SaaS unification of NetIQ capabilities
Identity lifecycle, federation, MFA, and governance unified into one SaaS surface. Programs running standalone NetIQ products get the unification benefit.
OpenText • Identity and access management
OpenText NetIQ Identity Foundation (formerly OpenText Core Identity Foundation) is the SaaS IAM bundle for cloud-first programs ready to leave NetIQ on-prem behind. It unifies identity lifecycle, federation, MFA, and governance into one SaaS surface, with the modernization path from legacy NetIQ deployments designed in.
Programs modernizing off NetIQ on-prem onto SaaS IAM do it through Merito, with capability-area sequencing (federation first, MFA next, lifecycle and governance last) and cloud-native operating-model redesign so the migration moves the program forward rather than copying old patterns into SaaS.
What it is
NetIQ Identity Foundation is the SaaS IAM bundle inside the OpenText IAM line. It unifies the capabilities the standalone NetIQ products (Identity Manager, Access Manager, Identity Governance, Advanced Authentication) cover into one SaaS-first surface for cloud-native programs. Customers running standalone NetIQ products on-premises modernize onto NetIQ Identity Foundation when constraints relax; net-new programs adopt NetIQ Identity Foundation directly as the SaaS-shaped option.
The strategic SaaS direction is the load-bearing positioning. NetIQ products remain the on-prem and hybrid backbone for regulated programs that cannot adopt SaaS IAM, but OpenText's strategic IAM direction is SaaS-first through NetIQ Identity Foundation. Programs picking NetIQ Identity Foundation are picking the cloud-native modernization path; programs picking standalone NetIQ products are picking the regulated and on-prem operational shape. Both paths are valid and Merito designs the right one per program.
Modernization off legacy NetIQ on-prem is the most common engagement. Programs running NetIQ Identity Manager for provisioning, NetIQ Access Manager for SSO, NetIQ Privileged Account Manager for PAM, and NetIQ Identity Governance for access reviews on-premises typically end up with multiple operating models, multiple integration patterns, and substantial run cost. NetIQ Identity Foundation unifies the capabilities in SaaS. The move is a chance to refresh provisioning patterns, federation policy and governance cadence, not just to swap one license for another.
NetIQ Identity Foundation programs go wrong when the SaaS migration is run like the original on-prem deployment. The on-prem NetIQ model assumes deep customization and custom connector authoring, while NetIQ Identity Foundation assumes more standardized integration and SaaS-shaped operations. Programs that lift-and-shift the on-prem operating model into SaaS get NetIQ-shaped operations rather than NetIQ Identity Foundation-shaped operations. Merito's engagement redesigns the operating model rather than copying it.
Ideal use cases
What it is best at
Identity lifecycle, federation, MFA, and governance unified into one SaaS surface. Programs running standalone NetIQ products get the unification benefit.
Legacy NetIQ Identity Manager, Access Manager, Identity Governance, Advanced Authentication migrate to NetIQ Identity Foundation as the strategic OpenText SaaS direction.
No on-prem IAM tax. Programs cut over from NetIQ on-prem to SaaS-shaped operations with continuous integration and standardized patterns.
FedRAMP-aligned editions where applicable, SOC 2 Type II, ISO 27001 + 27017 + 27018, HIPAA-aligned design.
Programs running NetIQ Identity Foundation in SaaS plus on-prem NetIQ for regulated workloads get one identity policy across both deployment shapes.
Core capabilities
What NetIQ Identity Foundation actually delivers as a SaaS-unified bundle.
SaaS identity lifecycle
Cloud-native joiner-mover-leaver provisioning with HR-system integration.
SaaS federation and SSO
SaaS-deployed SSO and federation across SAML, OAuth, OIDC.
SaaS MFA and adaptive authentication
FIDO2, passwordless, and risk-based MFA in the SaaS bundle.
SaaS access reviews
Cloud-native access-review cadence with audit-evidence packaging.
How NetIQ on-prem programs migrate to NetIQ Identity Foundation.
NetIQ Identity Manager modernization
Provisioning patterns, role models, and HR-driven flows migrated to SaaS.
NetIQ Access Manager modernization
Federation policy and SSO flows migrated to SaaS.
NetIQ Identity Governance modernization
Access-review cadence and SOD policy migrated to SaaS.
