# Best User Provisioning and Governance Tools - Page 6 *By [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)* User provisioning and governance tools gives a single point of maintenance to manage user access to IT applications. Companies need identity governance and administration (IGA) programs to maintain organized records of user information such as personal information, account histories, or application credentials. These confidential records can be used by employees and administrators to retain information and regulations. IT managers and administrators use the information in these systems to automate tasks such as account creation, editing, or deleting, which can help facilitate employee lifecycle changes like onboarding, promotions, or termination. Human resource workers may utilize the databases as well to aggregate information about employees and monitor access requests. There is significant overlap between user provisioning software and cloud identity and access management. Many products function on a hybrid on­-premise and cloud level, but user provisioning and governance software solutions may not be able to provide remote access. These products will also often integrate with or provide SSO/federation or [password management](https://www.g2.com/categories/password-manager) capabilities. To qualify as user provisioning and governance solution, a product must: - Possess infrastructure to store and access identity information - Provide administrator tools to create access requirements - Automate processes related to identity administration - Provide security or authentication features to protect sensitive information ## Top User Provisioning and Governance Tools at a Glance | # | Product | Rating | Best For | What Users Say | |---|---------|--------|----------|----------------| | 1 | [Okta](https://www.g2.com/products/okta/reviews) | 4.5/5.0 (1,223 reviews) | SSO-driven provisioning with adaptive MFA | "[Strong Security Without Sacrificing User Experience](https://www.g2.com/survey_responses/okta-review-12974377)" | | 2 | [JumpCloud](https://www.g2.com/products/jumpcloud/reviews) | 4.5/5.0 (3,881 reviews) | Cross-platform device and identity governance | "[All-in-One Access and Device Management That Saves Time](https://www.g2.com/survey_responses/jumpcloud-review-12977315)" | | 3 | [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews) | 4.5/5.0 (872 reviews) | Microsoft 365 identity governance with conditional access | "[Microsoft Entra is one of best Modern and Robust Cloud Identity and Access Management Platform](https://www.g2.com/survey_responses/microsoft-entra-id-review-12609554)" | | 4 | [1Password](https://www.g2.com/products/1password/reviews) | 4.6/5.0 (1,785 reviews) | Shared credential vaults with granular team access | "[Seamless, Simple Password Management Across Desktop and Mobile](https://www.g2.com/survey_responses/1password-review-12976873)" | | 5 | [Rippling IT](https://www.g2.com/products/rippling-it/reviews) | 4.7/5.0 (1,037 reviews) | HR-triggered IT provisioning with device lifecycle automation | "[IT provisioning and app access made completely painless for everyday employees.](https://www.g2.com/survey_responses/rippling-it-review-13035351)" | | 6 | [ManageEngine ADManager Plus](https://www.g2.com/products/manageengine-admanager-plus/reviews) | 4.5/5.0 (99 reviews) | — | "[Streamlined Onboarding with Simple Upgrades and Customized Support](https://www.g2.com/survey_responses/manageengine-admanager-plus-review-13000298)" | | 7 | [SailPoint](https://www.g2.com/products/sailpoint/reviews) | 4.5/5.0 (171 reviews) | Audit-ready access governance at enterprise scale | "[SailPoint: Robust Identity Governance with a Steep Complexity Curve](https://www.g2.com/survey_responses/sailpoint-review-12596964)" | | 8 | [Saviynt](https://www.g2.com/products/saviynt-saviynt/reviews) | 4.4/5.0 (78 reviews) | Enterprise IGA with end-to-end JML automation | "[Most Reliable Identity and Access Management (IAM) system](https://www.g2.com/survey_responses/saviynt-review-10680565)" | | 9 | [CyberArk Workforce Identity](https://www.g2.com/products/cyberark-workforce-identity/reviews) | 4.5/5.0 (126 reviews) | Access review automation with compliance audit trails | "[Fast User-Device Linking, Needs Installation Speed Boost](https://www.g2.com/survey_responses/cyberark-workforce-identity-review-12700425)" | | 10 | [Auth0](https://www.g2.com/products/auth0/reviews) | 4.3/5.0 (265 reviews) | — | "[Fast to Integrate, Scales Well, and Affordable for MVPs](https://www.g2.com/survey_responses/auth0-review-12849763)" | ## How Many User Provisioning and Governance Tools Products Does G2 Track? **Total Products under this Category:** 190 ### Category Stats (Jul 2026) - **Average Rating**: 4.48/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product**: SQUARUM (+2.22%) - Among all products in this category, SQUARUM recorded the largest rating increase compared to last month *Last updated: July 03, 2026* ## How Does G2 Rank User Provisioning and Governance Tools Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 14,400+ Authentic Reviews - 190+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## Which User Provisioning and Governance Tools Is Best for Your Use Case? - **Leader:** [Okta](https://www.g2.com/products/okta/reviews) - **Highest Performer:** [tenfold](https://www.g2.com/products/tenfold-tenfold/reviews) - **Easiest to Use:** [Okta](https://www.g2.com/products/okta/reviews) - **Top Trending:** [Rippling IT](https://www.g2.com/products/rippling-it/reviews) - **Best Free Software:** [JumpCloud](https://www.g2.com/products/jumpcloud/reviews) --- **Sponsored** ### JumpCloud JumpCloud® delivers a unified identity, device, and access management platform that makes it easy to securely manage identities, devices, and access across your organization. With JumpCloud, IT teams and MSPs enable users to work securely from anywhere and manage their Windows, Apple, Linux, and Android devices from a single platform. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=paid_promo&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=255&secure%5Bchosen_at%5D=2026-07-04T11%3A24%3A30Z&secure%5Bmedium%5D=sponsored&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=36316&secure%5Bresource_id%5D=255&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fuser-provisioning-and-governance-tools%2Ff%2Fmobile-app&secure%5Btoken%5D=ee55597e1394cf2a22750915d90347d5a3000a795ff1e975d86e4a82ea4b31ae&secure%5Burl%5D=https%3A%2F%2Fjumpcloud.com%2Flp%2Fcloud-directory-fava-bean%3Futm_source%3DG2-Paid%26utm_medium%3DPaid-Directory%26utm_content%3DGoverance%26utm_campaign%3DG2PaidPromotions&secure%5Burl_type%5D=paid_promos) --- ## What Are the Top-Rated User Provisioning and Governance Tools Products in 2026? ### 1. [Adaptive Security Manager](https://www.g2.com/products/adaptive-security-manager/reviews) Adaptive Security Manager is an Intelligent, affordable, adaptive multi-factor security for web applications. **Who Is the Company Behind Adaptive Security Manager?** - **Seller:** [aPersona](https://www.g2.com/sellers/apersona) - **HQ Location:** Raleigh, NC - **Twitter:** @aPersona_ (119 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) ### 2. [AD Health Profiler](https://www.g2.com/products/ad-health-profiler/reviews) AD Health Profiler can do health check of production Active Directory Forests. A complete health check indeed is needed before implementing new solutions to your customers and/or before making a big change in your production environment. **Who Is the Company Behind AD Health Profiler?** - **Seller:** [ossisto365](https://www.g2.com/sellers/ossisto365) - **Year Founded:** 2019 - **HQ Location:** Perth Amboy, US - **Twitter:** @ossisto365 (12 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/ossisto365/ (8 employees on LinkedIn®) ### 3. [Akkadian Provisioning Manager](https://www.g2.com/products/akkadian-provisioning-manager/reviews) Built to streamline Cisco Collaboration administration, Akkadian Provisioning Manager automates provisioning across multiple UC servers and applications. But, the solution is so much more than moves, adds, changes, and deletes–and the additional UC management tools are all included. Akkadian Provisioning Manager stands out as a turnkey solution that’s flexible to your environment, without costly customization. **Who Is the Company Behind Akkadian Provisioning Manager?** - **Seller:** [Akkadian Labs](https://www.g2.com/sellers/akkadian-labs) - **HQ Location:** New York, US - **Twitter:** @akkadianlabs (789 Twitter followers) - **LinkedIn® Page:** http://www.linkedin.com/company/akkadianlabs (36 employees on LinkedIn®) ### 4. [Alex](https://www.g2.com/products/twine-security-alex/reviews) Alex is Twine's first AI Digital Employee - a cybersecurity expert in Identity and Access Management (IAM). Alex learns, understands and takes away the burden of IAM tasks - proactively completing your organization’s cyber objectives. **Who Is the Company Behind Alex?** - **Seller:** [Twine Security](https://www.g2.com/sellers/twine-security) - **HQ Location:** N/A - **LinkedIn® Page:** https://www.linkedin.com/company/twinesecurity (31 employees on LinkedIn®) ### 5. [Aquera Identity Integration as a Service](https://www.g2.com/products/aquera-identity-integration-as-a-service/reviews) Automate account aggregation without manually handling files **Who Is the Company Behind Aquera Identity Integration as a Service?** - **Seller:** [Aquera](https://www.g2.com/sellers/aquera) - **Year Founded:** 2016 - **HQ Location:** Seattle, US - **LinkedIn® Page:** https://www.linkedin.com/company/18114533 (283 employees on LinkedIn®) ### 6. [ARK for Windows Enterprise](https://www.g2.com/products/ark-for-windows-enterprise/reviews) Admin Report Kit for Windows Enterprise (ARKWE) is a powerful reporting solution for the Microsoft Windows Network. ARKWE collects configuration information about Windows domains & servers, users/groups, policies, events, services, installed applications, shares, permissions, printers, data sources etc. The reports are presented in a variety of formats that are simple, elegant and highly customizable for System Administrators, IT infrastructure Managers and Systems Audit personnel to use and act on. ARKWE's basket of Built-in reports provide powerful, ready-to-use reports that assist in both Management reporting and Compliance reporting requirements such as SOX and HIPAA. A single solution that serves your everyday needs of administrative tasks as well as complex data preparation tasks for assisting in compliance. ARKWE has been architected using the latest Microsoft .NET technology, bringing you the best-in-breed reporting solution for your entire Windows Network. ARKWE is highly optimized for performance (using native Windows API calls wherever appropriate), resulting in fast data collection of deeply embedded configuration data. Imagine scanning your vast network of workstations and servers without having to wait forever to see your reports! You can create data subsets for your network using ARKWE's powerful scan options and meaningfully segment your entire network for data collection and reporting. Windows Network Audit: NTFS Permissions Reports: Gather NTFS security permissions across servers and workstations in an entire domain. Effective Permissions: Generate Effective Permissions of groups and users on shares, folders and files permissions that have been explicitly set and those that have been inherited through groups and nested groups. Local Group Membership: Get the local groups settings of workstations. Network Inventory: Inventory your entire Windows network - servers, workstations, network resources, configuration settings etc. **Who Is the Company Behind ARK for Windows Enterprise?