# Best Identity and Access Management (IAM) Software - Page 9

## How Many Identity and Access Management (IAM) Software Products Does G2 Track?

**Total Products under this Category:** 221

### Category Stats (Aug 2026)

- **Average Rating:** 4.47/5 (↑0.01 vs Jul 2026) The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** Jellyfish by Cogito Group (+5.56%) - Among all products in this category, Jellyfish by Cogito Group recorded the largest rating increase compared to last month

_Last updated: August 01, 2026_

## How Does G2 Rank Identity and Access Management (IAM) Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 25,900+ Authentic Reviews
- 221+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Identity and Access Management (IAM) Software
 ![G2 Grid® for Identity and Access Management (IAM) Software plotting products by satisfaction and market presence](https://www.g2.com/categories/identity-and-access-management-iam/grids.png?focus%5B%5D=633&focus%5B%5D=36316&focus%5B%5D=3899&focus%5B%5D=20164&focus%5B%5D=21375&focus%5B%5D=1640029&focus%5B%5D=1308836&focus%5B%5D=5282)

Highlighted products: Okta, JumpCloud, Microsoft Entra ID, AWS Identity and Access Management (IAM), Google Cloud Identity & Access Management (IAM), Rippling IT, AWS Vertrified Access, and Cisco Duo.

Underlying data: [Grid® JSON](https://www.g2.com/categories/identity-and-access-management-iam/grids.json?focus%5B%5D=okta&focus%5B%5D=jumpcloud&focus%5B%5D=microsoft-entra-id&focus%5B%5D=aws-identity-and-access-management-iam&focus%5B%5D=google-cloud-identity-access-management-iam&focus%5B%5D=rippling-it&focus%5B%5D=aws-vertrified-access&focus%5B%5D=cisco-duo)

**Sponsored**

### Criteria

Hire to Inspire: Reveal the real potential behind every candidate with science you can trust and AI you can explain. Scientifically validated assessments, structured interviews, and talent development tools built to improve hiring outcomes and designed with your candidates in mind. Criteria is a comprehensive talent management platform designed to enhance talent acquisition and workforce development outcomes. This innovative solution provides organizations with the tools necessary to identify, assess, and nurture the best-fit talent for their specific needs. By integrating advanced candidate assessments and structured interview processes, Criteria enables companies to make informed hiring decisions while fostering a culture of continuous improvement and growth among their teams. With a focus on both pre-hire and post-hire phases, Criteria supports a wide range of use cases, from evaluating candidates to facilitating ongoing employee training and performance management. This holistic approach ensures that organizations not only attract top talent but also retain and develop high-performing teams. Criteria's assessments can be customized to align with specific job requirements, ensuring that the selection process is both relevant and efficient. Additionally, the platform offers structured interview frameworks that guide hiring managers in conducting focused interviews, helping to reduce bias and improve the overall quality of candidate evaluations. Beyond the hiring process, Criteria offers Develop, an innovative post-hire development tool. The platform provides resources for ongoing employee engagement and professional development, thanks to 24/7 AI-driven coaching. By leveraging data-driven insights, organizations can identify areas for improvement and enhance employee skills and productivity. This continuous feedback loop not only boosts individual performance but also contributes to the overall success of the organization. Criteria's comprehensive suite of tools empowers organizations to unlock the full potential of their workforce, ensuring that they not only hire the right talent but also cultivate an environment where employees can thrive and contribute to long-term success.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=257&secure%5Bchosen_at%5D=2026-08-02T21%3A51%3A31Z&secure%5Bdisplayable_resource_id%5D=261&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=retargeted_product&secure%5Bplacement_resource_ids%5D%5B%5D=21088&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=21088&secure%5Bresource_id%5D=257&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fidentity-and-access-management-iam%3Fpage%3D9&secure%5Btoken%5D=9bc27a021f0fd24a5205465a10c41d8ac18aa59eab1415a476fcc14e164b2933&secure%5Burl%5D=https%3A%2F%2Finfo.criteriacorp.com%2Fvideo-interviewing-demo-request%2F%3Futm_medium%3Dpaid_social%26utm_source%3Dg2&secure%5Burl_type%5D=custom_url)

### [Symantec IGA](https://www.g2.com/products/symantec-iga/reviews)

The Layer7 Identity Suite provides comprehensive identity management and governance capabilities with a simple, intuitive user experience. This user experience can dramatically simplify processes such as user access requests and access certifications, resulting in improved productivity and user satisfaction. In addition, the CA Identity Suite performs risk analysis and certification and enables remediation actions in real-time during the access provisioning steps, thereby improving audit performance and risk posture with preventive policy enforcement

**Average Rating:** 3.5/5.0

**Total Reviews:** 15

#### How Do G2 Users Rate Symantec IGA?

- **Has the product been a good partner in doing business?:** 7.8/10 (Category avg: 9.2/10)
- **Tracking:** 8.3/10 (Category avg: 8.7/10)
- **User provisioning:** 10.0/10 (Category avg: 9.1/10)
- **On-premises solution:** 8.3/10 (Category avg: 8.3/10)

#### Who Is the Company Behind Symantec IGA?

- **Seller:** [Broadcom](https://www.g2.com/sellers/broadcom-ab3091cd-4724-46a8-ac89-219d6bc8e166)
- **Year Founded:** 1991
- **HQ Location:** San Jose, CA
- **Twitter:** @broadcom  
63,909 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=093adce8015fea9ef126312884b465dc8e3c20e17dcb12fbb77a7bd82577e7a5&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbroadcom%2F&secure%5Burl_type%5D=linkedin_company_website)  
55,094 employees on LinkedIn®
- **Ownership:** NASDAQ: CA

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services
- **Company Size:** 69% Large, 56% Medium

#### What Are Recent G2 Reviews of Symantec IGA?

**[""One stop solution for Id access management""](https://www.g2.com/survey_responses/symantec-iga-review-4904130)**

**Rating:** 4.5/5.0 stars

_— VivekPrasanth R._

[Read full review](https://www.g2.com/survey_responses/symantec-iga-review-4904130)

