Identity Governance & Administration (IGA)
Joiner-mover-leaver, access reviews and SoD — governed.
Lifecycle identity governance over Nexus People Services, IdPs (Entra, Okta, Ping) and PAM brokers. Birthright provisioning, access reviews, SoD enforcement and just-in-time elevation — all evidenced.
What IGA does
Joiner / mover / leaver automation with HR as authoritative source
Birthright access bundles by role, location and entity
Periodic access reviews with risk-based campaign scoping
Segregation-of-Duties (SoD) policy with preventive and detective controls
Just-in-time (JIT) elevation via Link's PAM Broker
Closed-loop revocation and de-provisioning evidence
The IGA state machine
IGA enforces a controlled state machine — every transition is evidenced and audit-traceable.
Source
HR event triggers identity lifecycle action.
Provision
Birthright access via Link IdP Connector.
Review
Periodic certifications; risk-based scoping.
Detect
SoD analysis on every grant; flag conflicts.
Revoke
JIT elevation and timely de-provisioning, evidenced.
Evidence in, outputs out
IGA reads live signals from the operating estate and emits regulator-ready outputs — no shared drives, no spreadsheets.
Evidence sources (in)
- One / Nexus HR master data (joiner/mover/leaver triggers)
- Link IdP Connector and PAM Broker
- Risk & Compliance SoD policy
Outputs (out)
- Access review certifications (passed / revoked)
- SoD violation register with compensating controls
- Orphan and stale account remediation reports
Crosswalked to what regulators ask for
Used in these business solutions
Identity Governance & Administration (IGA) is composed into outcome-led iShield solutions.
Run IGA on iShieldGRC.
Stop running iga in spreadsheets and email threads. See it on a live evidence ledger.