CMDashCybersecurity Maturity Dashboard

← All landscape areas

Identity & Access · Foundational

IAM / SSO / MFA

Authenticates users and federates application access.

9 options listedTypical cost: $24-$180/user/yrPROTECT (PR)

Overview

IAM platforms provide single sign-on, multifactor and passwordless authentication, and adaptive access across workforce and customer apps. Identity is the de facto control plane for zero trust. Licensed per user per month with tiers for advanced policy. Open-source identity providers cover self-hosted needs.

Identity is the top control plane; MFA blocks most account takeover.

Advantages

Okta best-of-breed and neutral
Entra ID powerful and bundled if all-Microsoft
Duo simple MFA
Keycloak free
highest-leverage control.

Trade-offs

Okta premium and past-breach scrutiny
Entra ID deepens Microsoft lock-in
MFA fatigue and phishable factors
OSS self-host burden.

Vendors & tools in this area

OktaCommercial

Independent identity leader; SSO/MFA/lifecycle.

Microsoft Entra IDCommercial

Cloud IAM/SSO/MFA; powerful but Microsoft-centric.

Ping IdentityCommercial

Enterprise IAM/CIAM; flexible federation.

Cisco DuoCommercial

Simple, strong MFA and device trust.

ForgeRockCommercial

Enterprise IAM (now part of Ping).

KeycloakOpen source

Open-source IAM/SSO (Red Hat).

AuthentikOpen source

Open-source identity provider.

ZitadelOpen source

Open-source identity platform.

JumpCloudCommercial

Unified cloud directory + SSO + MDM aimed at SMB/mid-market.

Start free trial Browse the full atlas

IAM / SSO / MFA — Cybersecurity Landscape Atlas — CMDash