# Best User Provisioning and Governance Tools - Page 7

## How Many User Provisioning and Governance Tools Products Does G2 Track?

**Total Products under this Category:** 191

### Category Stats (Jul 2026)

- **Average Rating:** 4.49/5 (↑0.01 vs Jun 2026) The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** miniOrange Identity & Access Management (+0.77%) - Among all products in this category, miniOrange Identity & Access Management recorded the largest rating increase compared to last month

_Last updated: July 31, 2026_

## How Does G2 Rank User Provisioning and Governance Tools Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 14,600+ Authentic Reviews
- 191+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for User Provisioning and Governance Tools
 ![G2 Grid® for User Provisioning and Governance Tools plotting products by satisfaction and market presence](https://www.g2.com/categories/user-provisioning-and-governance-tools/grids.png?focus%5B%5D=633&focus%5B%5D=36316&focus%5B%5D=3899&focus%5B%5D=1640029&focus%5B%5D=4533&focus%5B%5D=5689&focus%5B%5D=4206&focus%5B%5D=22264)

Highlighted products: Okta, JumpCloud, Microsoft Entra ID, Rippling IT, 1Password, ManageEngine ADManager Plus, SailPoint, and Auth0.

Underlying data: [Grid® JSON](https://www.g2.com/categories/user-provisioning-and-governance-tools/grids.json?focus%5B%5D=okta&focus%5B%5D=jumpcloud&focus%5B%5D=microsoft-entra-id&focus%5B%5D=rippling-it&focus%5B%5D=1password&focus%5B%5D=manageengine-admanager-plus&focus%5B%5D=sailpoint&focus%5B%5D=auth0)

**Sponsored**

### Google Cloud Identity & Access Management (IAM)

Fine-grained access control and visibility for centrally managing cloud resources.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=255&secure%5Bchosen_at%5D=2026-07-31T18%3A22%3A14Z&secure%5Bdisplayable_resource_id%5D=1252&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=neighbor_category&secure%5Bplacement_resource_ids%5D%5B%5D=257&secure%5Bplacement_resource_ids%5D%5B%5D=1117&secure%5Bplacement_resource_ids%5D%5B%5D=1251&secure%5Bplacement_resource_ids%5D%5B%5D=1252&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=21375&secure%5Bresource_id%5D=255&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fuser-provisioning-and-governance-tools%3Fpage%3D7&secure%5Btoken%5D=0bcdc8e787bccf70d1d554f0d6501d6aa378fd508ea5f9537e73aa810c3ae78d&secure%5Burl%5D=https%3A%2F%2Fcloud.google.com%2Fidentity%3Futm_source%3DG2%26utm_medium%3Ddisplay%26utm_campaign%3DCloud-SS-DR-GCP-1713658-GCP-DR-NA-US-en-G2-Display-Banner-All-%2525epid%21-%2525ecid%21-iam%26utm_content%3D%257Bdevice%257D-%257Badgroupid%257D-%257Bnetwork%257D-%257Btargetid%257D-%257Bloc_physical_ms%257D-%257Bcampaignid%257D&secure%5Burl_type%5D=custom_url)

### [Cloud SSO](https://www.g2.com/products/cloud-sso/reviews)

Identacor provides a cutting edge, cloud-based Single Sign-On (SSO), provisioning and reporting platform designed to save budgets, free up valuable time, and relieve the technical and administrative challenges of today’s web-enabled world,

**Average Rating:** 4.5/5.0

**Total Reviews:** 2

#### How Do G2 Users Rate Cloud SSO?

- **Mobile App:** 10.0/10 (Category avg: 7.5/10)
- **APIs:** 9.2/10 (Category avg: 8.5/10)
- **Bi-directional Identity Synchronization:** 8.3/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Cloud SSO?

- **Seller:** [Identacor](https://www.g2.com/sellers/identacor)
- **Year Founded:** 2012
- **HQ Location:** Newport Beach, US
- **Twitter:** @Identacor  
363 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=e9d5bfb00a820e8c25c7522b660818cbc585ec40c4f03fc8c343012bec625454&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F2920760&secure%5Burl_type%5D=linkedin_company_website)  
2 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 50% Large, 50% Medium

#### What Do G2 Reviewers Say About Cloud SSO?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **secure login** feature via the authenticator app, enhancing their overall security experience.

#### What Are Recent G2 Reviews of Cloud SSO?

**["Single Sign-On connect with VPN and login via authenticator app"](https://www.g2.com/survey_responses/cloud-sso-review-10253947)**

**Rating:** 5.0/5.0 stars

_— Priyanshul G._

[Read full review](https://www.g2.com/survey_responses/cloud-sso-review-10253947)

**["Streamlined Access with Powerful Integrations"](https://www.g2.com/survey_responses/cloud-sso-review-12668661)**

**Rating:** 4.0/5.0 stars

_— Devendra S._

[Read full review](https://www.g2.com/survey_responses/cloud-sso-review-12668661)

### [Entrust Identity as a Service](https://www.g2.com/products/entrust-identity-as-a-service/reviews)

Entrust Identity as a Service is a cloud-based identity and access management (IAM) solution with multi-factor authentication (MFA), credential-based passwordless access, and single sign-on (SSO). Entrust Identity as a Service secures access to devices, applications, and resources with an analyst top-rated identity solution that has been proven across critical banking, government and healthcare infrastructures for more than 25 years. Point-and-click provisioning and out-of-the-box integrations with a variety of on-premises and cloud applications make Entrust Identity as a Service easy to deploy, so you can be up and running in under 30 minutes. Features include: • User self service - password reset, authenticators • VPN remote access • SSO portal • AD sync • Office 365 (SAML integration) • Additional SAML applications (e.g. SDFC, WebEx) • Mobile soft token and push notifications • SMS/Email OTP, KBA, Google Auth, FIDO2, Grid • Native device biometrics • Email, web & telephone support: Mon-Fri 8am-8pm EST • Adaptive/risk-based policy engine • System for Cross-Domain Identity Management (SCIM) • Desktop login (via Desktop Agent) • On-prem application integrations (OAM, Netsuite, IIS) • Azure Active Directory (AD) sync • OpenID Connect applications integration • Azure AD CAC • SIEM integration (Splunk) • Auth API (Custom web / mobile apps) • Admin API (users / groups / policies) • Cross-platform facial biometrics • LDAP database sync • OAuth 2.0 URL/API protection • Mobile smart credential/bluetooth login

**Average Rating:** 4.4/5.0

**Total Reviews:** 11

#### How Do G2 Users Rate Entrust Identity as a Service?

- **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Entrust Identity as a Service?

