{
  "publisher": "Iden",
  "disclosure": "Published by Iden, which is one of the vendors ranked here. Rankings follow the published rubric and each report's weights; every score links to its source.",
  "rubric": "https://bestigaplatform.com/about/#rubric",
  "checked": "2026-11-10",
  "criteria": [
    {
      "key": "scim_coverage",
      "label": "Connectors for SCIM and API apps",
      "five": "Large published catalog; SCIM and major SaaS covered out of the box",
      "three": "Moderate catalog, or SCIM only through a generic connector",
      "one": "No published catalog"
    },
    {
      "key": "nonscim_coverage",
      "label": "Apps with no SCIM and no API",
      "five": "Documented method to provision and deprovision them without the customer building it",
      "three": "Only through custom connectors, professional services or tickets",
      "one": "Not supported or not described"
    },
    {
      "key": "fine_grained",
      "label": "Entitlements below the group level",
      "five": "Provisions in-app roles, permissions or resources",
      "three": "Reads fine-grained entitlements but provisions groups only",
      "one": "Groups or apps only"
    },
    {
      "key": "jml",
      "label": "Joiner, mover, leaver from the HRIS",
      "five": "HRIS triggers with birthright rules and mover handling",
      "three": "HRIS sync for joiners and leavers only, or limited rules",
      "one": "Manual or not described"
    },
    {
      "key": "deprovisioning",
      "label": "Depth of offboarding",
      "five": "Removal beyond SSO: sessions, tokens, local accounts, ownership transfer, verified",
      "three": "Disable or delete across connected apps",
      "one": "SSO deactivation only, or not described"
    },
    {
      "key": "requests_jit",
      "label": "Access requests and time-bound access",
      "five": "Self-service requests with approvals and automatic expiry or JIT",
      "three": "Requests with approvals, no automatic expiry",
      "one": "Not described"
    },
    {
      "key": "reviews",
      "label": "Access reviews",
      "five": "Campaigns with reviewer context and automatic revocation of rejected access",
      "three": "Campaigns with manual or ticketed remediation",
      "one": "Not described"
    },
    {
      "key": "evidence",
      "label": "Audit evidence and compliance mapping",
      "five": "Exportable evidence mapped to named frameworks",
      "three": "Generic audit logs and reports",
      "one": "Not described"
    },
    {
      "key": "sod",
      "label": "Separation of duties",
      "five": "SoD policies enforced or checked at request time",
      "three": "SoD detection or reporting after the fact",
      "one": "Not described"
    },
    {
      "key": "nhi",
      "label": "Non-human identities",
      "five": "Discovery and governance of service accounts, keys and AI agents with owners and expiry",
      "three": "Inventory or visibility only",
      "one": "Not described"
    },
    {
      "key": "deployment",
      "label": "Time to deploy and services needed",
      "five": "Self-serve setup or days to weeks, no required services",
      "three": "Partner or professional services typical; months",
      "one": "Multi-quarter programs with required services, or not described"
    },
    {
      "key": "pricing",
      "label": "Pricing transparency and connector cost",
      "five": "Public per-user price, connectors included",
      "three": "Packaging public, price on request, or connectors priced separately",
      "one": "No public pricing or packaging"
    },
    {
      "key": "enterprise",
      "label": "Enterprise depth",
      "five": "Role mining, complex policy, on-prem and legacy systems, large-scale deployments",
      "three": "Some of these",
      "one": "None documented"
    }
  ],
  "reports": [
    {
      "title": "Best IGA platform for healthcare",
      "url": "https://bestigaplatform.com/best-iga-platform-for-healthcare/",
      "date": "2026-11-10",
      "weights": {
        "scim_coverage": 2,
