Topic starter
10/07/2026 9:26 pm
TL;DR: Many IGA initiatives fail for avoidable reasons, including weak business sponsorship, unclear objectives, broken workflow automation, poor user experience, fragmented identity data, and missing maintenance, according to Soffid. Gartner estimates 50% of these implementations are in critical condition, underscoring that governance failure is usually operational, not technical.
Editorial analysis by NHI Mgmt Group, based on content published by Soffid: “Identity Governance and Administration: 6 Mistakes to Avoid”.
By the numbers:
- 50% of implementations of this type are in critical condition, according to Gartner.
Key questions
Q: What breaks when IGA is treated as an IT-only project?
A: Access governance loses the business context needed to sustain reviews, approvals, and lifecycle changes.
Q: Why does automating access workflows often make IGA problems worse?
A: Because automation amplifies whatever process already exists.
Q: What are the signs that identity data is undermining IGA governance?
A: Look for inconsistent user records, duplicate or stale entitlements, mismatched approver chains, and audit reports that require manual reconciliation.
Practitioner guidance
- Define business ownership for access decisions Name the process owners, approvers, and governance stakeholders before deployment so approvals reflect actual business accountability rather than IT convenience.
- Redesign access workflows before automating them Map current approval and certification paths, remove unnecessary handoffs, and only then automate the stable parts of the workflow.
- Cleanse identity and entitlement data early Establish authoritative sources for users, roles, groups, and entitlements so recertification and audit reporting are based on current records.
Bottom line: IGA programmes fail for repeatable reasons, and the article shows that weak sponsorship, unclear objectives, poor process design, bad data, and no maintenance are the common ones.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
10/07/2026 9:48 pm
IGA fails when governance is treated as an IT delivery problem: The article shows that access governance breaks down when business owners are absent from the decision model. That is not a tooling weakness, it is a control ownership failure. Compliance, HR, and process owners must shape access rules because governance without accountable business participation becomes a workflow with no real authority.
A few things that frame the scale:
- Nearly 60% of IT leaders cite restrictive cost and complexity as a weakness of legacy identity governance, according to the 2025 State of Identity Governance Report.
A question worth separating out:
Q: When does IGA stop being effective after rollout?
A: It stops being effective when no one owns ongoing policy updates, role maintenance, and exception review. A programme can launch well and still lose control quality if it is not measured and maintained as a living governance process.
👉 Read our full editorial: Identity governance and administration fails for six avoidable reasons