- **Seller:** [Entrust, Inc.](https://www.g2.com/sellers/entrust-inc)
- **Year Founded:** 1969
- **HQ Location:** Minneapolis, MN
- **Twitter:** @Entrust\_Corp  
6,414 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b5a4225ae49de6dfdaf089dc21e9cf0b378f7e9d187d72d686b2414d5d73ae19&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fentrust%2F&secure%5Burl_type%5D=linkedin_company_website)  
3,751 employees on LinkedIn®
- **Phone:** 1-888-690-2424

#### Who Uses This Product?

- **Company Size:** 64% Large, 36% Medium

#### What Are Recent G2 Reviews of Entrust Identity as a Service?

**["Security Software"](https://www.g2.com/survey_responses/entrust-identity-as-a-service-review-7232858)**

**Rating:** 4.0/5.0 stars

_— Yan P._

[Read full review](https://www.g2.com/survey_responses/entrust-identity-as-a-service-review-7232858)

**["Excellent tool for secure remote login."](https://www.g2.com/survey_responses/entrust-identity-as-a-service-review-7237855)**

**Rating:** 4.0/5.0 stars

_— Verified User in Mining & Metals_

[Read full review](https://www.g2.com/survey_responses/entrust-identity-as-a-service-review-7237855)

#### What Are G2 Users Discussing About Entrust Identity as a Service?

- [What is Entrust Identity as a Service used for?](https://www.g2.com/discussions/what-is-entrust-identity-as-a-service-used-for)

### [Omada Identity](https://www.g2.com/products/omada-identity/reviews)

Omada simplifies complex IGA challenges with its cloud-based Omada Identity Cloud solution. By leveraging AI/ML, automation, and advanced analytics, Omada empowers organizations to enhance security, streamline operations, and ensure compliance. With Omada, you can gain visibility into your identity landscape, optimize access controls, automate manual tasks, and meet regulatory requirements. Visit https://omadaidentity.com/products/omada-identity-cloud/ to learn more.

**Average Rating:** 4.0/5.0

**Total Reviews:** 3

#### How Do G2 Users Rate Omada Identity?

- **Has the product been a good partner in doing business?:** 6.7/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Omada Identity?

- **Seller:** [Omada](https://www.g2.com/sellers/omada)
- **Year Founded:** 2000
- **HQ Location:** Copenhagen, Capital Region of Denmark, Denmark
- **Twitter:** @omadaidentity  
857 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=c5b60eb153d13dbfebb9f60590a966843da5aa0a220a526a1aca9122d293e94a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fomada-as&secure%5Burl_type%5D=linkedin_company_website)  
328 employees on LinkedIn®
- **Phone:** 1-650-543-3198

#### Who Uses This Product?

- **Company Size:** 67% Large, 33% Small

#### What Are Recent G2 Reviews of Omada Identity?

**["Omada does Customer Identity Management the best in a trying time for cybersecurity"](https://www.g2.com/survey_responses/omada-identity-review-716870)**

**Rating:** 4.0/5.0 stars

_— Verified User in Investment Banking_

[Read full review](https://www.g2.com/survey_responses/omada-identity-review-716870)

**["Clean UI and really easy to use"](https://www.g2.com/survey_responses/omada-identity-review-9836340)**

**Rating:** 4.5/5.0 stars

_— Matt E._

[Read full review](https://www.g2.com/survey_responses/omada-identity-review-9836340)

### [OpenText NetIQ Directory & Resource Administrator](https://www.g2.com/products/opentext-netiq-directory-resource-administrator/reviews)

NetIQ Directory and Resource Administrator delivers enhanced administration of Microsoft directory and messaging environment on-premises and in the cloud. Simplify administrative activities such as provisioning and reporting across your complex, hybrid infrastructure. Implement granular, role-based delegation, then extend those controls to other systems. Powerful workflow automation enables you to enforce policies on-premises and in the cloud to meet governance and compliance.

**Average Rating:** 4.8/5.0

**Total Reviews:** 2

#### Who Is the Company Behind OpenText NetIQ Directory & Resource Administrator?

- **Seller:** [OpenText](https://www.g2.com/sellers/opentext)
- **Year Founded:** 1991
- **HQ Location:** Waterloo, ON
- **Twitter:** @OpenText  
21,565 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=6c339a6555764b5ffce77c3df08d6ed9c9b1cb1ee1baeebac8435f0485b7cca5&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F2709%2F&secure%5Burl_type%5D=linkedin_company_website)  
23,048 employees on LinkedIn®
- **Ownership:** NASDAQ:OTEX

#### Who Uses This Product?

- **Company Size:** 50% Large, 50% Small

#### What Are Recent G2 Reviews of OpenText NetIQ Directory & Resource Administrator?

**["It's efficient"](https://www.g2.com/survey_responses/opentext-netiq-directory-resource-administrator-review-7257422)**

**Rating:** 5.0/5.0 stars

_— Verified User in Accounting_

[Read full review](https://www.g2.com/survey_responses/opentext-netiq-directory-resource-administrator-review-7257422)

