IT AI Index
Index Identity and access IGA › Enterprise September 2026 Edition

Identity governance for enterprise buyers

Asked as “identity governance platform”, and as “identity governance and administration tool”, on behalf of an enterprise B2B company. 45 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.
Standing
Contested
29% of first choices, contested.

By buyer segment

The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.

01The standing

Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
01SailPoint29%37%35criticized challenger
02SailPoint Identity Security Cloud24%6%18accepted challenger
03Microsoft Entra ID Governance18%18%40accepted challenger
04Saviynt Enterprise Identity Cloud9%23%53accepted challenger
05Omada Identity2%4%23accepted challenger
Show the four products at 0%, ordered by negative rate
09Oracle Identity Governance0%45%11criticized challenger
07Okta Identity Governance0%32%40criticized challenger
08Okta0%10%10accepted challenger
06One Identity Manager0%4%25accepted challenger
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its vendor page.

Recommended versus criticized

Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.

Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06
07
08
09
Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative40%
Key
01SailPoint29%
02SailPoint Identity Security Cloud24%
03Microsoft Entra ID Governance18%
04Saviynt Enterprise Identity Cloud9%
05Omada Identity2%
06One Identity Manager0%
07Okta Identity Governance0%
08Okta0%
09Oracle Identity Governance0%

02What they warned about

Three of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, Gemini 3.5 Flash, Grok 4.1 Fast, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Kimi K2, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
SailPoint
37%
13 of 35 labels negative · 10 of 12 models · 2 hard negative
“Avoid or be extremely cautious with legacy IGA platforms... SailPoint is notorious for difficult implementations, slow maturity timelines, and high costs.” Mistral Small, negative prompt
Saviynt Enterprise Identity Cloud
23%
12 of 53 labels negative · 9 of 12 models · 2 hard negative
“Users report complex implementations, performance issues (lag, slow response times), and significant integration challenges with legacy systems.” Mistral Small, negative prompt
Okta Identity Governance
32%
13 of 40 labels negative · 8 of 12 models · 2 hard negative
“"Light IGA" from Identity Providers — Okta, Microsoft Entra, and similar vendors offer governance features, but these are not full IGA solutions” Kimi K2, negative prompt
Microsoft Entra ID Governance
18%
7 of 40 labels negative · 6 of 12 models
“good for Microsoft-centric environments, but Microsoft's own docs show service limits ... often best when your estate is heavily Microsoft-aligned rather than very heterogeneous” GPT-5.4 mini, negative prompt

03What they cite

Citations exist only for the models that return a source list: twelve of the twelve in this edition, and all six flagship models on the expanded tier.

Sites the answers cite

66 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 6 of those lists are Google grounding redirects that name no site and are left out of the counts. 914 links across 186 sites, every framing counted. Ranked by the number of answers carrying the site or page.

38 answers · 49 citations · 11 models
vendor site · One Identity30 answers · 38 citations · 10 models
vendor site · Zluri30 answers · 38 citations · 10 models
30 answers · 30 citations · 10 models
27 answers · 41 citations · 9 models
21 answers · 26 citations · 10 models
21 answers · 23 citations · 9 models
18 answers · 19 citations · 9 models
vendor site · SailPoint17 answers · 25 citations · 7 models
vendor site · Lumos17 answers · 20 citations · 7 models
17 answers · 20 citations · 8 models
vendor site · Microsoft15 answers · 22 citations · 9 models

Pages the answers cite

The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.

