- Workforce MFA and SSO with Active Directory: All three workforce editions include SSO, MFA methods, Active Directory synchronization and Office 365 SAML integration.
- Lifecycle provisioning with adaptive authentication: Plus and Premium combine SCIM with adaptive policies and administrative APIs.
Security & Privacy / Workforce Identity and Access Management (IAM) Software
Entrust Identity as a Service Review, Pricing, Pros & Cons
Entrust Identity as a Service is Entrust's cloud IAM product for workforce and other identity use cases, with SSO, MFA, passwordless authentication, adaptive access, directory integration, and provisioning.
Research by Global Tool Radar Research SystemEvidence checked: Oct 7, 2026AI-assisted · No Global Tool Radar hands-on testView research methodology
Buying snapshot
Quick buying snapshot
A compact view of who this tool fits, what it costs, and what to confirm before choosing it.
- A wholly self-hosted IAM service is mandatory: IDaaS is a cloud-hosted offering; application and directory integrations do not make the service self-hosted.
- Per-user subscription for Standard and Plus; Premium requires a quote.
- Premium Workforce Bundle · Requires quote · custom quote
- No permanent free edition identified. A 60-day IDaaS trial is advertised; the service terms default to 30 days unless Entrust agrees otherwise in writing. Evaluation uses fictitious non-production data.
Product scope
Product functionality and purchase scope
Cloud workforce IAM with SSO, MFA, directory integration and plan-dependent adaptive access and provisioning.
Product checked: Oct 6, 2026
- Standard Workforce Bundle
- Plus Workforce Bundle
- Premium Workforce Bundle
- Entrust Identity Enterprise and Identity Essentials
- Consumer and citizen pricing
- Separately ordered identity-proofing entitlements and professional services
Pricing checked: Oct 6, 2026
- Certified managed service provider: A certified MSP partner can deploy and manage the IDaaS service.
Pricing plans
Entrust Identity as a Service pricing table
Pricing checked: Oct 6, 2026
Official factConfidence 68%1 linked source
Standard provides foundational workforce MFA and SSO; Plus adds adaptive access and provisioning; Premium adds cross-platform facial biometrics and mobile smart credentials. Fees and initial service term are set by the order. Default direct invoicing precedes the service term with payment due within 30 days; taxes are additional. Subscriptions renew automatically unless cancelled at least 60 days before term end. Renewal notice or quote sets renewal fees and duration; absent either, renewal uses then-current list price for one year. Partner purchases have their own fee and tax terms. Professional services can be ordered separately.
Official pricing pagePricing cautions
- Compare more than the monthly rate: The initial term and fees follow the order; a per-month rate does not establish month-to-month cancellation or monthly invoicing.
- Plan for renewal and cancellation: Subscriptions automatically renew with at least 60 days’ cancellation notice. A renewal quote or notice determines fees and duration; without either, the default is current list price and a one-year renewal.
- Budget taxes and setup separately: Taxes are additional under default direct terms; professional services may be separately ordered. Partner fee and tax terms can differ.
- Check the agreed trial duration: A 60-day trial is advertised, while the service terms default to 30 days unless agreed otherwise in writing; evaluation requires fictitious non-production data.
- Review termination costs: The default general terms make fees non-cancellable and non-refundable; termination does not erase unpaid fees.
PlanPriceKey differencesBest for
Standard Workforce BundleAmount unverified — check official pricing
- Additional SAML application allowance: 2 application; Additional to the listed Office 365 SAML integration.
Plus Workforce BundleAmount unverified — check official pricing
- Additional SAML application allowance: Unlimited application; Additional to the listed Office 365 SAML integration.
Premium Workforce Bundle
- Requires quote · custom quote
- Additional SAML application allowance: Unlimited application; Additional to the listed Office 365 SAML integration.
Plan upgrade triggers
Verified plan boundaries that can change the required edition.
More than two additional SAML applications, SCIM provisioning, adaptive policies or Azure AD synchronization.
Supporting pricing evidenceCross-platform facial biometrics, LDAP database synchronization, OAuth 2.0 URL/API protection or mobile smart credentials.
Supporting pricing evidenceWhat is included, connected, or sold separately
Product scope
What is included, connected, or sold separately
Material capabilities are separated by their verified relationship to the target product.
Native device biometric authenticationIncluded capability
Device biometrics are included in every tier; this does not imply cross-platform facial biometrics.
