Knowledge Center
Comparison
Clear explainers that put identity concepts side by side — so teams can choose the right controls with confidence.
Prefer definitions? Browse the A–Z glossary.
Comparison
Citadel Identity360vsSailPoint
Citadel Identity360 delivers unified identity governance with simpler economics: approximately 50% lower cost, 400 hours of included customization, reduced dependency on product-specific specialists, and one price covering human, non-human and agent identities—including installation, deployment and hypercare support.
Comparison
IGAvsIAM
IAM covers the full identity and access discipline; IGA focuses on access governance, lifecycle management and auditability.
Comparison
IGAvsPAM
IGA governs enterprise access; PAM protects and controls powerful administrator, service and other privileged access.
Comparison
IGAvsSSO
IGA governs who should have access; SSO lets users authenticate once and reach multiple connected applications.
Comparison
IGAvsIdP
IGA governs identity lifecycle and access; an IdP authenticates users and supplies trusted identity information to applications.
Comparison
IGAvsAccess Management
IGA governs how access is assigned over time; access management evaluates and enforces access when a resource is used.
Comparison
IGAvsGRC
IGA implements identity-related controls; GRC coordinates governance, risk and compliance oversight across the organization.
Comparison
RBACvsABAC
RBAC assigns permissions through roles; ABAC evaluates identity, resource and environmental attributes against policy.
Comparison
AuthenticationvsAuthorization
Authentication verifies an identity; authorization determines which resources and actions that identity is permitted to access.
Comparison
Access ReviewvsAccess Certification
An access review examines existing access; certification records the accountable decision to approve, change or revoke it.
Comparison
ProvisioningvsDeprovisioning
Provisioning creates or changes access; deprovisioning disables, reduces or removes access when it is no longer needed.
Comparison
SCIMvsSAML
SCIM manages users and groups across systems; SAML exchanges security assertions for federation and single sign-on.
Comparison
OAuth 2.0vsOpenID Connect
OAuth 2.0 supports delegated authorization; OpenID Connect adds authentication and standardized identity claims.
Comparison
Static SoDvsDynamic SoD
Static SoD blocks conflicting access assignments; dynamic SoD blocks conflicting actions within a transaction or session.
Comparison
Human IdentitiesvsNon-Human Identities
Human identities represent people; non-human identities represent applications, workloads, services, devices, bots or AI agents.
Comparison
Just-in-Time AccessvsZero Standing Privileges
JIT is a method for granting temporary access; ZSP is the broader model of minimizing persistent privileged access.