Nacho
Evidian IAM Provider
Enterprise Web Access Management (WAM) and Identity Governance and Administration (IGA) suite from France, part of the Eviden (Atos Group) cybersecurity portfolio. Flagship products include Web Access Manager (reverse-proxy Web SSO with SAML/OIDC/OAuth 2.0 federation), Identity Governance and Administration (provisioning, role management, access certification), Authentication Manager (smart card, OTP, biometric, and passwordless strong authentication for PCs), Enterprise SSO, and Orbion (cloud IDaaS). CSPN certified (French ANSSI scheme) and carries the "Cybersecurity Made in Europe" label. Available on-premises, in private cloud, or as SaaS via Orbion; pricing is quote-based.
Features
If you want to compare IAM features of different providers, please check out the (C)IAM Identity Providers benchmark.
Looking for Evidian’s OpenID Connect protocol compatibility? View Evidian on the OpenID Connect Providers benchmark.
Frequently Asked Questions
Does Evidian support Username and Password authentication method?
Evidian supports Username and Password authentication method. Form-based authentication against LDAP, Active Directory, or ADLDS directories, with basic HTTP authentication also supported. Read more
Does Evidian support Social Sign-in authentication method?
Evidian supports Social Sign-in authentication method. Web Access Manager includes built-in social authentication for Facebook, Twitter, Google, LinkedIn, and Microsoft. Read more
Does Evidian support Email Passwordless authentication method?
Evidian supports Email Passwordless authentication method. Email OTP delivery is a documented authentication method in Web Access Manager and Authentication Manager. Read more
Does Evidian support Phone Passwordless authentication method?
Evidian supports Phone Passwordless authentication method. SMS OTP delivery and RADIUS OTP token authentication are documented as primary authentication methods. Read more
Does Evidian support Magic Link authentication method?
Evidian does not support Magic Link authentication method. Evidian delivers one-time codes via SMS/email OTP rather than a clickable magic sign-in link.
Does Evidian support Anonymous / Guest authentication method?
Evidian does not support Anonymous / Guest authentication method. Evidian's WAM and IGA products require an identified directory user; anonymous or guest session flows are not a documented feature.
Does Evidian support Time-based One-Time Password (TOTP) MFA?
Evidian supports Time-based One-Time Password (TOTP) MFA. OTP token authentication via RADIUS and Evidian Authentication Manager, compatible with hardware and software time-based OTP tokens. Read more
Does Evidian support Email Code MFA?
Evidian supports Email Code MFA. Chainable multi-step, multi-factor authentication policies allow email OTP to be used as a second factor. Read more
Does Evidian support Phone Code MFA?
Evidian supports Phone Code MFA. SMS OTP can be chained as a second factor via Web Access Manager's multi-step authentication policies. Read more
Does Evidian support Push Notification MFA?
Evidian supports Push Notification MFA. Push notification via a mobile app is a documented authentication method in Web Access Manager. Read more
Does Evidian support Adaptive / Risk-Based MFA MFA?
Evidian partially supports Adaptive / Risk-Based MFA MFA. Access Control Zones and dynamic, attribute-based user groups allow contextual authentication policies, but a named risk-scoring or adaptive-MFA engine is not documented. Read more
Does Evidian support Step-Up Authentication MFA?
Evidian supports Step-Up Authentication MFA. Chainable multi-step, multi-factor authentication policies combined with per-URL Access Control Zones support step-up authentication for sensitive resources. Read more
Does Evidian support OpenID Connect (OIDC) integration protocol?
Evidian supports OpenID Connect (OIDC) integration protocol. Web Access Manager acts as an OpenID Connect Identity Provider and can delegate authentication to external OpenID Connect providers. Read more
Does Evidian support SAML 2.0 integration protocol?
Evidian supports SAML 2.0 integration protocol. SAML 2.0 supported both as Service Provider and Identity Provider, including inter-domain federation and IdP proxy with assertion rewriting. Read more
Does Evidian support WS-Federation integration protocol?
Evidian does not support WS-Federation integration protocol. WS-Federation is not among the protocols documented for Web Access Manager, which lists SAML, OpenID Connect, OAuth, and Kerberos.
Does Evidian support Machine-to-Machine (M2M) Authentication integration protocol?
Evidian supports Machine-to-Machine (M2M) Authentication integration protocol. OAuth 2.0 Client Credentials grant is documented as a supported grant type on Web Access Manager's OAuth 2.0 Authorization Server. Read more
Does Evidian support OpenID Connect (OIDC) Federation identity federation?
