Topic starter
24/06/2026 11:31 pm
TL;DR: Omada and adesso say their continued collaboration is aimed at improving identity governance, compliance, and operational efficiency for regulated organisations in the DACH region, while supporting sovereign control over access, auditability, and resilience, according to Omada Identity. The real lesson is that identity governance now sits at the centre of sovereignty programmes, cloud adoption, and AI readiness.
Editorial analysis by NHI Mgmt Group, based on content published by Omada Identity: “Sovereignty Through Security: adesso and Omada Strengthen Cooperation in Identity Management”.
Key questions
Q: What breaks when identity governance is missing from an IAM programme?
A: The main failure is entitlement drift.
Q: Why does access revocation matter so much for regulated organisations?
A: Because revocation is the point where policy becomes control.
Q: How can teams tell whether layered identity governance is actually working?
A: Look for evidence that identity state, access reviews, privileged sessions, and monitoring outputs are aligned.
Practitioner guidance
- Map sovereignty requirements to identity governance controls Translate digital sovereignty goals into measurable identity outcomes such as entitlement traceability, access decision ownership, and documented revocation paths for regulated systems.
- Tighten joiner, mover, and leaver enforcement Bind provisioning and deprovisioning to employment, contractor, and vendor lifecycle events so access is granted from day one and removed no later than the last working day.
- Review orphaned and over-privileged accounts Use entitlement recertification to identify accounts that no longer map to a current business relationship, then remove or reduce access before they become a governance exception.
Bottom line: Digital sovereignty depends on identity governance that can prove access control, not just describe it.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 8:27 am
Identity governance is now a sovereignty control, not just an IAM discipline. The article is strongest when read as a governance statement: organisations cannot claim digital sovereignty if they cannot demonstrate control over access decisions, revocation, and auditability. That elevates identity governance from operational support to a strategic control plane for regulated environments. Practitioners should therefore judge sovereignty readiness by access traceability, not by policy language alone.
Digital sovereignty creates a governance test that IAM teams cannot outsource: if the organisation cannot explain access decisions end to end, sovereignty claims will not survive audit or incident review. The practical shift is toward evidence-rich lifecycle control, where provisioning, review, and removal are all tied to business events rather than manual follow-up.
A question worth separating out:
Q: Should organisations manage human and non-human access with the same lifecycle discipline?
A: Yes. The governance logic is the same even though the identities differ. Humans, service accounts, tokens, and AI-linked access all need ownership, review, and revocation rules that follow the business lifecycle. Treating non-human access as exempt is how governance gaps become persistent risk.
👉 Read our full editorial: Omada and adesso extend identity governance partnership in DACH