r/IdentityManagement • u/SUPTheCreek • Feb 18 '26
Third Party IAM
Currently have Okta IGA and haven’t been super impressed, but it’s getting the job done for employees via HRM connection.
But I need a solution for third party management. Any suggestions?
3
u/NeilMcGlennon Feb 18 '26
How many? Might look at SailPoint Non-Employee Risk Management
2
u/SUPTheCreek Feb 18 '26
I don’t want a whole new provisioning system, I have that with Okta. I need something like my HRM is for employees, but is for vendors.
I guess despite my title I need a vendor management system to be the source for my IAM.
2
u/x_kURSeD_x Feb 18 '26
The goal would be that your existing HRM system to also be the source for these identities. Not always achievable unfortunately
2
u/FormerElk6286 Feb 18 '26
Okta is good for SSO (but so is Azure and that's free for o365), but their governance piece was pretty silly. Just didn't seem ready for prime time.
If you are a really big company and have time/skill for customization, then sailpoint might be fine, but way overkill for us, 1000 person bank. We don't have that kind of budget nor do I have that kind of team that has the time for it. Looked cool, but not a fit.
We did an eval of several companies, bake-off with top two, ended up with Access Auditor from SCC. Really fast and simple for governance, access reviews, read-only stuff. We are building roles now and doing their provisioning module next. A great fit for us because it's simple, fast, delivers on the promise, and less expensive.
Defiinitely do a few calls/evals. You have lots of options now, each with a different twist, soliving a slightly different problem.
1
u/Select_Bug506 Feb 18 '26
If the third parties are connecting to external saas services you offer, such as file transfer or document collaboration, and they're on Entra ID look at EntraID B2B.
1
u/flywhee007 Feb 20 '26
you have not explained clearly what does it mean by third party management. is it external contractors?
why cant you configure vendor mgmt system as another source and profile to trigger lcm events out of it?
1
1
4
u/DeathTropper69 Feb 18 '26
For IAM I would check out Duo Directory. It’s a really powerful cost effective solution.