Evidian supports OpenID Connect (OIDC) Federation identity federation. Authentication can be delegated to external identity providers via OpenID Connect, in addition to acting as an IdP proxy with token/protocol translation. Read more
Does Evidian support SAML 2.0 Federation identity federation?
Evidian supports SAML 2.0 Federation identity federation. SAML Inter-Domain authentication and IdP proxy with assertion rewriting enable federation with trusted SAML domains, partners, and affiliates. Read more
Does Evidian support Active Directory / LDAP identity federation?
Evidian supports Active Directory / LDAP identity federation. Native support for multiple LDAP, Active Directory, and ADLDS directories as authentication sources. Read more
Does Evidian support Azure Active Directory (Entra ID) identity federation?
Evidian supports Azure Active Directory (Entra ID) identity federation. Microsoft Entra ID / Azure AD is reachable via standard LDAP/AD directory integration, and Evidian IGA ships a dedicated Office 365 connector for provisioning. Read more
Does Evidian support Bulk User Import user management?
Evidian supports Bulk User Import user management. Evidian IGA provides standard connectors for LDAP, SQL, CSV, Active Directory, SAP, Salesforce, Google Apps, ServiceNow, and Office 365, with reconciliation processes for provisioning. Read more
Does Evidian support Bulk User Export user management?
Evidian partially supports Bulk User Export user management. IGA connectors support bidirectional reconciliation with source/target systems, but a dedicated bulk export API is not explicitly documented. Read more
Does Evidian support Bulk User Update / Delete user management?
Evidian supports Bulk User Update / Delete user management. IGA provisioning workflows cover user lifecycle changes and deprovisioning across connected target applications. Read more
Does Evidian support Upsert on Import user management?
Evidian supports Upsert on Import user management. IGA reconciliation processes are designed to create-or-update user records from source systems. Read more
Does Evidian support Self-Service Profile Management Portal user management?
Evidian supports Self-Service Profile Management Portal user management. Web Access Manager includes user self-enrollment, self-management, and a profile management portal; Self Service Password Reset (SSPR) covers Windows password self-service. Read more
Does Evidian support User Blocking / Banning user management?
Evidian supports User Blocking / Banning user management. IGA user lifecycle management covers account deactivation and deprovisioning across connected applications. Read more
Does Evidian support User Metadata user management?
Evidian supports User Metadata user management. Dynamic user groups based on user attributes, and a profile management portal, indicate custom user attribute storage. Read more
Does Evidian support Role-Based Access Control (RBAC) user management?
Evidian supports Role-Based Access Control (RBAC) user management. Evidian IGA implements an extended Role-Based Access Control model incorporating organizations, contexts, and business rules. Read more
Does Evidian support Attribute-Based Access Control (ABAC) access control?
Evidian partially supports Attribute-Based Access Control (ABAC) access control. Dynamic user groups based on attributes and dynamic authorization evaluation provide attribute-based access control elements, though no formal named ABAC framework is documented. Read more
Does Evidian support Fine-Grained Authorization (FGA / ReBAC) access control?
Evidian supports Fine-Grained Authorization (FGA / ReBAC) access control. Access Control Zones provide per-URL, dynamically evaluated authorization policies for protected web applications. Read more
Does Evidian support API Authorization (Scopes / Permissions) access control?
Evidian supports API Authorization (Scopes / Permissions) access control. Web Access Manager includes an OAuth 2.0 Authorization Server and API Gateway with bearer token authentication for protecting backend APIs. Read more
Does Evidian support Audit Log Retention security feature?
Evidian supports Audit Log Retention security feature. Complete activity recording in W3C Extended Log File Format with configurable retention policies; IGA adds centralized audit consolidation. Read more
Does Evidian support Audit Log Streaming security feature?
Evidian partially supports Audit Log Streaming security feature. Evidian Analytics & Intelligence consolidates audit data for anomaly detection and compliance reporting; a documented SIEM streaming integration is not confirmed. Read more
Does Evidian support Security Center (Threat Monitoring Dashboard) security feature?
Evidian supports Security Center (Threat Monitoring Dashboard) security feature. Evidian Analytics & Intelligence provides dashboards (application accesses, audit activity, password changes, authentication activity) for trend and risk analysis. Read more
Does Evidian support Encryption at Rest security feature?
Evidian supports Encryption at Rest security feature. AES encryption is used for sensitive configuration and authentication data. Read more
Does Evidian support Encryption in Transit security feature?
Evidian supports Encryption in Transit security feature. SSL/HTTPS and LDAPS are supported with configurable strong cipher algorithms. Read more
Does Evidian support Bot Detection security feature?
