Get to know cloud-based identity governance capabilities

As enterprise cloud adoption increases, the market for cloud identity governance is expected to expand. Learn more about the use cases, benefits and available product options.

Cloud technology is changing the identity governance and administration, also known as identity governance or identity security, market. By 2022, cloud-based identity security products will augment or replace 75% of existing software-delivered identity governance worldwide, according to Gartner.

In anticipation, learn more about this emerging platform's components, benefits and use cases, as well as what to look for in a cloud identity governance service.

What identity governance offers

To understand what identity governance does and how it can help their organizations, IT leaders should be aware of its two primary components:

1. Identity governance policies and enforcement controls. These enable organizations to define identity and access management policies in numerous cloud environments and role assignments for end users and service accounts, as well as logging and access review auditing policies.
2. Identity service administration tools. These administration tools and services can include federation and single sign-on tools to synchronize with existing identity stores. They can also facilitate provisioning into other service environments -- primarily in association with provisioning and deprovisioning tasks, as well as credential and account management. Additional capabilities may include device provisioning and access controls, management of entitlements, and reporting and monitoring dashboards.

How cloud identity governance advances business and security

Implementing cloud-based identity governance platforms can yield several benefits. First, they simplify processes and practices -- including access requests, password requests and resets, and user provisioning -- which can also reduce operational costs. In addition, they offer a wide array of APIs that organizations can use to integrate with cloud services and on-premises application and user workflows.

Second, cloud identity governance platforms are much easier to configure and start using, as no installation of hardware or complicated infrastructure is needed.

Finally, identity governance services can significantly improve security controls and processes related to authentication, authorization, provisioning and auditing -- and prove invaluable for regulatory audits and compliance reporting.

Identity governance and administration use cases

Organizations implement identity governance services to achieve numerous outcomes. Among the most prevalent use cases are the following:

• Develop and implement segregation of duties for cloud services and other applications.
• Perform access reviews, and monitor for cloud service users to ensure appropriate use of cloud services and detect signs of compromised accounts or other malicious behaviors based on patterns of access.
• Design and manage role assignments for business-specific requirements and services.
• Report on identity configuration and oversight for compliance and internal policy adherence.
• Integrate with on-premises directories and user entities with cloud-based application scenarios.

What to look for in an identity governance platform

To be a good fit in complex cloud environments, IT leaders should choose an identity governance platform that supports numerous cloud provider APIs and identity role and policy associations. Ideally, cloud identity services should also have connectivity capabilities that support unified management in both cloud and on-premises resources. Though some will offer on-premises gateways and appliances in addition to cloud-based services, many platforms will be situated exclusively in the cloud.

By Dave Shackleford. Read more here.