- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
Matrix42 Identity Governance
People join, move and leave every week. Their access shouldn’t depend on someone remembering — Matrix42 Identity Governance turns HR records into accounts, routes access requests through approval and reviews what people still hold, on the same platform as Matrix42 service management — quoted by package, hosted in the EEA or a Private Cloud you choose.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The Matrix42 platform family
This page covers Matrix42 Identity Governance — all three IGA packages, from the former Efecte platform. The rest:
Quick facts
30-second orientation- Product
- Identity governance and administration: lifecycle, access requests, reviews and SoD
- Maker
- Frankfurt’s Matrix42 GmbH, which Corten Capital owns; its chief executive since April 2024 is Niilo Fredrikson
- Heritage
- Built by Efecte of Espoo, Finland; Matrix42 completed its Efecte deal on 11 April 2024
- Packages
- Three: Access Right Management, User Lifecycle Management, plus the Use Case Library
- Platform
- The Core / Professional codebase (ex-Efecte), the same one that runs its ITSM
- Price
- Quote-only, 30-day trial; UK G-Cloud 14 lists the Efecte cloud at £41–58 per user monthly
- Hosting
- Efecte cloud data stored and processed in the EEA; Private Cloud runs wherever you choose
- Analysts
- No IGA placement; Matrix42’s 2026 Gartner rating (Niche Player) is for ITSM
- India
- No Indian office, partner, customer or region; contact lines keep European hours
- In India via
- TechBag — package scoping, Private Cloud planning, quote in INR with GST
Understand identity governance before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is identity governance?
IGA decides who should have which access, grants it on joining, changes it on a move and removes it on leaving, with evidence.
Access by email and spreadsheet vs Matrix42 Identity Governance — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Access by email and spreadsheet | Matrix42 Identity Governance |
|---|---|---|
| Leaver access | Removed when someone remembers | Closed when the work period ends in the source record |
| Where requests go | Email to whoever owns the app | A request catalogue with approval and delegation |
| Proving who has what | Spreadsheets compiled before the audit | Access-right reviews plus audit reporting |
| Toxic combinations | Found after the fact, if at all | SoD rules and a calculated risk level |
| Building doors | A separate badge system and paper form | Physical access handled as a governed right |
| What it is NOT | — | A PAM vault, a price list, or an Indian data region |
The cheapest test is the 30-day trial: wire up one source system and two target apps, and see whether a leaver’s access really closes.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Platform
IGA runs on the codebase Efecte built and Matrix42 now sells as Core and Professional, which Matrix42 calls “one single platform enabling IGA and ITSM” for requests and work.
Sources
User Lifecycle Management takes organisational data and work periods from your source systems, then creates, changes or closes that person’s accounts as the record moves.
Connectors
Each package includes Native Connectors; the Use Case Library adds the Integration Platform and OpenAPI for other targets. No connector catalogue is published, so ask for yours.
Governance
Access reviews, segregation-of-duties rules, risk-level calculation, reconciliation, and privileged and physical access use cases come in this third package, above the base two.
One service platform for tickets and identities — HR records drive accounts, connectors push rights, a library adds reviews.
Nine capabilities. Onboard, request, govern.
Matrix42 Identity Governance automates who gets which access, from day one to the last day, on its service-desk platform.
Joiners, movers and leavers
User Lifecycle Management opens accounts when someone joins, changes them on a move and closes them when the person leaves.
Organisation data drives it
Organisational data and work-period management sit in the same package, so account changes follow the person’s real employment record.
Rights pushed and pulled
Provisioning and de-provisioning write entitlements to target applications through Native Connectors, with mass updates in the library.
A request catalogue
Staff pick applications, entitlements and business roles from a request catalogue instead of emailing whoever owns each system.
Approval with delegation
Requests route to approvers, who can delegate while away, and removal of a right runs through the same governed flow.
Password management
Password management is part of Access Right Management, and strong authentication is listed among the Use Case Library features.
Review access rights
Review Access Rights lets owners confirm or remove what people hold, and reconciliation compares targets with what was granted.
SoD rules and risk levels
Segregation-of-duties rules block toxic combinations, and a calculated risk level shows which users carry the most exposure.
