OpenText NetIQ

What is OpenText NetIQ?

OpenText NetIQ (formerly Micro Focus NetIQ) is an Identity and Access Management (IAM) platform - a comprehensive solution for managing identities, access, and permissions in an organization. From SSO through MFA to governance and PAM.

Main components:

• Access Manager - Single Sign-On, federation, web access
• Identity Governance - access certification, compliance, SoD
• Privileged Access Manager - admin account control
• Advanced Authentication - MFA, biometrics, adaptive
• Identity Manager - provisioning, lifecycle

What problem does it solve?

flowchart LR
    subgraph Without IAM
        A[User remembers 20 passwords] --> B[Passwords on sticky notes]
        B --> C[No MFA]
        C --> D[Breach]
    end

    subgraph With NetIQ
        E[Single SSO login] --> F[MFA everywhere]
        F --> G[Governance]
        G --> H[Security]
    end

    style A fill:#dc2626,stroke:#b91c1c,color:#fff
    style B fill:#dc2626,stroke:#b91c1c,color:#fff
    style C fill:#dc2626,stroke:#b91c1c,color:#fff
    style D fill:#dc2626,stroke:#b91c1c,color:#fff
    style E fill:#22c55e,stroke:#16a34a,color:#fff
    style F fill:#22c55e,stroke:#16a34a,color:#fff
    style G fill:#22c55e,stroke:#16a34a,color:#fff
    style H fill:#22c55e,stroke:#16a34a,color:#fff

Common problems:

• Users have dozens of accounts and passwords
• No central SSO - each application separately
• MFA only selectively or not at all
• Audit: “Who has access to what?” - no answer
• Privileged accounts without control

NetIQ Components

Architecture

flowchart TD
    A[User] --> B[Access Manager]
    B --> C{Authentication}
    C --> D[Advanced Authentication]
    D --> E[MFA Challenge]
    E --> F{Authorized?}
    F -->|Yes| G[Applications]
    F -->|No| H[Denied]

    I[Identity Manager] --> J[Provisioning]
    J --> G

    K[Identity Governance] --> L[Certification]
    L --> M[Access Reviews]

    style A fill:#6366f1,stroke:#4f46e5,color:#fff
    style B fill:#8b5cf6,stroke:#7c3aed,color:#fff
    style D fill:#f59e0b,stroke:#d97706,color:#fff
    style F fill:#f59e0b,stroke:#d97706,color:#fff
    style G fill:#22c55e,stroke:#16a34a,color:#fff
    style H fill:#dc2626,stroke:#b91c1c,color:#fff

Access Manager - SSO

Single Sign-On for all applications:

Protocol	Use case
SAML 2.0	Enterprise apps, cloud SaaS
OAuth 2.0	API authorization
OpenID Connect	Modern web/mobile apps
Kerberos	Windows domain apps
Header-based	Legacy web apps

flowchart LR
    A[User] --> B[Access Manager]
    B --> C[App 1 - SAML]
    B --> D[App 2 - OIDC]
    B --> E[App 3 - Header]
    B --> F[API - OAuth]

    style A fill:#6366f1,stroke:#4f46e5,color:#fff
    style B fill:#f59e0b,stroke:#d97706,color:#fff
    style C fill:#22c55e,stroke:#16a34a,color:#fff
    style D fill:#22c55e,stroke:#16a34a,color:#fff
    style E fill:#22c55e,stroke:#16a34a,color:#fff
    style F fill:#22c55e,stroke:#16a34a,color:#fff

Advanced Authentication - MFA

Authentication methods:

Who is it for?

NetIQ vs competition

Aspect	NetIQ	Okta	Microsoft Entra	Ping Identity
SSO	Yes	Yes	Yes	Yes
MFA	Advanced Auth	Yes	Yes	Yes
IGA	Identity Governance	Add-on	Basic	No
PAM	Yes	No	No	No
On-prem	Yes	No	Limited	Yes
Legacy apps	Header-based	Limited	Limited	Yes
Price	Competitive	Premium	M365 included	Premium

NetIQ advantage:

• Complete IAM portfolio in one place
• On-premises option for regulated industries
• Header-based SSO for legacy apps
• PAM integrated with IAM

Specifications

Parameter	Value
Deployment	On-premises, SaaS, Hybrid
Directory	AD, LDAP, eDirectory, Azure AD
Protocols	SAML, OAuth, OIDC, Kerberos, RADIUS
MFA methods	TOTP, Push, SMS, Biometrics, FIDO2
Connectors	200+ out-of-box
Compliance	SOX, HIPAA, PCI DSS, GDPR

FAQ

How does it differ from Azure AD? Azure AD is cloud-native IAM for Microsoft ecosystem. NetIQ is enterprise IAM for hybrid environments with strong support for legacy apps and on-prem.

Can I use only MFA? Yes. Advanced Authentication can work standalone or with Access Manager.

How does it work with Active Directory? NetIQ integrates with AD as a directory. Can extend AD with SSO, MFA, governance without replacement.

What about legacy applications? Access Manager supports header-based SSO for applications that don’t support SAML/OIDC natively.

How long does implementation take? Basic SSO: 2-4 weeks. Full IAM with governance: 3-6 months.

Does nFlo implement NetIQ? Yes. Access Manager, Advanced Authentication, Identity Governance deployments, application integrations.