We love to hear your ideas for improving Identity Governance (IG).

 
209 Ideas
139 Comments
908 Votes
  • Votes

    2

    Add fulfilment connector to Active directory and FIM/MIM.

    This would enable the enhancement of MS centric environments with more complete Identity governance and also allow better request/approve functionality. Additionally a ...

    Comments (2) | by: Pekka L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    8

    Have a native linux and windows local account collector

    Have a native linux and windows collector to get local accounts to identify and review orphans accounts on these systems. This is a very common and important requirement.

    Comments (0) | by: Hugo H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    2

    Have a SAP collector that gets object authorization and transactions ...

    Collect object authorization and transactions that users are assigned on SAP system. That makes possible to have SoD at that level of access in SAP systems. This is a ...

    Comments (0) | by: Hugo H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    2

    The REMOVE_PERMISSION_ASSIGNMENT change items in the change set should ...

    In version 2.5.1, each change item in the REMOVE_PERMISSION_ASSIGNMENT change set contains the permission name, but does not contain the permission ID from source. The ...

    Comments (0) | by: Warren A. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    10

    Upload button on web page to copy a file content to the IG server

    Today, access to host (operating system) is very restricted and limited so it would be great to have a button on web page of application/identity csv collector that the ...

    Comments (0) | by: Hugo H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    11

    Consider the IDM Role30-Role20-Role10-Resource-Entitlement hierarchy ...

    Consider the IDM Role30-Role20-Role10-Resource-Entitlement hierarchy in IG reviews, especially with "Review only items that have not been authorized by a business role". ...

    Comments (0) | by: Thomas R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    11

    Common and integrated user interface for IDM and IG for reqeusts and ...

    Requesting permissions and/or roles and approving such requests should be possible from a common UI (dashboard) regardless of whether it is an IDM role or resource or it ...

    Comments (0) | by: Thomas R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    13

    Review/Compare permissions provisioned by IDM with actual/current ...

    IG integrated with IDM "knows" the permissions provisioned by IDM to a connected system like ADS down to the entitltment value. If the connected system is also an ...

    Comments (0) | by: Thomas R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    2

    Use expressions and functions in file name for CSV collectors

    It would be great to use (regular) expressions and functions in the File Name field of the CSV collectors. That way it would be possible to read files which are dumped of ...

    Comments (1) | by: Raymond M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    4

    Map unmapped accounts inside IG not trough a collection.

    As today as I understand it, unmapped accounts can only be mapped/linked trough a collection process. A function to map unmapped accounts inside IG instead trough a ...

    Comments (3) | by: Bozidar f. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    6

    Multi Application Collector

    There is a need to have a multi application collector, one collector that could read from a database with a lot of applications/account/permission/descriptions inside a ...

    Comments (2) | by: Bozidar f. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    3

    Ability to incorporate the fulfillment comments into fulfillment ...

    Reviewers have the ability to enter comments on removes and modifies which are captured for fulfillment integrations, such as Service Now in our case. The reviewer has ...

    Comments (0) | by: Eric D. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    3

    Add REQ# returned from Service Now Integration to be logged at Info ...

    With Service Now RITM fulfillment integration, Service Now returns the REQ# it generates back to IG. With the logging level on Trace or Debug, you will see this in the ...

    Comments (0) | by: Eric D. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    7

    Multiple locale for IdM permissions

    In IdM it is possible to have multiple locale of en entitlement/resource, when collected by IG, this is limited to only one. The request is to make it possible for the ...

    Comments (2) | by: Ken W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    3

    Ability to trigger Bulk Update utility after Publish

    After publishing a datasource it would be great if there was an option to trigger the bulk update functionality. After for example an import of new identities that need ...

    Comments (0) | by: Bo H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    4

    AWS Collector

    AWS is a cloud platform that is often used and therefore has high priority to governance customers. An AWS collector is needed.

    Comments (5) | by: Klaus S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    7

    SDK documentation

    The IG SDK has no documentation yet. However, customers ask for the SDK and docs to build custom integrations.

    Comments (0) | by: Klaus S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    1

    Can we use external (password, email, etc.) risk scoring as part of ...

    Hi guys, Can we please use a repository (e.g. https://haveibeenpwned.com/Passwords ) to score and measure the risk of the credential landscape over time? Thanks!

    Comments (1) | by: Marcus V. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    2

    As a IG Reviewer, I want a way to communicate to the Review Owner that ...

    Integration with MS Outlook's "Out of Office" message may be an option. When the review is deployed and email is sent to the Reviewer. If the Reviewer has an "Out of ...

    Comments (1) | by: Roger N. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    3

    Targeted Collection of specific account/permission

    Currently, we can only run collection on the full data set. It would be helpful to allow for us to specify a specific attribute to filter the collection. This would ...

    Comments (0) | by: Robert I. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations