Most organisations cannot answer a simple question: who, and what, has access to what, and how did they get it? Identity data is spread across identity providers, directories, IGA, PAM, cloud IAM, SaaS applications, HR systems and secrets managers, each with its own view. Large parts of the estate, such as local application accounts, service accounts, OAuth grants and AI agents, sit outside every one of those views, sometimes called "identity dark matter". Identity Visibility and Intelligence Platforms (IVIP) are an emerging category designed to close that gap. This guide explains what IVIP is, how it relates to IGA, ISPM and ITDR, what it is used for, and how to decide whether you need one.
Key takeaways
- IVIP is a category defined by Gartner in its Hype Cycle for Digital Identity research. It describes platforms that aggregate and correlate identity data from across the IAM stack to give a single, accurate view of identities, access and posture.
- IVIP is a visibility and intelligence layer, not a replacement for IGA, access management or PAM. Its job is to make those controls better informed and to find what they miss.
- It overlaps heavily with identity security posture management (ISPM); many products span both.
- The value case is strongest where identity data is fragmented: many IdPs and directories after mergers, heavy SaaS use, multi-cloud, and large NHI populations.
How Gartner describes IVIP
Gartner introduced IVIP in its Hype Cycle for Digital Identity; vendor and analyst summaries cite the 2025 edition and describe it as an early-stage ("innovation trigger") category. As quoted in published vendor summaries, Gartner describes IVIPs as providing "a single view of IAM data, activity/events, relationships, configuration and posture to enable rapid improvement of all other integrated IAM controls and capabilities". Because the underlying Gartner research is subscription-only, check the current report for the latest definition.
The problem IVIP addresses
- Fragmented identity data: a person may have accounts in several directories, IdPs and dozens of applications, with no reliable link between them.
- Blind spots: local accounts not connected to SSO, applications not connected to IGA, service accounts, API keys, OAuth apps and AI agents that no system tracks fully.
- Inconsistent answers: IGA, the IdP and each application disagree about who has access.
- Slow investigations: during an incident, working out everything an identity can reach takes days.
- Limited analytics: existing tools see their own data, not patterns across systems.
Typical IVIP capabilities
| Capability | Description |
|---|---|
| Data ingestion | Collects accounts, entitlements, configuration and activity from IdPs, directories, IGA, PAM, cloud, SaaS, HR and NHI sources |
| Correlation | Links accounts to people or workloads; resolves the same identity across systems; maps effective access, including nested groups and roles |
| Identity graph | Models relationships between identities, accounts, groups, roles, resources and owners |
| Posture analysis | Finds misconfigurations, MFA gaps, dormant and orphaned accounts, excessive privilege and risky NHIs. See the ISPM Guide |
| Analytics and AI | Outlier detection, peer comparison, natural-language queries over identity data |
| Activity insight | Uses activity data to show which access is used, and supports detection. See the ITDR Guide |
| Action | Feeds findings to IGA, PAM, IdP and ticketing for remediation |
How IVIP relates to other identity categories
| Category | Primary purpose | Relationship to IVIP |
|---|---|---|
| IGA | Govern access through lifecycle, requests and reviews | IVIP supplies better data and finds unconnected accounts; IGA acts on it |
| Access management / IdP | Authenticate and authorise at sign-in | IVIP analyses its configuration and activity |
| PAM | Control privileged access | IVIP finds privileged accounts outside PAM |
| ISPM | Assess and improve identity posture | Strong overlap; ISPM focuses on risk findings, IVIP on the unified data layer |
| ITDR | Detect and respond to identity attacks | IVIP context improves detection and investigation |
| NHI security platforms | Discover and govern non-human identities | Overlap for NHI visibility; NHI platforms go deeper on secrets and workload context |
Use cases
- Complete inventory of human and non-human identities and accounts, including those outside IGA.
- Effective access analysis: what can this person, service account or AI agent actually reach?
- Audit and review support: accurate data for access reviews and evidence.
- Mergers and acquisitions: understanding identity estates across organisations quickly.
- Incident response: determining the blast radius of a compromised identity in minutes.
- Programme prioritisation: showing where IGA, PAM and MFA coverage is missing.
Do you need an IVIP?
Consider IVIP if several of these apply:
- Multiple directories or IdPs, or recent mergers.
- Large numbers of applications not connected to IGA.
- Significant multi-cloud and SaaS estates.
- Large or unknown NHI and AI agent populations.
- Repeated audit findings about orphaned or unreviewed access.
- Slow identity-related incident investigations.
If your identity estate is small and well consolidated, the features in your IdP and IGA may be enough. See the IVIP and ISPM Buyer's Guide for evaluation criteria.
Practitioner checklist
- Map where identity data lives today and which sources your current tools cannot see.
- Define the questions you need answered (inventory, effective access, blast radius, posture).
- Assess whether existing IdP, IGA and NHI tools can answer them.
- If evaluating IVIP, test correlation accuracy and coverage of your hardest sources.
- Plan how findings will flow into IGA, PAM and ticketing for action.
References
- Axonius: Identity visibility gets its own category (quotes Gartner's IVIP definition)
- Bsure: Gartner introduces IVIP
- OWASP Non-Human Identities Top 10 (2025): NHI1 Improper Offboarding and NHI5 Overprivileged NHI
Related NHI Mgmt Group resources: ISPM Guide · IAM and IGA Basics · Identity Convergence Guide · NHI Security Platform Buyer's Guide
