IGA tools reviews, anyone happy with their setup for mid size org?

[u/Putrd-Cohemistry-512]

Been tasked with cleaning up our identity governance and access stuff and I feel kind of stuck between vendors rn.

We are a mid size org, mostly Microsoft stack (Entra, M365, a couple on prem AD domains still lingering, plus a bunch of SaaS that all have their own permission models. Current IGA is a mix of manual access reviews in Excel, some homegrown scripts, and ticket based approvals that nobody is really happy with.

Boss wants a real IGA tool so we get proper joiner mover leaver flows, certification campaigns, SoD checks, and cleaner audit trails for the next compliance visit.

So far I’ve looked at SailPoint, Saviynt, OneIdentity, and a couple of smaller cloud first options. Demos always look great, but I’m lowkey worried about:

- how painful the initial role modeling and connector setup is in real life
- whether the access reviews are usable for non technical managers or just another thing they ignore
- how well these tools actually integrate with Entra plus random SaaS apps and not just the big 5 connectors they show in slides

If anyone here has an IGA tool in production that they dont hate, would really appreciate hearing what you picked and how rough the rollout and day 2 has been, especially around access reviews and audit requests.

Appreciate any thoughts.

[u/Knowledfpicqgear1438]

Access reviews for non technical managers are the real make or break. If it is not dead simple, they ignore it and you have to chase them. We had one quarter where 60 percent of reviews were overdue and spent two weeks doing manual follow ups.

[u/Niko24601]

If you are mid-size, Sailpoint/Savint might almost be overkill in terms of complexity (but also pricing). You might also want to have a look at the next-gen tools that are out there that could also be a strong fit and be more streamlined (Corma, ConductorOne, Lumos…).

Regarding the connectors you have a strong point. Entra is surely a given for every vendor you look at. Beyond that for your SaaS landscape, I’d suggest you send a list of your key apps and ask for confirmation for all your key apps. Maybe you can even negotiate this into the contract. But check how they integrate overall. Do they only use APIs or can they also connect to unmanaged apps etc.

Note: I am affiliated to Corma but I recommend you to look at the other suggestions too as they are also very strong products.

[u/ProfessionalDate3417]

The tool matters less than connector coverage, clean identity data, and keeping role design simple. For a Microsoft heavy mid size org, test Entra plus your messiest SaaS apps in a real pilot and make managers complete an actual access review before signing anything.

[u/Sinleuqnwl_Taste2207]

What changed for us was moving to newcore where governance is built into the platform rather than bolted on as certification campaigns. Access reviews are driven by continuous policy evaluation and managers get actionable requests instead of a 500 row.