# Best Identity and Access Management (IAM) Software - Page 5 *By [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)* Identity and access management (IAM) software helps companies protect their systems from unauthorized access or misuse by only allowing authenticated, authorized users (typically employees, based on job roles) to access specific, protected company systems and data. IT administrators leverage the software to quickly provision, deprovision, and change user identities and the corresponding user access rights at scale. IAM software authenticates users, provides access to systems and data based on company policies, tracks user activity, and provides reporting tools to ensure employees are in compliance with company policies and regulations. Many IAM solutions include single sign-on (SSO) and password manager features. For employees, once users authenticate by signing into their accounts or using other multi-factor authentication methods, they are granted limited access to company systems allowed by their user type to complete their typical job functions. Additionally, many IAM products are now being integrated with generative artificial intelligence (AI) features. These AI features allow IAM products to automate routine tasks that can be cumbersome for IT and InfoSec teams while predicting identity-related misconfigurations and recommending various access controls. IAM software differs from [privileged access management (PAM) software](https://www.g2.com/categories/privileged-access-management-pam). IAM software is used to authorize, authenticate, and grant specific access to everyday users, such as company employees. However, PAM software is used to provide administrative or superusers with granular access to business-critical assets and privileged credentials. IAM software also differs from [customer identity and access management (CIAM) software](https://www.g2.com/categories/customer-identity-and-access-management-ciam), which provides a company’s customers, as opposed to employees, with secured access to customer applications. To qualify for inclusion in the Identity and Access Management (IAM) category, a product must: - Provision and deprovision user identities - Assign access based on individual role, group membership, and other factors - Enforce user access rights based on permissions - Verify user identity with authentication, which may include multi-factor authentication methods - Integrate with directories that house employee data ## Top Identity and Access Management (IAM) Software at a Glance | # | Product | Rating | Best For | What Users Say | |---|---------|--------|----------|----------------| | 1 | [Okta](https://www.g2.com/products/okta/reviews) | 4.5/5.0 (1,223 reviews) | SSO and lifecycle automation across SaaS apps | "[Streamlined Logins and Consistent Security with Okta](https://www.g2.com/survey_responses/okta-review-12998269)" | | 2 | [JumpCloud](https://www.g2.com/products/jumpcloud/reviews) | 4.5/5.0 (3,882 reviews) | Cross-platform device and identity unification | "[All-in-One Access and Device Management That Saves Time](https://www.g2.com/survey_responses/jumpcloud-review-12977315)" | | 3 | [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews) | 4.5/5.0 (872 reviews) | Hybrid identity with Microsoft 365 SSO | "[Entra ID P2 Makes Conditional Access and Security Policies Easy to Configure](https://www.g2.com/survey_responses/microsoft-entra-id-review-12889489)" | | 4 | [AWS Identity and Access Management (IAM)](https://www.g2.com/products/aws-identity-and-access-management-iam/reviews) | 4.5/5.0 (152 reviews) | Fine-grained AWS resource permissions at scale | "[Granular and scalable access control with AWS IAM](https://www.g2.com/survey_responses/aws-identity-and-access-management-iam-review-12610078)" | | 5 | [Google Cloud Identity & Access Management (IAM)](https://www.g2.com/products/google-cloud-identity-access-management-iam/reviews) | 4.4/5.0 (57 reviews) | Role-based GCP resource access with workload identity | "[Strong, Flexible Access Control and Auditability with Google Cloud IAM](https://www.g2.com/survey_responses/google-cloud-identity-access-management-iam-review-12224469)" | | 6 | [Rippling IT](https://www.g2.com/products/rippling-it/reviews) | 4.7/5.0 (1,038 reviews) | HR-driven SSO and automated access provisioning | "[IT provisioning and app access made completely painless for everyday employees.](https://www.g2.com/survey_responses/rippling-it-review-13035351)" | | 7 | [Cisco Duo](https://www.g2.com/products/cisco-duo/reviews) | 4.5/5.0 (499 reviews) | Push-based MFA for remote access workflows | "[Effortless Security Compliance with Cisco Duo](https://www.g2.com/survey_responses/cisco-duo-review-12676028)" | | 8 | [AWS Vertrified Access](https://www.g2.com/products/aws-vertrified-access/reviews) | 4.7/5.0 (37 reviews) | VPN-free application access with zero-trust policies | "[Strong Security and Controlled Access for Our AWS-Hosted PMS](https://www.g2.com/survey_responses/aws-vertrified-access-review-12246958)" | | 9 | [IBM Verify CIAM](https://www.g2.com/products/ibm-verify-ciam/reviews) | 4.3/5.0 (177 reviews) | Customer identity with adaptive risk-based authentication | "[Low-Code Identity Orchestration with Smart Adaptive Risk and Legacy Integration](https://www.g2.com/survey_responses/ibm-verify-ciam-review-12900550)" | | 10 | [Oracle Identity Cloud Service](https://www.g2.com/products/oracle-identity-cloud-service/reviews) | 4.6/5.0 (28 reviews) | Oracle-native SSO and centralized identity provisioning | "[Oracle IDCS offers a comprehensive suite for identity governance, single sign-on (SSO).](https://www.g2.com/survey_responses/oracle-identity-cloud-service-review-11701165)" | --- ## What Are the Most Common Questions About Identity and Access Management (IAM) Software? *AI-generated · Last updated: May 26, 2026* ### Which identity access app is best for enterprises? Based on G2 reviews, [Okta](https://www.g2.com/products/okta/reviews/okta-review-12838881) stands out for enterprise identity access needs because reviewers repeatedly describe centralized single sign-on, broad integrations, and strong support for onboarding, offboarding, and access policy standardization. According to verified users, it helps teams reduce password fatigue, manage access across many applications, and strengthen security with MFA and conditional access. G2 reviewers mention that it is especially useful in environments with many connected tools and employee lifecycle workflows. At the same time, reviews note tradeoffs such as setup complexity, advanced integration work, and cost growth in larger deployments, so buyers should weigh ease of administration against breadth of capability. ### What is the best IAM solution for mid-sized tech companies? Based on G2 reviews, mid-sized tech companies often look for a balance of centralized identity control, automation, and manageable administration. According to verified users, Okta is frequently praised for single sign-on, MFA, lifecycle automation, and broad app integrations that help reduce manual provisioning work. G2 reviewers mention that JumpCloud is also valued where device management and identity need to work together, especially for mixed operating system environments. Reviewers also note that Microsoft Entra ID fits organizations already centered on Microsoft services and group-based access management. Across products, users consistently call out tradeoffs around setup complexity, support responsiveness, and scaling costs, so the right fit depends on whether integration breadth, device control, or ecosystem alignment matters most. **Here are some of the top-rated products on G2:** - [Okta](https://www.g2.com/products/okta/reviews/okta-review-12838881) – centralized SSO, MFA, and provisioning for teams managing many cloud apps - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews/jumpcloud-review-12864493) – combines identity and device management for growing mixed-OS environments - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews/microsoft-entra-id-review-12792709) – strong fit for mid-sized teams using Microsoft apps, groups, and conditional access ### What is the most reliable identity access app for startups? Based on G2 reviews, reliability in this category usually comes down to smooth authentication, easy onboarding, and minimal day-to-day friction. According to verified users, Okta is often described as dependable for centralizing application access, reducing password sprawl, and supporting secure logins across many tools. G2 reviewers mention that startups also value products that are simple to implement and do not require heavy manual administration, which is why options like JumpCloud and Auth0 appear in review themes for growing teams. Reviews also show that buyers should watch for session timeout frustrations, integration complexity, and pricing changes as usage grows. For startup teams, the most reliable option is often the one that stays easy to manage as headcount and application count increase. **Here are some of the top-rated products on G2:** - [Okta](https://www.g2.com/products/okta/reviews/okta-review-12838881) – reliable SSO hub for startups that need centralized access across business apps - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews/jumpcloud-review-12864493) – supports startup teams that need both identity and device management in one place - [Auth0](https://www.g2.com/products/auth0/reviews/auth0-review-12849763) – popular for startups building secure customer or employee authentication into products ### What is the top identity management service for startups? Based on G2 reviews, startup buyers usually prioritize fast setup, low operational overhead, and room to grow into stronger controls later. According to verified users, Okta is often highlighted for centralizing app access, automating onboarding, and reducing password fatigue, while JumpCloud is repeatedly mentioned for combining identity and device management in a single admin experience. G2 reviewers mention that Auth0 is valued when startups need developer-friendly authentication for applications and customer-facing use cases. Reviews across these products also point to tradeoffs, including admin learning curves, advanced configuration work, and expanding costs over time. For startups, the best service is typically the one that matches current complexity without creating migration pain when security requirements become more advanced. **Here are some of the top-rated products on G2:** - [Okta](https://www.g2.com/products/okta/reviews/okta-review-12838881) – helps startup teams centralize app access and automate employee lifecycle tasks - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews/jumpcloud-review-12864493) – strong for startups needing one platform for identities, devices, and access - [Auth0](https://www.g2.com/products/auth0/reviews/auth0-review-12849763) – supports fast rollout of secure login, SSO, and MFA for modern apps ### What is the leading identity and access management platform? Based on G2 reviews, buyers most often describe leading IAM platforms as those that centralize authentication, support broad integrations, and simplify provisioning across many applications. According to verified users, Okta is repeatedly mentioned for single sign-on, MFA, onboarding and offboarding automation, and a clean access experience across distributed work environments. G2 reviewers mention that strong contenders like Microsoft Entra ID and JumpCloud are also recognized for ecosystem alignment and device-aware identity management, but review volume and breadth of use cases most consistently point to Okta in this dataset. Reviewers do note challenges with configuration depth and cost scaling, yet it is still commonly viewed as a leading platform for organizations needing mature IAM capabilities. **Here are some of the top-rated products on G2:** - [Okta](https://www.g2.com/products/okta/reviews/okta-review-12838881) – enterprise-focused IAM with strong SSO, MFA, and lifecycle automation coverage - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews/microsoft-entra-id-review-12792709) – centralized