** - **Seller:** [Vyapin](https://www.g2.com/sellers/vyapin) - **Year Founded:** 1996 - **HQ Location:** Chennai, Tamil Nadu - **Twitter:** @vyapinsoftware (94 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/661868/ (29 employees on LinkedIn®) ### 7. [Arnica UnifiedLogon](https://www.g2.com/products/arnica-unifiedlogon/reviews) Arnica UnifiedLogon is an identity management software that provides access control, personalization and configuration services, and allows users to implement single-point user log-on for access to multiple applications. **Who Is the Company Behind Arnica UnifiedLogon?** - **Seller:** [Arnica Software](https://www.g2.com/sellers/arnica-software) - **HQ Location:** N/A - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) ### 8. [Aserto](https://www.g2.com/products/aserto/reviews) Aserto helps developers build secure applications. It makes it easy to add fine-grained, policy-based, real-time access control to applications and APIs.Aserto handles all the heavy lifting required to achieve secure, scalable, high-performance access management. It offers blazing-fast authorization of a local library coupled with a centralized control plane for managing policies, user attributes, relationship data, and decision logs. And it comes with everything you need to implement any authorization model, including RBAC, ABAC, and ReBAC. Take a look at our open-source projects: - Topaz.sh: a standalone authorizer you can deploy in your environment to add fine-grained access control to your applications. Topaz lets you combine OPA policies with Google Zanzibar’s data model for complete flexibility. - OpenPolicyContainers.com (OPCR) secures OPA policies across the lifecycle by adding the ability to tag, version, sign, and test these policies. **Average Rating:** 4.0/5.0 **Total Reviews:** 1 **Who Is the Company Behind Aserto?** - **Seller:** [Aserto](https://www.g2.com/sellers/aserto) - **Year Founded:** 2020 - **HQ Location:** Redmond, US - **LinkedIn® Page:** http://www.linkedin.com/company/aserto-com (4 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Small-Business #### What Are Recent G2 Reviews of Aserto? **"[Improves the security of our applications](https://www.g2.com/survey_responses/aserto-review-10192717)"** **Rating:** 4.0/5.0 stars *— Sutrisno G.* [Read full review](https://www.g2.com/survey_responses/aserto-review-10192717) --- ### 9. [BalkanID](https://www.g2.com/products/balkanid/reviews) BalkanID is an AI-driven Identity Security and Access Governance platform designed to help organizations manage and secure user access across SaaS and public cloud environments. By leveraging data science and machine learning, BalkanID provides comprehensive visibility into entitlement risks, automates access reviews, and streamlines lifecycle management processes. This enables businesses to enforce the principle of least privilege, ensuring that users have only the necessary access required for their roles, thereby reducing the attack surface and enhancing overall security posture. Key Features and Functionality: - Access Lifecycle Management: Automates the onboarding, offboarding, and management of user access with context-aware, just-in-time (JIT access controls for both cloud and on-premises integrations. - Access Reviews & Certification: Facilitates granular access reviews with intelligent recommendations and comprehensive reporting, simplifying compliance and audit processes. - Identity Risk & Role-Based Access Control (RBAC Analyzer: Identifies and prioritizes identity risks, uncovering gaps in RBAC to mitigate potential security threats. - Copilot & Playbooks: Enhances Identity Governance and Administration (IGA with natural language workflows and automated playbooks for proactive risk remediation. Primary Value and Problem Solved: BalkanID addresses the challenge of entitlement sprawl in modern cloud environments, where organizations often struggle to monitor and control user access effectively. By providing deep insights into permission layers, detecting toxic combinations, and automating remediation processes, BalkanID enables businesses to balance security with employee productivity. This proactive approach to identity risk management ensures compliance, reduces the likelihood of security breaches, and supports a robust security framework tailored to the dynamic needs of contemporary enterprises. **Who Is the Company Behind BalkanID?** - **Seller:** [BalkanID](https://www.g2.com/sellers/balkanid) - **Year Founded:** 2021 - **HQ Location:** Austin, US - **LinkedIn® Page:** https://www.linkedin.com/company/balkanid (25 employees on LinkedIn®) ### 10. [BastionZero](https://www.g2.com/products/bastionzero/reviews) BastionZero is a Zero Trust access platform for infrastructure, offering passwordless access to various resources like servers and Kubernetes, paired with Identity Providers (IdP) for policy-based access control. It eliminates the need for VPNs, SSH keys, and provides real-time visibility into user activity, continuous validation of security postures, and instant revocation of access when necessary. It's a cloud service reducing operational overhead and removing single points of compromise while preserving existing engineering workflows. **Who Is the Company Behind BastionZero?** - **Seller:** [BastionZero](https://www.g2.com/sellers/bastionzero) - **Year Founded:** 2020 - **HQ Location:** Boston, US - **Twitter:** @getBastionZero (416 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/bastionzero/mycompany/ (2 employees on LinkedIn®) ### 11. [BCC Affirmatic](https://www.g2.com/products/bcc-affirmatic/reviews) BCC Affirmatic is your unified point of access for all Microsoft 365 resources to provide precise Lifecycle Management and Governance, deployable on public or private cloud. By specialising in Guest User Management within Microsoft 365, we provide tailored customizations to govern the creation and entire lifecycle of external user accounts, surpassing the standard options available in M365. With its native interface integrated in the Teams application, BCC Affirmatic enables seamless employee self-service to extract maximum value from your technology resources. Achieve consistency, efficiency, and security with BCC Affirmatic. For over 25 years, BCC has helped organizations transition to Microsoft 365 and optimizes existing M365 and HCL Domino infrastructures - focusing on security, governance, and digital identity, as well as transforming data to help organizations embrace new ways of working together and reduce management costs. Headquarted in Germany and London, we serve more than 800 customers around the world. **Who Is the Company Behind BCC Affirmatic?