Skip to main content
CMDashCybersecurity Maturity Dashboard
← All landscape areas
Identity & Access · Advanced

Identity Governance (IGA)

Manages access lifecycle, certification, and entitlements.

7 options listedTypical cost: $100k-$500k/yrGOVERN (GV) / PROTECT (PR)

IGA automates joiner/mover/leaver provisioning, access reviews, and segregation-of-duties enforcement. It provides the audit evidence regulators and SOX require. Enterprise deployments are project-heavy and priced per identity. Increasingly converging with IAM and cloud-entitlement (CIEM) tooling.

Access governance for larger, audited organizations.

  • SailPoint market leader with AI features
  • automates joiner/mover/leaver and access reviews
  • Entra ID Governance bundled
  • produces SOX/audit evidence.
  • Long, expensive implementations
  • connector and role-modeling effort
  • heavy ongoing maintenance
  • overkill for small orgs.

Evolveum midPoint is a credible self-hostable open-source IGA covering provisioning, role management and certification.

SailPointCommercial

IGA market leader; AI-driven access.

Visit site →
SaviyntCommercial

Cloud IGA + CIEM.

Visit site →
Microsoft Entra ID GovernanceCommercial

Cloud identity governance in the Entra suite.

Visit site →
OmadaCommercial

Governance-focused IGA.

Visit site →
midPointOpen source

Evolveum's open-source IGA: provisioning, RBAC, certification.

Visit site →
VezaCommercial

Identity/access-graph platform for IGA, ISPM, and non-human identity — now part of ServiceNow.

Visit site →
Apache SyncopeOpen source

Apache-governed open-source identity management/provisioning engine.

Visit site →
Identity Governance (IGA) — Cybersecurity Landscape Atlas — CMDash