Topic starter
25/06/2026 5:11 pm
TL;DR: Demand for access entitlement control, separation of duties enforcement, and hybrid identity visibility across cloud and on-prem environments is highlighted by Saviynt’s recognition as Overall Leader in KuppingerCole’s Identity as a Service - IGA Leadership Compass, according to Saviynt and KuppingerCole. The signal for practitioners is that governance scope is widening beyond classic IGA into cloud privileged access and risk-based access decisions.
Editorial analysis by NHI Mgmt Group, based on content published by Saviynt: “Press Releases”.
Key questions
Q: How should organisations govern access when identity controls are spread across IGA, AM, and PAM?
A: They should treat governance as one continuous workflow, not three separate teams.
Q: When does separation of duties fail in hybrid identity environments?
A: It fails when the policy exists only at design time and is not re-evaluated against inherited permissions, delegated access, and exception paths.
Q: What should security teams do first when cloud privileged access sits outside IGA?
A: Bring privileged cloud roles into the same inventory and review cycle as business entitlements.
Practitioner guidance
- Map the effective access graph Build a single inventory of application entitlements, cloud roles, and privileged paths so governance decisions are based on effective access rather than disconnected role records.
- Extend certification into privileged access Include cloud privileged access and administrative roles in recertification cycles so elevated access is reviewed with the same rigor as ordinary business access.
- Re-test separation of duties rules Run SoD checks against current entitlements after exceptions, role nesting, and cross-application grants, not only against the original role design.
Bottom line: IGA is being judged less as a certification workflow and more as a hybrid access governance layer that must account for entitlements, SOD, and privileged access together.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 4 days ago by NHI Mgmt Group
This topic was modified 2 days ago 2 times by NHI Mgmt Group
25/06/2026 5:43 pm
IGA convergence is becoming a scope question, not a product category question. The market is moving toward governance platforms that can see entitlements, SOD, and privileged access in the same decision loop. That is less about feature bundling and more about whether identity teams can still answer a basic question: who has effective access, under what risk, and across which environments? Practitioners should treat convergence as a programme-design decision, not a procurement label.
A few things that frame the scale:
- 97% of NHIs carry excessive privileges, increasing unauthorised access and broadening the attack surface, according to the Ultimate Guide to NHIs.
A question worth separating out:
Q: Why do hybrid identity programmes need a single view of effective access?
A: Because governance decisions depend on what an identity can actually do across environments, not on where the entitlement was created. A single view exposes cross-platform privilege accumulation, makes SOD review defensible, and reduces the gap between approved and real access.
👉 Read our full editorial: Saviynt's IGA recognition points to converged identity governance
This post was modified 4 days ago by NHI Mgmt Group