Topic starter
24/06/2026 10:38 pm
TL;DR: The latest newsroom page reinforces a broader market shift toward platforms that govern both human and non-human access across applications, data, and business processes, according to Saviynt, while claiming more than 100 million identities protected. The identity problem is no longer just who gets access, but how governance scales across service accounts, AI agents, and workforce identities.
Editorial analysis by NHI Mgmt Group, based on content published by Saviynt: “Newsroom”.
By the numbers:
- Over 100 million identities protected, and counting, according to Saviynt.
Key questions
Q: How should security teams govern human and non-human access in the same programme?
A: They should use one governance model for ownership, approval, review, and revocation, but apply it differently by actor type.
Q: Why do machine identities need separate lifecycle controls from workforce accounts?
A: Machine identities often outlive the process or integration that created them, so access can persist after business need has changed.
Q: What breaks when non-employee access is reviewed too infrequently?
A: Entitlements drift beyond the original business need, and dormant accounts stay active after a project or contract ends.
Practitioner guidance
- Review identity estate segmentation Map where human, service account, workload, and AI-driven access are governed separately today, then identify where unified policy is actually needed versus where actor-specific controls must remain distinct.
- Inventory non-human identities end to end Establish ownership, purpose, and expiry context for machine identities across applications, data platforms, and business processes so governance does not stop at simple account discovery.
- Tie entitlement review to lifecycle events Move beyond periodic certification by linking onboarding, role changes, and offboarding to machine identity entitlement changes and revocation triggers.
Bottom line: This announcement reflects a broader move toward unified governance of human and non-human access across applications, data, and business processes.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 7:25 am
Platform convergence is now an NHI governance issue, not just a product trend. When a vendor frames one platform as the control layer for human and non-human access, it reflects the direction the market is taking: identity governance is collapsing into a cross-actor discipline. That matters because NHI programmes increasingly fail when they are separated from workforce IAM and PAM, even though the underlying control problems are connected. Practitioners should evaluate whether their operating model still treats machine identity as an exception instead of a governed identity class.
A question worth separating out:
Q: What should organisations prioritise first in identity governance?
A: Organisations should prioritise the highest-cost access problems first: orphaned accounts, excessive privilege, and manual review bottlenecks. Those issues generate both breach risk and operating cost. Start where access cannot be explained cleanly, because unexplained access is usually where governance work, audit delay, and incident scope expand fastest.
👉 Read our full editorial: Saviynt’s identity platform push and what it means for NHI governance