Microsoft Entra ID
Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.
Access Control
Identity governance and single sign-on
People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.
Addresses 164 stories in our coverage in the last 90 days 4 products that provide it
What it is
One identity provider for all applications (single sign-on), automated joiner, mover and leaver processes, and periodic access reviews.
How to value it
Accounts of former staff and contractors, and access that piles up over the years, are a quiet but common way in. Central identity makes offboarding immediate and provable, and turns access reviews from a spreadsheet exercise into a routine.
Questions to ask a vendor
- 1Can it remove access in all connected apps automatically when HR marks someone as leaving?
- 2How many of our SaaS apps support single sign-on and automated provisioning with it?
- 3Are access reviews built in, with evidence an auditor can use?
- 4How are contractors and service accounts handled?
For your risk register
- Risk
- Former staff or stale accounts used to access company systems.
- Control
- Single sign-on, an automated leaver process and quarterly access reviews.
- Owner
- Identity and access lead together with HR.
- Measure
- Accounts still active after the leave date.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Okta Workforce Identity
Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.
Omada Identity Cloud
Identity governance and administration delivered as a service.
SailPoint Human Fabric
Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.
Recent stories it addresses
393 stories in total- 13 Nov 2026How one AI agent exposed five critical enterprise security gaps
AI agent processing invoices exposed five critical enterprise security gaps.
- 13 Nov 2026Suspected North Korean IT workers reached onboarding at companies with open data
North Korean IT workers infiltrated companies, reaching onboarding with access to sensitive data.
- 12 Nov 2026Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry
Critical Red Hat Quay flaw allows attackers to read/overwrite private container images.
- 12 Nov 2026Who collects the keys when an AI agent retires?
AI agents require formal offboarding processes similar to human employees to manage access and ongoing tasks.
- 11 Nov 2026Hackers Could Abuse Microsoft Entra AI Agents to Hijack Enterprise Accounts Without Stealing Passwords
Hackers can hijack enterprise accounts by tricking users into approving fake AI agents.
- 11 Nov 2026AI Hacking Frameworks Like ARTEX, PentAGI, and Agent Zero Found Running on Internet-Accessible Servers
AI hacking frameworks found exposed on internet-accessible servers.
- 10 Nov 2026Japanese furniture giant Nitori says hackers stole 37.6M customer records
Japanese retailer Nitori reports data breach affecting 37.6M customer records.
- 10 Nov 2026Over a Dozen Organizations Hit in Qubole Supply Chain Attack
Attackers exploited compromised Qubole IAM credentials to steal data from over a dozen organizations.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.