We may earn a commission if you buy through links on this page. It never changes a score or a ranking. How we make money
If you’re leaving Opal’s identity-governance platform, start by matching your replacement to the access problems you actually need to solve. Opal is listed from $39 with a free plan, but its public pricing is incomplete and seat minimums may affect fit. One caveat: the Reddit threads we read about “Opal” concern an iPhone app blocker and Sydney’s transit card, not identity governance. They aren’t reliable evidence of why customers leave this platform.
01Why people leave Opal
Public pricing makes budgeting harder
Opal’s pricing is described as incomplete, so check what is included and what the seat minimums mean for your team.
Seat minimums may not fit
Meaningful seat minimums can make Opal a poor fit for teams that need to govern access with fewer users.
Online complaints may mean another Opal
The Reddit threads we read discuss an app blocker and a transit card, not this identity-governance product.
02The alternatives, ranked by fit
- Best for access reviews
LumosLumosLumos is the closest fit here for teams comparing identity-governance breadth: it covers employee and machine access, AI agent access, and automated access reviews. That makes it worth considering if those are the jobs you want Opal to handle. Its price is not published, though, so you may not be able to size the replacement before a sales call.
Trade-off: Pricing is opaque and not published.
6.5/10from
Custom - Best for enterprise governance
SailPointSailPointSailPoint is aimed at enterprises governing many identity types and teams that need broad governance capabilities. It is a plausible alternative if Opal’s identity coverage is useful but your requirements call for an enterprise-focused governance platform. The listing describes custom implementation, so factor that into the switch rather than comparing product prices alone.
Trade-off: Pricing is not published; workflows may be clunky and complex.
6.2/10from
Custom - Best for broad integrations
OktaOktaOkta is worth comparing if your team needs broad identity integrations or manages both workforce and customer access. The listing says it starts at $6, giving you a published entry point that Opal’s incomplete pricing does not fully provide. Check higher-tier costs and migration effort before treating that starting price as your expected bill.
Trade-off: Higher-tier costs and migration effort need checking.
7.0/10from
$6/mo - Best for smaller teams
OneLoginOneLoginOneLogin may suit a smaller team that wants workforce SSO and user provisioning across apps, rather than Opal’s wider identity-governance toolkit. It is listed from $3 per user per month, which gives a clearer starting point. But Basic is capped, and several costs are unpublished, so confirm the plan fits before switching.
Trade-off: Basic is capped; several costs are unpublished.
7.0/10from
$3/mo - Best for identity and devices
JumpCloudJumpCloudJumpCloud is a better fit to compare if the reason for leaving Opal is a need to manage identity alongside a mixed device fleet. Its stated coverage includes SSO and device management, and the listing starts at $9. That broader scope may be useful if you are consolidating tools, but check the full bill before committing.
Trade-off: Check the full bill before committing.
5.8/10from
$9/mo - Best for app identity
Auth0Auth0Auth0 is aimed at apps managing user and machine identity, with enterprise SSO, SCIM, and granular access controls listed among its strengths. It may fit better than Opal if your main concern is identity inside an application rather than broad organizational governance. The listing starts at $35 and includes a free plan; check MAU caps and total cost.
Trade-off: MAU caps and total cost need checking.
6.3/10from
$35/mofree plan
03Side by side
| Tool | Score | From | Free plan | Best for |
|---|---|---|---|---|
 Opal Opal (current) | 6.0 | $39/mo | Yes | Teams governing access across many identity types |
| Lumos Lumos | 6.5 | Custom | No | Teams governing employee and machine access |
| SailPoint SailPoint | 6.2 | Custom | No | Enterprises governing many identity types |
| Okta Okta | 7.0 | $6/mo | No | Teams needing broad identity integrations |
| OneLogin OneLogin | 7.0 | $3/mo | No | Small teams needing workforce SSO |
| JumpCloud JumpCloud | 5.8 | $9/mo | No | Teams managing mixed device fleets |
| Auth0 Auth0 | 6.3 | $35/mo | Yes | Teams needing enterprise SSO and SCIM |
Questions people ask
What is the best alternative to Opal?
It depends on what you use Opal for. Lumos is the closest listed fit for access reviews and employee, machine, and AI agent access. SailPoint is positioned for enterprise governance, while Okta is listed for broad identity integrations and workforce and customer access. Compare the use case and pricing, not just the product names.
Why are people leaving Opal?
The published evidence does not establish why customers leave Opal’s identity-governance platform. The Reddit discussions provided are about an iPhone app blocker and Sydney’s Opal transit card. For the governance product, the stated concerns are incomplete public pricing and meaningful seat minimums; we don’t have relevant user reports to confirm broader reasons.
How much does Opal cost?
Opal is listed from $39 and has a free plan. The published information does not state the billing period or currency, and it describes public pricing as incomplete. It also flags meaningful seat minimums, so check the current pricing page for the plan details and minimum commitment that apply to your team.