Plan: Standard Workforce Bundle: Included · Plus Workforce Bundle: Included · Premium Workforce Bundle: Included
Workforce SSO and MFAIncluded capability
Includes SSO portal, push/mobile soft token and listed OTP/FIDO2 methods.
Plan: Standard Workforce Bundle: Included · Plus Workforce Bundle: Included · Premium Workforce Bundle: Included
Microsoft Active Directory synchronizationNative integration
Active Directory sync is distinct from Azure AD sync.
Plan: Standard Workforce Bundle: Included · Plus Workforce Bundle: Included · Premium Workforce Bundle: Included
Office 365 SAML integrationNative integration
SAML integration only; does not establish every Microsoft 365 or Outlook workflow.
Plan: Standard Workforce Bundle: Included · Plus Workforce Bundle: Included · Premium Workforce Bundle: Included
Adaptive risk-based authentication policiesPlan-dependent capability
Explicit comparison states.
Plan: Standard Workforce Bundle: Unavailable · Plus Workforce Bundle: Included · Premium Workforce Bundle: Included
Authentication and administrative APIsPlan-dependent capability
Auth API for custom web/mobile apps and Admin API for users/groups/policies.
Plan: Standard Workforce Bundle: Unavailable · Plus Workforce Bundle: Included · Premium Workforce Bundle: Included
Azure Active Directory synchronizationPlan-dependent capability
Separate scope from Active Directory integration included in Standard.
Plan: Standard Workforce Bundle: Unavailable · Plus Workforce Bundle: Included · Premium Workforce Bundle: Included
Cross-platform facial biometricsPlan-dependent capability
Premium only; native device biometrics remain included on lower tiers.
Plan: Standard Workforce Bundle: Unavailable · Plus Workforce Bundle: Unavailable · Premium Workforce Bundle: Included
Desktop login through Desktop AgentPlan-dependent capability
Distinct from the SSO portal in all tiers.
Plan: Standard Workforce Bundle: Unavailable · Plus Workforce Bundle: Included · Premium Workforce Bundle: Included
LDAP database synchronizationPlan-dependent capability
Premium only.
Plan: Standard Workforce Bundle: Unavailable · Plus Workforce Bundle: Unavailable · Premium Workforce Bundle: Included
Mobile smart credential and Bluetooth loginPlan-dependent capability
Premium only.
Plan: Standard Workforce Bundle: Unavailable · Plus Workforce Bundle: Unavailable · Premium Workforce Bundle: Included
OAuth 2.0 URL/API protectionPlan-dependent capability
Premium only; distinct from OpenID Connect application integration on Plus/Premium.
Plan: Standard Workforce Bundle: Unavailable · Plus Workforce Bundle: Unavailable · Premium Workforce Bundle: Included
SCIM identity provisioningPlan-dependent capability
Lifecycle provisioning is a Plus/Premium capability.
Plan: Standard Workforce Bundle: Unavailable · Plus Workforce Bundle: Included · Premium Workforce Bundle: Included
How the score is calculated
Scoring method
How the score is calculated
The score uses the category-specific buying dimensions below and their displayed weights.
This page is based on public product information, official sources, structured feature data, and AI assessment. It is not a hands-on lab test unless explicitly stated. Confidence percentages describe our research indicators, not the probability that a claim is true or a measured accuracy rate.
- Evidence confidence
- 75%
- AI claim confidence
- 87%
- Required-field evidence status
- 82%
- Evidence freshness
- 100%
- Field traceability
- 100%
- Model agreement
- 76%
Why this confidence level
- Evidence confidence uses source level and claim-to-source support; AI claim confidence is shown separately.
- Required-field evidence status measures whether weighted required claims have evidence links; it does not mean every product behavior was independently verified.
- 7 of 7 weighted claims have evidence links.
- 3 A1 documentary official sources and 3 A2 official product sources are linked.
- 1 independent review sources are retained, including 0 professional sources with an explicit hands-on method.
- No weighted claim is past the review window.
- No blocking evidence conflict was identified.
SSO and authentication coverage30%
78The bundles document workforce SSO and multiple MFA methods, with FIDO2 and native device biometrics; Standard’s additional SAML allowance is two applications, while Plus and Premium allow unlimited additional SAML applications, so confirm the needed bundle for the employee app set.
Workforce access policy control25%
68Adaptive access is documented for Plus and Premium, while Standard excludes adaptive policies; teams targeting policies by device, location, or risk should verify the exact conditions and controls available in their selected bundle.
