Soffid Identity Governance Administration

Soffid Identity Governance Administration (IGA) manages identity lifecycles and automates account creation, changes and deletion. It supports access policies, role-based access control, least privilege and segregation of duties, along with access requests, approval workflows, certification campaigns, recertification and audit trails. The product manages internal and external users as well as non-human identities such as applications, APIs and services. Soffid describes pre-built connectors for directories, cloud apps and HR systems, plus a framework for custom integrations. Examples in its JSON REST connector documentation include Jira, Office 365, AWS, Google Cloud and Oracle Field Service Cloud. IGA can run on a customer's own servers or as a cloud-based solution. Soffid states it holds ENS High and Common Criteria EAL2 + ALC CCL certifications for identity management, and names GDPR and SOX among the regulations its capabilities address. Pricing is on request. Binary components are free with registration, while source code downloads require no registration. Soffid says certification campaigns, exception reviews and role maintenance need ongoing governance ownership after go-live.

Soffid IGA combines identity lifecycle automation with access governance and integrations across directories, apps, and HR systems. Plan for continued governance work after deployment, and note that product pricing is on request.

Soffid IGA suits organizations that need to manage identities and govern access across employees, external users and non-human accounts. Soffid names government, banking and financial services, and healthcare among its target industries.

Soffid Identity Governance Administration (IGA) is built for organizations that need access decisions, identity changes, and audit evidence managed in one program. It suits regulated enterprises with mixed employee, contractor, application, and service identities, provided they will keep governance roles active after deployment. The central advantage is a single path from provisioning to approval and certification; the cost is the continuing work required to maintain roles, exceptions, and review campaigns.

Overview

Soffid IGA automates account creation, modification, and deletion while adding governance around who may receive access and why. It covers internal users, external users, and non-human identities such as applications, APIs, and services. Government, banking and financial-services organizations, and healthcare teams are among its stated target industries.

The product addresses GDPR and SOX-related identity-management needs and carries ENS High and Common Criteria EAL2 + ALC CCL certifications for identity management. Soffid was founded in 2013 and is headquartered in Spain. For broader category comparisons, see our Identity Governance Software list.

Key features

Lifecycle automation handles routine identity changes, making Soffid more suitable than a purely manual access-review process when joiners, movers, and leavers are frequent.

• Access governance: Access requests, approval workflows, IAM policies, role-based access control, and least-privilege controls give teams a defined route for granting permissions.
• Segregation of duties: SoD controls help identify or prevent conflicting combinations of access, a practical requirement for finance and other controlled environments.
• Certification and audit: Certification and recertification campaigns let reviewers confirm access periodically, while identity-action records provide an audit trail.
• Wide identity scope: Internal and external people can be governed alongside applications, APIs, and services, avoiding a people-only model.
• Connectors: Pre-built integrations cover directories such as AD and Azure AD/Entra, cloud applications, and HR systems. Examples in the JSON REST connector documentation include Jira, Office 365, AWS, Google Cloud, and Oracle Field Service Cloud; a custom-integration framework extends that reach.

Soffid explicitly expects certification campaigns, exception reviews, and role maintenance to remain ongoing ownership tasks after go-live. That makes the platform a poor fit for organizations seeking a set-and-forget deployment without governance staffing.

Pricing

Soffid uses custom pricing for the paid product, so organizations should budget for a vendor quote rather than a published per-seat rate. A free trial of its IDaaS converged IAM platform is available.

The Open-source binary components plan costs free. Binary downloads are free with registration, while source-code downloads require no registration. This is useful for evaluation, development, or teams that want the components without a license charge, but it is not a substitute for the fully governed implementation and support arrangement an enterprise deployment may require.

Platforms

Soffid supports API, Linux, self-hosted, web, and Windows environments. Deployment can run on the customer’s own servers or as a cloud-based solution. Its Enterprise Single Sign-On download description also identifies desktop access control for Linux and Windows. Existing customers are directed to Soffid Technical Support for assistance.

Who it's for

Choose Soffid when identity lifecycle automation must be tied to approvals, access reviews, segregation-of-duties checks, and auditable records across directories, applications, HR data, and service identities. Its deployment flexibility suits organizations with self-hosting requirements as well as those preferring cloud delivery. Regulated sectors named by Soffid are a natural audience because certification workflows and audit trails map directly to recurring control work.

Look elsewhere if your needs stop at basic single sign-on, a small fixed user population, or an access tool that does not require dedicated ownership for role maintenance and exception handling.

Pros and cons

• Pro: Lifecycle automation and governance workflows are combined, so account changes can be connected to approvals and later certification.
• Pro: Coverage includes people and non-human identities, which fits modern environments built from applications and services as well as employees.
• Pro: Directory, cloud-app, and HR connectors, plus a custom framework, support heterogeneous estates.
• Pro: Self-hosted and cloud deployment options accommodate differing infrastructure policies.
• Con: Custom pricing makes direct budget comparison difficult before contacting Soffid.
• Con: Certification campaigns, exception reviews, and role upkeep demand continuing governance ownership after launch.

Alternatives

SailPoint IdentityIQ is the alternative to consider for Android and iOS coverage alongside API, self-hosted, and web platforms; its term subscription is typically structured around three-year contracts with annual billing upfront.

RSA Authenticator (SecurID) fits buyers focused on an authenticator product across mobile, macOS, self-hosted, and Windows rather than Soffid’s broader governance scope.

Avatier Identity Anywhere is worth comparing when published entry prices for password management ($1.50 per month) and single sign-on ($2.00 per month) matter, with a minimum one-year commitment.

Corma suits smaller teams wanting a freemium browser-extension and SSO starting point, including a free tier for 10 apps.

Evolveum midPoint is the open-source choice with no license fee, while clustering and selected features require an active support subscription.

Oracle Cloud Infrastructure Secret Management is a focused secrets-management option rather than a full identity-governance platform.

Stitchflow offers a free starting plan for building and testing one workflow, with an ongoing plan priced at $1,000.00 per month.

Beta Systems Garancy Suite is another self-hosted and web governance suite with both one-time and subscription purchasing options.

Verdict

Recommend Soffid IGA to regulated or technically diverse organizations that need lifecycle automation tied to auditable approvals, certifications, and segregation-of-duties controls across human and service identities. Its main reason to choose it is the breadth of governance and integration in a deployable cloud or self-hosted package. Look elsewhere if you cannot commit staff to recurring certification, exception, and role-maintenance work or need transparent, published enterprise pricing.