Soffid Identity Governance Administration

Overview

Soffid Identity Governance Administration (IGA) combines automated account lifecycle management with controls for reviewing and approving access. It is aimed at organizations governing access across employees, external users, and service identities; its strongest case is the link between provisioning and audit workflows, while its ongoing governance work is a real operating commitment.

Government, financial services, and healthcare are among the industries Soffid serves. The company states that its identity-management offering holds ENS High and Common Criteria EAL2 + ALC CCL certifications, and its IGA product addresses regulations including GDPR and SOX. For category comparisons, see Identity Governance Software.

Key features

IGA automates account creation, modification, and deletion, then adds access requests, approvals, certification campaigns, and audit trails. That combination is useful for organizations that want identity changes governed through repeatable processes rather than handled as isolated account tasks.

Access controls: Role-based access control, least privilege, IAM policies, and segregation of duties help structure permissions and address conflicting access.

Certifications and audit: Certification and recertification workflows give teams a way to review access; identity-action records support audit work.

Broad identity scope: The system covers internal and external users as well as non-human identities such as applications, APIs, and services.

Integrations: Soffid describes pre-built connectors for directories, cloud applications, and HR systems, alongside a framework for custom integrations. Its JSON REST connector documentation gives Jira, Office 365, AWS, Google Cloud, and Oracle Field Service Cloud as examples.

The breadth of identity types and controls is a strength for organizations with varied access populations. It also means governance is not a one-time setup: Soffid says certification campaigns, exception reviews, and role maintenance need continuing ownership after go-live.

Pricing

Soffid's commercial pricing is on request. Its free plan, Open-source binary components, costs nothing: binary downloads are free with registration, while source code downloads require no registration. This provides access to components, but the plan details do not establish that it includes a packaged, fully supported IGA deployment.

A free trial is offered for Soffid's IDaaS converged IAM platform, but no trial duration is stated. Organizations evaluating the paid IGA product should request a quote and clarify the commercial scope; the free downloads are a lower-commitment way to obtain components, not a substitute for confirming deployment and support requirements.

Platforms

Soffid identifies API, Linux, self-hosted, web, and Windows support. IGA can run on customer-owned servers or as a cloud-based solution, giving organizations a choice between operating it themselves and using a cloud deployment. Separately, Soffid's Enterprise Single Sign-On download description says desktop access control is available for Linux and Windows.

Who it's for

Soffid is a stronger fit for organizations that need to govern permissions across employees, outside users, and non-human identities, and that can assign people to keep roles, exceptions, and access reviews current. Its named industries—government, banking and financial services, and healthcare—are consistent with the emphasis on access controls and audit processes.

It is less suitable for teams seeking a governance system they can set up and then leave unattended. The certification and role-maintenance workload remains part of operating the product, and custom pricing means buyers should establish costs before making a plan comparison.

Pros and cons

Pro — Provisioning and governance work together: Lifecycle automation sits alongside requests, approvals, access reviews, and audit trails.

Pro — Covers varied identity populations: Internal users, external users, applications, APIs, and services fall within its stated scope.

Pro — Flexible deployment and integration paths: Customer-hosted and cloud deployment options accompany pre-built and custom connector approaches.

Con — Governance needs continuing attention: Campaigns, exception reviews, and role upkeep require ownership after launch.

Con — Commercial cost requires a quote: The free downloads do not provide a published paid-product price for budgeting comparisons.

Alternatives

Okta Lifecycle Management is worth considering when a published entry point matters: Essentials is $17 a month, billed per user/month annually, and includes Lifecycle Management, 50 Workflows, and a $1,500 annual contract. Unlike Soffid's free binary-component downloads, Okta has no free plan, though it offers a free trial.

Corma is a lower-cost option for teams whose needs match its smaller app-access scope: its freemium tier costs nothing and covers an identity-provider connection, browser extension, SSO connection, and 10 apps; Essential is €3 a month, billed annually. Its stated plan features are narrower than Soffid's identity lifecycle and governance workflow coverage.

Oracle Cloud Infrastructure Secret Management is a different option for readers comparing secret-management tools; its OCI Secret Management plan specifies 5,000 secrets per tenancy and 30 active secret versions per secret.

AccessVerity may suit a small team looking for a defined annual entry plan: Starter is $21.25 a year, billed $255 yearly, for up to 10 employees, with unlimited applications, access requests and approvals, a full audit trail, and asset inventory and tracking.

SailPoint IdentityIQ is another paid, self-hosted identity-governance option; its term subscription is typically contracted for three years with annual billing upfront, and price depends in part on the number of digital identities.

Saviynt Enterprise Identity Cloud is an alternative to assess when its Essentials or Pro packaging is a better match; both plans have custom pricing, with Pro adding identity security posture management to Essentials.

Avatier Identity Anywhere is worth comparing for teams seeking separately priced password-management or single-sign-on plans: Password Management is $1.50 a month and Single Sign-On is $2 a month, each requiring a minimum one-year commitment.

ConductorOne offers custom-priced Flex and Platform plans; Flex bills monthly based on usage of C1 Tokens.

Verdict

Choose Soffid IGA if your organization needs lifecycle automation tied to access requests, certifications, and audit workflows across human and non-human identities—and can keep governance ownership active after deployment. Look elsewhere if you need a published price to budget from or cannot commit people to ongoing reviews and role maintenance.