Identity lifecycle
Manage identities, lifecycle states, assignments and linked resource accounts as people join, change roles and leave.
Protect Identity | IGA
Identity governance
& administration
Bring identities, roles, approvals and access reviews into a governed operating model. Give business owners a clear way to decide who should have access, and keep those decisions connected to enterprise systems.
Core capabilities
Make access a business decision.
Roles & organization
Model organizational structure, role ownership and policy-driven assignments so access can be explained and reviewed.
Requests & approvals
Route access requests through configured workflows, with clear reviewer responsibilities and recorded decisions.
Access certification
Run campaigns with configured stages, reviewers, deadlines and outcomes to confirm continuing access needs.
Provisioning & reconciliation
Use connectors, mappings and tasks to coordinate accounts and entitlements, then inspect observed access.
Audit & reporting
Review identity changes, governance activity, provisioning outcomes and audit records in context.
In practice
A clear operating workflow.
Connect the initial context, the operational decision and the evidence you review.
Establish the identity
Connect the person to lifecycle state, organizational context and relevant resource accounts.
Approve access
Assign roles or request entitlements, routing decisions to configured owners and reviewers.
Provision and reconcile
Coordinate approved changes through connectors and verify task results and observed access.
Review and remove
Certify continuing need, handle role changes and verify offboarding through provisioning and audit evidence.
The connected offering
Connect governance
and privileged operations.
Explore how the products work togetherApproved IGA eligibility can provision a normal GovPAM identity. GovPAM continues to control asset permissions, credentials and sessions. Offboarding disables the managed account and queues session termination, with operator preview before reconciliation is applied.
A recorded access decision is distinct from a completed change on the target system. Review provisioning outcomes alongside governance decisions.
Before you get started
Questions,
answered.
Can IGA be deployed independently?
Yes. Protect Identity IGA can be installed and subscribed to on its own, with connectors and governance policies configured for your environment.
Who reviews access?
Certification definitions and approval workflows select reviewers, responsibilities, stages and deadlines for your governance model.
Does IGA grant privileged asset permissions?
The integration establishes approved eligibility for a normal PAM identity. Asset permissions are explicitly managed in GovPAM.
Protect Identity Solutions
See IGA in action.
Build a demonstration around your environment, operating priorities and evidence requirements.