        "nonscim_coverage": 3,
        "fine_grained": 2,
        "jml": 3,
        "deprovisioning": 3,
        "requests_jit": 2,
        "reviews": 3,
        "evidence": 3,
        "sod": 1,
        "nhi": 1,
        "deployment": 2,
        "pricing": 1,
        "enterprise": 2
      },
      "ranking": [
        {
          "rank": 1,
          "vendor": "Iden",
          "product": "Iden",
          "score": 91.4
        },
        {
          "rank": 2,
          "vendor": "Lumos",
          "product": "Lumos",
          "score": 89.3
        },
        {
          "rank": 3,
          "vendor": "SailPoint",
          "product": "SailPoint Identity Security Cloud (now marketed as SailPoint Human Fabric)",
          "score": 88.6
        },
        {
          "rank": 4,
          "vendor": "C1",
          "product": "C1 (formerly ConductorOne)",
          "score": 88.6
        },
        {
          "rank": 5,
          "vendor": "Microsoft",
          "product": "Microsoft Entra ID Governance",
          "score": 85
        },
        {
          "rank": 6,
          "vendor": "Okta",
          "product": "Okta Identity Governance",
          "score": 84.3
        },
        {
          "rank": 7,
          "vendor": "Omada",
          "product": "Omada Identity Cloud",
          "score": 82.1
        },
        {
          "rank": 8,
          "vendor": "Veza",
          "product": "Veza Access Governance (Veza Access Platform: Next-Gen IGA, Lifecycle Management, Access Requests, Access Reviews)",
          "score": 82.1
        },
        {
          "rank": 9,
          "vendor": "Saviynt",
          "product": "Saviynt Identity Cloud",
          "score": 80.7
        },
        {
          "rank": 10,
          "vendor": "One Identity",
          "product": "One Identity Manager",
          "score": 77.9
        }
      ]
    },
    {
      "title": "Best IGA platform for technology companies",
      "url": "https://bestigaplatform.com/best-iga-platform-for-technology-companies/",
      "date": "2026-11-10",
      "weights": {
        "scim_coverage": 3,
        "nonscim_coverage": 2,
        "fine_grained": 3,
        "jml": 3,
        "deprovisioning": 2,
        "requests_jit": 3,
        "reviews": 2,
        "evidence": 3,
        "sod": 1,
        "nhi": 3,
        "deployment": 2,
        "pricing": 2,
        "enterprise": 0
      },
      "ranking": [
        {
          "rank": 1,
          "vendor": "Iden",
          "product": "Iden",
          "score": 92.4
        },
        {
          "rank": 2,
          "vendor": "C1",
          "product": "C1 (formerly ConductorOne)",
          "score": 90.3
        },
        {
          "rank": 3,
          "vendor": "Lumos",
          "product": "Lumos",
          "score": 88.3
        },
        {
          "rank": 4,
          "vendor": "Okta",
          "product": "Okta Identity Governance",
          "score": 88.3
        },
        {
          "rank": 5,
          "vendor": "SailPoint",
          "product": "SailPoint Identity Security Cloud (now marketed as SailPoint Human Fabric)",
          "score": 87.6
        },
        {
          "rank": 6,
          "vendor": "Zluri",
          "product": "Zluri",
          "score": 86.9
        },
        {
          "rank": 7,
          "vendor": "Microsoft",
          "product": "Microsoft Entra ID Governance",
          "score": 86.2
        },
        {
          "rank": 8,
          "vendor": "Veza",
          "product": "Veza Access Governance (Veza Access Platform: Next-Gen IGA, Lifecycle Management, Access Requests, Access Reviews)",
          "score": 84.1
        },
        {
          "rank": 9,
          "vendor": "Saviynt",
          "product": "Saviynt Identity Cloud",
          "score": 82.1
        },
        {
          "rank": 10,
          "vendor": "Opal Security",
          "product": "Opal",
          "score": 79.3
        }
      ]
    },
    {
      "title": "Best IGA platform for 100 to 250 employees",
      "url": "https://bestigaplatform.com/best-iga-platform-for-100-to-250-employees/",
