- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
Symantec IGA
People change jobs every week. Their access rarely changes with them — Symantec IGA provisions and removes access as people join, move and leave, makes the business recertify it, and gives users a request catalogue and mobile app — on Linux hosts you run, in India if you choose.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The Broadcom platform family
This page covers Symantec IGA — Broadcom’s identity governance suite: Identity Manager, Identity Governance and Identity Portal. The rest:
Quick facts
30-second orientation- Product
- Provisioning, access certification, self-service and access requests in one self-hosted suite
- Maker
- Broadcom Inc., Palo Alto (NASDAQ: AVGO), CEO Hock Tan; Identity division led by Clayton Donley
- Lineage
- CA Technologies’ identity suite, part of Broadcom since the CA deal closed on 5 November 2018
- Release
- 15.0 is current; 15.0.1 reached general availability on 30 June 2026
- Price
- Not published; partners quote, and Broadcom prints no licence unit for IGA
- Runs on
- Linux you manage (Rocky 9/10, RHEL 10) on-premises, or on Azure, AWS or Google Cloud
- Components
- Identity Manager, Identity Governance and Identity Portal, deployed with IGA Xpress 2.0
- Analysts
- Overall Leader in KuppingerCole’s 2026 IGA Compass; Gartner runs no IGA Magic Quadrant
- India
- You host it, so the data sits where you put it; offices in Bangalore, Hyderabad and Pune
- In India via
- TechBag — identity count, connector scoping, quote in INR with GST, first campaign
Know what identity governance does before you shortlist
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is identity governance and administration?
Administration gives and removes access as people change jobs; governance makes the business confirm that access and proves it.
Helpdesk tickets and emailed review sheets vs one governed identity suite — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Tickets, spreadsheets, manual revokes | Symantec IGA |
|---|---|---|
| A new joiner’s access | Tickets to each app owner, days apart | Granted from the HR event, app by app |
| A leaver’s accounts | Removed when someone remembers | Revoked automatically on exit |
| Access reviews | Spreadsheets emailed to managers | Certification campaigns that revoke rejects |
| Asking for access | An email to IT, with no risk shown | A catalogue request that flags risk |
| Forgotten passwords | A helpdesk call every time | Self-service reset, on web or mobile |
| What it is NOT | — | SSO, PAM, or a published price |
The cheapest test is one department: feed it from HR, run one certification, and check that every rejected entitlement is really removed.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Provision
The CA-born provisioning engine grants and revokes entitlements as people join, move and leave, across on-premises and cloud apps; 15.0.1 adds passphrases for mainframe endpoints.
Govern
Runs the periodic certification campaigns in which the business confirms access, and revokes what is rejected; 15.0.1 adds live reports on results, reassignments and pending reviewers.
Portal
The business-facing layer for self-service, the access-request catalogue and reviews; Broadcom’s 2024 demo shows it integrating with Microsoft Azure for sign-in.
Platform
Since 15.0 the suite installs on Linux you choose, replacing the locked virtual appliance; IGA Xpress 2.0 handles deployment with node-by-node upgrades and TLS 1.3 only.
Provisioning, reviews and a self-service portal — three CA-born modules on Linux you run, on-premises or in your cloud.
Nine capabilities. Provision, certify, self-serve.
Symantec IGA gives people the right access, takes it away on time, and proves both to an auditor.
Joiner, mover, leaver
Entitlements are granted and taken away automatically as a person joins, changes role and finally leaves the organisation.
On-premises, cloud, mainframe
Broadcom cites broad provisioning to on-premises and cloud apps; 15.0.1 certifies Oracle 23ai as an endpoint and adds mainframe passphrases.
Business logic without code
Xpress Technologies let you build specific use cases and policy logic into the platform without writing custom code.
Reviews that revoke
The business reviews and recertifies access on a schedule, and anything a reviewer rejects is removed without a ticket.
Campaign progress in view
15.0.1 adds three ready-made live reports: certification results, certification reassignments and pending reviewers.
Audit evidence, your layout
Reporting moved to JasperReports libraries in 15.0, so custom reports no longer need a separate JasperReports Server.
Fewer helpdesk calls
Users update their own profile attributes and reset or change passwords themselves, which Broadcom pitches as a helpdesk saving.
A catalogue that shows risk
People ask for extra access from a catalogue that tells them whether the entitlement they want carries any risk.
Approve from a phone
A mobile app covers the suite’s functions, so managers can act on requests and reviews away from a desk.
