More and more organizations are implementing IAM solutions, yet the number of attacks targeting identities is rising significantly. A breach does not always require a sophisticated technical vulnerability; it can result from a poorly managed identity, a sleeping account, or uncontrolled third-party access.
The challenge is no longer just about managing identities. Organizations now need a comprehensive view of every identity accessing their information system : employees, partners, service accounts, applications, APIs and even AI agents.
This evolution was the focus of Memority's workshop on emerging identity governance use cases and its convergence with the Security Operations Center (SOC) as part of a Zero Trust strategy.
Alexis explains it all in video
In one minute, Alexis de Calan covers the essentials: why IAM must now cover all identities, human and non-human, and how its convergence with the SOC is becoming a key lever for a Zero Trust approach.
Why tradition IAM is reaching its limits
IAM remains the foundation of access governance, but its scope is often limited to what it already knows.
These blind spots represent significant risks for both security and regulatory compliance.
Today, many identities still remain outside its visibility:
The rise of non-human identities
The rapid adoption of artificial intelligence is accelerating this transformation. AI agents, automation tools, and application services create new identities every day, each requiring access rights to enterprise systems. Governing these identities has become a critical challenge for security teams.
Your IAM governs and secures only the identities and applications you have declared, but your actual attack surface is much broader. MY-Discovery uncovers these hidden applications and identities, enabling you to bring them under governance and strengthen your organization's security posture.
Three key evolutions for IAM
To address these emerging challenges, Identity & Access Management must evolve across three dimensions :
- Visible: Gain complete visibility over all identities, including those that fall outside traditional governance processes.
- Intelligent: Leverage signals from across the IT ecosystem (SIEM, behavioral analytics, SaaS APIs, threat intelligence, AI, etc.) to continuously assess identity-related risk.
- Dynamic: Automatically adapt access rights based on context, risk level, and the principle of Zero Standing Privilege.
Why bring IAM and the SOC closer together ?
Identity has become the cornerstone of Zero Trust. An IAM platform capable of detecting risks, analyzing behaviors, and responding in real time naturally becomes a valuable source of security signals for the SOC.
This convergence enables organizations to:
- detect suspicious behavior more quickly;
- automate selected remediation actions;
- improve access traceability and auditability;
- meet regulatory requirements more effectively, particularly those introduced by NIS2 and the AI Act.
Memority’s ambition: toward Dynamic Identity Security
For Memority, this evolution represents the transition from traditional IAM focused on access administration to Dynamic Identity Security, an approach capable of continuously observing, analyzing, and acting on identity-related risks.
