".,!520%'$!#)!"#$%&!>#($!#)!

Transcription

1 ".,!520%'$!#)!"#$%&!>#($!#)! "#$%&!'#($!#)!#*+,-(./0!1/)),-,+$/%$#-(!)#-!'#22#+&3!4(,1!51,+$/$3!%+1!6'',((!7%+%8,2,+$! 0-#14'$(!)-#2!9#:,&&;!<-%'&,;!5=7;!>6;!%+1!>#4-/#+?!

2 TABLE OF CONTENTS EXECUTIVE SUMMARY ERROR! BOOKMARK NOT DEFINED. NOVELL S TOTAL COST OF OWNERSHIP IS LOWER 3 SERVICE DRIVES TCO DIFFERENTIATION 3 LICENSING AND MAINTENANCE IMPACT ON TCO 4 RECOMMENDATIONS 4 THE IMPACT OF TCO IN IAM INVESTMENT DECISIONS 5 ANALYSIS METHODOLOGY 5 FINDINGS AND KEY STATISTICS 6 FINDINGS BY CUSTOMER SEGMENT 7 MASSIVE ENTERPRISES 8 LARGE COMPANIES 9 MEDIUM COMPANIES 10 THE IMPACT OF LICENSE FEES ON TCO 11 ONGOING APPLICATION INTEGRATIONS 14 VENDOR / PRODUCT SWITCHING COSTS 17 OTHER KEY STATISTICS 17 RECOMMENDATIONS 17 APPENDIX 1 - SCENARIOS 19 APPENDIX 2 KEY DATA 20 2

3 IN BRIEF s Total Cost of Ownership is Lower In our recent study of 50 IAM customers and systems integrators we found that s IAM user provisioning and web access management products demonstrate a lower total cost of ownership over five years. This finding was consistent for each of the three company categories researched (2,500+ users, 7,500+ users, and 40,000+ users). 2,500+ Person Firm 24% more than 7,500+ Person Firm 25% more than 40,000+ Person Firm 23% more than 0% 20% 40% 60% 80% 100% 120% 140% Competitive Set Our research indicates that the primary differentiator in TCO between leading IAM product vendors is services expense (competitors are 33% - 83% more expensive than, depending on the case) followed by operations expense (differences driven by downtime, patches, and audit reporting). Service Drives TCO Differentiation An existing IAM customer, a major US airline, noted that, With, we can configure over 90% of our drivers without any programming support; we have a team of business analysts and just one part-time programmer. This means the average scope of professional services engagements is typically lower with than with competitive products, allowing IAM customers to reduce TCO via services (doing the work in-house or doing less work overall). Most striking are the comments made by global and regional IAM professional services specialists. One systems integrator (SI) commented, When we integrate we look better. It is easier, since you don t need deep Java expertise like with other products. Does this translate to lower services expense? This same SI thinks so: Yes, is less than other products by 20%. Another SI gave one specific reason for this reduction: With, you can use one driver to connect hundreds of Unix servers; this is not available from any other competitor. This works for databases, too. 3

4 Licensing and Maintenance Impact on TCO Our research indicates that licensing has only a marginal impact on TCO, over five years of ownership. While license fees can be front and center during a software investment decision, over time maintenance, services, and operations expenses outpace license expense, even when discounted to present value. For some large deployments, expected services fees related to deployments are less than expected services fees related to competitive product deployments by an amount equal to or greater than s license fee. Recommendations When making IAM investment decisions: 1. Conduct a quantitative analysis of expected TCO, and think like a CFO. 2. Choose the least complex product and deployment plan. 3. Focus less on licensing and more on services and operations costs. 4. Don t be lured into switching IAM products based on license fees alone calculate TCO changes and make a quantitative decision. 4