**["This application takes all the guess work and redundancy out of Active Directory management"](https://www.g2.com/survey_responses/opentext-netiq-directory-resource-administrator-review-3051440)**

**Rating:** 4.5/5.0 stars

_— Adam M._

[Read full review](https://www.g2.com/survey_responses/opentext-netiq-directory-resource-administrator-review-3051440)

#### What Are G2 Users Discussing About OpenText NetIQ Directory & Resource Administrator?

- [What is Micro Focus NetIQ Directory & Resource Administrator used for?](https://www.g2.com/discussions/what-is-micro-focus-netiq-directory-resource-administrator-used-for)

### [PingOne for Workforce](https://www.g2.com/products/pingone-for-workforce/reviews)

PingOne for Workforce is a cloud-based identity and access management solution designed to provide secure and seamless access for employees, contractors, and partners across various applications and devices. By centralizing authentication processes, it enhances productivity and security within organizations. Key Features and Functionality: - Single Sign-On : Enables users to access multiple applications with a single set of credentials, reducing login fatigue and improving efficiency. - Multi-Factor Authentication : Provides an additional layer of security by requiring multiple forms of verification, such as biometrics or mobile authentication. - Adaptive Authentication: Implements dynamic security measures based on user behavior, location, and other contextual factors to enhance security without compromising user experience. - Centralized User Management: Offers a unified platform for managing user identities, access policies, and authentication settings, simplifying administrative tasks. - Integration with Enterprise Applications: Supports integration with a wide range of cloud-based and on-premises applications, including Microsoft environments, to ensure consistent and secure access. Primary Value and Problem Solved: PingOne for Workforce addresses the challenge of managing secure and efficient access to corporate resources in complex IT environments. By centralizing authentication and implementing adaptive security measures, it reduces the risk of unauthorized access, enhances compliance with security policies, and improves overall operational agility. This solution empowers organizations to implement a Zero Trust security strategy, verifying every user and device before granting access, thereby minimizing risk and enhancing operational agility.

**Average Rating:** 4.5/5.0

**Total Reviews:** 4

#### How Do G2 Users Rate PingOne for Workforce?

- **Mobile App:** 10.0/10 (Category avg: 7.5/10)

#### Who Is the Company Behind PingOne for Workforce?

- **Seller:** [Ping Identity](https://www.g2.com/sellers/ping-identity)
- **Year Founded:** 2002
- **HQ Location:** Denver, CO
- **Twitter:** @pingidentity  
42,053 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=d7bc87f22d7c02efbeb1365493925da4153acada6e51611ac77880667f106672&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F21870%2F&secure%5Burl_type%5D=linkedin_company_website)  
2,378 employees on LinkedIn®
- **Phone:** 1.303.468.2900

#### Who Uses This Product?

- **Company Size:** 50% Small, 25% Large

#### What Are Recent G2 Reviews of PingOne for Workforce?

**["Superquick and secure 2-factor authentication"](https://www.g2.com/survey_responses/pingone-for-workforce-review-6831778)**

**Rating:** 5.0/5.0 stars

_— Ishaan M._

[Read full review](https://www.g2.com/survey_responses/pingone-for-workforce-review-6831778)

**["PingOne is very simplified for published applications."](https://www.g2.com/survey_responses/pingone-for-workforce-review-8790847)**

**Rating:** 4.5/5.0 stars

_— Charan B._

[Read full review](https://www.g2.com/survey_responses/pingone-for-workforce-review-8790847)

#### What Are G2 Users Discussing About PingOne for Workforce?

- [What is PingOne for Enterprise used for?](https://www.g2.com/discussions/what-is-pingone-for-enterprise-used-for)

### [RapidIdentity](https://www.g2.com/products/rapididentity/reviews)

RapidIdentity is an identity management software that helps organizations embrace security, increase business agility, and deliver an enhanced user experience.

**Average Rating:** 4.4/5.0

**Total Reviews:** 10

#### How Do G2 Users Rate RapidIdentity?

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.0/10)

#### Who Is the Company Behind RapidIdentity?

- **Seller:** [Identity Automation](https://www.g2.com/sellers/identity-automation)
- **Year Founded:** 2004
- **HQ Location:** Houston, US
- **Twitter:** @identityauto  
603 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=6801a3df95560b5bdfb69a80671b1e2b59cd9ba5c67b8ccf9e03fe0ac21f382f&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fidentity-automation&secure%5Burl_type%5D=linkedin_company_website)  
54 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Primary/Secondary Education
- **Company Size:** 50% Large, 30% Medium

#### What Are Recent G2 Reviews of RapidIdentity?

**["Easy platform to use"](https://www.g2.com/survey_responses/rapididentity-review-7444339)**

**Rating:** 4.0/5.0 stars

_— Katie W._

[Read full review](https://www.g2.com/survey_responses/rapididentity-review-7444339)

**["Quick Identify Verification is Very User Friendly"](https://www.g2.com/survey_responses/rapididentity-review-6869955)**

**Rating:** 5.0/5.0 stars

_— Catherine M._

[Read full review](https://www.g2.com/survey_responses/rapididentity-review-6869955)

#### What Are G2 Users Discussing About RapidIdentity?

- [What does identity automation do?](https://www.g2.com/discussions/rapididentity-what-does-identity-automation-do)
- [What does identity automation do?](https://www.g2.com/discussions/what-does-identity-automation-do)
- [Who made RapidIdentity?](https://www.g2.com/discussions/who-made-rapididentity)
- [What is rapid identity app?](https://www.g2.com/discussions/what-is-rapid-identity-app)
- [How does RapidIdentity work?](https://www.g2.com/discussions/how-does-rapididentity-work)

### [ReShield](https://www.g2.com/products/reshield/reviews)

ReShield is an advanced Identity and Access Governance solution designed for companies looking to seamlessly secure and manage access to their critical data and infrastructure. It simplifies identity and permission management for both human and machine identities across Cloud, Databases, Kubernetes, and SaaS applications. Built specifically for Security, IT, and DevOps teams, ReShield helps you: - Gain complete visibility into user access, permissions, and identity-related risks. - Achieve least-privilege access through fine-grained controls accessible via Slack, Teams, and web interfaces. - Streamline compliance with automated user access reviews and detailed reporting. - Proactively identify and mitigate threats with real-time insights into identity and access risks. Tailored for modern cloud environments, ReShield can be deployed quickly, enabling teams to get started within a day instead of months.

