CA / Broadcom Identity

Overview

CA SiteMinder (now CA / Broadcom Identity) was one of the original web access management products and remains deployed across many large enterprises and government agencies. Broadcom acquired CA Technologies in 2018, and its model for acquired software is to maximize value from large existing accounts rather than chase new category growth. Treat this as a maintain-do-not-extend platform: stable for what it runs today, not a forward investment.

What it is good at

SiteMinder is battle-tested at scale for web SSO, policy-based access, and federation in front of legacy web applications, the kind of deployments that have run reliably for fifteen-plus years. The directory and access-management components handle high-volume authentication for established estates, and existing customers benefit from a known, stable footprint that does not require re-architecture.

Where it falls short

Innovation has effectively paused under Broadcom. The developer experience is dated, modern protocols and cloud-native patterns are not the priority, and Broadcom's commercial approach has frustrated mid-size customers with steep renewal terms. There is little reason to select it for anything new, and migration off it is a common project rather than expansion onto it.

Pricing

Quote-based and negotiated through Broadcom's enterprise licensing, which is known for favoring large accounts. Transparency is low. Model renewal and migration cost realistically with our TCO calculator.

Best for, and who should look elsewhere

It fits exactly one case: keeping existing SiteMinder deployments running while you plan a transition. For any new IAM purchase, look to Okta, Microsoft Entra, or Ping Identity.

Bottom line

A legacy access-management platform to maintain and eventually migrate off, not a candidate for new deployments.