Best Identity and Access Management Software in 2026
Updated
43ranked
1free plans on this page
$3/molowest paid tier
11 Oct 2026last checked
Input list Identity and Access Management Software 18 channels on this page · 68 of 144 spec lines stated by the makers
Ch Tool Free planPaid fromSSO protocolsMFA methodsDirectory syncLifecycle provisioningAdaptive access policiesIncluded users Spec sheet Score
26 PingID Free planNoPaid from3/user/moSSO protocolsOpenID Connect, SAML, WS-Federation, OAuth 2.0MFA methodsMobile push, email OTP, SMS OTP, TOTP authenticator apps, QR codes, magic links, FIDO2-bound biometrics, security keysDirectory syncYesLifecycle provisioningYesAdaptive access policiesYesIncluded users 7/8spec lines stated 7.0
27 Amazon Cognito Free planYesPaid from0.01/user/moSSO protocolsSAML 2.0, OpenID Connect (OIDC), OAuth 2.0MFA methodsEmail, SMS, TOTP authenticator apps, WebAuthn passkeys with user verificationDirectory syncLifecycle provisioningAdaptive access policiesYesIncluded users10,000 users 6/8spec lines stated 6.9
28 BIO-key PortalGuard Free planNoPaid fromSSO protocolsMFA methodsDirectory syncLifecycle provisioningAdaptive access policiesIncluded users 1/8spec lines stated 6.9
29 RSA Authenticator (SecurID) Free planNoPaid fromSSO protocolsSAML 2.0MFA methodsDirectory syncLifecycle provisioningYesAdaptive access policiesIncluded users 3/8spec lines stated 6.9
30 Saviynt Enterprise Identity Cloud Free planPaid fromSSO protocolsSAML 2.0MFA methodsDirectory syncLifecycle provisioningYesAdaptive access policiesIncluded users 2/8spec lines stated 6.7
31 SailPoint Identity Security Cloud Free planPaid fromSSO protocolsSAMLMFA methodsTOTP authenticator apps, Duo Web, RSA SecurID, Symantec VIPDirectory syncYesLifecycle provisioningYesAdaptive access policiesIncluded users 4/8spec lines stated 6.6
32 Bravura Security Fabric Free planPaid fromSSO protocolsSAML 2.0, OpenID Connect (OIDC) for Duo MFA integrationMFA methodsEmail PIN, SMS PIN, Bravura mobile app QR challenge, third-party token; Duo Verified Push, WebAuthn, passkeysDirectory syncYesLifecycle provisioningYesAdaptive access policiesYesIncluded users 5/8spec lines stated 6.5
33 Omada Identity Cloud Free planPaid fromSSO protocolsOpenID Connect, SAMLMFA methodsDirectory syncYesLifecycle provisioningYesAdaptive access policiesYesIncluded users 4/8spec lines stated 6.5
34 1IDM Free planNoPaid fromSSO protocolsMFA methodsDirectory syncLifecycle provisioningYesAdaptive access policiesIncluded users500 users 3/8spec lines stated 6.3
35 Ping Identity Platform Free planNoPaid from3/user/moSSO protocolsOpenID Connect, SAML, WS-Federation, OAuth 2.0MFA methodsMobile push, email OTP, SMS OTP, TOTP authenticator apps, QR codes, magic links, FIDO2-bound biometrics, security keysDirectory syncYesLifecycle provisioningYesAdaptive access policiesYesIncluded users 7/8spec lines stated 6.2
36 OmniOne Access Free planPaid fromSSO protocolsSAML, OAuth, OIDCMFA methodsFIDO, biometric authentication, mobile OTPDirectory syncYesLifecycle provisioningAdaptive access policiesIncluded users 3/8spec lines stated 6.1
37 PingOne Free planNoPaid from3/user/moSSO protocolsSAML, OpenID Connect (OIDC), OAuth 2.0MFA methodsDirectory syncLifecycle provisioningAdaptive access policiesYesIncluded users 4/8spec lines stated 6.1
38 FastPass SSPR Free planNoPaid fromSSO protocolsSAMLMFA methodsTOTP, SMS, email PIN, Duo, RSA, smart cards, RADIUS, challenge-response questionsDirectory syncLifecycle provisioningAdaptive access policiesIncluded users 3/8spec lines stated 6.0
39 Microsoft Active Directory Free planNoPaid fromSSO protocolsKerberos, NTLMMFA methodsSmart cardDirectory syncLifecycle provisioningAdaptive access policiesIncluded users 3/8spec lines stated 6.0
40 OpenText NetIQ Identity Manager Free planNoPaid fromSSO protocolsMFA methodsDirectory syncYesLifecycle provisioningYesAdaptive access policiesIncluded users 3/8spec lines stated 5.8
41 WSO2 Identity Server Free planYesPaid fromSSO protocolsOAuth, OpenID Connect, SAML 2.0MFA methodsTOTP, Email OTP, SMS OTP, Passkey, Push NotificationDirectory syncYesLifecycle provisioningYesAdaptive access policiesYesIncluded users 6/8spec lines stated 5.8
42 Apache Syncope Free planPaid fromSSO protocolsOpenID Connect, SAML 2.0, CASMFA methodsTOTP, Duo Security, Google Authenticator, FIDO2 WebAuthn (Passkey)Directory syncYesLifecycle provisioningYesAdaptive access policiesIncluded users 4/8spec lines stated 5.7
43 IdRamp Verified Workforce Free planPaid fromSSO protocolsMFA methodsDirectory syncLifecycle provisioningAdaptive access policiesIncluded users 0/8spec lines stated 5.2
Compare all 18 in a table
| # | Tool | Score | Free plan | Paid from | SSO protocols | MFA methods |
|---|---|---|---|---|---|---|
| 26 | PingID | 7.0 | No | 3 /user/mo | OpenID Connect, SAML, WS-Federation, OAuth 2.0 | Mobile push, email OTP, SMS OTP, TOTP authenticator apps, QR codes, magic links, FIDO2-bound biometrics, security keys |
| 27 | Amazon Cognito | 6.9 | Yes | 0.01 /user/mo | SAML 2.0, OpenID Connect (OIDC), OAuth 2.0 | Email, SMS, TOTP authenticator apps, WebAuthn passkeys with user verification |
| 28 | BIO-key PortalGuard | 6.9 | No | |||
| 29 | RSA Authenticator (SecurID) | 6.9 | No | SAML 2.0 | ||
| 30 | Saviynt Enterprise Identity Cloud | 6.7 | SAML 2.0 | |||
| 31 | SailPoint Identity Security Cloud | 6.6 | SAML | TOTP authenticator apps, Duo Web, RSA SecurID, Symantec VIP | ||
| 32 | Bravura Security Fabric | 6.5 | SAML 2.0, OpenID Connect (OIDC) for Duo MFA integration | Email PIN, SMS PIN, Bravura mobile app QR challenge, third-party token; Duo Verified Push, WebAuthn, passkeys | ||
| 33 | Omada Identity Cloud | 6.5 | OpenID Connect, SAML | |||
| 34 | 1IDM | 6.3 | No | |||
| 35 | Ping Identity Platform | 6.2 | No | 3 /user/mo | OpenID Connect, SAML, WS-Federation, OAuth 2.0 | Mobile push, email OTP, SMS OTP, TOTP authenticator apps, QR codes, magic links, FIDO2-bound biometrics, security keys |
| 36 | OmniOne Access | 6.1 | SAML, OAuth, OIDC | FIDO, biometric authentication, mobile OTP | ||
| 37 | PingOne | 6.1 | No | 3 /user/mo | SAML, OpenID Connect (OIDC), OAuth 2.0 | |
| 38 | FastPass SSPR | 6.0 | No | SAML | TOTP, SMS, email PIN, Duo, RSA, smart cards, RADIUS, challenge-response questions | |
| 39 | Microsoft Active Directory | 6.0 | No | Kerberos, NTLM | Smart card | |
| 40 | OpenText NetIQ Identity Manager | 5.8 | No | |||
| 41 | WSO2 Identity Server | 5.8 | Yes | OAuth, OpenID Connect, SAML 2.0 | TOTP, Email OTP, SMS OTP, Passkey, Push Notification | |
| 42 | Apache Syncope | 5.7 | OpenID Connect, SAML 2.0, CAS | TOTP, Duo Security, Google Authenticator, FIDO2 WebAuthn (Passkey) | ||
| 43 | IdRamp Verified Workforce | 5.2 |
More in IT & Infrastructure
All IT & infrastructure listsIT Asset Management Software 111IT Automation Software 76Residential Proxy Services 73IT Knowledge Base Software 61Website Monitoring Software 55Patch Management Software 51IT SLA Management Software 50IT Help Desk Software 49IT Change Management Software 43Application Deployment Software 42IT Problem Management Software 41IT Vendor Management Software 40