Identity Governance and Administration Companies

Identity Governance and Administration Market Opening Overview

Why the Identity Governance and Administration Market Is Expanding?

The Identity Governance and Administration (IGA) Market reached USD 8.93 Billion in 2025 and, per MRFR analysis, is projected to grow from USD 10.25 Billion in 2026 to USD 35.51 Billion by 2035, registering a CAGR of 14.8% across the forecast period. Solutions command 61.2% of 2025 revenue, while Services expand fastest at a 14.9% CAGR as skill-constrained buyers outsource deployment. On-premises continues to be in defense and government with a USD 3.32 Billion share, against cloud deployment with a 62.8% share. Regionally, North America leads with 35.1% share (2025), followed by Europe at 27.5%. Asia-Pacific is the fastest-growing region at a 15.2% CAGR through 2035. BFSI is the top vertical with a 32.1% share driven by SOX, DORA and PCI DSS certification cycles.

Two regulatory drivers are pushing discretionary governance spending into mandated budget line items. U.S. federal agencies were mandated to embrace zero-trust principles by September 2024, per OMB guidance M-22-09, and the Department of Defense has committed USD 1.7 Billion to its Thunderdome zero-trust effort.

In the EU, the Digital Operational Resilience Act (DORA), effective January 2025, obliges financial entities to maintain testable access-governance controls with annual third-party review. Beneath these mandates sits a structural shift: machine identities — service accounts, API keys, RPA bots, and IoT credentials — now outnumber human identities by roughly 45 to 1 in the average enterprise, opening a governance blind spot that legacy directory-based provisioning was never built to address. 

Why These Companies Are Leading?

Category leadership in this market is now decided less by certification-campaign polish than by platform convergence — the ability to fold IGA, privileged access management, and machine-identity governance into a single console. Hyperscaler and ERP incumbents (Microsoft Entra ID Governance, Oracle Identity Governance, SAP Cloud Identity Access Governance) win by distribution: governance ships as an extension of infrastructure enterprises have already standardized on. Pure-play vendors are answering with acquisition-led convergence — CyberArk's Venafi and Zilla Security deals, and Saviynt's unified Enterprise Identity Cloud — culminating in Palo Alto Networks' USD 25 Billion acquisition of CyberArk. MRFR identifies this PAM-IGA convergence, layered with AI-driven role mining, as the defining structural advantage separating category leaders from point-solution vendors in a market where the top five players hold only 42–48% of global revenue.

Top 10 Global Identity Governance and Administration Companies — MRFR Rankings (2026)

All revenue figures are validated from official company annual reports, investor relations disclosures, or SEC/regulatory filings. Where official figures are unavailable for private companies, this is explicitly noted.

*Private company revenues marked 'Undisclosed' where no official published financials are available.

Detailed Company Profiles

1. SailPoint Technologies | NASDAQ: SAIL | Austin, TX, USA

SailPoint's February 2025 return to public markets — its second IPO after Thoma Bravo's 2022 take-private — closed a rare full-cycle PE loop while the underlying business kept compounding: FY2025 revenue reached USD 862 Million (SEC 10-K FY2025), up 23%, with SaaS ARR climbing 39% to USD 540 Million. Rather than chase feature parity, SailPoint has spent its acquisition budget narrowly on gap-fillers — Imprivata's healthcare IGA book (Dec 2024, USD 10.7 Million) and Security Savvy for SaaS-app risk (Sept 2025) — while its new Agentic Fabric extends governance to AI-agent identities ahead of most pure-play rivals. MRFR views SailPoint's SaaS-first re-platforming as the clearest signal that subscription economics, not license-base size, will decide the next round of IGA share gains.

2. IBM Corporation | NYSE: IBM | Armonk, NY, USA

IBM's identity governance offering, Verify Governance, isn't positioned to win a stand-alone feature race against SailPoint — it's a wedge inside IBM's broader hybrid-cloud security estate, where the same client already runs Red Hat, watsonx, and mainframe workloads. IBM reported FY2025 revenue of USD 67.5 Billion (2025 Annual Report; SEC 10-K filed Feb 24, 2026), with software revenue up 10.6%, and invested over USD 8.3 Billion in R&D. Verify's August 2023 integration with watsonx.ai embeds generative-AI policy recommendations directly into certification workflows, letting IBM sell governance as a byproduct of an AI relationship the client has already committed to. MRFR expects IBM's installed-base leverage to matter more than platform elegance as regulated enterprises consolidate vendors.

