Compare IAM tools side by side

Entra ID Free includes MFA and SSO; the app gallery lists thousands of applications; Conditional Access comes with P1; phishing-resistant methods include passkeys and FIDO2 security keys.

Universal Directory, SSO and MFA from the Starter suite; 8,000+ pre-built integrations in the Okta Integration Network; FastPass passwordless; Adaptive MFA.

Entra ID Governance: lifecycle workflows before start, on status change and at leave, access reviews, entitlement management, and HR-driven provisioning from Workday and SAP SuccessFactors.

Lifecycle Management with HR sources (Workday, BambooHR, SuccessFactors) and SCIM; Okta Identity Governance adds access requests, certifications and entitlement management and requires Okta Workforce Identity.

Joiner, mover and leaver automation; Manager, Source Owner and Search certification campaigns; AI-driven certifications; automatic audit evidence collection and audit-ready reports.

Account discovery shows app users who do not match an Entra ID user. For apps without provisioning, the documented path is a CSV export, matching, an access review and an optional ServiceNow ticket.

Governance of apps outside Okta's integrations is not described on the pages reviewed.

The Application Management add-on gives app owners a self-registration portal and integration templates, and the SailPoint Discovery Tool uncovers unmanaged applications, identifies ownership and exposes shadow AI activity. Discovery of accounts inside those apps is not detailed.

Privileged Identity Management (PIM) needs Microsoft Entra ID Governance or Entra ID P2 licences, per Microsoft's licensing page; feature detail is not in our sources.

Privileged Access is listed in the Essentials suite on the pricing page; feature detail is not in our sources.

SailPoint completed its acquisition of Entro Security, which secures non-human identities, secrets and tokens, on 29 June 2026. Privileged access products are not profiled here.

Defender for Identity detects identity-based attacks across on-premises Active Directory, Entra ID and other IAM such as Okta; ID Protection and risk-based Conditional Access come with P2.

Identity Threat Protection evaluates risk during sessions, offers Universal Logout and shares signals with CrowdStrike, Zscaler, Palo Alto Networks and Jamf.

• Published per-user prices for every tier.
• Directory, governance and detection from one vendor.
• Account discovery for app users who match no Entra ID user.

• The largest integration catalog in our sources (8,000+).
• Published entry prices.
• Directory, lifecycle, governance and threat protection from one vendor.

• Deep certification campaigns: Manager, Source Owner and Search, plus AI-driven certifications.
• Audit evidence collected automatically, with audit-ready reports.
• Works with discovery vendors: Orchid Security joined its Technology Alliance Partner program in August 2026.

• ID Governance requires Entra ID P1 or P2.
• Apps without provisioning rely on a documented manual path (CSV export and matching).
• Privileged Identity Management needs Entra ID P2 or ID Governance licences, and its feature detail is not in our sources.

• $1,500 annual minimum contract.
• Professional and Enterprise are priced on request, and the footnote describes Identity Governance as an add-on.
• Apps outside the integration catalog are not covered in our sources.

• Suites listed without prices.
• The Discovery Tool uncovers unmanaged applications; discovery of accounts inside them is not detailed.