SailPoint IdentityIQ vs Soffid Identity Governance Administration

SailPoint IdentityIQ is an identity-security platform for complex enterprises, covering identity lifecycle management and compliance. Compliance Manager automates access certifications, policy management, and audit reporting. Lifecycle Manager supports self-service access requests and provisioning for joiner, mover, and leaver events. AI and machine learning capabilities provide access insights, role modeling, and recommendations for reviewers. SailPoint documents more than 100 out-of-the-box connectors across enterprise applications, IT service management, privileged access, cloud collaboration, and security and risk. APIs and a plugin framework allow customers and partners to extend the platform. IdentityIQ is customer-hosted, on premises or in the cloud, and is listed for Android, iOS, web, API, and self-hosted use. Pricing is available on request; the term subscription is typically a three-year contract billed annually upfront, with price depending partly on the number of digital identities governed. SailPoint says implementations can be complex and require identity-governance and target-system knowledge, and professional services are billable.

Soffid Identity Governance Administration (IGA) manages identity lifecycles, including account creation, changes, and deletion. Its governance tools include access requests, approval workflows, certification campaigns, recertification, and audit trails. IGA supports access policies, role-based access control, least privilege, and segregation of duties. It manages internal and external users as well as non-human identities such as applications, APIs, and services. Soffid describes prebuilt connectors for directories, cloud apps, and HR systems, along with a framework for custom integrations. Examples in its JSON REST connector documentation include Jira, Office 365, AWS, Google Cloud, and Oracle Field Service Cloud. Deployment can be on customer servers or as a cloud-based solution. Soffid states it holds ENS High and Common Criteria EAL2 + ALC CCL certifications for identity management and names GDPR and SOX among regulations its capabilities address. Pricing is on request, though binary components are free with registration and source code downloads require no registration. Listed platforms are API, Linux, self-hosted, web, and Windows.