NetIQ Identity Manager lineage
Two decades of regulated-IAM deployment. Established case law in financial services, government, and Fortune 500 identity programs.
OpenText • Identity and access management
OpenText Identity Manager
OpenText Identity Manager carries the NetIQ Identity Manager lineage with identity lifecycle, provisioning, and synchronization across enterprise stores including HR systems, designed for regulated programs that need deep HR-driven identity flows the cloud-only IAM products cannot match.
Through Merito, Identity Manager gets wired up with HR-driven provisioning across Workday, SuccessFactors, or Oracle HCM, role models designed for the actual organization, and target-system connectors deployed across AD, NetIQ eDirectory, SAP, Oracle, mainframe, and the long tail of enterprise applications.
- Best for
- IAM leaders running joiner-mover-leaver lifecycle flows, Identity architects integrating HR-driven provisioning, Compliance leaders requiring regulated identity lifecycle evidence
- Hosting
- Hybrid
- Time to value
- First HR-to-AD provisioning flow live in four to eight weeks. Heterogeneous target-system synchronization in eight to sixteen weeks. Enterprise rollout typically runs six to eighteen months.
- Security posture
- GDPR, HIPAA-aligned design, PCI DSS-aligned design
- Last reviewed
- 2026-04-26
What it is
OpenText Identity Manager in the enterprise stack
OpenText Identity Manager carries the NetIQ Identity Manager lineage. Identity Manager is the lifecycle and provisioning engine inside the OpenText IAM line, handling joiner-mover-leaver flows, HR-system integration (Workday, SuccessFactors, Oracle HCM, internal HRIS), and provisioning into downstream target systems (AD, LDAP, NetIQ eDirectory, SAP, Oracle, ServiceNow, hundreds of others). NetIQ has been doing this in regulated environments for two decades, and the connector library covers the long tail.
HR-driven provisioning is the load-bearing capability for enterprise IAM. Programs with mature HR systems get joiner-mover-leaver lifecycle flows that originate in the HR system and provision through to target applications automatically: a new hire in Workday provisions an AD account, an Office 365 license, a Salesforce role, and the appropriate department-specific access. A termination in Workday flows through to deprovisioning across the same target systems. Cloud-only IAM products often skip the HR-system integration depth, forcing the program to bolt provisioning together.
Connector breadth is the second strength. NetIQ Identity Manager has hundreds of pre-built connectors covering AD, Azure AD/Entra ID, NetIQ eDirectory, SAP, Oracle EBS, PeopleSoft, ServiceNow, Workday, Salesforce, mainframe, and the long tail of enterprise applications. Programs running heterogeneous landscapes get one identity engine that can reach everything; programs running cloud-only IAM end up with provisioning gaps in the systems the cloud product does not cover.
What disrupts Identity Manager adoption is treating it as a fork-and-forget product. The connector landscape evolves: target systems upgrade, HR systems get replaced, new applications get added, and Identity Manager has to keep pace. Programs that adopt the product without operational discipline find connectors out of date and provisioning flows broken. Merito's engagement designs the operating model alongside the deployment, and Managed Services run it long-term for programs that want OpenText engineering without internal headcount.
Ideal use cases
- HR-driven joiner-mover-leaver provisioning across enterprise applications
- Heterogeneous target-system provisioning (AD, LDAP, SAP, Oracle, ServiceNow, Workday)
- Regulated identity lifecycle for SOX, HIPAA, and government programs
- NetIQ Identity Manager modernization and version upgrades
- Coordinated identity lifecycle paired with NetIQ Identity Governance and PAM
What it is best at
Where OpenText Identity Manager earns its seat
HR-driven provisioning depth
Workday, SuccessFactors, Oracle HCM, and internal HRIS integration drives joiner-mover-leaver flows. Cloud-only IAM often skips HR-system depth.
Hundreds of pre-built connectors
AD, Azure AD/Entra ID, NetIQ eDirectory, SAP, Oracle EBS, PeopleSoft, ServiceNow, Salesforce, mainframe, and the long tail. Heterogeneous coverage.
Native pairing with the OpenText IAM line
Identity Governance access reviews, Access Manager SSO, Privileged Access Manager elevation. Coordinated identity operations.
Modernization path to Core Identity Foundation
Programs ready for SaaS IAM modernize toward Core Identity Foundation when constraints relax.
