterprise requirements.

Why customers chose CyberArk (inferred)

Platform integration: CyberArk positions Modern IGA as part of a unified identity security platform that aligns governance with privilege controls and other identity services.
Time-to-value claims: Vendor materials emphasize faster deployment and broad integration coverage as motivators for organizations moving from manual or spreadsheet-based access review processes.

03Field reports

Review platform availability and access notes

Gartner Peer Insights includes entries for CyberArk's identity offerings with varying review counts and aggregate ratings. Filter settings can change which product entries and ratings are shown, which affects interpretation.
Some review platforms contain limited review volume for Zilla Security, reducing statistical confidence for that offering alone.
TrustRadius and other sites contain more extensive reviews for CyberArk's privileged access management products, which can inform perceptions of vendor support and operational behaviors but do not directly reflect Modern IGA experiences.

- Gartner Peer Insights includes entries for CyberArk's identity offerings with varying review counts and aggregate ratings. Filter settings can change which product entries and ratings are shown, which affects interpretation. - Some review platforms contain limited review volume for Zilla Security, reducing statistical confidence for that offering alone. - TrustRadius and other sites contain more extensive reviews for CyberArk's privileged access management products, which can inform perceptions of vendor support and operational behaviors but do not directly reflect Modern IGA experiences.

Positive feedback themes (what users like)

Platform capability breadth and customization: Some reviews highlight capability depth and the ability to customize the solution, which can be beneficial for complex environments.
Access review automation (anecdotal): Community comments include anecdotal positive feedback about automated access review workflows in the Zilla product prior to acquisition; these are single-source signals and should be validated.
Support comparisons (product-specific): In some comparisons, CyberArk workforce identity offerings score favorably on ease-of-setup and support versus certain alternatives; these comparisons are product-specific and may not map directly to Modern IGA.

1) Platform capability breadth and customization: Some reviews highlight capability depth and the ability to customize the solution, which can be beneficial for complex environments. 2) Access review automation (anecdotal): Community comments include anecdotal positive feedback about automated access review workflows in the Zilla product prior to acquisition; these are single-source signals and should be validated. 3) Support comparisons (product-specific): In some comparisons, CyberArk workforce identity offerings score favorably on ease-of-setup and support versus certain alternatives; these comparisons are product-specific and may not map directly to Modern IGA.

Negative feedback themes (what users complain about)

Operational friction and performance concerns: Community discussions about CyberArk's broader product portfolio sometimes cite perceived clunkiness and performance or reporting limitations; these comments largely reference privileged access tooling rather than the Modern IGA module specifically, but they can influence buyer perception of vendor operational practices.
Upgrade and documentation challenges: Reports in community forums describe upgrade-related issues and documentation gaps affecting complex deployments.
User interface and workflow friction: Some users report navigation and workflow challenges that affect reviewer efficiency.

1) Operational friction and performance concerns: Community discussions about CyberArk's broader product portfolio sometimes cite perceived clunkiness and performance or reporting limitations; these comments largely reference privileged access tooling rather than the Modern IGA module specifically, but they can influence buyer perception of vendor operational practices. 2) Upgrade and documentation challenges: Reports in community forums describe upgrade-related issues and documentation gaps affecting complex deployments. 3) User interface and workflow friction: Some users report navigation and workflow challenges that affect reviewer efficiency.

Why some customers leave or consider alternatives

Cost and complexity perceptions: Community discussions often mention perceived enterprise pricing and implementation complexity for larger identity/security platforms.
Platform consolidation: Some organizations consider consolidating to vendor ecosystems that provide identity and security controls under a single licensing model, such as major cloud provider identity suites; such consolidation can be driven by licensing economics rather than technical superiority.

Vendor-published case study materials

Vendor resources list customer case studies that describe automation of access reviews and compliance simplification. Extracted snippets in available listings provided limited metrics and context. Buyers should request the full case study pack and validate outcomes directly with customer references where possible.

Investor and acquisition materials

Critical evaluation:

The most publicly visible outcome metrics are vendor-published. Independent, detailed third-party case studies for Modern IGA under the current vendor branding are limited in accessible sources.

Acquisition-related slides referenced auditor findings and vendor-reported results following deployments. These materials are vendor-created and can selectively present positive outcomes. Use such materials as hypotheses to verify in customer reference calls and pilots. Critical evaluation: - The most publicly visible outcome metrics are vendor-published. Independent, detailed third-party case studies for Modern IGA under the current vendor branding are limited in accessible sources.

04Best fit

Company size

Mid-market to large enterprises is the most plausible ICP, based on enterprise positioning and typical IGA program scale. Regulated organizations and those subject to frequent audits are common targets.

Industries

Financial services, healthcare, insurance, technology/SaaS, and other regulated sectors where audit evidence and entitlement visibility are priorities.

Personas

IAM/IGA program owners
GRC and compliance leaders
Application owners responsible for reviewer delegation
IT service management leaders focused on provisioning workflows

Pain points addressed

Spreadsheet-based access reviews
Slow onboarding/offboarding and role change processes
Limited entitlement visibility across SaaS applications
Audit evidence production overhead

Qualification criteria (good fit)

Organizations with many applications (SaaS and on-premises) and documented access review challenges
Teams able to operationalize reviewer workflows and maintain entitlement hygiene
Organizations that either use other parts of the vendor’s platform or seek governance that integrates with privileged access controls

05The pitch

What the product does (core value proposition)

CyberArk Modern Identity Governance Automation (referred to here as Modern IGA) is a software-as-a-service Identity Governance & Administration capability focused on automating several core areas:

User access reviews (UARs) and certifications, including campaign creation, routing, and evidence collection
Identity lifecycle provisioning for joiner/mover/leaver scenarios, with approval workflows and entitlement recommendations
Entitlement discovery and visibility across SaaS and on-premises applications, including support for applications without APIs through automation techniques

Vendor materials describe Modern IGA as designed for hybrid enterprise environments and emphasize integration coverage, automation features, and reduced audit and compliance effort compared with older IGA tools.

CyberArk Modern Identity Governance Automation (referred to here as Modern IGA) is a software-as-a-service Identity Governance & Administration capability focused on automating several core areas: - User access reviews (UARs) and certifications, including campaign creation, routing, and evidence collection - Identity lifecycle provisioning for joiner/mover/leaver scenarios, with approval workflows and entitlement recommendations - Entitlement discovery and visibility across SaaS and on-premises applications, including support for applications without APIs through automation techniques Vendor materials describe Modern IGA as designed for hybrid enterprise environments and emphasize integration coverage, automation features, and reduced audit and compliance effort compared with older IGA tools.

Target market and positioning

Modern IGA is positioned for:

Mid-market to enterprise organizations with manual access review processes and ticket-driven provisioning workflows
Security and IAM teams seeking governance capabilities coordinated with other identity security controls (for example, privileged access management and workforce identity)
Organizations with high SaaS adoption and decentralized application ownership where integration coverage and reviewer experience are common procurement considerations

The vendor's messaging contrasts Modern IGA with legacy IGA approaches characterized as slower to deploy and harder to integrate.

Modern IGA is positioned for: - Mid-market to enterprise organizations with manual access review processes and ticket-driven provisioning workflows - Security and IAM teams seeking governance capabilities coordinated with other identity security controls (for example, privileged access management and workforce identity) - Organizations with high SaaS adoption and decentralized application ownership where integration coverage and reviewer experience are common procurement considerations The vendor's messaging contrasts Modern IGA with legacy IGA approaches characterized as slower to deploy and harder to integrate.

Get a comprehensive analysis of CyberArk Modern Identity Governance Automation including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →