Topic starter
11/06/2026 10:59 pm
TL;DR: Most organisations sit between light IGA and full IGA, with hybrid identity sprawl, manual reviews, and identity debt outpacing quarterly governance cycles, according to Gathid. Continuous, graph-based observability is emerging as the practical bridge between deployment speed and audit-ready control.
Editorial analysis by NHI Mgmt Group, based on content published by Gathid: “Light IGA Vs. Full IGA: Rethinking Identity Governance For The Real World”.
Key questions
Q: Why does binary Light IGA versus Full IGA thinking fail in hybrid estates?
A: Because it assumes identity data is clean, centralised and stable enough to govern through a single deployment model.
Q: When should organisations prioritise continuous governance over a full IGA rollout?
A: When access changes faster than review cycles can certify, and when the estate includes systems that the current platform does not cover well.
Q: What breaks when access reviews are only run on a fixed schedule?
A: Fixed-cycle reviews encourage repetition, not judgment.
Practitioner guidance
- Define the gray zone estate Inventory cloud apps, on-prem systems, disconnected HR sources, OT and physical access points that sit outside a single IGA workflow.
- Measure identity debt continuously Track outdated, excessive and orphaned access as an active governance metric instead of relying on quarterly certification outcomes.
- Add a governance intelligence layer Use a digital twin or knowledge graph to connect people, accounts, roles and entitlements across systems that current tools do not correlate.
Bottom line: The article shows that identity governance fails when organisations are forced to choose between speed and depth in estates that are already mixed and dynamic.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
12/06/2026 7:26 am
Binary IGA framing is a governance simplification, not an operating model. The article captures a common mistake: treating identity governance as a choice between minimal coverage and a long enterprise programme. That model ignores the fact that many organisations already run mixed estates where neither extreme fits cleanly. The practical conclusion is that governance has to be designed for intermediate maturity, not idealised end states.
A few things that frame the scale:
- Nearly 60% of IT leaders cite restrictive cost and complexity as a weakness of legacy identity governance, according to the 2025 State of Identity Governance Report.
A question worth separating out:
Q: What is the difference between Light IGA and a governance intelligence layer?
A: Light IGA focuses on basic provisioning and reviews inside a narrower control boundary, while a governance intelligence layer correlates identity relationships across systems and exposes drift continuously. The first executes governance workflows. The second improves the quality of the decisions those workflows depend on.
👉 Read our full editorial: Identity governance in the gray zone: why binary IGA fails
This post was modified 1 day ago by NHI Mgmt Group