5 THE IMPACT OF TCO IN IAM INVESTMENT DECISIONS Total Cost of Ownership (TCO) is back as a favored tool for IT investment decision making due to budget pressures across all industries. In order to determine if TCO is a viable differentiator on which to make investment decisions in the Identity and Access Management (IAM) space, Rencana conducted a multi-country, cross-industry study to compare TCO for products from different vendors. The Rencana IAM TCO study was conducted in August and September of During this time, Rencana solicited responses from nearly 50 systems integrators and IAM product customers in the United States and Europe. In order to collect adequate responses to guarded financial information, we guaranteed our respondents anonymity and confidentiality. We designed and executed a survey and interviewed respondents. This process provided our team with a set of quantitative and qualitative data that enabled us to analyze a cross-section of worldwide IAM experts and their experiences. This document describes our methodology, details key findings, and highlights certain key quotations used by our respondents to further describe their experiences with certain, Oracle, IBM, CA, and Courion IAM identity and access management products. ANALYSIS METHODOLOGY We conducted primary research by surveying and interviewing nearly 50 leading regional, national, and global systems integrators and IAM product customers of five different vendors (, Oracle, CA, IBM, and Courion) each with businesses of various scopes in the United States and Europe. Our primary research consisted of a survey containing a set of over 75 questions for each product / vendor combination and of follow-up and stand-alone interviews to validate and supplement data collected. Due to the sensitivity and variable nature of product pricing and other proprietary information, most data are averaged and reported in aggregate to obscure their source. The scope of our study considers traditional identity management and access management products hosted on-premise (rather than Software-as-a-Service) and installed and configured by the purchasing company or by the product purchaser s hired consultants. Our total cost of ownership (TCO) model is based on our experience with approximately 100 IAM projects across multiple industries in multiple countries. In order to highlight differences between products, we have eliminated certain TCO elements for which costs vary slightly between products. For example, the cost of general networking equipment has not been evaluated due its marginal impact on the cost difference between IAM products, since each of the products deployments will require a similar amount and configuration of general networking equipment. In comparing our IAM TCO model with that of models created by Gartner 1 and Forrester 2, we find that our model considers at least as many differentiating elements as those analysts models and is overall well customized to the IAM User Provisioning and Web Access Management product markets. 1 Gartner is a trademark of Gartner, Inc. Opinion based on publicly available information. 2 Forrester is a trademark of Forrester Research, Inc. Opinion based on publicly available information. 5

6 In order to standardize responses as much as possible, we produced three scenarios which respondents were able to reference. These scenarios hypothetically describe common IT environments at a medium size organization (2,500+ managed users), a large organization (7,500+ users), and a massive organization (40,000+ users). Each scenario is described in detail in Appendix 1. Our IAM TCO model considers key elements of cost, such as: Licensing Maintenance / product support Hardware External services from professional services firms, contractors, and vendor engineers Number of administrators and their salaries Training for administrators and end users Scheduled and unscheduled downtime Cost and frequency of upgrades Audit report generation We normalized all supplied data to hours and to United States Dollars (USD). Thus, if we were provided information in days or weeks, we converted the data at eight hours per day, five days per week. When provided data in Euros, we converted Euros to USD at 1.3! to the USD, which is a reasonable average euro-dollar exchange rate for All recurring costs were annualized and considered over a five-year term. We did not grow or inflate any recurring costs such as salaries or maintenance agreement payments. We did use the present value of all future payments /costs using a discount schedule for each organization size we considered: Medium Large Massive Discount Rate 12% 8% 6% The discount rate varies by the average cost of capital for a typical firm of a certain size. We assume that massive organizations have a lower cost of capital than smaller organizations due to their perceived stability and better access to capital. However, organizations discounts may be different, and it may therefore impact the total cost of ownership. However, we do not believe that using a different discount rate would significantly impact percentage differences in TCO by component (as shown in our analyses), since we use average and constant discount rates throughout our analyses. FINDINGS AND KEY STATISTICS Our team set out to analyze the IAM provisioning and web access management software market from the perspective of a financially concerned information technology manager. First, we established the total cost of ownership (TCO) model and our starting hypothesis. We initially assumed minor variability in the compared IAM products total cost of ownership. We began our analysis by asking the question: 6

7 Which IAM products have the lowest total cost of ownership? To answer this question, we had to answer three basic questions: 1. Do differences in licensing and maintenance expenses impact TCO? 2. Do differences in product integration and configuration service expenses impact TCO? 3. Do differences in operations and support expenses impact TCO? We executed primary research (see Analysis Methodology) and aggregated collected data from customers and systems integrators using Rencana s IAM TCO model. Our model calculates the present value of each answer to create a total cost of ownership for accurate comparison of each vendor s provisioning and web access management products over the course of five years. Findings by Customer Segment Our analysis finds that Identity Manager and Access Manager products have a lower total cost of ownership than competitive products because they are easier to configure, integrate, and administer. 2,500+ Person Firm 24% more than 7,500+ Person Firm 25% more than 40,000+ Person Firm 23% more than 0% 20% 40% 60% 80% 100% 120% 140% Competitive Set Figure 1 Total cost of ownership of IAM products compared by vendor and by size of organization Figure 1 indicates a significant difference in the total cost of ownership between and other vendors considered. To better understand the components and drivers of these results, we will analyze each data set by organization size, since that will be of the greatest use to most readers. 7