**["Overall experience"](https://www.g2.com/survey_responses/symantec-iga-review-8236529)**

**Rating:** 4.5/5.0 stars

_— Felipe R._

[Read full review](https://www.g2.com/survey_responses/symantec-iga-review-8236529)

#### What Are G2 Users Discussing About Symantec IGA?

- [What is CA identity governance?](https://www.g2.com/discussions/what-is-ca-identity-governance)
- [What is IGA cyber security?](https://www.g2.com/discussions/what-is-iga-cyber-security)
- [What is an IGA tool?](https://www.g2.com/discussions/what-is-an-iga-tool)
- [What is Symantec IGA?](https://www.g2.com/discussions/what-is-symantec-iga)

### [synk.to](https://www.g2.com/products/synk-to/reviews)

Synk.to is a cloud-first identity management platform designed to seamlessly integrate with your favorite SaaS solutions, including Google Workspace, Jira, Slack, Microsoft Entra ID, Zoom, Confluence, and more. With Synk.to, you can effortlessly synchronize users and groups across all your applications. Our platform enables you to onboard and offboard employees in minutes, conduct instant access rights reviews, and monitor SaaS license usage—all from a single interface. Synk.to simplifies identity management, making your SaaS management more efficient and secure.

**Average Rating:** 4.0/5.0

**Total Reviews:** 1

#### How Do G2 Users Rate synk.to?

- **Tracking:** 8.3/10 (Category avg: 8.7/10)
- **User provisioning:** 8.3/10 (Category avg: 9.1/10)

#### Who Is the Company Behind synk.to?

- **Seller:** [SynkTo](https://www.g2.com/sellers/synkto)
- **HQ Location:** N/A
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8992410a1dca40bd7814a07e16374ec33a5b0280636d4814342b0f5acce97d49&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsynkto%2F&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Small

#### What Are Recent G2 Reviews of synk.to?

**["Helps sync all SaaS systems"](https://www.g2.com/survey_responses/synk-to-review-11302503)**

**Rating:** 4.0/5.0 stars

_— Deepankar C._

[Read full review](https://www.g2.com/survey_responses/synk-to-review-11302503)

### [Thales OneWelcome Identity Platform](https://www.g2.com/products/thales-onewelcome-identity-platform/reviews)

The Thales OneWelcome Identity Platform is a cloud-based identity and access management solution designed to deliver secure, frictionless digital experiences for all external identities, including customers and partners. It provides a unified platform to manage identities across B2C, B2B, gig-workers, and workforce use cases, helping organizations build trusted digital interactions at scale. The Thales OneWelcome Identity Orchestrator (IO) is a next-gen Visual Orchestration tool that enables no-code orchestration of any user journey and acts as the central engine of an Identity Fabric, moving organizations away from siloed, product‑centric deployments toward a more connected, risk-aware system of systems that can compute dynamic decisions based on all available contextual signals. As a cloud-based component, IO provides a visual interface and execution engine to manage complex interactions across B2C, B2B, and gig worker markets. To support security and compliance, Thales incorporates Adaptive Authentication, combining multi-factor authentication and risk-based access controls, alongside Consent and Preference Management to help organizations meet privacy and regulatory requirements. Delegated User Management enables secure administration of partner and third-party access through self-service workflows. With support for Passwordless Authentication, including passkeys and hardware-based authenticators, and a modular architecture built on identity apps, the platform enables flexible deployment while helping organizations modernize identity, reduce complexity, and strengthen security across digital channels.

**Average Rating:** 4.8/5.0

**Total Reviews:** 2

#### Who Is the Company Behind Thales OneWelcome Identity Platform?

- **Seller:** [Thales Group](https://www.g2.com/sellers/thales-group)
- **HQ Location:** Austin, Texas
- **Twitter:** @ThalesCloudSec  
6,935 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=6e2851e1a59f8d20bde4bcb61853df023b359c511759b122b0978397a41c6e7e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fthalessoftwaremonetization%2F&secure%5Burl_type%5D=linkedin_company_website)  
46 employees on LinkedIn®
- **Ownership:** EPA:HO
- **Total Revenue (USD mm):** $15,854

#### Who Uses This Product?

- **Company Size:** 50% Large, 50% Medium

#### What Do G2 Reviewers Say About Thales OneWelcome Identity Platform?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **secure and convenient access management** of Thales OneWelcome, enhancing their overall user experience.
- Users value the **multifactor and adaptive authentication** features for enhanced security against unauthorized access.
- Users appreciate the **smooth and convenient access management** of Thales OneWelcome, enhancing their overall experience significantly.
- Users appreciate the **secure access management** of Thales OneWelcome, enabling smooth and frictionless user experiences.

##### Cons

- Users find the **initial setup complex** , making implementation challenging and sometimes unclear regarding pricing expectations.
- Users find the **pricing unclear** , leading to challenges in budgeting and expectations for the Thales OneWelcome Identity Platform.

#### What Are Recent G2 Reviews of Thales OneWelcome Identity Platform?

**["Secure, Frictionless Access Management with Thales OneWelcome Identity Platform"](https://www.g2.com/survey_responses/thales-onewelcome-identity-platform-review-11151239)**

**Rating:** 4.5/5.0 stars

_— Vishal P._

[Read full review](https://www.g2.com/survey_responses/thales-onewelcome-identity-platform-review-11151239)

**["The Powerful Solution for Securtiy"](https://www.g2.com/survey_responses/thales-onewelcome-identity-platform-review-10919996)**

**Rating:** 5.0/5.0 stars

_— neha v._

[Read full review](https://www.g2.com/survey_responses/thales-onewelcome-identity-platform-review-10919996)

### [Usercube IGA (SaaS Identity Governance & Administration)](https://www.g2.com/products/usercube-iga-saas-identity-governance-administration/reviews)

With Usercube, you know in real time WHO has access to WHAT and if is compliant with your SECURITY POLICY. Usercube synchronizes with your HR data sources for accurate user data, connects with your IT infrastructure to manage user credentials, connects with your business applications to audit user permissions and Usercube streamlines certification campaigns with business teams. Usercube is a SaaS solution for all businesses, mid-size to enterprises. Particularly in the Finance and Insurance business, Usercube IGA offers a full range of Identity life cycle management, provisioning of accounts and fine grained rights, as well as governance features.

