No more typing reviews! Try our Samantha, our new voice AI agent.

OpenIAM Identity Governance vs Ping Identity Platform vs SailPoint Identity Security Cloud comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

User Provisioning Software Mindshare Distribution
ProductMindshare (%)
OpenIAM Identity Governance2.8%
SailPoint Identity Security Cloud19.3%
One Identity Manager9.5%
Other68.4%
User Provisioning Software
Authentication Systems Mindshare Distribution
ProductMindshare (%)
Ping Identity Platform3.2%
Microsoft Entra ID6.5%
Okta Platform4.8%
Other85.5%
Authentication Systems
Identity Governance Administration (IGA) Mindshare Distribution
ProductMindshare (%)
SailPoint Identity Security Cloud29.6%
Saviynt Identity Cloud17.7%
Omada Identity12.1%
Other40.6%
Identity Governance Administration (IGA)
 

Featured Reviews

SM
Lead Consultant at a security firm with 51-200 employees
Manages user identities and application access in a centralized way from a single console/portal
OpenIAM provides an Identity and Access Management platform which includes identity and access management (i.e., SSO, Multi-factor Authentication, password synchronization, and RBAC). Below are the features : Lower Cost of Implementation & Total Cost of Ownership: * OpenIAM uses tools, such as Groovy script to implement business rules, Grails to create new UI functionality, Activiti for workflow, PowerShell, etc. It also support web services. So it is important to find skilled technical resources readily and at reasonable cost in comparison to the large vendors, which use proprietary tools for developing custom connector or product customization as per business requirement. * OpenIAM is also based on Open Source technologies (i.e., JBoss, Apache, MySQL, CentOS), so Total Cost of Ownership is very low in comparison to other IAM products. * Compliance with standards simplifies integration. * Subscription-based license model. Ease of Use: OpenIAM offers a single unified Admin console and a single unified self-service portal for customers to use and manage the IAM suite (i.e. Identity Management, Access Management, and Multi-Factor Authentication). Modern Architecture: * Built from the ground up, not through acquisitions and proprietary technology. * SOA architecture * Cloud-enabled Enterprise Grade Product: Even though OpenIAM is based on Open Source technologies, it is: * Built on industry standards * Simplified integration * Uses established industry frameworks
AmitRathod - PeerSpot reviewer
Senior Analyst at Toll Holdings Limited
Single sign-on has simplified access while adaptive authentication protects complex user journeys
Regarding areas for improvement in Ping Identity Platform, there is not much. In terms of licensing and implementation costs, it has premium pricing, and it has a very complex implementation. It provides greater feasibility, but it takes a very long time in terms of complete building. There is a very limited number of legacy support, which can pose potential difficulties in integrating with certain older or legacy systems. Additionally, issue troubleshooting can be difficult at times. Sometimes issues can be difficult to diagnose and require extensive technical expertise. There is also a very steep learning curve for administrative purposes and potential difficulties with offline authentication scenarios.
ND
Principle at a manufacturing company with 10,001+ employees
User access management excels but needs enhancements with integration capabilities
I was aware of that because I used to manage these solutions earlier on, but it was purchased by the Procurement team, so I was not involved in any of those.There are certain details I may not be able to disclose currently, but we can speak in general about a number of products and tools that are ongoing. I have not been using access management controls here, so I don't have the latest features or details or hands-on experience in that space. I cannot share all the details about the improvements in security operations since we were exploring some products, but I'm familiar with Saviynt as I was one of their partners for other solutions, and currently, I cannot disclose a lot of performance related to my current roles.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Customer support is very good and available in almost all time zones."
"It is a scalable solution."
"The most valuable feature is multifactor authentication."
"Ping Identity Platform demonstrates strong stability, as it is not prone to bugs, with the development team consistently fixing issues, making it highly recommended by many clients."
"I find the auto-discovery feature the most valuable. It helps us automate a lot of things using a single password across applications."
"People use the solution to secure their applications and authenticate particular processes."
"I like the self-service feature. The 502 and UBP systems are also excellent. PingID's ability to authenticate with SSH, RDP, and Windows login is pretty handy. It covers the entire spectrum of use."
"PingFederate is a good product but there are limitations."
"It's convenient for users to log in through Ping using the Kerberos adapter because it doesn't require them to authenticate again."
"​The Certification and Provisioning features are most valuable."
"IdentityIQ is pretty stable compared to our previous solution, and we're satisfied with the performance."
"The compliance features are the most valuable features."
"What I like most about SailPoint IdentityIQ is that it's simple to use and easy to configure and deploy."
"It significantly reduces the workload for certification processes."
"We like the integration with other systems."
"By using this product the organization has moved from manual access governance done previously to automated governance which has a full audit trail, and this is very beneficial."
"The governance features, such as certification and provisioning, are the most beneficial for enhancing security."
 

