Atos DirX Identity

Identity & Access Management (IAM) has become central to protecting digital corporate assets as enterprise environments grow more complex and hybrid. Traditional network perimeters matter less due to mobile access, integration of partners and customers, and cloud adoption, while the value of digital assets and intellectual property continues to rise—especially with connected devices and smart manufacturing. In this context, IAM reduces attack surface by enforcing least privilege, automating user and entitlement lifecycle processes, and enabling regular reviews to detect excessive access. IAM also supports business enablement by streamlining onboarding and change workflows for employees, contractors, partners, and customers, while ensuring timely revocation of entitlements and deactivation of accounts.

Within IAM, Identity Governance and Administration (IGA) is positioned as the core layer, combining Identity Provisioning (account creation and entitlement assignment across systems) with Access Governance (analysis of entitlements, recertification, and access request workflows). Effective IGA requires strong collaboration between business and IT to translate business-approved access into technical entitlements and manage ongoing reviews, including Segregation of Duties (SoD) controls and identification of high-risk entitlement combinations.

Atos DirX Identity is presented as a mature IGA product with roots in early meta-directory solutions and, in release 8.7, a full set of expected IGA capabilities. Its strengths include robust identity data consolidation, broad and deep connectors (notably strong SAP integration and support for vertical solutions), mature RBAC and rules-based entitlement management with parameterized roles, enforced SoD via policies and workflows, improved workflow customization and ITSM integration, added risk scoring for prioritizing recertification, a modern responsive UI backed by REST APIs (plus an iOS app), and strong high availability and load balancing. Key challenges are limited market visibility and a small partner ecosystem beyond Atos, despite Atos’s global delivery scale.

• IAM manages identities, user accounts, passwords, and access entitlements across organizational systems and applications.
• The relevance of the traditional internal/external network perimeter has decreased due to mobile access, partner/customer integration, and cloud application use.
• Identity Governance and Administration (IGA) consists of Identity Provisioning and Access Governance.
• Identity Provisioning automates creation and management of user accounts and high-level entitlements across multiple systems.
• Access Governance provides entitlement analysis, regular reviews and recertification, and access request workflows.
• DirX Identity is Atos’s IGA offering and is positioned alongside an Evidian IGA offering within the broader Atos/Evidian context.
• DirX Identity version 8.7 includes support for access recertification and access risk management.
• DirX Identity supports connectors for vertical solutions such as PLM and healthcare, and integrations such as smartcard management, physical access control, and unified communications.
• The product supports both role-based access control (RBAC) and rules-based entitlement management, including role hierarchies.
• DirX Identity provides high availability support and load balancing across multiple server instances.

• “IAM done right ensures that identities, their user accounts and passwords, and their access entitlements are well-managed.”
• “IAM thus reduces the attack surface by helping organizations moving towards the ‘least privilege’ principle.”
• “Creating that interface well, from the definition to the ongoing management and reviews of entitlements, is challenging.”
• “Enabling and protecting the Digital Transformation requires IGA.”
• “Data from various sources must be mapped, cleansed and consolidated.”
• “A specific strength is the support of parameterization of roles.”
• “If a SoD violation occurs, a workflow for getting (or denying) approval is started.”
• “Such integration is the recommended best practice for setting up IGA solutions.”
• “This e.g. allows for focusing recertification activities on high risk users that accumulate more access rights than others.”
• “With the new release, Atos catches up with other vendors in the IGA market.”