Doors as well as data
The library lists use cases for privileged access and physical access, so door rights can follow the same rules as apps.
Access piles up with every hire and every move. Matrix42 ties it to the HR record and the service desk.
Here’s what genuinely sets it apart — and exactly where it stops.
Access work on the service-desk platform
Matrix42 sells IGA on the platform behind its Core and Professional service management: “one single platform enabling IGA and ITSM”. A request, its approval and the provisioning task stay in one system, which suits service desks that still handle starters and leavers by hand.
Sized for weeks, not quarters
Matrix42 pitches it as an affordable approach for organisations of any size, and splits it into packages so you can start with lifecycle and requests. Metsähallitus, a named customer, says it went from start to deployment in a third of the time IDM projects take on average.
Badges and doors in the same flow
Matrix42 lists automation of IT and physical access rights, with a Manage Physical Accesses use case in the library. Building access can be requested, approved and later removed beside application rights, and generative-AI prompts can be set up for users and admins.
Where it stops
No connector catalogue or price is published. Reviews are listed, but no campaign engine or role mining is documented, and reviews and SoD need the third package. Hosting is the EEA cloud or Private Cloud, with no documented on-prem install, no IGA analyst placement and no Indian partner.
The numbers behind the platform
What your Matrix42 Identity Governance rollout looks like
Map joiners, movers and leavers
Name the source of truth for each person, the work-period rules, and the applications where a late leaver hurts most.
Pick packages and hosting
Decide whether reviews and SoD justify the Use Case Library now, and whether Matrix42 Cloud or Private Cloud fits.
Confirm every connector
Have Matrix42 name a native connector, or an Integration Platform route, for each target system before you sign.
Pilot one department
Use the 30-day trial on one team: one joiner, one mover, one leaver, and a request that needs two approvers.
Switch on reviews and SoD
Run the first access-right review and SoD rules for finance, then export the evidence your auditor will ask for.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“Leavers used to keep their mailbox for weeks. Now the end date in HR closes their accounts, and the ticket records it.”
“Access requests go through the portal staff already use for laptops, so managers approve rights without a new tool.”
“We moved door badges into the same request flow. Facilities and IT finally agree on who can enter the server room.”
“The Use Case Library gave our finance team SoD rules, though reviews are plainer than the campaign tools we trialled.”
“Get the connector list in writing. Two older line-of-business apps needed integration work beyond the native set.”
“Support answers in European office hours, which suits our head office in Europe but not the India night shift.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the identity governance market — tap any vendor to see why it sits where it does.
TechBag Identity Governance Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Quote-only, by package; 30-day trial.
Deployment Choice × Governance Depth
The grid nobody publishes — how many ways you can host it, India included, vs how deep its reviews, SoD and role tooling go.
EEA cloud or Private Cloud; reviews and SoD in the third package.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Matrix42 Identity Governance vs the IGA field
Against SailPoint Identity Security Cloud, Okta Identity Governance, One Identity Manager, OpenText NetIQ Identity Governance and Securden IGA — on deployment, connectors, price, reviews and SoD, effort, support and India data.
