Deep Identity

Managing identities is positioned as a core competence for modern organisations because it helps control costs, reduce risk, and enable controlled access for staff, partners, suppliers, and in some cases customers. Effective identity lifecycle management is emphasised: organisations must onboard users quickly, adjust permissions during role changes or reorganisations, and de-provision access immediately upon departure. Deep Identity Manager is designed around these lifecycle triggers, typically sourcing identity attributes from an authoritative system such as an HRMS, then creating, modifying, or deleting accounts across target applications. Provisioning actions include establishing usernames and passwords, updating Active Directory (AD) group memberships, and writing entries to enterprise directories.

A key differentiator is role-based provisioning driven by position or role data in HRMS. A policy engine evaluates role rules—configured via a GUI with natural language rule building—to determine what accounts and entitlements to provision. The platform can detect potential segregation-of-duties (SoD) issues and trigger manual verification to maintain policy compliance. Deep Identity also prioritises user experience through self-service capabilities that reduce administrator workload, using a shopping-cart model to bundle multiple access requests. Self-service extends to password reset and account unlocking through challenge-response.

The broader solution comprises four integrated modules: Identity Audit and Compliance Manager (IACM) for role discovery, mining, attestation, compliance review, risk scoring, closed-loop remediation, and dashboards; Identity Manager (IM) for lifecycle automation and workflow-based approvals; Privileged Identity Manager (PIM) for proxy-based privileged access with session recording and analysis; and Data Governance Manager (DGM) for asset discovery, entitlement mapping, and governance using IACM data. Strengths include usability, role optimisation, governance tooling, and analytics, while challenges include HRMS integration complexity and limited role mining support for proprietary target systems.

• Identity information is typically sourced from an attribute authority, most often an HRMS.
• The solution can create, modify, or delete user accounts in target systems based on triggers from input systems.
• Provisioning actions include setting up usernames and passwords, writing user IDs to AD groups, and writing entries into an enterprise directory.
• The platform supports role-based provisioning using role or position information from HRMS data.
• Potential segregation-of-duties violations can be detected and routed for manual verification.
• Self-service supports password reset and account unlocking via a challenge-response feature.
• Identity Audit and Compliance Manager includes role mining that discovers entitlement groupings and recommends candidate roles.
• Attestation can be performed via self-service attestation or via manager attestation reporting, and system owner attestation is supported.
• Privileged Identity Manager can log and record privileged sessions, storing logs on the PIM Gateway Server.
• For SAP organisations, access requests can be checked for SoD conflicts during entry before submission, and parallel approval paths are supported.

• “Identity management is therefore a core competence of the modern organisation.”
• “This ‘lifecycle management’ is at the core of the Deep Identity Manager product.”
• “One of the strengths of the Deep Identity product is its role-based provisioning.”
• “This is accomplished via a policy engine that evaluates the ‘rules’ associated with a user’s role and provisions them accordingly.”
• “Deep Identity has focussed on the user interface, providing a self-service facility with authorisation workflow to minimise the need for manual entry by administrative personnel.”
• “The self-service functionality uses a shopping cart approach to provisioning, with users able to add multiple requests into a single entry.”
• “The product takes an ‘SAP-like’ approach to connecting business roles to technical accounts, or groups.”
• “This role optimisation feature aids in the avoidance of role proliferation.”
• “Administering the Deep Identity product requires no detailed knowledge of the product or extensive training.”
• “Parallel approval paths are supported.”