Hybrid co-existence
Programs running mixed SaaS and on-prem deployments share identity policy across both shapes.
NetIQ Identity Foundation inside the cloud-native operating model.
OpenText Cybersecurity catalog integration
Connects in SaaS to Threat Detection and Response, Voltage Data Security Platform and Fortify on Demand.
Cloud-native log and audit
Continuous audit logging and compliance evidence integrated with cloud SIEM.
Compliance reporting
Access, review and authentication records packaged for SOC 2, FedRAMP, HIPAA, PCI DSS and ISO 27001 audits.
Multi-tenant cloud operations
Cloud-native scaling and operational simplicity compared to on-prem NetIQ deployments.
Where it fits in the stack
Deployment and implementation
Licensing and packaging
NetIQ Identity Foundation commercial
SaaS-unified IAM bundle with identity lifecycle, federation, MFA, and governance.
Best for: Programs modernizing off legacy NetIQ or starting net-new SaaS IAM.
NetIQ Identity Foundation Government Cloud (FedRAMP)
FedRAMP-authorized edition for federal customers and federal contractors.
Best for: Federal IAM programs requiring FedRAMP-authorized SaaS.
Merito services
Pick the engagement that matches where you are in the lifecycle.
Tenant setup, modernization from legacy NetIQ, capability-area sequencing, cloud-native operating-model design.
Explore serviceNetIQ on-prem to NetIQ Identity Foundation modernization including policy and connector transfer.
Explore serviceIAM program scoping for NetIQ Identity Foundation alongside Okta, Microsoft Entra, SailPoint, and Saviynt.
Explore serviceApplication SSO integration, identity automation, and cloud-native operating-model setup.
Explore serviceNamed engineer, priority SLAs, and release-time coverage for NetIQ Identity Foundation.
Explore serviceLong-term run support including hybrid bridge maintenance, modernization-sequence operation, and IAM program evolution.
Explore serviceModernization-from-NetIQ workshops and SaaS operating-model training for identity architects, IAM operators and compliance teams.
Explore serviceIdentity engineers with NetIQ and SaaS IAM experience, placed on your team through each capability-area migration.
Explore serviceOpenText NetIQ Identity Foundation licensing
NetIQ Identity Foundation pricing arrives with tenant setup, NetIQ-to-Core-Identity-Foundation modernization, capability-area sequencing, and cloud-native operating-model design that move the program forward rather than recreate on-prem NetIQ patterns inside SaaS.
Merito point of view
NetIQ Identity Foundation is the right answer for programs ready to leave NetIQ on-prem and for programs consolidating onto the OpenText SaaS catalog, and Merito has scoped modernizations that ended there. Standalone NetIQ stays the right answer for regulated programs facing data sovereignty, on-prem operating constraints or air-gap requirements. The constraints actually in effect decide between the two.
NetIQ Identity Foundation suits programs ready to modernize off NetIQ on-prem, programs consolidating on the OpenText catalog, and new SaaS IAM programs that need a regulated compliance posture. Greenfield cloud-native programs with no OpenText footprint are usually better served by Okta or Microsoft Entra. Regulated programs that cannot adopt SaaS IAM stay on standalone NetIQ products. Scoping puts each of these alternatives on the table.
The order in which capability areas move decides how the modernization goes. Programs that try to migrate identity lifecycle, federation, MFA, and governance from NetIQ on-prem to NetIQ Identity Foundation in one step typically struggle. The cleaner shape is to sequence the work, with federation first (because cloud-app SSO is the lowest-friction migration), MFA and adaptive authentication next, identity lifecycle third, governance fourth. Each step ships value, and the program does not stall on the last one.
What buyers usually underestimate
Related from Merito
Related solutions
Related services
Related products
Frequently Asked Questions
Consultation request
Tell us which NetIQ products you run on-prem, when you want to modernize, and whether any workloads have to stay on-prem. A Merito OpenText specialist follows up within one business day.
SaaS unification
Identity lifecycle, federation, MFA, and governance unified in one SaaS bundle.
Modernization path
Designed-in migration from standalone NetIQ products to SaaS-unified NetIQ Identity Foundation.
Next step
A Merito NetIQ Identity Foundation engagement starts with capability-area sequencing and cloud-native operating-model design. Lift-and-shift migrations leave most of the SaaS unification value on the table.