Independent research on 125 HR & workforce products. Facts checked against vendors’ official documentation.

We may earn a referral fee. We may earn a referral feeHow we make money

LeadChange Group

Identity & Access Management

Identity & Access Management Software for Mid-Sized Companies

Mid-market companies run many apps across several departments, so role-based provisioning and regular access reviews become the core needs.

By LeadChange Research TeamUpdated

LeadChange may earn a fee when you request pricing through our site or follow a sponsored link. Rankings never depend on whether a vendor pays us.We may earn a fee.

Research in progress

We have not yet verified which identity & access management platforms serve this segment. We rank identity & access management software for mid-sized companies once at least 3 products have that evidence; until then, this page sets out what matters and what we evaluate.

What we evaluate

  • Single sign-on

    Lets users sign in once to reach connected applications.

  • Multi-factor authentication

    Requires additional factors at sign-in, enforced by policy.

  • User directory

    Holds identities, groups and attributes in one place.

  • HR-driven provisioning

    Uses the HRIS as the source of truth for hires, moves and terminations.

  • App provisioning and deprovisioning

    Creates, updates and removes accounts in connected apps.

  • Role-based access

    Assigns access by group, role or attribute rules.

  • Access requests and approvals

    Lets users request access with approvals on record.

  • Access reviews

    Runs campaigns where managers confirm or revoke access.

  • Adaptive sign-in policies

    Uses device, location and risk signals in access decisions.

  • Audit logs

    Records sign-ins, access changes and approvals for export.

What matters for mid-sized companies

  1. Role and attribute based access rules

    Access must follow department, location and job changes.

  2. Broad SCIM provisioning coverage

    Manual account work in each app does not scale.

  3. Access reviews

    Auditors expect periodic confirmation of who has access.

  4. Device-aware policies

    Hybrid and remote work make device context important.

How to choose identity & access management software

6 criteria · Requirements by company size · 5 red flags

Start from your app inventory and your employee lifecycle. List the applications people use, how accounts are created and removed in each today, and who approves access. The gaps show which features matter.

In the demo, connect a test HRIS record, hire a test employee, change their department and terminate them, and watch what happens in each connected app.

  1. Single sign-on coverage

    Single sign-on only reduces risk and friction if it covers the apps your people actually use.

  2. Multi-factor authentication options

    Authenticator strength varies, and phishing-resistant methods matter for privileged users.

  3. HR-driven provisioning

    Using the HRIS as the source of truth lets hires, moves and terminations change access automatically.

  4. Automated provisioning and deprovisioning in apps

    Single sign-on alone does not remove local accounts or reclaim licenses in each app.

  5. Role and group based access

    Access granted by role scales better and is easier to review than one-off grants.

  6. Access requests and approvals

    Employees need a clear path to request access beyond their role, with an approver on record.

Requirements by company size

  • Mid-sized companies

    • HRIS as the source of truth for identities
    • SCIM provisioning for most of your apps
    • Access reviews for audit evidence

    Watch out for

    • Apps that support single sign-on but not provisioning
    • Group rules that grow unmanageable
    • Governance features sold as a separate product

Red flags

  • No integration with your HRIS as a source of identity data
  • Deprovisioning only disables the single sign-on account and leaves app accounts active
  • Multi-factor authentication cannot be enforced by policy
  • No exportable audit log of access changes and approvals
  • Access reviews cannot actually revoke access

More tools for mid-sized companies

Find your fit

By company size

How we research

A ranking of identity & access management for mid-sized companies reweights the LeadChange Score: capability coverage 25%, pricing transparency & value 30%, integrations & API 10%, security & compliance 10%, fit & support 15%, and data confidence 10%. Only products with a verified fact showing they serve this segment are listed.

Read the full methodology

Get a shortlist of identity & access management software for mid-sized companies

Tell us about your team and get a shortlist ranked without regard to who pays us.

Get matched