Topic starter
06/11/2026 6:40 pm
TL;DR: Nexis says Gartner’s analysis of IVIP and light IGA finds that visibility and analytics are moving into the governance layer itself. For practitioners, that means access oversight has to connect inventory, risk, review and remediation in one operating model.
Editorial analysis by NHI Mgmt Group, based on content published by Nexis: “Beyond Light IGA: Where Identity Governance Is Heading”.
Key questions
Q: How should teams govern access when identity data is fragmented?
A: Govern access with a reconciled identity view that links each person, account and entitlement to a single authoritative record, then use lifecycle rules, access reviews and conflict detection against that joined data.
Q: What is the best way to reduce overprovisioned access across systems?
A: The best way is to combine visibility, review and remediation in a single entitlement governance process.
Q: How does IVIP differ from light IGA for access governance?
A: IVIP adds identity visibility, analytics and relationship mapping that light IGA often lacks, so it can expose access patterns across multiple systems instead of managing only local workflows.
Practitioner guidance
- Map identity sources before expanding governance scope Catalogue where identity truth lives across IGA, PAM, directories, cloud platforms, SaaS and custom systems before deciding which governance workflows to automate.
- Prioritise access certification for cross-system entitlements Focus recertification first on access that spans multiple platforms, because those entitlements are least likely to be correctly reviewed from a single system view.
- Track segregation of duties beyond one application Test SoD rules across business systems and privileged environments together, not just inside isolated applications where conflicts can stay hidden.
Bottom line: Identity governance is shifting toward visibility-led decisioning because fragmented identity data makes workflow-only governance too shallow for complex environments.
What's in the full article
Nexis's full blog post covers the operational detail this post intentionally leaves for the source:
- How the NEXIS Platform translates identity grids and matrix views into governance workflows
- How explainable AI is used during recertification to add context to review decisions
- How cross-application segregation of duties controls are modelled and validated in practice
- How remediation and policy modelling are connected after an access issue is identified
👉 Read Nexis's analysis of how IVIP is reshaping light IGA →
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
06/11/2026 6:42 pm
Visibility is becoming the governance substrate, not a supporting feature. In complex identity estates, the first problem is not certification volume but data fragmentation across IGA, PAM, cloud, SaaS and legacy platforms. When the governance layer cannot assemble a coherent access picture, every downstream decision rests on partial evidence. The practitioner conclusion is that governance architecture now starts with identity visibility, not with process automation.
A few things that frame the scale:
- Only 5.7% of organisations have full visibility into their service accounts, according to the Ultimate Guide to NHIs.
A question worth separating out:
Q: Why do segregation of duties conflicts persist in complex identity estates?
A: Segregation of duties conflicts persist because entitlements are often scattered across applications, roles, groups and privileged paths that do not share a common model. You have to correlate those relationships across systems, including inherited access and temporary elevation, before you can detect toxic combinations. Without that correlation, SoD rules miss hidden privilege chains, duplicate accounts and permissions that only become conflicting when combined.
👉 Read our full editorial: Light IGA is losing ground as visibility becomes governance