** - **Seller:** [BCC](https://www.g2.com/sellers/bcc) - **Year Founded:** 1996 - **HQ Location:** Eschborn, Hessen - **LinkedIn® Page:** https://www.linkedin.com/company/bcc-gmbh/ (74 employees on LinkedIn®) ### 12. [Data Governance Manager (Deep DGM)](https://www.g2.com/products/data-governance-manager-deep-dgm/reviews) Deep Data Governance Manager (Deep DGM) provides complete automation for identity, data access governance and lifecycle management with the integration between other modules such as Deep IACM and Deep IM. It enables enterprises to automatically classify data for PDPA and other compliance requirements. **Who Is the Company Behind Data Governance Manager (Deep DGM)?** - **Seller:** [Deep Identity](https://www.g2.com/sellers/deep-identity) - **Year Founded:** 2009 - **HQ Location:** SINGAPORE, SG - **LinkedIn® Page:** https://www.linkedin.com/company/deep-identity (58 employees on LinkedIn®) ### 13. [Directory Update](https://www.g2.com/products/directory-update/reviews) Directory Update enable users to update their own information in Active Directory, the Exchange Global Address List, and Microsoft 365 as well as manage distribution list group membership using an easy-to-use web application that you host on an internal Internet Information Server (IIS). The administrator specifies which attributes can be updated as well as validation rules that help you ensure information is valid and current. **Who Is the Company Behind Directory Update?** - **Seller:** [Ithicos Solutions](https://www.g2.com/sellers/ithicos-solutions) - **Year Founded:** 2007 - **HQ Location:** Colorado Springs, US - **LinkedIn® Page:** https://www.linkedin.com/company/ithicos-solutions-llc/ (2 employees on LinkedIn®) ### 14. [DSRAZOR for Windows](https://www.g2.com/products/dsrazor-for-windows/reviews) Quickly document user and/or group NTFS effective and share permissions. Discover file ownership throughout your shared disk space. Report on users, groups, computers, permissions. Make sure your Active Directory object attributes match your enterprise standard. Find accounts that are locked, disabled, expired or unused for x days. Automate common Active Directory management tasks. Automatically synchronize your Student Information System (SIS) to Active Directory. Create/Import/Update users, groups and computers including bulk management. Effectively manage Active Directory - no scripting required! Delete/Move unused users, groups and computers. Reset passwords in bulk. Perform mass object imports from a CSV file. Modify trustee permissions for desired Folders. Document and manage Office 365 accounts. Allow non-admins to perform Active Directory management functions. Delegate the small stuff, focus on the big stuff. **Who Is the Company Behind DSRAZOR for Windows?** - **Seller:** [Visual Click Software](https://www.g2.com/sellers/visual-click-software) - **Year Founded:** 1999 - **HQ Location:** Austin, US - **Twitter:** @VisualClickSoft (18 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/visual-click-software (13 employees on LinkedIn®) ### 15. [DynamicGroup](https://www.g2.com/products/dynamicgroup/reviews) FirstWare DynamicGroup is an AD automation tool. It provides automated group assignments of AD objects. Real time savings and higher security through group memberships which are always up-to-date. **Who Is the Company Behind DynamicGroup?** - **Seller:** [FirstAttribute](https://www.g2.com/sellers/firstattribute) - **HQ Location:** N/A - **Twitter:** @FirstAttribute (64 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) ### 16. [e2mod](https://www.g2.com/products/e2mod/reviews) e2mod delivers identity management and administration of On Premises AD and EntraID via a web interface and via a Zero Trust archivtecture. With currently more than 160,000 users we are the choice of public service IT providers in Germany. **Who Is the Company Behind e2mod?** - **Seller:** [facts & figures](https://www.g2.com/sellers/facts-figures) - **HQ Location:** N/A - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) ### 17. [Evidian Enterprise SSO](https://www.g2.com/products/evidian-enterprise-sso/reviews) With Evidian Enterprise SSO access will be more quickly and securely available. Settings are managed and applied automatically. Evidian Identity & Access Manager will bring real changes to the daily routine of everyone in your company. **Who Is the Company Behind Evidian Enterprise SSO?** - **Seller:** [Eviden](https://www.g2.com/sellers/eviden) - **HQ Location:** Bezons, FR - **LinkedIn® Page:** https://www.linkedin.com/company/eviden/ (13,900 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Small-Business #### What Are G2 Users Discussing About Evidian Enterprise SSO? - [What is Evidian Enterprise SSO used for?](https://www.g2.com/discussions/evidian-enterprise-sso-what-is-evidian-enterprise-sso-used-for) - [What is Evidian Enterprise SSO used for?](https://www.g2.com/discussions/what-is-evidian-enterprise-sso-used-for) ### 18. [Evidian Identity Governance and Administration](https://www.g2.com/products/evidian-identity-governance-and-administration/reviews) Manage identities accuretly, efficiently and confidentialy **Who Is the Company Behind Evidian Identity Governance and Administration?