**Average Rating:** 5.0/5.0

**Total Reviews:** 1

#### Who Is the Company Behind Usercube IGA (SaaS Identity Governance & Administration)?

- **Seller:** [USERCUBE](https://www.g2.com/sellers/usercube)
- **HQ Location:** New York, Paris, Brussels, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9ea08f6a82ceffafa7caefa0c2bcdfcf8b22578dee4d227d6bbfb9aed2b4e6b3&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fusercube%2F&secure%5Burl_type%5D=linkedin_company_website)  
8 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Large

#### What Are Recent G2 Reviews of Usercube IGA (SaaS Identity Governance & Administration)?

**["Successfull migration of legacy IAM to Cloud SaaS IAG for a Major Energy Company"](https://www.g2.com/survey_responses/usercube-iga-saas-identity-governance-administration-review-5087468)**

**Rating:** 5.0/5.0 stars

_— Verified User in Oil & Energy_

[Read full review](https://www.g2.com/survey_responses/usercube-iga-saas-identity-governance-administration-review-5087468)

### [YeshID Onboard](https://www.g2.com/products/yeshid-onboard/reviews)

YeshID is the all-in-one identity management tool for growing organizations and the only identity and access management tool built specifically for Google Workspace. Sign up for free at yeshid.com/onboard. Watch video demos at https://www.youtube.com/@YeshID. YeshID helps you be more safe, compliant, and efficient in 5 minutes, no IT or security experience required — because futzing around in Google Workspace’s admin console isn’t what you had in mind when you started a company.

**Average Rating:** 5.0/5.0

**Total Reviews:** 1

#### How Do G2 Users Rate YeshID Onboard?

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10)
- **Tracking:** 10.0/10 (Category avg: 8.7/10)
- **User provisioning:** 10.0/10 (Category avg: 9.1/10)
- **On-premises solution:** 0.0/10 (Category avg: 8.3/10)

#### Who Is the Company Behind YeshID Onboard?

- **Seller:** [YeshID](https://www.g2.com/sellers/yeshid)
- **Year Founded:** 2022
- **HQ Location:** Denver, US
- **Twitter:** @yeshidco  
44 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=462e9a87b1daf6d06466078b4a99a80235a7c9d43117794a9eab82fb57df030f&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fyeshid&secure%5Burl_type%5D=linkedin_company_website)  
21 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Medium

#### What Are Recent G2 Reviews of YeshID Onboard?

**["YeshID is the missing piece to a seamless onboarding and user management experience"](https://www.g2.com/survey_responses/yeshid-onboard-review-8932302)**

**Rating:** 5.0/5.0 stars

_— Verified User in Financial Services_

[Read full review](https://www.g2.com/survey_responses/yeshid-onboard-review-8932302)

### [ZITADEL](https://www.g2.com/products/zitadel/reviews)

Open-source identity infrastructure that scales with your business Zitadel delivers enterprise-grade identity management without the enterprise complexity. Built for modern applications, it provides secure authentication, authorization, and user management through clean APIs and intuitive interfaces. Why developers choose Zitadel: 1. Zero vendor lock-in - Open source with self-hosting options 2. Multi-tenant by design - Isolate customers while sharing infrastructure 3. Modern standards - Native support for OpenID Connect, OAuth2, SAML, and Passkeys/FIDO2 4. Developer-friendly - Comprehensive APIs, webhooks, and customizable workflows 5. Production-ready - Built-in audit trails, monitoring, and enterprise security Perfect for SaaS platforms, B2B applications, and any product requiring sophisticated user management. Deploy in minutes, customize as you scale. Key Features: Multi-tenancy, Passkeys/FIDO2, Self-service management, OpenID Connect, OAuth2, SAML, LDAP, OTP, Audit trails, API-first architecture

**Average Rating:** 5.0/5.0

**Total Reviews:** 1

#### How Do G2 Users Rate ZITADEL?

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10)
- **Tracking:** 3.3/10 (Category avg: 8.7/10)
- **User provisioning:** 8.3/10 (Category avg: 9.1/10)
- **On-premises solution:** 8.3/10 (Category avg: 8.3/10)

#### Who Is the Company Behind ZITADEL?

- **Seller:** [ZITADEL](https://www.g2.com/sellers/zitadel)
- **Year Founded:** 2020
- **HQ Location:** San Francisco, US
- **Twitter:** @zitadel  
664 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=479c94359bdd3ec59e3bb446a32dc71612932de39d8ac641278342148aafee41&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fzitadel%2F&secure%5Burl_type%5D=linkedin_company_website)  
21 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Small

#### What Do G2 Reviewers Say About ZITADEL?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of ZITADEL, enabling quick setup for both SaaS and on-premise deployments.
- Users find ZITADEL offers **easy management** , facilitating quick setup for both SaaS and on-premise deployments.
- Users find ZITADEL's **easy setup** appealing, allowing quick deployment for both SaaS and on-premise options.
- Users value the **reliability** of ZITADEL, appreciating its seamless deployment options for varied needs.

##### Cons

- Users note a **lack of information** in documentation, leading to challenges with feature evolution and method changes.