04How they answered

Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ModelDirect“What is the best identity governance platform for an enterprise B2B company?”Paraphrase“Which identity governance and administration tool would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade identity governance platforms and how do they differ?”Budget-constrained“What is the best identity governance platform for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating an identity governance platform. What should we look at?”Negative“Which identity governance platforms should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5no first choiceSailPoint IdentityIQChanged
Four alternativesOkta Identity Governance, Omada Identity, One Identity Manager, Saviynt Enterprise Identity Cloud
no first choiceagainst: SailPoint IdentityIQSailPoint
Two alternativesMicrosoft Entra ID Governance, Okta Identity Governance
against: Saviynt Enterprise Identity Cloud
no first choiceagainst: Oracle Identity Governance, SailPoint, Saviynt Enterprise Identity Cloud
GPT-5.4 miniSailPoint Identity Security Cloud
Two alternativesMicrosoft Entra ID Governance, Oracle Identity Governance
SailPoint Identity Security CloudHeld
One alternativeSaviynt Enterprise Identity Cloud
against: Microsoft Entra ID Governance
SailPoint Identity Security Cloud / IdentityIQ
Five alternativesIBM Security Verify Governance, Microsoft Entra ID Governance, One Identity Manager, Oracle Identity Governance, Saviynt Enterprise Identity Cloud
Microsoft Entra ID Governance
One alternativeOkta Identity Governance
against: SailPoint
no first choiceagainst: IBM Security Verify Governance, Microsoft Entra ID Governance, Okta Identity Governance, Oracle Identity Governance
Gemini 3.5 FlashSailPoint, Saviynt Enterprise Identity Cloud
Five alternativesConductorOne, EmpowerID, Lumos, Microsoft Entra ID Governance, Okta Identity Governance
SailPointChanged
Three alternativesMicrosoft Entra ID Governance, Omada Identity, Saviynt Enterprise Identity Cloud
SailPoint
Five alternativesMicrosoft Entra ID Governance, Okta, Omada Identity, One Identity Manager, Saviynt Enterprise Identity Cloud
Omada Identity
Three alternativesConductorOne, Lumos, Microsoft Entra ID Governance
against: Okta Identity Governance, SailPoint, Saviynt Enterprise Identity Cloud
ConductorOne, Lumos, Zilla Security
Three alternativesMicrosoft Entra ID Governance, Okta Identity Governance, Veza
against: SailPoint, SailPoint IdentityIQ, Saviynt Enterprise Identity Cloud
against: IBM Security Verify Governance, Microsoft Entra ID Governance, Okta Identity Governance, Oracle Identity Governance, Symantec Identity Governance and Administration
Perplexity SonarSailPoint Identity Security Cloud
Two alternativesOne Identity Manager, WorkOS
SailPoint Identity Security CloudHeld
Three alternativesMicrosoft Entra ID Governance, One Identity Manager, Saviynt Enterprise Identity Cloud
SailPoint
Six alternativesIBM Security Verify Governance, Okta Identity Governance, Omada Identity, One Identity Manager, Oracle Identity Governance, Saviynt Enterprise Identity Cloud
Microsoft Entra ID Governance
Three alternativesOne Identity Manager, SailPoint Identity Security Cloud, Saviynt Enterprise Identity Cloud
no first choiceagainst: ARCON, Lumos, ManageEngine AD360, Microsoft Entra ID Governance, Okta Identity Governance, Securden, Veza, Zluri, miniOrange
Grok 4.1 FastSailPoint Identity Security Cloud, Saviynt Enterprise Identity Cloud
Two alternativesMicrosoft Entra ID Governance, Okta Identity Governance
SailPoint Identity Security CloudChanged
Three alternativesOkta Identity Governance, One Identity Manager, Saviynt Enterprise Identity Cloud
SailPoint Identity Security Cloud / IdentityIQ, Saviynt Enterprise Identity Cloud
Three alternativesMicrosoft Entra ID Governance, Okta Identity Governance, One Identity Manager
against: Ping Identity
Microsoft Entra ID Governance
Two alternativesSailPoint Identity Security Cloud, Saviynt Enterprise Identity Cloud
against: Okta Identity Governance
no first choice
Four alternativesCyberArk Identity Security Platform, Okta Identity Governance, Ping Identity One, Saviynt Enterprise Identity Cloud
against: SailPoint IdentityIQ/IdentityNow
against: Okta Identity Governance, One Identity Manager, OpenIAM, SailPoint
