Skip to content
Security QA Vendors

Ranking / Product class

QA vendors for identity and access management products

IAM1: products that decide who gets in and what they can reach: single sign-on, multi-factor authentication, privileged access and identity governance. QA for this class covers login flows, protocol conformance and permission logic.

Short answer

Transition Technologies PSC leads this facet with a facet score of 4.2 of 10, computed from security-product evidence depth, test-type depth and engagement longevity on this facet's evidence only. Codoid is second with 3.8. Five of the 12 ranked vendors qualify.

Facet table

Only the dimensions that drive this facet are shown. Dimensions 1, 3 and 4 recomputed on this class's evidence only. A vendor qualifies with one verified item; the page is published when at least 3 vendors qualify. Overall scores are on the ranking.
RankVendorFacet score1. Security-product evidence depth3. Test-type depth4. Engagement longevityFacet evidence
1Transition Technologies PSCLeader4.24.02.08.02
2Codoid3.84.06.00.02
3QA Mentor3.32.02.08.01
4TestDevLab2.44.02.00.01
5ImpactQA2.44.02.00.01

Evidence per vendor

Transition Technologies PSC

  • Case study for an unnamed client: identity and access management; automation testing; team of 10; 41 months. [e-0050]
  • Case study for OneSpan: identity and access management; automation testing; 34 months. [e-0051]

Codoid

  • Case study for an unnamed client: identity and access management; functional and performance or load testing; team of 1. [e-0045]
  • Case study for an unnamed client: identity and access management; automation and functional testing. [e-0046]

QA Mentor

  • Verified review for an unnamed client: identity and access management; automation testing; 48 months. [e-0071]

TestDevLab

  • Case study for Smart-ID: identity and access management; OS, browser or agent compatibility testing. [e-0057]

ImpactQA

  • Case study for Exostar: identity and access management; automation testing. [e-0041]

What to ask vendors for this facet

  • Ask which authentication protocols and identity providers were in the vendor's test matrix on its last identity engagement.
  • Ask how permission and role changes were regression-tested, and how many negative test cases covered denied access.
  • Ask how the team handled test accounts and secrets, and who could see them.

Related pages

  1. 1 IAM: The practice of managing user identities in an organization and deciding which roles and access privileges each person or account gets. Source

Scores are computed from publicly available evidence as of the verifiedOn date on each item. They describe published evidence, not service quality. Re-verify with the vendor before contracting.