| Dimension | Matrix42 Identity Governance | SailPoint Identity Security Cloud | Okta Identity Governance | One Identity Manager | OpenText NetIQ Identity Governance | Securden IGA |
|---|---|---|---|---|---|---|
| What it is | Efecte-built IGA | SaaS IGA, revenue #1 | Governance on Okta | Deep enterprise IGA | Governance + IDM | IGA beside PAM |
| Deployment | Cloud or Private Cloud | Cloud service only | Okta cloud only | On-prem or On Demand | Self-host or SaaS | Self-hosted or SaaS |
| Connectors | No catalogue published | Large catalogue | Okta’s catalogue | SAP and mainframe | 15 template families | Securden ecosystem |
| Pricing model | Quote, by package | Suites per identity | Per user a month | Per identity, quoted | Per managed identity | Per user, all-in |
| Published entry price | Framework price only | Quote only | $17/user/month | No list price | Not published | Quote on user count |
| Included vs add-on | Reviews in third pack | SAP risk is an add-on | Lifecycle + Workflows | All in one product | IDM is a second licence | All-inclusive |
| Scale and limits | Not published | Enterprise scale | Large-scale verified | Verified at scale | 500 GB SaaS cap | Mid-market proven |
| Reviews and SoD | Reviews listed, SoD | Full campaigns + SoD | Campaigns and requests | Attestation + SoD | Micro-certs, SoD cases | Reviews; SoD unclear |
| Implementation effort | Weeks | Quarters, 2–3× licence | Months | Quarters, with partner | Quarters | Months |
| Integrations | ITSM on one platform | SAP, data, cloud add-ons | Slack and Teams | OneLogin, Safeguard | IDM, ServiceNow, SCIM | Securden PAM, vault |
| India storage | EEA, or Private Cloud | AWS Mumbai storage | India tenants, Jan 2026 | On-prem in India | Self-host in India | India-built |
| Support | European hours | Set in the contract | 99.99% uptime | Tiered, unpublished | 24x5 + Sev 1 on-call | Terms not published |
| Lock-in and exit | Tied to the platform | Cloud, IIQ route back | Bound to Okta | Switch hosting models | Data in your database | Platform-centred |
| Best fit | Matrix42 ITSM shops | Large, regulated estates | Existing Okta estates | SAP-heavy enterprises | NetIQ IDM estates | PAM buyers adding IGA |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Matrix42 Identity Governance if…
- ✓You already run Matrix42 or Efecte service management and want joiners, movers and leavers handled where your tickets live
- ✓Employment records in an HR or source system should drive account creation and removal, including fixed work periods
- ✓You want badge and door rights requested and approved in the same flow as application access
Compare alternatives if…
- ✓You need certification campaigns an auditor treats as the reference — SailPoint, One Identity and NetIQ document them in depth
- ✓Identity data must be stored in India without running your own data centre — SailPoint and Okta both offer Indian storage
- ✓You want a printed price before a sales call — Okta lists governance in its $17 Essentials suite
Do not expect…
- ✓A published connector catalogue, or a documented on-premises IGA install
- ✓An analyst placement for IGA, or Indian offices, partners or support hours
- ✓Documented role mining — roles are designed rather than derived
Matrix42 Identity Governance is one of 22 identity governance products TechBag carries. The Identity Governance guide narrows them to a shortlist and shows the reasoning. →
What does hand-run access administration cost you?
Drag the sliders (identities you govern; IT staff-hour cost). Estimates model the staff time spent creating and removing accounts, handling access requests and compiling audit evidence by hand, at an assumed 1.5 hours per identity a year, with 70% of it removed by source-driven lifecycle and governed requests. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Not published: Matrix42 quotes Identity Governance by package — Access Right Management for requests, User Lifecycle Management for JML, plus the Use Case Library that adds reviews and SoD — and every product can be trialled free for 30 days. The only public figure is the UK G-Cloud 14 framework price for the Efecte cloud, £41–58 a user a month for UK public bodies, not a list price. TechBag scopes the packages you need and quotes in INR with GST.
Base packages
Best for lifecycle and request automation
- Access Right Management for requests
- User Lifecycle Management for JML
- Quote-only; 30-day trial
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
With Use Case Library
Best when auditors ask for reviews and SoD
- Access reviews, SoD and risk levels
- Privileged and physical access use cases
- Integration Platform and OpenAPI
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Is your service desk already on Matrix42 Core or Professional? IGA shares that codebase, not the Enterprise one.
Do you need access reviews and SoD on day one? They come in the Use Case Library, not the two base packages.
Has Matrix42 confirmed in writing a connector or OpenAPI route for every target system, legacy apps included?
Which system owns joiners, leavers and work periods, and is that record clean enough to drive account changes?
Will EEA hosting meet your data rules, or must Private Cloud run in an Indian facility under your own contract?
Who handles incidents outside Monday–Friday European office hours, given no Indian partner is verified?
Can your team take a compulsory major upgrade every six months, each supported for only a year, without breaking connectors?
Does the quote state the unit, the packages, the term and the cloud SLA tier? Ask for INR with GST.
Questions buyers ask
Ready to evaluate Matrix42 Identity Governance?
Bring your HR source, target systems and audit asks, or let a TechBag advisor scope a pilot that runs one joiner, one mover and one leaver end to end.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.