** - **Seller:** [Eviden](https://www.g2.com/sellers/eviden) - **HQ Location:** Bezons, FR - **LinkedIn® Page:** https://www.linkedin.com/company/eviden/ (13,900 employees on LinkedIn®) ### 19. [Fastman Permissions Manager](https://www.g2.com/products/fastman-permissions-manager/reviews) Fastman Permissions Manager simplifies permissions management and strengthens data security for OpenText™ and SAP Extended ECM. Designed for efficiency, it empowers administrators to manage complex access structures with ease, detect and resolve risks quickly, and streamline routine tasks without relying on IT support. Key Features: • Easy Administration: Intuitive dashboards simplify even the most complex access controls. • Enhanced Security: Detect irregularities, roll back changes, and ensure secure access. • Self-Service Tools: Empower users to handle permissions tasks independently, cutting costs and delays. Ready to use and trusted worldwide, Permissions Manager delivers secure, efficient control for enterprise content. **Who Is the Company Behind Fastman Permissions Manager?** - **Seller:** [Fastman](https://www.g2.com/sellers/fastman) - **Year Founded:** 2006 - **HQ Location:** Newport Beach, US - **LinkedIn® Page:** https://www.linkedin.com/company/fastman (14 employees on LinkedIn®) ### 20. [Fastman Time-Based Access for Extended ECM](https://www.g2.com/products/fastman-time-based-access-for-extended-ecm/reviews) Fastman Time-Based Access simplifies granting temporary permissions in OpenText™ and SAP Extended ECM. It allows content owners to assign specific access levels for a defined period, ensuring secure collaboration with automated expiry and real-time oversight. Key Features: • Temporary Access Control: Easily grant and revoke time-based permissions with expiration dates. • Automated Expiry Management: A background agent automatically removes expired access to maintain security. • Seamless Integration: Integrated into the Permissions Manager and Extended ECM menu for efficient management. • Clear Oversight: Icons and tooltips provide visibility into where temporary access is active. Part of the Fastman Management Suite, Time-Based Access ensures secure, efficient document sharing tailored to your business needs. **Who Is the Company Behind Fastman Time-Based Access for Extended ECM?** - **Seller:** [Fastman](https://www.g2.com/sellers/fastman) - **Year Founded:** 2006 - **HQ Location:** Newport Beach, US - **LinkedIn® Page:** https://www.linkedin.com/company/fastman (14 employees on LinkedIn®) ### 21. [FERNBACH Risk & Liquidity](https://www.g2.com/products/fernbach-risk-liquidity/reviews) Risk & Liquidity is a modular solution system, containing calculation engines, processes, interfaces, accounting templates and much more for numerous kinds of tasks. **Who Is the Company Behind FERNBACH Risk & Liquidity?** - **Seller:** [FERNBACH](https://www.g2.com/sellers/fernbach) - **HQ Location:** Grevenmacher, Luxembourg - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) ### 22. [Fischer Identity](https://www.g2.com/products/fischer-identity/reviews) Fischer Identity is a leading developer of enterprise Identity and Access Management (IAM) solutions based on the Zero Trust model. Our products simplify, accelerate and automate the complex task of IAM with cloud-based solutions leveraging the AWS infrastructure without limits of scalability or reach, and ensures constant access to innovation. Fischer Identity solutions are flexible and empowers your organization to build a secure identity management program. Zero Trust starts with Identity. **Average Rating:** 4.3/5.0 **Total Reviews:** 3 **Who Is the Company Behind Fischer Identity?** - **Seller:** [Fischer Identity](https://www.g2.com/sellers/fischer-identity) - **Year Founded:** 2005 - **HQ Location:** Naples, FL - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) - **Phone:** 800-776-7258 **Who Uses This Product?** - **Company Size:** 67% Small-Business, 33% Mid-Market #### What Are Recent G2 Reviews of Fischer Identity? **"[Seamless Identity Management with Fischer Identity](https://www.g2.com/survey_responses/fischer-identity-review-10060949)"** **Rating:** 5.0/5.0 stars *— Ghanshyam T.* [Read full review](https://www.g2.com/survey_responses/fischer-identity-review-10060949) --- **"[Empowering Secure Access Management](https://www.g2.com/survey_responses/fischer-identity-review-9571453)"** **Rating:** 4.0/5.0 stars *— Leena S.* [Read full review](https://www.g2.com/survey_responses/fischer-identity-review-9571453) --- ### 23. [Garancy®](https://www.g2.com/products/beta-systems-software-ag-garancy/reviews) Garancy is a comprehensive Identity Access Management (IAM) software solution designed to help organizations manage and secure access to their data and applications. It provides a robust framework for controlling and monitoring access rights based on specific organizational requirements and user roles. This solution is suitable for companies of all sizes and across various industries, ensuring that sensitive information remains protected while enabling authorized users to perform their tasks efficiently. The primary audience for Garancy includes IT administrators, security professionals, and compliance officers who are responsible for safeguarding organizational data. These users face the challenge of balancing security with accessibility, particularly in dynamic environments where roles and responsibilities may frequently change. Garancy addresses these challenges by offering a flexible and scalable solution that adapts to evolving business needs. It streamlines the process of granting, modifying, and revoking access rights, thereby reducing the risk of unauthorized access and potential data breaches. Garancy's key features include role-based access control, automated provisioning and de-provisioning, and comprehensive audit trails. Role-based access control allows organizations to define user roles and assign permissions accordingly, ensuring that employees only have access to the information necessary for their job functions. Automated provisioning