Best Identity and Access Management (IAM) Software - Page 14

Cyderes Identity & Access Management

From onboarding to off-boarding and everything in between, Cyderes is your complete identity partner spanning strategy, governance, access, and operations. Whether you need advisory expertise, implementation support, or fully managed services, we strengthen every layer of your identity ecosystem, so it's never a weak link. We unify governance, provisioning, access controls, and monitoring into a single, practical framework that aligns with your business priorities, turning identity into a driver of agility and assurance. Our approach is collaborative by design. We work the platforms you already trust, fine-tuning, integrating, and operating them to deliver stronger security, smoother user experiences, and faster results without starting from scratch.

daccord

Daito Authenticator

Daito is a specialized 2FA authentication service that manages 2FA / MFA TOTP tokens for you and thus offers a fully isolated system, separate from your password manager. Some of the features are: - Full separation of concerns (Keep your 2FA token management separate from your password management) and thus no more single points of failure in your authentication strategy. - Access from other devices & platforms (The authenticator is web-first and web-only). - No second company-sponsored device is needed (Save money and the accompanying hassle of managing company phones).

Devolutions PAM

Devolutions PAM is a privileged access management (PAM) solution that helps small and midsize businesses discover, secure, rotate, and audit privileged accounts across their infrastructure. It belongs to the privileged access management software category and is designed for IT teams, security teams, and managed service providers that need to control and monitor elevated access to critical systems without the complexity typically associated with enterprise PAM tools. Privileged accounts such as administrator, shared, and service accounts hold elevated access and are common targets for attackers and sources of insider risk. Devolutions PAM addresses this by identifying privileged accounts, securing their credentials, automating password rotation, controlling how and when they are used, and recording activity for accountability. It is delivered as part of the Privileged Access Management package and runs on a Devolutions workspace, either the cloud-hosted Devolutions Cloud or the self-hosted Devolutions Server, while integrating with Remote Desktop Manager for connection launching and Devolutions Gateway for secure tunneling. Common use cases include enforcing least-privilege and just-in-time access, eliminating standing privileges, rotating and vaulting privileged credentials, recording privileged sessions, and demonstrating compliance through audit logs. Key features and benefits include: - Discovery of privileged accounts across the environment - Automated password rotation and secure credential vaulting - Just-in-time privilege elevation and check-out approval workflows that reduce standing access - Session recording and tamper-resistant audit logs for monitoring and compliance - Granular role-based access control, allowing users to connect to resources without seeing the underlying credentials Devolutions PAM is designed to provide privileged access controls typically found in enterprise products in a form that is practical for smaller organizations to adopt and operate. Because it integrates with the broader Devolutions suite, organizations can extend from credential management into full privileged access management within a single ecosystem, moving from standing privileges toward zero-standing-privilege access under centralized governance, role-based control, and auditing.

Devora

Devora is a user impersonation (login as user) platform for SaaS teams. It lets approved support, engineering, and product staff open a customer's account to investigate an issue without the customer's password, while the company keeps its existing authentication. A teammate requests access to one customer account with a reason. An admin approves it with a read-only or read and write scope and a time limit. The customer's backend creates a short-lived credential, and Devora's SDKs hand it to the frontend once. A banner and timer mark the session inside the app, the backend guard blocks writes and sensitive endpoints, and admins can end a session or revoke approval at any time. Devora keeps a history of requests, approvals, sessions, and security events, with optional session recording that is off by default and masked when enabled. Backend SDKs cover Node.js and Python (Express, Fastify, Hono, Django, FastAPI), and frontend packages cover React, Vue, Svelte, Solid, vanilla JavaScript, and Next.js, with guides for Auth0, WorkOS, Clerk, Better Auth, and custom authentication.

Digital Workforce

Duende IdentityServer

Identity is a core element of software architecture, and too often, solutions force enterprises to choose between control and commercial readiness. You end up locked into rigid platforms or forced to sacrifice security for flexibility. Duende IdentityServer eliminates this compromise. We are a secure, standards-compliant identity infrastructure software solution, built natively for .NET by industry leaders and pioneers in security standards, including OpenID Connect, OAuth 2.0, Backend for Frontend (BFF), and FAPI. We give developers deep extensibility by design with full control over the UI, business logic, and hosting, combined with the commercial and legal clarity and predictable pricing that enterprises in highly regulated industries demand, like financial services and healthcare. If you need to embed compliant, composable identity without sacrificing control or maturity, Duende is the proven secure identity standard. We bring the craft to identity, so you can focus on yours.

