Identity & Access Management Software

IAM platform for accountants handling legacy desktop apps and Government Gateway with client-side encryption.

Editor's takeMy1Login targets a specific accounting pain point: securing Government Gateway and legacy Windows desktop apps that cloud-only SSO tools often miss. Its client-side encryption keeps decryption keys inside the customer's own network, so even My1Login cannot access the data. The desktop Zero UI experience runs quietly in the background, but the mobile app carries a 1.0-star rating with reports of crashing immediately on open.

Identity and device management platform that ties access automatically to HR employee data.

Editor's takeRippling ties access permissions directly to HR data, so provisioning updates instantly when a role changes. It connects to over 600 apps and holds SOC 2 Type II, ISO 27001, and ISO 42001 certifications. Identity Management is not sold standalone, so buyers must first subscribe to the core Rippling Unity platform.

Unified PKI and FIDO2 credential platform with FedRAMP ATO for phishing-resistant authentication.

Editor's takeAxiad unifies PKI and FIDO2 credential management, covering hardware tokens and software certificates in one console. It holds FedRAMP Authority to Operate and SOC 2 Type 2 certification. Reviewers say licensing costs become exorbitant once deployments pass 100,000 users.

An Okta-owned identity platform adding Token Vault and Fine-Grained Authorization to secure AI agents.

Editor's takeAuth0's free tier, up to 25,000 monthly active users, is genuinely generous for B2C apps, and its new Token Vault and Fine-Grained Authorization features specifically target the security gaps in AI agent workflows accessing third-party APIs and RAG data. Backed by Okta's infrastructure, it processes over 10 billion authentications monthly. The well-documented tradeoff is a 'growth penalty': costs jump disproportionately once a business needs B2B features like Enterprise SSO or exceeds its MAU limit, and developers report documentation quality has slipped since the Okta merger.

Managed IAM suite with a 'concierge' service model, transparent per-user pricing, and 11,000+ pre-integrated apps.

Editor's takeOptimal IdM's concierge model has the vendor manage configurations and integrations directly, unusual in a self-service market. Pricing is published down to the dollar, starting at $2 per user monthly with MFA included in every tier. A $250 monthly minimum applies though, and some users report the platform leans heavily toward Windows compatibility.

An identity platform for large real estate brokerages replacing passwords with biometric passkeys and MLS SSO.

Editor's takeNautilent replaces the typical patchwork of MLS, franchise and brokerage logins with a 'one record per human' architecture, letting agents sign in with a fingerprint or face scan instead of 30-plus passwords. Removing an agent from Nautilent immediately revokes access across every connected tool, closing a real offboarding security gap, and the company claims this cuts related admin work by 75%. It connects to more than 130 tools and offers direct MLS SSO through its sister company Solid Earth, but it's built exclusively for Top 500 brokerages with fully negotiated pricing.

All-in-one, HIPAA-compliant client portal with unlimited staff and clients for a flat monthly fee.

Editor's takeSuiteDash bundles CRM, billing, project management, and a client portal for one flat fee, with unlimited staff, clients, and portals starting at $19 a month. White labeling goes deep enough to hide the SuiteDash brand entirely, down to a branded mobile web app. The tradeoff is a steep learning curve and no native IDX or MLS listing feed.

Passwordless IAM platform with RFID tap-and-go login and a bridge for legacy applications.

Editor's takeAuthX Bridge injects credentials into legacy apps that lack modern SSO protocols. That is rare in a market built mostly for cloud-native software. G2 reviewers say the admin learning curve is steep at first.

German IAM suite specializing in IBM mainframe (z/OS) integration with a backdoor-free security guarantee.

Editor's takeBeta Systems is one of only two vendors, alongside IBM, offering dedicated RACF management for IBM mainframes. Its 'Made in Germany' guarantee of backdoor-free code and TISAX, ISO 27001 certification suit strict European compliance needs.

Enterprise identity governance platform with deep SAP integration and a unified Identity Fabric approach.

Editor's takeOne Identity Manager unifies identity governance, privileged access, and Active Directory management across hybrid environments. It holds Gartner Visionary and KuppingerCole Leader status, backed by certified SAP S/4HANA integration. G2 and Gartner reviewers consistently flag a steep learning curve and an interface some call old fashioned.

Enterprise identity and access management platform with FedRAMP authorization, FIDO2 support, and hybrid legacy integration.

Editor's takeIts FedRAMP authorization and FIDO2 support suit enterprises with heavy legacy systems. The dated interface and post-Broadcom support complaints are the main tradeoffs.

A cloud-native privileged access management platform combining AI authorization with faster deployment.

Editor's takeDelinea has been named a Gartner Magic Quadrant PAM Leader six years running, backed by Iris AI. Users consistently rate its interface easier than legacy PAM tools like CyberArk, and deployment runs weeks instead of months. The gaps show in support, with Reddit threads describing tickets unresolved for weeks and surprise EC2 charges.

An enterprise identity governance platform specializing in non-employee risk management and compliance.

