10 Cerby Alternatives in 2026 for Non-SCIM App Lifecycle Management

Looking for a Cerby alternative? Here are 10 tools for non-SCIM app lifecycle in 2026, ranked by fit for mid-market IT — with public pricing where it exists.

TL;DR

• Cerby (founded 2020) specialises in nonstandard, disconnected apps — the ones without SCIM, SAML, or an API. It's demo-gated and doesn't publish pricing.
• If you want broader lifecycle coverage (full joiner-mover-leaver, not just the non-SCIM niche) with transparent pricing, the field narrows fast.
• KINT leads for a mid-market team that wants it all in one transparent, self-serve platform; StackBob.ai is the closest non-SCIM specialist; Stitchflow if you want it managed.
• The honest reality: most alternatives hide pricing too. Only KINT publishes per-employee rates here.
• Full table, then a who-fits-what breakdown of all 10, then a pricing comparison.

What Cerby is, honestly

Cerby automates identity for nonstandard or disconnected applications — the long tail of tools that don't support SCIM, SAML, or standard provisioning. It manages credentials and access for those apps and runs alongside your IdP or IGA platform. Founded in 2020, it raised a $40M Series B in 2025 and works with 100+ organisations across 2,000+ applications.

It's a sharp tool for a specific problem: a big, messy tail of disconnected apps. The trade-offs are that it's demo-gated (no public pricing) and scoped to the nonstandard-app problem rather than your whole joiner-mover-leaver lifecycle. If that's exactly your problem, Cerby is strong. If you want the non-SCIM apps and your standard JML handled in one place, with a price you can see, the alternatives below are worth a look.

The comparison table

Pricing is withheld by the vendor where marked, not estimated by us.

The 10 alternatives, ranked by fit for mid-market IT

1. KINT — best for full lifecycle with transparent pricing

KINT runs the full joiner-mover-leaver lifecycle across your SaaS stack and covers the non-SCIM apps via browser automation as one routed path inside the same workflow. Where Cerby is scoped to disconnected apps, KINT handles the standard SCIM and API apps and the gated ones together, signs every action with Ed25519, and maps it to SOC 2 CC6.3. It publishes pricing ($3 Starter, $5 Growth) and sets up self-serve over OAuth in under 5 minutes. Honest boundary: KINT is early (zero paying customers yet, hunting design partners) and Adobe is its only fully live browser-automation app today; Figma, Canva, Notion, Loom, and Miro are in progress.

2. StackBob.ai — the closest non-SCIM specialist

StackBob.ai is the most like-for-like alternative on Cerby's core specialism. It brings apps without SCIM, public APIs, or enterprise licensing into automated JML workflows using its No-Code Autonomous Provisioning (NCAP) technology, deploying as an extension layer alongside SailPoint, Saviynt, Microsoft Entra, or Ping — not a replacement. It targets a new app in under 48 hours. Pricing isn't public. Best if you have a heavy IGA stack already and need a non-SCIM extension layer.

3. Stitchflow — best if you want it managed

Stitchflow is a SaaS-management and last-mile lifecycle platform that bridges your IdP to every app, including the ones without APIs, via a headless browser agent that runs locally on an IT machine. Its tagline — "IT automation, built and managed for you" — signals the model: it leans toward doing the work for you, with AI-driven access reviews and license-waste detection. Demo-gated. Best for teams that would rather hand off the setup than run it themselves.

4. Aquera — best for connecting anything to anything

Aquera is a no-code identity integration platform with a SCIM gateway that connects any source (like HR) to any downstream app, with 1,000+ deployments. It's purpose-built for identity workflows rather than general iPaaS. The trade-off is that it's a platform/integration layer with a pro-services feel, demo-gated, and aimed more at building connectors at scale than at being a self-serve mid-market product.

5. Lumos — best for enterprise governance

Lumos is an AI-native enterprise IGA platform built for large app estates and deep access-governance needs. It's powerful and overbuilt for a 100–500-employee team without an identity function, and it's demo-gated with hidden pricing. Consider it only if you're scaling into genuine enterprise governance (Lumos alternatives).

6. BetterCloud — for existing customers post-CoreStack

BetterCloud is a mature SaaS-management platform, acquired by CoreStack on March 31, 2026 and folded into its "Agentic Governance OS." It's quote-based with no public pricing. The acquisition makes it most relevant to existing BetterCloud customers weighing what changes at renewal (BetterCloud alternatives).

7. Zluri — for larger orgs with an identity team

Zluri is an enterprise next-gen IGA platform with 300+ out-of-the-box connectors. It's demo-gated, hides pricing, and assumes you have an identity team and a services budget. Strong for the enterprise; a mismatch for a small mid-market IT function (Zluri alternatives).