and de-provisioning simplify the management of user accounts, allowing for quick adjustments as employees join or leave the organization or change roles. Additionally, the comprehensive audit trails provide visibility into user activities, enabling organizations to monitor access patterns and ensure compliance with regulatory requirements. The benefits of using Garancy extend beyond enhanced security. By implementing this IAM solution, organizations can improve operational efficiency, reduce administrative overhead, and enhance user experience. With streamlined access management processes, IT teams can focus on strategic initiatives rather than spending excessive time on manual access requests. Furthermore, users benefit from a seamless experience, as they can access the applications and data they need without unnecessary delays or complications. Garancy stands out in the IAM category due to its adaptability and user-centric design. It caters to the unique needs of each organization, providing customizable solutions that align with specific business objectives. By prioritizing both security and usability, Garancy empowers organizations to protect their critical assets while fostering a productive work environment. **Who Is the Company Behind Garancy®?** - **Seller:** [Beta Systems Software AG](https://www.g2.com/sellers/beta-systems-software-ag-b1443673-394c-46ac-b09d-c606d5372178) - **Year Founded:** 1983 - **HQ Location:** Berlin, DE - **LinkedIn® Page:** https://www.linkedin.com/company/beta-systems-software-ag (361 employees on LinkedIn®) - **Phone:** +49 (0) 30 72 61 18 0 ### 24. [Hyena](https://www.g2.com/products/hyena/reviews) Hyena is software that helps administrators manage a medium to large Windows 200x network or Active Directory environment. **Who Is the Company Behind Hyena?** - **Seller:** [SystemTools Software](https://www.g2.com/sellers/systemtools-software) - **Year Founded:** 1997 - **HQ Location:** La Vernia, US - **Twitter:** @systemtools (108 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/systemtools-software/ (7 employees on LinkedIn®) ### 25. [IAMCompare](https://www.g2.com/products/iamcompare/reviews) Now that it's clear why IAMCompare was built, let's review how it works. **Who Is the Company Behind IAMCompare?** - **Seller:** [IAMCompare](https://www.g2.com/sellers/iamcompare) - **Year Founded:** 2017 - **HQ Location:** Broomfield, US - **Twitter:** @IAMCompare (67 Twitter followers) - **LinkedIn® Page:** http://www.linkedin.com/company/iamcompare (2 employees on LinkedIn®) ## What Is User Provisioning and Governance Tools? [Identity Management Software](https://www.g2.com/categories/identity-management) ## What Software Categories Are Similar to User Provisioning and Governance Tools? - [Single Sign-On (SSO) Solutions](https://www.g2.com/categories/single-sign-on-sso) - [Identity and Access Management (IAM) Software](https://www.g2.com/categories/identity-and-access-management-iam) - [Multi-Factor Authentication (MFA) Software](https://www.g2.com/categories/multi-factor-authentication-mfa) --- ## How Do You Choose the Right User Provisioning and Governance Tools? ### What You Should Know About User Provisioning and Governance Tools ### What are user provisioning and governance tools and software? User provisioning and governance tools help companies automate the process of creating, permissioning, managing, and deactivating user accounts on corporate systems and applications across the enterprise. Typical use cases include user lifecycle stages such as setting up accounts for newly hired employees during onboarding and providing them access to the tools they need, changing user groups and permissions when employees are promoted or move within departments, and removing user accounts after an employee leaves the company. User provisioning and governance tools software automate user account creation by connecting information in user identity stores such as HR systems and/or user directories like Active Directory or G Suite to enterprise applications to systems that employees use such as email systems, databases, CRM systems, communication systems, employee productivity software, file storage systems, ERP applications, subscriptions, custom company applications, and more. There is considerable overlap between user provisioning and governance tools and [identity and access management (IAM) software](https://www.g2.com/categories/identity-and-access-management-iam) functionality, as both offer user provisioning and govern user access. User provisioning and governance solutions focus more specifically on user lifecycle and group management. At the same time, IAM software includes additional benefits, such as centralized identity functions for both on-premises and cloud accounts and providing user authentication before granting user access to corporate systems. ### **Key benefits of user provisioning and governance software solutions** - Automate user account lifecycle from provisioning during onboarding through de-provisioning after leaving the company - Grant access to applications and systems based on user type through role or group management functions - Reduce the time helpdesk team members need to spend manually creating users - Improve end-user experience by offering self-service tools and integrations with [single sign-on solutions](https://www.g2.com/categories/single-sign-on-sso) and [password management tools](https://www.g2.com/categories/password-managers) ### Why use user provisioning and governance systems? Using automated tools to manage user lifecycles, companies can eliminate manual user provisioning and de-provisioning tasks, which can ultimately reduce the burden on IT help desk teams and free up staff time for more high-level work. Deploying user provisioning and governance solutions reduces human error when creating accounts while reducing the threat of “permission creep" when accounts are not properly changed after