OpenText NetIQ Access Manager is the federation and web access management product in the OpenText identity line. Banks, government agencies, defense contractors and hospitals have run NetIQ for workforce identity for two decades. Access Manager covers SSO, federation (SAML, OAuth, OIDC), web access management, and modern authentication. The 2026 return of the NetIQ name changed the label on the product, not the federation engine underneath.
Federation depth is the historical strength. Access Manager supports SAML 2.0, OAuth 2.0, OpenID Connect, WS-Federation, and a long tail of federation protocols regulated environments still use. Programs running heterogeneous SSO landscapes (legacy SAML providers alongside modern OIDC, SOAP-shaped web services alongside REST APIs) get one federation layer that handles all of them. Cloud-native IAM products often skip the long-tail protocols and force the program to migrate every consumer.
On-prem and hybrid operational shape is the second strength. Programs subject to data sovereignty, regulated workforce identity, or air-gap constraints run Access Manager on-premises while consuming cloud SSO as needed for SaaS apps. Cloud-only IAM (Okta, Microsoft Entra) is competitive on cloud-native programs but does not always fit regulated environments. Programs picking Access Manager are usually picking the regulated and on-prem operational shape, not generic SSO.
Access Manager programs stall when the platform is bought as a drop-in SSO replacement. Access Manager is operationally substantial. Federation policy, integration with NetIQ Identity Manager for provisioning, integration with Privileged Access Manager for elevated access, and on-prem operational discipline all require sustained investment. Programs that adopt Access Manager without operational discipline find the platform underused. Merito's engagement designs the operating model alongside the deployment, and Managed Services run it long-term for programs that want OpenText engineering without internal headcount.
Ideal use cases
- Workforce SSO and federation across heterogeneous protocols
- Regulated workforce identity in financial services, government, defense, healthcare
- On-prem and hybrid IAM where cloud-only is ruled out
- Modern authentication (FIDO2, passwordless) on regulated workforce
- NetIQ Access Manager modernization and version upgrades