$7.20 USD · per user · per month · Flexible Plan · billed monthly · no commitment
$6 USD · per license · per month · Annual/Fixed-Term Plan — billed monthly · billed monthly · one-year commitment
Free initially supplies 50 licenses, with additional free licenses available by request. Premium billing runs through Google Workspace billing. Flexible is billed monthly without commitment; Annual/Fixed-Term is billed monthly with a one-year commitment, and license reductions wait until renewal. Switching an existing Flexible subscription to annual requires an upfront annual payment.
STA Basic, STA and STA Premium form an inherited feature ladder; STA-W features correspond to Premium. Marketing describes an all-in-one licence with tokens and support included, while the agreement binds entitlement to quoted SKUs and licensed volume. Direct and authorized-third-party orders are supported. Default STA auto-renewal uses the previous term and requires at least 60 days written notice to prevent renewal.
Authorized third-party acquisition: The agreement permits purchase through authorized third parties; payments follow the buyer’s agreement with that party. Product use remains governed by the applicable Thales terms.
84Both editions include SAML SSO, 2-Step Verification and security keys, while Gmail and Calendar are separate Workspace entitlements; buyers can use Cloud Identity for workforce sign-in but should confirm any productivity-service requirement separately.
83Basic includes multiple OTP methods and basic SSO, STA adds FIDO and smart SSO, and Premium adds certificate-based authentication; buyers should choose the tier that matches their required factors and sign-in patterns.
Workforce access policy control
76Premium adds Context-Aware Access and advanced endpoint controls to the shared directory and authentication baseline; teams needing those policy conditions should select Premium and validate their required device and access rules.
84Basic supplies network-condition and user/group policies, while STA adds per-application, device and location conditions plus session controls; buyers needing those specific rules should confirm STA or Premium entitlement in the quote.
Identity lifecycle automation
79Both editions provide basic lifecycle and directory functions, while automated third-party application provisioning is Premium-only; buyers should map joiner, mover and leaver workflows to the correct edition.
73REST and SCIM APIs cover stated user and group management workflows, with application-management APIs listed for Basic; buyers should validate how their joiner, mover, leaver and entitlement changes map to those endpoints and their configuration.
Identity administration visibility
75Premium includes Security Center and 24x7 chat and email support, while Free support is community-based; administrators should confirm that their required security views and support channel match the selected edition.
72Access-event reporting is stated, and STA adds a richer dashboard; administrators needing particular event fields, policy outcomes or operational views should confirm that the selected tier exposes them.
Workforce identity ecosystem reliability
72Directory federation and Active Directory/LDAP synchronization support mixed identity environments, while the supplied scope does not specify synchronization service guarantees; buyers should test the needed directory flows and confirm their operating requirements.
73REST/SCIM management APIs and STA identity-provider orchestration support defined integration paths, while use remains limited to quoted licensed volume; buyers should test their own provisioning and sign-in flows and confirm capacity terms.
These are the stored dimension rationales returned with each score. They explain the buyer conditions behind the gap without speculating about hidden model reasoning.
Workforce access policy control
8 pts
Cloud Identity · 76/100
Premium adds Context-Aware Access and advanced endpoint controls to the shared directory and authentication baseline; teams needing those policy conditions should select Premium and validate their required device and access rules.
SafeNet Trusted Access · 84/100
Basic supplies network-condition and user/group policies, while STA adds per-application, device and location conditions plus session controls; buyers needing those specific rules should confirm STA or Premium entitlement in the quote.
Identity lifecycle automation
6 pts
Cloud Identity · 79/100
Both editions provide basic lifecycle and directory functions, while automated third-party application provisioning is Premium-only; buyers should map joiner, mover and leaver workflows to the correct edition.
SafeNet Trusted Access · 73/100
REST and SCIM APIs cover stated user and group management workflows, with application-management APIs listed for Basic; buyers should validate how their joiner, mover, leaver and entitlement changes map to those endpoints and their configuration.
Identity administration visibility
3 pts
Cloud Identity · 75/100
Premium includes Security Center and 24x7 chat and email support, while Free support is community-based; administrators should confirm that their required security views and support channel match the selected edition.
SafeNet Trusted Access · 72/100
Access-event reporting is stated, and STA adds a richer dashboard; administrators needing particular event fields, policy outcomes or operational views should confirm that the selected tier exposes them.
Research basis
Research basis
This page uses stored product facts, official evidence, and category scoring rationales. It is not an account-based hands-on test, and third-party user ratings are not folded into the category buying score.
Cloud Identity
Fact confidence: 97% · Fact checked: 2026-10-06
SafeNet Trusted Access
Fact confidence: 91% · Fact checked: 2026-10-06
More tools
Workforce Identity and Access Management (IAM) Software
Add more tools from the same subcategory to this comparison. The page keeps up to 6 tools.
Microsoft Entra ID is Microsoft's cloud identity and access management product for workforce authentication, SSO, MFA, Conditional Access, hybrid identity, and application access.
Okta Workforce Identity is Okta's workforce IAM product for single sign-on, multi-factor authentication, directory services, lifecycle workflows, and access controls.
Duo IAM is Cisco Duo's identity and access management platform for workforce MFA, passwordless authentication, SSO, directory services, device trust, and risk-based access.
IBM Verify is IBM's identity and access management platform for workforce and other identity use cases, including SSO, MFA, adaptive access, passwordless authentication, and lifecycle provisioning.
Entrust Identity as a Service is Entrust's cloud IAM product for workforce and other identity use cases, with SSO, MFA, passwordless authentication, adaptive access, directory integration, and provisioning.
RSA ID Plus is RSA's cloud and hybrid identity and access management product for MFA, passwordless authentication, federation, SSO, and workforce access.
63
More comparisons
More same-subcategory comparisons for Cloud Identity
Compare the first tool against top-ranked and nearby tools in the same subcategory.