#### What Are Recent G2 Reviews of ZITADEL?

**["CIAM you may like"](https://www.g2.com/survey_responses/zitadel-review-11771256)**

**Rating:** 5.0/5.0 stars

_— Verified User in Automotive_

[Read full review](https://www.g2.com/survey_responses/zitadel-review-11771256)

### [AccessFlow](https://www.g2.com/products/accessflow/reviews)

AccessFlow is an automated, self-service access management solution built on the ServiceNow platform.AccessFlow connects customer’s active directory or any IAM tools to CMDB, for requesting access. It maintains and protects Enterprise Access, Role-based access, Access both on-premises and on cloud, Manual or scheduled access review/attestation, Owner accountability, Authorized approval process, Dashboards and reporting. AccessFlow provides a possibility to unify the access administration approach across entities, be it applications, network folders, or more granular process driven roles, to streamline operations, remove a lot of workload pressure from IT or IAM and place it in the hands of the line-of-business. It helps organizations to become audit-ready, while providing a single unified interface to request, track and execute operations. AccessFlow is an easy, intuitive IAM platform that provides access management on the go. Just download the mobile application and enjoy the seamless experience. It offers seamless integration with Enterprise Resource Planning (ERP) environments- • Oracle EBS from R12.x version onwards • SAP S/4HANA and future versions

#### Who Is the Company Behind AccessFlow?

- **Seller:** [Alcor](https://www.g2.com/sellers/alcor)
- **Year Founded:** 2007
- **HQ Location:** Palo Alto, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9426dd773444a260231585cc50e128cfbae84cd1bd98c1d5014b74ea93744c77&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F18244868&secure%5Burl_type%5D=linkedin_company_website)  
233 employees on LinkedIn®

### [AccessKeeper](https://www.g2.com/products/accesskeeper/reviews)

AccessKeeper is a comprehensive Identity and Access Management (IAM) solution developed by COMPRISE, designed to provide organizations with centralized control over user access to various systems and applications. It offers a unified platform for managing users, access rights, and authentication processes, ensuring enhanced security and operational efficiency. By integrating AccessKeeper, organizations can streamline password management through self-service capabilities, reducing administrative overhead and improving user experience. Key Features and Functionality: - Single Sign-On (SSO) and Single Logout (SLO): Facilitates seamless access to multiple browser-based applications with a single authentication, enhancing user convenience and security. - Kerberos Bridge: Automatically authenticates Windows users, simplifying the login process and reducing the need for multiple credentials. - Self-Service Console: Empowers users to manage their passwords, perform password recovery, and update credentials independently, minimizing reliance on IT support. - Customizable User Interface: Allows organizations to tailor the interface to align with their corporate identity through theming options. - Integration with LDAP and Active Directory: Ensures seamless synchronization with existing directory services, facilitating efficient user management. - Identity Brokering: Supports authentication via internal and external identity providers, offering flexibility in managing user identities. - Advanced Security Features: Includes support for OAuth2, account impersonation, blacklists, cross-domain trust, credential delegation, X.509 certificates, and client scopes, providing a robust security framework. Primary Value and Solutions Provided: AccessKeeper addresses the critical need for centralized and secure identity management within organizations. By offering a single point of control for user access and authentication, it enhances security by ensuring that only authorized individuals can access sensitive systems and data. The self-service capabilities reduce administrative burdens and improve user satisfaction by allowing individuals to manage their credentials independently. Additionally, its flexibility in integration and customization ensures that it can adapt to various organizational requirements and existing infrastructures. Notably, AccessKeeper has been successfully implemented as a central Identity Provider (IDP) in the German healthcare system, managing secure authentication for 80 million identities, demonstrating its scalability and reliability in handling large-scale identity management needs.

#### Who Is the Company Behind AccessKeeper?

- **Seller:** [COMPRISE](https://www.g2.com/sellers/comprise)
- **Year Founded:** 2019
- **HQ Location:** Vienna, AT
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=e562ef20f51fe77e07d21079bbec72385ecbae8349439ed843e8f02b9bb24591&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcomprise-world%2F&secure%5Burl_type%5D=linkedin_company_website)  
2 employees on LinkedIn®

### [AccessMatrix Universal Access Management (UAM)](https://www.g2.com/products/accessmatrix-universal-access-management-uam/reviews)

AccessMatrix Universal Access Management (UAM) is a comprehensive web single sign-on (SSO), web access management, federated single sign-on (SSO), externalized authorization management, and hierarchy-based delegated administration system.

#### Who Is the Company Behind AccessMatrix Universal Access Management (UAM)?

- **Seller:** [i-Sprint Innovations](https://www.g2.com/sellers/i-sprint-innovations)
- **Year Founded:** 2000
- **HQ Location:** Singapore, SG
- **Twitter:** @iSprintInnov  
189 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=3681c7cb37c59038c5ab923c505e507dac5ffd98d9f939f0abef4b5c13e4fa21&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fi-sprint-innovations&secure%5Burl_type%5D=linkedin_company_website)  
116 employees on LinkedIn®
- **Phone:** 65 6244 3900

### [Access Sentinel](https://www.g2.com/products/access-sentinel/reviews)

Access Sentinel is an identity management software allows third-party applications to externalize their access control decisions.

#### Who Is the Company Behind Access Sentinel?

- **Seller:** [ViewDS](https://www.g2.com/sellers/viewds)
- **Year Founded:** 2004
- **HQ Location:** Melbourne, AU
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=5a8de2b8380742441959a233adcfd3e2679dac821e2dcee0ea1c61729d271800&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fviewds%2F&secure%5Burl_type%5D=linkedin_company_website)  
7 employees on LinkedIn®

### [Active Directory & Entra ID Security Audit](https://www.g2.com/products/active-directory-entra-id-security-audit/reviews)

Dovestones AD/Entra Audit service helps organizations audit Active Directory, Entra ID, and hybrid environments using 125+ combined security, health check, and risk assessment metrics. AI helps prioritize what matters first, while personal directory data stays out of AI processing.

#### Who Is the Company Behind Active Directory & Entra ID Security Audit?

- **Seller:** [Dovestones](https://www.g2.com/sellers/dovestones)
- **HQ Location:** Newmarket Ontario, CA
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9f7a93e3b0df675bf9f0d6d219454e24ef447ea47a0b227d94a4e557bede4f2c&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F105280456&secure%5Burl_type%5D=linkedin_company_website)  
2 employees on LinkedIn®

### [Adaptive](https://www.g2.com/products/adaptive-automation-technologies-inc-adaptive/reviews)

Adaptive is a cloud security company with a modern approach to data protection with its unique control plane that safeguards data and brokers’ access to human and non-human identities. The Adaptive architecture protects data closer to the source, ensuring strict access control over every database connection and minimizing sensitive data exposure. Adaptive’s combined approach to data access and protection eliminates blind spots in data security, making it ideal for modern organizations where data is constantly in motion. Due to Adaptive’s agentless architecture, end users get faster and auditable access and data protection across infrastructure without changing existing workflows and tools.