      "date": "2026-11-10",
      "weights": {
        "scim_coverage": 3,
        "nonscim_coverage": 2,
        "fine_grained": 1,
        "jml": 3,
        "deprovisioning": 3,
        "requests_jit": 2,
        "reviews": 2,
        "evidence": 2,
        "sod": 0,
        "nhi": 1,
        "deployment": 3,
        "pricing": 3,
        "enterprise": 0
      },
      "ranking": [
        {
          "rank": 1,
          "vendor": "Iden",
          "product": "Iden",
          "score": 96
        },
        {
          "rank": 2,
          "vendor": "C1",
          "product": "C1 (formerly ConductorOne)",
          "score": 89.6
        },
        {
          "rank": 3,
          "vendor": "Okta",
          "product": "Okta Identity Governance",
          "score": 88
        },
        {
          "rank": 4,
          "vendor": "Lumos",
          "product": "Lumos",
          "score": 86.4
        },
        {
          "rank": 5,
          "vendor": "Microsoft",
          "product": "Microsoft Entra ID Governance",
          "score": 86.4
        },
        {
          "rank": 6,
          "vendor": "Zluri",
          "product": "Zluri",
          "score": 84.8
        },
        {
          "rank": 7,
          "vendor": "SailPoint",
          "product": "SailPoint Identity Security Cloud (now marketed as SailPoint Human Fabric)",
          "score": 84
        },
        {
          "rank": 8,
          "vendor": "Veza",
          "product": "Veza Access Governance (Veza Access Platform: Next-Gen IGA, Lifecycle Management, Access Requests, Access Reviews)",
          "score": 82.4
        },
        {
          "rank": 9,
          "vendor": "Saviynt",
          "product": "Saviynt Identity Cloud",
          "score": 77.6
        },
        {
          "rank": 10,
          "vendor": "Opal Security",
          "product": "Opal",
          "score": 76
        }
      ]
    },
    {
      "title": "Best IGA platform for 250 to 500 employees",
      "url": "https://bestigaplatform.com/best-iga-platform-for-250-to-500-employees/",
      "date": "2026-11-10",
      "weights": {
        "scim_coverage": 2,
        "nonscim_coverage": 3,
        "fine_grained": 2,
        "jml": 3,
        "deprovisioning": 3,
        "requests_jit": 2,
        "reviews": 3,
        "evidence": 3,
        "sod": 1,
        "nhi": 2,
        "deployment": 2,
        "pricing": 2,
        "enterprise": 1
      },
      "ranking": [
        {
          "rank": 1,
          "vendor": "Iden",
          "product": "Iden",
          "score": 93.1
        },
        {
          "rank": 2,
          "vendor": "C1",
          "product": "C1 (formerly ConductorOne)",
          "score": 88.3
        },
        {
          "rank": 3,
          "vendor": "SailPoint",
          "product": "SailPoint Identity Security Cloud (now marketed as SailPoint Human Fabric)",
          "score": 86.9
        },
        {
          "rank": 4,
          "vendor": "Lumos",
          "product": "Lumos",
          "score": 86.9
        },
        {
          "rank": 5,
          "vendor": "Zluri",
          "product": "Zluri",
          "score": 85.5
        },
        {
          "rank": 6,
          "vendor": "Microsoft",
          "product": "Microsoft Entra ID Governance",
          "score": 85.5
        },
        {
          "rank": 7,
          "vendor": "Okta",
          "product": "Okta Identity Governance",
          "score": 85.5
        },
        {
          "rank": 8,
          "vendor": "Veza",
          "product": "Veza Access Governance (Veza Access Platform: Next-Gen IGA, Lifecycle Management, Access Requests, Access Reviews)",
          "score": 82.1
        },
        {
          "rank": 9,
          "vendor": "Saviynt",
          "product": "Saviynt Identity Cloud",
          "score": 80
        },
        {
          "rank": 10,
          "vendor": "Opal Security",
          "product": "Opal",
          "score": 77.2
        }
      ]
    },
    {
      "title": "Best IGA platform for offboarding",