Mistral SmallSailPoint Identity Security Cloud, Saviynt Enterprise Identity Cloud
Two alternativesOkta Identity Governance, Omada Identity
SailPointChanged
Two alternativesIdentity Manager, Omada Identity
SailPoint IdentityIQ / Identity Security Cloud
Four alternativesOkta Identity Governance, One Identity Manager, SAP Access Control, Saviynt Enterprise Identity Cloud
Microsoft Entra ID Governanceagainst: Iden, Okta Identity Governance, SailPointno first choiceagainst: Okta Identity Governance, SailPoint, Saviynt Enterprise Identity Cloud
DeepSeek V4 FlashSailPoint
One alternativeSaviynt Enterprise Identity Cloud
against: Microsoft Entra ID Governance
SailPoint Identity Security CloudChanged
Two alternativesOmada Identity, Saviynt Enterprise Identity Cloud
SailPoint Identity Security Cloud
Three alternativesOmada Identity, One Identity Manager, Saviynt Enterprise Identity Cloud
Microsoft Entra ID Governance
One alternativeOkta Identity Governance
against: SailPoint, Saviynt Enterprise Identity Cloud
no first choiceagainst: Omada Identity, Oracle Identity Governance, SailPoint Identity Security Cloud, Saviynt Enterprise Identity Cloud
Llama 4 MaverickSSOJet
Three alternativesIdentity Manager, SAP Access Control, WorkOS
no first choiceChangedno first choiceSailPoint Identity Security CloudSailPoint, Saviynt Enterprise Identity Cloud
Four alternativesMicrosoft Entra ID, Okta, Omada Identity, Ping Identity
against: SailPoint, Saviynt Enterprise Identity Cloud
Qwen 3.7 FlashSailPoint
Three alternativesMicrosoft Entra ID, Ping Identity, Saviynt Enterprise Identity Cloud
SailPointHeld
Two alternativesMicrosoft Entra ID Governance, OneLogin
SailPoint
Four alternativesIBM Verify, Microsoft Entra ID Governance, Oracle Identity Governance, Saviynt Enterprise Identity Cloud
Microsoft Entra ID Governance
One alternativeOmada Identity
against: SailPoint, Saviynt Enterprise Identity Cloud
OneLogin
Six alternativesCyberArk Identity, Iden, Microsoft Entra ID Governance, Omada Identity, Ping Identity PingFederate/PingAuthorize, Saviynt Enterprise Identity Cloud
against: Oracle Identity Governance, SailPoint
against: Microsoft Entra ID Governance, Okta Identity Governance, SailPoint IdentityIQ
Kimi K2SailPoint
Two alternativesOmada Identity, Saviynt Enterprise Identity Cloud
against: Okta Identity Governance
SailPoint Identity Security CloudChanged
Three alternativesMicrosoft Entra ID Governance, One Identity Manager, Saviynt Enterprise Identity Cloud
SailPoint
Five alternativesMicrosoft Entra ID Governance, Okta Identity Governance, Omada Identity, One Identity Manager, Saviynt Enterprise Identity Cloud
against: CyberArk Identity Security Platform
Microsoft Entra ID Governance / Entra Suite
Two alternativesOne Identity Manager, SailPoint
against: Saviynt Enterprise Identity Cloud
SailPoint
Two alternativesOkta Identity Governance, Savant
against: ForgeRock, IBM Security Verify Governance, Microsoft Entra ID, Okta Identity Governance, Oracle IAM, SailPoint IdentityIQ
GLM 4.7 FlashXSailPoint
Four alternativesMicrosoft Entra ID Governance, Okta Identity Governance, One Identity Manager, Saviynt Enterprise Identity Cloud
SailPoint Identity Security CloudChanged
Five alternativesMicrosoft Entra ID Governance, Okta Identity Governance, One Identity Manager, Oracle Identity Governance, Saviynt Enterprise Identity Cloud
SailPoint IdentityIQ (On-Prem/Hybrid) & IdentityNow
Four alternativesIden, Okta Identity Governance, One Identity Manager, Saviynt Enterprise Identity Cloud
Microsoft Entra ID Governance
One alternativeOkta
against: SailPoint, Saviynt Enterprise Identity Cloud
no first choiceagainst: Hitachi ID, RSA
MiniMax M2.5Microsoft Entra ID, SailPointagainst: OktaSailPointChanged
Three alternativesMicrosoft Entra ID Governance, Okta Identity Governance, Saviynt Enterprise Identity Cloud
SailPoint Identity Security Cloud
Three alternativesOmada Identity, One Identity Manager, Saviynt Enterprise Identity Cloud
against: Microsoft Entra ID Governance, Okta Identity Governance
Microsoft Entra ID Governance
One alternativeOkta Identity Governance
against: SailPoint, Saviynt Enterprise Identity Cloud
no first choiceagainst: Okta Identity Governance, SailPoint IdentityIQ
Bold is the first choiceAlternatives are counted; the count opens them.What the answer argued against

