GigaOm Radar for Identity and Access Managementv1.0

1. Executive Summary

Identity and access management (IAM) technology ensures that only authorized users have access to specific resources within an organization. IAM solutions serve a wide range of use cases for organizations, enabling customers, employees, and partners to achieve their goals.

With the rapid adoption of cloud services, the increasing complexity of IT environments, and the shift to remote work, attack surfaces have dramatically expanded. Credentials are now a prime target for attackers, as evidenced by incidents like the 2021 Colonial Pipeline ransomware attack, when a single compromised VPN password led to widespread disruption, and the 2018 Marriott breach, which resulted from compromised employee credentials. Weak or stolen credentials, combined with poor IAM governance, enable privilege escalation and unauthorized access, making IAM a top priority for businesses. IAM matters to IT leaders, security professionals, and compliance teams who must safeguard sensitive data, maintain user trust, and meet regulatory requirements.

For the C-suite, IAM represents more than just a security tool; it also enables organizations to manage the ways their stakeholders access their systems. The lack of visibility and governance in identity management can lead to costly breaches, regulatory penalties, and reputational damage. Effective IAM solutions offer robust access controls, continuous verification, and contextual monitoring to minimize risks without impeding productivity. By adopting IAM solutions, organizations can achieve secure and frictionless access to resources by users and machine identities, reduce operational overhead by automating workflows and business processes, and remain ever vigilant against cybersecurity threats.

Implementing a robust IAM strategy is no longer optional for any organization. It has become a fundamental requirement for organizational health and resilience. By treating identity as the new security perimeter, businesses can protect their most valuable assets while continuing to provide services and remain innovative.

This is our first year evaluating the identity and access management space in the context of our Key Criteria and Radar reports. This GigaOm Radar report examines 17 of the top IAM solutions and compares offerings against the capabilities (table stakes, key features, and emerging features) and nonfunctional requirements (business criteria) outlined in the companion Key Criteria report. Together, these reports provide an overview of the market, identify leading IAM offerings, and help decision-makers evaluate these solutions so they can make a more informed investment decision.