identity and access control for Microsoft-heavy organizations - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews/jumpcloud-review-12864493) – combines identity, access, and endpoint management for distributed IT teams ### Which IAM platform is best for managing user roles? Based on G2 reviews, [Okta](https://www.g2.com/products/okta/reviews/okta-review-12838881) is the strongest fit in this dataset for managing user roles because reviewers consistently point to centralized provisioning, group-based access handling, and smoother onboarding and offboarding workflows. According to verified users, it helps IT teams control permissions across many connected tools while reducing manual account work. G2 reviewers mention role and access administration in the context of enterprise apps, recruitment systems, and internal software access, with visibility and automation being recurring benefits. Reviews also caution that more advanced setups can require technical expertise, especially for custom integrations or policy troubleshooting, but the overall feedback suggests it is highly effective for structured role management at scale. ### What is the best identity management tool with multi-factor authentication? Based on G2 reviews, products in this category are most valued when MFA strengthens security without creating excessive login friction. According to verified users, Okta is often praised for pairing MFA with centralized single sign-on and user provisioning, while Cisco Duo is repeatedly highlighted for easy push-based authentication and device trust capabilities. G2 reviewers mention Microsoft Entra ID as another strong option where MFA is part of a broader identity and access workflow tied to groups, conditional access, and Microsoft services. Across reviews, users emphasize smoother secure login experiences, stronger protection against unauthorized access, and easier policy enforcement. They also note possible downsides such as push delays, interface complexity, or pricing tradeoffs depending on deployment scope. **Here are some of the top-rated products on G2:** - [Okta](https://www.g2.com/products/okta/reviews/okta-review-12838881) – combines MFA with centralized SSO and lifecycle management across work apps - [Cisco Duo](https://www.g2.com/products/cisco-duo/reviews/cisco-duo-review-12827583) – strong choice for push-based MFA, device visibility, and remote access protection - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews/microsoft-entra-id-review-12792709) – integrates MFA with conditional access and identity controls in Microsoft environments ### What is the best IAM software for securing remote workforces? Based on G2 reviews, organizations securing remote teams need a mix of centralized access, MFA, and visibility into who can reach which systems from where. According to verified users, Okta is frequently praised for secure access across cloud apps, simplified offboarding, and reduced password friction for distributed staff. G2 reviewers mention JumpCloud for organizations that want identity and device management together, especially when remote endpoints span multiple operating systems. Cisco Duo also appears in reviews focused on remote access, phishing resistance, and device-aware authentication. Across these products, reviewers consistently value stronger control over remote logins, smoother onboarding for distributed hires, and better confidence that access can be revoked quickly when roles change. **Here are some of the top-rated products on G2:** - [Okta](https://www.g2.com/products/okta/reviews/okta-review-12838881) – secures remote app access with centralized SSO, MFA, and user lifecycle controls - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews/jumpcloud-review-12864493) – supports remote work with combined identity, device, and policy management - [Cisco Duo](https://www.g2.com/products/cisco-duo/reviews/cisco-duo-review-12827583) – helps protect remote logins with MFA, device checks, and VPN integration ### What is the best IAM software for small businesses? Based on G2 reviews, small businesses usually need IAM software that is easy to learn, simple to deploy, and secure enough to reduce manual password and access work. According to verified users, JumpCloud is often seen as a practical fit for smaller teams because it combines user access, device management, and centralized administration in one platform. G2 reviewers mention Okta as strong for centralized SSO and provisioning, though several reviews also point out that costs can rise for smaller organizations. Microsoft Entra ID is valued where the Microsoft ecosystem is already central, especially for group-based access and secure sign-ins. Overall, reviews suggest the best choice depends on whether simplicity, ecosystem fit, or device management is most important. **Here are some of the top-rated products on G2:** - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews/jumpcloud-review-12864493) – all-in-one identity and device management for smaller teams with limited IT resources - [Okta](https://www.g2.com/products/okta/reviews/okta-review-12838881) – centralized SSO and MFA for small businesses standardizing app access - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews/microsoft-entra-id-review-12792709) – useful for small businesses already relying on Microsoft apps and groups ### What is the best-reviewed IAM service for corporate environments? Based on G2 reviews, corporate buyers consistently describe Okta as a strong IAM service for larger, more structured environments because it brings together single sign-on, MFA, provisioning, and broad application support in one place. According to verified users, it helps organizations standardize access controls, speed up onboarding and offboarding, and give employees a simpler path into the tools they use most. G2 reviewers mention corporate use cases such as recruitment systems, enterprise apps, internal dashboards, and access auditing, all supported through a centralized identity layer. Reviews also mention drawbacks like administrative complexity in advanced environments and rising licensing costs, but overall the product is repeatedly viewed as one of the best-reviewed choices for corporate IAM needs. **Here are some of the top-rated products on G2:** - [Okta](https://www.g2.com/products/okta/reviews/okta-review-12838881) – built for corporate access standardization, app integrations, and secure lifecycle management ## How Many Identity and Access Management (IAM) Software Products Does G2 Track? **Total Products under this Category:** 219 ### Category Stats (Jul 2026) - **Average Rating**: 4.46/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product**: Ping Identity (+0.27%) - Among all products in this category, Ping Identity recorded the largest rating increase compared to last month *Last updated: July 05, 2026* ## How Does G2 Rank Identity and Access Management (IAM) Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 25,600+ Authentic Reviews - 219+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## Which Identity and Access Management (IAM) Software Is Best for Your Use Case? - **Leader:** [Okta](https://www.g2.com/products/okta/reviews) - **Highest Performer:** [Descope](https://www.g2.com/products/descope/reviews) - **Easiest to Use:** [Okta](https://www.g2.com/products/okta/reviews) - **Top Trending:** [Rippling IT](https://www.g2.com/products/rippling-it/reviews) - **Best Free Software:** [JumpCloud](https://www.g2.com/products/jumpcloud/reviews) --- **Sponsored** ### Hire2Retire RoboMQ’s Hire2Retire is an Identity Governance and Administration (IGA) solution designed to manage the complete workforce lifecycle, encompassing joiners, movers, and leavers (JML) events such as hiring, role changes, department transfers, terminations, and long-term leaves. This solution effectively bridges the gap between HR systems and IT infrastructure by synchronizing identity data with platforms like Active Directory (AD), Entra ID, Okta, and Google Workspace. By ensuring that user access and privileges are consistently aligned with their roles within the organization, Hire2Retire enhances overall operational efficiency. Targeted primarily at mid to large, fast-growing organizations, Hire2Retire addresses the challenges associated with manual and fragmented lifecycle management processes. Traditional methods of onboarding and offboarding can be slow, error-prone, and resource-intensive, often leading to security vulnerabilities, compliance risks, and diminished employee experiences. By automating these processes, Hire2Retire not only streamlines operations but also significantly reduces operational overhead, allowing organizations to focus on more strategic initiatives. One of the standout features of Hire2Retire is its extensive integration capabilities. With connections to 27 HR and Applicant Tracking Systems (ATS), major identity providers, and over 10 leading service management platforms such as ServiceNow, Salesforce, SolarWinds, and FreshService, the solution enables seamless identity orchestration. Its robust library of connectors allows for the automatic provisioning and deprovisioning of access to third-party applications based on profile-driven entitlements, making it a scalable and flexible IGA solution that adapts to the needs of modern enterprises. From a governance and security standpoint, Hire2Retire enforces role-based access control and continuously aligns user privileges with their job functions. This ensures that employees have the right level of access at all times, reducing the risk of over-provisioning. Additionally, timely deprovisioning during terminations or role changes helps prevent unauthorized access, protecting the organization from potential security breaches and reputational risks. Hire2Retire supports organizational compliance with key regulatory frameworks and standards including SOX, HIPAA, ISO 27001, and GDPR, providing complete audit trails for every identity lifecycle event. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=paid_promo&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=257&secure%5Bchosen_at%5D=2026-07-06T00%3A52%3A06Z&secure%5Bmedium%5D=sponsored&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=168476&secure%5Bresource_id%5D=257&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fidentity-and-access-management-iam&secure%5Btoken%5D=720368d404b025386cb82c4b06e74467c421c8331a0eaaf23a76d439a867a8a5&secure%5Burl%5D=https%3A%2F%2Fwww.robomq.io%2Fproducts%2Fhire2retire%2F&secure%5Burl_type%5D=paid_promos) --- ## What Are the Top-Rated Identity and Access Management (IAM) Software Products in 2026? ### 1. [Access Assurance Suite](https://www.g2.com/products/helpsystems-access-assurance-suite/reviews) A Key Part of Fortra (the new face of HelpSystems) Core Security is proud to be part of Fortra’s comprehensive cybersecurity portfolio. Fortra simplifies today’s complex cybersecurity landscape by bringing complementary products together to solve problems in innovative ways. These integrated, scalable solutions address the fast-changing challenges you face in safeguarding your organization. With the help of the powerful protection from Access Assurance Suite and others, Fortra is your relentless ally, here for you every step of the way throughout your cybersecurity journey. **Average Rating:** 5.0/5.0 **Total Reviews:** 1 **Who Is the Company Behind Access Assurance Suite?** - **Seller:** [Fortra](https://www.g2.com/sellers/fortra) - **Year Founded:** 1982 - **HQ Location:** Eden Prairie, Minnesota - **Twitter:** @fortraofficial (2,773 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/fortra (1,755 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Mid-Market #### What Are Recent G2 Reviews of Access Assurance Suite? **"[Access Assurance Suite review](https://www.g2.com/survey_responses/access-assurance-suite-review-7012300)"** **Rating:** 5.0/5.0 stars *— era b.