Microsoft Entra ID
Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.
Access Control
Identity governance and single sign-on
People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.
Addresses 138 stories in our coverage in the last 90 days 4 products that provide it
What it is
One identity provider for all applications (single sign-on), automated joiner, mover and leaver processes, and periodic access reviews.
How to value it
Accounts of former staff and contractors, and access that piles up over the years, are a quiet but common way in. Central identity makes offboarding immediate and provable, and turns access reviews from a spreadsheet exercise into a routine.
Questions to ask a vendor
- 1Can it remove access in all connected apps automatically when HR marks someone as leaving?
- 2How many of our SaaS apps support single sign-on and automated provisioning with it?
- 3Are access reviews built in, with evidence an auditor can use?
- 4How are contractors and service accounts handled?
For your risk register
- Risk
- Former staff or stale accounts used to access company systems.
- Control
- Single sign-on, an automated leaver process and quarterly access reviews.
- Owner
- Identity and access lead together with HR.
- Measure
- Accounts still active after the leave date.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Okta Workforce Identity
Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.
Omada Identity Cloud
Identity governance and administration delivered as a service.
SailPoint Human Fabric
Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.
Recent stories it addresses
332 stories in total- 16 Oct 2026AEPD (Spain) - PS-00028-2026
Spain's AEPD fines cycling federation €4,800 for data breach affecting 261,965 individuals.
- 16 Oct 2026Burger King Japan data breach exposes 11 million customer records
Burger King Japan data breach exposes 11.18 million customer records.
- 16 Oct 2026Norwegian DPA fines Xandr EUR 8 600 000 for unlawful processing of personal data
Norwegian DPA fines Xandr EUR 8.6M for unlawful processing of sensitive personal data.
- 15 Oct 2026CenterPoint Energy Data Breach Impacts 1 Million Texans
CenterPoint Energy data breach exposes personal information of over 1 million Texans.
- 14 Oct 2026BVwG - W292 2301903-1
Austrian court rules telco violated GDPR by failing to prevent identity fraud during contract conclusion.
- 14 Oct 2026Zero Trust in Practice: Moving Beyond the Buzzword
Article clarifies Zero Trust principles and practical implementation, emphasizing identity as the foundational element.
- 13 Oct 2026Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say
OpenAI employee arrested for planting listening device in conference room.
- 13 Oct 2026DOJ charges 14 over a sprawling North Korean remote work scheme
DOJ charges 14 in North Korea remote work scheme funneling $3M to Pyongyang.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.