• Planned

    7

    SDK documentation

    The IG SDK has no documentation yet. However, customers ask for the SDK and docs to build custom integrations.

  • Votes

    7

    Support for Azure AD fulfillment

    As an administrator of IGA, I want to have fulfillment support for AzureAD. It is possible to collect accounts and/or permissions using the application collector, but ...

  • Votes

    7

    Multiple locale for IdM permissions

    In IdM it is possible to have multiple locale of en entitlement/resource, when collected by IG, this is limited to only one. The request is to make it possible for the ...

  • Votes

    7

    Granular access rights to Identity Reporting

    A customer has requested to be able to configure more granular access to Identity Reporting. The request is to allow for report users to configure and run certain ...

  • Votes

    7

    Show number of pages in Fulfillment Status page

    ..e.g. Page 1 of n with n=total pages with Fulfillment data. Currently only allows user to "Load More". Also, there is no indication of how many Fulfillment Items are ...

  • Planned

    7

    Provide a Coverage File option in the Unmapped Accounts Review ...

    Provide a Coverage File option in the Unmapped Accounts Review definition Allow account or permission data to assign the (unmapped account) review item to a certain ...

  • Votes

    7

    Request for time limited access and for access in the future

    When requesting access it is sometime needed to be able to limit the request to a specific time period already at access time. It is similar to the possibility in ...

  • Votes

    7

    Act on missing identities after collecting/publishing

    A potential customer would like to use an identity source that is actually a database view containing only active identities. It is not possible to add historical records ...

  • Votes

    6

    Report: Users permissions changed within date range

    It would be helpful if there was a report that would display permission changes within a date range - and if there were selection fields that include filter by person who ...

  • Votes

    6

    Multi Application Collector

    There is a need to have a multi application collector, one collector that could read from a database with a lot of applications/account/permission/descriptions inside a ...

  • Planned

    6

    Enable email alerts throughout Reviews

    Enable email alerts to be sent once per week (or on a configurable time basis) for the duration of a review or for as long as a condition is met (e.g., review <90% ...

  • Votes

    6

    Possibility to setup delegation on behalf of others

    In the current version it is possible for an administrator to setup delegation for others. It is requested to be possible to set a policy that allows certain users to ...

  • Votes

    6

    Need for grouping AD permissions into application specific groups

    AD is used as the authorization and authentication source for many applications via federation. A typical setup is that a number of security groups are created in AD to ...

  • Planned

    6

    Role Composition Periodic Access Review

    Have a role composition (not membership) such as which permissions are part of a IT role that is reviewed periodically by someone (e.g. role owner, app owner). The idea ...

  • Votes

    6

    Add Ability to Customize Default Access Removal Email Notification

    Currently we are not able to modify or create our own Access Removal Email Notification. We would like to be able to copy a template, as we do with our Review Emails, ...

  • Votes

    5

    Separation of IG application from web front-end

    Today the web-frontend TOMCAT and the Identity Governance application has to be placed on the same server. Many customers see this as a security risk, since the IG ...

  • Votes

    5

    IGA limiting snapshot sizes for database retention

    Are there ideas in place for future releases to limit how fast the db grows with snapshots... Such as having a master snapshot that isn't touched and then just have ...

  • Votes

    5

    Default ES scripts for matching identitities

    case sensitivity, spaces, unicode, etc. If matching on CN and sAMAccountName it would be great if case sensitivity wasn't an issue. Actually, it would be great if it ...

  • Votes

    5

    Track approvals by the requester user

    The requester user should be able to see who is next approver and also, if the approval process is more than 1 level, if the request was already approved by the 1st level ...

  • Planned

    5

    Data Policies

    There is currently no data policy that can detect attribute changes. User Access Reviews are currently not selectable for the microcertification action but this would ...