RAC/M Identity capabilities

A central SQL repository of people, profiles, privileges and access levels, kept continuously in sync with connected systems, the single source of truth for who has access to what.

Advanced analytics surface anomalies and risky situations, like orphaned accounts, with Risk Insights reporting, repository statistics and customizable dashboards that track risk and operational issues. Fuzzy-logic matching, backed by manual reconciliation tools, automatically links identities to their accounts.

Bottom-up role mining from attributes (department, title, job) and top-down modeling by experts, combining RBAC and ABAC into a flexible access model you can fine-tune and optimize.

The Identity Connector Framework (ICF) provides bidirectional connectivity to systems, applications and databases to populate and synchronize the repository. In the Governance edition, collectors gather data; automated provisioning is Premium-only.

Import identity and access data from CSV files when a direct connector isn’t available or needed.

A full REST API lets external systems such as ITSM platforms, AI agents and custom automations perform and manage IAM operations exactly as a human operator would, programmatically and at scale.

Define segregation-of-duties rules to detect toxic combinations of access, and review SOD violations during campaigns.

A catalog of standard reports plus custom report and query building to answer access, compliance and audit questions, with export to CSV and Excel.

Run recertification campaigns with defined scope, scheduling and escalation to review identities, access, roles and SOD violations. Reviewer delegation and scheduled, incremental campaigns dramatically cut review effort.

Single Sign-On via Entra ID (SAML) that leverages your existing MFA mechanisms for streamlined, secure access to the solution.

Formal access-request approval processes with configurable approvers (manager, asset owner or designated approver) and email/ticket notifications.

Automate IAM processes, including identity lifecycle workflows, by provisioning and de-provisioning accounts and entitlements automatically across connected systems.

A branded portal where users request access, approve and run reviews, with role-based features. A limited version supports access-review campaigns in the Governance edition.

A secure, user-friendly self-service password portal built on the industry-standard PWM engine: users manage their credentials, unlock accounts and reset passwords without contacting the help desk.