In a large, highly regulated business, these are all features that are needed in an IAM platform. The specific regulations vary by industry, country, etc. Onbo

In a large, highly regulated business, these are all features that are needed in an IAM platform. The specific regulations vary by industry, country, etc. Onboarding - birthright provisioning of accounts across many systems. Email, directory, etc. Termination - automatically remove application level access across the business, not just the user's sso access. Approval - the ability to request access to a system, have it go through a series approvals (which are audited) and then if approved, provision the correct level of access in the end system. Certification - the ability to do periodic access reviews of users. This is typically run yearly or quarterly and you would be asking the user's manager and possibly the application owner to review their access and decide if it is appropriate. If the choice is made to revoke it the IAM system should go directly to the application and remove their access. Yes SCIM covers some of this, but it is just a protocol.