Beta Systems Garancy Recertification Center

Access Governance is a rapidly growing segment within the broader IAM/IAG market, centered on access request management, role management, access recertification, and segregation of duties (SoD) enforcement. The segment has evolved through the addition of Access Intelligence for analyzing entitlements and identifying access risks, and some vendors have expanded into user activity monitoring. Vendor strategies differ: some offer access governance only, while others combine access governance with identity provisioning, either as an overlay on existing provisioning infrastructure or as an integrated suite, with the preferred approach depending on a customer’s IAM landscape and goals.

Access recertification is highlighted as a critical access governance task because gaps can create immediate security risk and audit findings. Effective recertification must be frequent, business-friendly, and supported by technical solutions that work across heterogeneous IT environments.

Beta Systems, a German software vendor founded in 1983 and publicly listed since 1997, positions itself in the combined governance-and-provisioning category. Its Garancy Recertification Center is a newly developed, browser-based portal designed to run configurable recertification campaigns quickly without customization. Campaigns can be created and scheduled by user or resource, using flexible time parameters and selection criteria such as organizational units, job titles, or risk assessments. Managers receive business-readable views of roles, groups, and SoD violations, along with progress and timing information, and audit analyses support compliance evidence.

A key differentiator is tight integration with SAM Enterprise Identity Manager: campaign data is sourced from SAM Enterprise’s central repository, and revocation decisions automatically trigger de-provisioning via the SAM Enterprise provisioning layer, strengthening end-to-end processing and audit trail continuity. The portal includes dashboards, delegation workflows with security checks, mobile-optimized responsive UI, and broad platform/browser support, but currently has limited recertification scope and constrained UI customization and integration extensibility.

• Access Governance focuses on access request management, role management, access recertification, and segregation of duties management and enforcement.
• Access Intelligence provides advanced analytics for identifying access risks and analyzing the status of entitlements.
• Some vendors have added user activity monitoring to access governance products.
• Beta Systems was founded in 1983 and has been listed on the stock exchange since 1997.
• Garancy Recertification Center is a newly developed product for browser-based user recertification campaigns.
• Recertification campaigns can be created and scheduled by user or by resource.
• Recertification results that require revocation are automatically transferred for execution to the SAM Enterprise provisioning layer.
• The recertification portal runs on operating systems that support Java and Tomcat.
• The database is Microsoft SQL Database.
• The solution supports the latest versions of Microsoft Edge, Mozilla Firefox, and Chrome.

• “The recertification of access rights is becoming one of the most important tasks in the field of access governance.”
• “Gaps introduce immediate security risks and audit findings.”
• “To reduce such risks, the recertification has to be done frequently and in a business-friendly way.”
• “The solution was designed to provide ready-to-use functionality, allowing quick, configurable use of recertification campaigns without customizing.”
• “This ensures the continuous processing of recertification tasks from the decision to the execution in one system, which is of some relevance to the audit trail.”
• “The Garancy Recertification Center is designed as a portal solution with a modern and intuitive look & feel.”
• “The portal integrates metrics and a dashboard to track the completeness of each campaign.”
• “It is possible to assign substitutions or delegations via workflows with automated security checks on ability and conformity according to defined delegation rules in the IAM engine.”
• “It doesn’t consider wider use cases like owner-concepts for technical accounts or the recertification of the role definitions themselves.”
• “The standard applications within the Garancy Recertification Center can only be modified based on configuration.”