IGA Tools Compared: Five Platforms Scored Side by Side

This is a side-by-side scorecard rather than a shopping list. Five identity governance platforms scored against one rubric.

Where this category splits

Two different problems get sold as IGA, and buying the wrong one is expensive.

Lifecycle and certification platforms (SailPoint, Saviynt, Omada, One Identity) automate joiner-mover-leaver, run access certification campaigns, and produce the audit evidence. They are connector-driven, and connector coverage against your worst legacy application matters more than any feature list.

Access visibility and graph tools (Veza) start from the opposite end: what effective permissions actually exist right now, across systems that traditional connectors model poorly. They answer who can reach this data, rather than whether this access was approved.

If your driver is an audit finding, you need the first. If your driver is not knowing what access exists, the first will take eighteen months to tell you and the second will tell you in weeks.

What has changed in the market

Ownership is unusually unsettled here. One Identity announced in June 2026 that it will separate from Quest Software and operate independently from Cork, Ireland, and the post-separation owner has not been disclosed. Saviynt raised 700 million dollars led by KKR in December 2025 at roughly a 3 billion dollar valuation. SailPoint acquired Entro Security in June 2026, adding non-human identity discovery. For a platform you will run for five years, ask where your contract lands.

How to read these scores

Every vendor here is scored on the same 10-dimension rubric. Scores are comparative within the category, not absolute: a 4.5 means strong relative to peers solving the same problem.

Three things the scores deliberately do not capture. They do not price your deployment, because most vendors in this category quote rather than publish. They do not measure fit with your existing stack, which is usually what actually decides it. And they do not predict vendor stability, which in identity has mattered more than features lately given the pace of consolidation.

Use this to narrow a field to two or three candidates on capability, then pilot against your worst case rather than the vendor's reference architecture.

Where to go next

For the full field, see top 7 identity governance platforms. For self-hosted options, see top 5 open-source IGA tools. For the evaluation process, see how to choose an IGA platform. To browse every profile, see the identity governance vendor directory.