* [Read full review](https://www.g2.com/survey_responses/access-assurance-suite-review-7012300) --- ### 2. [C2 Identity](https://www.g2.com/products/c2-identity/reviews) C2 Identity is one of Synology’s all-new cloud-based directory service that administers your entire organization’s Windows and macOS workstations and provisions new devices from a centralized console. C2 Identity allows IT admins to accomplish a centralized account, IT resource, and device management from a directory server instead of storing and managing credentials and permissions on each device. Unlike other pure-cloud solutions, C2 Identity has integrated Synology’s existing competencies by introducing a hybrid cloud architecture where it works with on-premises LDAP-compatible services through a local Synology NAS or through a Docker container, enabling a fast and secure way to streamline all the user authentication processes. **Average Rating:** 5.0/5.0 **Total Reviews:** 1 **How Do G2 Users Rate C2 Identity?** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10) - **Tracking:** 6.7/10 (Category avg: 8.7/10) - **User provisioning:** 8.3/10 (Category avg: 9.1/10) - **On-premises solution:** 10.0/10 (Category avg: 8.3/10) **Who Is the Company Behind C2 Identity?** - **Seller:** [Synology C2](https://www.g2.com/sellers/synology-c2) - **Year Founded:** 2000 - **HQ Location:** New Taipei City , TW - **Twitter:** @Synology (67,298 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/synology (974 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise #### What Are Recent G2 Reviews of C2 Identity? **"[One of best identity management solution available in the market](https://www.g2.com/survey_responses/c2-identity-review-8957597)"** **Rating:** 5.0/5.0 stars *— Arpan J.* [Read full review](https://www.g2.com/survey_responses/c2-identity-review-8957597) --- ### 3. [Cerby](https://www.g2.com/products/cerby/reviews) Cerby provides identity teams with the only comprehensive access management platform for non-federated applications. Harnessing the power of identity providers, Cerby makes passwordless authentication an immediate reality for any application by extending single sign-on and lifecycle management capabilities. With Cerby, identity teams can extend access, minimize risk, and lower costs. **Average Rating:** 4.6/5.0 **Total Reviews:** 25 **How Do G2 Users Rate Cerby?** - **Has the product been a good partner in doing business?:** 8.5/10 (Category avg: 9.2/10) **Who Is the Company Behind Cerby?** - **Seller:** [Cerby](https://www.g2.com/sellers/cerby) - **Year Founded:** 2020 - **HQ Location:** Alameda, US - **Twitter:** @CerbyHQ (492 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/cerby/ (140 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Marketing and Advertising, Retail - **Company Size:** 44% Enterprise, 28% Mid-Market #### What Are Recent G2 Reviews of Cerby? **"[Cerby Has Made Social Media Producing Easier](https://www.g2.com/survey_responses/cerby-review-6962354)"** **Rating:** 4.5/5.0 stars *— Rebecca R.* [Read full review](https://www.g2.com/survey_responses/cerby-review-6962354) --- **"[Cerby works great! Management of thousands of clients' social media accounts made easy](https://www.g2.com/survey_responses/cerby-review-6946756)"** **Rating:** 5.0/5.0 stars *— Maximilian H.* [Read full review](https://www.g2.com/survey_responses/cerby-review-6946756) --- ### 4. [Curity Identity Server](https://www.g2.com/products/curity-identity-server/reviews) Curity Identity Server offers a unique combination of API security and identity and access management. It is used for logging in and securing millions of users'​ access to the web and mobile apps over APIs and microservices. Curity is built upon established standards and designed for development and operations. **Average Rating:** 4.5/5.0 **Total Reviews:** 1 **How Do G2 Users Rate Curity Identity Server?** - **Tracking:** 8.3/10 (Category avg: 8.7/10) - **User provisioning:** 10.0/10 (Category avg: 9.1/10) - **On-premises solution:** 8.3/10 (Category avg: 8.3/10) **Who Is the Company Behind Curity Identity Server?** - **Seller:** [Curity](https://www.g2.com/sellers/curity) - **Year Founded:** 2015 - **HQ Location:** Stockholm, Stockholm County, Sweden - **LinkedIn® Page:** https://www.linkedin.com/company/curity (49 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise #### What Are Curity Identity Server's Pros and Cons? **Pros:** - Authentication (1 reviews) - Easy Setup (1 reviews) - Implementation Ease (1 reviews) - Process Automation (1 reviews) - User Management (1 reviews) **Cons:** - Expensive (1 reviews) ### What Do G2 Reviewers Say About Curity Identity Server? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **easy setup and seamless user management** provided by Curity Identity Server, allowing focus on business logic. - Users value the **easy setup** of Curity Identity Server, allowing focus on essential business logic without user management worries. - Users find **implementation easy** , allowing them to concentrate on business logic instead of user management tasks. - Users value the **ease of process automation** with Curity, allowing them to focus on critical business logic. - Users value the **easy setup** of Curity Identity Server, allowing focus on business logic rather than user management. **Cons:** - Users find the **pricing to be high** compared to other authentication services, impacting their decision to choose Curity. #### What Are Recent G2 Reviews of Curity Identity Server? **"[One solution for Authentication and User management](https://www.g2.com/survey_responses/curity-identity-server-review-8976050)"** **Rating:** 4.5/5.0 stars *— Vishwa R.* [Read full review](https://www.g2.com/survey_responses/curity-identity-server-review-8976050) --- ### 5. [Datawiza Identity Modernization](https://www.g2.com/products/datawiza-identity-modernization/reviews) Datawiza Identity Modernization is an identity access management (IAM) and access security solution that enables organizations to add multi-factor authentication (MFA) and single sign-on (SSO) to legacy and modern web applications by integrating those applications with an identity provider or using a managed authentication service. It is designed for security, IAM, and infrastructure teams that need to modernize authentication for applications that rely on native logins, older protocols, or tightly coupled identity stacks. It is commonly used for internal enterprise applications and external-facing portals, including customer, partner, and supplier portals. Datawiza can enforce MFA using its own native MFA capability or by integrating with an upstream identity provider’s MFA and access policies. For SSO, it connects applications to modern identity platforms using standards-based federation (such as SAML and OIDC), including integrations with providers like Microsoft Entra ID (Azure AD), Okta, Ping, Cisco Duo, and others. Datawiza can be deployed in customer-managed environments (for example, on-premises or cloud infrastructure) or delivered as a hosted service operated by Datawiza, similar to managed access services where customers consume the capability without running the full stack themselves. - MFA enablement and enforcement using Datawiza native MFA or identity-provider-driven MFA and policy controls - SSO integration for applications that do not natively support modern authentication, using standards-based federation - Application modernization coverage for legacy enterprise apps and custom web applications across multiple environments (dev/test/prod) - Flexible deployment models including containerized/on-prem options and a hosted service option - Operational visibility through authentication and access logging patterns that support monitoring, investigations, and compliance workflows **Average Rating:** 4.5/5.0 **Total Reviews:** 1 **Who Is the Company Behind Datawiza Identity Modernization?** - **Seller:** [Datawiza Technologies](https://www.g2.com/sellers/datawiza-technologies) - **Year Founded:** 2021 - **HQ Location:** California, US - **LinkedIn® Page:** https://www.linkedin.com/company/datawiza/ (8 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Mid-Market #### What Are Datawiza Identity Modernization's Pros and Cons? **Pros:** - Ease of Use (1 reviews) ### What Do G2 Reviewers Say About Datawiza Identity Modernization? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of Datawiza Identity Modernization, enhancing their overall experience with the product. #### What Are Recent G2 Reviews of Datawiza Identity Modernization? **"[Incredibly Easy to Use and Works Exactly as Needed](https://www.g2.com/survey_responses/datawiza-identity-modernization-review-12304358)"** **Rating:** 4.5/5.0 stars *— Verified User in Insurance* [Read full review](https://www.g2.com/survey_responses/datawiza-identity-modernization-review-12304358) --- ### 6. [EmpowerID](https://www.g2.com/products/empowerid/reviews) The award-winning all-in-one Identity Management and Cloud Security platform offering IGA, IAM, and PAM capabilities on-premise, hybrid, and SaaS. Built as a unified identity fabric for manageability and scalability, EmpowerID ships with a powerful API, the most extensive list of deep system connectors in the market (incl. market-leading integrations with Azure, SAP, and ServiceNow), and is driven by sophisticated RBAC/ABAC/PBAC and workflow engines with over 1,000 ready-to-use workflows for rapid deployment. **Average Rating:** 3.4/5.0 **Total Reviews:** 8 **How Do G2 Users Rate EmpowerID?** - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.2/10) **Who Is the Company Behind EmpowerID?** - **Seller:** [EmpowerID](https://www.g2.com/sellers/empowerid) - **Year Founded:** 2005 - **HQ Location:** Dublin, US - **Twitter:** @EmpowerID (384 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/empowerid/ (88 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 38% Enterprise, 38% Mid-Market #### What Are EmpowerID's Pros and Cons? **Pros:** - Authentication (1 reviews) - Cloud Services (1 reviews) - Customer Support (1 reviews) - Device Management (1 reviews) - Ease of Implementation (1 reviews) **Cons:** - Difficult Integration (1 reviews) - Integration Difficulty (1 reviews) - Integration Issues (1 reviews) ### What Do G2 Reviewers Say About EmpowerID? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use and customer support** EmpowerID offers for identity management and cloud security. - Users value the **ease of use and support** of EmpowerID for seamless cloud security and identity management. - Users value the **excellent customer support** EmpowerID offers, enhancing their experience with its cloud security features. - Users appreciate the **easy implementation and user-friendly features** of EmpowerID for cloud security and identity management. - Users appreciate the **ease of implementation** with EmpowerID, benefiting from seamless identity management and cloud security features. **Cons:** - Users find the **difficult integration** with other cloud services frustrating, impacting their overall experience with EmpowerID. - Users find **integration difficult** with other cloud services, leading to frustrations in streamlining their workflows. - Users find that EmpowerID poses **integration issues** with other cloud services, complicating their overall experience. #### What Are Recent G2 Reviews of EmpowerID? **"[Awesome!!!](https://www.g2.com/survey_responses/empowerid-review-9507646)"** **Rating:** 5.0/5.0 stars *— Mayur C.* [Read full review](https://www.g2.com/survey_responses/empowerid-review-9507646) --- **"[EmpowerID is a great solution for securing Cloud and identity management.](https://www.g2.com/survey_responses/empowerid-review-10570271)"** **Rating:** 4.5/5.0 stars *— Henil P.* [Read full review](https://www.g2.com/survey_responses/empowerid-review-10570271) --- #### What Are G2 Users Discussing About EmpowerID? - [What is EmpowerID used for?](https://www.g2.com/discussions/what-is-empowerid-used-for) ### 7. [HORACIUS](https://www.g2.com/products/horacius/reviews) HORACIUS is a comprehensive IAM system providing features such as HR systems integration, segregation of duties, incident management, IAM security event correlation and an integrated incident management workflow. **Average Rating:** 4.0/5.0 **Total Reviews:** 1 **Who Is the Company Behind HORACIUS?