Atos DirX Identity

Identity & Access Management (IAM) sits at the center of enterprise IT security and business enablement by managing identities, accounts, passwords, and entitlements across diverse systems. As traditional network perimeters lose relevance due to mobile work, partner/customer integration, and cloud adoption, digital assets and intellectual property have become “crown jewels,” including in traditional industries moving toward connected things and smart manufacturing. In this hybrid, increasingly complex environment with rising attack pressure, IAM reduces risk by shrinking the attack surface through least-privilege practices, automating lifecycle processes, and supporting regular entitlement reviews to uncover excessive access. At the same time, it accelerates onboarding and access changes for employees, contractors, partners, and customers while ensuring timely deprovisioning when access is no longer needed.

Within IAM, Identity Governance and Administration (IGA) covers the core functions: Identity Provisioning and Access Governance. Provisioning automates account creation and entitlement assignment across systems; Access Governance adds analytics, access requests, reviews/recertification, and governance controls such as Segregation of Duties (SoD) and detection of high-risk entitlement combinations. Success depends on bridging business approvals with technical entitlements—an interface that is both essential and difficult to implement well.

Atos’ DirX Identity is presented as a modernized, comprehensive IGA platform (release 8.9) evolved from early meta-directory roots. Key recent enhancements include an expanded Business User Interface—especially simplified, centralized approvals and delegation—and extended REST interfaces to better integrate SaaS via SCIM. Strengths highlighted include robust identity data consolidation, deep and broad connectors (notably SAP and vertical solutions), mature RBAC and rules-based entitlement management with role parameterization, strong workflow tooling and ITSM integration, risk scoring for prioritizing recertification, responsive HTML5 UI plus an iOS app, and advanced high availability and load balancing. Challenges include limited market visibility, a small partner ecosystem beyond Atos, and an Administrator UI that lags the Business UI.

• IAM manages identities and their access by administering user accounts and entitlements across organizational systems and applications.
• The relevance of the traditional network perimeter has decreased due to mobile access, partner/customer integration, and cloud application shifts.
• IGA consists of Identity Provisioning and Access Governance.
• DirX Identity is an IGA offering from Atos’ Evidian business unit.
• DirX Identity release 8.9 includes major enhancements to the Business User Interface and extensions to REST interfaces.
• Extended REST interfaces support simplified integration to cloud services and provisioning using the SCIM standard.
• DirX Identity is complemented by DirX Audit for Access Analytics & Intelligence and DirX Directory for enterprise-grade directory services.
• The product supports RBAC and rules-based entitlement management, including role hierarchies.
• DirX Identity provides SoD controls defined via policies and enforced during assignment of roles, groups, or entitlements, triggering workflows on violations.
• The solution includes responsive HTML5 UI, comprehensive RESTful APIs, a native Apple iOS app, and strong high availability and load-balancing support.

• “IAM done right ensures that identities, their user accounts and passwords, and their access entitlements are well-managed.”
• “IAM thus reduces the attack surface by helping organizations moving towards the ‘least privilege’ principle.”
• “Creating that interface well, from the definition to the ongoing management and reviews of entitlements, is challenging.”
• “Enabling and protecting the Digital Transformation requires IGA.”
• “Data from various sources must be mapped, cleansed and consolidated.”
• “Thus, the effort for managing related roles can be massively reduced.”
• “Such integration is essential, given that – despite a broad set of connectors – many systems will never be directly connected, but manually managed.”
• “Such integration is the recommended best practice for setting up IGA solutions.”
• “This e.g. allows for focusing recertification activities on high risk users that accumulate more access rights than others.”
• “DirX Identity is a proven solution, but Atos has well-managed to modernize the tool and bring it to the level of current standards of IGA tools, with some areas of specific strength.”