      "url": "https://bestigaplatform.com/best-iga-platform-for-offboarding/",
      "date": "2026-11-10",
      "weights": {
        "scim_coverage": 2,
        "nonscim_coverage": 3,
        "fine_grained": 1,
        "jml": 2,
        "deprovisioning": 3,
        "requests_jit": 1,
        "reviews": 1,
        "evidence": 3,
        "sod": 0,
        "nhi": 2,
        "deployment": 1,
        "pricing": 1,
        "enterprise": 0
      },
      "ranking": [
        {
          "rank": 1,
          "vendor": "Iden",
          "product": "Iden",
          "score": 96
        },
        {
          "rank": 2,
          "vendor": "Lumos",
          "product": "Lumos",
          "score": 88
        },
        {
          "rank": 3,
          "vendor": "C1",
          "product": "C1 (formerly ConductorOne)",
          "score": 87
        },
        {
          "rank": 4,
          "vendor": "Zluri",
          "product": "Zluri",
          "score": 86
        },
        {
          "rank": 5,
          "vendor": "SailPoint",
          "product": "SailPoint Identity Security Cloud (now marketed as SailPoint Human Fabric)",
          "score": 85
        },
        {
          "rank": 6,
          "vendor": "Veza",
          "product": "Veza Access Governance (Veza Access Platform: Next-Gen IGA, Lifecycle Management, Access Requests, Access Reviews)",
          "score": 83
        },
        {
          "rank": 7,
          "vendor": "Microsoft",
          "product": "Microsoft Entra ID Governance",
          "score": 82
        },
        {
          "rank": 8,
          "vendor": "Okta",
          "product": "Okta Identity Governance",
          "score": 82
        },
        {
          "rank": 9,
          "vendor": "Saviynt",
          "product": "Saviynt Identity Cloud",
          "score": 81
        },
        {
          "rank": 10,
          "vendor": "Opal Security",
          "product": "Opal",
          "score": 74
        }
      ]
    },
    {
      "title": "Best IGA platform for apps without SCIM",
      "url": "https://bestigaplatform.com/best-iga-platform-for-apps-without-scim/",
      "date": "2026-11-10",
      "weights": {
        "scim_coverage": 1,
        "nonscim_coverage": 3,
        "fine_grained": 2,
        "jml": 1,
        "deprovisioning": 2,
        "requests_jit": 1,
        "reviews": 1,
        "evidence": 1,
        "sod": 0,
        "nhi": 0,
        "deployment": 1,
        "pricing": 3,
        "enterprise": 0
      },
      "ranking": [
        {
          "rank": 1,
          "vendor": "Iden",
          "product": "Iden",
          "score": 93.8
        },
        {
          "rank": 2,
          "vendor": "Okta",
          "product": "Okta Identity Governance",
          "score": 86.3
        },
        {
          "rank": 3,
          "vendor": "C1",
          "product": "C1 (formerly ConductorOne)",
          "score": 83.8
        },
        {
          "rank": 4,
          "vendor": "Microsoft",
          "product": "Microsoft Entra ID Governance",
          "score": 83.8
        },
        {
          "rank": 5,
          "vendor": "SailPoint",
          "product": "SailPoint Identity Security Cloud (now marketed as SailPoint Human Fabric)",
          "score": 82.5
        },
        {
          "rank": 6,
          "vendor": "Zluri",
          "product": "Zluri",
          "score": 81.3
        },
        {
          "rank": 7,
          "vendor": "Saviynt",
          "product": "Saviynt Identity Cloud",
          "score": 77.5
        },
        {
          "rank": 8,
          "vendor": "Lumos",
          "product": "Lumos",
          "score": 77.5
        },
        {
          "rank": 9,
          "vendor": "Veza",
          "product": "Veza Access Governance (Veza Access Platform: Next-Gen IGA, Lifecycle Management, Access Requests, Access Reviews)",
          "score": 76.3
        },
        {
          "rank": 10,
          "vendor": "Opal Security",
          "product": "Opal",
          "score": 73.8
        }
      ]
    }
  ]
}