Our team is evaluating identity lifecycle and access management platforms, and Glide Identity has been a contender. However, we have a firm requirement for deep, native integration with Azure AD as our primary source of truth. While Glide can connect, some aspects of its provisioning workflows and the handling of dynamic Azure AD groups feel less seamless than we'd like for our scale.
We're now looking at alternatives that are built with the Azure ecosystem as a first-class citizen. The core needs are:
* Automated user lifecycle (joiner/mover/leaver) workflows triggered from Azure AD HR-driven attributes.
* Just-in-Time (JIT) privileged access elevation for Azure resources (management groups, subscriptions) and on-prem systems, with approvals tied to Azure AD groups.
* Comprehensive access certification campaigns that can pull entitlement data directly from Azure AD roles and group memberships.
* A transparent service principal and managed identity governance model.
I'm particularly interested in real-world experiences with tools like Saviynt, SailPoint IdentityNow, or even Azure-native solutions like Azure AD PIM coupled with a governance layer. Cost models are also a key factor—per-user subscription vs. consumption-based.
Has anyone conducted a similar comparison recently? What were your decision points, and were there any hidden integration costs or limitations when pushing complex Azure AD group-based policies?
Every dollar counts.