**Average Rating:** 5.0/5.0

**Total Reviews:** 2

#### How Do G2 Users Rate ReShield?

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.0/10)
- **Mobile App:** 3.3/10 (Category avg: 7.5/10)
- **APIs:** 10.0/10 (Category avg: 8.5/10)
- **Bi-directional Identity Synchronization:** 10.0/10 (Category avg: 8.6/10)

#### Who Is the Company Behind ReShield?

- **Seller:** [ReShield](https://www.g2.com/sellers/reshield)
- **Year Founded:** 2023
- **HQ Location:** Mountain View, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=881360ef2641b0171a11a50765dcecd00c99f54888c2ef545d58a06dab5965a5&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fget-reshield&secure%5Burl_type%5D=linkedin_company_website)  
12 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Small

#### What Are Recent G2 Reviews of ReShield?

**["Easy to use and quick to provide value"](https://www.g2.com/survey_responses/reshield-review-11270012)**

**Rating:** 5.0/5.0 stars

_— Vijay S._

[Read full review](https://www.g2.com/survey_responses/reshield-review-11270012)

**["Enhancing Access governance, Visibility, Security, and Efficiency"](https://www.g2.com/survey_responses/reshield-review-10844885)**

**Rating:** 5.0/5.0 stars

_— Verified User in Health, Wellness and Fitness_

[Read full review](https://www.g2.com/survey_responses/reshield-review-10844885)

### [Access Assurance Suite](https://www.g2.com/products/helpsystems-access-assurance-suite/reviews)

A Key Part of Fortra (the new face of HelpSystems) Core Security is proud to be part of Fortra’s comprehensive cybersecurity portfolio. Fortra simplifies today’s complex cybersecurity landscape by bringing complementary products together to solve problems in innovative ways. These integrated, scalable solutions address the fast-changing challenges you face in safeguarding your organization. With the help of the powerful protection from Access Assurance Suite and others, Fortra is your relentless ally, here for you every step of the way throughout your cybersecurity journey.

**Average Rating:** 5.0/5.0

**Total Reviews:** 1

#### Who Is the Company Behind Access Assurance Suite?

- **Seller:** [Fortra](https://www.g2.com/sellers/fortra)
- **Year Founded:** 1982
- **HQ Location:** Eden Prairie, Minnesota
- **Twitter:** @fortraofficial  
2,773 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=dc35b82a1c8dc3d25f0baa190554ddab56d530c99dfc134038201f775fd252f8&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ffortra&secure%5Burl_type%5D=linkedin_company_website)  
1,755 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Medium

#### What Are Recent G2 Reviews of Access Assurance Suite?

**["Access Assurance Suite review"](https://www.g2.com/survey_responses/access-assurance-suite-review-7012300)**

**Rating:** 5.0/5.0 stars

_— era b._

[Read full review](https://www.g2.com/survey_responses/access-assurance-suite-review-7012300)

### [Access Auditor](https://www.g2.com/products/access-auditor/reviews)

Access Auditor is the fastest and easiest way to automate the entire user access review process. Access Auditor automates the discovery, review, reporting, and alerting of user access rights with an easy-to-use solution. For over 18 years, SCC has been delivering access review automation with the unique combination of the features and ease of use you need to success. Key points include: - Build your identity warehouse to know who has access to what - Use the Fuzzy ID to link users without a matching username - One-click user access reviews fully-customized to deliver reviews YOUR way - All evidence of compliace saved in one place forever - Powerful governance features like alerting, SOD, termination process - Role-Based access reviews and provisioning

**Average Rating:** 5.0/5.0

**Total Reviews:** 1

#### How Do G2 Users Rate Access Auditor?

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Access Auditor?

- **Seller:** [Security Compliance](https://www.g2.com/sellers/security-compliance)
- **Year Founded:** 2015
- **HQ Location:** Orinda, CA
- **Twitter:** @sccsecurity  
5 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=7886df2ed926834e5eb248c77dcfa8e5c815d3ab1f0fe3132ced0dba45868834&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2FNo-Linkedin-Presence-Added-Intentionally-By-DataOps&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Large

#### What Are Recent G2 Reviews of Access Auditor?

**["Best software to automate user access reviews"](https://www.g2.com/survey_responses/access-auditor-review-9541788)**

**Rating:** 5.0/5.0 stars

_— Verified User in Financial Services_

[Read full review](https://www.g2.com/survey_responses/access-auditor-review-9541788)

### [Active Directory Reporting Tool](https://www.g2.com/products/active-directory-reporting-tool/reviews)

Generating complex Active Directory Reports just got easier for your Active Directory Auditing and Reporting needs. Just pulling out data from your Active Directory is easy there are plenty of free scripts and tools out there. If you are looking for a tool to dig deep and get in-depth customizable reports for your complex needs on AD security, administration and management reporting, then look no further. All you need is Vyapin's Active Directory reporting tool ARK for Active Directory (ARKAD) for the Microsoft Active Directory Enterprise.

**Average Rating:** 3.0/5.0

**Total Reviews:** 1

#### How Do G2 Users Rate Active Directory Reporting Tool?

- **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Active Directory Reporting Tool?

