Are there areas where IGA actually also still falls short and where there's new tendencies, new emerging technologies to be embedded here?

yeah absolutely i agree with you uh i think no solution is 100 perfect there are definitely areas for improvement um when we did this report for the iga uh we had several types of vendors in this report not just your traditional big vendors but also smaller vendors upcoming vendors being vendors innovative as well But I would say the recurring theme amongst all of them, in most cases, was that there were some limitations in some, you can say, the automation side and governance side.

So especially if you look at more around the... anomaly detection then there was one quite common theme was around limitations around role mining as well so that was again you can say a shortcoming or or an area which is currently being worked on which needs to be improved ai driven recommendations in another part which is still on the roadmap of several vendors so that you can see the access intelligence side is currently where the vendors are also innovating and are focused right now and they are addressing these challenges as well but if you also maybe look at from policy management point of view there are again a few inconsistencies or shortcomings there such as In most cases, the support for something like a policy simulation, policy testing is not being provided right now.

Even support for policy as a code is currently missing.

But I think that again depends on what kind of customers you have.

If the vendor is focused on customers who are mainly around the business users and not really, I can say, developer-focused.

So the vendors are making this conscious decision to not provide policy as a code as they believe their own client is not really going to be utilizing this capability to the full.

But what the customers that I talk to actually are asking for, does the market cater for that? What you hinted at, I think yes.

Are there areas where IGA actually also still falls short and where there's new tendencies, new emerging technologies to be embedded here?

yeah absolutely i agree with you uh i think no solution is 100 perfect there are definitely areas for improvement um when we did this report for the iga we had several types of vendors in this report not just your traditional big vendors but also smaller vendors upcoming vendors being vendors innovative as well But I would say the recurring theme amongst all of them, in most cases, was that there were some limitations in some, you can say, the automation side and governance side.

So especially if you look at more around the... anomaly detection then there was one quite common theme was around limitations around role mining as well so that was again you can say a shortcoming or or an area which is currently being worked on which needs to be improved ai driven recommendations in another part which is still on the roadmap of several vendors so that you can see the access intelligence side is currently where the vendors are also innovating and are focused right now and they are addressing these challenges as well but if you also maybe look at from policy management point of view there are again a few inconsistencies or shortcomings there such as In most cases, the support for something like a policy simulation, policy testing is not being provided right now.

Even support for policy as a code is currently missing.

But I think that again depends on what kind of customers you have.

If the vendor is focused on customers who are mainly around the business users and not really, I can say, developer-focused.

So the vendors are making this conscious decision to not provide policy as a code as they believe their own client is not really going to be utilizing this capability to the full.

But what the customers that I talk to actually are asking for, does the market cater for that? What you hinted at, I think, yes.