In most of the organizations with growing number of applications and several identity repositories, the need to identify the owners of such accounts and their account privileges has become mandatory. This requirement gets further magnified due to critical data stored in these applications. Applications store data such as customer credit card, customer social security numbers and other health records. Periodic assessment of these applications, the user accounts with in those applications and their access rights is mandatory for every mid size business. It is required that the user account information is categorized based on the rightful business owners, department, role in the organization. Then these accounts need to be sent for qualification and validation to the managers in the department, responsible parties of the application, CIO and CSO periodically to ascertain that there are no orphan accounts or accounts that violate corporate policies.

This entire process of qualifying the user accounts in the applications, validating the accuracy of the entitlements for those accounts and qualifying those accounts with respect to the corporate policies is performed manually. These reports are typically generated on paper and there is no cross reference to the role of the employee and corporate policy of the employee. The approvals for these accounts and validation of the access are not logged. In addition, these tasks are performed every quarter repetitively and prone to security challenges and inaccuracies.

IMAG provides a comprehensive solution to address the needs of access certification in an enterprise. It provides a centralized database to consolidate user access information from all different classes of applications. It builds a relationship between the following