Watch Symantec IGA in action
Broadcom’s identity overview, connecting Identity Portal to Microsoft Azure, and moving an older virtual appliance to 14.5 — all from 2024.
Modern Identity & Access Management by Broadcom
Broadcom’s pitch for its identity line, of which IGA is the governance piece; it predates the 15.0 release.
Symantec IGA - Identity Portal Integration with Microsoft Azure
Connecting the Identity Portal to Microsoft Azure, the business-facing layer of the suite.
Side by Side Migration of existing Symantec IGA Virtual Appliance to 14.5.
A 2024 appliance upgrade to 14.5; version 15.0 has since replaced the appliance with Linux you run.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Every reorganisation leaves access behind. Symantec IGA grants it, reviews it and takes it back.
Here’s what genuinely sets it apart — and exactly where it stops.
Provisioning and proof from one supplier
Identity Manager creates and removes accounts as people join, move and leave; Identity Governance asks the business to recertify that access and removes whatever is rejected. With a self-service portal and mobile app in the same suite, leavers and audits are not two separate purchases.
It runs where you decide
Version 15.0 dropped the locked virtual appliance for a bring-your-own-Linux model: Linux you choose on your own servers, or in your own Azure, AWS or Google Cloud account. Put those hosts in India and identity data stays there — a deployment choice, not a certification.
Rated highly by the analyst who rates IGA
Gartner publishes no Magic Quadrant for identity governance. KuppingerCole does rank the field: its 2026 IGA Leadership Compass named Symantec IGA Overall Leader plus Product, Innovation and Market Leader, and its 2026 Identity and Access Governance Compass agreed.
Where it stops
No price or licence unit is published. You run the Linux hosts, database and patching, even with automated upgrades. The product page does not detail SoD rules or role mining, the official videos are from 2024 or earlier, and Broadcom names no Indian customers.
The numbers behind the platform
What your Symantec IGA rollout looks like
Name the finding you must close
Write down whether auditors flagged missing reviews, leavers with live accounts or both; that sets which modules to quote.
Choose the hosts and region
Pick on-premises or your own cloud account, size Rocky Linux or RHEL hosts and the database, and fix the Indian region.
Install and connect the core
Deploy with IGA Xpress 2.0, connect the HR feed and directory, then add the two or three systems auditors ask about.
Run one certification
Send one campaign to a willing department, check that rejected access is really removed, and export the evidence.
Open requests and self-service
Publish the request catalogue, switch on password self-service and the mobile app, and track the live review reports.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“Leavers used to keep their mail and core-system logins for a week. Now the HR feed triggers removal the same evening.”
“Our quarterly recertification finally removes what managers reject. Before, rejected access sat in a ticket queue for months.”
“Password self-service cut our helpdesk reset calls sharply in the first quarter; that alone paid for the rollout effort.”
“Plant managers approve requests from the mobile app between shifts, so approvals no longer wait for them to reach a desk.”
“Leaving the old appliance for our own RHEL hosts meant we finally patch it on the same cycle as every other server.”
“Strong once running, but upgrades from our CA-era version took planning, and the quote took longer than we hoped.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the identity governance market — tap any vendor to see why it sits where it does.
TechBag Identity Governance Grid
Execution strength vs product vision — the classic market map, minus the paywall.
KuppingerCole IGA Overall Leader, 2026; quote-only.
Hosting Control × Lifecycle Breadth
The grid nobody publishes — how much say you keep over where it runs, India included, vs how much of the identity lifecycle one product covers.
Your Linux on-premises or in three clouds; provisioning to mobile app.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Symantec IGA vs the identity governance field
Against SailPoint IdentityIQ, SailPoint Identity Security Cloud, One Identity Manager, OpenText NetIQ Identity Governance and Okta Identity Governance — on hosting, price, reviews, self-service, analysts and India.