8. Atomicwork — for service-desk-led IT

Atomicwork is an agentic ITSM platform (backed by Okta Ventures) that coordinates onboarding and offboarding alongside Okta, which does the actual provisioning while Atomicwork handles approvals, hardware, and HR tasks. It's an identity-adjacent fit rather than a standalone deprovisioning engine, and best if your IT runs through a service desk. Demo-gated.

9. Microsoft Entra ID Governance — for Microsoft-first shops

If you're already on Microsoft Entra, its ID Governance add-on offers lifecycle workflows. It's Microsoft-centric and priced as a paid add-on through the Entra tiers, so it fits shops already standardised on Microsoft and less so a mixed SaaS-first stack.

10. Okta Lifecycle Management — for teams on Okta

Okta LCM is an add-on to the Okta IdP. Full lifecycle effectively needs the broader Okta suite, and it requires Okta in the first place. It's a fit if you've already standardised on Okta; for the ~40% of apps Okta can't reach over SCIM, you'd still need a browser-automation layer.

Pricing comparison

The single biggest practical difference: almost none of these publish a price.

For a 250-person company, KINT's Growth plan is $5 × 250 × 12 = $15,000/year, published and self-serve. The demo-gated tools may land higher or lower — but you won't know until you book a call. The founding offer ($1.50/employee/month, 12-month lock, first 5 Growth customers, 3 spots remaining) brings a 250-person team to about $4,500/year in exchange for case-study collaboration.

How to choose

• You want full JML + the non-SCIM apps + a visible price: KINT.
• Your problem is specifically a big tail of disconnected apps, and you'll do a demo: Cerby or StackBob.ai.
• You'd rather it was built and managed for you: Stitchflow.
• You need to build connectors from any source to any app at scale: Aquera.
• You're already deep on Okta or Microsoft: their lifecycle add-ons, plus a browser-automation layer for the apps they miss.
• You're scaling into enterprise governance: Lumos or Zluri.

Roughly 40% of mid-market apps don't support SCIM, so whichever you pick, confirm how it covers that part of your stack — and whether you're paying the SCIM tax to get there.

FAQ

What does Cerby do?

Cerby (founded 2020, $40M Series B in 2025) automates identity for nonstandard or disconnected applications — the ones without SCIM, SAML, or standard provisioning. It manages credentials and access for that long tail and runs alongside your IdP or IGA. Pricing isn't published; Cerby is demo-gated.

What is the best Cerby alternative for a mid-market company?

For a 100–500-employee team that wants full joiner-mover-leaver lifecycle (not just the nonstandard-app niche) with transparent pricing and self-serve setup, KINT is the closest fit — it publishes $3–$5/employee/month and covers non-SCIM apps via browser automation in the same workflow. StackBob.ai is the closest like-for-like on the non-SCIM specialism; Stitchflow if you want it managed for you.

Which Cerby alternatives publish their pricing?

Among those here, only KINT publishes per-employee pricing ($3 Starter, $5 Growth). Cerby, Stitchflow, StackBob.ai, Aquera, Lumos, BetterCloud, and Zluri are demo-gated. Okta and Microsoft Entra are add-ons priced through their broader platforms.

Do I need a tool like Cerby if I already have an IdP?

Often yes. An IdP provisions over SCIM, and roughly 40% of mid-market apps don't support SCIM at their plan tier. Tools like Cerby, StackBob, and KINT cover that gap. KINT does it via browser automation as one routed path inside a full lifecycle workflow, so non-SCIM and SCIM apps are handled in the same run with the same signed evidence.

Is Cerby or KINT better for offboarding?

It depends on scope. Cerby is excellent specifically for offboarding a long tail of disconnected, credential-based apps. KINT covers offboarding across the whole stack — SCIM, API, and non-SCIM apps via browser automation — in one signed workflow, with transparent pricing and self-serve setup. If your problem is the whole offboarding lifecycle and you want to see the price, KINT fits; if it's narrowly the disconnected-app tail, Cerby is purpose-built for it.

How much does a Cerby alternative cost?

Most don't publish a price, so the honest answer is "book a demo to find out." KINT is the transparent reference point: $5/employee/month on Growth, or $1.50 on the founding offer. For a 250-person company that's $15,000/year at list, published and self-serve.

If your problem is the whole lifecycle and not just the disconnected-app tail, you can cover the non-SCIM apps and see the price at the same time.

Try KINT free for 14 days →

14-day trial · No card · Pricing published on the site

KINT (by Kingsley Integrators) is an HR-driven identity lifecycle automation platform for companies with 100–500 employees. It automates onboarding, role changes, and offboarding across SaaS apps — including the apps without APIs, via browser automation — and produces SOC 2 CC6 audit evidence as a byproduct. Pricing is published per employee per month ($3 Starter, $5 Growth). Self-serve signup at kingsleyint.com.