Identity lifecycle automation20%
65Plus and Premium include SCIM provisioning and administrative APIs, but the supplied facts do not detail joiner, mover, leaver, group, or entitlement workflows; validate the required lifecycle events and application mappings before adoption.
Identity administration visibility15%
58Administrative APIs are documented for Plus and Premium, but the supplied facts do not establish views for authentication events, policy outcomes, exceptions, or operational health; confirm those specific monitoring needs during procurement.
Workforce identity ecosystem reliability10%
66The facts identify Active Directory synchronization, Office 365 SAML, Azure AD synchronization on Plus, and LDAP synchronization on Premium; they do not describe synchronization reliability or coverage beyond those named connections, so test the required directories and applications against the chosen bundle.
Public review signals
Ratings and themes reported by public review sites
Gartner Peer Insights: 4.5/5 (14 ratings)
Public review signals updated: Oct 7, 2026
Gartner Peer Insights4.5/5
- Rating count
- 14 ratings
- Source context
- Public ratingExact product
Marketplace app signals
Marketplace app signals
These source-reported ratings describe a specific marketplace listing, integration, mobile app, or add-on. They do not automatically represent the complete software product.
Apple App Store2.4/5
- Rating count
- 246 ratings
- Evaluated scope
- Mobile app
- Storefront
- United States
Google Play3.2/5
- Review count
- 7.5k reviews
- Evaluated scope
- Mobile app
- Storefront
- United Kingdom
Entrust Identity as a Service tag profile
Pricing model
- Per-user pricing
Business function
- Identity and access teams
Use case
- Access lifecycle automation
- Single sign-on and MFA
Integration ecosystem
- Microsoft Azure
- Microsoft 365 and Outlook
Entrust Identity as a Service core capabilities
- Workforce SSO and multiple MFA methods
- FIDO2 authentication and native device biometrics
- Active Directory synchronization and Office 365 SAML integration
- Adaptive policies and SCIM provisioning on Plus and Premium
- Premium cross-platform facial biometrics and mobile smart credentials
Detailed strengths and purchase cautions
Why it is worth considering
- Standard combines workforce SSO and multiple MFA methods with Active Directory synchronization and the listed Office 365 SAML integration, supporting a defined starting scope for teams already using those services.
- Plus and Premium include SCIM provisioning and administrative APIs, while Plus also adds adaptive access and Azure AD synchronization
- buyers can compare these named additions against their workforce workflows.
- The documented authentication options include FIDO2 and native device biometrics, and Premium adds cross-platform facial biometrics and mobile smart credentials for organizations that specifically need those methods.
What to confirm before buying
- Standard allows two additional SAML applications beyond the listed Office 365 integration and does not include SCIM or adaptive policies
- teams needing those features should evaluate Plus or Premium.
- The initial service term and fees are set by the order, subscriptions renew automatically, and cancellation is due at least 60 days before term end
- buyers should review the signed order and renewal notice rather than assume month-to-month terms.
AI buying perspectives
AI assessment
AI buying perspectives
The assessments below use the same buying criteria. Review their scores, confidence, fit, cautions, and conclusions alongside the sources.
AI assessment updated: Oct 31, 2026
Score comparisonGPTRange
SSO and authentication coverage780
Workforce access policy control680
Identity lifecycle automation650
Identity administration visibility580
Workforce identity ecosystem reliability660
GPTAI-assisted buyer perspective67
Entrust Identity as a Service fits organizations centralizing workforce SSO and MFA around Active Directory or Office 365, with Plus or Premium adding the documented provisioning and adaptive-access options. Confirm the bundle’s application allowance, order-specific term and renewal terms, and trial conditions before committing.
- Review confidence
- 76/100
Model details
- Strengths
- Standard combines workforce SSO and multiple MFA methods with Active Directory synchronization and the listed Office 365 SAML integration, supporting a defined starting scope for teams already using those services.
- Plus and Premium include SCIM provisioning and administrative APIs, while Plus also adds adaptive access and Azure AD synchronization
- buyers can compare these named additions against their workforce workflows.
- The documented authentication options include FIDO2 and native device biometrics, and Premium adds cross-platform facial biometrics and mobile smart credentials for organizations that specifically need those methods.
- Cautions
- Standard allows two additional SAML applications beyond the listed Office 365 integration and does not include SCIM or adaptive policies
- teams needing those features should evaluate Plus or Premium.
- The initial service term and fees are set by the order, subscriptions renew automatically, and cancellation is due at least 60 days before term end
- buyers should review the signed order and renewal notice rather than assume month-to-month terms.
