Corma versus Youzer
Looking for a more holistic alternative to Youzer? Youzer focuses on the identity lifecycle and entitlement governance. Corma combines that with SaaS discovery and license control, so every app, license and euro is tied to a person and their access.
Identity-first SaaS management. Access, compliance, and spend through governance.
IGA pure player. Identity lifecycle, entitlement reviews and on-premise reach.
.avif)
.avif)
Youzer is a French identity and access management platform based in Paris. It positions itself as an IGA pure player: it connects HR systems, directories and applications, automates onboarding and offboarding, runs manager-led access reviews and flags orphaned accounts and unused licenses. Youzer is hosted in French data centres and says more than 200 CIOs use it.
SMEs, mid-sized companies and public sector organisations
2018 in Paris
Comparing Corma and Youzer? Both are French platforms that automate who gets access to what and remove that access when people leave. This comparison covers identity lifecycle, access requests, access reviews, SaaS discovery, license optimization, hosting and total cost.
Youzer is a governance pure player. Founded in Paris in 2018, it connects HR systems, Active Directory, Microsoft 365 and more than 200 other integrations, and turns joiner, mover and leaver events into no-code workflows with application packages per profile. Managers request resources and validate their team's rights in review campaigns, orphaned accounts and licenses held by leavers are flagged, and an agent plus script-based connectors reach on-premise systems. Pricing is public and billed monthly, hosting is in French data centres, and setup runs through four guided workshops.
Corma is identity-first with SaaS management built in. It connects to the identity provider and HR system you already run, finds apps through finance data, a browser extension and a Windows agent, and ties every application, license and euro to a person and their access. Provisioning, requests, reviews and license control sit in one product, hosted in the EU and ISO 27001 certified, with a free tier to start.
The dividing line is scope. Youzer goes deep on the identity lifecycle, including on-premise systems and MSP setups. Corma adds what happens outside the directory: the apps nobody connected, the spend behind them and the renewals coming up. Read the full Corma versus Youzer comparison to see which fits your team.
The Comparison
Youzer is a French IGA pure player: HR-driven lifecycle workflows, manager-led entitlement reviews and connectors that reach Active Directory and on-premise systems. Corma covers the same identity lifecycle for SaaS and adds what sits around it: discovery of apps nobody connected, license usage and spend, and renewals. Both are built in France; they differ in how far beyond the directory they look.
Identity-first: every app, license and cost is tied to a person and their access.
IGA pure player: identity lifecycle and entitlement governance, built for IT departments of every size.
Native provisioning and deprovisioning, driven by your identity provider and HR system.
No-code workflows driven by HRIS data, with application packages per profile and manager forms.
Self-service catalog with approval workflows; approved access is provisioned automatically.
Managers request IT resources through a validation flow; employees get self-service password reset.
Built-in review campaigns with exportable evidence for ISO 27001, SOC 2 and NIS2.
Manager-led review campaigns with reminders and full history, sold as a €600 per month option.
Identity provider, finance data, browser extension and Windows agent — including apps nobody connected yet.
Accounts surface from connected directories and apps; browser or finance-data discovery is not in the feature set.
Ungoverned tools surface together with the accounts behind them, so access can be revoked from the same place.
New accounts in connected apps trigger alerts; orphaned and leftover accounts are flagged on the dashboard.
Unused licenses surface from access data and can be revoked or canceled in one click.
Flags unused licenses and licenses still held by leavers, and assigns licenses automatically by profile.
Renewal dates, notice periods and spend forecasts in one view.
Not in the published feature set; Youzer tracks accounts and hardware rather than contracts.
Connected in minutes, productive within days to weeks, no professional services required.
First workflows live within a few weeks, through four guided setup workshops.
Free tier, then per-user plans — you can start without talking to sales.
Public price list by headcount, monthly and non-binding, with a one-month free trial; setup workshops cost €1,600.
Growing IT teams and mid-market organizations, roughly 50 to 5,000 employees.
From SMEs to groups with 12,000 users, plus a multi-instance offer for MSPs.
EU-hosted and ISO 27001 certified, with support in English, French and German.
Hosted in French data centres run by Scaleway and Kissgroup, GDPR compliant, with a dedicated project manager during setup.
Focused on SaaS and cloud apps, connected through your identity provider and HR system.
Connects SaaS and on-premise systems via API, SQL or PowerShell, with an agent for Active Directory.
Which platform fits your team?
Corma is best for
Teams that want SaaS discovery and license control in the same tool as access governance
IT, security and compliance teams that have to prove who has access to what
Companies that need to find apps nobody connected yet, through finance data and the browser
Mid-market teams that want to start free, without setup workshops
Youzer is best for
French public bodies and companies that require hosting in France
Hybrid estates with Active Directory and on-premise applications
MSPs managing accounts across many client instances
IT teams that want a public price list and guided setup workshops
Setup at a glance
Deployment in days to weeks for SMBs
Kick-off and project scoping with a dedicated project manager
Connects to your existing identity provider and HR system
HRIS and directories connected, with an agent installed for Active Directory
RBAC policies and approval workflows configured
Authorization framework built from business units and application packages
Ongoing maintenance mostly automated by the platform
First onboarding and offboarding workflows switched on
User training focused on self-service access requests
Review campaigns and anomaly alerts run on an ongoing basis
Why IT teams rely on Corma
Automation
employees onboarded and offboarded automatically
Time spent
spent less with Corma per week for management
Cost Efficiency
saved monthly by optimizing SaaS licenses
Shadow IT
to detect Shadow IT applications
What IT teams say about Corma
“Corma is very useful and user friendly. It helps us save money and prevent potential security threats.”
Chief Operating Officer, Media
“I like how it’s very easy to see all the apps that have been accessed by our employees.”
Chief Engineering Officer, Healthcare and Biotech
“I think Corma is a really great app that has lots to offer and working with them has been great.”
IT & Security Administrator, Software
Govern the directory, or the whole SaaS estate?
Youzer is a focused identity governance tool: HR-driven workflows, entitlement reviews, on-premise connectors and hosting in France, with public pricing and guided setup. Corma governs identity too and extends it to everything around the directory: apps found through finance data and the browser, unused licenses, spend and renewals, all tied to the person behind them. A demo on your own stack shows which scope your team needs.
Book a demoHow do Corma and Youzer differ on spend control?
Corma reduces license waste directly; Youzer tracks accounts but not SaaS spend.
What makes Corma more secure than Youzer?
Corma focuses on SaaS identity and access controls; Youzer emphasizes broader IT account automation.
How does Corma manage AI agent access?
To reliably interact with web applications, the agent uses a secure, isolated Chrome browser environment. All credentials come from the client’s secure vault (e.g., 1Password, Bitwarden). We do not store credentials on our platform. Depending on the client’s setup, direct integration with the secret manager may be possible. Two-factor authentication (2FA) is supported for various integrations. Every automation run executes inside a dedicated, isolated Chrome session.
How does Corma handle user access requests?
Corma turns access requests into automated self-service workflows. Employees request access in one click, approvals are routed and tracked, access is provisioned automatically, and every step is logged for security and compliance.
