Why IDM?

The most frequent motivation for launching a programme for the implementation of an IAM, IGA or PAM class solution in an organisation is external regulations, which require our clients to address IT security requirements efficiently and effectively. The overriding goal behind this is to protect the most valuable asset of any company, i.e. the data of its customers.

Many companies perceive an identity management system – often referred to as IDM – as a system for submitting and approving requests for access to business applications, IT systems for their employees or external colleagues. From a naming point of view, over time IDM-class systems have been enhanced with additional functionality and have evolved from the name IDM to IAM and then to IGA (you can learn about the differences here). However, the ability to simply submit applications or synchronise data between IT systems is not the most important feature of an Identity Governance and Administration (IGA) class system.

The basic set of functionalities of such a system is to ensure accountability for the accesses assigned to an employee resulting from the function the employee performs in the organisation, and to present the current status of assigned rights in systems integrated with the IGA system. In short, the IGA System allows for the management of an employee’s digital identity in the context of meeting audit requirements and ensuring regulatory compliance.