State of IGA 2026
IGA-specific benchmarks. Certification cycle health, role-model drift, SoD enforcement state, JML automation maturity. Sourced to SailPoint research + practitioner observations across SailPoint / Saviynt / Omada engagements.
Reviewed
2026-05-22
5 benchmarks · CC BY 4.0
Regulators
SOC 2 CC6.2 · FedRAMP AC-2(7) · HIPAA § 164.308(a)(4) · FFIEC § II.C.13
~54%
ObservationCert rubber-stamp rate
Share of access-certification approvals that occur with zero changes — practitioner aggregate, not a single source. High rubber-stamp indicates reviewers lack context, not that access is correct.
Source: askmeidentity practice observations across SailPoint / Saviynt engagements · 2026
41%
ObservationHRIS-triggered JML automation
Share of mid-large enterprises with HRIS-driven (Workday / SuccessFactors) JML automation that fires on lifecycle events. The remaining 59% still rely on tickets.
Source: askmeidentity practice observations · 2026
88%
ObservationCert close-out rate per cycle
Average share of access lines reviewed by cycle deadline. Stuck reviewers create audit findings — high-performing orgs exceed 95%.
Source: askmeidentity practice observations · 2026
~4
IGA Magic Quadrant Leaders
SailPoint, Saviynt, Omada, One Identity are consistently named Leaders in Gartner Magic Quadrant for IGA. Position varies year to year. Verify against the current MQ before publishing.
Source: Gartner Magic Quadrant for IGA · 2024
61%
ObservationAudit evidence still collected manually
Share of IAM audit evidence produced by manual screenshot collection at quarter-end. Evidence-as-code remains the exception even in regulated programs.
Source: askmeidentity practice observations · 2026
Cite this page
Reference our benchmarks in your reporting.
These benchmarks are licensed under CC BY 4.0 — free to cite, quote, and link to with attribution. Pick a format below.
askmeidentity. (2026). The State of Identity, live (v2026.05). Retrieved 2026-05-22 from https://askmeidentity.com/resources/state-of-iga/
"The State of Identity, live." askmeidentity, v2026.05, https://askmeidentity.com/resources/state-of-iga/. Accessed 2026-05-22.
@misc{askmeidentity_state_of_identity_2026_05, title = {The State of Identity, live}, author = {{askmeidentity}}, year = {2026}, note = {Version 2026.05, retrieved 2026-05-22}, url = {https://askmeidentity.com/resources/state-of-iga/} }