Core capabilities
OpenText Identity Manager capabilities, grouped by outcome
Identity lifecycle
Where Identity Manager does the joiner-mover-leaver work.
HR-driven provisioning
Workday, SuccessFactors, Oracle HCM, and internal HRIS integration drives lifecycle flows.
Joiner-mover-leaver flows
New-hire provisioning, internal moves, and termination flows automated end to end.
Role-based access control
Configurable role models with rule-driven entitlement assignment.
Self-service request workflow
User-initiated access requests with manager approval and Identity Governance review.
Connector and synchronization
Reaching the heterogeneous target landscape.
Pre-built connectors
Hundreds of connectors covering AD, Azure AD/Entra ID, NetIQ eDirectory, SAP, Oracle EBS, PeopleSoft, ServiceNow, Workday, Salesforce, and the long tail.
Synchronization engine
Bi-directional synchronization across target systems with conflict resolution policy.
Custom connector authoring
Custom connector development for proprietary applications and internal systems.
Integration and governance
Identity Manager inside the OpenText IAM line.
Identity Governance integration
Provisioning data flows into governance; reject-and-remediate flows back into provisioning.
Access Manager integration
Provisioned identities flow into Access Manager federation policy.
Privileged Access Manager integration
Privileged-account provisioning integrated with PAM vault.
Compliance reporting
Audit-ready evidence for SOX, HIPAA, PCI DSS, and regulated identity-lifecycle mandates.
Where it fits in the stack
How OpenText Identity Manager connects to the rest of your landscape
OpenText IAM line (native)
Native- OpenText Identity GovernanceProvisioning data into governance; reject-and-remediate back into provisioning.
- OpenText Access ManagerProvisioned identities into federation policy.
- OpenText Privileged Access ManagerPrivileged-account provisioning into PAM vault.
- OpenText Advanced AuthenticationMFA enrollment integrated with provisioning.
- OpenText Core Identity FoundationModernization path to SaaS IAM bundle.
HR and enterprise systems (certified)
Certified- Workday, SuccessFactors, Oracle HCM, ADPHR-driven provisioning sources.
- AD, Azure AD/Entra ID, NetIQ eDirectory, LDAPDirectory-target provisioning.
- SAP, Oracle EBS, PeopleSoft, Microsoft DynamicsERP target-system provisioning.
- ServiceNow, Salesforce, M365, Google WorkspaceSaaS target-system provisioning.
Custom integrations
Custom- Internal applications and proprietary systemsCustom connector development for non-standard targets.
- Mainframe and legacy applicationsMainframe RACF, ACF2, and legacy-application provisioning.
- Federal compliance reportingFederal-aligned identity-lifecycle compliance evidence.
Deployment and implementation
How it rolls out
- Hosting
- Hybrid (North America, EMEA, APJ)
- Implementation complexity
- High
- Typical time to value
- First HR-to-AD provisioning flow live in four to eight weeks. Heterogeneous target-system synchronization in eight to sixteen weeks. Enterprise rollout typically runs six to eighteen months.
- Prerequisites
- HR system inventory and provisioning data sources
- Target system landscape inventory
- Named identity architect and IAM owner
- Role model and entitlement policy framework
- Operating-model decision (in-house vs. partner-managed)
- What Merito usually handles
- OpenText Identity Manager runs on-prem, hybrid, or BYOC. Merito handles HR-system integration, target-system connector deployment, role model design, lifecycle policy, and operating-model design.
Licensing and packaging
How it is bought
- Model
- Subscription
- What to expect
- OpenText Identity Manager is licensed by user count, connector scope, and deployment shape (on-prem, hybrid, BYOC). Pricing depends on coverage breadth and connector landscape. Merito quotes the license alongside the lifecycle program engagement.
- Editions and modules
Identity Manager
Standard edition with HR-driven provisioning and target-system synchronization.
Best for: Regulated programs running NetIQ-shaped identity lifecycle.
Identity Manager with Identity Governance
Bundled with NetIQ Identity Governance for coordinated provisioning and governance.
Best for: Programs running coordinated identity lifecycle and governance.
- Common expansion areas
- Add Identity Governance for access reviews and SOD
- Add Access Manager for SSO and federation coverage
- Add Privileged Access Manager for privileged-account provisioning
- Add Advanced Authentication for MFA enrollment
- Plan modernization path to Core Identity Foundation when constraints relax
Merito services
How Merito helps you win with OpenText Identity Manager
Merito sells licenses and the delivery work around them. Pick the service that matches where you are in the lifecycle.
