← Alle leveranciers

Vendor lineage

SailPoint - governance, which is the unglamorous half of identity

Authentication asks who you are. Governance asks why you still have that access.

SailPoint works on identity governance - not the login, but the far larger question of who holds which entitlements, who approved them, and whether any of it is still justified. Its current material extends that to machine and agent identities, which is where the count grows fastest.

The problem governance addresses is cumulative rather than dramatic. Access is granted for a project, a cover, a migration, and almost never withdrawn, so an employee of ten years accumulates the union of every role they have held. Nothing fails as a result, which is exactly why it persists.

The security consequence only appears when an account is compromised, and at that moment the question is not how the attacker got in but how far the account could reach - a question decided years earlier by a series of individually reasonable approvals.

That is the half of identity this company owns. Authentication - the Ping and Okta entries - answers whether a person is who they claim; governance answers the harder question afterwards, who has access to what, why, who approved it, and whether it should still be so. The founders had sold an earlier identity company to Sun and came back for the second question, and the founder chief executive has run this one for two decades since.

IdentityIQ, the on-premises governance platform, arrived in 2007 and is still in the catalogue nineteen years later, next to the cloud service that followed it in 2014 - the installed-base pattern this section keeps recording, because the customers who bought governance in 2008 are banks and hospitals, and they do not move because a vendor would like them to. The corporate arc is the one the Atos and 3CX entries make familiar from other directions: a listing in 2017, a 6.9 billion dollar take-private by Thoma Bravo in 2022, and a return to the market in 2025 with 813 million dollars of recurring revenue and a claim, by then, to more than half the Fortune 500.

The product's current turn says what the field thinks the next decade is. The company now sells one fabric for human identities and another for what it calls the agentic enterprise - the service accounts, machines and AI agents that hold credentials nobody logs in with. The Nortel entry records a company that changed seven passwords and considered an intrusion closed; governance is the discipline built on the opposite premise, that the credential is not the access, and that the list of who can reach what is the record that matters. Several entries in this section turn on that record existing and being read. This is the vendor whose whole business is producing it.

Sources