Identity Governance &
Administration (IGA) – Managing
Digital Identities and Access Rights
Reliably Managing Identities and Access Rights Across the Organization
Who is allowed to access which applications, systems, and data? And does that access still correspond to their actual responsibilities and areas of accountability?
As the number of applications, employees, external service providers, and digital processes grows, it becomes increasingly difficult to keep track of identities and access rights manually.
Identity Governance & Administration (IGA) provides the foundation for systematically managing digital identities and access rights.
It is not just about technically assigning permissions. What matters is having transparent processes, clear responsibilities, and regular reviews of existing access rights.
Benutzerkonten zentral zu verwalten
Berechtigungen systemübergreifend zu steuern
Änderungen an Identitäten nachzuvollziehen
Anforderungen aus Audits zu erfüllen
IGA Connects Identities,
Access Rights, and Processes
A modern IGA solution supports the entire lifecycle of an identity — from an employee joining the organization and changes during their employment through to their departure. Access rights can be assigned, adjusted, and revoked automatically.
At the same time, IGA provides transparency into which users have which access rights. Roles, responsibilities, and approval processes can be mapped centrally and documented in a traceable manner.
This is particularly relevant for organizations with complex structures, numerous applications, or high security and compliance requirements.
IGA with OEDIV SecuSys
OEDIV SecuSys supports organizations in designing, implementing, and further developing Identity Governance & Administration. We do not view IAM solely from a technical perspective, but also consider existing processes, responsibilities, and system landscapes.
As a vendor-independent IAM partner, we support you in selecting suitable technologies and accompany implementation from the initial analysis through to ongoing operations. This creates an IGA structure that not only works technically, but is also sustainable in day-to-day business operations.
Especially in established environments, a step-by-step approach is often more effective than a complete reorganization. Together with our customers, we therefore first identify the relevant processes and areas for action and use these as the basis for developing a suitable IAM roadmap.
Functions of an IGA Solution
An IGA platform typically supports the following functions:
- Provisioning and management of user accounts
- Management of roles and access rights
- Management of access requests and approvals
- Conducting access reviews
- Documentation of changes to identities
- Integration with HR systems and IT applications
These functions support the structured management of
identities and access rights across the organization.
User Lifecycle Management
User Lifecycle Management describes the management of user identities
throughout their entire lifecycle.
Objectives of User Lifecycle Management:
- Consistent management of user accounts
- Reduction of manual activities
- Reduction of inappropriate access rights
- Traceability of changes
Joiner
When an employee joins the organization, user accounts and basic access rights are created. Access is generally assigned based on organizational data from HR systems.
Mover
When organizational changes occur, such as a change of department, existing access rights are adjusted. Access that is no longer required is removed, while new permissions are added.
Leaver
When an employee leaves the organization, user accounts are deactivated and access rights revoked. The goal is to prevent unused or orphaned accounts.
Access Governance
Access Governance describes the control and review of access rights within an organization. The goal is to ensure that users have only the permissions they need to perform their duties.
Typical components include:
- Definition of role and permission models
- Approval processes for access requests
- Regular access reviews (recertification)
- Review of SoD conflicts (Segregation of Duties)
- Creation of audit and compliance reports
System Integration (Connectivity)
IGA systems are connected to various IT systems in order to
synchronize identity and access rights data.
Typical integrated systems include:
- HR systems (e.g., as the authoritative data source)
- Active Directory / Microsoft Entra ID
- ERP systems (e.g., SAP)
- Microsoft 365
- Cloud applications
- Business applications
- Identity Providers (IdPs)
- IT Service Management systems (ITSM)
These integrations enable user accounts and access
rights to be managed consistently across systems.
IGA Assessment
An IGA Assessment analyzes existing processes in the area of Identity Governance. The result is an assessment of the current state, together with an overview of existing weaknesses and dependencies.
The following areas are assessed:
- User account management
- Implementation of Joiner, Mover, and Leaver processes
- Development of role and permission models
- Conducting access reviews
- Degree of automation
- System integration
- Documentation and traceability
Which Organizations Is IGA Relevant For?
Identity Governance & Administration is particularly suitable for organizations where large numbers of identities, applications, and access rights come together. This includes larger mid-sized companies and enterprises with heterogeneous system landscapes, multiple locations, or complex organizational structures.
Increasing requirements for traceability, data protection, and information security are also making structured access rights management increasingly relevant.
IGA as the Foundation for Holistic IAM
IGA is an important component of an overarching Identity & Access Management strategy. Depending on the starting point, IGA can, for example, be combined with Access Management, Single Sign-On, Privileged Access Management, or other IAM disciplines.
OEDIV SecuSys supports organizations in aligning these components effectively and continuously developing their IAM environment over the long term.
Frequently Asked
Questions
Here you will find answers to the most important
questions about our services and solutions.
Is IGA Mandatory for NIS2 and DORA Compliance?
NIS2 and DORA do not prescribe any specific software, but they do require demonstrably controlled access rights, documented provisioning processes, and regular reviews. In practice, above a certain company size, it is difficult to implement these requirements in an audit-proof manner without an IGA solution.
What Is Identity & Access Management (IAM)?
Identity & Access Management (IAM) comprises processes and technologies for managing digital identities and controlling access rights to systems, applications, and data. This includes identity management, authentication, authorization, and access control, among other functions.
What Is Identity Governance & Administration (IGA)?
Identity Governance & Administration (IGA) is a sub-area of Identity & Access Management. IGA focuses on the management and governance of identities and access rights. This includes User Lifecycle Management, role and access management, Access Reviews, recertification, compliance, and traceability of changes, among other functions.
What Is the Difference Between IAM and IGA?
IAM describes the overarching approach to managing digital identities and access. IGA is a component of IAM and focuses specifically on governance, access management, lifecycle processes, control, and traceability. While IAM also encompasses authentication and access control, for example, IGA addresses questions such as who has which access rights and whether those rights are still required.
Why Do Organizations Need IAM and IGA?
IAM and IGA help organizations manage digital identities and access rights in a structured manner. Automated processes can reduce administrative effort. At the same time, access reviews and traceable processes provide a foundation for IT security, audits, and the implementation of compliance requirements.
Which Systems Can Be Connected to an IGA Solution?
Depending on the platform used, IGA solutions can be integrated with a wide range of systems. These include, for example, HR systems, Active Directory, Microsoft Entra ID, SAP and other ERP systems, Microsoft 365, cloud and business applications, Identity Providers (IdPs), and IT Service Management systems (ITSM).
What Is an IGA Assessment?
An IGA Assessment analyzes existing processes and structures in the area of Identity Governance & Administration. It examines areas such as user accounts, Joiner-Mover-Leaver processes, role and access models, access reviews, the level of automation, system integrations, as well as documentation and traceability.