05The record

One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency. Full answer text is in the free responses file. Download the record
Seventy-two rows: every prompt, every model, every answer.
PromptModelVersion stringTime (UTC)SearchedSourcesLatency
Direct recommendationClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 10:44no05 s
Direct recommendationGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 14:04yes49 s
Direct recommendationGemini 3.5 Flashgemini-3.5-flash2026-09-17 13:44yes1527 s
Direct recommendationPerplexity Sonarsonar2026-09-17 13:06yes206 s
Direct recommendationGrok 4.1 Fastspacexai/grok-4.1-fast-non-reasoning via vertex2026-09-17 09:22yes3015 s
Direct recommendationMistral Smallmistral/mistral-small via mistral2026-09-17 10:54yes129 s
Direct recommendationDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 10:41yes1012 s
Direct recommendationLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 10:42yes53 s
Direct recommendationQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 13:34no029 s
Direct recommendationKimi K2moonshotai/kimi-k2 via novita2026-09-17 14:04yes1926 s
Direct recommendationGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 10:45yes1530 s
Direct recommendationMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 13:18yes523 s
ParaphraseClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 13:46yes99 s
ParaphraseGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 10:26yes35 s
ParaphraseGemini 3.5 Flashgemini-3.5-flash2026-09-17 10:23yes1420 s
ParaphrasePerplexity Sonarsonar2026-09-17 10:49yes204 s
ParaphraseGrok 4.1 Fastspacexai/grok-4.1-fast-non-reasoning via vertex2026-09-17 11:40yes3615 s
ParaphraseMistral Smallmistral/mistral-small via mistral2026-09-17 11:08yes54 s
ParaphraseDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 10:44yes912 s
ParaphraseLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 09:27yes52 s
ParaphraseQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 09:53no037 s
ParaphraseKimi K2moonshotai/kimi-k2 via novita2026-09-17 09:36yes1025 s
ParaphraseGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 12:03yes1450 s
ParaphraseMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 12:45yes14120 s
ComparativeClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 13:03yes1611 s
ComparativeGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 11:10yes610 s
ComparativeGemini 3.5 Flashgemini-3.5-flash2026-09-17 13:47yes2331 s
ComparativePerplexity Sonarsonar2026-09-17 12:32yes209 s
ComparativeGrok 4.1 Fastspacexai/grok-4.1-fast-non-reasoning via vertex2026-09-17 13:06yes2919 s
ComparativeMistral Smallmistral/mistral-small via mistral2026-09-17 11:16yes99 s
ComparativeDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 13:48yes1816 s
ComparativeLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 11:26yes52 s
ComparativeQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 09:55no043 s
ComparativeKimi K2moonshotai/kimi-k2 via novita2026-09-17 12:48yes1463 s
ComparativeGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 09:32yes2461 s
ComparativeMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 13:05yes1835 s
Budget constrainedClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 09:27yes167 s
Budget constrainedGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 12:28yes36 s
Budget constrainedGemini 3.5 Flashgemini-3.5-flash2026-09-17 10:14yes1424 s
Budget constrainedPerplexity Sonarsonar2026-09-17 12:44yes205 s
Budget constrainedGrok 4.1 Fastspacexai/grok-4.1-fast-non-reasoning via vertex2026-09-17 12:49yes3420 s
Budget constrainedMistral Smallmistral/mistral-small via mistral2026-09-17 12:01yes54 s