Cons

"OpenIAM should improve the product/API documentation on portal which gives more flexibility to developers for product customization and connector development."
"One significant challenge was ensuring smooth user migration during system upgrades in Ping."
"Notifications and monitoring are two areas with shortcomings in the solution that need improvement."
"The solution should allow for better integration with other platforms and the UBT."
"The product is not customizable."
"PingID's device management portal should be more easily accessible via a link. They provide no link to the portal like they do for the service. The passwordless functionality could be more comprehensive. You can't filter based on hardware devices. Having that filtering option would be great. Device authentication would be a great feature."
"The management console needs to be improved. PingID should revise it."
"We can choose a drop-down to search for which certificate we have to create, which is difficult."
"It has a long way to go until it is a cloud-based solution."
"The product’s cloud offering could be flexible."
"In the past, we had a lot of problems with SailPoint IdentityIQ, particularly in providing access and provisioning. There were some gaps in the operation of the solution because they were manual rather than automated, and the users and administrators were given access directly via Active Directory, and it wasn't appropriate for us at the time to use. In terms of integration, we could provide a more automated solution after a minimum number of years, but not in the SailPoint IdentityIQ platform, but there were problems in the registration, for example, with putting information inside ADP, but in general, we were able to solve those problems, and after implementing SailPoint IdentityIQ we had increased evaluations."
"One needs to understand that SailPoint is into full-fledged IAM practice with a long-term vision, and customers will get a quick ROI with best practices implementation."
"There are various functions that don't work in IdentityIQ, including the access request reminder, which doesn't go to the approvals in the proper format, so it's hard for users to read."
"What it doesn't do is provide notice in the event of a vulnerability or offense from the security."
"Finding integration experts for SailPoint in the North American market can be challenging, and transitioning to a no-code or low-code setup could reduce dependence on specialized skills."
"The advanced provisioning features require more improvement."
"What it doesn't do is provide notice in the event of a vulnerability or offense from the security."
 

Pricing and Cost Advice

Information not available
"The platform's value justifies the pricing, especially considering its security features and scalability."
"Ping Identity Platform is not very expensive."
"PingID's pricing is pretty competitive."
"PingID pricing is a ten out of ten because it's a little bit cheaper than other tools, such as Okta and ForgeRock, and supports multiple tools."
"Compared to some SaaS-based solutions, the platform is relatively cost-effective."
"The product is costly."
"Ping offers flexible pricing that's not standardized."
"Ping Identity Platform is not an expensive solution."
"We pay an annual licensing cost for SailPoint IdentityIQ."
"It is affordable licensing."
"I rate the solution a seven on a scale where one is cheap and ten is too expensive. In short, the solution falls under the higher side of pricing."
"They are expensive."
"You are able to get discounts if you plan to use the tool for the long-term i.e. discounts for 5+ years of usage."
"Its price is okay. It provides good value for money. It is subscription-based. You can go for a one-year or three-year subscription."
"Usually, the cost of deploying about 5,000 licenses or 5,000 users, would be the equivalent to the cost of the license, which would be reaching up to around $90,000."
"It's all competitive. Initially, the prices look a bit higher, but once it gets into a competitive situation, they meet the market. I'd rate it an eight out of ten in terms of pricing. It tends to be more expensive, but it works."
report
Use our free recommendation engine to learn which User Provisioning Software solutions are best for your needs.
895,151 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
University
15%
Construction Company
11%
Outsourcing Company
9%
Government
8%
Financial Services Firm
21%
Retailer
9%
Manufacturing Company
8%
Computer Software Company
7%
Financial Services Firm
16%
Manufacturing Company
9%
Computer Software Company
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise2
Large Enterprise22
By reviewers
Company SizeCount
Small Business21
Midsize Enterprise8
Large Enterprise43
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for PingFederate?
Regarding pricing for Ping Identity Platform, I would rate it eight out of ten.
What do you like most about PingAccess?
PingFederate is very flexible. We can do many customizations, and it also provides an SDK to tailor it to our specifi...
What needs improvement with PingAccess?
Regarding areas for improvement in Ping Identity Platform, there is not much. In terms of licensing and implementatio...
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...
What advice do you have for others considering SailPoint IdentityIQ?
You can use SailPoint Atlas to take identity security to the next level. In SailPoint IIQ, writing a custom connector...
 

Also Known As

OpenIAM, OpenIAM IGA
Ping Identity (ID), PingFederate, PingAccess, PingOne, PingDataGovernance, PingDirectory, OpenDJ
IdentityIQ, IdentityNow, Cloud Infrastructure Entitlement Management, Intello
 

Overview

 

Sample Customers

Citicorp, Deutsche Bank, Morgan Stanley, Marsh and McLennan, SBC Warburg, GE Electric Insurance, Tata Communications, NettBuss, AMSCAN, Time Warner, MultiPlan, Stater Bros., County of Orange - California, TUI Hotels, NV Energy, EMCOR Group, Previred
Equinix, Land O'Lakes, CDPHP, Box, International SOS, Opower, VSP, Chevron, Truist, Academy of Art University, Northern Air Cargo, Repsol
Adobe, AXA Technology Services, Cuna Mutual Group, Equifax, ING Direct, Orrstown Bank, Rockwell Automation, SallieMae, Spirit Aerosystems, TEL
Find out what your peers are saying about One Identity, SailPoint, Omada and others in User Provisioning Software. Updated: May 2026.
895,151 professionals have used our research since 2012.