Cybersecurity Management › Identity & Access Management
Identity & Access Management
BC-620.20
Level 2
Cross-Industry
632 providers
2600 API surfaces
253 rated strong or better
IAM, PAM, federation, joiners-movers-leavers.
Identity & Access Management (BC-620.20) is a level-2 business capability under Cybersecurity Management in the Cross-Industry model. The catalog holds 2600 API surface(s) from 632 provider(s) that can perform some part of it, 253 of them rated strong or better. Reach is the vendor surface that lands on this capability — it is not a claim about what any particular organisation has deployed.
Where this capability definition comes from.
This capability is part of a published business-architecture model that API Evangelist
did not author. It is redistributed here under
CC-BY-4.0.
Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0
Changes: Consolidated from 333 per-L1 YAML files into one JSON; English only (upstream i18n/ omitted); descriptions whitespace-normalised. No capability was added, removed, renamed or re-parented.
Source repository · NOTICE and third-party framework attributions
Sub-capabilities
Identity Lifecycle Management BC-620.20.10
Joiner, mover, leaver processes and identity provisioning.
no catalog coverage
Access Management and Authentication BC-620.20.20
Authentication, MFA, single sign-on, and federation.
no catalog coverage
Privileged Access Management BC-620.20.30
PAM, just-in-time access, and privileged session monitoring.
no catalog coverage
Access Governance and Recertification BC-620.20.40
Access reviews, segregation of duties, and recertification.
no catalog coverage
Customer Identity Management BC-620.20.50
CIAM for external customers, partners, and consumers.
no catalog coverage
Providers that reach this capability
Ordered by rating band. Reach means a provider publishes an API surface that can perform some part of this capability — it is not a claim that any particular organisation has deployed it.
Exemplar 84 Complete, well-documented, and agent-ready
SalesforceTray.aiConfluentDynatraceOpenAIMicrosoft Entra ID (formerly Azure AD)SnowflakeSendGridBrevoOptimizelyCloudflareSnykGitHubWSO2TelnyxThe Things Network / The Things StackDatadogRelevance AIMongoDBAdobe SuiteElastic StackTwilioElation HealthConfluent | the Data Streaming PlatformPalo Alto NetworksJiraMicrosoft AzureTreasure DataOutSystemsLinkedInCloseOktaAtlassianBrazeControlUpThousandEyesLogicMonitorTalon.OneDelineaClickHouseKongOneTrustAembitZendeskdotCMSSigma ComputingSodaAuthentikJFrogClerkAvalaraRed HatMapp Marketing CloudAirbyteClouderaConfluenceGoogleAuth0MatomoDocusignAmazon S3iOSLaravelTextQLMicrosoftIBMProgress SoftwareCouchbaseShowpadDoiTCongaTricentisAmazon Secrets ManagerStrivacityIntegrationOSTenableZoom PhoneAppsFlyerUnityAmazon CognitoCumulocitySynadia CommunicationsLyticsSpectro Cloud
Strong 169 Solid coverage with minor gaps
HighLevelPostizcPanelOracleRed Hat Ansible Automation PlatformSAP EmarsysNexGen CloudDemandbaseKiteworksMedusaSignalWireCoda ProjectFastlyGraviteeCommerce LayerPaperspaceZohoFronteggGoogle Cloud Storagen8nNasuniSonatypeComplyAdvantageGoFundMeGongNexlaTradeshiftBenchlingVisierAmigoTykGluuBentley SystemsWebexDeelMicrosoft Dynamics NAVMicrosoft GraphMOLOCOMendRhombus SystemsBudibasePositCisco Catalyst SD-WANPropelAuthFactsetGalileo TechnologiesWorkRampFrame.ioAirtableCelonisKnakWebscale NetworksPixieBrixCisco UmbrellaBarndoorCisco Identity Services EngineGr4vyKPNMicrosoft Office 365Oracle GoldenGateReplicatedSoldo Software and ServicesFacetsMicrosoft Active DirectoryNashStytchNedapWindmillBoxRingCentralWherobotsSolvimonThingsBoardBynderGoogle WorkspaceNetBox LabsParsecGenesysOpenText CybersecurityCubeInfluxDataLiveRampUpsunNarmiAnt MediaGraphiantOmniCisco IntersightJuniper NetworksAmazon Web ServicesKaseyaMistWorkOSArmorWeavrUniformAzure Synapse AnalyticsAppOmniUnifonicFortifyAmazon IoT CoreCloud FoundryErplyVeracodeArthurAIALTRAmazon IoT Device ManagementVic.aiAptibleMicrosoft EntraOpenworkAmazon IoT Device DefenderCharthopFreestyleAppDirectGeneral Services AdministrationIBM WebSphereLaserDataPhasioSuper.aiJFrog ArtifactoryPlatform.shVanilla ForumsGoogle Display & Video 360Amazon IAMBrandfolderNetcrackerMarketoSeqera LabsArcade.devCrusoeSift StackAmazon WorkSpaces Web7SIGNALBeyond IdentityForgeRockBigtincanCertifyosPayablitessl.ioBigCommerceCisco Secure FirewallDescopeYubicoH2O.aiKolideSailPointGoodlordMaltZoomEVEDEXForstaC1Amazon IoT SiteWiseAltimate AICoperniqTypingDNAemnifySoracomJetBrainsTileDBDruvaKISIPantherPrefectAmazon IAM Access AnalyzerAutheliaConductorOneSoldo
