We love to hear your ideas for improving Identity Governance (IG).

Page 8 
209 Ideas
139 Comments
908 Votes
  • Votes

    10

    Improve handling of identities with multi-valued/multi-affiliation ...

    Better handling of identities with multi-dimensions - faculty of dept x; staff of dept y also a student. Creating membership expressions using multi-valued packed data ...

    Comments (0) | by: aimee l. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    2

    advanced business role authorization logic

    Expand business role authorization logic to include if statement logic to determine the highest level qualifying permission authorized for an Application. For example: ...

    Comments (0) | by: aimee l. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    1

    Better Separation of Duties Handling and Permission Tracking

    "When there is a SoD condition and the resolution calls for the revoking of a Permssion X from Application Y which a user is entitled to as part of a Business Role, ...

    Comments (0) | by: aimee l. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    1

    Allow trailing spaces in membership expressions

    I have found cases where we need a membership expression to be along the lines of: Field X contains "course ENG " But currently we get results like "course ENGL" ...

    Comments (0) | by: Victoria G. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    5

    More sophisticated application-specific business role and permissions ...

    Unit administrators at U-M determine the logic of who should be eligible for various permissions. Today, all changes go through central IT because there is no way for a ...

    Comments (0) | by: Victoria G. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    3

    Require application owner review of application permission changes ...

    Business role permission changes should be coordinated with application owners, both to ensure that the business role owner is using the correct application permission ...

    Comments (0) | by: Victoria G. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    1

    The translation to none english languages is confusing in ...

    The translation to none english languages is confusing in administration utilities like configupdate, since the administrative documentation is not translated it would be ...

    Comments (1) | by: Magnus A. | over a year ago | Last activity over a year ago | Status changed over a year ago | Installation/Deployment
  • Votes

    5

    Enhance Access Request 'Browse' screen with ...

    As an administrator I want to be able to customize the Access Request catalog. It should be possible to add categories/favorites/sort options to both the 'Applications' ...

    Comments (0) | by: S K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualization
  • Votes

    8

    Searchable, sortable and tabbed display of approval items (my ...

    As a user I want to be able to search in my approvals, sort them and have the ability to show more approvals on a page (like the default tabbed display options in for ...

    Comments (0) | by: S K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualization
  • Votes

    9

    Connector certificates in trust store

    Currently the certificates of applications need to be manually imported via the GUI. For our current customer we have multiple sort of "virtual" applications in AD and ...

    Comments (0) | by: S K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    8

    Ability to automatically assign additional (conditional) permissions

    A lot of applications have a structure like this: - Application account - Certain permission right - Certain default permissions that every user needs when they have a ...

    Comments (0) | by: S K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    9

    Check on permissions in other technical roles on revoke of technical ...

    Currently IGA does not check other technical role contents on revoke. When you have two technical roles with (partly) overlapping permissions (which can happen with some ...

    Comments (0) | by: S K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    7

    Support for Azure AD fulfillment

    As an administrator of IGA, I want to have fulfillment support for AzureAD. It is possible to collect accounts and/or permissions using the application collector, but ...

    Comments (0) | by: S K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    4

    Collection / publication triggered by scheduled review

    As a (review) adminstrator I want to be able to collect and publish an application source before and after a review. It is recommended to collect/publish before and after ...

    Comments (0) | by: S K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    8

    Support for SharePoint O365

    Currently IGA has support for AzureAD (at least for collection) and Sharepoint on-premise or deployed as VM's in the cloud. I would like support (both collection as well ...

    Comments (0) | by: S K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    10

    Fulfillment notification to end user and others

    As a user I want to be notified when a requested permission is actually fulfilled by the system. There are use cases in which a service desk or manager requests ...

    Comments (4) | by: S K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    2

    Configupdate - add sanity checks for URL:s

    It would be nice if configupdate would do a sanity check on the URL:s entered so that they are well-formed, syntactically correct and maybe even throw in a DNS name check ...

    Comments (0) | by: Anders B. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    3

    Review on permissions

    Hello, We need to be able to create a review on a permission (eg Domain admins group imported from AD). Currently if I import AD groups and the Domain admins group ...

    Comments (0) | by: Anders B. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualization
  • Votes

    3

    Targeted Collection of specific account/permission

    Currently, we can only run collection on the full data set. It would be helpful to allow for us to specify a specific attribute to filter the collection. This would ...

    Comments (0) | by: Robert I. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    5

    Permissions bulk de-select in permissions search modal window

    Permissions search modal window has good "expression builder" you can filter permissions in different way and can do bulk selection. It would be great if in the future ...

    Comments (0) | by: Sandra C. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other