IGA
Identity Governance and Administration. The discipline of managing who has access to what, why, and for how long. Covers access certification, segregation of duties, joiner-mover-leaver lifecycle, and audit reporting.
IGA is the least glamorous and most audited part of identity, and the discipline where tooling helps least without process. The recurring failure is buying a platform to answer "who has access to what" in an environment where the authoritative data is spread across an HR system, a directory, and dozens of applications with no consistent notion of a user. Connector coverage and data quality decide the outcome, not the product.
See also: what is IGA, access certification, joiner-mover-leaver, IGA vendors
Related on Start with Identity
- GlossaryCIAM
CIAM (customer identity and access management) is the sign-up, login, profile and consent layer for an application's customers, not the IAM system that manages
- GlossaryDeprovisioning
Removing access when a user leaves or changes roles. Failed deprovisioning leaves orphaned accounts that auditors flag and attackers exploit. SCIM with HR-drive
- GlossaryIdentity as a Service (IDaaS)
Identity as a Service (IDaaS) is identity and access management delivered from the cloud as a subscription: the provider runs the directory, single sign-on, MFA
- PodcastIdentity at the Center
The longest-running weekly show on identity and access management programs, hosted by two practitioners. The best single feed for keeping up with the field.
- RankingCompliant IGA Platforms: SOC 2, ISO 27001:2022 & FedRAMP
The most compliance-ready IGA platforms in 2026: SailPoint, Saviynt, Omada, One Identity, and RSA Governance. Ranked on SOC 2 Type II, ISO 27001:2022, FedRAMP,
- GuideHow to Choose an IGA Platform in 2026
To choose an IGA platform, decide which governance outcomes you need, prove connectors against your worst applications, check 2026 ownership and get a comparabl