Home / Categories / Identity & Privileged Access
Identity & Privileged Access: vendors and distributors in Southeast Asia
Products that decide who can sign in and what they can do: identity providers and single sign-on, multi-factor authentication, privileged access management, identity governance, and the certificates and keys that identify machines. Most are sold per user or per identity as software or a cloud service.
What is sold under this label
- Identity provider and single sign-on
- The directory and login service that authenticates staff or customers once and passes that identity to each application.
- Multi-factor authentication (MFA)
- A second proof of identity beyond the password — an app prompt, hardware key or biometric. Phishing-resistant methods such as FIDO2 keys are the current benchmark.
- Privileged access management (PAM)
- Vaults and rotates administrator credentials, brokers and records privileged sessions, and removes standing administrator rights.
- Identity governance (IGA)
- Manages who should have which access: joiner-mover-leaver processes, access requests and periodic access reviews.
- Identity threat detection and response (ITDR)
- Detects attacks on identity systems such as Active Directory and cloud identity providers, and helps recover them.
- PKI and machine identity
- Issues and renews the certificates and keys that identify servers, devices and workloads; includes hardware authenticators and digital signing.
Regulations that call for it
Requirements from the regulation guides published on this site that put this category into a purchase.
- MAS TRM — Cyber Hygiene Notice: administrative accounts. Secure every administrative account on operating systems, databases, applications, security appliances and network devices.
- MAS TRM — Cyber Hygiene Notice: multi-factor authentication. MFA for all administrator accounts on critical systems and for all accounts on systems that reach customer information over the internet.
- BNM RMiT — Access control. MFA for critical systems, stronger authentication for critical activities and remote access, and dual authorisation for privileged activities.
- Singapore PDPA — PDPC ICT practices: access control. Least privilege, MFA for administrators of systems holding personal data, removal of dormant accounts and control of vendor access.
The guides give the full requirement, the source document and what changes next. They are not legal advice.
Identity & Privileged Access vendors and where they have channel
| Vendor | Singapore | Indonesia | Malaysia | Philippines | Thailand | Vietnam |
|---|---|---|---|---|---|---|
| CyberArk | 2 | 6 | 2 | 4 | 4 | 1 |
| Silverfort growth | 2 dist | 5 | 2 | 1 dist | 1 dist | 1 dist |
| Okta | 1 dist | 4 | · | 3 | 1 dist | 1 dist |
| Delinea | 2 | 2 | 1 | 2 | · | 1 |
| SailPoint | 1 dist | 2 | 2 | 1 | 1 dist | 1 dist |
| BeyondTrust | 2 | 1 | 2 | 1 dist | · | 1 |
| RSA | 1 dist | 1 dist | 1 dist | 2 | 1 dist | 1 dist |
| Palo Alto Networks IDIRA | 1 dist | 1 dist | 1 dist | 1 dist | 1 dist | · |
| SendQuick | 2 | · | 1 dist | · | 1 dist | 1 dist |
| 1Password growth | 1 dist | 1 dist | 1 dist | 1 dist | · | · |
| HashiCorp | 1 | 2 | · | 1 | · | · |
| Yubico | 1 | · | · | 3 | · | · |
| GlobalSign | 1 | · | 1 | 1 | · | · |
| SecureKi | 2 | · | 1 | · | · | · |
| DigiCert | · | · | 1 | 1 | · | · |
| Jumio | · | · | · | 2 | · | · |
| JumpCloud | 1 | · | · | 1 | · | · |
| One Identity | · | 1 | · | · | 1 | · |
| OneSpan | 2 | · | · | · | · | · |
| Ping Identity | · | · | 1 dist | · | · | 1 dist |
| Semperis growth | 1 dist | · | 1 dist | · | · | · |
| Admin By Request | · | · | 1 | · | · | · |
| Dashlane | 1 | · | · | · | · | · |
| Entrust | · | · | · | · | · | 1 dist |
| FEITIAN | · | · | · | 1 | · | · |
| i-Sprint Innovations | 1 | · | · | · | · | · |
| Saviynt growth | · | · | 1 | · | · | · |
| Sectigo | · | · | 1 | · | · | · |
Numbers are companies listed for that vendor and country; "dist" means distributors only so far. Click a number for the list, or a vendor for its profile.
Tracked, with no public ASEAN channel record yet: Keeper Security, WALLIX.
Distributors carrying Identity & Privileged Access vendors
Distributors on public record in each country, with the vendors of this category they carry.
Singapore
- M.Tech (Singapore) — RSA, SendQuick, Silverfort
- Netpoleon Solutions Pte Ltd — Palo Alto Networks IDIRA, SailPoint, Silverfort
- Exclusive Networks Singapore Pte. Ltd. — Okta, Semperis
- Ingram Micro (Singapore) — Delinea, OneSpan
- Westcon-Comstor (Singapore) — 1Password, BeyondTrust
Indonesia
- PT INDOPOLEON TECHNOLOGY — Palo Alto Networks IDIRA, SailPoint, Silverfort
- M.Tech (Indonesia) — RSA, Silverfort
- Exclusive Networks Indonesia (ENID), PT — Okta
- Westcon-Comstor (Indonesia) — 1Password
Malaysia
- Adaptive Netpoleon Malaysia Sdn Bhd — Palo Alto Networks IDIRA, Ping Identity, SailPoint
- M.Tech (Malaysia) — RSA, SendQuick, Silverfort
- Westcon-Comstor (Malaysia) — 1Password, BeyondTrust
- Exclusive Networks (Malaysia) — Semperis
Philippines
- Exclusive Networks (Philippines) — CyberArk, Okta
- M.Tech (Philippines) — RSA, Silverfort
- Netpoleon Philippines Inc. — Jumio, Palo Alto Networks IDIRA
- Westcon-Comstor (Philippines) — 1Password, BeyondTrust
Thailand
- M.Tech (Thailand) — RSA, Silverfort
- Netpoleon (Thailand) Co., Ltd. — Palo Alto Networks IDIRA, SailPoint
- Exclusive Networks (Thailand) — Okta
- Ingram Micro (Thailand) — SendQuick
Vietnam
- M.Tech (Vietnam) — Entrust, RSA, SendQuick, Silverfort
- Netpoleon Indochina Pte Ltd — Ping Identity, SailPoint
- Exclusive Networks (Vietnam) — Okta
Get new distributor appointments in this category in the weekly newsletter.