Topic starter
12/06/2026 9:24 pm
TL;DR: Fragmented identity data across HRIS, IdP, and cloud apps slows provisioning, deprovisioning, and access reviews, creating orphaned and over-privileged accounts that raise audit and security risk, according to Josys. Unified attribute reconciliation helps, but the governance problem is still data trust, not sync alone.
Editorial analysis by NHI Mgmt Group, based on content published by Josys: “Introducing Josys' Multi-Source Identity Enrichment”.
Key questions
Q: What breaks when identity data is fragmented across HR, directory, and application systems?
A: Fragmented identity data creates blind spots in access governance.
Q: Why does bad identity data increase security and audit risk?
A: Because access decisions are only as reliable as the attributes behind them.
Q: How do security teams know whether enrichment is actually improving governance?
A: Look for fewer malformed events, fewer manual parser fixes, lower false-positive rates, and clearer routing decisions before ingestion.
Practitioner guidance
- Define attribute source authority Assign a system of record for each high-impact attribute such as employment status, department, manager, and location before enabling automated decisions.
- Test reconciliation against lifecycle edge cases Run mover and leaver scenarios where HR, IdP, and SaaS records conflict so you can see which value wins and how stale data is handled.
- Measure deprovisioning latency from authoritative change Track the time between a trusted status change and access removal, then investigate any delay caused by inconsistent source data or manual intervention.
Bottom line: Fragmented identity data turns IGA into a reconciliation exercise instead of a governance discipline.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 3 days ago by NHI Mgmt Group
12/06/2026 11:26 pm
Identity trust, not connector count, is the real IGA bottleneck: This article is not about whether organisations can sync more systems. It is about whether the attributes used for governance are trustworthy enough to support access decisions. When source systems disagree, the programme becomes evidence management instead of access governance, and practitioners should treat data trust as a first-class control problem.
A few things that frame the scale:
- 92% of organisations expose NHIs to third parties, raising concerns about supply chain security, according to the Ultimate Guide to NHIs.
A question worth separating out:
Q: Should IGA teams prioritise attribute authority or workflow automation first?
A: Attribute authority should come first. If teams automate provisioning and reviews before agreeing which source owns each field, they risk scaling inconsistency instead of governance. Workflow automation only helps once source-of-record rules and reconciliation logic are explicit.
👉 Read our full editorial: Multi-source identity enrichment exposes the real IGA data gap
This post was modified 3 days ago by NHI Mgmt Group