3. Oracle Corporation | NYSE: ORCL | Austin, TX, USA

Oracle doesn't sell identity governance as a security product first — it sells it as an extension of the ERP and database systems that already hold the data being governed, a distribution advantage pure-play vendors struggle to counter. Oracle Identity Governance's May 2023 Kubernetes-native connector expansion cut multi-cloud deployment time by roughly 40% (per Oracle), reinforcing that integration depth, not certification-campaign UX, is Oracle's differentiator. Total revenue for fiscal 2025 was USD 57.4 billion (SEC 10-K FY2025), up 8%, while R&D spend of USD 9.9 billion continued to support cloud-native retooling.

MRFR sees Oracle's governance product as strategically defensive — protecting ERP renewal cycles — more than a standalone growth engine.

4. SAP SE | NYSE/XETRA: SAP | Walldorf, Germany

SAP folds identity governance into Cloud Identity Access Governance, a module inside its GRC suite rather than a freestanding purchase decision, which means SAP wins governance deals almost automatically wherever RISE with SAP has displaced legacy ERP. FY2025 total revenue reached approximately EUR 36.8 Billion (SAP FY2025 results, Jan 29, 2026), with cloud revenue up 23% at constant currencies. SAP's governance relevance concentrates in BFSI and manufacturing verticals running SAP's ERP core, where separation-of-duties rules must be enforced at the transaction level, not just the login level. MRFR views SAP's approach as narrower in addressable scope than pure-play IGA vendors but structurally stickier within its own ERP base.

5. Microsoft Corporation | NASDAQ: MSFT | Redmond, WA, USA

Microsoft Entra ID Governance ships as a native extension of Azure AD, meaning any enterprise already standardized on Microsoft 365 identity inherits governance capability without a separate procurement cycle — a distribution advantage no other vendor in this market can replicate. Microsoft's FY2025 revenue reached USD 281.7 Billion (SEC 10-K FY2025), with Microsoft Cloud revenue up 23% to USD 168.9 Billion, and R&D spend of USD 32.5 Billion. Entra's Verified ID work toward the EU's eIDAS 2.0 digital-wallet mandate positions Microsoft ahead of pure-play vendors on decentralized-identity interoperability. MRFR expects Microsoft's Entra bundling strategy to progressively erode the addressable market available to point-solution IGA vendors.

6. Saviynt Inc. | Private | El Segundo, CA, USA

Saviynt's December 2025 raise — USD 700 Million led by KKR at an approximate USD 3 Billion valuation — is less a growth-capital story than a statement that converged identity platforms (IGA, PAM, application access governance, and identity security posture management under one console) can still command premium multiples against SailPoint's public comparables. Revenue is undisclosed (private company). Saviynt claims coverage across more than 20% of the Fortune 100 and opened a Dubai headquarters in December 2025 to deepen Middle East distribution through StarLink. MRFR views Saviynt's platform-convergence bet as a direct challenge to vendors still selling IGA and PAM as separate line items.

7. One Identity (Quest Software) | Private | Aliso Viejo, CA, USA

One Identity operates as a standalone business unit inside Quest Software. This structure lets Quest ring-fence AI investment into identity products even as its parent balance sheet worked through more than USD 3.5 Billion in leveraged-buyout debt and a May 2025 uptier refinancing. Revenue is undisclosed (private company). The May 2025 USD 350 Million capital infusion from Quest's existing lenders was earmarked specifically to accelerate AI capability across the Identity Fabric platform, which unifies governance, PAM, and Active Directory management. MRFR notes that One Identity's growth trajectory is now more dependent on Quest's capital-structure stability than on product roadmap execution alone.

