MidPoint suits organizations seeking identity provisioning, role-based access requests, and access reviews.
- Home
- Security & Privacy
- Identity Governance and Administration Software
Best Identity Governance and Administration Software 2026
Facts read 19 Sep 2026 – 21 Oct 2026
Identity governance and administration tools oversee user access, the resources available to them and permission changes over time. They can include access reviews, provisioning, approval workflows and separation-of-duties controls.
The standings: top 10
| Name | In a line | Record score | Price from | Try it free | Runs on | Facts read |
|---|---|---|---|---|---|---|
| 01 Evolveum midPoint | MidPoint suits organizations seeking identity provisioning, role-based access requests, and access reviews. | 5.6 | Free plan | Free plan | Web, Windows, Mac, Linux | 15 Oct 2026 |
| 02 Microsoft Defender for Business | 5.6 | — | Free trial | Android, iPhone & iPad, Windows, Mac | 9 Oct 2026 | |
| 03 Soffid Identity Governance Administration | Soffid IGA suits organizations that need to manage identities and govern access across employees, external users and non-human accounts. | 5.1 | Free plan | Free plan | Web, Windows, Linux, API | 3 Oct 2026 |
| 04 Apache Syncope | 4.7 | Free plan | Free plan | Web, Linux, API, Self-hosted | 11 Oct 2026 | |
| 05 IBM Verify | 4.7 | $15,899.29 a year | Free trial | Android, iPhone & iPad, Web, API | 12 Oct 2026 | |
| 06 SAP Extended Enterprise Content Management by OpenText | 4.7 | — | — | Android, iPhone & iPad, Web, Windows | 11 Oct 2026 | |
| 07 Oracle Cloud Infrastructure Secret Management | This service suits application and cloud teams that need centrally managed credentials, rotation, access controls, and auditing. | 4.5 | Free plan | Free plan | Web, API | 14 Oct 2026 |
| 08 Symantec IT Management Suite | It is aimed at IT teams managing endpoint and server deployment, patching, assets, and policies across complex environments. | 4.2 | — | — | Web, Windows, Mac, Linux | 21 Oct 2026 |
| 09 SailPoint IdentityIQ | IdentityIQ is intended for complex enterprises managing identity access, provisioning, and compliance. | 4.0 | — | — | Android, iPhone & iPad, Web, API | 30 Sep 2026 |
| 10 SailPoint Identity Security Cloud | Foundations is aimed at smaller organizations beginning identity security, while Standard is described for smaller organizations consolidating identity processes. | 3.7 | — | — | Web, API | 9 Oct 2026 |
Maker information on the list lets you compare free-plan availability, paid pricing notes, deployment methods and supported platforms. Because listings may be updated, use the published fields as the comparison record.
Microsoft Defender for Business
AndroidiPhone & iPadWindows+2Soffid Identity Governance Administration
Soffid IGA suits organizations that need to manage identities and govern access across employees, external users and non-human accounts.
WebWindowsLinux+2Apache Syncope
WebLinuxAPI+1IBM Verify
AndroidiPhone & iPadWeb+1This service suits application and cloud teams that need centrally managed credentials, rotation, access controls, and auditing.
It is aimed at IT teams managing endpoint and server deployment, patching, assets, and policies across complex environments.
IdentityIQ is intended for complex enterprises managing identity access, provisioning, and compliance.
Foundations is aimed at smaller organizations beginning identity security, while Standard is described for smaller organizations consolidating identity processes.
It suits complex organizations managing identity governance across hybrid environments, including manufacturing, financial services, healthcare and public-sector…
It suits regulated Indian enterprises in banking, government, NBFC/fintech, insurance, healthcare, IT/ITeS and manufacturing.
EIC is aimed at large enterprises and organizations with complex, diverse, or highly regulated identity environments.
C1 suits IT, security, IAM engineering, risk and compliance, and AI strategy teams.
Before you choose
Check the pricing path
A free plan can reduce the cost of an initial rollout. Apache Syncope offers open-source software and a free plan; Evolveum midPoint also shows a free plan.
Paid products on the list can show pricing on request. Check whether a product offers a free trial before committing to a paid deployment.
Match deployment to your environment
Across the listings, deployment and platform entries include web, API, self-hosted, Windows, Linux and iOS. A web option can suit browser-based administration, while self-hosted deployment keeps the software in your environment.
Check the platform field against the systems and devices your administrators need to use.
Compare governance controls
Listings identify capabilities such as access reviews, automated provisioning, access request workflows and segregation of duties. Together, these fields show how each product supports review, approval and conflicting-permission controls.
Lifecycle automation is also listed. Look for the control areas that match your joiner, mover and leaver processes.
Review code and licence needs
Some listed products provide open-source code. If you need to read or change the code, check the licence and the deployment requirements before choosing a tool.
Read the maker's pricing note
Paid from is a comparison field, but a product may list pricing as available on request. Use the maker's pricing note to identify what is published and what requires a quote.