The ITAM Review

News, reviews and resources for worldwide ITAM, SAM and Licensing professionals.

Market Guide: Identity & Access Management (IAM)

This guide to Identity & Access Management tools is the first in a series of Market Guides looking at technologies and services that sit adjacent to ITAM in large enterprises. The purpose of this series is to provide an introduction for ITAM professionals to the tools used by their key stakeholders. By doing so, we will identify areas of overlap in tooling and further opportunities for collaboration. ITAM starts with Trustworthy Data, so it makes sense to look at the market for tools which may provide data and services of use to ITAM teams.

What is Identity & Access Management?

For the purpose of this Market Guide we define Identity & Access Management (IAM) in accordance with ISO/IEC 24760-1:2019 – full document download available here. In short, this standard defines IAM in terms of a lifecycle and actions (referred to as transitions in the standard). Tools in this Market Guide will manage the full lifecycle:

Identity & Access Management Lifecycle

And support the required lifecycle transitions.

Identity & Access Management Transitions

Why is IAM important for IT Asset Management?

Quite simply: we’re moving to a per-user subscription licensed norm. This doesn’t fit the traditional way of managing IT assets as well as per-device licensing does. In part, we as ITAM managers pay attention to hardware devices because of per-device licensing. We’re incentivised to do so because hardware may be consuming a license which can be harvested and reissued, resulting in a cost saving or cost avoidance. With the move to user-based subscription licensing we now have a reason to pay closer attention to who is using a particular software application – because they’re consuming a license which could be harvested and reissued.

However, our existing tools don’t necessarily have the rich user data we need to efficiently optimise subscription licenses. We don’t own the IAM process, the IAM team does. Remember, ITAM tools often grew from tools used by IT Ops to manage hardware – such as Altiris or other Service Desk tools, and it is the same for managing subscription licensing. Enterprise SaaS Management providers often provide direct connections to IAM providers, enabling enhanced discovery, inventory, and optimisation of SaaS subscriptions.

Mapping the IAM lifecycle to the ITAM lifecycle

There is a close mapping between IAM and ITAM, meaning it is relatively easy to integrate tools and processes between these management domains.

Identity & Access Management Lifecycle mapped to ITAM

All IAM lifecycle steps are of relevance to ITAM teams, but the ‘Active’ and ‘Suspended’/’Archived’ stages are of most importance as those stages typically involve license or subscription consumption. For example, a license to access Office 365 will be allocated (Established) by the IAM team and becomes Active on first login. From an ITAM perspective the subscription at that point becomes a candidate for optimisation – and the IAM system can provide key data such as whether the application is in use, which can then be used to optimise subscription allocation.

Beyond this core interaction IAM tools are also important from an operational perspective for ITAM. One of the key capabilities many of these tools offer is Single Sign On (SSO) – centralising both the login process and the allocation of login accounts. In this way IAM tools support potential ITAM deliverables around application deployment and onboarding/offboarding. For example, IAM tools can effectively deprovision (Suspend/Archive) accounts automatically when an employee leaves an organisation.

Market Overview

IAM as a concept started on-premises at the dawn of client-server computing with technologies such as Kerberos & NTLM built into Windows NT/Windows Server. These on-premises tools enabled IT departments to use the user’s Windows Login/password to authenticate compatible client/server applications, reducing the need for multiple accounts and passwords and improving application security. Alongside this account management capability, solutions were built to improve authentication in the form of proprietary Two Factor Authentication (2FA) solutions such as RSA SecurID. Currently, the market is built around open standards developed in the mid-2000s with SAML & OAuth being particularly important. Most internet users will be familiar with smartphone authentication apps built around such standards, which provide 2FA login tokens (usually a 6-digit number) via app or text message.

Growth in this market has accelerated alongside the growth of SaaS and IaaS. The need to secure the large number of SaaS applications (on average 88 apps across all company sizes, and 175 in larger enterprises) mandates the use of new tools. Imagine trying to onboard each new employee with access to even a quarter of those applications, and, more importantly, making sure that they’re offboarded immediately when they leave the organisation. This is a very different proposition to managing desktop applications where a typical user may have accessed most of their productivity apps simply by logging in to their PC. Removing access in that case wasn’t as critical as physical security (the user no longer having access to the office) ensured data and applications were secured when the employee left.

Other growth factors include a rise in regulatory obligations – PCI-DSS, HIPAA, GDPR, and so on – and also a recognition that cyber-attacks are becoming more prevalent and more damaging. Use of personal devices, particularly in today’s “work anywhere” approach to business is a further growth factor, as is the erosion of the secure IT perimeter due to the internet replacing the corporate network.

In preparing this guide we reviewed other analyst reports and on average the IAM tools and services market is expected to double in size by 2025. This is still a niche area – total revenue expected to be in the range of $20-$30bn by then, but the addressable market is large. Such imminent growth will attract new entrants, perhaps focusing on the mid-market whilst the major players carve up the lucrative enterprise sector.

Inclusion Criteria

In compiling this guide, we sought to include a wide variety of solutions in terms of cost, target organisation size, and geographies. If you are a vendor with a IAM solution that integrates with ITAM tools and processes and are not included, please contact us for possible inclusion in a later revision.

Over to you

We’d love to hear your views on the vendors listed in this Guide. To submit a review, click the links in the product listings below.

