SailPoint Identity Security Cloud vs SailPoint IdentityIQ

SailPoint Identity Security Cloud manages digital identities and controls their access to enterprise resources. Its identity-governance capabilities cover lifecycle management, access requests and approvals, access reviews and certifications, and separation-of-duties controls. Depending on the selected suite, AI capabilities include access recommendations, role insights, outlier detection, and Harbor Pilot agents. Cloud Infrastructure Entitlement Management provides identity-focused cloud governance. Connectivity combines SaaS connections, virtual appliance connectors, and RPA integrations for legacy, disconnected, and on-premises systems. Plans include the full SailPoint connector library, although paid integrations may add costs. The service runs on Amazon Web Services, encrypts data in transit and at rest, and uses zero-knowledge encryption for credentials in its password vault. Administrative access supports two-factor methods and third-party authentication integrations. It offers SAML, directory synchronization, and lifecycle provisioning. Foundations targets smaller organizations beginning identity security, while Standard targets smaller organizations consolidating identity tools. Pricing is available on request.

SailPoint IdentityIQ is an identity-security platform for complex enterprises, covering identity lifecycle management and compliance. Compliance Manager automates access certifications, policy management, and audit reporting. Lifecycle Manager supports self-service access requests and provisioning for joiner, mover, and leaver events. AI and machine learning capabilities provide access insights, role modeling, and recommendations for reviewers. SailPoint documents more than 100 out-of-the-box connectors across enterprise applications, IT service management, privileged access, cloud collaboration, and security and risk. APIs and a plugin framework allow customers and partners to extend the platform. IdentityIQ is customer-hosted, on premises or in the cloud, and is listed for Android, iOS, web, API, and self-hosted use. Pricing is available on request; the term subscription is typically a three-year contract billed annually upfront, with price depending partly on the number of digital identities governed. SailPoint says implementations can be complex and require identity-governance and target-system knowledge, and professional services are billable.