**Average Rating:** 5.0/5.0

**Total Reviews:** 1

#### How Do G2 Users Rate Adaptive?

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10)

#### Who Is the Company Behind Adaptive?

- **Seller:** [Adaptive Automation Technologies](https://www.g2.com/sellers/adaptive-automation-technologies)
- **HQ Location:** Atlanta, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=1df109f1bd17cf19e0ded905c17cd5fff8ad2ee0fbbbcba13590429d7a5ebd1a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fadaptive-live&secure%5Burl_type%5D=linkedin_company_website)  
16 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Small

#### What Do G2 Reviewers Say About Adaptive?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **speed and ease of implementation** provided by Adaptive, streamlining access control efficiently.
- Users value the **speed and ease of implementation** of Adaptive, streamlining workflows with innovative integration and access solutions.
- Users appreciate the **customization features** of Adaptive, enabling tailored solutions for diverse data management needs.
- Users value the **revolutionary data protection** features of Adaptive, ensuring secure access and minimizing credential exposure.
- Users value the **speed and ease of implementation** of Adaptive, simplifying access management and integration processes.

##### Cons

- Users express concern over **data privacy** , seeking enhancements like encryption in addition to current data masking features.
- Users find the product impressive but note it is **expensive** and suggest improvements like data encryption at rest.

#### What Are Recent G2 Reviews of Adaptive?

**["New Elegant Approach to Data Access and Security"](https://www.g2.com/survey_responses/adaptive-review-10547862)**

**Rating:** 5.0/5.0 stars

_— Thiago O._

[Read full review](https://www.g2.com/survey_responses/adaptive-review-10547862)

### [Ahalts](https://www.g2.com/products/ahalts/reviews)

Ahalts is a pioneering technology company dedicated to empowering businesses with innovative services and solutions that transform them into strategic enterprises. We specialize in Identity and Access Management (IAM), Facial Recognition, and Industrial Internet of Things (IIOT), creating cutting-edge AI-powered solutions tailored for enterprises. Our unified platform liberates businesses from the clutter of multiple tools and applications, enabling seamless workforce management across multiple devices, locations, and organizations. Our multi-tenant API platform, complete with Mobile APK, SDK, and Application BUS, offers a streamlined approach to managing complex business environments.

#### Who Is the Company Behind Ahalts?

- **Seller:** [Ahalts](https://www.g2.com/sellers/ahalts)
- **HQ Location:** N/A
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=7619eafb09aefed04e5cb36acb3ef57f274543c721050190e4f4cf1a8e56d26e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftiptopplatform%2F&secure%5Burl_type%5D=linkedin_company_website)  
3 employees on LinkedIn®

### [Airlock Suite by Ergon Informatik](https://www.g2.com/products/airlock-suite-by-ergon-informatik/reviews)

Airlock Suite is Ergon's all-round IT security product.

#### Who Is the Company Behind Airlock Suite by Ergon Informatik?

- **Seller:** [Ergon](https://www.g2.com/sellers/ergon)
- **HQ Location:** Zurich, Switzerland
- **Twitter:** @ErgonAirlock  
638 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=7886df2ed926834e5eb248c77dcfa8e5c815d3ab1f0fe3132ced0dba45868834&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2FNo-Linkedin-Presence-Added-Intentionally-By-DataOps&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

### [American Ratings - Lead Magnet Portal (A-I-R-S)](https://www.g2.com/products/american-ratings-lead-magnet-portal-a-i-r-s/reviews)

What is American Ratings – Lead Magnet Portal (A-I-R-S Number Certificate for Business & Individual)? American Ratings – Lead Magnet Portal is a modern customer-acquisition and loyalty-enhancement platform built around the AIRS Number (American Industry Rating Standard)—a fully digital, globally recognized business and individual rating identifier. The platform enables brands, agencies, consultants, and enterprises to use the AIRS ecosystem as a high-value lead magnet that strengthens trust, builds customer loyalty, and accelerates conversion rates across sales and marketing funnels. At its core, the Lead Magnet Portal transforms traditional lead magnets—like PDFs, freebies, or generic downloads—into a premium, credential-based incentive. Instead of giving prospects low-value content, businesses can now offer something meaningful: a Business AIRS Number or Individual AIRS Number, a globally verifiable rating certificate that enhances credibility for the recipient. This positions the brand offering it as a dependable, premium partner committed to customer success. The portal is fully digital, requiring no physical delivery, allowing instant allocation of AIRS Numbers to customers anywhere in the world. With built-in workflows, quick issuance, and verification capabilities, it delivers a seamless experience for both brands and customers. Companies use the portal to reward engagement, nurture leads, and boost loyalty by offering something that customers perceive as aspirational and valuable—an official rating by American Ratings. For organizations, the Lead Magnet Portal acts as a strategic marketing engine. It helps optimize brand loyalty budgets by replacing cost-heavy discount-based strategies with a trust-based credentialing reward. The platform supports co-branding, allowing the company issuing the AIRS to feature its brand on the certificate, enhancing recall and elevating perceived authority. This modern loyalty tool significantly improves conversion because customers are more likely to respond to a reward that strengthens their professional or business identity. A Business AIRS Number enhances a firm's credibility, while an Individual AIRS Number elevates personal marketability. The offering feels premium, exclusive, and aligned with long-term value creation. Key features include automated AIRS allocation, centralized customer tracking, high-quality digital certificates, real-time verification pages, and a structured point-based system that allows brands to measure engagement impact. Whether used for onboarding, referral incentives, or premium customer rewards, the Lead Magnet Portal delivers measurable improvement in activation and retention. Ultimately, American Ratings – Lead Magnet Portal (A-I-R-S) is not just another marketing tool—it is a next-generation trust-driven lead magnet that empowers businesses to stand out in a noisy market. By offering a respected digital rating certificate, brands communicate one powerful message: Our trust is yours.