8 Massive Enterprises For massive enterprises those companies with global and complex IT operations and over 40,000 system users our research shows the total cost of ownership of s IAM product set to be substantially lower (approximately 24%) than competitive products. TCO 24% < Competitive Set Average % more (less) than Oracle (1%) 69% 3% 19% 54% 104% 457% Average % more (less) than 14% 56% (30%) 6% 39% 170% 458% Licensing & Maintenance Services Hardware Administrator Salaries & Training Downtime Patches & Upgrades Audit Reporting Figure 2 Total Cost of Ownership for Provisioning and Web Access Management Products Massive Enterprises Figure 2 shows that while there is some difference in licensing fees between competitive products, the largest driver of the difference in total cost of ownership for IAM products is professional services and contractors. In this graphic, we see that, over five years, customers and systems integrators report that Oracle, CA, IBM, and Courion customers spend an average of approximately 56% more on configuration and integration services than customers. One interviewee commented that, With [Identity Manager], we can configure over 90% of our drivers without any programming support; we just have a team of business analysts and one parttime programmer. The second largest differentiator is the cost of applying patches and upgrades. Customers and systems integrators tell us that, on average, non- customers spend nearly twice as much on patches, bug fixes, and upgrades as do IAM customers, over five years. During our interviews, customers told us that the products provide administrator tools for applying patches, bug fixes, and upgrades, which substantially reduces their overall administration time. We found that most survey respondents did not indicate a substantially reduced staff to operate IAM products, but that requires largely only business analysts to maintain and grow the IAM platform. This is in contrast to other products, which typically require additional programmers to update configuration details as managed target environments change. 8

9 Customers interviewed by our researchers indicate that none of the tools generally meet their total auditing and reporting needs. It is expected in large organizations that most customers will integrate their provisioning tools with access governance and recertification tools. Nevertheless, customers we spoke with indicate that and IBM have the best out-of-the-box reporting tools, which seems to be validated by their low Audit Reporting scores. Large Companies For large companies those with global and complex IT operations and over 7,500 system users our research show the total cost of ownership to be substantially lower for s products than for competitive products. TCO 25% < Competitive Set Average % more (less) than Oracle 5% 83% 118% 11% 54% 104% 457% Average % more (less) than (5%) 71% 7% 4% 39% 171% 458% Licensing & Maintenance Services Hardware Administrator Salaries & Training Downtime Patches & Upgrades Audit Reporting Figure 3 Total Cost of Ownership for Provisioning and Web Access Management Products Large Companies Large companies find similar TCO benefits from IAM as those of massive enterprises. Figure 3 shows that the difference in licensing fees between competitive products is negligible, on average, and thus the largest driver of the difference in total cost of ownership for IAM products is professional services and contractors. For large companies, we find that, over five years, customers and systems integrators report that customers spend approximately 71% less on configuration and integration services than customers of competitors. This substantial difference is confirmed by systems integrators, one of whom states, When we integrate, we look better. It is easier, since you don t need deep Java expertise like with other products. He continues, Yes, is less integration hours than other products by 20%. Another customer reports, With [Identity Manager], we can configure over 90% of our drivers without any programming support; we just have a team of business analysts and one part-time programmer. 9