Editor's takeSailPoint's Non-Employee Risk Management module extends governance to contractors and independent agents, a gap most IAM tools leave open. It automated 20 million access control actions in 2022 alone, the scale behind its Gartner Magic Quadrant Leader status. That scale carries a price, with AWS Marketplace data pricing 2,500 identities near $825,000 over 36 months.

Instant identity and criminal history verification for real estate agents using only a caller's phone number.

Editor's takeFOREWARN solves a specific safety problem: verifying who is on the other end of a showing request before an agent meets a stranger alone. Coverage of roughly 98% of U.S. adults with just a phone number is genuinely broad. It's explicitly not FCRA compliant, so it cannot substitute for a real tenant screening report, and individual subscribers should read the 12-month contract terms before signing up.

Real estate CRM with 24/7 live support and direct MLS integration at a flat $49/month.

Editor's takeWise Agent competes on service rather than polish, offering 24/7 live phone and email support plus a free one-on-one onboarding call, a combination reviewers call rare at this price point. It backs that with a flat $49 monthly rate covering up to four team members, direct MLS and DocuSign integrations, and unlimited document storage, earning Forbes Advisor's Best Real Estate CRM award three years running. The interface is the clear weak point: reviewers consistently call it dated and clunky, and there is no native mobile app, just a mobile-responsive web version.

Hybrid identity management suite for Microsoft environments, priced far below competitors like Okta.

Editor's takeManageEngine Identity360 bundles Universal Directory, SSO, MFA and orchestration into one hybrid IAM suite built for Microsoft-heavy environments, priced as low as $195 a year for 100 users, a fraction of what competitors like Okta charge. It holds SOC 2 Type II and ISO 27001 certification and connects to more than 100 prebuilt apps. A high-severity authentication vulnerability, CVE-2025-1724, surfaced in on-premise installations, and users describe the UI as inconsistent across modules.

Enterprise identity governance, access management, and privileged access platform for complex hybrid IT environments.

Editor's takeOpenText IAM, built on the NetIQ legacy, positions itself as a bridge between decades-old on-premise systems and modern cloud identity requirements, a role KuppingerCole has recognized with repeated Leader status. Entire countries reportedly run tax portal access through this infrastructure. The cost of that depth shows up in daily use: reviewers consistently describe installation and the interface as difficult, requiring real technical investment to operate.

Managed identity and access management integrator combining Microsoft, Okta, and SailPoint partnerships.

Editor's takeCDW wraps top-tier IAM technology from SailPoint, Okta, and Microsoft into a managed service that covers governance, access management, and privileged access in one engagement. Fifteen-plus years of IAM focus and $26.1 billion in 2024 revenue back its market position. The tradeoff shows up in cost and service consistency: users report paying about 30 percent more than direct competitors, and smaller accounts describe frequent account representative turnover.

Unified IAM, PAM and IGA platform built for insurance carriers running legacy mainframes alongside modern cloud apps.

Editor's takeBravura targets insurers running a mix of modern cloud apps and decades-old mainframe systems, a gap few competitors cover. A BlueCross BlueShield North Carolina case study reports an 80% drop in password support calls after deployment. Analyst reviews single out the interface as dated, so buyers should expect a learning curve during rollout.

Identity verification platform for insurers, fusing physical records with digital device intelligence.

Editor's takeLexisNexis combines a 100 billion-transaction digital repository with physical public records, and its InstantID product matches identities with 99.99% precision. That scale comes with real legal exposure: class action lawsuits allege the company failed to ensure accurate consumer reports under the FCRA. Contracts also report automatic annual price increases around 6%, so renewal terms need close review.

Identity and access management built into the Fortinet Security Fabric, supporting SAML, OIDC, RADIUS and FIDO2.

Editor's takeFortinet's IAM stack covers everything from legacy RADIUS to modern FIDO2 passwordless login, then folds into the Fortinet Security Fabric for zero-trust enforcement across FortiGate firewalls. That depth comes at a usability cost. G2 reviewers rate it 4.8 out of 5 overall but call the device complicated to configure, with documentation that skips some advanced scenarios.

Federal single sign-on and identity verification platform, now NIST IAL2 certified.

Editor's takeLogin.gov undercuts commercial identity vendors on pure cost, at 10 cents per monthly active user, and now carries an independently verified NIST IAL2 certification after achieving it in October 2024. That certification followed a rocky period. A 2023 Inspector General report found GSA had misled agencies about compliance status, and account creation failure rates have run 30 to 40% at some agencies.

Enterprise property management platform with AI revenue pricing, used to manage over 24 million rental units.

Editor's takeRealPage's OneSite platform is unusually complete, running leasing, accounting, maintenance, and AI-driven pricing from one system across more than 24 million rental units. That same pricing engine, formerly branded YieldStar, is now central to a DOJ antitrust lawsuit alleging it helps landlords coordinate rent increases. RealPage settled with the DOJ, agreeing to limit data collection without admitting wrongdoing.