How this IAM tools guide works

Which IAM tools do you need, by job? Buyers rarely need one product. They need a set of tools that together cover directory and sign-in, lifecycle and governance, the applications those tools do not reach, privileged access and threat detection. This site shows which vendors describe which of those jobs, so you can see gaps and overlaps in a stack before you talk to sales.

• DocumentedDocumented: the vendor's own pages describe this job.
• PartialPartial: the pages describe part of the job, or describe it with a stated limit.
• Not in our sourcesNot in our sources: we found no description on the pages we read. This does not prove the product lacks it.

A status describes the vendor's own public pages on the read date shown. It is not a measure of quality, depth or how well the product works. A vendor marked Partial may do the job well; its pages describe only part of it, or describe it with a limit we state.

The vendors on this site do different jobs. An identity provider, a governance platform and a threat detection product do not compete for the same budget line, so a single score would rank things that should be combined. We give you the facts per job and the stack builder, which applies plain rules you can read, and leave the weighting to you.

Alphabetically by name in every list, table and menu. The stack builder groups vendors by status for each job (Documented first, then Partial) and alphabetically within each group, and marks vendors whose own pages name your identity provider. No vendor is pinned to the top.

Vendors whose public pages describe at least one of the five jobs for workforce identity, and for whom we had dated source pages. We read 16 vendors' pages for this edition. Vendors mentioned but not profiled, and why, are listed below.

• Idira Identity Governance (Palo Alto Networks)

  Palo Alto Networks says Idira Identity Governance uses robotic process automation to help connect to applications that lack APIs. zillasecurity.com redirects to this page. Palo Alto Networks introduced Idira on 12 May 2026 as its identity platform and the upgrade path for CyberArk customers; see the CyberArk profile. We have only this one page on Idira Identity Governance, so it is not profiled separately.

  Source: Palo Alto Networks: Idira Identity Governance · Read 27 Sep 2026 · Source: Palo Alto Networks press release: Idira introduced · Read 11 Oct 2026

• Astrix Security

  Astrix says it is now part of Cisco and ended standalone sales of new licenses on 30 June 2026, so it is not profiled as something a new buyer can purchase.

  Source: Astrix Security homepage · Read 29 Sep 2026

• Oasis Security

  Oasis describes a non-human identity security cloud and says it has been acquired by Cyera. Our sources do not give a date or product changes, so it is not profiled this edition.

  Source: Oasis Security homepage · Read 29 Sep 2026

• Only pages we read: vendor product, pricing and documentation pages, vendor press releases and blogs, and standards bodies (NIST, OpenID Foundation, OWASP, IETF, EUR-Lex, PCAOB).
• Every fact on a profile carries its source link and read date. Pages were read on 27 or 29 September 2026, with updates read on 11 October 2026; we do not re-date a fact when we re-use it.
• Vendor performance and business figures (onboarding speed, revenue) are quoted as the vendor's claim, with its name and link, and never presented as our finding.
• Where a fact is not on the pages reviewed, we write Not published or Not covered in our sources and do not guess.
• No ratings from review sites, no customer counts, no quotes we did not read.

Public sources only. No hands-on testing, no vendor interviews, no access to private documentation or pricing. Some vendors are covered by one or two pages, which we say on their profiles. Facts can change after the read date shown next to each source.

Send a correction through the contact page with the topic Correction and a link to the vendor's page. We check it against that page and update the data; counts on every page recompute automatically.