Tuebora IGA

Identity Governance & Administration (IGA) is a core IAM discipline focused on deploy-time management of identities, accounts, and entitlements, plus post-event governance such as regular access recertification. Alongside Access Management (authentication and session control) and Privileged Access Management (PAM), it forms one of the three major pillars of common IAM deployments. IGA comprises Identity Lifecycle Management (ILM), User Access Provisioning (UAP), Identity Access Governance (IAG), workflow management, and application connectors, enabling consistent management across infrastructure (servers, databases, IaaS/PaaS) and applications from on-prem to SaaS.

IGA projects are complex because they span divisions and must translate technical entitlements into business-relevant access. This challenge is especially visible in role management—where business roles must be mapped to IT roles despite complex entitlement models in systems like Active Directory, Windows file servers, and SAP ECC—and in access recertification, where poor business representation of technical entitlements can lead to rubber-stamping rather than true least-privilege enforcement. Technical complexity is driven by application onboarding (SCIM is emerging but often insufficient for complex entitlements; legacy systems need custom connectors) and customization, particularly workflows and UI, compounded by the lack of an established IGA process framework.

Tuebora, headquartered in Fremont, CA, positions itself as “agent driven IGA,” aiming to simplify IGA via agentic AI. Its platform supports common IGA use cases (provisioning, ILM, requests/approvals, recertification, SoD, analytics, auditing/reporting) plus policy mining and some password management. AskTuebora applies ML/AI to identify entitlement anomalies, generate workflows via natural language, create custom connectors faster, and improve recertification efficiency. The cloud-native microservices platform supports SaaS and container deployments, with on-prem/hybrid enabled via virtual appliance and SCIM gateway. Strengths include analytics-driven governance, broad SaaS connectors, extensive reporting, and API coverage; challenges include limited legacy on-prem connectors, a small partner ecosystem, and a non-graphical workflow editor (planned).

• IGA includes Identity Lifecycle Management, User Access Provisioning, Identity Access Governance, workflow management, and connectors.
• Access Management, IGA, and PAM are described as the three main pillars of common IAM deployments.
• Role management complexity is highlighted with examples including Microsoft Active Directory, Microsoft Windows File Servers, and SAP ECC.
• SCIM is described as emerging as a de-facto standard but lacking depth for complex entitlement structures.
• Many legacy applications require specific connectors, and customized applications often require adjustments to standard connectors.
• There is stated to be no established IGA process framework, and most solutions do not provide one out-of-the-box.
• Tuebora is headquartered in Fremont, California.
• Tuebora supports use cases including SoD controls, identity analytics, and auditing & reporting.
• Tuebora is cloud native with a microservices-based architecture and supports SaaS and container-based deployments.
• Hybrid deployment requires an on-premises SCIM gateway component for connectivity to on-prem IT systems.

• “IGA focuses on the deploy-time aspects of IAM with managing identities, creating user accounts, and assigning entitlements as well as providing post-event time capabilities for Access Governance such as the regular recertification of assigned entitlements.”
• “This makes IGA a cross-divisional project, involving not only many different units within IT but also the owners of business applications.”
• “Role management requires the definition of roles, commonly at various levels such as IT roles and business roles, and their mapping.”
• “In many implementations, access recertification suffers from a proper business representation of technical entitlements and thus results in rubber-stamping instead of a thorough review of entitlements.”
• “SCIM (System for Cross-Domain Identity Management) is emerging as a de-facto standard.”
• “Unfortunately, there still is no established IGA process framework available that describes these processes.”
• “Tuebora is focused on delivering a lean IGA experience, simplifying integration to target systems and leveraging AI for simplification and efficiency.”
• “Tuebora always focused on utilizing common capabilities such as a common, consistent policy framework and underlying identity analytics.”
• “Tuebora has further strong intelligence features such as the ability to create workflows using natural language.”
• “With their innovative approach to IGA, Tuebora is well-suited to support organizations that are struggling with traditional IGA approaches and are looking for a leaner solution leveraging the potential of AI, in particular agentic AI.”