Dare to accelerate: compliance now demands continuous proof
Documenting an access policy is no longer enough. The organizations we met must be able to demonstrate, at any time, who has access to what, when and why.
The projects they described make this clear. A local authority in the Paris region is preparing its NIS2 compliance and puts IAM, including privileged access management, front and center. A retail group wants to "know at all times who accesses what, when and how, and be able to prove it." Zero Trust programs are converging: they make identity the central control point.
Waiting until compliance projects are finished to address identity means reconstructing the evidence after the fact. These projects are precisely trying to avoid that.
Dare to anticipate: set the framework for AI agents before they multiply
An AI agent acts, accesses and decides on behalf of a user. Its rights must therefore be granted, limited and revoked like those of any other identity.
The questions put to Memority were precise:
- How do you inventory agents?
- How do you give them their own identity?
- How do you enforce least privilege, with temporary access?
- How do you trace each of their actions?
- How do you cut them off in the event of a compromise?
Every organization has its own version of the problem. An industrial player wants to build an enterprise standard. A transport group wants to give agents mandates limited to the rights of the person they represent. A pharmaceutical laboratory wonders whether its human identity tools can also govern agents.
These uses are only just beginning. The rules must therefore be defined before mass deployment, not after. We detail this approach in our article on non-human identities and AI agents.
Dare to transform: identity, a condition for moving faster
Identity is often approached as a security constraint. The projects we met at the Assises present it instead as what makes it possible to move forward:
- A group that makes frequent acquisitions wants to integrate subsidiaries and employees without redoing its security with every deal.
- A cosmetics group manages high turnover, with tens of thousands of employees in stores.
- An energy infrastructure operator must open up access to service providers, customers and personal devices.
In each case, reliable identity and access management makes it possible to onboard quickly, open up the ecosystem in a controlled way, and plan for the arrival of AI agents while staying in control.
What our teams take away
"Our demonstration on AI agent identity management generated real interest. Customers and prospects wanted to see how Memority concretely addresses their use cases, and several want to go further with us right now."
Sarah Kardache, Professional Services
"Our approach, an industrial platform to handle identity and access for every type of identity, is proving particularly relevant as use cases multiply. All the conversations I had show how important the topic is and the need for an answer that scales."
Francis Grégoire, Deputy CEO, Chief of Strategy, Technology and Innovation, Co-founder
Going further
White paper: identity and access in the private sector
`Why is identity becoming a strategic scope for private-sector organizations? Six business profiles share what the Identity Factory approach brings: business performance, user experience and security.