Evidian partially supports Bot Detection security feature. DoS protection can be configured at the reverse-proxy level, but a dedicated CAPTCHA or bot-detection feature is not documented. Read more
Does Evidian support Brute Force Protection security feature?
Evidian partially supports Brute Force Protection security feature. DoS protection configuration is documented at the reverse-proxy level; a dedicated account lockout/throttling policy is not separately documented. Read more
Does Evidian support Breached Password Detection security feature?
Evidian does not support Breached Password Detection security feature. No known-breach password checking (e.g. Have I Been Pwned-style) is documented.
Does Evidian support Credential Guard (Dark Web Monitoring) security feature?
Evidian does not support Credential Guard (Dark Web Monitoring) security feature. No dark web credential monitoring feature is documented.
Does Evidian support Tenant Access Control List (IP ACL) security feature?
Evidian partially supports Tenant Access Control List (IP ACL) security feature. Access Control Zones provide service-isolation and per-URL access policies, which can function as a coarse-grained ACL mechanism, though a dedicated IP allowlist/blocklist feature is not separately documented. Read more
Does Evidian support Per-Organization Branding multi-tenancy?
Evidian partially supports Per-Organization Branding multi-tenancy. Login and portal templates are customizable per deployment, but distinct per-organization/per-tenant branding is not explicitly documented.
Does Evidian support Per-Organization MFA Policy multi-tenancy?
Evidian supports Per-Organization MFA Policy multi-tenancy. Authentication policies, including chained multi-factor requirements, are configurable per Access Control Zone / protected application. Read more
Does Evidian support Hosted / Universal Login Page branding feature?
Evidian supports Hosted / Universal Login Page branding feature. Web Access Manager's reverse-proxy gateway serves a hosted login portal for protected web applications. Read more
Does Evidian support Embedded / Native Login Components branding feature?
Evidian supports Embedded / Native Login Components branding feature. CIAM Connect SDK (JavaScript) allows embedding authentication flows directly into custom application UIs. Read more
Does Evidian support White-Label / Full Brand Removal branding feature?
Evidian partially supports White-Label / Full Brand Removal branding feature. Login page templates are customizable, but full white-labeling (complete removal of Evidian branding) is not explicitly documented.
Does Evidian support Localization / i18n branding feature?
Evidian supports Localization / i18n branding feature. Form-based authentication supports customizable, multi-language login pages. Read more
Does Evidian support Prebuilt UI Components (SDK) branding feature?
Evidian partially supports Prebuilt UI Components (SDK) branding feature. CIAM Connect SDK (JavaScript) supports embedding authentication, but a broader library of prebuilt UI components is not documented. Read more
Does Evidian support Login / Auth Analytics Dashboard analytics?
Evidian supports Login / Auth Analytics Dashboard analytics. Evidian Analytics & Intelligence and IGA reporting cover authentication activity dashboards, alongside optional Google Analytics integration. Read more
Does Evidian support FedRAMP Authorization compliance?
Evidian does not support FedRAMP Authorization compliance. Evidian is a France/EU-focused vendor; FedRAMP authorization is not disclosed or applicable to its published market focus.
Does Evidian support GDPR: Data Export (Portability) compliance?
Evidian supports GDPR: Data Export (Portability) compliance. Web Access Manager and IGA include GDPR compliance assistance, with a dedicated Personal Data governance reporting area in IGA. Read more
Does Evidian support GDPR: Right to be Forgotten (User Deletion) compliance?
Evidian partially supports GDPR: Right to be Forgotten (User Deletion) compliance. GDPR compliance reporting and personal-data governance workflows exist in IGA, but a dedicated right-to-erasure API/workflow is not separately documented. Read more
Does Evidian support Consent Management compliance?
Evidian supports Consent Management compliance. Consent management is a documented feature of Web Access Manager, alongside GDPR compliance assistance. Read more
Does Evidian support Region Deployment compliance?
Evidian supports Region Deployment compliance. On-premises and private cloud deployment give operators full control over data residency and region; Orbion cloud regions are not detailed publicly. Read more
Does Evidian support Private Cloud Deployment compliance?
Evidian supports Private Cloud Deployment compliance. Cross-platform (Linux, Windows) on-premises deployment and private cloud protection for VMware vCloud Directory are documented. Read more
Does Evidian support SDK Coverage developer integration?
Evidian partially supports SDK Coverage developer integration. CIAM Connect SDK (JavaScript) and a custom-authentication SDK are documented; broader multi-language SDK coverage is not confirmed. Read more
Does Evidian support Management API developer integration?
Evidian supports Management API developer integration. RESTful Administration API is documented for Web Access Manager configuration and management. Read more
Does Evidian support Authentication API Rate Limits developer integration?
