Topic starter
17/08/2026 4:41 pm
TL;DR: Marketplace-style app onboarding shifts governance burden onto connector certification, ownership, and lifecycle discipline, according to Saviynt. Joiner, mover, and leaver events still have to reach each connected app with enough fidelity to keep access controls working.
Editorial analysis by NHI Mgmt Group, based on content published by Saviynt: “Innovate, Build, Share: Discover the Saviynt Exchange Open Developer Ecosystem”.
By the numbers:
- The marketplace currently features over 400 apps and solutions.
Key questions
Q: Why do marketplaces make app onboarding harder to control?
A: A marketplace separates development from consumption.
Q: What breaks when disconnected apps do not support modern provisioning?
A: Lifecycle governance breaks first.
Q: How should teams govern reusable app connectors in an identity programme?
A: Treat reusable connectors as governed assets, not convenience code.
Practitioner guidance
- Define connector governance standards Set a required review path for any new connector, extension, or marketplace app before it is promoted for wider use.
- Map lifecycle events to every target app Check that joiner, mover, and leaver events create, update, and deactivate access in each connected application, including disconnected and legacy systems.
- Separate build approval from consumption approval Do not assume a connector that is valid for development is automatically valid for production distribution.
Bottom line: The article frames app onboarding as a governance problem, not only a development problem, because reusable connectors change how identity control is inherited.
Glossary terms: Application Onboarding Management, Connector Governance, Lifecycle Management, Access Certification
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 15 hours ago by NHI Mgmt Group
17/08/2026 4:46 pm
Connector governance is now part of identity governance. Once integrations are packaged, shared, and reused through a marketplace model, the connector itself becomes a governance object. That means review, certification, and lifecycle control can no longer stop at the target application. The practitioner implication is that integration sprawl must be managed as identity governance sprawl.
A few things that frame the scale:
- Only 44% of developers are reported to follow security best practices for secrets management, exposing a significant developer behaviour gap, according to the State of Secrets in AppSec.
A question worth separating out:
Q: How do teams know if app onboarding is actually governed?
A: Look for evidence that each integration has an owner, a certification state, a version history, and a deactivation path. If apps can be onboarded quickly but cannot be retired or revalidated with the same discipline, governance is incomplete. The useful test is whether the onboarding process still works when the integration must be changed or removed.
👉 Read our full editorial: Developer ecosystems are reshaping identity governance and app onboarding