Notifications
Clear all
Topic starter
24/06/2026 7:12 pm
TL;DR: The underlying issue is that governance now has to span actors whose access patterns, lifecycles, and accountability models are no longer the same, according to Saviynt. Saviynt positions its AI-powered identity platform around governing human and non-human access, with a newsroom focus on platform developments, partnerships, and solution updates that reflect how identity security is widening across workloads, applications, and AI agents.
NHIMG editorial — based on content published by Saviynt: newsroom coverage of identity platform developments and updates
By the numbers:
- Over 100 million identities protected, and counting!
- 90% of IT leaders say properly managing NHIs is essential for a successful zero-trust implementation.
- NHIs outnumber human identities by 25x to 50x in modern enterprises.
Questions worth separating out
Q: How should IAM teams govern humans, NHIs, and AI agents in one programme?
A: Start by separating the control assumptions for each actor type.
Q: Why do non-human identities create more governance risk than most teams expect?
A: NHIs often outnumber human identities and are harder to see, review, and revoke.
Q: When does just-in-time access make sense for privileged identities?
A: JIT makes the most sense when access is high risk, task scoped, and needed for a short operational window.
Practitioner guidance
- Map governance by actor type Inventory which policies apply to humans, service accounts, workload identities, and AI agents separately.
- Separate persistent privilege from task-scoped access Use JIT patterns for high-risk access where the operational task does not require standing entitlement.
- Review runtime authorisation for AI-connected tools If agents can reach tools or data through MCP-style connections, validate whether policy is enforced at execution time rather than only at provisioning.
What's in the full article
Saviynt's full newsroom coverage covers the operational detail this post intentionally leaves for the source:
- Platform-specific explanation of how the identity cloud stitches together governance for human and non-human access.
- Named solution areas such as just-in-time access, application access governance, and privileged access management.
- Product and business updates tied to Saviynt's current platform direction and market positioning.
- The company's own framing of how its news, partnerships, and solution enhancements fit together.
👉 Read Saviynt's newsroom update on identity security developments →
Saviynt's identity platform update: what changes for IAM teams?
Explore further
View Full Forum → | NHI Foundation Course → | Our Services →
25/06/2026 4:23 am
Identity security is moving from account administration to actor governance. Saviynt's positioning reflects a market where the core challenge is no longer only provisioning and certification for employees. The same identity plane now has to account for service accounts, workload credentials, and AI-driven actors that access systems differently. That makes actor type the first design decision, not a reporting dimension. Practitioners should evaluate governance by subject type before they compare platform features.
A few things that frame the scale:
- 97% of NHIs carry excessive privileges, increasing unauthorised access and broadening the attack surface, according to the Ultimate Guide to NHIs.
- Only 5.7% of organisations have full visibility into their service accounts, which is why entitlement review is often operating without complete evidence.
A question worth separating out:
Q: Who should own offboarding for service accounts and AI agents?
A: Ownership should sit with the team that can prove the identity is no longer needed and can revoke its access without breaking dependent systems. For service accounts and agents, that means documented accountability, not informal system ownership. Offboarding should produce verifiable revocation evidence, not just a ticket closure.
👉 Read our full editorial: Saviynt's identity platform signals broader NHI and AI agent governance