Developing 243 Usable, with meaningful gaps to close
Amazon IAM Identity CenterDealHubHive Agent IQWeelTTTechPipedriveAnacondaOnecliAEMOOrion Advisor SolutionsXentralAstronomerSmallStepTemenosECI SolutionsKentikSkeduloAbnormal AISpecterOpsTUI GroupBritiveEdge DeltaCivicPure StorageAvayaBevzBigeyeCisco ExpresswayCoreStackPartsTechQuadrillionTrustArcFusionAuthSAP BI ToolsPlanRadarAmazon Directory ServiceCloudGuardReady2ordertread.ioLambdaLaurelUpGuardDecisivMTN GroupOpal SecurityScalewayCertifaction30MHzAtomicworkCoveoAlphausDNSFilterRoute MobileUniversity of California, San Diego1KosmosSocotraTableauGremlinPing IdentityAuthenticxAccelaTrusonaYoobicOracle EloquaZitadelQuinyxTetraScienceAmazon Verified PermissionsAmazon VPC LatticeUnqorkAgicapHabuFairmarkitINRIXLeaseAcceleratorOneRailPinterestQualioSafelloSwaggerHubFlipdishToriiOndo FinanceDeutsche BankDream SportsRittenRed Hat OpenShiftLookerHevnSlashIDAmerican Express Global Business TravelLokkiOracle EssbaseSumo LogicVirtruZoho InventoryAccredifyElastic PathAuthleteSpotDraftTessellCisco CrossworkAuthzedBaserowLightdashAkamaiEvents.comGoliothVijilRelativityVirusTotalWekaUniversity of British ColumbiaSIMBA ChainSpotnanaDokployKalturaKardinalPaxosServiceChannelSonarSourceToqioVTEXSiemens PLMAeronesUniversity of AmsterdamDataStaxOryArangoDBngrokDeepgramOxideBrandtrackGoogle Cloud IAMSERTICASumUpBorder0MacrometaCapmoOpenMetadataTeamCityClawvisorApimanHumaUniversity of Texas at AustinJuniper Mist AIRancherZero NetworksGitLab CI/CDUnleashOracle Fusion Cloud ApplicationsTIBCOAivenInfisicalAxiomFlowablePulumiToolJetOracle WebLogic ServerSecurdenAgcoEonFlatfileFlume HealthWorkday SecurityYextLogtoNewstoreYale UniversityCubeFSPermit.ioExoscaleM3terParadoxFortanixValidereLangChainOutdoorsyActivitiCubistElastic.ioNVIDIA Run:aiSupabaseUniversity of Illinois Urbana-ChampaignClimateAIPolitecnico di TorinoModeOso CloudPurplebricksKeboolaVenafiLabel StudioMiroP0 SecuritySmokeballQuaySybaseCloudsmithNhostQoveryIncentivioInductive AutomationJupyter NotebookBaswarePolytomicIncusOpenObserveApache SupersetCogniteLancaster UniversityProbablCitrixDreamFactoryAutodesk BIM 360CintooHewlett Packard EnterpriseSisenseRapid7StrapiSuperTokensAha.ioSPIREHashiCorp NomadJupyterHubLoadsmartMetabolonPacket HostBentoMLArgillaForm3Cisco Directory ConnectorHarvard UniversityMaia-analyticsMilvusApache NiFiViridiVolumezImpervaLytxScalekitVeeamInstantDBZededa
Thin 120 Limited public surface area
InfoworksTetrateIXONTailscaleWiseZoho AnalyticsConduktorSpyderbatSublime SecurityCorbadoAsk SageNudge SecurityOpenSearchStackRoxCovaticKionMealieArgo CDMicrosoft 365PangeaTopazAWS MarketplaceLangSmithSpring SecurityVAST DataGoodDataTsinghua UniversityOpenStackExtreme NetworksInvendorNetBirdHashiCorp ConsulGoogle BeyondCorpGoogle Identity PlatformWorldlineEquinixIstioKeycloakBanQuCheck PointZero Trust Network AccessCalyptiaCloudQueryAdReady (CPXi)Express GatewayInfluxDBNetBoxFOSSologyPassage by 1PasswordSonatype NexusSynapseUpboundSpot by FlexeraTurnkeyBitwardenIndian Institute of Technology KanpurNuxeoPolygon IDKing Fahd University of Petroleum & MineralsScriveTravelPerkMongoDB AtlasnCinoAuthsignalKibanaTrelicaChaitin TechCisco Control HubWarrantAmbra HealthAlianzaPingOneDfnsIntralinksNetterPavootCaspioSparkyFitnessAnodotApache GuacamoleInstanaSamsaraApache RangerDriftFatcatOpenpathSSL/TLSOpenLatticeKakaoSSHProveSymphonyXSKYSPIFFERundeckInfraVoltairBridgitGoogle Admin SDKOneLoginCitrix ShareFilePortworxTallyCacheflow1KOMMA5°Duo SecurityFlueidStyraHYPERLABSEgnyteSuper Micro ComputerEnvianceShopmonkeyNational University of SingaporeHashiCorpApache ShiroShyftFluidstackForithmusFINOS
Emerging 15 Early or largely undocumented
Minimal 1 Almost no public developer surface
This page carries no rating. Capabilities are not rated. A capability is a description of what a business does, not a thing a company publishes, so a Kin Score would have nothing to measure.
The edge table is a Pro feature.
This page shows which providers and tags reach Identity & Access Management. The underlying
tag → capability edges — each with the quoted fragment of the provider's own
OpenAPI that evidences it, a calibrated confidence score, and the contract-provenance gate
it passed — are available through the API, along with company-level capability maps.
Only edges at confidence ≥ 0.7 with evidence found verbatim in
the source contract are published at all.