** - **Seller:** [e-trust](https://www.g2.com/sellers/e-trust) - **HQ Location:** Porto Alegre, Brazil - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise #### What Are Recent G2 Reviews of HORACIUS? **"[Very good IAM tool. Great value for money](https://www.g2.com/survey_responses/horacius-review-7619701)"** **Rating:** 4.0/5.0 stars *— Erick T.* [Read full review](https://www.g2.com/survey_responses/horacius-review-7619701) --- ### 8. [Identum](https://www.g2.com/products/identum/reviews) Your IAM works today. Nobody's quite sure how, or for how long. Usually one person understands the scripts holding it together. When that person leaves, retires, or gets sick, the system becomes a risk. We call it the Erik Effect, and it's the real reason most public sector IT teams switch to Identum. Identum is identity and access management built for organisations that don't have a dedicated IAM team. Joiner, mover, and leaver flows trigger from your HR system. Accounts open, change, and close without anyone writing a script. Access reviews run on a schedule, not when an auditor knocks. Identum tracks Microsoft license usage and downgrades unused seats automatically. The whole thing runs through a no-code interface, which means the person owning your IAM today is the person changing your onboarding template tomorrow. Not a vendor. Not a consultant. 214 municipalities across the Nordics run on Identum today. VarIT, a collaboration between five Norwegian municipalities, cut their IAM consulting bill by 80 percent after switching. Bjørnafjorden kommune automatically downgraded 7.66 percent of its Microsoft licenses based on actual non-use, saving 672,000 NOK a year. Indre Østfold provisioned 5,200 employees through a single HR integration in under three weeks. We're built for the IT director European municipality, the IT lead at a regional authority, or the systems owner at a 500-5000 person company. In each case, the IAM owner has three other systems to run. If you're a 50,000-employee multinational with a dedicated IAM team running on-premise hardware, SailPoint or NetIQ are better fits. We won't pretend otherwise. For everyone else, the typical path is eight to twelve weeks from signed contract to first automated lifecycle flow. After that, you own it. No coding, no consultants on retainer, no waiting on a vendor to change your offboarding template. Identum is part of the Visma Group. Data lives where you want it. Security operations follow the Visma Cloud Delivery Model. NIS2 and Cybersäkerhetslagen alignment is part of the platform design, not a feature added on later. **Average Rating:** 4.5/5.0 **Total Reviews:** 1 **Who Is the Company Behind Identum?** - **Seller:** [Identum](https://www.g2.com/sellers/identum) - **Year Founded:** 2009 - **HQ Location:** Bergen, NO - **LinkedIn® Page:** https://www.linkedin.com/company/identum-as/ (15 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise #### What Are Recent G2 Reviews of Identum? **"[Simplifies User Management with Effortless Stability](https://www.g2.com/survey_responses/identum-review-12760696)"** **Rating:** 4.5/5.0 stars *— Tom Ruben B.* [Read full review](https://www.g2.com/survey_responses/identum-review-12760696) --- ### 9. [Ironchip](https://www.g2.com/products/ironchip/reviews) Ironchip is the next-generation Identity solution based on zero-knowledge proofs that helps you achieve your company's security dream: Zero Accounts Takeover. We provide a passwordless and codeless solution that prevents and detects phishing attacks, man-in-the-middle attacks, and account takeovers. We use unspoofable location, device intelligence, and user behavior to verify your identity, providing two solutions: an identity platform for your employees and a fraud detection solution for your end-users. **Average Rating:** 3.5/5.0 **Total Reviews:** 1 **How Do G2 Users Rate Ironchip?** - **Tracking:** 8.3/10 (Category avg: 8.7/10) - **User provisioning:** 10.0/10 (Category avg: 9.1/10) - **On-premises solution:** 5.0/10 (Category avg: 8.3/10) **Who Is the Company Behind Ironchip?** - **Seller:** [Ironchip](https://www.g2.com/sellers/ironchip) - **Year Founded:** 2017 - **HQ Location:** Barakaldo, ES - **LinkedIn® Page:** https://www.linkedin.com/company/ironchip/ (35 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise ### 10. [Jellyfish by Cogito Group](https://www.g2.com/products/jellyfish-by-cogito-group/reviews) Jellyfish is designed to simplify the creation and management of digital credentials. Jellyfish Certificate Authority is NIAP-certified and independently validated against Common Criteria and Protection Profile requirements, with certification valid until 2031. It provides verified security for government, Defence, and critical infrastructure environments requiring the highest level of digital trust. Jellyfish enhances your security through increased visibility, greater control, stronger protection, and seamless authentication. Jellyfish is a simple, cost-effective, low-risk, complete solution for connecting identities such as users, devices, services and credentials to each other. Jellyfish allows for enhanced security, better visibility, and simplified and central control. You can improve end-user productivity through seamless authentication, digital signing and automation of processes and changes, reducing your administrative burden. Uses include those in Finance, Healthcare, Education, Defence, and Legal businesses. Really anywhere you need to manage, protect or use credential types like digital certificates, one-time passwords, electronic keys, passwords or even passkeys. Uses include everything from digitally signing documents and code, to securing websites or internet communications as well as securely authenticating to a service or system. Jellyfish is available as a service via SecureSME or as installed software on your site or preferred cloud service. It can act as a simple point solution or as an as a service component for your users, devices and systems even when installed on your site. Users have access to a comprehensive training centre and documentation hub, featuring technical guides on everything from Post-Quantum Cryptography (PQC) to automated enrolment workflows. **Average Rating:** 4.5/5.0 **Total Reviews:** 1 **How Do G2 Users Rate Jellyfish by Cogito Group?** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10) - **Tracking:** 8.3/10 (Category avg: 8.7/10) - **User provisioning:** 8.3/10 (Category avg: 9.1/10) - **On-premises solution:** 0.0/10 (Category avg: 8.3/10) **Who Is the Company Behind Jellyfish by Cogito Group?** - **Seller:** [Cogito Group](https://www.g2.com/sellers/cogito-group) - **Company Website:** https://cogitogroup.net/ - **Year Founded:** 2011 - **HQ Location:** Barton, AU - **Twitter:** @CogitoGroup1 (253 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/cogito-group-pty-ltd (25 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise #### What Are Recent G2 Reviews of Jellyfish by Cogito Group? **"[Great Product that provides an integrated cybersecurity platform for you organisation.](https://www.g2.com/survey_responses/jellyfish-by-cogito-group-review-9555005)"** **Rating:** 4.5/5.0 stars *— Bryce J.* [Read full review](https://www.g2.com/survey_responses/jellyfish-by-cogito-group-review-9555005) --- ### 11. [Linx Security](https://www.g2.com/products/linx-security/reviews) Linx Security is a modern identity governance and access management platform built for modern enterprises. We help organizations stay governed, meet compliance, and prevent identity-based breaches by giving security teams deep visibility and precise control over who has access to what, across every application, environment, and identity type - human or non-human. Unlike legacy IGA systems that are complex, slow to deploy, and rigid, Linx is modular, API-first, and purpose-built for hybrid cloud environments. Our platform unifies identity security and access governance in one intuitive solution, enabling enterprises to automate access requests, approvals, certifications, and least privilege enforcement at scale. With Linx, you can: Discover and monitor all identities, including service accounts and shadow admins. Automate access reviews and entitlement workflows with context-rich intelligence. Enforce least privilege across SaaS, cloud infrastructure, and on-prem systems. Streamline onboarding and offboarding across the identity lifecycle. Meet compliance standards like NIST, CIS, SOX, and PCI with confidence. Leading enterprises trust Linx to keep their identity security and governance at its highest standard—proactive, precise, and always aligned with evolving risk. We integrate seamlessly with your existing stack—Okta, Azure AD, AWS, Salesforce, ServiceNow, Workday, and more - so you can get started in days, not months. Because attackers don’t break in anymore, they log in. And Linx makes sure only the right people - and only the right machines - can. **Average Rating:** 5.0/5.0 **Total Reviews:** 1 **Who Is the Company Behind Linx Security?** - **Seller:** [Linx Security](https://www.g2.com/sellers/linx-security) - **Year Founded:** 2023 - **HQ Location:** New York, US - **LinkedIn® Page:** https://www.linkedin.com/company/linx-security (58 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Mid-Market #### What Are Recent G2 Reviews of Linx Security? **"[Single Identity View with Powerful AI Governance and Automated Provisioning](https://www.g2.com/survey_responses/linx-security-review-12751336)"** **Rating:** 5.0/5.0 stars *— Udi D.* [Read full review](https://www.g2.com/survey_responses/linx-security-review-12751336) --- ### 12. [my-IAM](https://www.g2.com/products/my-iam/reviews) my-IAM is an identity and authorization platform in Teams for Microsoft 365, Azure Active Directory and Teams. my-IAM is for employees, managers and admins who want to organize and manage themselves and their teams. It offers a modern and secure german cloud identity service for Microsoft Teams and your Microsoft 365 hybrid infrastructure. **Average Rating:** 4.0/5.0 **Total Reviews:** 1 **How Do G2 Users Rate my-IAM?** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10) - **Tracking:** 8.3/10 (Category avg: 8.7/10) - **User provisioning:** 8.3/10 (Category avg: 9.1/10) - **On-premises solution:** 6.7/10 (Category avg: 8.3/10) **Who Is the Company Behind my-IAM?** - **Seller:** [FirstAttribute](https://www.g2.com/sellers/firstattribute) - **HQ Location:** N/A - **Twitter:** @FirstAttribute (64 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Mid-Market #### What Are Recent G2 Reviews of my-IAM? **"[Using templates for the creation and management of users with my-IAM for Microsoft Office 365 Apps](https://www.g2.com/survey_responses/my-iam-review-9352460)"** **Rating:** 4.0/5.0 stars *— Dallas K.* [Read full review](https://www.g2.com/survey_responses/my-iam-review-9352460) --- ### 13. [P0 Security](https://www.g2.com/products/p0-security/reviews) P0 Security is the next-generation Privileged Access Management (PAM) platform that secures privileged access for every identity—human, machine and agentic—across cloud and hybrid environments. Production access is broken. Enterprises are drowning in break-glass accounts, static tokens, and over-privileged roles, with no clear view of who—or what—actually has access. Legacy tools like PAM, IGA and CIEM were built for a static, perimeter-driven world. They create blind spots, create extra work for security teams who have to manage proxies, bastions, shared accounts and static credentials. P0 was built differently. We unify visibility, governance, and orchestration into one platform. At the foundation is Access DNA—a continuously updated inventory of all human, non-human, and AI identities, their entitlements, and effective permissions across hybrid and cloud environments. On top of that, our Identity Graph maps relationships, reveals risky pivots, and surfaces toxic privilege combinations. And through API-led orchestration, P0 enforces policies natively in every system—without proxies, vaults, or static credentials. The result: \* Privileged resources clearly identified \* No standing privileged access \* All access ephemeral, granted just-in-time, and fully auditable With P0, organizations finally have a clear path from today’s chaotic baseline to zero standing privilege—reducing risk, streamlining compliance, and enabling developer velocity. **Average Rating:** 4.5/5.0 **Total Reviews:** 1 **How Do G2 Users Rate P0 Security?