Elastic SSO Team

Elimity

The only identity intelligence platform purpose-built to protect your most important information assets with a radically new focus on time to value.

Evidian Identity Governance and Administration

Manage identities accuretly, efficiently and confidentialy

ezto auth

ezto auth is a cloud-based Workforce identity and access management (IAM) platform that provides secure access to various applications and services for employees, contractors, partners, and customers. The platform offers a range of features to manage user identities, including authentication, authorization, and user administration, across a wide variety of devices and applications. ezto auth enables organizations to secure access to their resources with a single sign-on (SSO) experience. Users can log in to the ezto auth portal once, and then access all of their authorized applications and services without having to enter their credentials again. ezto auth supports SSO for thousands of cloud-based and on-premises applications, including Salesforce, Office 365, and Google Workspace. ezto auth also provides multi-factor authentication (MFA) capabilities to further enhance the security of user identities. This feature requires users to provide additional authentication factors, such as a biometric identifier, a mobile app, or a hardware token, in addition to their password. In addition to identity management and authentication, ezto auth also offers features for user provisioning, group management, and access control. This enables organizations to centrally manage user access to applications and services and enforce security policies. Overall, ezto auth is a comprehensive IAM solution that helps organizations to secure their digital environments and streamline access management for their workforce, partners, and customers.

Average Rating: 4.3/5.0

Total Reviews: 3

FastPass IVM

FastPass IVM — Automated Workforce Identity Verification for the IT Help Desk IT help desks are the #1 target for social engineering attacks. Groups like Scattered Spider have proven that a single vishing call to a help desk agent — convincing them to reset a password or re-enroll an MFA device — is enough to bring down a Fortune 500 company. FastPass Identity Verification Manager (IVM) closes that vulnerability by removing human discretion from the verification process entirely. What FastPass IVM does FastPass IVM automates and enforces identity verification at the IT service desk. When a user calls to request a password reset, MFA reset, or account change, IVM takes control of the process — instructing the agent exactly what to verify, in what order, and scoring the result against a configurable trust threshold. The agent cannot proceed until verification is complete. Social engineering stops working when there is no human judgment to manipulate. Why it's different from generic MFA or SSPR Most identity tools verify users at login. FastPass IVM verifies users at the help desk — the moment attackers exploit. It uses dynamic and contextual data that a social engineer cannot fake: which machine the user normally logs in from, their geolocation, recent behavior patterns, combined with MFA factors from Okta, Duo, Microsoft Authenticator, RSA, and others. Static information like an employee ID or mother's maiden name — the kind of data Scattered Spider sources from LinkedIn or dark web leaks — is never sufficient on its own. Risk-based verification by user group and action Not every call carries the same risk. IVM lets security teams build different verification workflows for different user groups and request types. A standard user calling about a printer issue requires a lighter verification path than a system administrator requesting an MFA reset. This keeps help desk efficiency high while applying maximum protection where it matters most. Key capabilities Dynamic, contextual scoring engine — combines MFA, device checks, behavioral data, and corporate data sources into a configurable trust score Supports Okta, Duo, Microsoft Authenticator, Google Authenticator, RSA, TOTP, SMS, email OTP, KBA, Employee ID, asset tags, and more Certified ServiceNow integration — IVM controls the ticket workflow natively, advancing and logging every verification step automatically Connects to Active Directory, Entra ID, SAP, Oracle, IBM, LDAP, and SQL environments Full audit trail — every verification event is logged, timestamped, and written back to the ITSM ticket for compliance Available as cloud or on-premises; multi-tenant version for MSPs Proven to deliver 50% reduction in verification time versus manual processes Who it's for CISOs and IT security leaders at mid-to-large enterprises (500–100,000+ users) who need to harden the help desk against vishing, social engineering, and MFA bypass attacks. Widely deployed in healthcare, financial services, and regulated industries where help desk security is a compliance requirement.

Average Rating: 5.0/5.0

Total Reviews: 8

FirstWare

Easy identity management that frees up time. FirstWare IDM-Portal focuses on user friendliness.

FIXSHTEL

Freedom Cloud ACaaS