Lumos review: lifecycle automation for SaaS-heavy estates
ILM Reference editors · Editorial assessment · Last reviewed September 2026
Lumos scores 62/100, seventh of eight. It automates joiners, movers and leavers from HRIS events, reclaims licenses when people leave, uses agents to prepare access reviews, and surfaces dormant accounts and shadow IT through identity analytics. Its pages do not explain how apps without APIs are handled, and it publishes no prices.
- Vendor
- Lumos
- Category
- Identity governance and administration (IGA)
- Designation
- Best for SaaS-heavy JML and license reclamation
- Lifecycle coverage score
- 62 / 100
- Rank
- 7 of 8
- Pricing
- Not published. Contact sales.
- Deployment
- SaaS.
- Last reviewed
- September 2026
Scores are an editorial assessment of public vendor material. See Editorial method.
How does Lumos score on each criterion?
Revocation described across local accounts, custom and on-prem apps; handling of apps with no API not detailed.
Identity analytics surfaces dormant accounts and shadow IT.
HRIS-triggered joiner, mover and leaver workflows; leavers offboarded with licenses reclaimed.
Agents scope reviews, certify straightforward items and prepare audit-ready documentation.
Full audit trail of every grant and revocation.
Works across the IdP, HRIS, SaaS and cloud stack already in place.
No public prices.
What does Lumos do for identity lifecycle management?
Lumos monitors the HRIS for role, department, manager and status changes and applies access policies automatically. Its lifecycle page says departures revoke access 'across IdPs, local accounts, custom apps, SaaS, cloud, and on-prem systems simultaneously', with a full audit trail of every grant and revocation. Its home page says 'leavers are fully offboarded with licenses reclaimed automatically', and it lists 300+ integrations.
How does Lumos handle orphan accounts and shadow IT?
Lumos Identity Analytics runs on an entitlement-level access graph across the IdP, HRIS, SaaS and cloud stack. Lumos says 'shadow IT, dormant accounts, and over-privileged access surface on their own'. For non-human identities, an Agent Ownership Finder assigns human owners.
What are the watch-outs?
- Handling of applications with no API or SCIM is not detailed.
- No public prices.
- Framework-mapped evidence export not described; audit trail and review documentation are.
Who should shortlist Lumos?
SaaS-heavy companies that want HRIS-driven JML, faster reviews and license savings, with few legacy or on-prem applications.
FAQ
Does Lumos remove local accounts?
Its lifecycle page says offboarding revokes access across local accounts, custom apps and on-prem systems. Confirm which of your systems are integrated.
Does Lumos publish pricing?
No. Its pricing page leads to an assessment booking.
Sources
Reviewed Sep 2026