** - **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.2/10) - **Tracking:** 10.0/10 (Category avg: 8.7/10) - **User provisioning:** 8.3/10 (Category avg: 9.1/10) - **On-premises solution:** 0.0/10 (Category avg: 8.3/10) **Who Is the Company Behind P0 Security?** - **Seller:** [P0 Security](https://www.g2.com/sellers/p0-security) - **Company Website:** https://www.p0.dev/ - **Year Founded:** 2022 - **HQ Location:** San Francisco, US - **Twitter:** @P0Security (53 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/p0-security/ (26 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Mid-Market #### What Are P0 Security's Pros and Cons? **Pros:** - Access Control (1 reviews) - Ease of Use (1 reviews) - Features (1 reviews) - Policy Management (1 reviews) - Security (1 reviews) ### What Do G2 Reviewers Say About P0 Security? *AI-generated summary from verified user reviews* **Pros:** - Users value the **effective access control** provided by P0, ensuring clean IAM groups and secure resource management. - Users value the **ease of use** in P0 Security, simplifying access management for teams and enhancing security. - Users value the **precise access control** of P0 Security, ensuring secure and organized IAM policies in cloud resources. - Users appreciate the **effective policy management** of P0 Security, ensuring secure access control and clean IAM policies. - Users value the **robust security features** of P0 Security, ensuring controlled access and reduced risk of exploitation. #### What Are Recent G2 Reviews of P0 Security? **"[Streamlined JIT access management for identities and cloud resources](https://www.g2.com/survey_responses/p0-security-review-11180993)"** **Rating:** 4.5/5.0 stars *— Geoff H.* [Read full review](https://www.g2.com/survey_responses/p0-security-review-11180993) --- ### 14. [ReShield](https://www.g2.com/products/reshield/reviews) ReShield is an advanced Identity and Access Governance solution designed for companies looking to seamlessly secure and manage access to their critical data and infrastructure. It simplifies identity and permission management for both human and machine identities across Cloud, Databases, Kubernetes, and SaaS applications. Built specifically for Security, IT, and DevOps teams, ReShield helps you: - Gain complete visibility into user access, permissions, and identity-related risks. - Achieve least-privilege access through fine-grained controls accessible via Slack, Teams, and web interfaces. - Streamline compliance with automated user access reviews and detailed reporting. - Proactively identify and mitigate threats with real-time insights into identity and access risks. Tailored for modern cloud environments, ReShield can be deployed quickly, enabling teams to get started within a day instead of months. **Average Rating:** 5.0/5.0 **Total Reviews:** 2 **How Do G2 Users Rate ReShield?** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10) - **Tracking:** 10.0/10 (Category avg: 8.7/10) - **User provisioning:** 10.0/10 (Category avg: 9.1/10) - **On-premises solution:** 6.7/10 (Category avg: 8.3/10) **Who Is the Company Behind ReShield?** - **Seller:** [ReShield](https://www.g2.com/sellers/reshield) - **Year Founded:** 2023 - **HQ Location:** Mountain View, US - **LinkedIn® Page:** https://www.linkedin.com/company/get-reshield (12 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Small-Business #### What Are Recent G2 Reviews of ReShield? **"[Easy to use and quick to provide value](https://www.g2.com/survey_responses/reshield-review-11270012)"** **Rating:** 5.0/5.0 stars *— Vijay S.* [Read full review](https://www.g2.com/survey_responses/reshield-review-11270012) --- **"[Enhancing Access governance, Visibility, Security, and Efficiency](https://www.g2.com/survey_responses/reshield-review-10844885)"** **Rating:** 5.0/5.0 stars *— Verified User in Health, Wellness and Fitness* [Read full review](https://www.g2.com/survey_responses/reshield-review-10844885) --- ### 15. [SAP Cloud Identity Access Governance](https://www.g2.com/products/sap-cloud-identity-access-governance/reviews) SAP Cloud Identity Access Governance is a cloud-based solution designed to streamline identity and access management across complex on-premise and cloud environments. By providing a unified, dashboard-driven interface, it enhances security, ensures compliance, and simplifies the management of user access rights. IAG helps organizations minimize access risks, prevent unauthorized access, and mitigate potential financial losses by offering real-time insights and automated processes. Key Features and Functionality: - Access Compliance Management: Continuously analyzes access rights, leveraging predefined policies and rules to support compliance management. - Intelligent Optimization of Assignments: Utilizes analytics and visual prompts to accurately assign user access, dynamically adjusting as business needs evolve. - Extended Control and Risk Management: Provides comprehensive access control across enterprise applications, enabling risk remediation and monitoring for segregation of duties violations. - Role Design Service: Facilitates the creation and maintenance of business roles, optimizing role definitions and governance processes. - Access Request Service: Allows users to request access through self-service forms, streamlining provisioning workflows and ensuring compliance. - Access Certification Service: Enables periodic reviews of user access, roles, and mitigation controls to maintain compliance with regulatory standards. - Privileged Access Management: Monitors and controls access to sensitive transactions, consolidating logs and automating assessments to detect and prevent fraudulent activities. Primary Value and User Solutions: SAP Cloud IAG addresses the critical need for secure and efficient identity and access management in today's hybrid IT landscapes. By automating access controls, providing real-time risk analysis, and ensuring compliance with regulatory requirements, it empowers organizations to protect sensitive data, reduce the risk of unauthorized access, and enhance operational efficiency. The solution's adaptive and scalable capabilities allow businesses to respond swiftly to changing user needs and evolving security threats, thereby safeguarding their digital assets and maintaining trust with stakeholders. **Average Rating:** 3.5/5.0 **Total Reviews:** 1 **How Do G2 Users Rate SAP Cloud Identity Access Governance?** - **User provisioning:** 10.0/10 (Category avg: 9.1/10) **Who Is the Company Behind SAP Cloud Identity Access Governance?** - **Seller:** [SAP](https://www.g2.com/sellers/sap) - **Year Founded:** 1972 - **HQ Location:** Walldorf - **Twitter:** @SAP (297,052 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/sap/ (141,955 employees on LinkedIn®) - **Ownership:** NYSE:SAP **Who Uses This Product?** - **Company Size:** 100% Enterprise ### 16. [Savvy SaaS Security Platform](https://www.g2.com/products/savvy-saas-security-platform/reviews) Savvy is the identity-first security platform built for the way work happens today — in the browser, across hundreds of SaaS apps, on devices you don’t always control. We protect the layer where risk begins and other tools are blind to. Gaps like SSO bypass, unmanaged app usage, risky credentials and MFA misconfigurations. Our patent-pending Enterprise Browsing System combines a secure browser, a lightweight extension, and cloud-based automation to deliver real-time visibility and enforcement — without breaking the way users work. From discovering every app and account, to enforcing your security policies using just-in-time guardrails, Savvy turns identity security into a continuous, proactive layer of protection. Whether you're a CISO, IAM, or IT leader — Savvy gives you control, visibility, and assurance where it matters most: the browser. **Average Rating:** 5.0/5.0 **Total Reviews:** 1 **How Do G2 Users Rate Savvy SaaS Security Platform?** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10) - **Tracking:** 10.0/10 (Category avg: 8.7/10) - **User provisioning:** 6.7/10 (Category avg: 9.1/10) - **On-premises solution:** 3.3/10 (Category avg: 8.3/10) **Who Is the Company Behind Savvy SaaS Security Platform?** - **Seller:** [Savvy Security](https://www.g2.com/sellers/savvy-security) - **Year Founded:** 2021 - **HQ Location:** Palo Alto, US - **LinkedIn® Page:** https://www.linkedin.com/company/savvy-security (71 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise #### What Are Recent G2 Reviews of Savvy SaaS Security Platform? **"[Taking Human-Centric Security to a Whole New Level](https://www.g2.com/survey_responses/savvy-saas-security-platform-review-9790658)"** **Rating:** 5.0/5.0 stars *— Carly F.* [Read full review](https://www.g2.com/survey_responses/savvy-saas-security-platform-review-9790658) --- ### 17. [Skillmine Auth](https://www.g2.com/products/skillmine-auth/reviews) Skillmine AUTH is a modern Identity and Access Management (IAM) platform that enables organizations to securely manage user identities, authentication, and access across cloud, on-prem, and hybrid environments. It provides a unified access layer through standards like SAML, OAuth 2.0, and OpenID Connect, with seamless integration into Active Directory, HRMS, and enterprise applications. Starting with core capabilities such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and centralized access control, Skillmine AUTH ensures secure and seamless user access across systems. Building on this foundation, it introduces context-aware authentication, dynamically evaluating access based on device, location, time, and user behavior. Extending security further, Skillmine AUTH enforces protection beyond applications with operating system-level MFA (Windows & Linux), along with session-level controls such as IP, geo, and time-based restrictions. To proactively mitigate risks, it incorporates real-time anomaly detection and automated lifecycle management, ensuring continuous security, governance, and compliance. **Average Rating:** 5.0/5.0 **Total Reviews:** 1 **How Do G2 Users Rate Skillmine Auth?** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10) - **On-premises solution:** 10.0/10 (Category avg: 8.3/10) **Who Is the Company Behind Skillmine Auth?** - **Seller:** [Skillmine Technology Consulting](https://www.g2.com/sellers/skillmine-technology-consulting) - **Year Founded:** 2011 - **HQ Location:** Mumbai, IN - **LinkedIn® Page:** https://www.linkedin.com/company/skillminetech (642 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Mid-Market #### What Are Recent G2 Reviews of Skillmine Auth? **"[Machine Learning–Powered Anomaly Detection & Risk-Based Authentication](https://www.g2.com/survey_responses/skillmine-auth-review-12249664)"** **Rating:** 5.0/5.0 stars *— Shravan V.