| Dimension | Symantec IGA | SailPoint IdentityIQ | SailPoint Identity Security Cloud | One Identity Manager | OpenText NetIQ Identity Governance | Okta Identity Governance |
|---|---|---|---|---|---|---|
| What it is | Ex-CA identity suite | SailPoint on-premises | SailPoint’s cloud IGA | Quest-owned IGA suite | Catalog-based IGA | Governance inside Okta |
| Deployment | Your Linux, your cloud | Self-hosted only | Cloud service only | On-prem or On Demand | Self-hosted or SaaS | Okta cloud only |
| Connectors | Apps plus mainframe | Mature, portable | Hundreds of apps | SAP-certified | Templates, SCIM, JDBC | What Okta connects |
| Pricing model | Quote; unit unpublished | Licence plus your stack | Per-identity suites | Perpetual or term | Per managed identity | Per user, per month |
| Published entry price | Not published | Not published | Not published | Not published | Not published | $17/user/month |
| Included vs add-on | Suite; confirm modules | Infrastructure on you | SAP risk costs extra | One product, broad scope | Identity Manager apart | Governance in Essentials |
| Scale and limits | Not published | Your hardware decides | Hard below 1,000 | No published ceiling | 500 GB SaaS cap | $1,500 floor |
| Reviews and SoD | Reviews; SoD unstated | Rules-engine depth | Reviews, SoD, mining | Change-triggered reviews | Micro-certifications | Campaigns and SoD |
| Requests and self-service | Catalogue + mobile app | Requests on your servers | Requests in the SaaS | IT Shop | Requests with approval | Requests in Slack, Teams |
| Analyst standing | KC Overall Leader 2026 | Shares SailPoint’s rank | #1 IGA revenue, 2024 | No ranking cited | KC Overall Leader 2024 | No IGA ranking cited |
| India storage | Wherever you host it | Your Indian data centre | AWS Mumbai since 2024 | Self-host for India | Your servers, not SaaS | India tenants, Jan 2026 |
| Support | Broadcom Support portal | Supported; no end date | Set in the contract | Tiered support | 24x5 plus Sev 1 cover | 99.99% uptime |
| Lock-in and exit | Data in your database | Two to three year move | SailPoint-hosted data | Switch models in place | Exportable definitions | Bound to Okta’s IdP |
| Best fit | CA-lineage, self-hosted | Rules-heavy, on-prem | Large SaaS programmes | SAP-heavy estates | NetIQ IDM customers | Okta-first estates |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Symantec IGA if…
- ✓You already run CA or Symantec identity software and want the 15.0 migration utility to carry your customisations forward
- ✓Governance has to run on servers or cloud accounts you control, in India or wherever your regulator points
- ✓You want provisioning, certification, password self-service and a reviewer mobile app from one supplier
Compare alternatives if…
- ✓You would rather not host it — SailPoint stores Indian tenants in AWS Mumbai and Okta now offers Indian tenants
- ✓Budget sign-off needs a printed number — of these six, only Okta publishes one, $17 per user a month
- ✓SAP segregation-of-duties rules must be documented up front — One Identity and SailPoint spell theirs out
Do not expect…
- ✓A list price, or a published licence unit for counting identities
- ✓Web single sign-on or privileged session recording — Broadcom sells those as SiteMinder and Symantec PAM
- ✓Named Indian reference customers — Broadcom publishes none for its identity products
Symantec IGA is one of 22 identity governance products TechBag carries. The Identity Governance guide narrows them to a shortlist and shows the reasoning. →
What does hand-run identity admin cost you?
Drag the sliders (identities governed; admin-hour cost). Estimates model the hours IT and managers spend creating and removing accounts, resetting passwords and compiling review evidence, assumed at 1.5 hours per identity a year, with 70% of it automated by provisioning, certification and self-service. Both numbers are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Not published: Broadcom sells Symantec IGA through partners and prints neither a price nor a licence unit. You also supply the Linux hosts and the database it runs on. TechBag gets the partner to state how identities are counted, then quotes the modules you need in INR with GST.
On your own servers
Best where identity data must stay in your data centre
- Quote-only; unit set in the quote
- Rocky Linux or RHEL hosts you patch
- Upgrades automated by IGA Xpress 2.0
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
In your cloud account
Best for teams already running on a public cloud
- Quote-only, like on-premises
- Azure, AWS or Google Cloud
- You pick the Indian region
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Is the audit gap missing access reviews, slow leaver removal, or both? Each points to a different module first.
Broadcom prints no unit: will the quote count employees, all identities, contractors or managed accounts?
On your own servers, or your Azure, AWS or Google Cloud account — and is that region in India?
Do you run Rocky Linux 9/10 or RHEL 10, and who patches the hosts and the database under the suite?
Which systems hold the risky access — core banking, ERP, mainframe — and is a connector proven for each?
If toxic access pairs matter to your regulator, ask Broadcom to show how SoD rules are defined and reported.
On an older virtual appliance? Ask the partner to plan the 15.0 migration utility run before go-live.
Does the quote list modules, identity count, term and support level, in INR with GST?
Questions buyers ask
Ready to evaluate Symantec IGA?
Count the identities and the systems your auditor asks about first, or let a TechBag advisor scope a pilot that provisions one department and runs its first certification.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.