Role modelling and mining
Entitlement analysis, business role hierarchy design, birthright definition and role lifecycle governance.
IGA PRACTICE
Governance that answers the auditor's question in minutes, not weeks
SailPoint IdentityIQ, IdentityNow and Saviynt specialists building role models, certification campaigns, segregation-of-duties enforcement and the evidence chain your regulators expect.
10
IGA engineers
2
Core platforms
300+
Apps onboarded
48h
Profile SLA
IGA bench snapshotAVAILABLE
Certified IGA engineers10
SailPointIIQ + IdentityNow
SaviyntEIC certified
Typical start48-72 hours
EngagementSquad or pod
AUDIT-READY
INSIDE THE PRACTICE
Governance architects fluent in SailPoint, Saviynt and access-certification audits
IGA work lives or dies on clean joiner-mover-leaver workflows and defensible access certifications. Our specialists have sat across the table from auditors, not just built the policy engine in isolation.
PRACTICE CAPABILITIES
What our IGA engineers deliver
Every capability below is staffed by engineers who have executed it in a production enterprise estate.
Access certification campaigns
Campaign design, scoping, launch automation, reviewer enablement, chase cycles and revocation processing.
Segregation of duties
SOD matrix construction, rule engine implementation, violation remediation workflow and exception governance.
Connector development
Out-of-box and custom connector build, aggregation tuning, provisioning policy and reconciliation logic.
Lifecycle automation
HR-driven joiner-mover-leaver workflows, delegated administration and automated deprovisioning assurance.
Audit evidence and reporting
Control-mapped reporting, campaign evidence packs, access analytics and management dashboards.
SUB-SERVICE CATALOGUE
IGA sub-services
Select any sub-service to open a pre-filled enquiry. Your requirement is emailed to our practice desk for same-day response.
SailPoint IdentityIQ development
Rules, workflows, task and quicklink development, connector configuration and performance tuning.
SailPoint IdentityNow / ISC
SaaS platform configuration, virtual appliance setup, transforms and cloud connector deployment.
Saviynt Enterprise Identity Cloud
Application onboarding, analytics and control build, SOD rules, campaigns and workflow configuration.
IGA platform migration
Migration between governance platforms with role model translation and campaign continuity.
ServiceNow and ITSM integration
Access request front-ending, approval routing and ticket lifecycle synchronisation.
Custom connector engineering
Building connectors for in-house and niche applications with no vendor-supplied integration.
Application onboarding programme
Structured waves of application integration with aggregation, provisioning and certification enablement.
Role mining engagement
Data-driven analysis of existing entitlements to propose a maintainable business role model.
Certification programme design
Campaign calendar, reviewer strategy, scope tiering and reviewer fatigue mitigation.
SOD programme build
Risk definition workshops, matrix construction, detection implementation and remediation workflow.
Orphan and dormant cleanup
Identifying unowned and unused access, driving revocation and preventing recurrence.
Governance analytics
Access risk scoring, trend reporting and executive dashboards for identity risk posture.
Embedded IGA architect
Design authority for role model, campaign strategy and platform roadmap.
IGA development squad
Developers delivering connectors, workflows and rules against a sprint backlog.
Managed governance operations
Offshore pod running campaigns, processing revocations and maintaining connectors.
Audit sprint support
Short-term surge capacity to close access certification findings before a deadline.
IGA platform health check
Aggregation performance, rule hygiene, campaign efficacy and upgrade readiness assessment.
SailPoint and Saviynt training
Closed cohort development and administration training for internal teams.
DELIVERY PATTERN
How IGA engagements typically run
A repeatable sequence refined across hundreds of deployments.
1
Scope and data baseline
Application prioritisation, entitlement data quality assessment and authoritative source confirmation.
2
Model design
Role hierarchy, birthright rules, SOD risk definitions and campaign strategy agreed with business owners.
3
Build and integrate
Connector development, workflow configuration and provisioning policy implemented and tested.
4
Pilot campaign
A limited-scope certification run to validate reviewer experience and data quality before enterprise launch.
5
Scale and automate
Application waves, campaign automation and lifecycle workflow rollout with reporting.
6
Sustain
Ongoing campaign operations, model maintenance and continuous evidence generation for audit.
COMMON QUESTIONS
IGA questions we are asked most
Yes, and that is the usual starting point. Data remediation is built into the first phase rather than treated as a prerequisite you must solve alone.
Risk-tiered scoping, targeted micro-campaigns for high-risk access, pre-populated recommendations and clear business-language descriptions.
Yes. Custom connector development against REST, SOAP, database or flat-file interfaces is a standard part of the practice.
Yes. Short-term governance squads for audit remediation are a frequent engagement, typically four to twelve weeks.
RAPID TALENT MOBILISATION
Need IGA capability on the ground this month?
Send the requirement and receive vetted profiles, with recorded lab evidence, inside 48 hours.