* [Read full review](https://www.g2.com/survey_responses/skillmine-auth-review-12249664) --- ### 18. [SolarWinds Access Rights Manager](https://www.g2.com/products/solarwinds-worldwide-llc-solarwinds-access-rights-manager/reviews) SolarWinds® Access Rights Manager (ARM) seamlessly integrates with your existing security tools and infrastructure, providing centralized visibility into Active Directory, Azure AD, Exchange, SharePoint, and file servers. Built for ease of use, ARM helps organizations easily manage and audit user access rights across their IT environment, ensuring compatibility and smooth deployment. It enables IT and security teams to quickly answer the critical question: "Who has access to what, and when did they access it?" By automating user provisioning, offering a self-service permissions portal for data owners, and delivering out-of-the-box compliance reports, SolarWinds ARM reduces the administrative burden on IT teams while helping organizations adhere to strict regulatory mandates like GDPR, PCI DSS, and HIPAA. Eliminate IT Bottlenecks: Managing permissions manually or via complex PowerShell scripts is time-consuming. ARM automates routine tasks like account provisioning and delegates access approvals to business data owners, freeing up IT staff to focus on strategic initiatives. Simplify Audit & Compliance Readiness: Preparing for audits can be a massive headache. ARM provides pre-built, customizable reporting templates that make it easy to prove compliance to auditors, showing a clear trail of who accessed sensitive data and when. Mitigate Insider Threats and Data Breaches: Overprivileged accounts are a massive security risk. ARM highlights overprovisioned users, tracks unauthorized access attempts, and helps enforce the Principle of Least Privilege (PoLP) across your hybrid IT environment. Key Features: • Active Directory & Azure AD Auditing: Monitor and manage user permissions, detect suspicious account activity, and track changes in real time. • Automated User Provisioning & Deprovisioning: Standardize onboarding and offboarding with role-specific templates, ensuring users only get the access they need. • Self-Service Permissions Portal: Delegate access rights management directly to data owners, reducing IT support tickets and bottlenecks. • Comprehensive Compliance Reporting: Generate and schedule detailed audit reports to help CISOs feel assured and prepared for audits, demonstrating compliance with internal policies and external regulations (HIPAA, PCI, GDPR). • File Server & SharePoint Auditing: Gain deep visibility into NTFS permissions and SharePoint access to protect sensitive enterprise data. • Cybersecurity Risk Management: Identify insecure account configurations and monitor for compromised credentials to prevent data breaches and insider threats. **Average Rating:** 3.5/5.0 **Total Reviews:** 1 **How Do G2 Users Rate SolarWinds Access Rights Manager?** - **Tracking:** 10.0/10 (Category avg: 8.7/10) - **On-premises solution:** 10.0/10 (Category avg: 8.3/10) **Who Is the Company Behind SolarWinds Access Rights Manager?** - **Seller:** [SolarWinds Worldwide LLC](https://www.g2.com/sellers/solarwinds-worldwide-llc) - **Year Founded:** 1999 - **HQ Location:** Austin, TX - **Twitter:** @solarwinds (19,570 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/166039/ (2,824 employees on LinkedIn®) - **Ownership:** NYSE: SWI **Who Uses This Product?** - **Company Size:** 100% Mid-Market ### 19. [Symantec IGA](https://www.g2.com/products/symantec-iga/reviews) The Layer7 Identity Suite provides comprehensive identity management and governance capabilities with a simple, intuitive user experience. This user experience can dramatically simplify processes such as user access requests and access certifications, resulting in improved productivity and user satisfaction. In addition, the CA Identity Suite performs risk analysis and certification and enables remediation actions in real-time during the access provisioning steps, thereby improving audit performance and risk posture with preventive policy enforcement **Average Rating:** 3.5/5.0 **Total Reviews:** 15 **How Do G2 Users Rate Symantec IGA?** - **Has the product been a good partner in doing business?:** 7.8/10 (Category avg: 9.2/10) - **Tracking:** 8.3/10 (Category avg: 8.7/10) - **User provisioning:** 10.0/10 (Category avg: 9.1/10) - **On-premises solution:** 8.3/10 (Category avg: 8.3/10) **Who Is the Company Behind Symantec IGA?** - **Seller:** [Broadcom](https://www.g2.com/sellers/broadcom-ab3091cd-4724-46a8-ac89-219d6bc8e166) - **Year Founded:** 1991 - **HQ Location:** San Jose, CA - **Twitter:** @broadcom (63,909 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/broadcom/ (55,094 employees on LinkedIn®) - **Ownership:** NASDAQ: CA **Who Uses This Product?** - **Top Industries:** Information Technology and Services - **Company Size:** 69% Enterprise, 56% Mid-Market #### What Are Recent G2 Reviews of Symantec IGA? **"["One stop solution for Id access management"](https://www.g2.com/survey_responses/symantec-iga-review-4904130)"** **Rating:** 4.5/5.0 stars *— VivekPrasanth R.* [Read full review](https://www.g2.com/survey_responses/symantec-iga-review-4904130) --- **"[Overall experience](https://www.g2.com/survey_responses/symantec-iga-review-8236529)"** **Rating:** 4.5/5.0 stars *— Felipe R.* [Read full review](https://www.g2.com/survey_responses/symantec-iga-review-8236529) --- #### What Are G2 Users Discussing About Symantec IGA? - [What is CA identity governance?](https://www.g2.com/discussions/what-is-ca-identity-governance) - [What is IGA cyber security?](https://www.g2.com/discussions/what-is-iga-cyber-security) - [What is an IGA tool?](https://www.g2.com/discussions/what-is-an-iga-tool) - [What is Symantec IGA?](https://www.g2.com/discussions/what-is-symantec-iga) ### 20. [synk.to](https://www.g2.com/products/synk-to/reviews) Synk.to is a cloud-first identity management platform designed to seamlessly integrate with your favorite SaaS solutions, including Google Workspace, Jira, Slack, Microsoft Entra ID, Zoom, Confluence, and more. With Synk.to, you can effortlessly synchronize users and groups across all your applications. Our platform enables you to onboard and offboard employees in minutes, conduct instant access rights reviews, and monitor SaaS license usage—all from a single interface. Synk.to simplifies identity management, making your SaaS management more efficient and secure. **Average Rating:** 4.0/5.0 **Total Reviews:** 1 **How Do G2 Users Rate synk.to?** - **Tracking:** 8.3/10 (Category avg: 8.7/10) - **User provisioning:** 8.3/10 (Category avg: 9.1/10) **Who Is the Company Behind synk.to?** - **Seller:** [SynkTo](https://www.g2.com/sellers/synkto) - **HQ Location:** N/A - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Small-Business #### What Are Recent G2 Reviews of synk.to? **"[Helps sync all SaaS systems](https://www.g2.com/survey_responses/synk-to-review-11302503)"** **Rating:** 4.0/5.0 stars *— Deepankar C.* [Read full review](https://www.g2.com/survey_responses/synk-to-review-11302503) --- ### 21. [Thales OneWelcome Identity Platform](https://www.g2.com/products/thales-onewelcome-identity-platform/reviews) The Thales OneWelcome Identity Platform is a cloud-based identity and access management solution designed to deliver secure, frictionless digital experiences for all external identities, including customers and partners. It provides a unified platform to manage identities across B2C, B2B, gig-workers, and workforce use cases, helping organizations build trusted digital interactions at scale. The Thales OneWelcome Identity Orchestrator (IO) is a next-gen Visual Orchestration tool that enables no-code orchestration of any user journey and acts as the central engine of an Identity Fabric, moving organizations away from siloed, product‑centric deployments toward a more connected, risk-aware system of systems that can compute dynamic decisions based on all available contextual signals. As a cloud-based component, IO provides a visual interface and execution engine to manage complex interactions across B2C, B2B, and gig worker markets. To support security and compliance, Thales incorporates Adaptive Authentication, combining multi-factor authentication and risk-based access controls, alongside Consent and Preference Management to help organizations meet privacy and regulatory requirements. Delegated User Management enables secure administration of partner and third-party access through self-service workflows. With support for Passwordless Authentication, including passkeys and hardware-based authenticators, and a modular architecture built on identity apps, the platform enables flexible deployment while helping organizations modernize identity, reduce complexity, and strengthen security across digital channels. **Average Rating:** 4.8/5.0 **Total Reviews:** 2 **Who Is the Company Behind Thales OneWelcome Identity Platform?** - **Seller:** [Thales Group](https://www.g2.com/sellers/thales-group) - **HQ Location:** Austin, Texas - **Twitter:** @ThalesCloudSec (6,935 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/thalessoftwaremonetization/ (46 employees on LinkedIn®) - **Ownership:** EPA:HO - **Total Revenue (USD mm):** $15,854 **Who Uses This Product?** - **Company Size:** 50% Enterprise, 50% Mid-Market #### What Are Thales OneWelcome Identity Platform's Pros and Cons? **Pros:** - Access Management (1 reviews) - Authentication (1 reviews) - Easy Access (1 reviews) - Security (1 reviews) **Cons:** - Complex Setup (2 reviews) - Expensive (1 reviews) ### What Do G2 Reviewers Say About Thales OneWelcome Identity Platform? *AI-generated summary from verified user reviews* **Pros:** - Users value the **smooth and convenient access management** provided by Thales OneWelcome, enhancing team efficiency effortlessly. - Users value the **multifactor and adaptive authentication** features, enhancing security against unauthorized access effectively. - Users appreciate the **smooth and convenient access management** of Thales OneWelcome, enhancing team efficiency effortlessly. - Users appreciate the **secure access management** of Thales OneWelcome, which enhances convenience and user experience greatly. **Cons:** - Users find the **complex setup** of Thales OneWelcome Identity Platform challenging, impacting the overall user experience. - Users find the **pricing to be expensive** and note the lack of transparency complicating their budgeting process. #### What Are Recent G2 Reviews of Thales OneWelcome Identity Platform? **"[Secure, Frictionless Access Management with Thales OneWelcome Identity Platform](https://www.g2.com/survey_responses/thales-onewelcome-identity-platform-review-11151239)"** **Rating:** 4.5/5.0 stars *— Vishal P.* [Read full review](https://www.g2.com/survey_responses/thales-onewelcome-identity-platform-review-11151239) --- **"[The Powerful Solution for Securtiy](https://www.g2.com/survey_responses/thales-onewelcome-identity-platform-review-10919996)"** **Rating:** 5.0/5.0 stars *— neha v.* [Read full review](https://www.g2.com/survey_responses/thales-onewelcome-identity-platform-review-10919996) --- ### 22. [Usercube IGA (SaaS Identity Governance & Administration)](https://www.g2.com/products/usercube-iga-saas-identity-governance-administration/reviews) With Usercube, you know in real time WHO has access to WHAT and if is compliant with your SECURITY POLICY. Usercube synchronizes with your HR data sources for accurate user data, connects with your IT infrastructure to manage user credentials, connects with your business applications to audit user permissions and Usercube streamlines certification campaigns with business teams. Usercube is a SaaS solution for all businesses, mid-size to enterprises. Particularly in the Finance and Insurance business, Usercube IGA offers a full range of Identity life cycle management, provisioning of accounts and fine grained rights, as well as governance features. **Average Rating:** 5.0/5.0 **Total Reviews:** 1 **Who Is the Company Behind Usercube IGA (SaaS Identity Governance & Administration)?** - **Seller:** [USERCUBE](https://www.g2.com/sellers/usercube) - **HQ Location:** New York, Paris, Brussels, US - **LinkedIn® Page:** https://www.linkedin.com/company/usercube/ (8 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Enterprise #### What Are Recent G2 Reviews of Usercube IGA (SaaS Identity Governance & Administration)? **"[Successfull migration of legacy IAM to Cloud SaaS IAG for a Major Energy Company](https://www.g2.com/survey_responses/usercube-iga-saas-identity-governance-administration-review-5087468)"** **Rating:** 5.0/5.0 stars *— Verified User in Oil & Energy* [Read full review](https://www.g2.com/survey_responses/usercube-iga-saas-identity-governance-administration-review-5087468) --- ### 23. [YeshID Onboard](https://www.g2.com/products/yeshid-onboard/reviews) YeshID is the all-in-one identity management tool for growing organizations and the only identity and access management tool built specifically for Google Workspace. Sign up for free at yeshid.com/onboard. Watch video demos at https://www.youtube.com/@YeshID. YeshID helps you be more safe, compliant, and efficient in 5 minutes, no IT or security experience required — because futzing around in Google Workspace’s admin console isn’t what you had in mind when you started a company. **Average Rating:** 5.0/5.0 **Total Reviews:** 1 **How Do G2 Users Rate YeshID Onboard?** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10) - **Tracking:** 10.0/10 (Category avg: 8.7/10) - **User provisioning:** 10.0/10 (Category avg: 9.1/10) - **On-premises solution:** 0.0/10 (Category avg: 8.3/10) **Who Is the Company Behind YeshID Onboard?** - **Seller:** [YeshID](https://www.g2.com/sellers/yeshid) - **Year Founded:** 2022 - **HQ Location:** Denver, US - **Twitter:** @yeshidco (44 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/yeshid (21 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Mid-Market #### What Are Recent G2 Reviews of YeshID Onboard? **"[YeshID is the missing piece to a seamless onboarding and user management experience](https://www.g2.com/survey_responses/yeshid-onboard-review-8932302)"** **Rating:** 5.0/5.0 stars *— Verified User in Financial Services* [Read full review](https://www.g2.com/survey_responses/yeshid-onboard-review-8932302) --- ### 24. [ZITADEL](https://www.g2.com/products/zitadel/reviews) Open-source identity infrastructure that scales with your business Zitadel delivers enterprise-grade identity management without the enterprise complexity. Built for modern applications, it provides secure authentication, authorization, and user management through clean APIs and intuitive interfaces. Why developers choose Zitadel: 1. Zero vendor lock-in - Open source with self-hosting options 2. Multi-tenant by design - Isolate customers while sharing infrastructure 3. Modern standards - Native support for OpenID Connect, OAuth2, SAML, and Passkeys/FIDO2 4. Developer-friendly - Comprehensive APIs, webhooks, and customizable workflows 5. Production-ready - Built-in audit trails, monitoring, and enterprise security Perfect for SaaS platforms, B2B applications, and any product requiring sophisticated user management. Deploy in minutes, customize as you scale. Key Features: Multi-tenancy, Passkeys/FIDO2, Self-service management, OpenID Connect, OAuth2, SAML, LDAP, OTP, Audit trails, API-first architecture **Average Rating:** 5.0/5.0 **Total Reviews:** 1 **How Do G2 Users Rate ZITADEL?** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10) - **Tracking:** 3.3/10 (Category avg: 8.7/10) - **User provisioning:** 8.3/10 (Category avg: 9.1/10) - **On-premises solution:** 8.3/10 (Category avg: 8.3/10) **Who Is the Company Behind ZITADEL?** - **Seller:** [ZITADEL](https://www.g2.com/sellers/zitadel) - **Year Founded:** 2020 - **HQ Location:** San Francisco, US - **Twitter:** @zitadel (664 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/zitadel/ (21 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Small-Business #### What Are ZITADEL's Pros and Cons? **Pros:** - Ease of Use (1 reviews) - Easy Management (1 reviews) - Easy Setup (1 reviews) - Reliability (1 reviews) **Cons:** - Lack of Information (1 reviews) ### What Do G2 Reviewers Say About ZITADEL? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of ZITADEL, enabling quick deployment and management for their IAM needs. - Users appreciate the **easy management** of ZITADEL, finding both SaaS and on-prem options quick to deploy. - Users find ZITADEL's **easy setup** process quick and efficient, allowing for rapid deployment in various environments. - Users praise the **reliability** of ZITADEL, appreciating its easy deployment and management options for various needs. **Cons:** - Users experience **gaps in documentation** , making it challenging to navigate ZITADEL's evolving features effectively. #### What Are Recent G2 Reviews of ZITADEL? **"[CIAM you may like](https://www.g2.com/survey_responses/zitadel-review-11771256)"** **Rating:** 5.0/5.0 stars *— Verified User in Automotive* [Read full review](https://www.g2.com/survey_responses/zitadel-review-11771256) --- ### 25. [AccessFlow](https://www.g2.com/products/accessflow/reviews) AccessFlow is an automated, self-service access management solution built on the ServiceNow platform.AccessFlow connects customer’s active directory or any IAM tools to CMDB, for requesting access. It maintains and protects Enterprise Access, Role-based access, Access both on-premises and on cloud, Manual or scheduled access review/attestation, Owner accountability, Authorized approval process, Dashboards and reporting. AccessFlow provides a possibility to unify the access administration approach across entities, be it applications, network folders, or more granular process driven roles, to streamline operations, remove a lot of workload pressure from IT or IAM and place it in the hands of the line-of-business. It helps organizations to become audit-ready, while providing a single unified interface to request, track and execute operations. AccessFlow is an easy, intuitive IAM platform that provides access management on the go. Just download the mobile application and enjoy the seamless experience. It offers seamless integration with Enterprise Resource Planning (ERP) environments- • Oracle EBS from R12.x version onwards • SAP S/4HANA and future versions **Who Is the Company Behind AccessFlow?** - **Seller:** [Alcor](https://www.g2.com/sellers/alcor) - **Year Founded:** 2007 - **HQ Location:** Palo Alto, US - **LinkedIn® Page:** https://www.linkedin.com/company/18244868 (233 employees on LinkedIn®) ## What Is Identity and Access Management (IAM) Software? [Identity Management Software](https://www.g2.com/categories/identity-management) ## What Software Categories Are Similar to Identity and Access Management (IAM) Software? - [Single Sign-On (SSO) Solutions](https://www.g2.com/categories/single-sign-on-sso) - [User Provisioning and Governance Tools](https://www.g2.com/categories/user-provisioning-and-governance-tools) - [Multi-Factor Authentication (MFA) Software](https://www.g2.com/categories/multi-factor-authentication-mfa) --- ## How Do You Choose the Right Identity and Access Management (IAM) Software? ### What You Should Know About Identity and Access Management (IAM) Software ### What is Identity and Access Management (IAM) Software? Companies use identity and access management (IAM) software to both enforce their security controls regarding who has access to corporate assets and to promote worker productivity with ease of access to the tools they need to do their jobs. IAM software achieves this by allowing only authorized and authenticated users, such as employees, contractors, and devices, to access corporate resources at their appropriate permission level based on predetermined policy-based controls.  Using IAM software, company administrators can quickly provision, deprovision, or change user identities and access rights to corporate assets at scale. Each user is granted the right level of access permissions based on their user or group membership type. This makes it easier for security teams to manage who has access to what accounts at scale, and for end users to quickly gain access to the tools they need to do their jobs instead of waiting for their individual accounts to be provisioned one by one. For example, a newly promoted departmental leader at a company may need permissions to fully access the proprietary data stored within an application. This can easily be granted to them due to their management group membership, while a junior-level employee would not need that kind of granular access, so they would only be permissioned to view non sensitive data stored within the application. IAM software also tracks user activity, enabling administrators to confirm that users are accessing corporate assets in compliance with company policies. Using IAM software and utilizing policy-based controls to enforce least privilege strategies, companies can protect against unauthorized access from both external actors like hackers and non permissioned internal users (insider threats) who have insufficient access level permissions. IAM software is used as an important component of a company’s zero-trust, least-privilege security model, where all users’ identities are verified prior to granting access to corporate resources. This is different from prior security models that enforced perimeter security where once a user is inside the corporate network, they are granted free access and movement across the network, and not required to be authenticated again to use other applications. **What Does IAM Stand For?** IAM, sometimes also listed as IdAM, stands for identity and access management. IAM software is sometimes also referred to as workforce identity or employee identity management. Other acronyms related to IAM include CIAM for [customer identity and access management (CIAM)](https://www.g2.com/categories/customer-identity-and-access-management-ciam)software which is used for customer-related identity management. Similarly, for government-related identity products, the acronym ICAM stands for Identity, credential, and access management. Another acronym, IDaaS, stands for identity as a service. ### What are the Common Features of Identity and Access Management (IAM) Software? The following are some core features within IAM software: **Authentication:** IAM providers offer multi-factor authentication (MFA) methods for users to prove their identity prior to being granted access to corporate resources. MFA requires more than a single authentication factor, such as only a username and password. Authentication factors can include one-time passcodes (OTPs), software tokens, mobile-push, hardware tokens, and more. More advanced authentication methods include biometric authentication and passwordless authentication.  More recently, IAM providers are utilizing risk-based authentication (RBA) methods, also known as contextual authentication, intelligent MFA, or adaptive MFA, which analyzes real-time information about users, such as their IP addresses, devices, and behaviors to continually verify their identity.  **Identity lifecycle management or user provisioning and deprovisioning:** IAM software providers offer administrators the ability to manage the lifecycle of an identity—from quickly provisioning to deprovisioning, along with user changes including attributes, roles, permissions, and other entitlements. Some IAM providers also offer a universal directory. **Directory:** IAM providers will either integrate with existing directory providers or offer a universal directory service. **Single sign-on (SSO):** IAM software provides SSO functionality to enable end users to access their business applications all in one place and requiring them to authenticate once. **User activity monitoring:** IAM software enables administrators to track user activity, including anomalous activity. This kind of auditing is to ensure compliance with secure access control policies. IAM solutions often provide standard reports for this. ### What are the Benefits of Identity and Access Management (IAM) Software? **Security:** The main benefit of implementing identity and access manager software is for improved security. IAM software manages access governance, allowing only verified, authorized, and permissioned users to access company assets. This helps mitigate risks from external hackers or insider threats. **Productivity or enabling the workforce:** In addition to improved security, companies that deploy IAM software to streamline the login experience, may lead to productivity gains with users. Having a simple to use security product with SSO requiring only one login and that also organizes the user’s corporate applications and accounts all in one place can save the user time and frustration.  **Regulatory compliance:** Many global governmental or industry regulations require companies to have security controls to be in place. Identity management is a major component of a well-rounded information security program. ### Who Uses Identity and Access Management (IAM) Software? **Information security (infosec) professionals:** Infosec professionals use IAM software as a foundational component of their security program. **IT Administrators:** IT admins may be responsible for managing IAM software, especially as it relates to provisioning and deprovisioning users. **End users and devices:** End users such as employees or contractors use IAM software in their day-to-day work activities to access corporate assets needed to do their jobs. Devices such as internet of things (IoT) devices require the validity of their identity in order to access corporate resources, including other IoT devices. ### What are the Alternatives to Identity and Access Management (IAM) Software? Alternatives to IAM solutions can replace this type of software, either partially or completely include: [Single sign-on (SSO) software](https://www.g2.com/categories/single-sign-on-sso): SSO software, which is a component of a complete IAM software solution, is an authentication tool that allows users to sign into multiple applications or databases with a single set of credentials. SSO software will not have identity governance and user lifecycle management features that an IAM solution would provide. [Multi-factor authentication (MFA) software](https://www.g2.com/categories/multi-factor-authentication-mfa): MFA, which is a component of a complete IAM software solution, is used to have users prove their identity in two or more ways before granting them access privileges to corporate accounts. There are many types of authentication factors above the standard single factor of login credentials like usernames and passwords, including something the user has like a mobile device or security token, something the user is, such as a scan of their faceprint or fingerprint, or somewhere the user is, like their geographical location and IP address. Newer forms of MFA include risk-based authentication and passwordless authentication. [Password manager software](https://www.g2.com/categories/password-manager): Password manager software, or password management software, stores a user's individual passwords through either an encrypted vault downloaded to a user’s computer or mobile device, or digitally through browser plugins or extensions. The passwords stored in this software are managed by the user, not by a corporate administrator. #### Software Related to Identity and Access Management (IAM) Software Related solutions that can be used together with IAM software include many types of [identity management software](https://www.g2.com/categories/identity-management): [Customer identity and access management (CIAM) software](https://www.g2.com/categories/customer-identity-and-access-management-ciam) **:** CIAM software is similar to IAM software, but used for customer identities instead of workforce identities like employees, contractors, and corporate devices.  [Privileged access management (PAM) software](https://www.g2.com/categories/privileged-access-management-pam) **:** PAM software helps companies protect the most critical IT resources by ensuring the credentials of their privileged accounts, such as admin accounts are only accessed by those with proper permissions to do so. When users access these privileged accounts, they must check in and check out and are often monitored during the time they are using the privileged account. PAM solutions are used in conjunction with IAM software, which provides authentication of general user identities; PAM software, however, provides more granular control and visibility of administrative or privileged user identities.  [User provisioning and governance tools](https://www.g2.com/categories/user-provisioning-and-governance-tools) **:** User provisioning and governance tools enable companies to manage user account identities throughout their lifecycle, including provisioning and deprovisioning. These solutions are often deployed on-premises, but many tools are offering cloud-based solutions, as well.  [Cloud directory services software](https://www.g2.com/categories/cloud-directory-services) **:** Similar to user provisioning and governance tools, cloud directory services software enables companies to manage user identities throughout their lifecycle, including provisioning and deprovisioning, in a cloud-deployed manner. Companies use these tools as they transition away from traditional on premises or locally operating identity management software to cloud services and SaaS applications.  ### Challenges with Identity and Access Management (IAM) Software Identity management solutions and IAM systems can come with their own set of challenges.  **Policy and group management:** Managing corporate access policies and group management is a company policy-related issue, not necessarily a technical one. It can get overwhelming for IAM administrators when companies have undefined or even conflicting policies as to which users have access to what resources. Administrators may be asked by leadership to provide users with much higher levels of access than their policy or group access control would normally allow, thus introducing risks into the environment. **Identity for cloud vs. on-premises applications:** Depending on the company’s technology stack, businesses may have a mix of both on-premises and cloud-based applications and resources. Companies must ensure that their IAM solution has connectors to the types of systems they need support for, especially for hybrid IT environments. **Insufficient MFA methods:** It is important that the MFA component of the identity program is strong to prevent unauthorized use which can lead to data breaches. Many IAM providers are moving away from less secure MFA methods, such as email one-time-passcodes to stronger authentication methods like risk-based authentication or contextual authentication. ### How to Buy Identity and Access Management (IAM) Software #### Requirements Gathering (RFI/RFP) for Identity and Access Management (IAM) Software When gathering and prioritizing the company's requirements, it is important to consider the following factors. **Ease for end users:** In order for IAM software to be effective, end users have to actually use it. The IAM solution must be easy to use by the end user and become part of their everyday routine.  **Authentication methods:** Are there limitations on the types of authentication factors that the company’s employees, contractors, and devices can use? For example, employees may be able to use authentication methods such as hardware tokens and biometrics, while temporary contractors might rely on in-app mobile pushes or OTPs sent via email, SMS, or phone. Additionally, if employees in a manufacturing facility or healthcare unit cannot carry a mobile phone with them, authentication factors requiring a mobile device may not be suitable. **Regional considerations** : Is the company global? Does the IAM solution need to support multiple languages, use cases, and adhere to local data protection regulations? Businesses must ensure the IAM provider can accommodate the company’s geographic and regional-based needs. **Integrations** : Companies should determine which integrations are important to them. The most critical integration would likely be the user directory solution, such as an HR system, if a directory is not provided by or being used within the IAM solution. **Timeline:** The company must decide how quickly they need to implement the solution. **Level of support** : Buyers should know if they require high-quality support or if they prefer implementing the solution in house. #### Compare Identity and Access Management (IAM) Software Products **Create a long list** There are many providers of IAM software. The best way to begin narrowing the search for products that would work well for the company would be to start by company segment size, such as small, medium, or enterprise-size businesses. By visiting the [Identity and Access Management (IAM) software](https://www.g2.com/categories/identity-and-access-management-iam) page on G2.com, buyers can filter solutions by market segment using the left-hand filter radio buttons. **Create a short list** After looking through IAM solutions for particular company size, buyers should ensure it meets the authentication and regional needs. If a specific language is a requirement, buyers can filter solutions by language by visiting the [Identity and Access Management (IAM) software](https://www.g2.com/categories/identity-and-access-management-iam) page on G2.com. For other requirements, such as how easy it is to use, the “[Easiest to use](https://www.g2.com/categories/identity-and-access-management-iam?tab=easiest_to_use)” section of the Identity and Access Management (IAM) software page on G2 helps compare options. Users can further narrow the selection by reading user reviews, checking the product’s ranking on the [G2 Grid® report for the Identity and Access Management (IAM)](https://www.g2.com/categories/identity-and-access-management-iam#grid)software category, and reading other related IAM-related [resources](https://www.g2.com/categories/identity-and-access-management-iam/resources). **Conduct demos** At each demo, buyers must be sure to ask the same questions and use case scenarios to best evaluate each product. Potential buyers can contact many vendors directly on g2.com to request demos by selecting the “Get a quote” button.  #### Selection of Identity and Access Management (IAM) Software **Choose a selection team** The selection team should include the day-to-day administrator of this product, who is likely an information security or related cybersecurity professional or an IT administrator professional. Companies may also consider having someone from HR join the selection committee to provide context regarding new hire onboarding and employee offboarding, as it relates to the user provisioning or deprovisioning aspect of IAM software. And lastly, it is important to include a typical day-to-day end user to ensure that the end user experience is easy to use and can be widely adopted by the workforce. **Negotiation** When negotiating the contract, buyers must consider pricing, implementation, and support. Typically longer length contracts and larger license counts can improve price discounting.  **Final decision** The final decision maker should likely be the day-to-day administrator of the solution, likely an information security professional or an IT administrator professional, with input from other stakeholders on the selection team. Prior to purchasing an IAM solution, buyers should check if they can get a trial period to test with a small number of users before going all in on the product. If the tool is well received by end users and administrators, businesses can feel more confident in their purchase. ### Which IAM platform is best for managing user roles? When choosing an IAM platform that's best for managing user roles, I would consider some of these popular IAM platforms: - [Salesforce Platform ](https://www.g2.com/products/salesforce-platform/reviews) - [Cisco Duo](https://www.g2.com/products/cisco-duo/reviews) - [OneLogin](https://www.g2.com/products/onelogin/reviews) These platforms are known for their robust features and efficient management of user roles. ### What is the best identity management tool with multi-factor authentication? If you're seeking identity management tools with multi-factor authentication, here are some top options to consider: - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews): excels with its risk-based conditional access that can dynamically require different authentication factors based on login patterns, device health, and location signals. - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews): provides a cloud-based directory platform that manages user identities, devices, and access across various systems. It supports multiple operating systems and offers features like SSO, MFA, and device management, catering well to hybrid and remote work environments. - [Okta](https://www.g2.com/products/okta/reviews): offers robust identity management features, including single sign-on (SSO) and multi-factor authentication (MFA). It’s highly scalable and integrates well with various applications