10 The second largest differentiator is again the cost of applying patches and upgrades. customers and systems integrators tell us that, on average, large company customers also spend nearly half as much on patches, bug fixes, and upgrades, over five years. During our interviews, customers told us that the products provide administrator tools for applying patches, bug fixes, and upgrades, which substantially reduces their overall administration time. Customers interviewed by our researchers indicate that some of the tools meet their auditing and reporting needs. Unlike massive enterprises, most large company customers will integrate provisioning tools with access governance and recertification tools. Many large company customers we spoke with indicate that and IBM have the best out-of-the-box reporting tools, which was a substantial differentiator for them in their purchasing decision. The benefits of these tools seems to be borne out by the reported auditing and reporting expense that is 75% lower for customers than for Oracle, CA, IBM, or Courion IAM customers. Medium Companies For medium companies those with slightly less complex IT operations and over 2,500 system users our research show the total cost of ownership to be substantially lower for s products than for competitive products. TCO 23% < Competitive Set Average % more (less) than Oracle 21% 33% 2% 46% 2% 10% 457% Average % more (less) than 8% 38% (50%) 3% 39% 171% 458% Licensing & Maintenance Services Hardware Administrator Salaries & Training Downtime Patches & Upgrades Audit Reporting Figure 4 Total Cost of Ownership for Provisioning and Web Access Management Products Medium Companies Medium companies find slightly different cost drivers than those of massive enterprises or large companies. Figure 4 shows that the difference in licensing fees between competitive products is negligible, on average, and thus the largest driver of the difference in total cost of ownership for IAM products is operations costs. Medium company respondents reported 27% lower operations costs for IAM products versus competitive products. During our interviews, customers told 10

11 us that the products provide administrator tools for applying patches, bug fixes, and upgrades, which substantially reduces their overall administration time. Also, for this set of customers, differences in time required for administration have a more significant impact as a percentage of total cost. Secondly, non- customers and systems integrators report 38% higher services costs over five years. In general, medium companies report relatively less savings on services fees with (relative to larger organizations). It seems likely that medium company uses a higher percentage of procured services to configure basic services than does a larger organization, which likely uses more of its procured services on customization. The Impact of License Fees on TCO At the outset of our research we specifically asked the question, do differences in licensing and maintenance expenses impact total cost of ownership [of leading IAM products]? Our research and subsequent analysis provides an answer: Yes, but these costs are not as significant to the total cost of ownership as other costs. For large deployments (more than 30 applications integrated), initial costs such as licensing become irrelevant in determining the lowest TCO. This finding is compelling because we know that some software sales teams are competing on licensing price, which begs the question, if a sales team is offering their product for a $0 license, is that a significant enough discount to warrant buying from them? Our analysis shows that it is not. 11

12 We compared the lowest TCO product set with the competitive set. We analyzed the TCO of the competitive set with a $0 license fee (but all other factors remaining the same as in our earlier analysis) compared to IAM with a license fee (and all other factors remaining the same). For a massive enterprise, the TCO nears parity between the product vendors. Excess TCO with License Fees License Fee Average % more (less) than 4% 69% 3% 19% 54% 104% 457% (9%) Oracle without License Fees (100%) Average % more (less) than 56% (30%) 6% 39% 170% 458% 6% (100%) Competitive Set Average without License Fees (Oracle, CA, IBM, Courion) Services Hardware Administrator Salaries & Training Downtime Patches & Upgrades Audit Reporting Maintenance License Figure 5 The impact of $0 license fees on IAM TCO for massive enterprises The key take away from this analysis is that license cost, even if it is $0, is not significant enough to the total cost of ownership to use it as the single factor in making a product purchase decision. This analysis assumes approximately 10 common applications (AD, PeopleSoft HR, SAP ERP, etc.) will be integrated into the IAM architecture. An organization planning to integrate more applications should expected savings from $0 licensed software to be greater (than 4%); if the organization plans to integrate fewer than 10 applications, its expected savings from $0 licensed software will be less. Thus, for massive organizations that are expecting to integrate less than 10 applications into their IAM environment, TCO matters little; choose the product suite with the best feature set for your environment. However, if you intend to integrate 10 or more applications, then our analysis indicates s suite has a lower TCO than its competitors. 12

13 For large and medium companies, the impact of $0 software licenses is more pronounced. Excess TCO with License Fee License Fee Average % more (less) than <- 17% -> 83% 118% 11% 54% 104% 457% 1% (100%) Oracle without License Fee Average % more (less) than 71%) 7% 4% 39% 171% 458% (7%) Competitive Set Average without License Fee (Oracle, CA, IBM, Courion) (100%) Services Hardware Administrator Salaries & Training Downtime Patches & Upgrades Audit Reporting Maintenance License Figure 6 The impact of $0 license fees on IAM TCO for large companies 13