Research transparency
How this page was researched
A compact record of the evidence used, what was not tested, and which conclusions still need verification.
- Official sources
- 6
- Broad product review sources
- 1
- Marketplace and app-store sources
- 2
- Editorial sources
- 0
- Latest evidence check
- Oct 7, 2026
Research basis
Global Tool Radar generated this assessment from structured facts linked to public sources. No Global Tool Radar hands-on test is recorded in this page's research data. Any external hands-on assessment is identified separately and does not affect the Global Tool Radar score.
Conflict handlingUnresolved evidence is disclosed on the page; affected deterministic calculations and price schema are withheld when the conflict is blocking.
View research methodologyVerified findingsNo permanent free edition identified. A 60-day IDaaS trial is advertised; the service terms default to 30 days unless Entrust agrees otherwise in writing. Evaluation uses fictitious non-production data.
- Per-user subscription for Standard and Plus; Premium requires a quote.
- Workforce SSO and multiple MFA methods FIDO2 authentication and native device biometrics Active Directory synchronization and Office 365 SAML integration Adaptive policies and SCIM provisioning on Plus and Premium Premium cross-platform facial biometrics and mobile smart credentials
- Standard provides foundational workforce MFA and SSO; Plus adds adaptive access and provisioning; Premium adds cross-platform facial biometrics and mobile smart credentials. Fees and initial service term are set by the order. Default direct invoicing precedes the service term with payment due within 30 days; taxes are additional. Subscriptions renew automatically unless cancelled at least 60 days before term end. Renewal notice or quote sets renewal fees and duration; absent either, renewal uses then-current list price for one year. Partner purchases have their own fee and tax terms. Professional services can be ordered separately.
Verification notes and unresolved itemsNo hands-on testing or independent performance evidence is supplied. The facts do not establish detailed lifecycle-event coverage, policy-condition breadth, administrative event visibility, or synchronization reliability
- validate those requirements with Entrust. Order-specific commercial terms and the agreed trial duration also require confirmation.
- Task identity verified: Entrust Identity as a Service, entrust-identity-as-a-service, security-privacy / workforce IAM (73/503).
- Exact workforce pricing ladder retained, despite Bundle names.
- Full systemPrompt (57757 characters) and userJson (5402 characters) retrieved sequentially and taskId/field/offset/nextOffset/complete/totalChars/final lengths checked.
Sources checked
Sources checked
Entrust Identity as a Service source links
Secure Device ProvisioningEntrustLevel A2Linked to 0 scored claimsChecked Oct 6, 2026
Identity as a Service Terms Of ServiceEntrustLevel A1Linked to 0 scored claimsChecked Oct 6, 2026
Entrust General Terms and ConditionsEntrustLevel A1Linked to 0 scored claimsChecked Oct 6, 2026
Identity and Access Management Terms and ConditionsEntrustLevel A1Linked to 0 scored claimsChecked Oct 6, 2026
Entrust Identity as a Service datasheetEntrustLevel A2Linked to 0 scored claimsChecked Oct 6, 2026
Identity as a Service (IDaaS) Solution ProviderEntrustLevel A2Linked to 4 scored claimsChecked Oct 6, 2026
FAQ
Entrust Identity as a Service FAQ
Which editions support automated provisioning?
Plus and Premium include SCIM and administrative APIs; Standard does not.
Does Standard include biometric authentication?
Standard includes native device biometrics. Cross-platform facial biometrics are reserved for Premium.
Does Plus require an upgrade for more SAML applications?
Plus and Premium allow unlimited additional SAML applications. Standard permits two additional applications beyond the listed Office 365 integration.
Can the service be self-hosted?
IDaaS is a cloud service with integrations for on-premises applications and directories.
Is there an ongoing free edition?
No permanent free edition is identified. Trial access is time-limited and subject to the agreed evaluation terms.
Popular comparisons
Common Entrust Identity as a Service comparisons
Only high-scoring and nearby tools from the same subcategory are shown, avoiding comparisons between unrelated use cases.
VS #1
Entrust Identity as a ServicevsRSA ID Plus
69Gap 663
Per-user pricing / Enterprise / Single sign-on and MFA / Access lifecycle automation
VS #2
Entrust Identity as a ServicevsIBM Verify
69Gap 877
Enterprise / Single sign-on and MFA / Access lifecycle automation
VS #3
Entrust Identity as a ServicevsSafeNet Trusted Access
69Gap 1079
Single sign-on and MFA / Access lifecycle automation