SailPoint Predictive Identity

Identity & Access Management (IAM) has become central to protecting digital corporate assets as enterprise environments grow more complex and hybrid. Traditional network perimeters have weakened due to mobile work, partner and customer integration, and cloud adoption, while the business value of digital assets and intellectual property has increased—especially with connected devices and smart manufacturing. In this context, IAM reduces attack surface by enforcing least privilege, automating user lifecycle processes, and enabling regular entitlement reviews to detect excessive access. IAM is also a business enabler, supporting efficient onboarding and access changes for employees, contractors, partners, and customers, while ensuring timely deprovisioning when access is no longer needed.

Core IAM capabilities are often framed as IGA (Identity Governance and Administration), combining Identity Provisioning with Access Governance. Provisioning automates account creation and entitlement assignment across systems; governance adds analysis, recertification, and request workflows, bridging business approvals with technical entitlements. Key difficulties include navigating tens of thousands of granular entitlements, building role-based models with discipline and effort, and identifying high-risk access efficiently. These challenges are driving emerging AI and statistical approaches aimed at improving IGA usability and effectiveness.

SailPoint Predictive Identity extends SailPoint’s IdentityIQ and IdentityNow with SaaS services applying machine learning and predictive analytics to IGA pain points. It focuses on proposing likely-needed entitlements, identifying risky outliers, improving access reviews with risk-based recommendations, and simplifying approval decisions. The offering comprises Access Insights (dashboards and access history), Access Modeling (continuous peer-based optimization distinct from static role mining), and a Recommendation Engine with explainable rationale. Strengths include modern UI, strong dashboards, and explainable recommendations; limitations include dependence on large datasets, lack of integrated User Behavior Analytics, and no entitlement rollback via access history.

• IAM manages identities, user accounts, passwords, and access entitlements across multiple systems and applications.
• Mobile access, partner/customer integration, and cloud applications have reduced the relevance of traditional network perimeters.
• Digital corporate assets and intellectual property have increased in value and relevance in recent years.
• IGA consists of two core elements: Identity Provisioning and Access Governance.
• Identity Provisioning automates creating and managing user accounts and high-level entitlements across systems.
• Access Governance includes entitlement analysis, regular reviews/recertification, and access request workflows.
• SailPoint’s widely used flagship IGA product is IdentityIQ, and its portfolio includes IdentityNow.
• SailPoint Predictive Identity is delivered as SaaS services integrated with IdentityIQ and IdentityNow.
• SailPoint Predictive Identity includes three services: Access Insights, Access Modeling, and Recommendation Engine.
• Machine learning in this approach does not work well for small deployments due to limited data volume.

• “Protecting digital assets, the systems, and applications in an IT environment of growing complexity and of a hybrid nature while facing ever-increasing attacks, involves several actions organizations must take.”
• “IAM thus reduces the attack surface by helping organizations moving towards the ‘least privilege’ principle.”
• “Enabling and protecting the Digital Transformation requires IGA.”
• “Identifying the right access entitlements can be a challenge, with frequently tens of thousands of granular entitlements to choose from.”
• “This is still an emerging area, but one that is of specific interest for increasing the user experience (UX) in using IGA.”
• “SailPoint Predictive Identity is about adding ‘predictive’ capabilities, i.e. predictive analytics to IGA.”
• “Thus, SailPoint Predictive Identity falls into the category of technologies that these days commonly are marketed as being AI-powered.”
• “While this may sound like ‘role mining’, it differs fundamentally, because it is not a static approach… but continuous optimization of access controls and policies…”
• “Explainable AI helps the users in trusting the system, because they understand the why of recommendations.”
• “Apparently, this is still a rather new offering, where we expect seeing further innovation over time.”