Budget constrainedDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 12:00yes1916 s
Budget constrainedLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 10:42yes53 s
Budget constrainedQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 10:19yes544 s
Budget constrainedKimi K2moonshotai/kimi-k2 via novita2026-09-17 09:33yes2348 s
Budget constrainedGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 13:37yes3099 s
Budget constrainedMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 13:47yes1346 s
Scale constrainedClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 11:12yes1915 s
Scale constrainedGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 11:38no011 s
Scale constrainedGemini 3.5 Flashgemini-3.5-flash2026-09-17 13:55yes1325 s
Scale constrainedPerplexity Sonarsonar2026-09-17 14:00yes2011 s
Scale constrainedGrok 4.1 Fastspacexai/grok-4.1-fast-non-reasoning via vertex2026-09-17 13:10yes1415 s
Scale constrainedMistral Smallmistral/mistral-small via mistral2026-09-17 12:29no08 s
Scale constrainedDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 12:11yes3036 s
Scale constrainedLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 10:34yes54 s
Scale constrainedQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 12:45yes546 s
Scale constrainedKimi K2moonshotai/kimi-k2 via novita2026-09-17 10:33yes1529 s
Scale constrainedGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 09:43yes15152 s
Scale constrainedMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 14:05yes540 s
Negative framingClaude Haiku 4.5claude-haiku-4-5-202510012026-09-17 12:26yes1810 s
Negative framingGPT-5.4 minigpt-5.4-mini-2026-03-172026-09-17 09:29yes59 s
Negative framingGemini 3.5 Flashgemini-3.5-flash2026-09-17 13:58yes1022 s
Negative framingPerplexity Sonarsonar2026-09-17 10:31yes207 s
Negative framingGrok 4.1 Fastspacexai/grok-4.1-fast-non-reasoning via vertex2026-09-17 12:31yes3016 s
Negative framingMistral Smallmistral/mistral-small via mistral2026-09-17 10:35yes1612 s
Negative framingDeepSeek V4 Flashdeepseek/deepseek-v4-flash via fireworks2026-09-17 13:45yes2935 s
Negative framingLlama 4 Maverickmeta/llama-4-maverick via bedrock2026-09-17 12:48yes54 s
Negative framingQwen 3.7 Flashalibaba/qwen3.7-flash via alibaba2026-09-17 12:09yes1255 s
Negative framingKimi K2moonshotai/kimi-k2 via novita2026-09-17 10:07yes2534 s
Negative framingGLM 4.7 FlashXzai/glm-4.7-flashx via zai2026-09-17 09:58yes27165 s
Negative framingMiniMax M2.5minimax/minimax-m2.5 via minimax2026-09-17 09:36yes2253 s

Normalization in this category

Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.

Category-scoped readings
Microsoft Entra read as Microsoft Entra ID
Omada read as Omada Identity
Omada (Omada Identity Cloud) read as Omada Identity
Omada (Omada Identity) read as Omada Identity
One Identity read as One Identity Manager
One Identity (Delinea) read as One Identity Manager
One Identity (One Identity Manager) read as One Identity Manager
Ping read as Ping Identity
Saviynt read as Saviynt Enterprise Identity Cloud
Saviynt (Enterprise Identity Cloud) read as Saviynt Enterprise Identity Cloud
Saviynt Identity Cloud read as Saviynt Enterprise Identity Cloud
Tools4ever read as Tools4ever HelloID
Unresolved, counted raw
Avatier Identity Anywhere
Cakewalk
Efecte
ForgeRock Identity Governance
Microsoft Entra ID Governance / Entra Suite
Oracle IAM
Ping Identity One
Ping Identity PingFederate/PingAuthorize
SailPoint IdentityIQ (On-Prem/Hybrid) & IdentityNow (SaaS)
SailPoint IdentityIQ/IdentityNow
Savant
cloud-native SailPoint
Discontinued, still offered
No shut-down product was recommended here.
← CIAMMFA →