Representative Vendors

Auth0 Identity & Access Management

Name: Auth0

Description: Auth0 provide IAM capabilities specifically focused on meeting application developer needs. Founded in 2013 and headquartered in Washington, USA they were recently acquired (March 2021) by Okta in a $6.5bn deal

Offer price: POA

Application Category: IAM

Author: AJ Witt

  • Ease of Use - 0/10
    0/10
  • Return on Investment (ROI) - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)
Dashlane $8

Name: Dashlane

Description: Dashlane provides Password Management and SSO for business and personal customers. Headquartered in New York, they were founded in 2009 and provide IAM services to over 20,000 businesses worldwide

Offer price: $8 per user per month

Application Category: IAM

Author: AJ Witt

  • Ease of Use - 0/10
    0/10
  • Return on Investment (ROI) - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)
Duo Security

Name: Duo Security

Description: Duo Security, now a Cisco company, offer enterprise IAM services including MFA, Device Trust, SSO, Adaptive Access Policies, and secure remote access to VPN solutions. Duo were founded in 2008, are headquartered in Michigan, and were acquired by Cisco in 2018 for $2.4bn.

Offer price: $3 - $9 per user per month

Application Category: IAM

Author: AJ Witt

  • Ease of Use - 0/10
    0/10
  • Return on Investment (ROI) - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)
ForgeRock Identity Platform

Description: ForgeRock provide enterprise-grade IAM solutions including cutting-edge options such as passwordless and usernameless authentication.

Application Category: IAM

  • Ease of Use - 0/10
    0/10
  • ROI - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)
Google Cloud Identity

Name: Google Cloud Identity

Description: Google Cloud Identity provides SSO, MFA, and Endpoint Management services

Offer price: $6 per user per month

Application Category: IAM

  • Ease of Use - 0/10
    0/10
  • ROI - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)
JumpCloud

Name: JumpCloud

Description: JumpCloud provides users with one identity to access all of their resources. Integration with HR systems and major SaaS providers streamlines the onboarding and offboarding process, supporting remote work. Founded in 2012 and based in Colorado they are privately-held and completed a $100m funding round in early 2021.

Application Category: IAM

Author: AJ Witt

  • Ease of Use - 0/10
    0/10
  • Return on Investment (ROI) - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)
LastPass Enterprise Identity $9

Name: LastPass Enterprise Identity

Description: LastPass Enterprise Identity provides centralised Identity, Single Sign On (SSO), and Password Management tools at enterprise scale LastPass were founded in 2008 and acquired by LogMeIn in 2015 for $110m. They are based in Virginia, USA.

Offer price: $9 per user per month

Application Category: IAM

Author: AJ Witt

  • Ease of Use - 0/10
    0/10
  • Return on Investment (ROI) - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)
Microsoft Azure Active Directory $0 - $9

Name: Microsoft Azure Active Directory

Description: Microsoft Azure Active Directory basic/free plans include identity management, SSO, and onboarding/offboarding support. For enteprises, a range of paid for plans are available, costing between $6 - $9 per user per month, depending on features.

Offer price: $0 - $9 per user per month

Application Category: IAM

[ Submit Review ]

  • Ease of Use - 0/10
    0/10
  • ROI - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)
NetIQ Identity & Access Management

Name: NetIQ Identity & Access Management

Description: NetIQ, now part of Micro Focus, provides a full enterprise Identity & Access Management suite of products. These solutions are modular and integrate with a wide range of other solutions

Application Category: IAM

Author: AJ Witt

  • Ease of Use - 0/10
    0/10
  • ROI - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)
Okta

Name: Okta

Description: Okta provide a full range of IAM products and services, enabling businesses to issue identities to users and customers, onboard and offboard employees automatically, and offer MFA services. Founded in 2009, they went public in 2017 and are headquartered in San Francisco

Application Category: IAM

  • Ease of Use - 0/10
    0/10
  • ROI - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)
OneLogin

Name: OneLogin

Description: OneLogin were founded in 2009, are privately-held, and headquartered San Francisco. They offer a full range of enterprise-grade IAM tools and solutions including MFA, passwordless, SSO, Application Provisioning, and Cloud Directory. In addition they also offer solutions to secure consumer (B2C) accounts

Application Category: IAM

  • Ease of Use - 0/10
    0/10
  • ROI - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)
Ping Identity Workforce

Name: Ping Identity Workforce

Description: Ping Identity provide enterprise-grade IAM services using their Workforce360 solution platform. IAM services include SSO, onboarding/offboarding, passwordless authentication, and identity risk management reporting. Ping Identity, founded in 2002, are publicly-traded and headquartered in Denver, Colorado.

Application Category: IAM

  • Ease of Use - 0/10
    0/10
  • ROI - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)
Sailpoint Identity Platform

Name: Sailpoint Identity Platform

Description: Sailpoint, founded in 2005, publicly held, and headquartered in Austin, Texas provide IAM solutions via Sailpoint Identity Platform. This enterprise-scale provider integrates IAM with other cyber security and governance, risk, and compliance domains. Sailpoint Identity Platform enables MFA, SSO, and application provisioning

Application Category: IAM

  • Ease of Use - 0/10
    0/10
  • ROI - 0/10
    0/10
  • Technical Support - 0/10
    0/10
  • Customer Service - 0/10
    0/10
  • Overall Satisfaction - 0/10
    0/10
0/10
Comments Rating 0/10 (0 reviews)

attend our virtual conference

24th - 25th November

Hear from expert speakers on key topics within ITAM.
Find out more.