· Identity Governance
Access reviews catch what provisioning should have prevented. When joiner–mover–leaver events drive SCIM provisioning and deprovisioning automatically, reviews stop being archaeology and become confirmation — and stale access stops accumulating between campaigns.
The governance work behind this position designs joiner–mover–leaver processes, access review campaigns, application ownership, approval paths, and remediation for stale or excessive access. On the platform side, SAML 2.0, OpenID Connect, and OAuth 2.0 integrations are paired with SCIM 2.0 provisioning so the lifecycle is automated at the point access is created, not reconstructed at the point it is reviewed.
Governance also covers non-human identities — service accounts, application and workload identities — each with a named owner, credential hygiene, and least-privilege review. What ties it together is the evidence trail: who requested access, who approved it, when it was reviewed, and when it was removed.
How the governance service works · How the Okta & federation service works