8. CyberArk Software (Palo Alto Networks) | Formerly NASDAQ: CYBR | Newton, MA, USA

CyberArk spent 2024–2025 building outward from privileged access into full identity governance — acquiring Venafi for machine-identity management (USD 1.54 Billion, closed Q3 2024) and Zilla Security for modern IGA (USD 165 Million plus a USD 10 Million earnout, closed Feb 2025) — before Palo Alto Networks acquired CyberArk itself for approximately USD 25 Billion in a deal that closed in February 2026. Standalone FY2025 revenue reached USD 1.361 Billion, up 36% (CyberArk FY2025 results), with total ARR of USD 1.440 Billion. MRFR views the PANW-CyberArk combination as the clearest evidence yet that platform consolidation, not point-product differentiation, will define IGA competition through 2030.

9. Broadcom Inc. | NASDAQ: AVGO | Palo Alto, CA, USA

Broadcom's Symantec IGA and Layer7 Identity Management units function as a legacy-enterprise retention play more than a growth engine, riding on API-gateway integration into accounts Broadcom already serves through its infrastructure-software portfolio. Fiscal 2025 total net revenue reached USD 63.9 Billion (SEC 10-K FY2025), up 24%, though this spans the entire company — semiconductor solutions and VMware Cloud Foundation-driven infrastructure software — with identity governance a minor line inside the latter; Broadcom does not break out standalone IGA revenue. MRFR expects Broadcom's governance unit to remain a bundled retention tool for existing Symantec and CA Technologies accounts rather than a share-gaining platform in new-logo competition.

10. Omada A/S | Private | Copenhagen, Denmark

Omada's April 2025 recapitalization — GRO Capital and Kirk Kapital taking majority ownership at an implied valuation of roughly DKK 1 Billion, a 2.9x EV/Sales multiple on FY2024 revenue of DKK 349 Million (NKP M&A Insights) — reads as a bet that European mid-market IGA still has room to consolidate before U.S. platforms fully penetrate the region. The deal, backed by J.P. Morgan Asset Management's Private Equity Group, is earmarked for AI-driven product development and further M&A. Omada was named a Representative Vendor in Gartner's 2025 IGA Market Guide. MRFR sees Omada's Nordic-anchored, rapid-deployment positioning as a durable niche against platforms optimized for global enterprise scale.

M&A Activity Tracker

Key verified transactions shaping the Identity Governance and Administration Market consolidation landscape (2024–2026):

*Deal announced July 2025; regulatory approvals and shareholder vote (99.8% support, Nov 2025) preceded a February 2026 close.

Key Trend: M&A in the IGA Market is now dominated by PAM-to-IGA convergence — CyberArk's Venafi and Zilla deals followed by its own USD 25 Billion sale to Palo Alto Networks represent the single most structurally significant sequence reshaping competitive positioning, while Omada's recapitalization signals parallel consolidation pressure building in the European mid-market tier.

R&D Investment & Innovation Signals

Leading companies are investing in AI-driven certification, machine-identity governance, and decentralized-identity interoperability:

●       Microsoft's Entra Verified ID is advancing toward the EU's eIDAS 2.0 digital-identity-wallet mandate (member states required to issue wallets by 2026), positioning Microsoft ahead of competitors on decentralized-identity interoperability.

●       IBM's Verify Governance integrated with watsonx.ai in August 2023, embedding generative-AI-assisted policy recommendations directly into access-certification workflows for large-enterprise deployments.

●       SailPoint's Agentic Fabric, launched in May 2026, extends identity governance to AI agents and other non-human identities, directly addressing the roughly 45:1 machine-to-human identity ratio now typical in large enterprises.

●       CyberArk's Zilla Security (Feb 2025) and Venafi (Oct 2024) acquisitions extended governance from privileged accounts into modern SaaS entitlements and machine-identity certificates ahead of its combination with Palo Alto Networks.

●       Oracle's Kubernetes-native connector framework, expanded in May 2023, cut multi-cloud identity governance deployment time by approximately 40%, per Oracle's internal benchmarks.

●       Saviynt's converged Enterprise Identity Cloud — unifying IGA, PAM, application access governance, and identity security posture management — is pressuring vendors that still sell governance as a standalone module.

●       SAP's Business AI was included in two-thirds of Q4 2025 cloud order entry, extending AI-assisted governance and role-design workflows into the ERP transaction core.

●       Omada's AI-driven product roadmap, backed by its April 2025 recapitalization under GRO Capital and Kirk Kapital, targets faster deployment cycles aimed at the underserved European mid-market segment.