CALCULATOR
Coverage gap calculator: how many apps sit outside your IdP and IGA
The short answer
Enter how many applications you run and how many are connected for sign-on and for automated provisioning. The calculator shows the gap in your own numbers, which tools document the estate zones you choose, and a ranking re-weighted to your priorities. It shows a cost only where a vendor publishes a price.
By The Credential Desk · IAM Compared · Published 2026-10-08
Most identity programs know how many applications sign in through the identity provider. Fewer know how many apps exist in total, or how many have automated deprovisioning. The difference between those numbers is the part of the estate where leavers keep access by default.
Your estate
Example figures. Replace them with your own.
Your coverage gap
Outside SSO: 120 applications (40.0%)
Without automated provisioning: 210 applications (70.0%)
These are your figures, not ours. Each application in the second group needs a documented path for leavers: a connector, a ticket, or a tool that reaches it.
Ranking on your weights
| Rank | Tool | Your total | Change against our ranking | Zones you need | Published price |
|---|---|---|---|---|---|
| 1 | Orchid Security | 8.24 | no change | 3 documented, 0 partial of 3 | AWS Marketplace list price: $250,000.00 per 12 months for Orchid Fundamental (30 applications). Not scaled by your inputs. |
| 2 | Veza | 6.37 | no change | 3 documented, 0 partial of 3 | Not published Contact sales |
| 3 | C1 (formerly ConductorOne) | 6.30 | no change | 1 documented, 2 partial of 3 | Not published Contact sales |
| 4 | SailPoint Identity Security Cloud | 6.21 | no change | 0 documented, 2 partial of 3 | Not published Contact sales |
| 5 (tied) | Microsoft Entra ID Governance | 6.15 | no change | 1 documented, 2 partial of 3 | $84,000 per year for ID Governance at $7.00 per user per month, paid yearly. Requires Entra ID P1 ($7.00) or P2 ($10.00) per user per month, not included. |
| 5 (tied) | Saviynt | 6.15 | no change | 1 documented, 2 partial of 3 | Not published Contact sales |
| 7 | Lumos | 6.13 | no change | 0 documented, 3 partial of 3 | Not published Contact sales |
| 8 | Apono | 4.78 | no change | 0 documented, 0 partial of 3 | AWS Marketplace list price: $4,900.00 per month for 100 users, plus $49.00 per extra user. Not scaled by your inputs. |
Your total = sum of (score × your weight) ÷ sum of your weights. Scores are our editorial scores from 0 to 10. Zone counts come from what each vendor's pages document. Microsoft is the only vendor with a per-user price on its own site, and it is the only price we compute. Orchid Security and Apono list prices on AWS Marketplace, shown as listed. We do not estimate prices for anyone else.
Frequently asked questions
Where do I get the total number of applications?
From whatever inventory you trust most: procurement and expense records, the IdP's app list, single sign-on logs, network or browser telemetry, or a discovery tool. Expect the total to grow as sources are combined.
Why does the calculator not estimate savings or cost for every vendor?
Because Microsoft is the only vendor with a per-user price on its own site, so it is the only price we compute. Orchid Security and Apono list prices on AWS Marketplace, and the table shows them as listed. Inventing prices would make the comparison look precise when it is not.
What do the zone counts mean?
For each zone you tick, the count shows how many of them the vendor's own pages document fully or partly. Not documented means the pages we read do not describe it.
Do changed weights change the published ranking?
No. The published ranking always uses our weights. Your weights change only what this page shows you.
Scores are editorial. Prices are as published on the date shown.