Soffid Identity Governance Administration

Overview

Soffid Identity Governance Administration (IGA) is identity-governance software for organizations that need to manage access across employees, outside users, and service identities. It is best suited to teams prepared to own access reviews and role upkeep over time.

Its strongest case is the combination of account lifecycle automation and auditable approval and certification processes; its main trade-off is the ongoing governance work those controls require.

For category comparisons, see Identity Governance Software.

Key features

Soffid IGA connects account provisioning with controls over what identities can access. It supports access policies, role-based access control, least privilege, and segregation of duties, alongside access requests and approval workflows. These capabilities suit organizations that need a managed path for granting access and a way to address conflicting permissions.

• Lifecycle automation: Automates account creation, modification, and deletion, reducing the need to handle each identity change as a separate manual task.
• Certifications and audit trails: Certification and recertification workflows let teams review access, while records of identity-related actions support audit work.
• Broad identity coverage: The system covers internal and external users as well as non-human identities such as applications, APIs, and services.
• Integrations: Pre-built connectors cover directories such as AD and Azure AD/Entra, cloud applications, and HR systems. A custom-integration framework extends that reach; documented JSON REST connector examples include Jira, Office 365, AWS, Google Cloud, and Oracle Field Service Cloud.
• Deployment and assurance: Organizations can deploy IGA on their own servers or as a cloud-based solution. Soffid states that it holds ENS High and Common Criteria EAL2 + ALC CCL certifications for identity management. Its IGA product page names GDPR and SOX among the regulations its capabilities address.

These controls are not set-and-forget: certification campaigns, exception reviews, and role maintenance need continuing governance ownership after go-live. Organizations without staff to sustain that work may find the operational commitment outweighs the automation benefit.

Pricing

Soffid’s IGA pricing is custom pricing; the company describes its pricing model as paid. The Open-source binary components option is free: binary downloads are free with registration, while source code downloads require no registration. These are downloadable components, not a stated free IGA plan, so they should not be treated as a no-cost substitute for a deployed governance program.

Soffid also offers a free trial of its IDaaS converged IAM platform, but gives no trial duration. That is a way to evaluate the broader platform, not a stated duration or terms for an IGA-only trial. Request pricing for the product itself before comparing total costs.

Platforms

Soffid lists API, Linux, self-hosted, web, and Windows support. The choice of customer-server deployment or cloud-based delivery gives organizations flexibility over where IGA runs. Separately, Soffid’s Enterprise Single Sign-On download description says desktop access control is available for Linux and Windows.

Who it's for

Soffid names government, banking and financial services, and healthcare among the industries its IGA solution serves. Its mix of lifecycle controls, access reviews, and audit records is most relevant to organizations managing many identity types or formal access-governance processes. Teams should also be ready to maintain roles, review exceptions, and run certification campaigns continuously.

Pros and cons

• Pro — Governance spans the identity lifecycle: Provisioning, requests, approvals, certification, and audit trails sit alongside access controls rather than being limited to account creation.
• Pro — Covers non-human identities: Applications, APIs, and services are included alongside internal and external people, useful where access is not confined to employees.
• Pro — Flexible deployment and integration: Customer-server or cloud deployment, pre-built connectors, and a custom-integration framework support varied environments.
• Con — Requires ongoing ownership: Reviews, exceptions, and role maintenance continue after launch, so organizations need governance capacity, not just implementation resources.
• Con — IGA cost is not predictable from a published plan: Pricing is custom, and free binary components do not amount to a free IGA plan.

Alternatives

Corma is a better fit for readers seeking a freemium option: its free plan includes an identity-provider connection, browser extension, SSO connection, and 10 apps; its Essential plan is €3 a month, billed annually.

Oracle Cloud Infrastructure Secret Management is worth considering when the need is specifically secrets management rather than broad identity governance. Its free plan allows 5,000 secrets per tenancy and 30 active secret versions per secret, with 30 versions pending deletion.

Okta Lifecycle Management suits buyers comparing a paid lifecycle-management product with a published entry price: Essentials is $17 a month per user, billed annually, and includes Lifecycle Management and 50 Workflows, with a $1,500 annual contract.

SailPoint IdentityIQ is another paid identity-governance option; its IdentityIQ term subscription typically uses three-year contracts with annual billing upfront.

Saviynt Enterprise Identity Cloud offers paid Essentials and Pro plans for readers comparing another enterprise identity-cloud option; both have custom pricing.

ConductorOne is an alternative with usage-based Flex pricing billed monthly, where billable events consume C1 Tokens, as well as a Platform pricing option.

EmpowerID Identity Governance offers modular licensing for on-premises or SaaS deployment, with most modules licensed per non-deleted managed human person.

Avatier Identity Anywhere is a paid alternative with separate Password Management and Single Sign-On plans at $1.50 a month and $2 a month, respectively; both require a minimum one-year commitment.

Verdict

Choose Soffid IGA if your organization needs lifecycle automation paired with access approvals, recurring certifications, and controls across human and non-human identities—and can dedicate people to ongoing governance. Look elsewhere if a predictable published IGA price or a low-maintenance deployment is the priority.