IGA focuses on managing and governing digital identities and their access rights within an organization. It ensures proper identity lifecycle management, entitlements, compliance, and role-based access controls (RBAC).
We can clearly recommend this technology. It has been used for longer period of time at many customers and it has proven to be stable and useful.
Cloud Infrastructure Entitlement Management (CIEM) is a category of security technologies and practices designed to manage, analyze, and govern identities, access rights, and permissions within cloud environments. CIEM addresses the complexity of modern cloud platforms, where large numbers of human and machine identities interact with highly granular and rapidly changing cloud services.
Identity Proofing establishes that a claimed identity belongs to the person claiming it, before any credential is issued against it: evidence is collected, validated against the source that issued it, and verified as belonging to the applicant — classically a passport, increasingly a digital credential from a wallet. Every control layered on top inherits that one decision, because a phishing-resistant credential bound to the wrong human is a strong credential for an impostor, and nothing about the sessions that follow looks anomalous. Two problems dominate the discipline. Synthetic media is cheap, so the question is not only whether a document is forged but whether the camera saw a person. And the same decision recurs whenever a credential is recovered rather than issued, usually on far weaker evidence than enrolment demanded.
Policy-Based Access Control (PBAC) is an access control model that determines and enforces access permissions based on predefined policies. These policies can be based on attributes (ABAC), roles (RBAC), relationships (ReBAC), or other factors. Attribute-Based Access Control (ABAC) is a specific form of PBAC that uses attributes such as user roles, resource types, and environmental conditions to make access decisions.
SCIM is an open standard protocol designed to simplify and automate identity management across different systems and domains. It provides a standardized approach for provisioning, managing, and exchanging identity information between identity providers and service providers.
Workload and Machine / Non-Human Identity (NHI) Management refers to the process of issuing, renewing, and revoking digital identities and credentials for non-human entities — microservices, IoT devices, CI/CD pipelines, cloud service accounts, and other automated workloads — to ensure secure, verifiable authentication between machines and services within modern IT infrastructure, leveraging frameworks like SPIFFE for cryptographic workload identities and protocols such as mutual TLS and OAuth 2.1 client credentials. Autonomous AI agents introduce non-determinism and recursive delegation on top of these primitives, which the radar covers through the AI Agent Registry and Lifecycle for per-instance identity and provisioning, and OAuth Token Exchange and Identity Chaining for carrying user context across delegation hops.
We have used it with success and recommend to have a closer look at the technology in this ring. The goal of items here is to look at them more closely, with the goal to bring them to the adopt level.
An AI Agent Registry is the authoritative inventory of the agents operating in an environment, recording which agents exist, what identity each holds, which runtime instance it maps to, and where it sits in its lifecycle from provisioning through decommissioning. It is the least novel and most immediately actionable part of agent identity: the governance problem organizations encounter first is not delegation semantics but the inability to enumerate what they are running. Registries supply the discovery layer that A2A Agent Cards are published against, the subject data that PBAC policies evaluate, and the inventory that posture and audit tooling consumes.
Policy as Code (PaC) applies Infrastructure as Code principles to identity and access management, enabling organizations to define, enforce, and audit IAM policies using code rather than manual processes or proprietary tools. By treating policies as versioned, testable code artifacts, PaC delivers consistency, scalability, automation, and auditability across complex environments like cloud computing, microservices, and DevOps.