14 Excess TCO with License Fees License Fee Average % more (less) than <- 22% -> 33% 2% 46% 2% 10% 457% 24% Oracle without License Fees (100%) Average % more (less) than 38% (50%) (3%) 39% 171% 458% 11% Competitive Set Average without License Fees (Oracle, CA, IBM, Courion) (100%) Services Hardware Administrator Salaries & Training Downtime Patches & Upgrades Audit Reporting Maintenance License Figure 7 The impact of $0 license fees on IAM TCO for medium companies Large and medium organizations looking to lower their TCO below s expected TCO with a competitive product should expect to receive a $0 IAM software license and substantially conduct their own integration in order to lower expected TCO to be less than expected TCO with (with an average license fee and average services contract). Ongoing Application Integrations Organizations planning to integrate a substantial number of applications into their user provisioning environments should pay particular attention to the discrete cost of application integration for out-of-the-box and custom application integrations. Our analysis indicates that integrating applications is a differentiating factor of TCO between software vendor s user provisioning products. We analyzed two scenarios: 1) the cost of integrating 30 additional applications to an existing user provisioning environment, and 2) the cost of integrating 90 additional applications to an existing user provisioning environment. 14

15 The cost difference in integrating 30 additional applications to an existing user provisioning environment can be significant between vendors products. Our scenario assumes that of the 30 integrated applications, 20 use vendors out-of-the-box connectors, and 10 use custom developed connectors. TCO Savings per 30 Applications ~ $17,500 per connector ~ $21,000 per connector Average % more (less) than 46% more <- (Hundreds of Thousands of $) -> Oracle ~ $26,650 per connector ~ $28,450 pre connector Average % more (less) than ~ $27,100 per connector ~ $ 29,300 per connector 20 Out-of-the-Box Connectors 10 Custom Connectors Figure 8 Average OOTB and custom connector integration costs by vendor, with professional services In this case, we find that there is a significant difference between the average costs of integrating an application using an out-of-the-box connector ($17,500 per connector for vs. ~$27,100 for competitors). Multiplied over 20 applications, the savings provide are substantial. While custom connectors also appear to enjoy a similar cost advantage, some interview respondents noted frustration with custom connectors in general. One interviewee thought that s custom connector effort would be similar to IBM or Oracle, indicating that the level of technical expertise required is fairly high across all the products researched. 15

16 Many clients have over the years indicated their intention to manage tens or hundreds of applications through integration with an IAM environment. In that scenario, using the cost-perapplication integration approach, we find the difference in TCO represents hundreds of thousands of dollars. TCO Savings with 90 Integrated Applications Average % more (less) than 34% more <- (Hundreds of Thousands of $) -> Oracle (1%) 69% 3% 19% 54% 104% 457% 42% Average % more (less) than 14% 56% (30%) 6% 39% 170% 458% 46% Licensing & Maintenance Services Hardware Administrator Salaries & Training Downtime Patches & Upgrades Audit Reporting 90 More Connectors Figure 9 TCO of different vendors after integrating 100 applications According to our analysis, customers who hire professional services to integrate 90 or more applications for provisioning have a TCO less than competitive set customers by an amount equal to licensing and five years maintenance. This point again reinforces our finding that services are the number one driver of total cost of ownership. 16

17 Vendor / Product Switching Costs Does it ever make sense to switch from one IAM vendor to another? Not if the organization has already implemented the software. We considered eight scenarios under which an organization might consider switching products. Based on this analysis, it generally does not make sense to switch products after having purchased one of them. However, if your organization plans to integrate more than 30 applications into its IAM environment, and you have not yet started with the deployment, then it does make sense to consider the impact of a switch to. Those customers who own a non- IAM product, have not yet integrated it with their IT environment, and decide to switch should expect to a lower TCO after the 32 nd application integration. It is important to note that our analysis assumes the organization will complete these integrations within two years of switching. The longer the integration time, the more applications are required to reduce TCO via switching. Other Key Statistics See Appendix 2 Key Data for data behind calculations: out-of-the-box provisioning connectors require up to 75% less systems integrator time to deploy than competitive products. custom provisioning connectors require up to 30% less systems integrator time to deploy than competitive products. averages 20%+ less systems integration fees for a comparable provisioning project at companies of all sizes. IAM products require an average of 81% less time to generate required audit reports. IAM products experience an average of 55% less downtime. IAM products require a team of business analysts rather than a team of developers to operate and maintain (little direct cost savings, but big qualitative difference). Recommendations It is commonly thought that services are a primary driver of total cost of ownership for IAM software. However, it is not common to think of software license as potentially irrelevant to the TCO buying decision. By building a comprehensive TCO model, we can analyze the true cost components of IAM and evaluate differences between market options. Our recommendations for those attempting to make a financially rational decision are: 17