#### Who Is the Company Behind American Ratings - Lead Magnet Portal (A-I-R-S)?

- **Seller:** [American Business Association Rating](https://www.g2.com/sellers/american-business-association-rating)
- **Year Founded:** 2012
- **HQ Location:** San Deigo, California
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=91b2b20d04ef87d8fed6c53e2f823360dfe95dc63635105895714e7679f468ee&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fa-i-r-s-number&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

- [‹ Prev‹ Prev](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=8#product-list)
- [1](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score#product-list)
- [2](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=2#product-list)
- …
- [5](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=5#product-list)
- [6](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=6#product-list)
- [7](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=7#product-list)
- [8](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=8#product-list)
- 9
- [10](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=10#product-list)
- [11](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=11#product-list)
- [12](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=12#product-list)
- [13](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=13#product-list)
- [14](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=14#product-list)
- [15](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=15#product-list)
- [Next ›Next ›](/categories/identity-and-access-management-iam?open_modal_url=%2Fproducts%2Ffusionauth%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fidentity-and-access-management-iam%26source%3Dcategory&order=g2_score&page=10#product-list)

Spotlight Categories

[VoIP Providers](https://www.g2.com/categories/voip)

[Professional Services Automation Software](https://www.g2.com/categories/professional-services-automation)

[Employee Recognition Software](https://www.g2.com/categories/employee-recognition)

[User Research Tools](https://www.g2.com/categories/user-research)

[Accounts Payable Automation Software](https://www.g2.com/categories/ap-automation)

Similar Categories

- [Multi-Factor Authentication (MFA)](/categories/multi-factor-authentication-mfa)
- [Biometric Authentication](/categories/biometric-authentication)
- [Cloud Directory Services](/categories/cloud-directory-services)
- [Customer Identity and Access Management (CIAM)](/categories/customer-identity-and-access-management-ciam)
- [Decentralized Identity](/categories/decentralized-identity)

- [Passwordless Authentication](/categories/passwordless-authentication)
- [Password Managers](/categories/password-managers)
- [Password Policy Enforcement](/categories/password-policy-enforcement)
- [Privileged Access Management (PAM)](/categories/privileged-access-management-pam)
- [Risk-Based Authentication (RBA)](/categories/risk-based-authentication-rba)

- [Self-Service Password Reset (SSPR) Tools](/categories/self-service-password-reset-sspr-tools)
- [Single Sign-On (SSO)](/categories/single-sign-on-sso)
- [User Provisioning and Governance Tools](/categories/user-provisioning-and-governance-tools)

[Browse Identity and Access Management (IAM) Themes](/categories/identity-and-access-management-iam/themes)

 ![Brandon Summers-Miller](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Brandon Summers-Miller")
BS

Researched and written by [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)

Updated July 28, 2025

Identity and access management (IAM) software helps companies protect their systems from unauthorized access or misuse by only allowing authenticated, authorized users (typically employees, based on job roles) to access specific, protected company systems and data. IT administrators leverage the software to quickly provision, deprovision, and change user identities and the corresponding user access rights at scale.

IAM software authenticates users, provides access to systems and data based on company policies, tracks user activity, and provides reporting tools to ensure employees are in compliance with company policies and regulations. Many IAM solutions include single sign-on (SSO) and password manager features. For employees, once users authenticate by signing into their accounts or using other multi-factor authentication methods, they are granted limited access to company systems allowed by their user type to complete their typical job functions.

Additionally, many IAM products are now being integrated with generative artificial intelligence (AI) features. These AI features allow IAM products to automate routine tasks that can be cumbersome for IT and InfoSec teams while predicting identity-related misconfigurations and recommending various access controls.

IAM software differs from [privileged access management (PAM) software](https://www.g2.com/categories/privileged-access-management-pam). IAM software is used to authorize, authenticate, and grant specific access to everyday users, such as company employees. However, PAM software is used to provide administrative or superusers with granular access to business-critical assets and privileged credentials. IAM software also differs from [customer identity and access management (CIAM) software](https://www.g2.com/categories/customer-identity-and-access-management-ciam), which provides a company’s customers, as opposed to employees, with secured access to customer applications.

To qualify for inclusion in the Identity and Access Management (IAM) category, a product must:

- Provision and deprovision user identities
- Assign access based on individual role, group membership, and other factors
- Enforce user access rights based on permissions
- Verify user identity with authentication, which may include multi-factor authentication methods
- Integrate with directories that house employee data

Show More

* * *

## How Do You Choose the Right Identity and Access Management (IAM) Software?

### What You Should Know About Identity and Access Management (IAM) Software

### What is Identity and Access Management (IAM) Software?

Companies use identity and access management (IAM) software to both enforce their security controls regarding who has access to corporate assets and to promote worker productivity with ease of access to the tools they need to do their jobs. IAM software achieves this by allowing only authorized and authenticated users, such as employees, contractors, and devices, to access corporate resources at their appropriate permission level based on predetermined policy-based controls. 

Using IAM software, company administrators can quickly provision, deprovision, or change user identities and access rights to corporate assets at scale. Each user is granted the right level of access permissions based on their user or group membership type. This makes it easier for security teams to manage who has access to what accounts at scale, and for end users to quickly gain access to the tools they need to do their jobs instead of waiting for their individual accounts to be provisioned one by one. For example, a newly promoted departmental leader at a company may need permissions to fully access the proprietary data stored within an application. This can easily be granted to them due to their management group membership, while a junior-level employee would not need that kind of granular access, so they would only be permissioned to view non sensitive data stored within the application. IAM software also tracks user activity, enabling administrators to confirm that users are accessing corporate assets in compliance with company policies.

