Identity Governance and Administration (IGA)
Identity Governance and Administration (IGA) makes sure the right people have the right access to the right systems, at the right time, for the right reasons. It combines two disciplines:
Identity administration automates the full lifecycle of accounts and access across all your applications. It is driven by an authoritative source such as your HR system.
Identity governance adds the controls on top: policies, approval workflows, periodic access reviews, segregation of duties and a complete audit trail.
Onboarding and offboarding are slow and manual
New employees wait days for their accounts. Access requests arrive by email, ticket or spreadsheet and every application has its own administrator. When someone leaves, removing their access depends on whoever remembers to do it.
Automate the identity lifecycle
HR events such as a hire, a department change or a departure automatically trigger provisioning and deprovisioning. Birthright roles give people what they need on day one, and access disappears when they leave.
Access creep & orphaned accounts
Employees who change roles keep their old rights on top of the new ones. Former employees stay active long after they should. Each of these accounts is an open door for attackers.
Introduce recertification & reconciliation
When someone moves the access that belonged to their old role is removed. Reconciliation detects accounts with no known owner and regular clean-up campaigns keep the landscape correct.
Access is difficult to explain
Preparing for an audit means weeks of collecting exports, chasing managers and building spreadsheets.
Create governance & evidence
Every request, approval and change is captured and logged centrally. Recurring access certifications ask managers and application owners to confirm or revoke access, and audit reports are available on demand.
What can you expect?
Supplier access, governed in midPoint
A government organization was paying for a separate portal just to manage supplier access.
ACEN built supplier self-service directly into its midPoint IGA platform, with clearly scoped rights for each supplier, so the extra tool was no longer needed.
How we approach
IGA
- Workshops
- MVP
- Project
- Support
1 Discovery Workshops
Through specifically designed workshops we map your current identity landscape, processes and pain points and translate them into a clear target architecture. You leave with a prioritised roadmap that balances business value against effort.
2 IGA MVP
We connect your HR system to the IGA solution and provision Active Directory so accounts and access for joiners, movers and leavers are handled automatically. The MVP is a solid foundation you can extend one application at a time, without redesigning what is already in place.
3 IGA Project
We deliver your complete IGA programme: covering the role model, access requests, access reviews and segregation of duties, in clear milestones from discovery to go-live and aftercare. Our architects and consultants guide you through every step with a structured approach that keeps scope, risk and budget under control.
4 Support
After go-live, our specialized operations team keeps your IGA platform healthy, secure and up to date. From incident handling and upgrades to configuration changes and new connectors. Your support runs from your first question all the way to the product vendor if required.
Why IGA is your foundation for access control
Identity Governance & Administration gives you control over who has access to which resources, and proof of why they have it.
Find out how IGA turns joiner, mover and leaver processes, access reviews and approvals into a structured, auditable way of working, and why that makes NIS2 requirements much easier to meet.
IGA deployments are 20% technology and 80% people and processes.