promotions, demotions, or terminations. Using this software enables companies to manage large numbers of users at once by applying role or group policies across users in a standard fashion. **Setting up new hires —** Companies use user provisioning and governance tools to ensure new hires receive access to the accounts they need as quickly as possible during onboarding. If IT staff manually created user accounts, the process could take days, weeks, or even months and be prone to human error. **Removing access for terminated employees—** It is important to remove access for terminated employees as quickly as possible to prevent security risks, either from the terminated employees themselves or from hackers accessing abandoned user accounts. Using user provisioning and governance tools, companies can automatically de-provision user accounts when an employee is removed from an HR system or other identity store. **Enforcing role or group-based policies —** When managing hundreds (if not thousands) of user accounts, taking actions, such as providing access to new applications based on the users’ role or group types, can save a lot of time and get these users up and running quickly. For example, suppose all sales representatives should have access to a particular sales-related application. In that case, those user accounts can automatically be provisioned with access if they belong to the sales group. On the other hand, employees in the legal department may not need access to that sales application, so they would not be provisioned with an account for that specific sales software. **Security — ** Insider threats can occur when user accounts are given too much access for their job type, and employees use the information they shouldn’t have access to. For example, an intern-employee likely shouldn’t be given the same access to the company’s accounts, like an accounting system, as the chief operating officer has. Using role- and group-based policies, IT administrators can easily remove permissions no longer needed by a type or group of employees and prevent permission creep. **Reducing costs—** Labor ** ** is typically one of the highest expenses companies have. Using user provisioning and governance tools frees up time for IT help desk team members to do other higher-value work. Many user provisioning and governance tools solutions allow end-user self-service to make changes like name changes directly. ### Who uses user provisioning and governance software tools? Most companies would benefit from using identity governance software solutions to manage employee user account provisioning, management, and de-provisioning. In particular, companies with many employees and user accounts to manage, such as enterprise-level companies, would benefit from using identity governance platforms, as manual account creation is difficult, laborious, and prone to error. IT administrators and help desk teams typically manage user provisioning and governance tools within a company’s corporate structure. With automated lifecycle management, however, multiple stakeholders across the enterprise can work in tandem to ensure users are set up correctly and have the proper access. For example, HR representatives can change new hires or people who have left the company in the HR system. This information can be pulled by the user provisioning and governance tools system to automatically take actions on a user’s associated accounts. End users can use self-service tools to make changes to their user profile, like name or title changes. ### Features of user provisioning and governance tools At their core, user provisioning/governance software must, at minimum, provide tools to automatically provision and de-provision user accounts based on user identities and grant permissions based on governance rules for users to access specific enterprise applications. Many user provisioning/governance software offers additional features to further automate user account lifecycles and provide a better end-user experience. These features may include: **Automatic user provisioning and de-provisioning —** User provisioning/governance software pulls data from identity stores like [HR systems](https://www.g2.com/categories/core-hr) to provision new accounts. Specific access to accounts can be automated based on roles or group membership. When an employee leaves or is terminated or when a contractor’s contract date expires, the software can automatically terminate accounts to prevent abandoned accounts from living on in systems. **Lifecycle management —** The software takes user account actions throughout employee lifecycle changes from onboarding and promotions to termination. **Integrations —** A main tenet of user provisioning/governance software is integrating with other software applications such as HR systems, user directories, [ERP applications](https://www.g2.com/categories/erp-systems), [email systems](https://www.g2.com/categories/email), [databases](https://www.g2.com/categories/database-software), [CRM systems](https://www.g2.com/categories/crm), communication systems, employee productivity software, and [file storage systems](https://www.g2.com/categories/cloud-file-storage). **Identity synchronization —** User provisioning/governance software can synchronize identity information changes across multiple applications. For example, if a user changes their personal information, such as a phone number or title, in one system, those changes are pushed to their other applications in corporate systems. **Access governance, role/group management, and policy enforcement —** Governing who has access to what applications or systems is determined by a user’s role and group membership. Using role-based or group membership factors to determine what access a user should be granted ensures that access to a company application is granted uniformly and adheres to company policies. **Delegated access authorization—** When business managers need to give their