We love to hear your ideas for improving Identity Governance (IG).

 
209 Ideas
139 Comments
908 Votes
  • Votes

    14

    Limit the application owners access to the catalog

    It should be possible to limit an application owners viewing access to the catalog to only information linked to the owner's specific application and not as today that ...

    Comments (0) | by: Ken W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    13

    Review/Compare permissions provisioned by IDM with actual/current ...

    IG integrated with IDM "knows" the permissions provisioned by IDM to a connected system like ADS down to the entitltment value. If the connected system is also an ...

    Comments (0) | by: Thomas R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    12

    Former review decisions showed in newer reviews

    When doing a review, it would be help to the reviewer if the reviewer can see former review decisions for the same review item. It could be a list like: Date and time ...

    Comments (3) | by: Ken W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    12

    Add new email tokens

    when sending out notifications sometimes need additional parameters like person specific attributes like departments or contact email for review owners. So being able to ...

    Comments (0) | by: Bo H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    11

    Data Purge Utility needs to become an automatic process

    The Data Purge Utility needs to become an automatic process. Increasingly, Application Administrators are not permitted server access. Provide Purge Utility parameter ...

    Comments (1) | by: Jim M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    11

    IG should support internet access through proxy

    Customers are restricting more and more internet access from corporate servers. If IG wants us to download report definitions online, it should either support access with ...

    Comments (3) | by: CARLOS M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    11

    Advanced search and filtering sorting for Fulfillment Requests and ...

    If you many manual fulfullment requests it's hard to navigate the Fulfillment Requests page. I can't sort by Task or by Source. It would be nice if the search could be ...

    Comments (2) | by: Aleksandar M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    11

    Show permission assignment details on accounts also

    In IG 3.5.1 permission assignment details are displayed on the identity but not on the account from the catalog. If permissions are assigned to accounts and accounts to ...

    Comments (0) | by: Thomas R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualization
  • Planned

    11

    Delta review

    A customer has requested to be able to do delta reviews. If a full review is done every year, the customer would like to be able to make quarterly reviews of those items ...

    Comments (1) | by: Ken W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    11

    Consider the IDM Role30-Role20-Role10-Resource-Entitlement hierarchy ...

    Consider the IDM Role30-Role20-Role10-Resource-Entitlement hierarchy in IG reviews, especially with "Review only items that have not been authorized by a business role". ...

    Comments (0) | by: Thomas R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    11

    Common and integrated user interface for IDM and IG for reqeusts and ...

    Requesting permissions and/or roles and approving such requests should be possible from a common UI (dashboard) regardless of whether it is an IDM role or resource or it ...

    Comments (0) | by: Thomas R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    10

    Upload button on web page to copy a file content to the IG server

    Today, access to host (operating system) is very restricted and limited so it would be great to have a button on web page of application/identity csv collector that the ...

    Comments (0) | by: Hugo H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    10

    Fulfillment notification to end user and others

    As a user I want to be notified when a requested permission is actually fulfilled by the system. There are use cases in which a service desk or manager requests ...

    Comments (4) | by: S K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    10

    Expose through reporting how permission was assigned - direct or ...

    In terms of reporting, we need way to identify which Technical or Business Role was responsible for user's permission assignment. So when viewing the user's permissions, ...

    Comments (0) | by: David T. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    10

    Improve handling of identities with multi-valued/multi-affiliation ...

    Better handling of identities with multi-dimensions - faculty of dept x; staff of dept y also a student. Creating membership expressions using multi-valued packed data ...

    Comments (0) | by: aimee l. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    10

    Triggered Reviews

    Provide the capability to generate triggered Reviews for Joiner, Mover, Leaver, or Other use cases. Example Use Cases : A Review should be automatically generated due ...

    Comments (2) | by: Jim M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    9

    Connector certificates in trust store

    Currently the certificates of applications need to be manually imported via the GUI. For our current customer we have multiple sort of "virtual" applications in AD and ...

    Comments (0) | by: S K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    9

    Check on permissions in other technical roles on revoke of technical ...

    Currently IGA does not check other technical role contents on revoke. When you have two technical roles with (partly) overlapping permissions (which can happen with some ...

    Comments (0) | by: S K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    9

    IG: Deprovisioning of granted Permissions by Business Role ...

    IG 3.0 seems not to provide a mechanism that causes deprovisioning of a granted permission that is deleted from a Business Role. There must be a way to achieve this. ...

    Comments (2) | by: Klaus S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    8

    Handling "Orphan Reviews"

    If a reviewer is no longer valid while a review is in flight, the system should escalate the "orphaned review" to the original reviewer's supervisor and up the chain.

    Comments (2) | by: Patrick G. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration