Identity at the Center Identity At The Center #20 - IGA Product Trends
Nov 8, 2019
Jim and Jeff dive into the latest IGA product trends, discussing the role of AI in enhancing analytics over mere access upselling. They explore the potential of chatbots in automating access requests and approvals, while highlighting the risks of 'model after' requests. The duo critiques role mining, favoring clear, human-understandable roles, and advocates for API-first designs for better user experience. They also emphasize the importance of managing non-employee identities and offer insights on improving SSO integration for seamless access requests.
AI Snips
Chapters
Transcript
Episode notes
AI For Detection Not Upsell
- AI in IGA should focus on analytics and anomaly detection rather than upselling access to users.
- Use AI to surface suspicious patterns and assist detective controls, not to recommend extra permissions.
Use Bots To Simplify Access Requests
- Use chatbots to understand user intent and map requests to catalog items for access requests.
- Let bots pre-fill requests and route approvals to speed provisioning while preserving review steps.
Model-After Is A Usability Workaround
- Model-after (copying another user's access) is often used because making precise requests is hard.
- Provide visibility into the modeled user's access and let requesters pick items to avoid blind copy-paste of excess permissions.