Using IAM software and utilizing policy-based controls to enforce least privilege strategies, companies can protect against unauthorized access from both external actors like hackers and non permissioned internal users (insider threats) who have insufficient access level permissions. IAM software is used as an important component of a company’s zero-trust, least-privilege security model, where all users’ identities are verified prior to granting access to corporate resources. This is different from prior security models that enforced perimeter security where once a user is inside the corporate network, they are granted free access and movement across the network, and not required to be authenticated again to use other applications.

**What Does IAM Stand For?**

IAM, sometimes also listed as IdAM, stands for identity and access management. IAM software is sometimes also referred to as workforce identity or employee identity management. Other acronyms related to IAM include CIAM for [customer identity and access management (CIAM)](https://www.g2.com/categories/customer-identity-and-access-management-ciam)software which is used for customer-related identity management. Similarly, for government-related identity products, the acronym ICAM stands for Identity, credential, and access management. Another acronym, IDaaS, stands for identity as a service.

### What are the Common Features of Identity and Access Management (IAM) Software?

The following are some core features within IAM software:

**Authentication:** IAM providers offer multi-factor authentication (MFA) methods for users to prove their identity prior to being granted access to corporate resources. MFA requires more than a single authentication factor, such as only a username and password. Authentication factors can include one-time passcodes (OTPs), software tokens, mobile-push, hardware tokens, and more. More advanced authentication methods include biometric authentication and passwordless authentication. 

More recently, IAM providers are utilizing risk-based authentication (RBA) methods, also known as contextual authentication, intelligent MFA, or adaptive MFA, which analyzes real-time information about users, such as their IP addresses, devices, and behaviors to continually verify their identity. 

**Identity lifecycle management or user provisioning and deprovisioning:** IAM software providers offer administrators the ability to manage the lifecycle of an identity—from quickly provisioning to deprovisioning, along with user changes including attributes, roles, permissions, and other entitlements. Some IAM providers also offer a universal directory.

**Directory:** IAM providers will either integrate with existing directory providers or offer a universal directory service.

**Single sign-on (SSO):** IAM software provides SSO functionality to enable end users to access their business applications all in one place and requiring them to authenticate once.

**User activity monitoring:** IAM software enables administrators to track user activity, including anomalous activity. This kind of auditing is to ensure compliance with secure access control policies. IAM solutions often provide standard reports for this.

### What are the Benefits of Identity and Access Management (IAM) Software?

**Security:** The main benefit of implementing identity and access manager software is for improved security. IAM software manages access governance, allowing only verified, authorized, and permissioned users to access company assets. This helps mitigate risks from external hackers or insider threats.

**Productivity or enabling the workforce:** In addition to improved security, companies that deploy IAM software to streamline the login experience, may lead to productivity gains with users. Having a simple to use security product with SSO requiring only one login and that also organizes the user’s corporate applications and accounts all in one place can save the user time and frustration. 

**Regulatory compliance:** Many global governmental or industry regulations require companies to have security controls to be in place. Identity management is a major component of a well-rounded information security program.

### Who Uses Identity and Access Management (IAM) Software?

**Information security (infosec) professionals:** Infosec professionals use IAM software as a foundational component of their security program.

**IT Administrators:** IT admins may be responsible for managing IAM software, especially as it relates to provisioning and deprovisioning users.

**End users and devices:** End users such as employees or contractors use IAM software in their day-to-day work activities to access corporate assets needed to do their jobs. Devices such as internet of things (IoT) devices require the validity of their identity in order to access corporate resources, including other IoT devices.

### What are the Alternatives to Identity and Access Management (IAM) Software?

Alternatives to IAM solutions can replace this type of software, either partially or completely include:

[Single sign-on (SSO) software](https://www.g2.com/categories/single-sign-on-sso): SSO software, which is a component of a complete IAM software solution, is an authentication tool that allows users to sign into multiple applications or databases with a single set of credentials. SSO software will not have identity governance and user lifecycle management features that an IAM solution would provide.

[Multi-factor authentication (MFA) software](https://www.g2.com/categories/multi-factor-authentication-mfa): MFA, which is a component of a complete IAM software solution, is used to have users prove their identity in two or more ways before granting them access privileges to corporate accounts. There are many types of authentication factors above the standard single factor of login credentials like usernames and passwords, including something the user has like a mobile device or security token, something the user is, such as a scan of their faceprint or fingerprint, or somewhere the user is, like their geographical location and IP address. Newer forms of MFA include risk-based authentication and passwordless authentication.

[Password manager software](https://www.g2.com/categories/password-manager): Password manager software, or password management software, stores a user's individual passwords through either an encrypted vault downloaded to a user’s computer or mobile device, or digitally through browser plugins or extensions. The passwords stored in this software are managed by the user, not by a corporate administrator.

#### Software Related to Identity and Access Management (IAM) Software

Related solutions that can be used together with IAM software include many types of [identity management software](https://www.g2.com/categories/identity-management):

[Customer identity and access management (CIAM) software](https://www.g2.com/categories/customer-identity-and-access-management-ciam) **:** CIAM software is similar to IAM software, but used for customer identities instead of workforce identities like employees, contractors, and corporate devices. 

[Privileged access management (PAM) software](https://www.g2.com/categories/privileged-access-management-pam) **:** PAM software helps companies protect the most critical IT resources by ensuring the credentials of their privileged accounts, such as admin accounts are only accessed by those with proper permissions to do so. When users access these privileged accounts, they must check in and check out and are often monitored during the time they are using the privileged account. PAM solutions are used in conjunction with IAM software, which provides authentication of general user identities; PAM software, however, provides more granular control and visibility of administrative or privileged user identities. 

[User provisioning and governance tools](https://www.g2.com/categories/user-provisioning-and-governance-tools) **:** User provisioning and governance tools enable companies to manage user account identities throughout their lifecycle, including provisioning and deprovisioning. These solutions are often deployed on-premises, but many tools are offering cloud-based solutions, as well. 

[Cloud directory services software](https://www.g2.com/categories/cloud-directory-services) **:** Similar to user provisioning and governance tools, cloud directory services software enables companies to manage user identities throughout their lifecycle, including provisioning and deprovisioning, in a cloud-deployed manner. Companies use these tools as they transition away from traditional on premises or locally operating identity management software to cloud services and SaaS applications. 