- **Seller:** [Vyapin](https://www.g2.com/sellers/vyapin)
- **Year Founded:** 1996
- **HQ Location:** Chennai, Tamil Nadu
- **Twitter:** @vyapinsoftware  
94 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=21513232793617703f16fbcacbf4ab33b79898e0776ef976bbeb583574e348c5&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F661868%2F&secure%5Burl_type%5D=linkedin_company_website)  
29 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Large

#### What Are G2 Users Discussing About Active Directory Reporting Tool?

- [What is Active Directory Reporting Tool used for?](https://www.g2.com/discussions/what-is-active-directory-reporting-tool-used-for)

### [a.k.a.](https://www.g2.com/products/a-k-a/reviews)

a.k.a. is an information governance system allows to build customized metadata structures, taxonomies, and retention schedules.

**Average Rating:** 4.0/5.0

**Total Reviews:** 1

#### Who Is the Company Behind a.k.a.?

- **Seller:** [The Synercon Group](https://www.g2.com/sellers/the-synercon-group)
- **HQ Location:** Los Angeles, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=0c4a4bf632d3cdc05e2105e0e22ae4f2953959644bf3e7f2fc275a1c46f4d2cd&secure%5Burl%5D=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Faka-tool&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Large

#### What Are Recent G2 Reviews of a.k.a.?

**["aka is dedication to high quality information governance"](https://www.g2.com/survey_responses/a-k-a-review-5017283)**

**Rating:** 4.0/5.0 stars

_— Verified User in Hospital & Health Care_

[Read full review](https://www.g2.com/survey_responses/a-k-a-review-5017283)

#### What Are G2 Users Discussing About a.k.a.?

- [What is a.k.a. used for?](https://www.g2.com/discussions/what-is-a-k-a-used-for)

### [Authomize](https://www.g2.com/products/authomize/reviews)

Authomize protects organizations from identity-based cyberattacks with the first Identity Threat Detection and Response (ITDR) Platform. Authomize collects and normalizes data of identities, access privileges, assets, and activities from cloud services, applications, and IAM solutions in order to detect, investigate and respond to identity risks and threats. Customers use Authomize to gain visibility of actual access, achieve least privilege across cloud services and applications, secure their IAM infrastructure, and automate compliance and audit preparations.

**Average Rating:** 4.5/5.0

**Total Reviews:** 1

#### Who Is the Company Behind Authomize?

- **Seller:** [Authomize](https://www.g2.com/sellers/authomize)
- **Year Founded:** 2020
- **HQ Location:** Alpharetta, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=e37cbc6c2ba5178ce0ec8fe4b4031bd6749ee6ab0599f8d365aaa8e0a1b63410&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fauthomize&secure%5Burl_type%5D=linkedin_company_website)  
6 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Large

#### What Are Recent G2 Reviews of Authomize?

**["Authomize has good potential to be a market leader"](https://www.g2.com/survey_responses/authomize-review-6998969)**

**Rating:** 4.5/5.0 stars

_— Jaspreet S._

[Read full review](https://www.g2.com/survey_responses/authomize-review-6998969)

### [Cryptr Universal SSO Connector](https://www.g2.com/products/cryptr-universal-sso-connector/reviews)

Cryptr is a plug-and-play B2B authentication platform that allows SaaS to manage and deploy all their authentication strategies like Single Sign On, automated user provisioning with Directory Sync, TOTP, magic link and much more with just a few lines of code. - Universal SSO Connector: to connect in 5 minutes SaaS to the SSO systems (SAML, Azure AD, Okta, Ping Identity ...) of their enterprise customers, - Directory Sync: to enable synchronization of user directories between SaaS and their customers with automated provisioning and de-provisioning - Universal Login which includes login/password with stolen password detection, passwordless login with magic-link, social login, TOTP

**Average Rating:** 4.9/5.0

**Total Reviews:** 11

#### How Do G2 Users Rate Cryptr Universal SSO Connector?

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Cryptr Universal SSO Connector?

- **Seller:** [Cryptr](https://www.g2.com/sellers/cryptr)
- **Year Founded:** 2019
- **HQ Location:** Lille, Hauts-de-France
- **Twitter:** @getcryptr  
91 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=ec7fff2a2da7cfeaef7cca70219fd6b0f527409236c4cd858958c03d8ebe7ab5&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcryptr&secure%5Burl_type%5D=linkedin_company_website)  
7 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Small

#### What Are Recent G2 Reviews of Cryptr Universal SSO Connector?

**["SSO for our customers without the headache!"](https://www.g2.com/survey_responses/cryptr-universal-sso-connector-review-9169760)**

**Rating:** 5.0/5.0 stars

_— Thomas L._

[Read full review](https://www.g2.com/survey_responses/cryptr-universal-sso-connector-review-9169760)

**["Integration of Cryptr on our platform"](https://www.g2.com/survey_responses/cryptr-universal-sso-connector-review-9152712)**

**Rating:** 5.0/5.0 stars

_— Elise A._

[Read full review](https://www.g2.com/survey_responses/cryptr-universal-sso-connector-review-9152712)

### [Deep Identity](https://www.g2.com/products/deep-identity/reviews)

Integrated Identity and Data Governance Products

**Average Rating:** 5.0/5.0

**Total Reviews:** 1

#### How Do G2 Users Rate Deep Identity?

- **Mobile App:** 8.3/10 (Category avg: 7.5/10)
- **APIs:** 10.0/10 (Category avg: 8.5/10)
- **Bi-directional Identity Synchronization:** 8.3/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Deep Identity?

