Cybersecurity Management › Identity & Access Management
Identity & Access Management
BC-620.20
Level 2
Cross-Industry
755 providers
3236 API surfaces
301 rated strong or better
IAM, PAM, federation, joiners-movers-leavers.
Identity & Access Management (BC-620.20) is a level-2 business capability under Cybersecurity Management in the Cross-Industry model. The catalog holds 3236 API surface(s) from 755 provider(s) that can perform some part of it, 301 of them rated strong or better. Reach is the vendor surface that lands on this capability — it is not a claim about what any particular organisation has deployed.
Where this capability definition comes from.
This capability is part of a published business-architecture model that API Evangelist
did not author. It is redistributed here under
CC-BY-4.0.
Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0
Changes: Consolidated from 333 per-L1 YAML files into one JSON; English only (upstream i18n/ omitted); descriptions whitespace-normalised. No capability was added, removed, renamed or re-parented.
Source repository · NOTICE and third-party framework attributions
Sub-capabilities
Identity Lifecycle Management BC-620.20.10
Joiner, mover, leaver processes and identity provisioning.
no catalog coverage
Access Management and Authentication BC-620.20.20
Authentication, MFA, single sign-on, and federation.
no catalog coverage
Privileged Access Management BC-620.20.30
PAM, just-in-time access, and privileged session monitoring.
no catalog coverage
Access Governance and Recertification BC-620.20.40
Access reviews, segregation of duties, and recertification.
no catalog coverage
Customer Identity Management BC-620.20.50
CIAM for external customers, partners, and consumers.
no catalog coverage
Providers that reach this capability
Ordered by rating band. Reach means a provider publishes an API surface that can perform some part of this capability — it is not a claim that any particular organisation has deployed it.
Exemplar 103 Complete, well-documented, and agent-ready
HubSpotTwilioSalesforceTray.aiTelnyxSendGridConfluentDynatraceOpenAIWSO2CDataBigCommerceKindeAppwriteMicrosoft Entra ID (formerly Azure AD)OptimizelySnowflakeBrevoCloudflareElevenLabsElation HealthSnykGitHubAmigoDatadogElasticAdobe SuiteFlagsmithRelevance AIElastic StackMongoDBMicrosoft AzureConfluent | the Data Streaming PlatformOutSystemsControlUpThousandEyesAcquiaJiraTreasure DataLinkedInAutomation AnywhereTalon.OneAtlassianOktaCloseMicrosoft Azure Cache For RedisBrazeAembitLogicMonitorSigma ComputingWeavrClickHouseKongOneTrustCoda ProjectCockroach LabsZendeskQlik SenseClickupdotCMSThe Things Network / The Things StackClerkAuth0ConfluenceMapp Marketing CloudSodaScalarHEREAuthentikTextQLLosantAvalaraDelineaLaravelProgress SoftwareAppsFlyerDoiTMatomoJFrogAmazon S3CongaGoogleMatch It UpTricentisDocusignStrivacityCohesityPalo Alto NetworksCumulocityn8nZoom PhoneMicrosoftSynadia CommunicationsTenableShowpadHighLevelSignalWireClouderaNarmiIntegrationOSUiPathNexGen CloudSAP Emarsys
Strong 198 Solid coverage with minor gaps