### Challenges with Identity and Access Management (IAM) Software

Identity management solutions and IAM systems can come with their own set of challenges. 

**Policy and group management:** Managing corporate access policies and group management is a company policy-related issue, not necessarily a technical one. It can get overwhelming for IAM administrators when companies have undefined or even conflicting policies as to which users have access to what resources. Administrators may be asked by leadership to provide users with much higher levels of access than their policy or group access control would normally allow, thus introducing risks into the environment.

**Identity for cloud vs. on-premises applications:** Depending on the company’s technology stack, businesses may have a mix of both on-premises and cloud-based applications and resources. Companies must ensure that their IAM solution has connectors to the types of systems they need support for, especially for hybrid IT environments.

**Insufficient MFA methods:** It is important that the MFA component of the identity program is strong to prevent unauthorized use which can lead to data breaches. Many IAM providers are moving away from less secure MFA methods, such as email one-time-passcodes to stronger authentication methods like risk-based authentication or contextual authentication.

### How to Buy Identity and Access Management (IAM) Software

#### Requirements Gathering (RFI/RFP) for Identity and Access Management (IAM) Software

When gathering and prioritizing the company's requirements, it is important to consider the following factors.

**Ease for end users:** In order for IAM software to be effective, end users have to actually use it. The IAM solution must be easy to use by the end user and become part of their everyday routine. 

**Authentication methods:** Are there limitations on the types of authentication factors that the company’s employees, contractors, and devices can use? For example, employees may be able to use authentication methods such as hardware tokens and biometrics, while temporary contractors might rely on in-app mobile pushes or OTPs sent via email, SMS, or phone. Additionally, if employees in a manufacturing facility or healthcare unit cannot carry a mobile phone with them, authentication factors requiring a mobile device may not be suitable.

**Regional considerations** : Is the company global? Does the IAM solution need to support multiple languages, use cases, and adhere to local data protection regulations? Businesses must ensure the IAM provider can accommodate the company’s geographic and regional-based needs.

**Integrations** : Companies should determine which integrations are important to them. The most critical integration would likely be the user directory solution, such as an HR system, if a directory is not provided by or being used within the IAM solution.

**Timeline:** The company must decide how quickly they need to implement the solution.

**Level of support** : Buyers should know if they require high-quality support or if they prefer implementing the solution in house.

#### Compare Identity and Access Management (IAM) Software Products

**Create a long list**

There are many providers of IAM software. The best way to begin narrowing the search for products that would work well for the company would be to start by company segment size, such as small, medium, or enterprise-size businesses. By visiting the [Identity and Access Management (IAM) software](https://www.g2.com/categories/identity-and-access-management-iam) page on G2.com, buyers can filter solutions by market segment using the left-hand filter radio buttons.

**Create a short list**

After looking through IAM solutions for particular company size, buyers should ensure it meets the authentication and regional needs. If a specific language is a requirement, buyers can filter solutions by language by visiting the [Identity and Access Management (IAM) software](https://www.g2.com/categories/identity-and-access-management-iam) page on G2.com. For other requirements, such as how easy it is to use, the “[Easiest to use](https://www.g2.com/categories/identity-and-access-management-iam?tab=easiest_to_use)” section of the Identity and Access Management (IAM) software page on G2 helps compare options. Users can further narrow the selection by reading user reviews, checking the product’s ranking on the [G2 Grid® report for the Identity and Access Management (IAM)](https://www.g2.com/categories/identity-and-access-management-iam#grid)software category, and reading other related IAM-related [resources](https://www.g2.com/categories/identity-and-access-management-iam/resources).

**Conduct demos**

At each demo, buyers must be sure to ask the same questions and use case scenarios to best evaluate each product. Potential buyers can contact many vendors directly on g2.com to request demos by selecting the “Get a quote” button. 

#### Selection of Identity and Access Management (IAM) Software

**Choose a selection team**

The selection team should include the day-to-day administrator of this product, who is likely an information security or related cybersecurity professional or an IT administrator professional. Companies may also consider having someone from HR join the selection committee to provide context regarding new hire onboarding and employee offboarding, as it relates to the user provisioning or deprovisioning aspect of IAM software. And lastly, it is important to include a typical day-to-day end user to ensure that the end user experience is easy to use and can be widely adopted by the workforce.

**Negotiation**

When negotiating the contract, buyers must consider pricing, implementation, and support. Typically longer length contracts and larger license counts can improve price discounting. 

**Final decision**

The final decision maker should likely be the day-to-day administrator of the solution, likely an information security professional or an IT administrator professional, with input from other stakeholders on the selection team. Prior to purchasing an IAM solution, buyers should check if they can get a trial period to test with a small number of users before going all in on the product. If the tool is well received by end users and administrators, businesses can feel more confident in their purchase.

### Which IAM platform is best for managing user roles?

When choosing an IAM platform that's best for managing user roles, I would consider some of these popular IAM platforms:

- [Salesforce Platform ](https://www.g2.com/products/salesforce-platform/reviews)
- [Cisco Duo](https://www.g2.com/products/cisco-duo/reviews)
- [OneLogin](https://www.g2.com/products/onelogin/reviews)

These platforms are known for their robust features and efficient management of user roles.

### What is the best identity management tool with multi-factor authentication?

If you're seeking identity management tools with multi-factor authentication, here are some top options to consider:

- [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews): excels with its risk-based conditional access that can dynamically require different authentication factors based on login patterns, device health, and location signals.
- [JumpCloud](https://www.g2.com/products/jumpcloud/reviews): provides a cloud-based directory platform that manages user identities, devices, and access across various systems. It supports multiple operating systems and offers features like SSO, MFA, and device management, catering well to hybrid and remote work environments.
- [Okta](https://www.g2.com/products/okta/reviews): offers robust identity management features, including single sign-on (SSO) and multi-factor authentication (MFA). It’s highly scalable and integrates well with various applications