- **Seller:** [Deep Identity](https://www.g2.com/sellers/deep-identity)
- **Year Founded:** 2009
- **HQ Location:** SINGAPORE, SG
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=310b51e710e7f535e568fd3de5aab17f33fefe56ed7198f318628c4ceb7bee7b&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fdeep-identity&secure%5Burl_type%5D=linkedin_company_website)  
58 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Small

#### What Are Recent G2 Reviews of Deep Identity?

**["ncreased flexibility of user privileges"](https://www.g2.com/survey_responses/deep-identity-review-10172052)**

**Rating:** 5.0/5.0 stars

_— Muhammad S._

[Read full review](https://www.g2.com/survey_responses/deep-identity-review-10172052)

### [deeploi](https://www.g2.com/products/deeploi/reviews)

deeploi is the all-in-one IT platform that makes IT management stress-free and helps companies keep their IT simple, secure, and efficient. The platform is designed for HR teams, founders, and IT leads who want to stop worrying about IT, automate routine tasks, and maintain full visibility. With deeploi, core IT tasks like onboarding and offboarding, device, software, and account management, as well as governance, security, and compliance, run automatically in one place. Personal IT expert support is available exactly when it’s needed. This reduces operational IT stress, minimizes security risks, and delivers measurable value. What you get: • Onboard new hires in under 5 minutes • Order and assign devices in just a few clicks • Securely configured laptops from day one • Support for GDPR compliance and ISO readiness • A real-time overview of all devices, users, and licenses • Unlimited IT support with response times under 30 minutes More than 200 companies across Europe, from startups to agencies and consultancies with 1 to 500+ employees, trust deeploi to run their IT reliably. Pricing is based on a monthly subscription starting at €19 per employee. Additional services such as advanced device protection, managed backups, and Microsoft license procurement, are available at an additional cost.

**Average Rating:** 5.0/5.0

**Total Reviews:** 2

#### Who Is the Company Behind deeploi?

- **Seller:** [deeploi](https://www.g2.com/sellers/deeploi)
- **Year Founded:** 2023
- **HQ Location:** Berlin, DE
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=0802d877561aa9da611a704378d1c7e17441c805cc0b43f775a4c2676c1d970e&secure%5Burl%5D=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fdeeploi-os&secure%5Burl_type%5D=linkedin_company_website)  
49 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Small

#### What Are Recent G2 Reviews of deeploi?

**["Amazing Onboarding/Offboarding automation and centralized device management"](https://www.g2.com/survey_responses/deeploi-review-13135327)**

**Rating:** 5.0/5.0 stars

_— Verified User in Oil & Energy_

[Read full review](https://www.g2.com/survey_responses/deeploi-review-13135327)

**["We can finally concentrate on our work without having to worry about IT"](https://www.g2.com/survey_responses/deeploi-review-13059024)**

**Rating:** 5.0/5.0 stars

_— Verified User in Marketing and Advertising_

[Read full review](https://www.g2.com/survey_responses/deeploi-review-13059024)

- [‹ Prev‹ Prev](/categories/user-provisioning-and-governance-tools?order=g2_score&page=6#product-list)
- [1](/categories/user-provisioning-and-governance-tools?order=g2_score#product-list)
- [2](/categories/user-provisioning-and-governance-tools?order=g2_score&page=2#product-list)
- [3](/categories/user-provisioning-and-governance-tools?order=g2_score&page=3#product-list)
- [4](/categories/user-provisioning-and-governance-tools?order=g2_score&page=4#product-list)
- [5](/categories/user-provisioning-and-governance-tools?order=g2_score&page=5#product-list)
- [6](/categories/user-provisioning-and-governance-tools?order=g2_score&page=6#product-list)
- 7
- [8](/categories/user-provisioning-and-governance-tools?order=g2_score&page=8#product-list)
- [9](/categories/user-provisioning-and-governance-tools?order=g2_score&page=9#product-list)
- [10](/categories/user-provisioning-and-governance-tools?order=g2_score&page=10#product-list)
- [11](/categories/user-provisioning-and-governance-tools?order=g2_score&page=11#product-list)
- [12](/categories/user-provisioning-and-governance-tools?order=g2_score&page=12#product-list)
- [13](/categories/user-provisioning-and-governance-tools?order=g2_score&page=13#product-list)
- [Next ›Next ›](/categories/user-provisioning-and-governance-tools?order=g2_score&page=8#product-list)

Spotlight Categories

[Workforce Management Software](https://www.g2.com/categories/workforce-management)

[Employee Engagement Software](https://www.g2.com/categories/employee-engagement)

[Accounts Receivable Software](https://www.g2.com/categories/accounts-receivable)

[Online Backup Software](https://www.g2.com/categories/online-backup)

[SEO Tools](https://www.g2.com/categories/seo-tools)

Similar Categories

- [Multi-Factor Authentication (MFA)](/categories/multi-factor-authentication-mfa)
- [Biometric Authentication](/categories/biometric-authentication)
- [Cloud Directory Services](/categories/cloud-directory-services)
- [Customer Identity and Access Management (CIAM)](/categories/customer-identity-and-access-management-ciam)
- [Decentralized Identity](/categories/decentralized-identity)

- [Identity and Access Management (IAM)](/categories/identity-and-access-management-iam)
- [Passwordless Authentication](/categories/passwordless-authentication)
- [Password Managers](/categories/password-managers)
- [Password Policy Enforcement](/categories/password-policy-enforcement)
- [Privileged Access Management (PAM)](/categories/privileged-access-management-pam)

- [Risk-Based Authentication (RBA)](/categories/risk-based-authentication-rba)
- [Self-Service Password Reset (SSPR) Tools](/categories/self-service-password-reset-sspr-tools)
- [Single Sign-On (SSO)](/categories/single-sign-on-sso)

[Browse User Provisioning and Governance Tools Themes](/categories/user-provisioning-and-governance-tools/themes)

 ![Brandon Summers-Miller](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Brandon Summers-Miller")
BS

Researched and written by [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)

Updated October 29, 2024

User provisioning and governance tools gives a single point of maintenance to manage user access to IT applications. Companies need identity governance and administration (IGA) programs to maintain organized records of user information such as personal information, account histories, or application credentials. These confidential records can be used by employees and administrators to retain information and regulations. IT managers and administrators use the information in these systems to automate tasks such as account creation, editing, or deleting, which can help facilitate employee lifecycle changes like onboarding, promotions, or termination. Human resource workers may utilize the databases as well to aggregate information about employees and monitor access requests. There is significant overlap between user provisioning software and cloud identity and access management. Many products function on a hybrid on­-premise and cloud level, but user provisioning and governance software solutions may not be able to provide remote access. These products will also often integrate with or provide SSO/federation or [password management](https://www.g2.com/categories/password-manager) capabilities.