18 1. Total cost of ownership can vary significantly between leading products. Don t assume all leading products will produce the same result. Evaluate your options and think like a CFO. 2. Ease of integration is the most significant factor in differentiating TCO between product vendors and is realized initially via your consultants and going forward via your team s ability to continue integrating a large portion of your organization s critical applications. Simpler is better. 3. Focus less on licensing and maintenance costs and more on services and operations costs. It s easy to focus on concrete items like licensing because it is typically a defined figure that is charged as a single fee. However, managing services scope and planning IAM operations in advance of the deployment can significantly reduce TCO. 4. The present value of five years product maintenance and operations are, on average, significantly greater than initial license expenses; don t be lured into switching products based on an offer of a lower license expense alone. TCO can be more substantially reduced by choosing a vendor with a lower total services expense than one with lower licensing or maintenance costs. 18

19 APPENDIX 1 - SCENARIOS We presented these hypothetical company scenarios to survey and interview respondents to ensure consistency. However, when discussing actual customer deployments for specific company operations, we discussed real company experiences in real IT environments. Scenario 1: A Massive organization with over 40,000 staff, global operations, and very complex IT operations with significant dedicated IT staff. These organizations are often Global 1000 companies or state, provincial, or federal governments in the U.S. or Europe. IT Environment Type Specific Instance ERP SAP Financials HR SAP HR Directory Microsoft Active Directory Lotus Notes Database Oracle 10g, DB2 Mainframe RACF, zos Help Desk Remedy CRM Siebel Platforms Windows & Unix Business Processes User On-boarding User termination Request system access Request access removal Access Recertification Report generation Scenario 2: A Large organization with over 7,500 staff, national or global operations, and complex IT operations with dedicated IT staff. IT Environment Type Specific Instance ERP SAP Financials HR PeopleSoft Directory Microsoft Active Directory Microsoft Exchange Database Oracle 10g Mainframe - Help Desk Remedy CRM Salesforce Platforms Windows & Unix Business Processes User On-boarding User termination Request system access Request access removal Access Recertification 19

20 Report generation Scenario 3: A Medium organization with over 2,500 staff, regional, national, or global operations, and a more straightforward IT environment and a dedicated IT staff. IT Environment Type Specific Instance ERP Microsoft Navision HR PeopleSoft Directory Microsoft Active Directory Microsoft Exchange Database Microsoft SQL Server Mainframe - Help Desk Numara CRM Salesforce Platforms Windows Business Processes User On-boarding User termination Request system access Request access removal Access Recertification Report generation APPENDIX 2 KEY DATA Key data are presented via a summary view of Rencana s IAM TCO model. Each entry in the model is an aggregate representation of the average of each survey response and interview. Data were gathered, normalized, added to the model. Each cell of the model contains an average function in order to reduce errors and to make each response anonymous. The summary view presented sums the responses specific to user provisioning products and web access management products, which were analyzed individually. At the time of publication, Courion does not sell a web access management product, and thus data and calculations related to Courion are representative of the user-provisioning product only. Our reported statistics and model take this data into account explicitly removing only the web access management portion from the competitive set average. Seats Discount Rate Entry Server Mid Server High Server Admin $ End User $ Massive 40,000 6% $ 1,000 $ 2,900 $ 8,500 $ 40 $ 25 Large 7,500 8% $ 1,000 $ 2,800 $ 6,500 $ 40 $ 27 Medium 2,500 12% $ 1,000 $ 2,700 $ 5,500 $ 40 $ 30 *Note: When appropriate, Euros have been converted to US Dollars at 1.30 Euros to the USD Figure 10 Data common throughout model Admin and End User rates are per hour Server rates are per server of specified type Seats and discount rate are specific to the size of the organization 20