IGA

IGA covers the policy and lifecycle side of identity: provisioning, access requests, certification campaigns, and separation-of-duties checks. It answers who has access to what, whether they should, and who approved it. Auditors and compliance frameworks lean heavily on IGA evidence.