To qualify as user provisioning and governance solution, a product must:

- Possess infrastructure to store and access identity information
- Provide administrator tools to create access requirements
- Automate processes related to identity administration
- Provide security or authentication features to protect sensitive information

Show More

* * *

## How Do You Choose the Right User Provisioning and Governance Tools?

### What You Should Know About User Provisioning and Governance Tools

### What are user provisioning and governance tools and software?

User provisioning and governance tools help companies automate the process of creating, permissioning, managing, and deactivating user accounts on corporate systems and applications across the enterprise. Typical use cases include user lifecycle stages such as setting up accounts for newly hired employees during onboarding and providing them access to the tools they need, changing user groups and permissions when employees are promoted or move within departments, and removing user accounts after an employee leaves the company. User provisioning and governance tools software automate user account creation by connecting information in user identity stores such as HR systems and/or user directories like Active Directory or G Suite to enterprise applications to systems that employees use such as email systems, databases, CRM systems, communication systems, employee productivity software, file storage systems, ERP applications, subscriptions, custom company applications, and more.

There is considerable overlap between user provisioning and governance tools and [identity and access management (IAM) software](https://www.g2.com/categories/identity-and-access-management-iam) functionality, as both offer user provisioning and govern user access. User provisioning and governance solutions focus more specifically on user lifecycle and group management. At the same time, IAM software includes additional benefits, such as centralized identity functions for both on-premises and cloud accounts and providing user authentication before granting user access to corporate systems.

### **Key benefits of user provisioning and governance software solutions**

- Automate user account lifecycle from provisioning during onboarding through de-provisioning after leaving the company
- Grant access to applications and systems based on user type through role or group management functions
- Reduce the time helpdesk team members need to spend manually creating users
- Improve end-user experience by offering self-service tools and integrations with [single sign-on solutions](https://www.g2.com/categories/single-sign-on-sso) and [password management tools](https://www.g2.com/categories/password-managers)

### Why use user provisioning and governance systems?

Using automated tools to manage user lifecycles, companies can eliminate manual user provisioning and de-provisioning tasks, which can ultimately reduce the burden on IT help desk teams and free up staff time for more high-level work. Deploying user provisioning and governance solutions reduces human error when creating accounts while reducing the threat of “permission creep" when accounts are not properly changed after promotions, demotions, or terminations. Using this software enables companies to manage large numbers of users at once by applying role or group policies across users in a standard fashion.

**Setting up new hires —** Companies use user provisioning and governance tools to ensure new hires receive access to the accounts they need as quickly as possible during onboarding. If IT staff manually created user accounts, the process could take days, weeks, or even months and be prone to human error.

**Removing access for terminated employees—** It is important to remove access for terminated employees as quickly as possible to prevent security risks, either from the terminated employees themselves or from hackers accessing abandoned user accounts. Using user provisioning and governance tools, companies can automatically de-provision user accounts when an employee is removed from an HR system or other identity store.

**Enforcing role or group-based policies —** When managing hundreds (if not thousands) of user accounts, taking actions, such as providing access to new applications based on the users’ role or group types, can save a lot of time and get these users up and running quickly. For example, suppose all sales representatives should have access to a particular sales-related application. In that case, those user accounts can automatically be provisioned with access if they belong to the sales group. On the other hand, employees in the legal department may not need access to that sales application, so they would not be provisioned with an account for that specific sales software.

**Security — ** Insider threats can occur when user accounts are given too much access for their job type, and employees use the information they shouldn’t have access to. For example, an intern-employee likely shouldn’t be given the same access to the company’s accounts, like an accounting system, as the chief operating officer has. Using role- and group-based policies, IT administrators can easily remove permissions no longer needed by a type or group of employees and prevent permission creep.

**Reducing costs—** Labor ** ** is typically one of the highest expenses companies have. Using user provisioning and governance tools frees up time for IT help desk team members to do other higher-value work. Many user provisioning and governance tools solutions allow end-user self-service to make changes like name changes directly.

### Who uses user provisioning and governance software tools?

Most companies would benefit from using identity governance software solutions to manage employee user account provisioning, management, and de-provisioning. In particular, companies with many employees and user accounts to manage, such as enterprise-level companies, would benefit from using identity governance platforms, as manual account creation is difficult, laborious, and prone to error.

IT administrators and help desk teams typically manage user provisioning and governance tools within a company’s corporate structure. With automated lifecycle management, however, multiple stakeholders across the enterprise can work in tandem to ensure users are set up correctly and have the proper access. For example, HR representatives can change new hires or people who have left the company in the HR system. This information can be pulled by the user provisioning and governance tools system to automatically take actions on a user’s associated accounts. End users can use self-service tools to make changes to their user profile, like name or title changes.

