Topic starter
22/01/2026 4:45 pm
TL;DR: AI in IGA is being used to reduce review fatigue, improve entitlement context, and make access reviews and audit reporting more defensible, according to Omada Identity. The deeper issue is that legacy governance assumes humans can reliably interpret dense access data at scale, which no longer holds in fast-moving environments.
Editorial analysis by NHI Mgmt Group, based on content published by Omada Identity: “A New Era for IGA: How AI Augments Identity Governance and Administration”.
Key questions
Q: How should security teams reduce access review fatigue without weakening governance?
A: Security teams should reduce review fatigue by shrinking entitlement lists, grouping stable access into lean roles, and using contextual signals to highlight exceptions.
Q: Why do access reviews become rubber-stamping exercises in many IGA deployments?
A: Access reviews degrade when reviewers lack current manager mappings, accurate HR data, and clear entitlement context.
Q: How should organisations use AI in access certification?
A: Use AI to prioritise and explain, not to erase accountability.
Practitioner guidance
- Tune certification workflows for decision quality Reduce the number of items a reviewer must inspect at once and surface the entitlement context that changes the decision, such as business justification, risk level, and access history.
- Separate audit evidence from raw reporting Build audit outputs that explain why access exists and whether it remains justified, instead of forcing auditors to reconstruct that story from multiple dashboards.
- Use AI to prioritise high-risk access reviews Apply contextual scoring so reviewers focus first on access that is unusual, sensitive, or hard to justify, rather than treating every certification item as equal.
Bottom line: AI in IGA is most valuable when it reduces interpretive load, not when it simply automates existing review steps.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
11/10/2026 4:04 am
AI in IGA is best understood as a decision-context problem, not an automation story. The article's real insight is that review fatigue and audit confusion are symptoms of governance interfaces that surface data without meaning. When the control asks humans to interpret too much entitlement complexity, approval quality degrades predictably. For practitioners, the governing question is whether the system helps reviewers decide, not merely whether it speeds them up.
A few things that frame the scale:
- Nearly 60% of IT leaders cite restrictive cost and complexity as a weakness of legacy identity governance, according to the 2025 State of Identity Governance Report.
A question worth separating out:
Q: What makes audit reporting more defensible in modern IGA programmes?
A: Defensible audit reporting depends on clear lineage between access, business justification, and policy enforcement. If the reporting layer only produces dashboards, auditors still have to interpret the evidence manually. If it explains the control story, the organisation can answer who approved what, why it was acceptable, and whether it stayed justified.
👉 Read our full editorial: AI augments IGA by fixing review fatigue and weak audit context