Evidian partially supports Authentication API Rate Limits developer integration. DoS protection configuration is documented at the reverse-proxy level; explicit per-endpoint authentication API rate limit documentation is not confirmed. Read more
Does Evidian support Actions / Extensibility Pipeline developer integration?
Evidian supports Actions / Extensibility Pipeline developer integration. Post-Authentication and Post-Authorization hooks, plus custom authentication via SDK, provide extensibility points. Read more
Does Evidian support TypeScript Support in Extensibility developer integration?
Evidian does not support TypeScript Support in Extensibility developer integration. Extensibility is via server-side hooks and a custom-authentication SDK; a managed TypeScript/JavaScript runtime for server-side logic is not documented.
Does Evidian support Custom Domain developer integration?
Evidian supports Custom Domain developer integration. Self-hosted reverse-proxy deployment supports multiple contact points and any custom domain, with X.509v3 wildcard certificate support. Read more
Does Evidian support Deploy CLI (Infrastructure as Code) developer integration?
Evidian partially supports Deploy CLI (Infrastructure as Code) developer integration. The RESTful Administration API allows scripted configuration management, but a dedicated deploy CLI is not documented. Read more
Does Evidian support Terraform Provider developer integration?
Evidian does not support Terraform Provider developer integration. No official or community Terraform provider is documented for Evidian products.
Does Evidian support Custom Database Connections developer integration?
Evidian supports Custom Database Connections developer integration. IGA connects to LDAP, SQL, CSV, SAP, Salesforce, Google Apps, ServiceNow, and Office 365 as source/target systems; WAM supports multiple directory backends. Read more
Does Evidian support Native Webhook Support developer integration?
Evidian supports Native Webhook Support developer integration. URL notification webhooks in JSON format are documented as part of Web Access Manager's API capabilities. Read more
Does Evidian support Universal Login / Hosted Login Page Customization developer integration?
Evidian supports Universal Login / Hosted Login Page Customization developer integration. Form detection and automatic completion, plus customizable multi-language login templates, allow login page customization. Read more
Does Evidian support Custom OIDC Claims / Token Enrichment developer integration?
Evidian partially supports Custom OIDC Claims / Token Enrichment developer integration. HTTP header injection with user attributes is documented at the gateway level; a dedicated OIDC ID token/claims customization API is not separately confirmed. Read more
Does Evidian support No-Code Auth Flow Builder / Orchestration feature?
Evidian does not support No-Code Auth Flow Builder / Orchestration feature. Authentication and authorization policies are configured via the administration console rather than a visual no-code flow builder.
Does Evidian support Decentralized / Verifiable Credentials feature?
Evidian does not support Decentralized / Verifiable Credentials feature. No support for W3C Verifiable Credentials or decentralized identity (DID) standards is documented.
Does Evidian support Built-in Billing / Subscription Management feature?
Evidian does not support Built-in Billing / Subscription Management feature. No built-in billing or subscription management integration is documented.
Does Evidian support Agentic AI / MCP Server Authentication feature?
Evidian does not support Agentic AI / MCP Server Authentication feature. No AI agent identity features are documented. Evidian's product line targets traditional workforce (B2E) and customer (B2C/CIAM) access management.
Does Evidian support Post-Quantum Digital Signature Algorithms post-quantum cryptography feature?
Evidian does not support Post-Quantum Digital Signature Algorithms post-quantum cryptography feature. No public documentation found showing Evidian IAM supports PQC signature algorithms (ML-DSA/Dilithium, SLH-DSA/SPHINCS+, Falcon) for SAML assertions, JWTs, or OIDC tokens.
Does Evidian support Post-Quantum Token & Data Encryption post-quantum cryptography feature?
Evidian does not support Post-Quantum Token & Data Encryption post-quantum cryptography feature. No public evidence found that the provider supports ML-KEM or HPKE (RFC 9180) for encrypting JWE tokens, SAML assertions, or user secrets.
Does Evidian support Post-Quantum Certificate & mTLS Support post-quantum cryptography feature?
Evidian does not support Post-Quantum Certificate & mTLS Support post-quantum cryptography feature. No public evidence found of post-quantum or hybrid X.509 digital certificate support for mTLS client authentication or federation endpoints.
Does Evidian support Post-Quantum Stateful Hash Signatures post-quantum cryptography feature?
Evidian does not support Post-Quantum Stateful Hash Signatures post-quantum cryptography feature. No public evidence found of NIST SP 800-208 stateful hash-based signature scheme support (LMS/HSS, XMSS).
Compare with other providers
Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.