Amazon Secrets ManagerIBMMoniteUnityMedusaBenchlingOracleSpectro CloudCertifyosLyticsAmazon CognitoBigtincanKiteworksGraphiantGraviteeRed Hat Ansible Automation PlatformVisierNasuniPostizDemandbaseGoFundMeThoughtSpotTradeshiftcPanelCouchbaseAffiseGrafanaNexlaBentley SystemsPaperspaceCM.comMicrosoft Dynamics NAVMOLOCOOpenworkWebexAiriaRhombus SystemsCisco Catalyst SD-WANMolTrustFastlyGoogle Cloud StorageKnakMendPositSonatypeComplyAdvantageAirtableGluuGongLeanKitNetcrackerCisco UmbrellaFenergoFrame.ioMicrosoft GraphCelonisCisco Identity Services EngineGenesysGr4vyKPNWebscale NetworksAvettaPixieBrixGoHarborFactsetReplicatedZohoBudibaseMicrosoft Active DirectoryMicrosoft Office 365NedapMoogsoftNashPingCAPWorkRampBynderOracle GoldenGateWherobotsInfluxDataRed HatSolvimonNetBox LabsUpsunFacetsParsecGoogle WorkspaceOpenText CybersecurityStytchAnacondaCisco IntersightCubeMistProcoreKaseyaArmorRingCentralWorkOSOmniLogz.ioThingsBoardTykErplyFusioALTREdge DeltaUniformWhisper SecurityAmazon IoT CoreVic.aiiOSLiveRampAmazon IoT Device ManagementUnifonicCommerce LayerArcade.devBoxChef SoftwareJuniper NetworksAmazon IoT Device DefenderAmazon Web ServicesAnt MediaAptibleArthurAIIBM WebSphereMicrosoft EntraLaserDataAzure Synapse AnalyticsAppDirectCharthopSuper.aiScienceLogicVanilla ForumsGalileo TechnologiesPlatform.shJFrog ArtifactoryFOLIOInstaclustrAtomadic TechCrusoeFortifySeqera LabsSift StackAmazon IAMVeracodeTalendForgeRockFronteggCisco Secure FirewallGeneral Services AdministrationPayabli7SIGNALDeputyGoodlordYubicoAmazon WorkSpaces WebDescopeH2O.aiKolidePropelAuthVijilMarketoAppOmniBlazing Bullet Private LimitedEVEDEXtessl.ioGoogle Display & Video 360LightrunZoomAltimate AIBrandfolderWindmillC1LinodeThomson ReutersAmazon IoT SiteWiseCoperniqLakekeeperMaltCloud FoundryTileDBSoldoCorva AIForstaKISIAmazon IAM Identity CenterBarndoorTypingDNAAPIClawAxwayClawSpanPantherSailPointLumosAEMOAmazon IAM Access AnalyzerBlackbaudConductorOneDealHub
Developing 265 Usable, with meaningful gaps to close
Hive Agent IQWeelLangdockLooker StudioOrion Advisor SolutionsTUI GroupXentralGreen HelixKentikPrefectAvnetOnecliDruvaSmallStepTTTechBritiveSponsorUnitedJetBrainsElhubSkeduloAbnormal AISpecterOpsAutheliaCoreStackTrustArcBevzBigeyeEverbridgePipedriveCisco ExpresswayDataStaxPortainerArangoDBIndykiteQwiet AiPartsTechSAP BI ToolsAmazon Directory ServiceAvayaQuadrillionReady2orderXGuardTemenosDecisivECI SolutionsPlanRadarFusionAuthMTN Group30MHzCoveoScalewayGenialistread.ioIroncladUpGuardLaurelMetricoolOpal SecurityCertifactionRoute MobileSoracomAtomicworkFreestyleYoobicAlphausDNSFilterAccelaCatchpointProveSocotraWeaviateHabuAmazon Verified PermissionsAmazon VPC LatticeQuinyxDream SportsUnqorkAgicapAuthenticxFairmarkitHevnINRIXAPIContextLambdaLeaseAcceleratorOneRailSafelloTrusonaLiveLikeQualioRittenOndo FinanceTableauAmerican Express Global Business TravelOracle EloquaLokkiPing IdentityRed Hat OpenShiftTessell1KosmosEdfaPayUniversity of HelsinkiVirtruAccredifyemnifyCisco CrossworkZitadelAuthleteBirdEvents.comToriiLookerPinterestSpotnanaSwaggerHubBeyond IdentityDeutsche BankHopaeOracle EssbaseSumo LogicPure StorageServiceChannelWekaWorldlineSIMBA ChainVTEXGremlinCloudGuardSonarSourceBaserowPaxosToqioCorityAeronesAkamaingrokFlipdishElastic PathHumaRelativityZoho InventorySecureAuth (incl. Cloudentity)ClawvisorOxideBrandtrackBorder0CapmoGoogle Cloud IAMMacrometaRetoolUniversity of British ColumbiaViridiJuniper Mist AITeamCityGoliothIOTAOryGitLab CI/CDAmazon Verified AccessCivicInfisicalvivenuZero NetworksAivenSERTICAUniversity of California, San DiegoAWS GlueBinarlySiemens PLMBraintrustTelenor SverigeNewstorePulumiSecurdenDeepgramEonFlume HealthLightdashApimanFortanixRancherM3terInductive AutomationOracle Fusion Cloud ApplicationsOutdoorsyUnleashDokployKalturaPermit.ioSpotDraftTIBCONVIDIA Run:aiOracle WebLogic ServerCogniteExoscaleValidereAgcoCubistPurplebricksSensors DataZadaraUniversity of WarsawClimateAICubeFSModeSupabaseCerbosFlatfileLogtoVenafiLangChainP0 SecurityWorkday SecurityBeacon Roofing SupplyKeboolaSPIRESybaseUniversity of AmsterdamDome9ParadoxIncentivioPolytomicArchestra AIElastic.ioLabel StudioMiroProbablTerminal UseUniversity of Illinois Urbana-ChampaignCintooHorizonIQQoverySlashIDAuthzedForm3QuayAha.ioBaswareHewlett Packard EnterpriseLytxOpenMetadataUnkeyJupyter NotebookMetabolonPacket HostTailscaleDevtronVolumezApache SupersetIncusOpenObserveDreamFactoryVirusTotalWiseFlowableInterfolioIXONCitrixSisenseStrapiActivitiMicrosoft 365InfoworksSumUpZededa
Thin 162 Limited public surface area
LivepeerUniversity of Texas at AustinHashiCorp NomadJupyterHubSpyderbatSublime SecurityAsk SageCyberArkMealieCisco Directory ConnectorMilvusTetraScienceUniversity of WashingtonVAST DataApache NiFiCovaticCoderExtreme NetworksAyla NetworksPolitecnico di TorinoGitpodNhostYale UniversitySpring SecurityTetrateInvendorCloudQueryKionLancaster UniversityNudge SecurityOpenSearchSmokeballStackRoxRapid7YextGoogle BeyondCorpGoogle Identity PlatformGeorgia Institute of TechnologyArgo CDInfluxDBQlik Sense EnterpriseHankoZoho AnalyticsActionStreamerGadjah Mada UniversitySuperTokensAdReady (CPXi)ToolJetBanQuOpenStackWeblateOutlineUniversity of ManchesterMongoDB AtlasNetBirdSAS InstituteZero Trust Network AccessEquinixHashiCorp ConsulKeycloakAutodesk BIM 360Harvard UniversitynCinoSpot by FlexeraSynapseVeeamPingOneTsinghua UniversityIstioLoadsmartSonatype NexusChaitin TechCheck PointOso CloudArgillaAlianzaExpress GatewayNetBoxFOSSologyPavootUpboundNetterAkeylessBitwardenKing Fahd University of Petroleum & MineralsCaspioKibanaOpenpathSparkyFitnessSPIFFEBentoMLInstanaTrelicaDynamicCloudsmithApache GuacamolePassboltConduktorXSKYApache RangerSeldonBridgitCorbadoIntralinksSSL/TLSOpenLatticeSamsaraTopazImpervaMcGill UniversityHumanitecScalekitInstantDBHashiCorp VaultAnodotThe Administration for Children and FamiliesCitrix ShareFileGoodDataInfraPeerTubeVoltairGoogle Admin SDKNuxeoQlik CloudDriftLoopioSSHPassage by 1PasswordSymphonyCacheflowPangeaJumpCloudRundeckPolygon ID1KOMMA5°StyraFlueidHYPERLABSOneLoginIndian Institute of Technology KanpurDuo SecurityPortworxGridGainEgnyteForithmusKeepTallyCisco Control HubEnvianceTravelPerkAuthsignalInvoice NinjaTurnkeyDeutsche TelekomFatcatScriveShyftSuper Micro ComputerFluidstackCephDfnsNational University of Singapore
Emerging 25 Early or largely undocumented
This page carries no rating. Capabilities are not rated. A capability is a description of what a business does, not a thing a company publishes, so a Kin Score would have nothing to measure.
The edge table is a Pro feature.
This page shows which providers and tags reach Identity & Access Management. The underlying
tag → capability edges — each with the quoted fragment of the provider's own
OpenAPI that evidences it, a calibrated confidence score, and the contract-provenance gate
it passed — are available through the API, along with company-level capability maps.
Only edges at confidence ≥ 0.7 with evidence found verbatim in
the source contract are published at all.