# Identity governance: what AI models recommend, September 2026

IT AI Recommendation Index, September 2026 Edition. Asked as "identity governance platform" and as "identity governance and administration tool", six framings each, to twelve models with search on, on behalf of a mid-market B2B company. Page: https://it-ai-index.com/identity/identity-governance/

**Standing:** Lumos leads with 20% of first choices; verdict contested. 59 first choices across the direct, paraphrase, budget and scale prompts.

## First-choice share

| # | Product | Share | Negative rate | Labels |
|---|---|---|---|---|
| 1 | Lumos | 20% | 0% | 23 |
| 2 | Microsoft Entra ID Governance | 12% | 18% | 38 |
| 3 | Iden | 8% | 0% | 13 |
| 4 | ConductorOne | 8% | 10% | 10 |
| 5 | Zluri | 7% | 0% | 18 |
| 6 | Okta Identity Governance | 3% | 34% | 35 |
| 7 | One Identity Manager | 3% | 35% | 23 |
| 8 | SailPoint | 3% | 67% | 42 |
| 9 | Omada Identity | 2% | 0% | 17 |
| 10 | Saviynt Enterprise Identity Cloud | 2% | 59% | 41 |

## Each model's first choice on the direct prompt

- Claude Haiku 4.5: Zluri; alternatives ManageEngine AD360
- GPT-5.4 mini: Saviynt Enterprise Identity Cloud; alternatives Microsoft Entra ID Governance, Okta Identity Governance
- Gemini 3.5 Flash: ConductorOne; alternatives CyberArk IGA, Lumos, Microsoft Entra ID Governance, Okta Identity Governance
- Perplexity Sonar: Corma, Iden; alternatives Lumos, Okta Identity Governance, SailPoint, Saviynt Enterprise Identity Cloud
- Grok 4.1 Fast: Lumos; alternatives Omada Identity, Zluri, tenfold
- Mistral Small: Lumos; alternatives Omada Identity, OneLogin, Zluri, tenfold
- DeepSeek V4 Flash: Lumos, Zluri; alternatives ConductorOne, Microsoft Entra ID Governance, Omada Identity, Opal Security
- Llama 4 Maverick: no first choice
- Qwen 3.7 Flash: ConductorOne, Lumos; alternatives One Identity Manager
- Kimi K2: Iden, Lumos; alternatives OneLogin, Opal Security, Zluri
- GLM 4.7 FlashX: Omada Identity; alternatives AccessOwl, Microsoft Entra ID Governance, Saviynt Enterprise Identity Cloud
- MiniMax M2.5: Lumos, Zluri; alternatives Iden, OneLogin, Opal Security

## Sources the answers cite

64 of 72 answers came back with a source list, from 12 of 12 models. Sites named in the most answers:

- gartner.com: 34 answers, 53 citations
- idenhq.com: 31 answers, 47 citations
- expertinsights.com: 29 answers, 31 citations
- aimultiple.com: 27 answers, 27 citations
- corma.io: 26 answers, 32 citations
- solutionsreview.com: 25 answers, 28 citations
- zluri.com: 22 answers, 40 citations
- startwithidentity.com: 21 answers, 28 citations

Pages named in the most answers:

- https://gartner.com/reviews/market/identity-governance-administration (33 answers)
- https://aimultiple.com/iga-solutions (27 answers)
- https://expertinsights.com/identity-and-access-management/top-identity-governance-and-administration-solutions (24 answers)
- https://corma.io/blog/best-iga-solutions-for-mid-market-companies (23 answers)
- https://solutionsreview.com/identity-management/the-best-identity-governance-tools-and-vendors-2 (21 answers)
- https://linx.security/blog/top-10-iga-tools-a-modern-identity-governance-buyers-guide (19 answers)
- https://oneidentity.com/learn/top-5-identity-governance-and-administration-tools-in-2025.aspx (15 answers)
- https://accessowl.com/blog/buyers-guide-for-iga-tools-by-team-size (13 answers)
- https://idenhq.com/en/blog/identity-governance-and-administration-complete (13 answers)
- https://securityboulevard.com/2025/12/top-12-identity-and-access-management-platforms (12 answers)

## Warned against

- SailPoint: 28 of 42 labels negative. "If you are under 500 employees, avoid enterprise giants like SailPoint; the administrative overhead will crush your team." (Qwen 3.7 Flash, paraphrase prompt)
- Saviynt Enterprise Identity Cloud: 24 of 41 labels negative. "heavy legacy enterprise platforms (like SailPoint IdentityIQ, Saviynt, or One Identity)" (Gemini 3.5 Flash, scale prompt)
- Okta Identity Governance: 12 of 35 labels negative. "Okta Identity Governance: $108-$132/user/year — expensive for its feature set" (DeepSeek V4 Flash, budget prompt)
- One Identity Manager: 8 of 23 labels negative. "heavy legacy enterprise platforms (like SailPoint IdentityIQ, Saviynt, or One Identity)" (Gemini 3.5 Flash, scale prompt)

## Record

- Method: https://it-ai-index.com/methodology/
- Raw judge labels and full responses: https://it-ai-index.com/data/
- License: CC BY 4.0. Cite as IT AI Recommendation Index, September 2026 Edition, it-ai-index.com.