Ideiio IGA

Identity Governance and Administration (IGA) is positioned as a core security risk-management discipline covering end-to-end identity lifecycle management, access entitlements, workflows and policies, role management, access certification, segregation of duties (SoD) risk analysis, reporting, and access intelligence. Weak IGA capabilities expose organizations to identity theft, unauthorized changes, access creep, role bloating, slow access fulfillment, orphaned roles/accounts, and SoD conflicts that can enable internal fraud. IGA products centralize identity data by consolidating accounts, entitlements, and attributes from systems of record such as HR/ERP and other repositories, enabling automated provisioning/de-provisioning, synchronization, entitlement and role management, policy enforcement (static and event-driven), self-service access and password tasks, reconciliation for compliance, certification campaigns, and auditing/reporting. The market has shifted toward cloud support via two paths: re-architected “identity bridging” approaches to extend on-prem IGA to cloud apps (often via brokers), and fully cloud-deployable IGA offerings with faster deployments, upgrades, and lower short-term TCO.

Ideiio, spun out from ProofID (an IAM services and systems integrator with operations in Manchester, UK and Colorado Springs, US), targets mid-market and B2B segments underserved by enterprise-focused vendors. Mid-market organizations often need simpler, lower-cost deployments, face resource constraints, and receive weaker support from large vendors. Ideiio provides broad but intentionally less deep functionality to speed time-to-value, offered as software, virtual appliance, or AWS-hosted managed service (multi-tenant). Its two modules—ideiio Core (provisioning) and Identity Portal (self-service and requests)—support RBAC, delegated administration, role-based catalogs, fine-grained entitlements, and basic SoD checks. The Java/J2EE “identity bridge” integrates OOTB with LDAP, AD, SQL/JDBC, SCIM, REST APIs, and CSV, plus an SDK for custom connectors. Advanced analytics and deeper SoD/intelligence are not yet available but are planned, alongside a certification portal slated for July 2019.

• IGA capabilities include identity lifecycle management, entitlement management, workflows/policies, role management, access certification, SoD risk analysis, reporting, and access intelligence.
• IGA products consolidate identity information from multiple repositories and systems of record such as HR and ERP systems.
• Common IGA functions include automated provisioning/de-provisioning, attribute synchronization, access policy enforcement, self-service requests, reconciliation, certification campaigns, and auditing/reporting.
• The IGA market has shifted toward product roadmaps with in-built support for cloud applications.
• Cloud support is described through two directions: re-architected identity bridging for cloud provider integration, and cloud-deployable IGA products with ready integrations.
• Ideiio was spun out from ProofID, an IAM professional services provider and systems integrator based in Manchester, UK and Colorado Springs, US.
• Ideiio is offered as software, as a virtual appliance, and as a managed service hosted in AWS.
• Ideiio comprises two modules: ideiio Core (provisioning engine) and Identity Portal (self-service and access request management).
• The ideiio identity bridge supports SCIM 1.1, JDBC, LDAP, AD, and CSV integrations, and offers an SDK for custom connectors.
• An application-based certification capability was under development for an ideiio certification portal planned for July 2019.

• “As IGA becomes an important security risk and management discipline directly impacting the security posture of any organization, a lack of basic IGA capabilities can leave organizations exposed to risks…”
• “The mid-market segment is characterized by unique IAM challenges that are very often ignored by large IAM solution providers.”
• “IGA… remains one of the most expensive and complex security implementations.”
• “Ideiio with its ‘identity bridging’ architecture aims to offer a simpler and faster deployment cycle for common IGA use-cases…”
• “Designed to be multi-tenant, ideiio is a suitable choice for third party IAM professional service providers to host and offer managed IGA services.”
• “The cataloguing is role-based, thereby allowing users to only see and request access from a list of pre-approved resources…”
• “Advanced identity and access intelligence features to support risk-based analytics or advanced segregation of duty (SoD) analysis are, however, not yet supported…”
• “Ideiio offers identity governance fundamentals which is mostly achieved through the use of out-of-the-box workflows and in-built reporting.”
• “The Java-based architecture allows flexibility and easy skills availability for customization.”
• “A channel-first approach builds trust and empowers partner ecosystem”