subordinates access to company accounts or change their permissions, they can approve access using delegation workflows. **Access verification workflow —** User provisioning/governance software can regularly query managers to confirm their subordinates' access and whether changes need to be made. **Reports and audits—** User provisioning/governance software can conduct audits and provide reports on account usage, including account creation and deactivation. This may be a necessary feature for companies in highly regulated industries that need to periodically audit users. **User self-service and improved user experience —** Providing users with self-service functionality, such as allowing employees to change their names and titles directly in the system or being able to request access to specific applications for manager approval, can further remove manual processes off IT helpdesk staff and improve employee productivity. **Password management and single sign-on—** Many user provisioning and governance tools offer additional end-user benefits, such as password management and single sign-on functionality. Other Features of User Provisioning and Governance Tools: [Bi-directional identity synchronization](https://www.g2.com/categories/user-provisioning-and-governance-tools/f/bi-directional-identity-synchronization), [Identifies and alerts for threats](https://www.g2.com/categories/user-provisioning-and-governance-tools/f/identifies-and-alerts-for-threats), [Mobile app](https://www.g2.com/categories/user-provisioning-and-governance-tools/f/mobile-app) ### Emerging trends in user provisioning and governance Historically speaking, Microsoft’s product, Active Directory (AD), has been one of the most widely used directory services since its introduction in 1999. Because of AD’s large market share, it is worth mentioning that many other user provisioning and governance tools vendors generally offer both identity and user governance tools that integrate with AD or, conversely, offer entirely separate solutions that utilize their own directory service. Active Directory manages IT resources, stores information about users, groups, applications, and networks, and provides access to computers, applications, and servers. AD was initially designed for on-premises use cases. Still, given the shift to cloud computing and storage in the digital transformation, Microsoft introduced Azure AD, which extends an on-premises instance of AD to the cloud and synchronizes identities with cloud-based applications. Other user provisioning and governance tools offer cloud solutions tying into on-site AD instances. Many providers provide cloud-native solutions and robust [identity and access management (IAM)](https://www.g2.com/categories/identity-and-access-management-iam) tools. ### Software and services related to user provisioning and governance solutions User provisioning and governance tools are part of a complete identity management solution. Many user provisioning and governance tools providers natively have or integrate with other providers to offer: [**Single sign-on (SSO) software**](https://www.g2.com/categories/single-sign-on-sso) **—** Single sign-on (SSO) software allows users to access multiple corporate applications with one set of credentials. This gives users more access to their applications without logging in multiple times. Single sign-on (SSO) is achieved through federation by linking IT systems, applications, and identities to create a seamless user experience. [**Password manager software**](https://www.g2.com/categories/password-manager) **—** Password manager software helps end users manage their passwords by allowing them to create one master password to access the passwords associated with their accounts. This is different from single sign-on, which federates the identity to other applications, while password manager software merely provides a secure storage vault to house user passwords. [**Identity and access management (IAM) software**](https://www.g2.com/categories/identity-and-access-management-iam) **—** User provisioning and governance tools are a part of identity and access management (IAM) functionality, which allows IT administrators to quickly provision, de-provision, and change user identities. IAM software also authenticates users to ensure they are who they say they are before providing access to corporate assets. IAM software is a modern solution, especially for companies utilizing numerous cloud-based applications. [**Customer identity and access management (CIAM) software**](https://www.g2.com/categories/customer-identity-and-access-management-ciam) **—** Customer identity and access management (CIAM) software manages a company’s customer identities and accounts. CIAM is different from identity and access management (IAM) software. IAM is used for internal corporate use—such as managing the identities of internal employees or contractors—while CIAM is for customer-focused identity management. [**Privileged access management (PAM) software**](https://www.g2.com/categories/privileged-access-management-pam) **—** Privileged access management (PAM) software is a tool used to protect a company’s privileged account credentials. It is generally used by IT administrators and other super users with high-level access to applications, not everyday users. [**Multi-factor authentication (MFA) software**](https://www.g2.com/categories/multi-factor-authentication-mfa) **—** Before granting a user access to company assets, it is essential to authenticate that they are indeed who they say they are. This can be achieved using multi-factor authentication (MFA) software solutions such as SMS codes, mobile push, biometric verification, or email one-time-pass (OTP) pushes. For example, if an employee loses their laptop, the laptop and the accounts the employee has access to are generally rendered useless to someone else unless that person could spoof the employee’s other authentication factors.