01
Identity Manager Implementation
HR-system integration, target-system connector deployment, role model design, lifecycle policy, OpenText IAM line integration.
Explore service02Upgrade and Migration
NetIQ Identity Manager version upgrades and modernization path to Core Identity Foundation.
Explore service03MAPS Assessment
Identity lifecycle program scoping for OpenText Identity Manager alongside SailPoint, Saviynt, and Microsoft Entra.
Explore service04DevOps Consulting
Provisioning automation, custom connector authoring, and lifecycle integration.
Explore service05Premium Support
Named engineer, priority SLAs, and release-time coverage for Identity Manager.
Explore service06Managed Services
Long-term partner-managed run for programs that want OpenText engineering without internal headcount.
Explore service07Training and Enablement
Role-based training for identity architects, IAM operators, and compliance teams.
Explore service08Staff Augmentation
Merito-placed identity engineers and OpenText specialists embedded on long-running programs.
Explore serviceOpenText Identity Manager licensing
License Identity Manager. Run the connector landscape long term. One partnership.
Identity Manager pricing arrives with HR-system integration, target-system connectors, role model design, lifecycle policy, and OpenText IAM line integration that keep the connector landscape current as target systems upgrade and HR systems get replaced.
Merito point of view
HR-driven provisioning depth is the NetIQ strength. Cloud-only IAM often skips it.
Merito has audited identity programs running cloud-only IAM (Okta, Microsoft Entra) that ended up bolting on provisioning for SAP, Oracle EBS, PeopleSoft, and mainframe systems because the cloud product did not cover them. NetIQ Identity Manager handles the heterogeneous target landscape natively. Programs picking OpenText Identity Manager are usually picking the HR-driven provisioning depth and the long-tail connector library, not generic identity lifecycle.
Merito recommends OpenText Identity Manager specifically for programs already running NetIQ, modernizing legacy NetIQ Identity Manager, or running heterogeneous enterprise landscapes that cloud-only IAM cannot cover. For greenfield cloud-native programs, SailPoint and Microsoft Entra are competitive. For programs running mature SailPoint deployments, the migration tradeoff goes the other way. Merito surfaces those alternatives honestly during scoping.
Connector landscape evolution is the binding operational constraint. Programs that adopt Identity Manager without sustained operational discipline find connectors out of date and provisioning flows broken. Merito designs the operating model alongside the deployment.
What buyers usually underestimate
- Picking cloud-only IAM and bolting on provisioning for systems the cloud product does not cover.
- Adopting Identity Manager without sustained operational headcount or partner support.
- Skipping role model design and authoring entitlement rules ad-hoc, generating provisioning chaos.
- Treating Identity Manager as standalone instead of pairing with Identity Governance for the closed-loop reject-and-remediate flow.
- Migrating off mature SailPoint deployments without an honest assessment of delta value.
Related from Merito
Continue exploring OpenText Identity Manager on Merito
Related solutions
Related services
Related products
- OpenText Identity GovernanceAccess reviews and SOD on Identity Manager-provisioned entitlements.
- OpenText Access ManagerSSO and federation on provisioned identities.
- OpenText Privileged Access ManagerPrivileged-account provisioning into PAM vault.
- OpenText Advanced AuthenticationMFA enrollment integrated with provisioning.
- OpenText Core Identity FoundationModernization path to SaaS IAM bundle.
- OpenText Cybersecurity (vendor portfolio)Full OpenText Cybersecurity catalog across AppSec, IAM, SecOps, Data Security, and DFIR.
Frequently Asked Questions
OpenText Identity Manager FAQs
Consultation request
Talk to Merito about OpenText Identity Manager
Share your HR-system landscape, target-system inventory, and OpenText IAM footprint. A Merito OpenText specialist follows up within one business day.
NetIQ provisioning depth
HR-driven lifecycle flows
Workday, SuccessFactors, Oracle HCM integration. Cloud-only IAM often skips HR-system depth.
Connector breadth
Heterogeneous target coverage
AD, NetIQ eDirectory, SAP, Oracle EBS, PeopleSoft, ServiceNow, Salesforce, mainframe, long tail.
Next step
HR-driven provisioning depth is the strength. Use it.
A Merito Identity Manager engagement starts with HR-system integration and role model design. Programs that bolt provisioning together across cloud-only IAM end up with gaps NetIQ does not have.