Vendor lineage
SailPoint - governance, which is the unglamorous half of identity
Authentication asks who you are. Governance asks why you still have that access.
SailPoint works on identity governance - not the login, but the far larger question of who holds which entitlements, who approved them, and whether any of it is still justified. Its current material extends that to machine and agent identities, which is where the count grows fastest.
The problem governance addresses is cumulative rather than dramatic. Access is granted for a project, a cover, a migration, and almost never withdrawn, so an employee of ten years accumulates the union of every role they have held. Nothing fails as a result, which is exactly why it persists.
The security consequence only appears when an account is compromised, and at that moment the question is not how the attacker got in but how far the account could reach - a question decided years earlier by a series of individually reasonable approvals.
- SailPoint - company site (identity security for humans, machines and agents)
Cited to the company's own site: en.wikipedia.org/wiki/SailPoint returns 404, so no third-party article was available to check this against.
- SailPoint was founded in 2005 in Austin, Texas, by Mark McClain, Kevin Cunningham and Jackie Gilbert, whose earlier company Waveset Technologies had been sold to Sun Microsystems