### Features of user provisioning and governance tools

At their core, user provisioning/governance software must, at minimum, provide tools to automatically provision and de-provision user accounts based on user identities and grant permissions based on governance rules for users to access specific enterprise applications. Many user provisioning/governance software offers additional features to further automate user account lifecycles and provide a better end-user experience. These features may include:

**Automatic user provisioning and de-provisioning —** User provisioning/governance software pulls data from identity stores like [HR systems](https://www.g2.com/categories/core-hr) to provision new accounts. Specific access to accounts can be automated based on roles or group membership. When an employee leaves or is terminated or when a contractor’s contract date expires, the software can automatically terminate accounts to prevent abandoned accounts from living on in systems.

**Lifecycle management —** The software takes user account actions throughout employee lifecycle changes from onboarding and promotions to termination.

**Integrations —** A main tenet of user provisioning/governance software is integrating with other software applications such as HR systems, user directories, [ERP applications](https://www.g2.com/categories/erp-systems), [email systems](https://www.g2.com/categories/email), [databases](https://www.g2.com/categories/database-software), [CRM systems](https://www.g2.com/categories/crm), communication systems, employee productivity software, and [file storage systems](https://www.g2.com/categories/cloud-file-storage).

**Identity synchronization —** User provisioning/governance software can synchronize identity information changes across multiple applications. For example, if a user changes their personal information, such as a phone number or title, in one system, those changes are pushed to their other applications in corporate systems.

**Access governance, role/group management, and policy enforcement —** Governing who has access to what applications or systems is determined by a user’s role and group membership. Using role-based or group membership factors to determine what access a user should be granted ensures that access to a company application is granted uniformly and adheres to company policies.

**Delegated access authorization—** When business managers need to give their subordinates access to company accounts or change their permissions, they can approve access using delegation workflows.

**Access verification workflow —** User provisioning/governance software can regularly query managers to confirm their subordinates' access and whether changes need to be made.

**Reports and audits—** User provisioning/governance software can conduct audits and provide reports on account usage, including account creation and deactivation. This may be a necessary feature for companies in highly regulated industries that need to periodically audit users.

**User self-service and improved user experience —** Providing users with self-service functionality, such as allowing employees to change their names and titles directly in the system or being able to request access to specific applications for manager approval, can further remove manual processes off IT helpdesk staff and improve employee productivity.

**Password management and single sign-on—** Many user provisioning and governance tools offer additional end-user benefits, such as password management and single sign-on functionality.

Other Features of User Provisioning and Governance Tools: [Bi-directional identity synchronization](https://www.g2.com/categories/user-provisioning-and-governance-tools/f/bi-directional-identity-synchronization), [Identifies and alerts for threats](https://www.g2.com/categories/user-provisioning-and-governance-tools/f/identifies-and-alerts-for-threats), [Mobile app](https://www.g2.com/categories/user-provisioning-and-governance-tools/f/mobile-app)

### Emerging trends in user provisioning and governance

Historically speaking, Microsoft’s product, Active Directory (AD), has been one of the most widely used directory services since its introduction in 1999. Because of AD’s large market share, it is worth mentioning that many other user provisioning and governance tools vendors generally offer both identity and user governance tools that integrate with AD or, conversely, offer entirely separate solutions that utilize their own directory service.

Active Directory manages IT resources, stores information about users, groups, applications, and networks, and provides access to computers, applications, and servers. AD was initially designed for on-premises use cases. Still, given the shift to cloud computing and storage in the digital transformation, Microsoft introduced Azure AD, which extends an on-premises instance of AD to the cloud and synchronizes identities with cloud-based applications. Other user provisioning and governance tools offer cloud solutions tying into on-site AD instances. Many providers provide cloud-native solutions and robust [identity and access management (IAM)](https://www.g2.com/categories/identity-and-access-management-iam) tools.

### Software and services related to user provisioning and governance solutions

User provisioning and governance tools are part of a complete identity management solution. Many user provisioning and governance tools providers natively have or integrate with other providers to offer:

[**Single sign-on (SSO) software**](https://www.g2.com/categories/single-sign-on-sso) **—** Single sign-on (SSO) software allows users to access multiple corporate applications with one set of credentials. This gives users more access to their applications without logging in multiple times. Single sign-on (SSO) is achieved through federation by linking IT systems, applications, and identities to create a seamless user experience.

[**Password manager software**](https://www.g2.com/categories/password-manager) **—** Password manager software helps end users manage their passwords by allowing them to create one master password to access the passwords associated with their accounts. This is different from single sign-on, which federates the identity to other applications, while password manager software merely provides a secure storage vault to house user passwords.

[**Identity and access management (IAM) software**](https://www.g2.com/categories/identity-and-access-management-iam) **—** User provisioning and governance tools are a part of identity and access management (IAM) functionality, which allows IT administrators to quickly provision, de-provision, and change user identities. IAM software also authenticates users to ensure they are who they say they are before providing access to corporate assets. IAM software is a modern solution, especially for companies utilizing numerous cloud-based applications.

[**Customer identity and access management (CIAM) software**](https://www.g2.com/categories/customer-identity-and-access-management-ciam) **—** Customer identity and access management (CIAM) software manages a company’s customer identities and accounts. CIAM is different from identity and access management (IAM) software. IAM is used for internal corporate use—such as managing the identities of internal employees or contractors—while CIAM is for customer-focused identity management.

[**Privileged access management (PAM) software**](https://www.g2.com/categories/privileged-access-management-pam) **—** Privileged access management (PAM) software is a tool used to protect a company’s privileged account credentials. It is generally used by IT administrators and other super users with high-level access to applications, not everyday users.

[**Multi-factor authentication (MFA) software**](https://www.g2.com/categories/multi-factor-authentication-mfa) **—** Before granting a user access to company assets, it is essential to authenticate that they are indeed who they say they are. This can be achieved using multi-factor authentication (MFA) software solutions such as SMS codes, mobile push, biometric verification, or email one-time-pass (OTP) pushes. For example, if an employee loses their laptop, the laptop and the accounts the employee has access to are generally rendered useless to someone else unless that person could spoof the employee’s other authentication factors.