| Category | Function | Share | Rank | Negative rate | Labels | Quadrant |
|---|---|---|---|---|---|---|
| Workforce identity and SSO | Identity and access | 36% | 1 of 48 | 13% | 63 | endorsed leader |
| Multi-factor authentication | Identity and access | 30% | 2 of 78 | 2% | 49 | endorsed leader |
| Privileged access management | Identity and access | 2% | 10 of 74 | 0% | 2 | under 10 labels · led by ManageEngine PAM360 at 21% |
| Customer identity and access management | Identity and access | 2% | 14 of 74 | 0% | 1 | under 10 labels · led by Auth0 at 22% |
| Identity governance | Identity and access | 2% | 16 of 77 | 14% | 7 | under 10 labels · led by Lumos at 20% |
| Zero trust network access | Network and edge | 0% | 23 of 71 | 0% | 3 | under 10 labels · led by Cloudflare One at 35% |
| Business password managers | Identity and access | 0% | 17 of 35 | 0% | 1 | under 10 labels · led by Bitwarden at 49% |
| SASE platforms | Network and edge | 0% | 31 of 43 | 0% | 1 | under 10 labels · led by Cato SASE Cloud at 28% |
| Model | First choice | Alternative | Mention | Negative | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 3 | 3 | 5 | 0 | 11 |
| GPT-5.4 mini | 8 | 2 | 2 | 0 | 12 |
| Gemini 3.5 Flash | 7 | 3 | 0 | 1 | 11 |
| Perplexity Sonar | 2 | 6 | 2 | 2 | 12 |
| Grok 4.1 Fast | 5 | 5 | 1 | 0 | 11 |
| Mistral Small | 1 | 3 | 2 | 1 | 7 |
| DeepSeek V4 Flash | 5 | 4 | 1 | 1 | 11 |
| Llama 4 Maverick | 2 | 3 | 4 | 0 | 9 |
| Qwen 3.7 Flash | 5 | 5 | 1 | 2 | 13 |
| Kimi K2 | 2 | 7 | 1 | 1 | 11 |
| GLM 4.7 FlashX | 5 | 2 | 1 | 1 | 9 |
| MiniMax M2.5 | 2 | 6 | 1 | 1 | 10 |
Verbatim evidence the judge attached to positive labels.
“Microsoft shop: Start with Microsoft Entra ID MFA + Conditional Access — cheapest, deep integration, passkey support. This is often the pragmatic default.” DeepSeek V4 Flash · MFA · scale prompt · first choice
“Choose Microsoft Entra ID if you are already a Microsoft-centric shop; the financial integration and native OS/security synergy are too strong to ignore.” Gemini 3.5 Flash · Workforce identity · comparative prompt · first choice
“Leaders to Prioritize (Lower Relative Risk): Microsoft Entra ID (ecosystem lock-in but top execution in Gartner/Forrester; watch non-MS integrations)” Grok 4.1 Fast · Workforce identity · negative prompt · first choice
“Choose Microsoft Entra ID if you are already a 90%+ Microsoft shop and want to consolidate your budget using your existing licensing.” Gemini 3.5 Flash · MFA · comparative prompt · first choice
Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.
“Caution: Microsoft's deep integration creates significant vendor lock-in risk, and the platform's complexity leads to frequent misconfigurations.” Kimi K2 · Workforce identity · negative prompt · soft negative
“Microsoft's identity platform has also faced vulnerabilities: Critical Vulnerabilities... multiple critical CVSS 10.0 vulnerabilities” MiniMax M2.5 · Workforce identity · negative prompt · soft negative
“it can be less polished outside of it. Advanced governance and identity protection features are often locked behind higher-tier plans” Mistral Small · Workforce identity · negative prompt · soft negative
“Offers the best value only if you're fully invested in the Microsoft stack. Non-Microsoft integrations are often less polished” Qwen 3.7 Flash · Workforce identity · negative prompt · soft negative
Citations exist only for the models that return a source list, four of the twelve in this edition, so these counts come from 304 of the 385 answers that named Microsoft Entra ID and are not a share of its labels.
826 of the 826 domain citations in answers naming Microsoft Entra ID came from somebody else's page.
Pages are listed as the models cited them.
Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Microsoft Entra ID's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Microsoft Entra ID, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.
It does not get any change to labels, shares or verdicts, any preview, or any say over which quotes appear. A verification link goes to your work email; an address at microsoft.com is approved on the spot, any other address is reviewed by hand.
Your name and company appear on the claimed page, or the company alone if you ask below. A title and a LinkedIn address appear there too if you give them, and are left off if you do not. Your email address is never published.