# entrust

Source: https://startwithidentity.com/vendors/iam/entrust/
Last updated: 2026-06-19
License: content by Start with Identity. Cite the source URL.

---

## Overview

Entrust is a long-established security vendor spanning IAM, PKI, payment-card issuance, and identity verification. Its 2024 acquisition of Onfido pulled document and biometric verification into the portfolio, positioning it as a credential-to-onboarding player rather than a pure access-management vendor. It competes on the combination of identity, certificates, and verification under one roof more than on access-management depth against platforms like [Okta](https://startwithidentity.com/vendors/iam/okta/) or [Ping Identity](https://startwithidentity.com/vendors/iam/ping-identity/).

## What it is good at

The strengths are credentialing, certificate and PKI depth, and hardware-backed trust, which suit governments and regulated enterprises that need strong identity assurance. Adaptive MFA and passwordless are solid, and the Onfido addition gives genuine document and biometric verification for high-assurance onboarding. For organizations that want issuance, credentials, and verification from a single accountable vendor, the breadth is a real advantage.

## Where it falls short

The access-management layer is less developer-friendly than Okta or [Microsoft Entra](https://startwithidentity.com/vendors/iam/microsoft-entra/), authorization beyond role basics is thin, and the sheer breadth of the portfolio (PKI, cards, IAM, verification) can make deployments feel heavy and the product story diffuse. Buyers wanting a lean, API-first identity platform will find it more than they need.

## Pricing

Quote-based and sales-led. Expect enterprise contracts and professional services rather than transparent per-user tiers. Model the full engagement with our [TCO calculator](https://startwithidentity.com/tools/tco-calculator/).

## Best for, and who should look elsewhere

Choose Entrust when you want identity, PKI, and verification under one roof in a regulated environment needing strong credentialing and hardware-backed trust. Look elsewhere if you want a developer-first, API-led platform or transparent self-serve pricing. See the [IAM directory](https://startwithidentity.com/vendors/iam/) and the [what is IAM](https://startwithidentity.com/guides/fundamentals/what-is-iam/) guide.

## Bottom line

A strong pick when you want identity, PKI, and verification together in a regulated environment, less so for a lean, API-first build.